{"as_of":"2026-08-08T15:21:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:7625c91901a10503676019128cc22bcaed7f4c982034e1bc5e22b93d06ca024c","coverage":[{"denominator":86,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":86,"source":"paper_references, paper_reference_links","source_observed_at":"2026-07-30T20:11:00.934085Z","state":"measured"},{"denominator":86,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":86,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2607.26820/citation-record","integrity":"/paper/2607.26820/integrity","json":"/paper/2607.26820/citation-record.json","paper":"/paper/2607.26820"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T20:10:58.635743Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-07-30T20:10:58.635743Z"},"links":{"citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:a2da2c175c7481c844369c1c72afc8f6502ea05f7fc788667b1420274b1e914c","observation_id":"4b04799a-7e9e-4ea8-893f-cfc2a76a5cbb","resolution":{"observed_at":"2026-07-30T20:10:58.635743Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T20:10:58.693255Z","title":"J.; and Wong, E","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-07-30T20:10:58.693255Z"},"links":{"citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:7d54fb98373c3f2008ad3faa1f896a60241bcd6f01268761b99e5e07174237f5","observation_id":"95eb2da0-9811-46e9-87b0-374b35a06797","resolution":{"observed_at":"2026-07-30T20:10:58.693255Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T20:10:58.749563Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-07-30T20:10:58.749563Z"},"links":{"citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:e71c9a23168f0ad3c63725e907d5fd1df767f659eda0cf456279b8408d9a40fc","observation_id":"beefb022-6855-4651-9d9f-dd3cf6116c65","resolution":{"observed_at":"2026-07-30T20:10:58.749563Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T20:10:58.806235Z","title":"N.; Padmakumar, A.; Rebedea, T.; Varghese, J","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-07-30T20:10:58.806235Z"},"links":{"citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:5770f68ad6cd8a9b12c157b3ee9393f5b1813bf0e96c6e27c4930f61a825381f","observation_id":"d87a9bf6-8131-4830-a09a-34654ee838f4","resolution":{"observed_at":"2026-07-30T20:10:58.806235Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T20:10:59.061991Z","title":"Y.; Lambert, N.; Choi, Y.; and Dziri, N","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-07-30T20:10:59.061991Z"},"links":{"citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:52595d60024927b5b3a6bcb7740634d601fafe2e606b1e928373a5922f22096e","observation_id":"3d630a9e-32d8-461b-8e1a-2c5e4731c2c2","resolution":{"observed_at":"2026-07-30T20:10:59.061991Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T20:10:59.204766Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-07-30T20:10:59.204766Z"},"links":{"citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:a336fe952f171d8b5bbc71cb3564669e509d1b242a2ebd6ecc720fa005b420c1","observation_id":"203007c2-5447-485e-bf87-8a61713f8ae7","resolution":{"observed_at":"2026-07-30T20:10:59.204766Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T20:10:59.375323Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-07-30T20:10:59.375323Z"},"links":{"citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:28cd29402e1f0ac9ff99b9f34c599f2d833ff5e1a460bbed97959b78f616df92","observation_id":"5b4f2678-2f52-4673-9551-11e5e072cd88","resolution":{"observed_at":"2026-07-30T20:10:59.375323Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T20:10:59.590214Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-07-30T20:10:59.590214Z"},"links":{"citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:49edfb58e5aa8d30008df63ce8b02ba91ac8f4c1aa77d7aafdce40b2805be7c1","observation_id":"332e71d9-acea-4cfe-9ce7-3d338096f234","resolution":{"observed_at":"2026-07-30T20:10:59.590214Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T20:10:59.710487Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-07-30T20:10:59.710487Z"},"links":{"citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:aaf493ab9171379867d2d3235c58f93d2adaf2cc7a86e892a139ad21cdf8a970","observation_id":"f35373a8-ce36-41bb-948e-058f747cdad3","resolution":{"observed_at":"2026-07-30T20:10:59.710487Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T20:10:59.964686Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-07-30T20:10:59.964686Z"},"links":{"citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:15153125997e06c549a0bdf12436e5c8e81d4a887bef66b6e55730c188033c18","observation_id":"6ca73399-20c4-449b-aa2d-74bf9b4b1be5","resolution":{"observed_at":"2026-07-30T20:10:59.964686Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T20:11:00.078531Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.078531Z"},"links":{"citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:d3eb8d070fd89ebada95dfa3c8e182e5cdc5286031da479e17dcaac86f510d7e","observation_id":"53eea988-3a68-423c-9892-bb2f7a761413","resolution":{"observed_at":"2026-07-30T20:11:00.078531Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T20:11:00.228624Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.228624Z"},"links":{"citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:44d93603db40538f5dccf360eb216e6ecaa714a8378883543d57e493d1386719","observation_id":"80642b6c-5ecd-4e1c-9383-f4e3842c023b","resolution":{"observed_at":"2026-07-30T20:11:00.228624Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T20:11:00.377746Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.377746Z"},"links":{"citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:64fd27a1fd6757d848192be7a444c94e2e9e75249d74d0cb15e6f82ffa3958be","observation_id":"12f1c9f5-62cc-4597-9587-4c7975f2bbcf","resolution":{"observed_at":"2026-07-30T20:11:00.377746Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T20:11:00.494319Z","title":"R.; Palangi, H.; Chang, K.