{"as_of":"2026-08-08T11:43:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:c8ff0de5380cf819ffc20c9439f4de579cad0d409f92e0574a8a9929289c95a4","coverage":[{"denominator":67,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":67,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-02T13:18:47.214752Z","state":"measured"},{"denominator":67,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":67,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2607.20473/citation-record","integrity":"/paper/2607.20473/integrity","json":"/paper/2607.20473/citation-record.json","paper":"/paper/2607.20473"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:18:39.356160Z","title":"Causal Learning and Reasoning , pages=","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.20473","last_updated":"2026-05-24T08:11:40Z","snapshot_observed_at":"2026-08-08T06:43:34.898524Z","submitted_at":"2026-05-24T08:11:40Z","title":"Incomplete Prompt Jailbreaks in Large Language Models","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-02T13:18:39.356160Z"},"links":{"citing_paper":"/paper/2607.20473"},"observation_digest":"sha256:03f27c01c236bc5c59273e2026ac742c7b12d01bd05a333b682749e425258c26","observation_id":"5796ddaa-edff-49a6-a260-09f886dde3d8","resolution":{"observed_at":"2026-08-02T13:18:39.356160Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:18:39.483359Z","title":"Advances in Neural Information Processing Systems , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.20473","last_updated":"2026-05-24T08:11:40Z","snapshot_observed_at":"2026-08-08T06:43:34.898524Z","submitted_at":"2026-05-24T08:11:40Z","title":"Incomplete Prompt Jailbreaks in Large Language Models","version":1},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-02T13:18:39.483359Z"},"links":{"citing_paper":"/paper/2607.20473"},"observation_digest":"sha256:aa11e43e5bd4bbcd8ec70204c572ce88346ce9a9482fa1cfb34612f649bfe69d","observation_id":"78357b6a-3321-4d52-8a8f-b013b1a2ef2e","resolution":{"observed_at":"2026-08-02T13:18:39.483359Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:18:39.630127Z","title":"Knowledge Neurons in Pretrained Transformers","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.20473","last_updated":"2026-05-24T08:11:40Z","snapshot_observed_at":"2026-08-08T06:43:34.898524Z","submitted_at":"2026-05-24T08:11:40Z","title":"Incomplete Prompt Jailbreaks in Large Language Models","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-02T13:18:39.630127Z"},"links":{"citing_paper":"/paper/2607.20473"},"observation_digest":"sha256:a3829b4310d731d01e878136ae2393fb2fde0b09c81b9460a4c313208e154e15","observation_id":"8fb9748d-ca07-4560-98f8-f75230be5987","resolution":{"observed_at":"2026-08-02T13:18:39.630127Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:18:39.757186Z","title":"On Relation-Specific Neurons in Large Language Models","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.20473","last_updated":"2026-05-24T08:11:40Z","snapshot_observed_at":"2026-08-08T06:43:34.898524Z","submitted_at":"2026-05-24T08:11:40Z","title":"Incomplete Prompt Jailbreaks in Large Language Models","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-02T13:18:39.757186Z"},"links":{"citing_paper":"/paper/2607.20473"},"observation_digest":"sha256:556a03e6541096afe05367f2bc3b0b1260a7c7117a5f0fdbe37633a88ffa0adc","observation_id":"eb002c7a-4d29-43c1-8f35-7a8586f7f1dc","resolution":{"observed_at":"2026-08-02T13:18:39.757186Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:18:39.856924Z","title":"Aho and Jeffrey D","venue":null,"work_id":null,"year":1972},"citing_paper":{"arxiv_id":"2607.20473","last_updated":"2026-05-24T08:11:40Z","snapshot_observed_at":"2026-08-08T06:43:34.898524Z","submitted_at":"2026-05-24T08:11:40Z","title":"Incomplete Prompt Jailbreaks in Large Language Models","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-02T13:18:39.856924Z"},"links":{"citing_paper":"/paper/2607.20473"},"observation_digest":"sha256:6976a334104612933134459ca5fc0990642b8e7e93cd2587f22fd5a325e52659","observation_id":"7013b0f6-d8ca-4d25-9bb0-91ee60f5cf85","resolution":{"observed_at":"2026-08-02T13:18:39.856924Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:18:39.987058Z","title":null,"venue":null,"work_id":null,"year":1983},"citing_paper":{"arxiv_id":"2607.20473","last_updated":"2026-05-24T08:11:40Z","snapshot_observed_at":"2026-08-08T06:43:34.898524Z","submitted_at":"2026-05-24T08:11:40Z","title":"Incomplete Prompt Jailbreaks in Large Language Models","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-02T13:18:39.987058Z"},"links":{"citing_paper":"/paper/2607.20473"},"observation_digest":"sha256:b94a8e76a334a1665d0ea38f6ed26eeda27637a3869a3133e29bf30695148cf8","observation_id":"fd2c5088-5223-4fe6-b266-98d4b3a77be4","resolution":{"observed_at":"2026-08-02T13:18:39.987058Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:18:40.125705Z","title":"Chandra and Dexter C","venue":null,"work_id":null,"year":1981},"citing_paper":{"arxiv_id":"2607.20473","last_updated":"2026-05-24T08:11:40Z","snapshot_observed_at":"2026-08-08T06:43:34.898524Z","submitted_at":"2026-05-24T08:11:40Z","title":"Incomplete Prompt Jailbreaks in Large Language Models","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-02T13:18:40.125705Z"},"links":{"citing_paper":"/paper/2607.20473"},"observation_digest":"sha256:4dbcf15b57e28265d7db8df41333e10d282ab5963d1bd90531a505f7171bcb5f","observation_id":"c22aff3c-014c-4c46-b785-d12287902839","resolution":{"observed_at":"2026-08-02T13:18:40.125705Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:18:40.320421Z","title":"Scalable training of","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.20473","last_updated":"2026-05-24T08:11:40Z","snapshot_observed_at":"2026-08-08T06:43:34.898524Z","submitted_at":"2026-05-24T08:11:40Z","title":"Incomplete Prompt Jailbreaks in Large Language Models","version":1},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-02T13:18:40.320421Z"},"links":{"citing_paper":"/paper/2607.20473"},"observation_digest":"sha256:14458879af907636f3f34c140b385ef8e1f433fc566467eb4831d27f723de76c","observation_id":"9dbac2cd-998a-4d86-91ba-a7a958626e30","resolution":{"observed_at":"2026-08-02T13:18:40.320421Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:18:40.394746Z","title":null,"venue":null,"work_id":null,"year":1997},"citing_paper":{"arxiv_id":"2607.20473","last_updated":"2026-05-24T08:11:40Z","snapshot_observed_at":"2026-08-08T06:43:34.898524Z","submitted_at":"2026-05-24T08:11:40Z","title":"Incomplete