{"as_of":"2026-08-24T02:29:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:516b45de7b5c69edee7626200810de1870cc625daca74037fc88363b907a41ab","coverage":[{"denominator":90,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":90,"source":"paper_references, paper_reference_links","source_observed_at":"2026-07-31T22:25:22.405724Z","state":"measured"},{"denominator":90,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":90,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-23T06:30:58.430688+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2607.27951/citation-record","integrity":"/paper/2607.27951/integrity","json":"/paper/2607.27951/citation-record.json","paper":"/paper/2607.27951"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2507.07341","last_updated":"2025-07-09T23:55:35Z","snapshot_observed_at":"2026-08-18T14:44:20.549681Z","submitted_at":"2025-07-09T23:55:35Z","title":"On the Impossibility of Separating Intelligence from Judgment: The Computational Intractability of Filtering for AI Alignment","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2507.07341","snapshot_observed_at":"2026-07-31T22:25:22.203096Z","title":"On the Impossibility of Separating Intelligence from Judgment: The Computational Intractability of Filtering for","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.203096Z"},"links":{"cited_paper":"/paper/2507.07341","citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:99887924ef90ddf42963c5f8e7ecf4c13a3b526162be480a4e206f56ee29fb83","observation_id":"2f80ecdc-dcd6-4e20-bd07-30b267bc2e16","resolution":{"observed_at":"2026-07-31T22:25:22.203096Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:25:22.206110Z","title":"Access Controls Will Solve the Dual-Use Dilemma , journal =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.206110Z"},"links":{"citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:093befb5eb722c74ae37808911fad0b4991823ca37f50afae1a93459b9cc288a","observation_id":"4300efc1-5e98-46e4-8381-515165517281","resolution":{"observed_at":"2026-07-31T22:25:22.206110Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2510.09023","last_updated":"2025-10-10T05:51:04Z","snapshot_observed_at":"2026-08-15T07:47:42.680001Z","submitted_at":"2025-10-10T05:51:04Z","title":"The Attacker Moves Second: Stronger Adaptive Attacks Bypass Defenses Against Llm Jailbreaks and Prompt Injections","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2510.09023","snapshot_observed_at":"2026-07-31T22:25:22.208425Z","title":"Schulhoff and others , title =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.208425Z"},"links":{"cited_paper":"/paper/2510.09023","citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:74f8d13de2f512ed16cbba78cdf2a1e076b91cfd0275ad392ccdbd317ed363b6","observation_id":"52aba41d-7f62-42d0-8141-f83fbf586ca7","resolution":{"observed_at":"2026-07-31T22:25:22.208425Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-08-12T09:06:50.363435Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-07-31T22:25:22.211084Z","title":"Zico Kolter and Matt Fredrikson , title =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.211084Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:b8bba85a1020301cf8df09c724f7f0e8a4ce8f8b7f56f4116529fce0a14a1a8c","observation_id":"86af6658-c5a4-4121-a79e-98c33f853db0","resolution":{"observed_at":"2026-07-31T22:25:22.211084Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2212.08073","last_updated":"2022-12-15T06:19:23Z","snapshot_observed_at":"2026-08-16T03:49:00.703994Z","submitted_at":"2022-12-15T06:19:23Z","title":"Constitutional AI: Harmlessness from AI Feedback","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2212.08073","snapshot_observed_at":"2026-07-31T22:25:22.213954Z","title":"arXiv preprint arXiv:2212.08073 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.213954Z"},"links":{"cited_paper":"/paper/2212.08073","citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:ebbf1541255a0cd3b676affa92240e14326be7d2ea07bbb30ddf9073a9a296ce","observation_id":"27c73f03-d88a-46f0-a5b7-aee441ba7c3c","resolution":{"observed_at":"2026-07-31T22:25:22.213954Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2501.18837","last_updated":"2025-01-31T01:09:32Z","snapshot_observed_at":"2026-08-08T23:58:18.293467Z","submitted_at":"2025-01-31T01:09:32Z","title":"Constitutional