-W.; Choi, Y.; and Gabriel, S","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.494319Z"},"links":{"citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:eedc5f6864b3ca4b3d662e8cef8cc597c28b0a9c2b4568a0821b8f4fa5b1ba8b","observation_id":"2fbd5d3f-2e29-49cc-922f-f68346acd876","resolution":{"observed_at":"2026-07-30T20:11:00.494319Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T20:11:00.550082Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.550082Z"},"links":{"citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:ea802a49f82609d061780e139923ca76b8660096caecb9126e40c69bfcf7cea4","observation_id":"fe8f6620-6d8a-4cf7-be45-ddb55e9a98bb","resolution":{"observed_at":"2026-07-30T20:11:00.550082Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T20:11:00.668693Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.668693Z"},"links":{"citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:476ddfc70d0209205e8b03e7142c8b4a9efba16fa5f04c5cfdb203bdabf0e153","observation_id":"d41aa80f-521f-4c0e-86a4-8b746013c219","resolution":{"observed_at":"2026-07-30T20:11:00.668693Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T20:11:00.707303Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.707303Z"},"links":{"citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:4394afe5077fbff3762df17896cc233545e515ded276cb8d77d3252b6baf1318","observation_id":"90926020-1ae0-4115-9593-b0c21e493868","resolution":{"observed_at":"2026-07-30T20:11:00.707303Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T20:11:00.710607Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.710607Z"},"links":{"citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:c1aa038ab86f9a1f26551e045d597dd26428b734d686b77bbfe8efe657f6833b","observation_id":"4419244d-b7c0-4c12-9b51-37459f1e67db","resolution":{"observed_at":"2026-07-30T20:11:00.710607Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T20:11:00.717117Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.717117Z"},"links":{"citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:25d4b278f0615bfa180e1af7ec77e15982c83ebbd04dac5de782cf4050e1ec5a","observation_id":"7633a12f-e4fc-43fa-b15a-d28a37444349","resolution":{"observed_at":"2026-07-30T20:11:00.717117Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T20:11:00.719851Z","title":"V.; Zhou, D.; et al","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.719851Z"},"links":{"citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:c15ad43f1e5010e617c52ae3223836cc478f17160840fecbf8a8eb2ce4f5ff64","observation_id":"c0306bb7-5108-4f32-bb88-2737b13d4881","resolution":{"observed_at":"2026-07-30T20:11:00.719851Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T20:11:00.722592Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.722592Z"},"links":{"citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:9392ed4f0381da9b696fec3ab7e15ca2d462bc86e6686518efd72b2d440b15e5","observation_id":"ce33fec6-2db2-460c-9ca2-e19aaf14908c","resolution":{"observed_at":"2026-07-30T20:11:00.722592Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T20:11:00.725597Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.725597Z"},"links":{"citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:5ef87a5cd9084a847983226ecf66cc74f46e74d71c4bd8554fec9c8d288895c8","observation_id":"2d5b0c7c-4002-48db-beb7-f126da137905","resolution":{"observed_at":"2026-07-30T20:11:00.725597Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T20:11:00.728637Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.728637Z"},"links":{"citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:5759d9da0e504b62942cc3c40f1bab07844b51d7d7a764e89fe61ff0219cd258","observation_id":"f756d820-ebbf-47bd-9c2f-6114608ced2f","resolution":{"observed_at":"2026-07-30T20:11:00.728637Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T20:11:00.738383Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.738383Z"},"links":{"citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:e0c2e2329d3edd03d0f7d98846e419e058c81974bdb6d8af0304429027381505","observation_id":"30bb70da-4547-4bc8-883f-e64659573590","resolution":{"observed_at":"2026-07-30T20:11:00.738383Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T20:11:00.741392Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":38,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.741392Z"},"links":{"citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:050f3d00d257ea2124205e541106eb0c4de32670e2d166f99eb2eaef7ce1b311","observation_id":"aac9803e-c520-4528-b253-86e695115fbb","resolution":{"observed_at":"2026-07-30T20:11:00.741392Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T20:11:00.747130Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":40,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.747130Z"},"links":{"citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:aa8a23624f362fcda1aaf9f65d2acc0a41a1feaa87ff44a8866ec3c72816205a","observation_id":"513919bd-00fd-47bc-bdec-7f15550b3655","resolution":{"observed_at":"2026-07-30T20:11:00.747130Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T20:11:00.750199Z","title":"B.; and Gan, C","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":41,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.750199Z"},"links":{"citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:5d49380e4f3793ad9c7b703deb7d3b9aaae98f69cc87037c1080f92b8f347b9f","observation_id":"b25389d1-b124-4a0d-ba5e-2d5431f5cb44","resolution":{"observed_at":"2026-07-30T20:11:00.750199Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T20:11:00.753104Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":42,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.753104Z"},"links":{"citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:8f26775f372de40c1004f5a7ca5b355d315eb293e8079ee90ef86a6660f21928","observation_id":"62af4e16-8249-441a-b8cb-06078e9468db","resolution":{"observed_at":"2026-07-30T20:11:00.753104Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T20:11:00.768236Z","title":"https://www.anthropic.com/news/introducing-claude , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":47,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.768236Z"},"links":{"citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:fd45cc1a3257d2a3baf71249352c7596add4925408d72beff5359843a3163a8d","observation_id":"a43f385e-5450-4710-9dee-f047eaca764d","resolution":{"observed_at":"2026-07-30T20:11:00.768236Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.09388","last_updated":"2025-05-14T13:41:34Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-05-14T13:41:34Z","title":"Qwen3 Technical Report","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.09388","snapshot_observed_at":"2026-07-30T20:11:00.770982Z","title":"arXiv preprint arXiv:2505.09388 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":48,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.770982Z"},"links":{"cited_paper":"/paper/2505.09388","citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:5320eeacc4b212c0bf9aa56f282626bcda4f95e79ce5a323b7288f5fcce9822e","observation_id":"aa3a0831-b16a-4825-83b9-e7d82183d983","resolution":{"observed_at":"2026-07-30T20:11:00.770982Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.19437","last_updated":"2025-02-18T17:26:38Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-12-27T04:03:16Z","title":"DeepSeek-V3 Technical Report","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.19437","snapshot_observed_at":"2026-07-30T20:11:00.774016Z","title":"arXiv preprint arXiv:2412.19437 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":49,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.774016Z"},"links":{"cited_paper":"/paper/2412.19437","citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:996cadd9d2bcdddc46e2e3ffe5774fd8ac3e51cfb61fb97012c1e6c25f87580d","observation_id":"3ac580b4-e13f-4f0e-b00a-b720d0cac06b","resolution":{"observed_at":"2026-07-30T20:11:00.774016Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2501.12948","last_updated":"2026-01-04T03:57:36Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-01-22T15:19:35Z","title":"DeepSeek-R1: Incentivizing Reasoning Capability in LLMs via Reinforcement Learning","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.12948","snapshot_observed_at":"2026-07-30T20:11:00.777417Z","title":"arXiv preprint arXiv:2501.12948 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":50,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.777417Z"},"links":{"cited_paper":"/paper/2501.12948","citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:278628541bf4212f5efa212a05f14fbc7d2311058ce607e056030b3c73d17a04","observation_id":"12f56da9-e660-4447-bbc9-fe1729953b16","resolution":{"observed_at":"2026-07-30T20:11:00.777417Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.12793","last_updated":"2024-07-30T03:58:11Z","snapshot_observed_at":"2026-08-07T13:56:34.167869Z","submitted_at":"2024-06-18T16:58:21Z","title":"ChatGLM: A Family of Large Language Models from GLM-130B to GLM-4 All Tools","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.12793","snapshot_observed_at":"2026-07-30T20:11:00.780508Z","title":"arXiv preprint arXiv:2406.12793 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":51,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.780508Z"},"links":{"cited_paper":"/paper/2406.12793","citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:7e20ea152e44423090fac83d51b236c073643dcc556efd232bcf6febcbdee008","observation_id":"935d5775-c0f1-43a7-94dc-6a862edaf1a4","resolution":{"observed_at":"2026-07-30T20:11:00.780508Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T20:11:00.783605Z","title":"Proceedings of the 2023 conference on empirical methods in natural language processing , pages=","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":52,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.783605Z"},"links":{"citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:3f4179b061df6d187037ad0851b11df3a21047f59bc981e2fbecd1e9bbd8e6e3","observation_id":"b0582f64-2058-4f80-a9a8-0d8532b09889","resolution":{"observed_at":"2026-07-30T20:11:00.783605Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2302.10198","last_updated":"2023-03-02T14:33:12Z","snapshot_observed_at":"2026-08-03T13:12:38.847362Z","submitted_at":"2023-02-19T12:29:33Z","title":"Can ChatGPT Understand Too? A Comparative Study on ChatGPT and Fine-tuned BERT","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2302.10198","snapshot_observed_at":"2026-07-30T20:11:00.786338Z","title":"arXiv preprint arXiv:2302.10198 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":53,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.786338Z"},"links":{"cited_paper":"/paper/2302.10198","citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:51206e2946b9b7c08bd960849f22f5d53e753ecc4924250e8b4d9f4f9f8bd5b7","observation_id":"30b5b061-3b76-4a61-a932-33f0bc455a4d","resolution":{"observed_at":"2026-07-30T20:11:00.786338Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T20:11:00.789997Z","title":"The Eleventh International Conference on Learning Representations , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":54,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.789997Z"},"links":{"citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:ae78b6b1a8692dc8b9b7551715b7bc5147f69b339c7f86d844ba20fd855c55b2","observation_id":"a520c33b-0f4a-4d1c-9888-2ec1a004ccb0","resolution":{"observed_at":"2026-07-30T20:11:00.789997Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T20:11:00.792988Z","title":"Findings of the Association for Computational Linguistics: EMNLP 2023 , pages=","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":55,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.792988Z"},"links":{"citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:9a1a2855b69c57d3941e4443e54b2de68d73bf8ce377d63e4bbb7c8634732e66","observation_id":"d649c760-25b7-4320-a791-7c210f302de8","resolution":{"observed_at":"2026-07-30T20:11:00.792988Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T20:11:00.795950Z","title":"Advances in neural information processing systems , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":56,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.795950Z"},"links":{"citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:5e9f00f0dd9f2014b33d8d0fbc5fb6a38f26682966dc03c6f9c9d6dad6dec3fd","observation_id":"f15509d0-d7ea-438d-b09b-9aa2e246a702","resolution":{"observed_at":"2026-07-30T20:11:00.795950Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T20:11:00.799112Z","title":"Proceedings of the 2024 Conference of the North American Chapter of the Association for Computational Linguistics: Human Language Technologies (Volume 1: Long Papers) , pages=","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":57,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.799112Z"},"links":{"citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:e94e9f1358b2c816546822757e0afdf55e1514c9d2925825f063ca9c24afb4fb","observation_id":"4b0c5ac8-08df-44e2-a26d-d3df18ea74b1","resolution":{"observed_at":"2026-07-30T20:11:00.799112Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T20:11:00.802053Z","title":"Neurips Safe Generative AI Workshop 2024 , year=","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":58,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.802053Z"},"links":{"citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:562716c0eceb5c7875bf482ec89fb017a6dfeb7b60386c4d82b96957948bc8c3","observation_id":"38b291c1-42cb-430d-8c5c-1e37555129ea","resolution":{"observed_at":"2026-07-30T20:11:00.802053Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T20:11:00.804864Z","title":"arXiv preprint arXiv:2506.19676 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":59,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.804864Z"},"links":{"citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:bf40b53ce34edb05b82d0fff278d439dc0bf093adee532c2151728a3b1b87bfe","observation_id":"dcff6aa1-7845-4ff5-a544-76e57401ae84","resolution":{"observed_at":"2026-07-30T20:11:00.804864Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2303.08774","last_updated":"2024-03-04T06:01:33Z","snapshot_observed_at":"2026-08-07T07:30:12.213965Z","submitted_at":"2023-03-15T17:15:04Z","title":"GPT-4 Technical Report","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.08774","snapshot_observed_at":"2026-07-30T20:11:00.807643Z","title":"arXiv preprint arXiv:2303.08774 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":60,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.807643Z"},"links":{"cited_paper":"/paper/2303.08774","citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:00dd83814da871d2754a5697b0a4388f1e84315566faa76c968e6f13a2179c98","observation_id":"781c9b36-9474-4298-80a9-a5729eacc2cd","resolution":{"observed_at":"2026-07-30T20:11:00.807643Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.09288","last_updated":"2023-07-19T17:08:59Z","snapshot_observed_at":"2026-08-07T12:56:43.323460Z","submitted_at":"2023-07-18T14:31:57Z","title":"Llama 2: Open Foundation and Fine-Tuned Chat Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.09288","snapshot_observed_at":"2026-07-30T20:11:00.810168Z","title":"arXiv preprint arXiv:2307.09288 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":61,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.810168Z"},"links":{"cited_paper":"/paper/2307.09288","citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:8f4607cdb7d3b25315db6a62aaf8e2bfaf2d56b746f1bab6b9b300087765f194","observation_id":"26d10d7b-245f-4d3e-ba49-196feb191fce","resolution":{"observed_at":"2026-07-30T20:11:00.810168Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.21783","last_updated":"2024-11-23T23:27:33Z","snapshot_observed_at":"2026-07-06T18:55:11.576666Z","submitted_at":"2024-07-31T17:54:27Z","title":"The Llama 3 Herd of Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.21783","snapshot_observed_at":"2026-07-30T20:11:00.814297Z","title":"arXiv preprint arXiv:2407.21783 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":62,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.814297Z"},"links":{"cited_paper":"/paper/2407.21783","citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:430ac98260836d2d61b04b66c0838fd9298ada8d3b688aa4b223a279c4c9a920","observation_id":"fa5e468f-e854-4bdc-96f0-3cc8ca3e3c16","resolution":{"observed_at":"2026-07-30T20:11:00.814297Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T20:11:00.817416Z","title":"Advances in neural information processing systems , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":63,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.817416Z"},"links":{"citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:df1356f5d633b51ecf9316c363a6fdd84c46d91dc0457e7239a4b7955d7bc086","observation_id":"90cd18b6-7d05-4ac7-bab3-9f916bb123b9","resolution":{"observed_at":"2026-07-30T20:11:00.817416Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2212.08073","last_updated":"2022-12-15T06:19:23Z","snapshot_observed_at":"2026-08-02T04:53:58.766070Z","submitted_at":"2022-12-15T06:19:23Z","title":"Constitutional AI: Harmlessness from AI Feedback","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2212.08073","snapshot_observed_at":"2026-07-30T20:11:00.820174Z","title":"arXiv preprint arXiv:2212.08073 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":64,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.820174Z"},"links":{"cited_paper":"/paper/2212.08073","citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:5907f3b2987467fd54e8546c33d33e5c70ef2eef7d2d66a40c533412e00789ff","observation_id":"1b4bb89b-cb2d-4865-b68b-74e0ba5627b8","resolution":{"observed_at":"2026-07-30T20:11:00.820174Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T20:11:00.823275Z","title":"Advances