Prompt Jailbreaks in Large Language Models","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-02T13:18:40.394746Z"},"links":{"citing_paper":"/paper/2607.20473"},"observation_digest":"sha256:08f2d85ba73e59e900875345f838950652f73b8c21460f797abeab9502506db5","observation_id":"70b0a89a-e952-4f78-ac37-6bb6ef064fde","resolution":{"observed_at":"2026-08-02T13:18:40.394746Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:18:40.486144Z","title":"Tetreault , title =","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2607.20473","last_updated":"2026-05-24T08:11:40Z","snapshot_observed_at":"2026-08-08T06:43:34.898524Z","submitted_at":"2026-05-24T08:11:40Z","title":"Incomplete Prompt Jailbreaks in Large Language Models","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-02T13:18:40.486144Z"},"links":{"citing_paper":"/paper/2607.20473"},"observation_digest":"sha256:a412b2d4e27c939d534de076df6bd56975a269f06727b30c29157d4e966b72f2","observation_id":"08f6bf06-3d57-4281-810e-1da206a3cd9d","resolution":{"observed_at":"2026-08-02T13:18:40.486144Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:18:40.554954Z","title":"A Framework for Learning Predictive Structures from Multiple Tasks and Unlabeled Data , Volume =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.20473","last_updated":"2026-05-24T08:11:40Z","snapshot_observed_at":"2026-08-08T06:43:34.898524Z","submitted_at":"2026-05-24T08:11:40Z","title":"Incomplete Prompt Jailbreaks in Large Language Models","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-02T13:18:40.554954Z"},"links":{"citing_paper":"/paper/2607.20473"},"observation_digest":"sha256:409569c5579725a272afab5e4665832df6ddd605b4b8496381ba0e7037f34d1b","observation_id":"5a0f1f58-7728-400e-94f7-799eeacd16cd","resolution":{"observed_at":"2026-08-02T13:18:40.554954Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.18556","last_updated":"2025-08-25T00:27:19Z","snapshot_observed_at":"2026-08-07T23:15:35.522697Z","submitted_at":"2025-05-24T06:47:32Z","title":"Exploring the Vulnerability of the Content Moderation Guardrail in Large Language Models via Intent Manipulation","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.18556","snapshot_observed_at":"2026-08-02T13:18:40.623601Z","title":"arXiv preprint arXiv:2505.18556 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.20473","last_updated":"2026-05-24T08:11:40Z","snapshot_observed_at":"2026-08-08T06:43:34.898524Z","submitted_at":"2026-05-24T08:11:40Z","title":"Incomplete Prompt Jailbreaks in Large Language Models","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-02T13:18:40.623601Z"},"links":{"cited_paper":"/paper/2505.18556","citing_paper":"/paper/2607.20473"},"observation_digest":"sha256:87fb61eadb0853ded033b3eacdcbb652770e15cb0a88ba41b645edf7f81db494","observation_id":"d40ec3d7-7faa-417d-b17c-e93b52d8736f","resolution":{"observed_at":"2026-08-02T13:18:40.623601Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:18:40.729267Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.20473","last_updated":"2026-05-24T08:11:40Z","snapshot_observed_at":"2026-08-08T06:43:34.898524Z","submitted_at":"2026-05-24T08:11:40Z","title":"Incomplete Prompt Jailbreaks in Large Language Models","version":1},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-02T13:18:40.729267Z"},"links":{"citing_paper":"/paper/2607.20473"},"observation_digest":"sha256:aad94e8f0cc47a078bda35fde4dae36b63ef101f79c8af4e8e13dbb598d4bc29","observation_id":"fce5ac89-fd9a-43be-a1ad-2928498f9b1d","resolution":{"observed_at":"2026-08-02T13:18:40.729267Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:18:40.910226Z","title":"Proceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security , pages =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.20473","last_updated":"2026-05-24T08:11:40Z","snapshot_observed_at":"2026-08-08T06:43:34.898524Z","submitted_at":"2026-05-24T08:11:40Z","title":"Incomplete Prompt Jailbreaks in Large Language Models","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-02T13:18:40.910226Z"},"links":{"citing_paper":"/paper/2607.20473"},"observation_digest":"sha256:b508f92b7b421916bd642bfc9ea5070202ac15a60485f092350f9829f72a4486","observation_id":"7431d3e5-76b3-461b-b87c-70ff1023df2b","resolution":{"observed_at":"2026-08-02T13:18:40.910226Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:18:41.016570Z","title":"Jailbroken: How Does","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.20473","last_updated":"2026-05-24T08:11:40Z","snapshot_observed_at":"2026-08-08T06:43:34.898524Z","submitted_at":"2026-05-24T08:11:40Z","title":"Incomplete Prompt Jailbreaks in Large Language Models","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-02T13:18:41.016570Z"},"links":{"citing_paper":"/paper/2607.20473"},"observation_digest":"sha256:4f860d02b8073690cfed590a688b319262c1151f61a3fe041d59243b4f4bd239","observation_id":"c66d31a5-4b84-4359-8578-8490643c9e95","resolution":{"observed_at":"2026-08-02T13:18:41.016570Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:18:41.163684Z","title":"NeurIPS ML Safety Workshop , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.20473","last_updated":"2026-05-24T08:11:40Z","snapshot_observed_at":"2026-08-08T06:43:34.898524Z","submitted_at":"2026-05-24T08:11:40Z","title":"Incomplete Prompt Jailbreaks in Large Language Models","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-02T13:18:41.163684Z"},"links":{"citing_paper":"/paper/2607.20473"},"observation_digest":"sha256:2d7109df8fa353ab0a2bbc3a46aa66baee96131f78e0a7d7e664e3911e333f8a","observation_id":"cf1bda6d-9084-443c-bb60-b96c163a1436","resolution":{"observed_at":"2026-08-02T13:18:41.163684Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:18:41.226732Z","title":"2024 , eprint=","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.20473","last_updated":"2026-05-24T08:11:40Z","snapshot_observed_at":"2026-08-08T06:43:34.898524Z","submitted_at":"2026-05-24T08:11:40Z","title":"Incomplete Prompt Jailbreaks in Large Language