{"as_of":"2026-08-08T10:14:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:7ead10068871274ec6b1d8e886b98dbba4afa667c5317f0536b32d33fc1f63f4","coverage":[{"denominator":25,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":25,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-02T11:28:40.007247Z","state":"measured"},{"denominator":25,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":25,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2607.20494/citation-record","integrity":"/paper/2607.20494/integrity","json":"/paper/2607.20494/citation-record.json","paper":"/paper/2607.20494"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T11:28:36.796047Z","title":"Attackiq continuous threat exposure management platform, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.20494","last_updated":"2026-06-12T18:54:24Z","snapshot_observed_at":"2026-08-06T10:05:02.223857Z","submitted_at":"2026-06-12T18:54:24Z","title":"Isolating LLM Alignment from Regex: Zero Coverage and Metric-Dependent Divergence Under Adversarial Mutation","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-02T11:28:36.796047Z"},"links":{"citing_paper":"/paper/2607.20494"},"observation_digest":"sha256:1ed076d68c97113f7a6d45ced8c717b218dea923a994a03ca23e2ec019f67fa3","observation_id":"5b4743f3-3b21-45db-82d0-c418e3fada0e","resolution":{"observed_at":"2026-08-02T11:28:36.796047Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.01318","last_updated":"2024-10-31T22:26:40Z","snapshot_observed_at":"2026-08-02T14:59:12.115203Z","submitted_at":"2024-03-28T02:44:02Z","title":"JailbreakBench: An Open Robustness Benchmark for Jailbreaking Large Language Models","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.01318","snapshot_observed_at":"2026-08-02T11:28:36.924563Z","title":"Pappas, Florian Tram` er, Hamed Hassani, and Eric Wong","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.20494","last_updated":"2026-06-12T18:54:24Z","snapshot_observed_at":"2026-08-06T10:05:02.223857Z","submitted_at":"2026-06-12T18:54:24Z","title":"Isolating LLM Alignment from Regex: Zero Coverage and Metric-Dependent Divergence Under Adversarial Mutation","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-02T11:28:36.924563Z"},"links":{"cited_paper":"/paper/2404.01318","citing_paper":"/paper/2607.20494"},"observation_digest":"sha256:b67f17ae9768bae55f9c521c13893dcd002168724bd6797c40036fae4f1e4a0b","observation_id":"a01821a1-0262-4369-bc19-79bd1d0728e6","resolution":{"observed_at":"2026-08-02T11:28:36.924563Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.08419","last_updated":"2024-07-18T18:24:57Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-10-12T15:38:28Z","title":"Jailbreaking Black Box Large Language Models in Twenty Queries","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.08419","snapshot_observed_at":"2026-08-02T11:28:37.115077Z","title":"Pappas, and Eric Wong","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.20494","last_updated":"2026-06-12T18:54:24Z","snapshot_observed_at":"2026-08-06T10:05:02.223857Z","submitted_at":"2026-06-12T18:54:24Z","title":"Isolating LLM Alignment from Regex: Zero Coverage and Metric-Dependent Divergence Under Adversarial Mutation","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-02T11:28:37.115077Z"},"links":{"cited_paper":"/paper/2310.08419","citing_paper":"/paper/2607.20494"},"observation_digest":"sha256:453d824d822f1084f3ce6ef37690bdf7d14cb48d0c63dc65a38345089ec4ea22","observation_id":"04f71ced-3e91-4589-a7cd-056abcc58daf","resolution":{"observed_at":"2026-08-02T11:28:37.115077Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.06363","last_updated":"2024-09-25T19:48:39Z","snapshot_observed_at":"2026-07-06T17:27:58.440355Z","submitted_at":"2024-02-09T12:15:51Z","title":"StruQ: Defending Against Prompt Injection with Structured Queries","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.06363","snapshot_observed_at":"2026-08-02T11:28:37.251992Z","title":"StruQ: Defending against prompt injection with structured