in neural information processing systems , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":65,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.823275Z"},"links":{"citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:c91290b5d8b19c3823afd20c902efa97d65f23f6c0d869201ce051e487337e00","observation_id":"dda64bf7-ba1c-4f5e-87e6-6f5b8b6c4f10","resolution":{"observed_at":"2026-07-30T20:11:00.823275Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T20:11:00.826054Z","title":"11th International Conference on Learning Representations, ICLR 2023 , year=","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":66,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.826054Z"},"links":{"citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:b735aefc1df2830407abf6a137420091db8975bc1ecc83b0ebed265a7f5838d4","observation_id":"5741105d-70c7-456d-8104-798747687844","resolution":{"observed_at":"2026-07-30T20:11:00.826054Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T20:11:00.829084Z","title":"Advances in neural information processing systems , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":67,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.829084Z"},"links":{"citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:c1088d7a1e74839be5ec1d44fcf2e425549b65d77ecfd879d9c5a15ad93eee73","observation_id":"fb93efb9-a43d-4713-a883-e8687d47aca0","resolution":{"observed_at":"2026-07-30T20:11:00.829084Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T20:11:00.832172Z","title":"ICLR 2024 Workshop on Large Language Model (LLM) Agents , year=","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":68,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.832172Z"},"links":{"citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:5a3e8711511cad71f991f9fe39affb29eac75028d74e0e85ab5f9770af3750b4","observation_id":"03a360ea-7e0d-4b07-97ef-3758f8313e82","resolution":{"observed_at":"2026-07-30T20:11:00.832172Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T20:11:00.835432Z","title":"International Conference on Learning Representations , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":69,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.835432Z"},"links":{"citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:bc958cd2c25d4d0a5d60f9ec18f353851fc3a360fed1b156b545e595a1594614","observation_id":"68eb0662-519c-487d-a6b5-50dcfdf73d2f","resolution":{"observed_at":"2026-07-30T20:11:00.835432Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-07-06T15:59:23.019044Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-07-30T20:11:00.838280Z","title":"arXiv preprint arXiv:2307.15043 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":70,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.838280Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:45a2ec157b89d2fcbe89c2533f0c1566e109a668f92ab56cc6b87f5a48e73126","observation_id":"9482df31-27d0-4206-a1f2-f1a590ad2f73","resolution":{"observed_at":"2026-07-30T20:11:00.838280Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T20:11:00.840993Z","title":"Advances in neural information processing systems , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":71,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.840993Z"},"links":{"citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:3120522402244c26fcb4880333e72334be13ad65ddbf64124b37a1c1f7eac048","observation_id":"2d42f255-50f0-4122-af6a-9515a66fec9f","resolution":{"observed_at":"2026-07-30T20:11:00.840993Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T20:11:00.843859Z","title":"2025 IEEE Conference on Secure and Trustworthy Machine Learning (SaTML) , pages=","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":72,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.843859Z"},"links":{"citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:ee23024e448d48bf169db541df2a12dd7dec5d920ae540642da657c707b7f822","observation_id":"0b87a18f-da10-46bc-9c18-bfe1fcff9959","resolution":{"observed_at":"2026-07-30T20:11:00.843859Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T20:11:00.846981Z","title":"Advances in Neural Information Processing Systems , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":73,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.846981Z"},"links":{"citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:15ac247ed5f7d8ca9ff9e403e49d34374e8cbec0efe7fe771a54cbb327c4adc3","observation_id":"f707a609-2bdb-4be6-9558-68465fffefa5","resolution":{"observed_at":"2026-07-30T20:11:00.846981Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T20:11:00.849735Z","title":"International Conference on Learning Representations , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":74,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.849735Z"},"links":{"citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:61421e77506f12462ee4eb157ed88718d806bb2f7179716486faa6ccb8a55b76","observation_id":"d99b3b0e-af2a-4721-9707-823f31016ba3","resolution":{"observed_at":"2026-07-30T20:11:00.849735Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T20:11:00.852576Z","title":"33rd USENIX Security Symposium (USENIX Security 24) , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":75,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.852576Z"},"links":{"citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:305f0848b95366c8b7ef22257dc99c6c8dd8ab3c6b79651a3cdc1418c91b9a79","observation_id":"260d5672-0e39-46d5-a9cd-1e57f9513e2e","resolution":{"observed_at":"2026-07-30T20:11:00.852576Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T20:11:00.855343Z","title":"34th USENIX Security Symposium (USENIX Security 