Classifiers: Defending against Universal Jailbreaks across Thousands of Hours of Red Teaming","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.18837","snapshot_observed_at":"2026-07-31T22:25:22.216660Z","title":"arXiv preprint arXiv:2501.18837 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.216660Z"},"links":{"cited_paper":"/paper/2501.18837","citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:0beba40769b2f63cfa71559e8c7bedabc3e52b34852b391d1f6b81d2445e6838","observation_id":"663293db-e7e4-454d-929f-5090674c489c","resolution":{"observed_at":"2026-07-31T22:25:22.216660Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:25:22.219144Z","title":"arXiv preprint arXiv:2601.04603 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.219144Z"},"links":{"citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:0c974e70a4d7c496cbccbab22b466f3ee1b84f7aecc1e28789386eac2e5c6fd4","observation_id":"04ae858a-7e2d-404d-913b-a8f96a69c4e4","resolution":{"observed_at":"2026-07-31T22:25:22.219144Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:25:22.221687Z","title":"Findings of the Association for Computational Linguistics: ACL 2026 , publisher =","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.221687Z"},"links":{"citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:413c6483c8b94065ec94d289c630e01afec0f7b4e11bbc390448d35b48395fde","observation_id":"a2c15072-be11-49cd-8a86-855e4f7055d0","resolution":{"observed_at":"2026-07-31T22:25:22.221687Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2508.09224","last_updated":"2025-08-12T00:18:23Z","snapshot_observed_at":"2026-08-20T18:10:40.972055Z","submitted_at":"2025-08-12T00:18:23Z","title":"From Hard Refusals to Safe-Completions: Toward Output-Centric Safety Training","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2508.09224","snapshot_observed_at":"2026-07-31T22:25:22.224180Z","title":"arXiv preprint arXiv:2508.09224 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.224180Z"},"links":{"cited_paper":"/paper/2508.09224","citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:37e039033246c8f80cb4ac5f5912c4360f7dc0954c72130c413e8da44cc67609","observation_id":"9486a6b5-410d-471b-afd1-06341419d6b5","resolution":{"observed_at":"2026-07-31T22:25:22.224180Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.11030","last_updated":"2024-05-17T18:05:13Z","snapshot_observed_at":"2026-08-17T16:18:50.194313Z","submitted_at":"2024-05-17T18:05:13Z","title":"The Unappreciated Role of Intent in Algorithmic Moderation of Social Media Content","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.11030","snapshot_observed_at":"2026-07-31T22:25:22.226668Z","title":"arXiv preprint arXiv:2405.11030 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.226668Z"},"links":{"cited_paper":"/paper/2405.11030","citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:caf2b36d63ce91802de50d39d4e99ffe5908d3deae3b95eac539b5a78199a307","observation_id":"b8fb39b3-8517-4edd-b6d1-c99c6c46b887","resolution":{"observed_at":"2026-07-31T22:25:22.226668Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2607.02047","last_updated":"2026-07-02T11:14:52Z","snapshot_observed_at":"2026-08-18T14:10:49.713931Z","submitted_at":"2026-07-02T11:14:52Z","title":"OpenSafeIntent: Evaluating Intent-Calibrated Safe Completion Across Dual-Use Prompt Sets","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2607.02047","snapshot_observed_at":"2026-07-31T22:25:22.228937Z","title":"arXiv preprint arXiv:2607.02047 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.228937Z"},"links":{"cited_paper":"/paper/2607.02047","citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:fa7e80a14ccbb2b3d62b9eca80e558027d4d98ed7a6273166d2165dd6fd75ad5","observation_id":"c073dc1d-0475-45b2-8e6a-c9d78cad0630","resolution":{"observed_at":"2026-07-31T22:25:22.228937Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2606.27210","last_updated":"2026-06-25T16:03:57Z","snapshot_observed_at":"2026-08-18T00:09:15.962671Z","submitted_at":"2026-06-25T16:03:57Z","title":"Paved with True Intents: Intent-Aware Training Improves LLM Safety Classification Across Training