queries, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.20494","last_updated":"2026-06-12T18:54:24Z","snapshot_observed_at":"2026-08-06T10:05:02.223857Z","submitted_at":"2026-06-12T18:54:24Z","title":"Isolating LLM Alignment from Regex: Zero Coverage and Metric-Dependent Divergence Under Adversarial Mutation","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-02T11:28:37.251992Z"},"links":{"cited_paper":"/paper/2402.06363","citing_paper":"/paper/2607.20494"},"observation_digest":"sha256:8f4571fb4921e9aa91c276bf3fd1033e6766e40f3d96e809b8b6ee947d87efd7","observation_id":"eb475e17-bdcf-4852-ba19-519443dc8a1c","resolution":{"observed_at":"2026-08-02T11:28:37.251992Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05451","last_updated":"2025-07-03T05:45:41Z","snapshot_observed_at":"2026-07-06T19:29:18.770662Z","submitted_at":"2024-10-07T19:34:35Z","title":"SecAlign: Defending Against Prompt Injection with Preference Optimization","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.05451","snapshot_observed_at":"2026-08-02T11:28:37.338330Z","title":"SecAlign: Defending against prompt injection with preference opti- mization, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.20494","last_updated":"2026-06-12T18:54:24Z","snapshot_observed_at":"2026-08-06T10:05:02.223857Z","submitted_at":"2026-06-12T18:54:24Z","title":"Isolating LLM Alignment from Regex: Zero Coverage and Metric-Dependent Divergence Under Adversarial Mutation","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-02T11:28:37.338330Z"},"links":{"cited_paper":"/paper/2410.05451","citing_paper":"/paper/2607.20494"},"observation_digest":"sha256:5d26726aac4f64dc0d170fcafb6671c8f9f66c3250fd64b2be2e351093fcda6d","observation_id":"17fc53ab-c396-4b37-a67a-11cde6e242d2","resolution":{"observed_at":"2026-08-02T11:28:37.338330Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T11:28:37.448789Z","title":"Wichmann","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.20494","last_updated":"2026-06-12T18:54:24Z","snapshot_observed_at":"2026-08-06T10:05:02.223857Z","submitted_at":"2026-06-12T18:54:24Z","title":"Isolating LLM Alignment from Regex: Zero Coverage and Metric-Dependent Divergence Under Adversarial Mutation","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-02T11:28:37.448789Z"},"links":{"citing_paper":"/paper/2607.20494"},"observation_digest":"sha256:2270aea427a808b015ffc53d1e22653f5c1411fe8d2d24b431c2c2305d766e06","observation_id":"71aeae09-eccd-468d-a282-1799daf6d922","resolution":{"observed_at":"2026-08-02T11:28:37.448789Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.04451","last_updated":"2024-03-20T21:34:56Z","snapshot_observed_at":"2026-08-06T02:57:30.438059Z","submitted_at":"2023-10-03T19:44:37Z","title":"AutoDAN: Generating Stealthy Jailbreak Prompts on Aligned Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.04451","snapshot_observed_at":"2026-08-02T11:28:37.601359Z","title":"AutoDAN: Generating stealthy jailbreak prompts on aligned large language mod- els","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.20494","last_updated":"2026-06-12T18:54:24Z","snapshot_observed_at":"2026-08-06T10:05:02.223857Z","submitted_at":"2026-06-12T18:54:24Z","title":"Isolating LLM Alignment from Regex: Zero Coverage and Metric-Dependent Divergence Under Adversarial Mutation","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-02T11:28:37.601359Z"},"links":{"cited_paper":"/paper/2310.04451","citing_paper":"/paper/2607.20494"},"observation_digest":"sha256:5923d7e0c50b5b1996452b9bb9b4bffc2c07e97a1e414cefe45d911e37ee6d69","observation_id":"e1c6303e-3ac0-45aa-be29-e04503ebfa47","resolution":{"observed_at":"2026-08-02T11:28:37.601359Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T11:28:37.759705Z","title":"Isolating LLM Alignment from Regex","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.20494","last_updated":"2026-06-12T18:54:24Z","snapshot_observed_at":"2026-08-06T10:05:02.223857Z","submitted_at":"2026-06-12T18:54:24Z","title":"Isolating LLM Alignment from Regex: Zero