25) , pages=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":76,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.855343Z"},"links":{"citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:14d9be92d824e1060524d0467b01b48eddb886ed343edf3100f40dfa2f0911d3","observation_id":"ba4ba950-383e-45af-b2ca-ed80ef13e0aa","resolution":{"observed_at":"2026-07-30T20:11:00.855343Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.05610","last_updated":"2024-05-09T08:15:21Z","snapshot_observed_at":"2026-08-07T23:14:50.230915Z","submitted_at":"2024-05-09T08:15:21Z","title":"Chain of Attack: a Semantic-Driven Contextual Multi-Turn attacker for LLM","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.05610","snapshot_observed_at":"2026-07-30T20:11:00.858023Z","title":"arXiv preprint arXiv:2405.05610 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":77,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.858023Z"},"links":{"cited_paper":"/paper/2405.05610","citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:10c5a3bc0a9ede349a807b8b17dbf649a578ccc948a7d77e008bff16d9d1238c","observation_id":"bc1cc635-b8c1-421b-90e9-9363af1ad12d","resolution":{"observed_at":"2026-07-30T20:11:00.858023Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T20:11:00.860629Z","title":"Red Teaming GenAI: What Can We Learn from Adversaries? , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":78,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.860629Z"},"links":{"citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:de3da58b1e7b024048c59974aba85b19836da9f751fde6980c5f2b7fbaf8e557","observation_id":"7dda0d18-01d8-4863-b6f8-a5e5639c331d","resolution":{"observed_at":"2026-07-30T20:11:00.860629Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T20:11:00.863400Z","title":"Findings of the Association for Computational Linguistics: ACL 2025 , pages=","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":79,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.863400Z"},"links":{"citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:eff89baab6e8d61d14521475eab9793f60ec010e60131734de16f035296ecaf7","observation_id":"e81f7334-9d2e-41f3-bb17-f9a0c649a8ad","resolution":{"observed_at":"2026-07-30T20:11:00.863400Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T20:11:00.866236Z","title":"Proceedings of the 63rd Annual Meeting of the Association for Computational Linguistics (Volume 1: Long Papers) , pages=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":80,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.866236Z"},"links":{"citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:983cd3bb1cb28ba81036bef8e2829627b661728c283b71942cec19e56a355bf7","observation_id":"a3e3c374-3480-4379-9822-543521e36928","resolution":{"observed_at":"2026-07-30T20:11:00.866236Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T20:11:00.869658Z","title":"Second Conference on Language Modeling , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":81,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.869658Z"},"links":{"citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:199fa6f18062fc95f2a8afbf01605d68ac906991f0adb199b4d30532a739b1a9","observation_id":"86487206-81ba-4049-9915-85cf968b6c41","resolution":{"observed_at":"2026-07-30T20:11:00.869658Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T20:11:00.872400Z","title":"Proceedings of the 2025 Conference on Empirical Methods in Natural Language Processing , pages=","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":82,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.872400Z"},"links":{"citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:322c601d0c98f25a23cc4158f3321da91b8a2b1f32e6de169aad82788a75730b","observation_id":"d745e40b-7c4b-4bc9-927c-b87461448464","resolution":{"observed_at":"2026-07-30T20:11:00.872400Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T20:11:00.875355Z","title":"arXiv preprint arXiv:2601.20903 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":83,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.875355Z"},"links":{"citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:41c011aaef9445b367d2e18bbd129e278ae961f0c64ef495ba536ed295c82bdd","observation_id":"674969db-c7f5-4be9-a03b-a365a16197d4","resolution":{"observed_at":"2026-07-30T20:11:00.875355Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.10619","last_updated":"2025-05-28T09:31:33Z","snapshot_observed_at":"2026-08-07T17:06:11.255557Z","submitted_at":"2025-03-13T17:57:32Z","title":"Tempest: Autonomous Multi-Turn Jailbreaking of Large Language Models with Tree Search","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.10619","snapshot_observed_at":"2026-07-30T20:11:00.877932Z","title":"arXiv preprint arXiv:2503.10619 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":84,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.877932Z"},"links":{"cited_paper":"/paper/2503.10619","citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:14c373b85c6df0f2456d81a49c9234e0611c5812d4ab01fc2b058992ac23911f","observation_id":"0baaf9e3-a3da-45fd-9117-c5c074ef5db7","resolution":{"observed_at":"2026-07-30T20:11:00.877932Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.06674","last_updated":"2023-12-07T19:40:50Z","snapshot_observed_at":"2026-07-06T17:00:00.321552Z","submitted_at":"2023-12-07T19:40:50Z","title":"Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversations","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.06674","snapshot_observed_at":"2026-07-30T20:11:00.880602Z","title":"arXiv preprint arXiv:2312.06674 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":85,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.880602Z"},"links":{"cited_paper":"/paper/2312.06674","citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:7cc4ad90ecc74bcba728a91dd7436fd9680f5cecd4ad238178743b5680d20279","observation_id":"827e16a9-8ddc-4718-9556-0f5e74388612","resolution":{"observed_at":"2026-07-30T20:11:00.880602Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T20:11:00.883238Z","title":"Advances