Models","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-02T13:18:41.226732Z"},"links":{"citing_paper":"/paper/2607.20473"},"observation_digest":"sha256:05de31d958ff551ff573653120e89d49b22e882dfdcfa2bc47d4ad12e156a541","observation_id":"42bffe36-46d3-434d-a440-17abe6e43937","resolution":{"observed_at":"2026-08-02T13:18:41.226732Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:18:41.322672Z","title":"2023 , eprint=","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.20473","last_updated":"2026-05-24T08:11:40Z","snapshot_observed_at":"2026-08-08T06:43:34.898524Z","submitted_at":"2026-05-24T08:11:40Z","title":"Incomplete Prompt Jailbreaks in Large Language Models","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-02T13:18:41.322672Z"},"links":{"citing_paper":"/paper/2607.20473"},"observation_digest":"sha256:549fa2438e872a28556e430d8758fced3650310954ba1365cd397a18cded48af","observation_id":"6cf1fcd3-6e7d-41fb-b536-55a787d3ea38","resolution":{"observed_at":"2026-08-02T13:18:41.322672Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:18:41.427636Z","title":"Metaphor and thought , editor=","venue":null,"work_id":null,"year":1979},"citing_paper":{"arxiv_id":"2607.20473","last_updated":"2026-05-24T08:11:40Z","snapshot_observed_at":"2026-08-08T06:43:34.898524Z","submitted_at":"2026-05-24T08:11:40Z","title":"Incomplete Prompt Jailbreaks in Large Language Models","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-02T13:18:41.427636Z"},"links":{"citing_paper":"/paper/2607.20473"},"observation_digest":"sha256:20c13d2a6c0827074a585f5e44a255714c25cc82be6d618a6dd753e0b345a4be","observation_id":"c4f76f95-10e3-4e01-9dc3-ab0cd717cf1d","resolution":{"observed_at":"2026-08-02T13:18:41.427636Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:18:41.550820Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.20473","last_updated":"2026-05-24T08:11:40Z","snapshot_observed_at":"2026-08-08T06:43:34.898524Z","submitted_at":"2026-05-24T08:11:40Z","title":"Incomplete Prompt Jailbreaks in Large Language Models","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-02T13:18:41.550820Z"},"links":{"citing_paper":"/paper/2607.20473"},"observation_digest":"sha256:1329fd202a0f34ba962dbfdd6e1680af4ad2ccd8ac0d6530b91f3dec0a697520","observation_id":"e76ab97b-f159-4d85-997c-5eb80cfb413f","resolution":{"observed_at":"2026-08-02T13:18:41.550820Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:18:41.625239Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.20473","last_updated":"2026-05-24T08:11:40Z","snapshot_observed_at":"2026-08-08T06:43:34.898524Z","submitted_at":"2026-05-24T08:11:40Z","title":"Incomplete Prompt Jailbreaks in Large Language Models","version":1},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-02T13:18:41.625239Z"},"links":{"citing_paper":"/paper/2607.20473"},"observation_digest":"sha256:7d007078f1e6635c2aecda4700434e34da94dfd4a440f102e44a516cd4fd4758","observation_id":"e406ca0e-a789-49bb-b655-e10355c02f43","resolution":{"observed_at":"2026-08-02T13:18:41.625239Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:18:41.709752Z","title":"Discourse Markers , publisher=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.20473","last_updated":"2026-05-24T08:11:40Z","snapshot_observed_at":"2026-08-08T06:43:34.898524Z","submitted_at":"2026-05-24T08:11:40Z","title":"Incomplete Prompt Jailbreaks in Large Language Models","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-02T13:18:41.709752Z"},"links":{"citing_paper":"/paper/2607.20473"},"observation_digest":"sha256:f8c23adfe6ec96f5f8f5ba57099fa46468aafc796aa256f3259eb8e7c775e49c","observation_id":"260c6626-47bc-4a63-9414-f380dd03be8e","resolution":{"observed_at":"2026-08-02T13:18:41.709752Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:18:41.804739Z","title":null,"venue":null,"work_id":null,"year":1997},"citing_paper":{"arxiv_id":"2607.20473","last_updated":"2026-05-24T08:11:40Z","snapshot_observed_at":"2026-08-08T06:43:34.898524Z","submitted_at":"2026-05-24T08:11:40Z","title":"Incomplete Prompt Jailbreaks in Large Language Models","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-02T13:18:41.804739Z"},"links":{"citing_paper":"/paper/2607.20473"},"observation_digest":"sha256:c8d7eb536f31380af710988eb14e52c0bb417b10e37fe3db9d1d58d40f0f48ef","observation_id":"67a737dd-3214-478b-9742-baf8011551fc","resolution":{"observed_at":"2026-08-02T13:18:41.804739Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:18:41.894744Z","title":null,"venue":null,"work_id":null,"year":1975},"citing_paper":{"arxiv_id":"2607.20473","last_updated":"2026-05-24T08:11:40Z","snapshot_observed_at":"2026-08-08T06:43:34.898524Z","submitted_at":"2026-05-24T08:11:40Z","title":"Incomplete Prompt Jailbreaks in Large Language Models","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-02T13:18:41.894744Z"},"links":{"citing_paper":"/paper/2607.20473"},"observation_digest":"sha256:c36216312fbc486bc6225273a9c2c603294e1c3efbcce47022e24eb2df4e6797","observation_id":"3f911118-6864-4e63-8070-712f150f25bb","resolution":{"observed_at":"2026-08-02T13:18:41.894744Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:18:41.988947Z","title":"Schegloff and Gail Jefferson and Harvey Sacks , journal =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.20473","last_updated":"2026-05-24T08:11:40Z","snapshot_observed_at":"2026-08-08T06:43:34.898524Z","submitted_at":"2026-05-24T08:11:40Z","title":"Incomplete Prompt Jailbreaks in Large Language Models","version":1},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-02T13:18:41.988947Z"},"links":{"citing_paper":"/paper/2607.20473"},"observation_digest":"sha256:f93fc69ecfd91804c9704eeefd56f18f8e0165b702f86e4b4992799aeb452e66","observation_id":"cd10536b-1980-407d-aa0c-3268b370a843","resolution":{"observed_at":"2026-08-02T13:18:41.988947Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:18:42.053472Z","title":"The Thirty-eighth Annual Conference on Neural Information Processing Systems , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.20473","last_updated":"2026-05-24T08:11:40Z","snapshot_observed_at":"2026-08-08T06:43:34.898524Z","submitted_at":"2026-05-24T08:11:40Z","title":"Incomplete Prompt Jailbreaks in Large Language