Coverage and Metric-Dependent Divergence Under Adversarial Mutation","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-02T11:28:37.759705Z"},"links":{"citing_paper":"/paper/2607.20494"},"observation_digest":"sha256:f1792bbf562172048b8843eca867dbe89a16d8f58e70867fcc3f9210ea2e18f0","observation_id":"f8afa414-7894-430c-b7fd-c409f8e55f7a","resolution":{"observed_at":"2026-08-02T11:28:37.759705Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2606.02822","last_updated":"2026-06-01T19:39:25Z","snapshot_observed_at":"2026-07-06T23:43:07.940839Z","submitted_at":"2026-06-01T19:39:25Z","title":"Which Defense Closes Which Threat? Attributing OWASP-LLM-Top-10 Coverage and Its Brittleness Under Paraphrasing","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2606.02822","snapshot_observed_at":"2026-08-02T11:28:37.831700Z","title":"Which defense closes which threat? attributing OW ASP-LLM- Top-10 coverage and its brittleness under para- phrasing, 2026","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.20494","last_updated":"2026-06-12T18:54:24Z","snapshot_observed_at":"2026-08-06T10:05:02.223857Z","submitted_at":"2026-06-12T18:54:24Z","title":"Isolating LLM Alignment from Regex: Zero Coverage and Metric-Dependent Divergence Under Adversarial Mutation","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-02T11:28:37.831700Z"},"links":{"cited_paper":"/paper/2606.02822","citing_paper":"/paper/2607.20494"},"observation_digest":"sha256:b0a519b5e588e1e9839d8286857665a562be716deadc48916f1117c9a5e09351","observation_id":"1dbb699b-7043-4d84-af26-8334c7a6fb03","resolution":{"observed_at":"2026-08-02T11:28:37.831700Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T11:28:37.902713Z","title":"The judge who never admits: Hidden shortcuts in LLM-based evaluation, 2026","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.20494","last_updated":"2026-06-12T18:54:24Z","snapshot_observed_at":"2026-08-06T10:05:02.223857Z","submitted_at":"2026-06-12T18:54:24Z","title":"Isolating LLM Alignment from Regex: Zero Coverage and Metric-Dependent Divergence Under Adversarial Mutation","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-02T11:28:37.902713Z"},"links":{"citing_paper":"/paper/2607.20494"},"observation_digest":"sha256:e694ec8a9023b7bf42077614900e6b6e889ff1efda21fdcb04cec92dbaef8690","observation_id":"b0f20582-52d4-4191-bf76-afd450cda756","resolution":{"observed_at":"2026-08-02T11:28:37.902713Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T11:28:38.091357Z","title":"HarmBench: A standardized evaluation framework for auto- mated red teaming and robust refusal","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.20494","last_updated":"2026-06-12T18:54:24Z","snapshot_observed_at":"2026-08-06T10:05:02.223857Z","submitted_at":"2026-06-12T18:54:24Z","title":"Isolating LLM Alignment from Regex: Zero Coverage and Metric-Dependent Divergence Under Adversarial Mutation","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-02T11:28:38.091357Z"},"links":{"citing_paper":"/paper/2607.20494"},"observation_digest":"sha256:3b37c66d7cbbe2b536d932f5d52a55e68eb9e14bd51f1f479ab0311aae2c0e98","observation_id":"ff2ca315-f902-47bd-8028-c1fbcc9bfa06","resolution":{"observed_at":"2026-08-02T11:28:38.091357Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.02119","last_updated":"2024-10-31T15:57:42Z","snapshot_observed_at":"2026-07-06T16:56:46.051958Z","submitted_at":"2023-12-04T18:49:23Z","title":"Tree of Attacks: Jailbreaking Black-Box LLMs Automatically","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.02119","snapshot_observed_at":"2026-08-02T11:28:38.406253Z","title":"Tree of at- tacks: Jailbreaking black-box LLMs automati- cally.NeurIPS, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.20494","last_updated":"2026-06-12T18:54:24Z","snapshot_observed_at":"2026-08-06T10:05:02.223857Z","submitted_at":"2026-06-12T18:54:24Z","title":"Isolating LLM Alignment from Regex: Zero Coverage and Metric-Dependent Divergence Under Adversarial