in neural information processing systems , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":86,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.883238Z"},"links":{"citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:d205a96b87ea3f431c5848ee4c2213092bbab8c926937733c736ac592526bd1d","observation_id":"a306d267-eafa-4c93-9d8e-1846f83c4c53","resolution":{"observed_at":"2026-07-30T20:11:00.883238Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.21772","last_updated":"2024-08-04T22:13:39Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-07-31T17:48:14Z","title":"ShieldGemma: Generative AI Content Moderation Based on Gemma","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.21772","snapshot_observed_at":"2026-07-30T20:11:00.885849Z","title":"arXiv preprint arXiv:2407.21772 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":87,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.885849Z"},"links":{"cited_paper":"/paper/2407.21772","citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:96e292911af360c71f6cbcd99ff1f52864a6f759eb99ae14459a974420e842ec","observation_id":"a0fa777e-01e2-4390-a66c-077a15c30b3b","resolution":{"observed_at":"2026-07-30T20:11:00.885849Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2510.14276","last_updated":"2025-10-16T04:00:18Z","snapshot_observed_at":"2026-07-06T22:32:47.087967Z","submitted_at":"2025-10-16T04:00:18Z","title":"Qwen3Guard Technical Report","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2510.14276","snapshot_observed_at":"2026-07-30T20:11:00.888291Z","title":"arXiv preprint arXiv:2510.14276 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":88,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.888291Z"},"links":{"cited_paper":"/paper/2510.14276","citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:07d271d62580d8c4a9d591a2317a230e2739ec2c85188cc3d914bfffa8606170","observation_id":"ed0c3849-3f89-460d-9de2-e723ffc92b01","resolution":{"observed_at":"2026-07-30T20:11:00.888291Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T20:11:00.891218Z","title":"Neurips Safe Generative AI Workshop 2024 , year=","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":89,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.891218Z"},"links":{"citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:90883a43c310fa56994c1430b5cd81ee9d0df0ba5ff3af9ad238373424e45717","observation_id":"179e612a-7c79-4714-acc0-b4ed86173224","resolution":{"observed_at":"2026-07-30T20:11:00.891218Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T20:11:00.893973Z","title":"Proceedings of the 31st International Conference on Computational Linguistics , pages=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":90,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.893973Z"},"links":{"citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:17fb354a5161dcf9655cfba9a247a8341ecd029d5854aa7241293b6e36bb2b81","observation_id":"60b961d5-0b2a-4270-b6d6-8ddc72b160b5","resolution":{"observed_at":"2026-07-30T20:11:00.893973Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T20:11:00.896950Z","title":"arXiv preprint arXiv:2509.26345 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":91,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.896950Z"},"links":{"citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:13b0b3da476578591d0ec3e06193720413c03fa4210fed2a688b286d9c5b13e0","observation_id":"d0dc5397-0492-4fec-a2ac-d5f2e3431b10","resolution":{"observed_at":"2026-07-30T20:11:00.896950Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T20:11:00.899832Z","title":"Second Workshop on Agents in the Wild: Safety, Security, and Beyond , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":92,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.899832Z"},"links":{"citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:42eebf3ad05f4522552a45d015639b52de3be6f454e17c1517a4bbdebff9ae22","observation_id":"67a46615-752b-437d-a974-d2ea99e7ec37","resolution":{"observed_at":"2026-07-30T20:11:00.899832Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2606.01738","last_updated":"2026-06-01T06:02:15Z","snapshot_observed_at":"2026-07-06T23:42:16.661228Z","submitted_at":"2026-06-01T06:02:15Z","title":"THRD: A Training-Free Multi-Turn Defense Framework for Jailbreak Attacks on Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2606.01738","snapshot_observed_at":"2026-07-30T20:11:00.902525Z","title":"arXiv preprint arXiv:2606.01738 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":93,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.902525Z"},"links":{"cited_paper":"/paper/2606.01738","citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:7e64678f48bac125b2e12c514bcb470eba558ec972ef0fb1bdcd8d8d895e6b4c","observation_id":"82767835-094e-46f9-aa06-f2f568482527","resolution":{"observed_at":"2026-07-30T20:11:00.902525Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T20:11:00.905231Z","title":"0: A diverse ai safety dataset and risks taxonomy for alignment of llm guardrails , author=","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":94,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.905231Z"},"links":{"citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:9d2a31f230984e65da59fb63ac2a8853bf1e7d5b4e3a3b337cc8b38e846c30ad","observation_id":"c495ee18-a10f-44ed-8641-5329942d9ac6","resolution":{"observed_at":"2026-07-30T20:11:00.905231Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-30T20:11:00.908002Z","title":"arXiv preprint arXiv:2402.04249 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":95,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.908002Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:a5ee66f166a63d3ae2f1baeae4d03f778cffe73871de93cedf7c54a37b82c7b9","observation_id":"986e7d97-588e-47c2-8889-3b4b14ea3acd","resolution":{"observed_at":"2026-07-30T20:11:00.908002Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T20:11:00.911046Z","title":"Advances