Models","version":1},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-08-02T13:18:42.053472Z"},"links":{"citing_paper":"/paper/2607.20473"},"observation_digest":"sha256:2fe4394baf6e933a82254c1a58f823b6c696283babaed8f1d37216373a85f66c","observation_id":"0b6b465c-35f2-4061-adc0-a19792f4310e","resolution":{"observed_at":"2026-08-02T13:18:42.053472Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:18:42.163941Z","title":"2025 , eprint=","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.20473","last_updated":"2026-05-24T08:11:40Z","snapshot_observed_at":"2026-08-08T06:43:34.898524Z","submitted_at":"2026-05-24T08:11:40Z","title":"Incomplete Prompt Jailbreaks in Large Language Models","version":1},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-08-02T13:18:42.163941Z"},"links":{"citing_paper":"/paper/2607.20473"},"observation_digest":"sha256:33989143d7ed2b57c3c44f0c65df937f00012c8eb8d1b0dd9107b597d77c8e5f","observation_id":"f3f60f28-a45b-44f2-9789-a613dfe26a82","resolution":{"observed_at":"2026-08-02T13:18:42.163941Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:18:42.265705Z","title":"Low-Resource Languages Jailbreak","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.20473","last_updated":"2026-05-24T08:11:40Z","snapshot_observed_at":"2026-08-08T06:43:34.898524Z","submitted_at":"2026-05-24T08:11:40Z","title":"Incomplete Prompt Jailbreaks in Large Language Models","version":1},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-08-02T13:18:42.265705Z"},"links":{"citing_paper":"/paper/2607.20473"},"observation_digest":"sha256:f403edb35339b1eff508b6f36d542526cd84a77d249328d9356bc6593d8b57d7","observation_id":"1ccf1483-ccd8-454f-a1b1-873c994d8a6f","resolution":{"observed_at":"2026-08-02T13:18:42.265705Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:18:42.497426Z","title":"Mitigating the Alignment Tax of RLHF","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.20473","last_updated":"2026-05-24T08:11:40Z","snapshot_observed_at":"2026-08-08T06:43:34.898524Z","submitted_at":"2026-05-24T08:11:40Z","title":"Incomplete Prompt Jailbreaks in Large Language Models","version":1},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-08-02T13:18:42.497426Z"},"links":{"citing_paper":"/paper/2607.20473"},"observation_digest":"sha256:56a80edad0b5fde3ba52be12851e141f2522e700bf100a963fa7f83f3ac72c94","observation_id":"c28a80cc-9f13-442d-a543-5f23be6cf21d","resolution":{"observed_at":"2026-08-02T13:18:42.497426Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:18:42.624003Z","title":"The Dark Side of Function Calling: Pathways to Jailbreaking Large Language Models","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.20473","last_updated":"2026-05-24T08:11:40Z","snapshot_observed_at":"2026-08-08T06:43:34.898524Z","submitted_at":"2026-05-24T08:11:40Z","title":"Incomplete Prompt Jailbreaks in Large Language Models","version":1},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-08-02T13:18:42.624003Z"},"links":{"citing_paper":"/paper/2607.20473"},"observation_digest":"sha256:e5b80918d153c00b9f06939641fae982f9f15092b0bd2bef74892a68c248a466","observation_id":"a5875823-261e-4d67-af41-b3a783a76053","resolution":{"observed_at":"2026-08-02T13:18:42.624003Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:18:42.730981Z","title":"2025 , month = may, url =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.20473","last_updated":"2026-05-24T08:11:40Z","snapshot_observed_at":"2026-08-08T06:43:34.898524Z","submitted_at":"2026-05-24T08:11:40Z","title":"Incomplete Prompt Jailbreaks in Large Language Models","version":1},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-08-02T13:18:42.730981Z"},"links":{"citing_paper":"/paper/2607.20473"},"observation_digest":"sha256:6c017a2c1694f7bc2081c3c1b9130d754174710767d095c04381bddbf1194b5f","observation_id":"e6dff596-71cd-433e-9fb5-790633c03308","resolution":{"observed_at":"2026-08-02T13:18:42.730981Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:18:42.834852Z","title":"2024 , eprint=","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.20473","last_updated":"2026-05-24T08:11:40Z","snapshot_observed_at":"2026-08-08T06:43:34.898524Z","submitted_at":"2026-05-24T08:11:40Z","title":"Incomplete Prompt Jailbreaks in Large Language Models","version":1},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-08-02T13:18:42.834852Z"},"links":{"citing_paper":"/paper/2607.20473"},"observation_digest":"sha256:fbaafc9b586ca4c50409947707c9c710369639551a72d6f8a786eb32c0046ac7","observation_id":"65f3b22f-4fe4-455a-876c-db17aac59781","resolution":{"observed_at":"2026-08-02T13:18:42.834852Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:18:42.961927Z","title":"The Twelfth International Conference on Learning Representations , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.20473","last_updated":"2026-05-24T08:11:40Z","snapshot_observed_at":"2026-08-08T06:43:34.898524Z","submitted_at":"2026-05-24T08:11:40Z","title":"Incomplete Prompt Jailbreaks in Large Language Models","version":1},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-08-02T13:18:42.961927Z"},"links":{"citing_paper":"/paper/2607.20473"},"observation_digest":"sha256:7f55bb8c7e9d6939dc0b5e8ddca8d43ac88e99421c9e9d13e9e7cb554b5a0f88","observation_id":"85ee3a30-a4ef-4e88-a88c-12ee738036e0","resolution":{"observed_at":"2026-08-02T13:18:42.961927Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:18:43.003901Z","title":"2025 , eprint=","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.20473","last_updated":"2026-05-24T08:11:40Z","snapshot_observed_at":"2026-08-08T06:43:34.898524Z","submitted_at":"2026-05-24T08:11:40Z","title":"Incomplete Prompt Jailbreaks in Large Language Models","version":1},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-08-02T13:18:43.003901Z"},"links":{"citing_paper":"/paper/2607.20473"},"observation_digest":"sha256:ab34399b001e39e1539821ffb1c85a95a26241020766af64fa641024d49d5d17","observation_id":"f300b3ca-c19f-4c60-9c7d-a79d77a76848","resolution":{"observed_at":"2026-08-02T13:18:43.003901Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:18:43.094770Z","title":"2025 , eprint=","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.20473","last_updated":"2026-05-24T08:11:40Z","snapshot_observed_at":"2026-08-08T06:43:34.898524Z","submitted_at":"2026-05-24T08:11:40Z","title":"Incomplete