Mutation","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-02T11:28:38.406253Z"},"links":{"cited_paper":"/paper/2312.02119","citing_paper":"/paper/2607.20494"},"observation_digest":"sha256:849b2d57ab170299d912af570a7c821732ef02178ff153b61f22cae7a1b3a1ea","observation_id":"acd086be-61fc-41e9-8e2a-e08730b401fd","resolution":{"observed_at":"2026-08-02T11:28:38.406253Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2510.09023","last_updated":"2025-10-10T05:51:04Z","snapshot_observed_at":"2026-08-03T03:11:42.084785Z","submitted_at":"2025-10-10T05:51:04Z","title":"The Attacker Moves Second: Stronger Adaptive Attacks Bypass Defenses Against Llm Jailbreaks and Prompt Injections","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2510.09023","snapshot_observed_at":"2026-08-02T11:28:38.527313Z","title":"Schulhoff, Jamie Hayes, Michael Ilie, Juliette Pluto, Shuang Song, Harsh Chaudhari, Ilia Shumailov, Abhradeep Thakurta, Kai Yuan- qing Xiao, Andreas Terzis, and Florian Tram` er","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.20494","last_updated":"2026-06-12T18:54:24Z","snapshot_observed_at":"2026-08-06T10:05:02.223857Z","submitted_at":"2026-06-12T18:54:24Z","title":"Isolating LLM Alignment from Regex: Zero Coverage and Metric-Dependent Divergence Under Adversarial Mutation","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-02T11:28:38.527313Z"},"links":{"cited_paper":"/paper/2510.09023","citing_paper":"/paper/2607.20494"},"observation_digest":"sha256:149f1c22b6c5c525e4570f1fc2a4e51ada733804bab55d351a5db26e4113d183","observation_id":"1f742de5-c86e-41e1-b078-a9d2dbdf6862","resolution":{"observed_at":"2026-08-02T11:28:38.527313Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T11:28:38.727068Z","title":"Owasp top 10 for large language model applications, 2025 edition, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.20494","last_updated":"2026-06-12T18:54:24Z","snapshot_observed_at":"2026-08-06T10:05:02.223857Z","submitted_at":"2026-06-12T18:54:24Z","title":"Isolating LLM Alignment from Regex: Zero Coverage and Metric-Dependent Divergence Under Adversarial Mutation","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-02T11:28:38.727068Z"},"links":{"citing_paper":"/paper/2607.20494"},"observation_digest":"sha256:7fedbbd583e95effcf86892086e09573782e8b5e5fc0e5f48466d7947179f489","observation_id":"80850596-fa20-46c3-9daa-910babee63b5","resolution":{"observed_at":"2026-08-02T11:28:38.727068Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T11:28:38.858688Z","title":"Ignore previous prompt: Attack techniques for language models","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.20494","last_updated":"2026-06-12T18:54:24Z","snapshot_observed_at":"2026-08-06T10:05:02.223857Z","submitted_at":"2026-06-12T18:54:24Z","title":"Isolating LLM Alignment from Regex: Zero Coverage and Metric-Dependent Divergence Under Adversarial Mutation","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-02T11:28:38.858688Z"},"links":{"citing_paper":"/paper/2607.20494"},"observation_digest":"sha256:f529ad539f78e21f704401ba8d16401123a9edcc4ea51505fe5053209180ec0d","observation_id":"7ac60f2f-6ab6-4044-a69d-caa59404613b","resolution":{"observed_at":"2026-08-02T11:28:38.858688Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T11:28:39.007722Z","title":"Picus security cybersecurity glos- sary, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.20494","last_updated":"2026-06-12T18:54:24Z","snapshot_observed_at":"2026-08-06T10:05:02.223857Z","submitted_at":"2026-06-12T18:54:24Z","title":"Isolating LLM Alignment from Regex: Zero Coverage and Metric-Dependent Divergence Under Adversarial Mutation","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-02T11:28:39.007722Z"},"links":{"citing_paper":"/paper/2607.20494"},"observation_digest":"sha256:fdbcdafbbb98ccd8337fa637b0a644c193370ec52d37d5dda0adef7976b8cf92","observation_id":"6e4cb176-7387-43f9-a93d-bfc4f7ccd239","resolution":{"observed_at":"2026-08-02T11:28:39.007722Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T11:28:39.087405Z","title":"Safebreach