in Neural Information Processing Systems , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":96,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.911046Z"},"links":{"citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:0c976f942aefadcec47a1b4720d75af12ac4ddafd537dbaeb09d8a6d6efc23e6","observation_id":"7053110e-fbad-4572-acfb-bcda29feb0bc","resolution":{"observed_at":"2026-07-30T20:11:00.911046Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T20:11:00.913908Z","title":"Advances in Neural Information Processing Systems , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":97,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.913908Z"},"links":{"citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:c3bb3865139bd76ec2a223456edbad0892f1b97d3c3ac315d54b1f95a37631d8","observation_id":"cdfdea83-5be2-4649-a919-2f44721edf1e","resolution":{"observed_at":"2026-07-30T20:11:00.913908Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T20:11:00.916633Z","title":"International Conference on Learning Representations , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":98,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.916633Z"},"links":{"citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:60f2060d93facd2698df34beafcfd4391596f57287ea3b2b83c6f8a0b246e897","observation_id":"754fa630-378c-49ed-9692-9ed5b6c1dec2","resolution":{"observed_at":"2026-07-30T20:11:00.916633Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2308.13387","last_updated":"2023-09-04T01:47:30Z","snapshot_observed_at":"2026-07-06T16:10:23.328130Z","submitted_at":"2023-08-25T14:02:12Z","title":"Do-Not-Answer: A Dataset for Evaluating Safeguards in LLMs","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.13387","snapshot_observed_at":"2026-07-30T20:11:00.919374Z","title":"arXiv preprint arXiv:2308.13387 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":99,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.919374Z"},"links":{"cited_paper":"/paper/2308.13387","citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:bd9c2de294b55880a01b12676a57dab3711c519c65dfc0befbbbfc5131111e6f","observation_id":"ebea8a40-8b99-4396-8cd8-b56c0929cae9","resolution":{"observed_at":"2026-07-30T20:11:00.919374Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T20:11:00.922163Z","title":"Advances in Neural Information Processing Systems , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":100,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.922163Z"},"links":{"citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:f4046a39009cfd08a27f13b70bc2f9020c4658673dce819832d3484b528567e1","observation_id":"38cdd77d-fbb6-4eb6-923d-64af12f45788","resolution":{"observed_at":"2026-07-30T20:11:00.922163Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T20:11:00.925005Z","title":"Findings of the Association for Computational Linguistics: ACL 2024 , pages=","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":101,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.925005Z"},"links":{"citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:93a21ff59417ec145121878a36b2b35c4f92df466337dec07e585d1301b5e2c9","observation_id":"3f8c4f48-0118-4aa6-b2b1-ddb2dd676df9","resolution":{"observed_at":"2026-07-30T20:11:00.925005Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T20:11:00.928017Z","title":"Proceedings of the 47th international ACM SIGIR conference on research and development in information retrieval , pages=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":102,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.928017Z"},"links":{"citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:a32be9f8411e64c129a3012f3f70559100c370fbbd5625320d169c229e5010cf","observation_id":"bd49ad74-eb83-48dc-8999-60f30759da95","resolution":{"observed_at":"2026-07-30T20:11:00.928017Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T20:11:00.931174Z","title":"Proceedings of the 2022 Conference on Empirical Methods in Natural Language Processing , pages=","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":103,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.931174Z"},"links":{"citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:dcf057ec02f835f53f7081762daf06fdd94a62b50569482fe78eb11d9c64554d","observation_id":"a757a35e-e8b1-48e1-95a3-284d8d8e11e4","resolution":{"observed_at":"2026-07-30T20:11:00.931174Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.16205","last_updated":"2025-06-18T02:41:56Z","snapshot_observed_at":"2026-07-06T18:50:31.528338Z","submitted_at":"2024-07-23T06:14:41Z","title":"LLMs can be Dangerous Reasoners: Analyzing-based Jailbreak Attack on Large Language Models","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.16205","snapshot_observed_at":"2026-07-30T20:11:00.934085Z","title":"arXiv preprint arXiv:2407.16205 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":104,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.934085Z"},"links":{"cited_paper":"/paper/2407.16205","citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:94bf0fd654c3b4bf628f8fd41261ec155a1137c34c0bdbbc3399e0f5f3991451","observation_id":"7c6a2151-4ae2-41bf-b554-84ba6e4f3f47","resolution":{"observed_at":"2026-07-30T20:11:00.934085Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","latest_version":1,"primary_category":"cs.LG","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions"},"reference_resolution":{"displayed":86,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":86,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":86},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 86 of 86 outbound references and 0 inbound Pith citation observations for arXiv:2607.26820."}