Prompt Jailbreaks in Large Language Models","version":1},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-08-02T13:18:43.094770Z"},"links":{"citing_paper":"/paper/2607.20473"},"observation_digest":"sha256:9fdaa8ca5fc715ce97c2371a83265d4185193ccab56117ff79ca640a32403108","observation_id":"685f4348-758f-4da3-a3df-4789895e706b","resolution":{"observed_at":"2026-08-02T13:18:43.094770Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:18:43.203225Z","title":"2026 , eprint=","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.20473","last_updated":"2026-05-24T08:11:40Z","snapshot_observed_at":"2026-08-08T06:43:34.898524Z","submitted_at":"2026-05-24T08:11:40Z","title":"Incomplete Prompt Jailbreaks in Large Language Models","version":1},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-08-02T13:18:43.203225Z"},"links":{"citing_paper":"/paper/2607.20473"},"observation_digest":"sha256:84d98761d4aa0dd5509ad418f260064649c347f5505d1382f7a8cad8fd6d40a9","observation_id":"9042d736-09dc-404d-87a9-5b7e3ed39586","resolution":{"observed_at":"2026-08-02T13:18:43.203225Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:18:43.427245Z","title":"The Thirteenth International Conference on Learning Representations , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.20473","last_updated":"2026-05-24T08:11:40Z","snapshot_observed_at":"2026-08-08T06:43:34.898524Z","submitted_at":"2026-05-24T08:11:40Z","title":"Incomplete Prompt Jailbreaks in Large Language Models","version":1},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-08-02T13:18:43.427245Z"},"links":{"citing_paper":"/paper/2607.20473"},"observation_digest":"sha256:9f210924d2d1e92015e318e3a5fd8df05a18d2a97bc33b6aab39f8cc556eb3b0","observation_id":"6853a1b6-b67c-48c0-8eb7-0ddb7969348a","resolution":{"observed_at":"2026-08-02T13:18:43.427245Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:18:43.537219Z","title":"2025 , eprint=","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.20473","last_updated":"2026-05-24T08:11:40Z","snapshot_observed_at":"2026-08-08T06:43:34.898524Z","submitted_at":"2026-05-24T08:11:40Z","title":"Incomplete Prompt Jailbreaks in Large Language Models","version":1},"reference_index":38,"source":"arxiv_source","source_observed_at":"2026-08-02T13:18:43.537219Z"},"links":{"citing_paper":"/paper/2607.20473"},"observation_digest":"sha256:339b2a7eedad7fff634b9ac9f2a0c248f8dc7093ea1e57372baaaec1d745fb40","observation_id":"b18a338f-4299-46b2-acfc-4a5f52e4724e","resolution":{"observed_at":"2026-08-02T13:18:43.537219Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:18:43.614749Z","title":"2025 , eprint=","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.20473","last_updated":"2026-05-24T08:11:40Z","snapshot_observed_at":"2026-08-08T06:43:34.898524Z","submitted_at":"2026-05-24T08:11:40Z","title":"Incomplete Prompt Jailbreaks in Large Language Models","version":1},"reference_index":39,"source":"arxiv_source","source_observed_at":"2026-08-02T13:18:43.614749Z"},"links":{"citing_paper":"/paper/2607.20473"},"observation_digest":"sha256:38e37f01e1a43901d6d83331e5097e94605d94955818a4a07c0b1d59d74905b2","observation_id":"69eed16e-d962-4928-a8fe-bbb4704a742b","resolution":{"observed_at":"2026-08-02T13:18:43.614749Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:18:43.729462Z","title":"Lampert , booktitle=","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.20473","last_updated":"2026-05-24T08:11:40Z","snapshot_observed_at":"2026-08-08T06:43:34.898524Z","submitted_at":"2026-05-24T08:11:40Z","title":"Incomplete Prompt Jailbreaks in Large Language Models","version":1},"reference_index":40,"source":"arxiv_source","source_observed_at":"2026-08-02T13:18:43.729462Z"},"links":{"citing_paper":"/paper/2607.20473"},"observation_digest":"sha256:18ed337811e4616dac574a21d151bcf1d9ffbf7ea9ca199f2aa38291cd65610f","observation_id":"82a16adf-d7d5-403e-aca8-833e14e28096","resolution":{"observed_at":"2026-08-02T13:18:43.729462Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:18:43.859236Z","title":"Proceedings of the 34th USENIX Conference on Security Symposium , articleno =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.20473","last_updated":"2026-05-24T08:11:40Z","snapshot_observed_at":"2026-08-08T06:43:34.898524Z","submitted_at":"2026-05-24T08:11:40Z","title":"Incomplete Prompt Jailbreaks in Large Language Models","version":1},"reference_index":41,"source":"arxiv_source","source_observed_at":"2026-08-02T13:18:43.859236Z"},"links":{"citing_paper":"/paper/2607.20473"},"observation_digest":"sha256:6973ec79844bb5bca081998faae4f7b3e885b3ff694be495e71d03dd9263e106","observation_id":"bdd67767-f36a-4daf-a27d-c680760e380e","resolution":{"observed_at":"2026-08-02T13:18:43.859236Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:18:44.001467Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.20473","last_updated":"2026-05-24T08:11:40Z","snapshot_observed_at":"2026-08-08T06:43:34.898524Z","submitted_at":"2026-05-24T08:11:40Z","title":"Incomplete Prompt Jailbreaks in Large Language Models","version":1},"reference_index":42,"source":"arxiv_source","source_observed_at":"2026-08-02T13:18:44.001467Z"},"links":{"citing_paper":"/paper/2607.20473"},"observation_digest":"sha256:1597b64292397b03c10943f1b6300796c6b13381f144aeeafeabdec307a57856","observation_id":"3cfe8256-beb1-42a3-a0bc-c3d897c2ee28","resolution":{"observed_at":"2026-08-02T13:18:44.001467Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:18:44.105526Z","title":"2022 , eprint=","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.20473","last_updated":"2026-05-24T08:11:40Z","snapshot_observed_at":"2026-08-08T06:43:34.898524Z","submitted_at":"2026-05-24T08:11:40Z","title":"Incomplete Prompt Jailbreaks in Large Language Models","version":1},"reference_index":43,"source":"arxiv_source","source_observed_at":"2026-08-02T13:18:44.105526Z"},"links":{"citing_paper":"/paper/2607.20473"},"observation_digest":"sha256:d7c1744d034baf35e9a1a9c0f58efc2de4f437058d9d26d04645287a958e59f6","observation_id":"185d8ba1-1e32-43c9-81c7-4068ce2d0180","resolution":{"observed_at":"2026-08-02T13:18:44.105526Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:18:44.212855Z","title":"2022 , eprint=","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.20473","last_updated":"2026-05-24T08:11:40Z","snapshot_observed_at":"2026-08-08T06:43:34.898524Z","submitted_at":"2026-05-24T08:11:40Z","title":"Incomplete Prompt Jailbreaks in Large Language Models","version":1},"reference_index":44,"source":"arxiv_source","source_observed_at":"2026-08-02T13:18:44.212855Z"},"links":{"citing_paper":"/paper/2607.20473"},"observation_digest":"sha256:08d97515177d933ae29d93a4dc022c52f29b8631a01f91a435b5049c75d90a22","observation_id":"68168629-e87e-49c7-90dd-0278538d6f87","resolution":{"observed_at":"2026-08-02T13:18:44.212855Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:18:44.456843Z","title":"and Leike, Jan and Brown, Tom B","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2607.20473","last_updated":"2026-05-24T08:11:40Z","snapshot_observed_at":"2026-08-08T06:43:34.898524Z","submitted_at":"2026-05-24T08:11:40Z","title":"Incomplete Prompt Jailbreaks in Large Language Models","version":1},"reference_index":45,"source":"arxiv_source","source_observed_at":"2026-08-02T13:18:44.456843Z"},"links":{"citing_paper":"/paper/2607.20473"},"observation_digest":"sha256:77c2aa40d442e2f58a6c739d62f6d701a47d58cdc3f733af3f23204c72add40f","observation_id":"84b0f963-7cc3-4cfa-91b5-b3783f06b8da","resolution":{"observed_at":"2026-08-02T13:18:44.456843Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:18:44.607214Z","title":"2024 , eprint=","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.20473","last_updated":"2026-05-24T08:11:40Z","snapshot_observed_at":"2026-08-08T06:43:34.898524Z","submitted_at":"2026-05-24T08:11:40Z","title":"Incomplete Prompt Jailbreaks in Large Language Models","version":1},"reference_index":46,"source":"arxiv_source","source_observed_at":"2026-08-02T13:18:44.607214Z"},"links":{"citing_paper":"/paper/2607.20473"},"observation_digest":"sha256:91090b70576279a0566d3d97e629d6e9bca969054d517220180e944513d4b09d","observation_id":"b6e36c5a-6b08-4165-abca-8f5ce35a08a6","resolution":{"observed_at":"2026-08-02T13:18:44.607214Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:18:44.714933Z","title":"2025 , eprint=","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.20473","last_updated":"2026-05-24T08:11:40Z","snapshot_observed_at":"2026-08-08T06:43:34.898524Z","submitted_at":"2026-05-24T08:11:40Z","title":"Incomplete Prompt Jailbreaks in Large Language Models","version":1},"reference_index":47,"source":"arxiv_source","source_observed_at":"2026-08-02T13:18:44.714933Z"},"links":{"citing_paper":"/paper/2607.20473"},"observation_digest":"sha256:92275393fbab488c684f0943bda6089c273bbc759efabd2fc6bc820258472e04","observation_id":"39978dd5-493b-49ec-8c78-021537c58a55","resolution":{"observed_at":"2026-08-02T13:18:44.714933Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:18:44.834688Z","title":"The Thirty-eighth Annual Conference on Neural Information Processing Systems , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.20473","last_updated":"2026-05-24T08:11:40Z","snapshot_observed_at":"2026-08-08T06:43:34.898524Z","submitted_at":"2026-05-24T08:11:40Z","title":"Incomplete Prompt Jailbreaks in Large Language Models","version":1},"reference_index":48,"source":"arxiv_source","source_observed_at":"2026-08-02T13:18:44.834688Z"},"links":{"citing_paper":"/paper/2607.20473"},"observation_digest":"sha256:bc7f0714789e4f4bf23e1ddc7be92701cdac7cfbe60c71cd2d3a431fb0405e8b","observation_id":"da443b6a-a735-4862-beec-ae0480428d28","resolution":{"observed_at":"2026-08-02T13:18:44.834688Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:18:44.944695Z","title":"2025 , eprint=","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.20473","last_updated":"2026-05-24T08:11:40Z","snapshot_observed_at":"2026-08-08T06:43:34.898524Z","submitted_at":"2026-05-24T08:11:40Z","title":"Incomplete Prompt Jailbreaks in Large Language Models","version":1},"reference_index":49,"source":"arxiv_source","source_observed_at":"2026-08-02T13:18:44.944695Z"},"links":{"citing_paper":"/paper/2607.20473"},"observation_digest":"sha256:31550d6c1f98dc82ca9db57ea263f613519e64a1b604833f559f0e7697aa3177","observation_id":"37564e71-023e-4985-af4b-c733a18903d8","resolution":{"observed_at":"2026-08-02T13:18:44.944695Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:18:45.061753Z","title":"2023 , eprint=","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.20473","last_updated":"2026-05-24T08:11:40Z","snapshot_observed_at":"2026-08-08T06:43:34.898524Z","submitted_at":"2026-05-24T08:11:40Z","title":"Incomplete Prompt Jailbreaks in Large Language Models","version":1},"reference_index":50,"source":"arxiv_source","source_observed_at":"2026-08-02T13:18:45.061753Z"},"links":{"citing_paper":"/paper/2607.20473"},"observation_digest":"sha256:1bd66baa9747369c80337b6a72feba8187d36e81b4d37342e87815297e74c79a","observation_id":"781a656c-8b5a-4d5f-b23c-a58e0e48cf3a","resolution":{"observed_at":"2026-08-02T13:18:45.061753Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:18:45.232396Z","title":"and Perez, Ethan and Grosse, Roger Baker and Duvenaud, David , booktitle =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.20473","last_updated":"2026-05-24T08:11:40Z","snapshot_observed_at":"2026-08-08T06:43:34.898524Z","submitted_at":"2026-05-24T08:11:40Z","title":"Incomplete Prompt Jailbreaks in Large Language Models","version":1},"reference_index":51,"source":"arxiv_source","source_observed_at":"2026-08-02T13:18:45.232396Z"},"links":{"citing_paper":"/paper/2607.20473"},"observation_digest":"sha256:265b44307dd6e16131dbae270f94aa118bffb41cf3c78b9427d39fb61e7f8678","observation_id":"e58bf6f7-2a28-4576-a58b-9676fab5a463","resolution":{"observed_at":"2026-08-02T13:18:45.232396Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:18:45.344920Z","title":"Advances in Neural Information Processing Systems , editor=","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.20473","last_updated":"2026-05-24T08:11:40Z","snapshot_observed_at":"2026-08-08T06:43:34.898524Z","submitted_at":"2026-05-24T08:11:40Z","title":"Incomplete Prompt Jailbreaks in Large Language