validate — breach and attack simulation, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.20494","last_updated":"2026-06-12T18:54:24Z","snapshot_observed_at":"2026-08-06T10:05:02.223857Z","submitted_at":"2026-06-12T18:54:24Z","title":"Isolating LLM Alignment from Regex: Zero Coverage and Metric-Dependent Divergence Under Adversarial Mutation","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-02T11:28:39.087405Z"},"links":{"citing_paper":"/paper/2607.20494"},"observation_digest":"sha256:49824746ffc5fab5e51fedf34d4aaaa4d551a4421ab569318299dec1aad759c5","observation_id":"d6435f18-232e-4e0c-8f3f-7b1c0eefef97","resolution":{"observed_at":"2026-08-02T11:28:39.087405Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.10260","last_updated":"2024-08-27T03:32:47Z","snapshot_observed_at":"2026-08-04T21:32:35.483431Z","submitted_at":"2024-02-15T18:58:09Z","title":"A StrongREJECT for Empty Jailbreaks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.10260","snapshot_observed_at":"2026-08-02T11:28:39.178825Z","title":"A StrongREJECT for empty jailbreaks, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.20494","last_updated":"2026-06-12T18:54:24Z","snapshot_observed_at":"2026-08-06T10:05:02.223857Z","submitted_at":"2026-06-12T18:54:24Z","title":"Isolating LLM Alignment from Regex: Zero Coverage and Metric-Dependent Divergence Under Adversarial Mutation","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-02T11:28:39.178825Z"},"links":{"cited_paper":"/paper/2402.10260","citing_paper":"/paper/2607.20494"},"observation_digest":"sha256:2329dbe14124eb08b3fa0a9e644474f9f1fd3bcc6c11c7fbc3be1aff6177290a","observation_id":"6b17ce4e-7a70-4af2-9e67-1a28d4e12cb9","resolution":{"observed_at":"2026-08-02T11:28:39.178825Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.02483","last_updated":"2023-07-05T17:58:10Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-07-05T17:58:10Z","title":"Jailbroken: How Does LLM Safety Training Fail?","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.02483","snapshot_observed_at":"2026-08-02T11:28:39.288982Z","title":"Jailbroken: How does llm safety training fail?NeurIPS, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.20494","last_updated":"2026-06-12T18:54:24Z","snapshot_observed_at":"2026-08-06T10:05:02.223857Z","submitted_at":"2026-06-12T18:54:24Z","title":"Isolating LLM Alignment from Regex: Zero Coverage and Metric-Dependent Divergence Under Adversarial Mutation","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-02T11:28:39.288982Z"},"links":{"cited_paper":"/paper/2307.02483","citing_paper":"/paper/2607.20494"},"observation_digest":"sha256:bd43961d32a6a936dfee3248d7e11155857e25bcf38ed187494a345b4ca469ad","observation_id":"fdccb6d3-84e5-4221-80f9-79ed6270c21b","resolution":{"observed_at":"2026-08-02T11:28:39.288982Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-07-06T15:59:23.019044Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-08-02T11:28:39.513893Z","title":"Zico Kolter, and Matt Fredrik- son","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.20494","last_updated":"2026-06-12T18:54:24Z","snapshot_observed_at":"2026-08-06T10:05:02.223857Z","submitted_at":"2026-06-12T18:54:24Z","title":"Isolating LLM Alignment from Regex: Zero Coverage and Metric-Dependent Divergence Under Adversarial Mutation","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-02T11:28:39.513893Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2607.20494"},"observation_digest":"sha256:8cb0d811f43ab4df15d829a64a9502721ad931c56720ec6170c26a39725db908","observation_id":"a818b48f-8fad-4890-8a47-33f7a02d9965","resolution":{"observed_at":"2026-08-02T11:28:39.513893Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T11:28:39.629276Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.20494","last_updated":"2026-06-12T18:54:24Z","snapshot_observed_at":"2026-08-06T10:05:02.223857Z","submitted_at":"2026-06-12T18:54:24Z","title":"Isolating LLM Alignment from Regex: Zero Coverage and Metric-Dependent Divergence Under Adversarial Mutation","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-02T11:28:39.629276Z"},"links":{"citing_paper":"/paper/2607.20494"},"observation_digest":"sha256:90e3eccca389a95b09fcfaee0b12697bc72d830c8e0dcf36f244ccd7e07ef7bc","observation_id":"afc47a2c-9988-4121-81ce-a34f5afdb2fc","resolution":{"observed_at":"2026-08-02T11:28:39.629276Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T11:28:39.748091Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.20494","last_updated":"2026-06-12T18:54:24Z","snapshot_observed_at":"2026-08-06T10:05:02.223857Z","submitted_at":"2026-06-12T18:54:24Z","title":"Isolating LLM Alignment from Regex: Zero Coverage and Metric-Dependent Divergence Under Adversarial Mutation","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-02T11:28:39.748091Z"},"links":{"citing_paper":"/paper/2607.20494"},"observation_digest":"sha256:7ccf07013e3a894eee351fd7be6a45609d1f4cb27a8615badf1c930dafda8461","observation_id":"65ca08ca-84c1-419e-98d1-fc9645d5d103","resolution":{"observed_at":"2026-08-02T11:28:39.748091Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T11:28:39.869969Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.20494","last_updated":"2026-06-12T18:54:24Z","snapshot_observed_at":"2026-08-06T10:05:02.223857Z","submitted_at":"2026-06-12T18:54:24Z","title":"Isolating LLM Alignment from Regex: Zero Coverage and Metric-Dependent Divergence Under Adversarial Mutation","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-02T11:28:39.869969Z"},"links":{"citing_paper":"/paper/2607.20494"},"observation_digest":"sha256:537d8e5d4e374ca0ca700fa54eb192db793bee1377a0bb53f2202df4418fcfde","observation_id":"1d50c474-2f33-4fab-bdaf-37058baca504","resolution":{"observed_at":"2026-08-02T11:28:39.869969Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T11:28:40.007247Z","title":"Alignment-isolate probes( N= 13) followed the same process but with an additional criterion: the probe must not useanyencoding, obfuscation, or structural framing technique","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.20494","last_updated":"2026-06-12T18:54:24Z","snapshot_observed_at":"2026-08-06T10:05:02.223857Z","submitted_at":"2026-06-12T18:54:24Z","title":"Isolating LLM Alignment from Regex: Zero Coverage and Metric-Dependent Divergence Under Adversarial Mutation","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-02T11:28:40.007247Z"},"links":{"citing_paper":"/paper/2607.20494"},"observation_digest":"sha256:179196afe9128021d96b0e19addbafd79253602210aa4a20620b26a8be2f033f","observation_id":"621e182b-be23-4a66-b572-34574336db4c","resolution":{"observed_at":"2026-08-02T11:28:40.007247Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T11:28:38.282303Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.20494","last_updated":"2026-06-12T18:54:24Z","snapshot_observed_at":"2026-08-06T10:05:02.223857Z","submitted_at":"2026-06-12T18:54:24Z","title":"Isolating LLM Alignment from Regex: Zero Coverage and Metric-Dependent Divergence Under Adversarial Mutation","version":1},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-02T11:28:38.282303Z"},"links":{"citing_paper":"/paper/2607.20494"},"observation_digest":"sha256:a0841eb36269e6f98904717432fa386f6c8e2a648abc53226751873b28290e70","observation_id":"fd88f517-580f-4b17-ac49-975440905bca","resolution":{"observed_at":"2026-08-02T11:28:38.282303Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2607.20494","last_updated":"2026-06-12T18:54:24Z","latest_version":1,"primary_category":"cs.AI","snapshot_observed_at":"2026-08-06T10:05:02.223857Z","submitted_at":"2026-06-12T18:54:24Z","title":"Isolating LLM Alignment from Regex: Zero Coverage and Metric-Dependent Divergence Under Adversarial Mutation"},"reference_resolution":{"displayed":25,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":25,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":25},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 25 of 25 outbound references and 0 inbound Pith citation observations for arXiv:2607.20494."}