Models","version":1},"reference_index":52,"source":"arxiv_source","source_observed_at":"2026-08-02T13:18:45.344920Z"},"links":{"citing_paper":"/paper/2607.20473"},"observation_digest":"sha256:818a5efc2f252245b529682df01e231c2b017d93766132aa5b0ec3e271b005ff","observation_id":"0685a0e8-b6ca-42d5-958a-89e21725c9bd","resolution":{"observed_at":"2026-08-02T13:18:45.344920Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:18:45.464763Z","title":"Neurips Safe Generative AI Workshop 2024 , year=","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.20473","last_updated":"2026-05-24T08:11:40Z","snapshot_observed_at":"2026-08-08T06:43:34.898524Z","submitted_at":"2026-05-24T08:11:40Z","title":"Incomplete Prompt Jailbreaks in Large Language Models","version":1},"reference_index":53,"source":"arxiv_source","source_observed_at":"2026-08-02T13:18:45.464763Z"},"links":{"citing_paper":"/paper/2607.20473"},"observation_digest":"sha256:36085baedab15b8294e18c99fec80cbbdeb5bfa63c7689093dc61761610376cb","observation_id":"abdd9865-d8b4-4020-ad23-bfc8981f79c2","resolution":{"observed_at":"2026-08-02T13:18:45.464763Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:18:45.584193Z","title":"How Johnny Can Persuade LLM s to Jailbreak Them: Rethinking Persuasion to Challenge AI Safety by Humanizing LLM s","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.20473","last_updated":"2026-05-24T08:11:40Z","snapshot_observed_at":"2026-08-08T06:43:34.898524Z","submitted_at":"2026-05-24T08:11:40Z","title":"Incomplete Prompt Jailbreaks in Large Language Models","version":1},"reference_index":54,"source":"arxiv_source","source_observed_at":"2026-08-02T13:18:45.584193Z"},"links":{"citing_paper":"/paper/2607.20473"},"observation_digest":"sha256:88258f223e0e04b28b516c7312a23b28a7ad4001c64bfee7ba001dc708ebbf66","observation_id":"f407b64f-699f-427a-8b0e-f9e17b430272","resolution":{"observed_at":"2026-08-02T13:18:45.584193Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:18:45.784755Z","title":"2023 , eprint=","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.20473","last_updated":"2026-05-24T08:11:40Z","snapshot_observed_at":"2026-08-08T06:43:34.898524Z","submitted_at":"2026-05-24T08:11:40Z","title":"Incomplete Prompt Jailbreaks in Large Language Models","version":1},"reference_index":55,"source":"arxiv_source","source_observed_at":"2026-08-02T13:18:45.784755Z"},"links":{"citing_paper":"/paper/2607.20473"},"observation_digest":"sha256:ca88daec8d7d5f0953cc67ea263d8482064a2afbf644e77268019f87992424aa","observation_id":"767ef63e-b4e4-49e1-a3ba-09abca7d6b4a","resolution":{"observed_at":"2026-08-02T13:18:45.784755Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:18:45.924762Z","title":"Forty-first International Conference on Machine Learning , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.20473","last_updated":"2026-05-24T08:11:40Z","snapshot_observed_at":"2026-08-08T06:43:34.898524Z","submitted_at":"2026-05-24T08:11:40Z","title":"Incomplete Prompt Jailbreaks in Large Language Models","version":1},"reference_index":56,"source":"arxiv_source","source_observed_at":"2026-08-02T13:18:45.924762Z"},"links":{"citing_paper":"/paper/2607.20473"},"observation_digest":"sha256:494ad4e71a270305eac455270db17a6d07781c5c08c8e4f8ecc7d9c2d22f8c8e","observation_id":"56b164b2-720b-4710-b197-8f943eac3679","resolution":{"observed_at":"2026-08-02T13:18:45.924762Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:18:46.080933Z","title":"Foot-In-The-Door: A Multi-turn Jailbreak for LLM s","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.20473","last_updated":"2026-05-24T08:11:40Z","snapshot_observed_at":"2026-08-08T06:43:34.898524Z","submitted_at":"2026-05-24T08:11:40Z","title":"Incomplete Prompt Jailbreaks in Large Language Models","version":1},"reference_index":57,"source":"arxiv_source","source_observed_at":"2026-08-02T13:18:46.080933Z"},"links":{"citing_paper":"/paper/2607.20473"},"observation_digest":"sha256:cb044c31e759f1da368bed2210419cd9e9157fcbbdf7a3288032c5ed58c32236","observation_id":"ca11915d-f1b0-4e79-9941-6355d562bbca","resolution":{"observed_at":"2026-08-02T13:18:46.080933Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:18:46.214938Z","title":"Latent Adversarial Training Improves Robustness to Persistent Harmful Behaviors in","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.20473","last_updated":"2026-05-24T08:11:40Z","snapshot_observed_at":"2026-08-08T06:43:34.898524Z","submitted_at":"2026-05-24T08:11:40Z","title":"Incomplete Prompt Jailbreaks in Large Language Models","version":1},"reference_index":58,"source":"arxiv_source","source_observed_at":"2026-08-02T13:18:46.214938Z"},"links":{"citing_paper":"/paper/2607.20473"},"observation_digest":"sha256:0ee82fdd9f609012f1d1ac5fa56b9a29aaed92f6ef776a696535fa1e6db5745c","observation_id":"6279fd24-076b-40c3-92bd-73d90d9d8ef2","resolution":{"observed_at":"2026-08-02T13:18:46.214938Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:18:46.273183Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.20473","last_updated":"2026-05-24T08:11:40Z","snapshot_observed_at":"2026-08-08T06:43:34.898524Z","submitted_at":"2026-05-24T08:11:40Z","title":"Incomplete Prompt Jailbreaks in Large Language Models","version":1},"reference_index":59,"source":"arxiv_source","source_observed_at":"2026-08-02T13:18:46.273183Z"},"links":{"citing_paper":"/paper/2607.20473"},"observation_digest":"sha256:b699cfc97cb8fc97d9893ed23007ec04bad2d3bc965a17d7ee4ace3f9fcb0303","observation_id":"89d2fd07-c307-49d1-bc52-c4f05143be6e","resolution":{"observed_at":"2026-08-02T13:18:46.273183Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:18:46.370332Z","title":"1983 , publisher=","venue":null,"work_id":null,"year":1913},"citing_paper":{"arxiv_id":"2607.20473","last_updated":"2026-05-24T08:11:40Z","snapshot_observed_at":"2026-08-08T06:43:34.898524Z","submitted_at":"2026-05-24T08:11:40Z","title":"Incomplete Prompt Jailbreaks in Large Language Models","version":1},"reference_index":60,"source":"arxiv_source","source_observed_at":"2026-08-02T13:18:46.370332Z"},"links":{"citing_paper":"/paper/2607.20473"},"observation_digest":"sha256:2efc45e08cd1acf4ed2d6b682dc17d335bc00cf79dccdf43da066cb42efa2f66","observation_id":"073d9683-f37f-449d-b3f6-86ffdf5eeff9","resolution":{"observed_at":"2026-08-02T13:18:46.370332Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:18:46.484887Z","title":"Protokolls","venue":null,"work_id":null,"year":1932},"citing_paper":{"arxiv_id":"2607.20473","last_updated":"2026-05-24T08:11:40Z","snapshot_observed_at":"2026-08-08T06:43:34.898524Z","submitted_at":"2026-05-24T08:11:40Z","title":"Incomplete Prompt Jailbreaks in Large Language Models","version":1},"reference_index":61,"source":"arxiv_source","source_observed_at":"2026-08-02T13:18:46.484887Z"},"links":{"citing_paper":"/paper/2607.20473"},"observation_digest":"sha256:ad94c0153d13c55c504acbdd9bc5433c9d050c773466e24cd8f7e6cd85954f48","observation_id":"098d7472-68b0-4747-b6eb-e64e23352d73","resolution":{"observed_at":"2026-08-02T13:18:46.484887Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:18:46.645013Z","title":"XST est: A Test Suite for Identifying Exaggerated Safety Behaviours in Large Language Models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.20473","last_updated":"2026-05-24T08:11:40Z","snapshot_observed_at":"2026-08-08T06:43:34.898524Z","submitted_at":"2026-05-24T08:11:40Z","title":"Incomplete Prompt Jailbreaks in Large Language Models","version":1},"reference_index":62,"source":"arxiv_source","source_observed_at":"2026-08-02T13:18:46.645013Z"},"links":{"citing_paper":"/paper/2607.20473"},"observation_digest":"sha256:4c0a1f8cb876f109fea1b85ebe809ac99ad5c6ef009b6bf7e03377d1f3566cfa","observation_id":"60d5613b-6d6f-4e20-ba92-08b0d936f0c9","resolution":{"observed_at":"2026-08-02T13:18:46.645013Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.18653/v1/2025.acl-long.469","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Curriculum Debiasing: Toward Robust Parameter-Efficient Fine-Tuning Against Dataset Biases","venue":null,"work_id":"c8225850-1beb-473b-bb35-80ab39b2fd29","year":2025},"citing_paper":{"arxiv_id":"2607.20473","last_updated":"2026-05-24T08:11:40Z","snapshot_observed_at":"2026-08-08T06:43:34.898524Z","submitted_at":"2026-05-24T08:11:40Z","title":"Incomplete Prompt Jailbreaks in Large Language Models","version":1},"reference_index":63,"source":"arxiv_source","source_observed_at":"2026-08-02T13:18:46.734751Z"},"links":{"citing_paper":"/paper/2607.20473"},"observation_digest":"sha256:741ceb3e0cc6fe1971ee35ae6fdecb6c19219284e7530b77e5a93ecde5639d00","observation_id":"f93ff5d4-660b-417a-99c3-e96cade954c3","resolution":{"observed_at":"2026-08-02T13:23:23.475096Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.18653/v1/2024.findings-emnlp.146","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Navigating the Shortcut Maze: A Comprehensive Analysis of Shortcut Learning in Text Classification by Language Models","venue":null,"work_id":"9dbfce60-bff0-4055-82ca-a8e2a11c0099","year":2024},"citing_paper":{"arxiv_id":"2607.20473","last_updated":"2026-05-24T08:11:40Z","snapshot_observed_at":"2026-08-08T06:43:34.898524Z","submitted_at":"2026-05-24T08:11:40Z","title":"Incomplete Prompt Jailbreaks in Large Language Models","version":1},"reference_index":64,"source":"arxiv_source","source_observed_at":"2026-08-02T13:18:46.864757Z"},"links":{"citing_paper":"/paper/2607.20473"},"observation_digest":"sha256:c4e5162a9cdc45f0c5d73a5088c49f5a77ba3b851fbaeaa3407f2389c3c93d20","observation_id":"63bebe87-4fa5-4be8-a147-e46e9381029a","resolution":{"observed_at":"2026-08-02T13:23:23.358696Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1609/aaai.v39i26.34945","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":null,"venue":"Proceedings of the AAAI Conference on Artificial Intelligence","work_id":"d02667f7-f53b-4c26-98ac-2e7780bd2bd4","year":2025},"citing_paper":{"arxiv_id":"2607.20473","last_updated":"2026-05-24T08:11:40Z","snapshot_observed_at":"2026-08-08T06:43:34.898524Z","submitted_at":"2026-05-24T08:11:40Z","title":"Incomplete Prompt Jailbreaks in Large Language Models","version":1},"reference_index":65,"source":"arxiv_source","source_observed_at":"2026-08-02T13:18:46.974748Z"},"links":{"citing_paper":"/paper/2607.20473"},"observation_digest":"sha256:039b6ed40ab40050710b8eb19246a833f3bd74422e4efcbd2d73fea339f1a6cf","observation_id":"20e27ff2-bff6-4988-86b2-cb43b7e4f925","resolution":{"observed_at":"2026-08-02T13:23:23.203125Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:18:47.054754Z","title":"2025 , eprint=","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.20473","last_updated":"2026-05-24T08:11:40Z","snapshot_observed_at":"2026-08-08T06:43:34.898524Z","submitted_at":"2026-05-24T08:11:40Z","title":"Incomplete Prompt Jailbreaks in Large Language Models","version":1},"reference_index":66,"source":"arxiv_source","source_observed_at":"2026-08-02T13:18:47.054754Z"},"links":{"citing_paper":"/paper/2607.20473"},"observation_digest":"sha256:ad576a18bcfd0d80dc5350c7a783db53514ebad94ccbb5919a009064f9a8486f","observation_id":"90a86797-206d-42b1-b0aa-df4da9eface7","resolution":{"observed_at":"2026-08-02T13:18:47.054754Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.18653/v1/2025.acl-long.360","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Deontological Keyword Bias: The Impact of Modal Expressions on Normative Judgments of Language Models","venue":null,"work_id":"0f2180ae-3a99-4d99-811c-639f19940dd6","year":2025},"citing_paper":{"arxiv_id":"2607.20473","last_updated":"2026-05-24T08:11:40Z","snapshot_observed_at":"2026-08-08T06:43:34.898524Z","submitted_at":"2026-05-24T08:11:40Z","title":"Incomplete Prompt Jailbreaks in Large Language Models","version":1},"reference_index":67,"source":"arxiv_source","source_observed_at":"2026-08-02T13:18:47.214752Z"},"links":{"citing_paper":"/paper/2607.20473"},"observation_digest":"sha256:02b9763006600d2105973a876a8cf9c0d76e9db53cfed7fa30851baa8ba9a69a","observation_id":"04bb10fb-83a5-4eaf-9d38-475aaab20345","resolution":{"observed_at":"2026-08-02T13:23:23.010807Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2607.20473","last_updated":"2026-05-24T08:11:40Z","latest_version":1,"primary_category":"cs.AI","snapshot_observed_at":"2026-08-08T06:43:34.898524Z","submitted_at":"2026-05-24T08:11:40Z","title":"Incomplete Prompt Jailbreaks in Large Language Models"},"reference_resolution":{"displayed":67,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":63,"verified_exact":4,"verified_fuzzy":0},"total_outbound_references":67},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 67 of 67 outbound references and 0 inbound Pith citation observations for arXiv:2607.20473."}