Regimes","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2606.27210","snapshot_observed_at":"2026-07-31T22:25:22.231245Z","title":"Paved with True Intents: Intent-Aware Training Improves","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.231245Z"},"links":{"cited_paper":"/paper/2606.27210","citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:607f31408a76c5e5b61d75a6cabb4178715758335366e94da4dbc4324e2a6527","observation_id":"29c859d5-0dcb-41af-9f0b-cad9f571222e","resolution":{"observed_at":"2026-07-31T22:25:22.231245Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2604.27093","last_updated":"2026-04-29T18:37:18Z","snapshot_observed_at":"2026-08-03T02:22:04.922864Z","submitted_at":"2026-04-29T18:37:18Z","title":"Useless but Safe? Benchmarking Utility Recovery with User Intent Clarification in Multi-Turn Conversations","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.27093","snapshot_observed_at":"2026-07-31T22:25:22.233679Z","title":"arXiv preprint arXiv:2604.27093 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.233679Z"},"links":{"cited_paper":"/paper/2604.27093","citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:26446c9b783b8a2663900bd3855c006a738814456664a72369e39c78a615db85","observation_id":"9da5070e-93c5-47e5-8352-a2158b81a179","resolution":{"observed_at":"2026-07-31T22:25:22.233679Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.16584","last_updated":"2026-06-22T04:18:02Z","snapshot_observed_at":"2026-08-15T19:20:17.987154Z","submitted_at":"2025-06-19T20:19:18Z","title":"Measuring Intent Comprehension in LLMs","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.16584","snapshot_observed_at":"2026-07-31T22:25:22.236111Z","title":"Evans , title =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.236111Z"},"links":{"cited_paper":"/paper/2506.16584","citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:06e9f6684a17af2bc86f4b86e3f274757d2537ef671bf6a63e1b8796181b8bb8","observation_id":"5c55d76a-584e-4633-8f9e-ce78d6c752d4","resolution":{"observed_at":"2026-07-31T22:25:22.236111Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2606.03135","last_updated":"2026-06-02T04:23:59Z","snapshot_observed_at":"2026-08-17T19:59:41.519561Z","submitted_at":"2026-06-02T04:23:59Z","title":"Uncertainty-Aware Clarification in LLM Agents with Information Gain","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2606.03135","snapshot_observed_at":"2026-07-31T22:25:22.238456Z","title":"arXiv preprint arXiv:2606.03135 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.238456Z"},"links":{"cited_paper":"/paper/2606.03135","citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:9981ec9ba654ef2ebcc32294c2d150aaaff393d58592f060728c67f90e37171c","observation_id":"468199d7-0e6c-4a9f-b480-408222a55551","resolution":{"observed_at":"2026-07-31T22:25:22.238456Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.02551","last_updated":"2024-10-30T17:16:44Z","snapshot_observed_at":"2026-08-16T13:37:41.335816Z","submitted_at":"2024-07-02T16:19:25Z","title":"Breach By A Thousand Leaks: Unsafe Information Leakage in `Safe' AI Responses","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.02551","snapshot_observed_at":"2026-07-31T22:25:22.240902Z","title":"arXiv preprint arXiv:2407.02551 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.240902Z"},"links":{"cited_paper":"/paper/2407.02551","citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:3b65cc68b38ac83e1a37fc9f36d37c8d0b876834bde9c8d2c63ff0a23aadd338","observation_id":"b26dd81b-395d-4418-a466-aaa50b355dc4","resolution":{"observed_at":"2026-07-31T22:25:22.240902Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.20841","last_updated":"2025-08-18T05:58:10Z","snapshot_observed_at":"2026-08-21T09:27:21.597711Z","submitted_at":"2025-05-27T07:59:56Z","title":"Concealment of Intent: A Game-Theoretic Analysis","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.20841","snapshot_observed_at":"2026-07-31T22:25:22.243351Z","title":"Varshney , title =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.243351Z"},"links":{"cited_paper":"/paper/2505.20841","citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:7fe6e5b1721859b29c7eefe5b727a46478a55e5c17fdbec4f6e629994cbffda9","observation_id":"96ad0376-ad69-43b4-b0b1-609d8b520820","resolution":{"observed_at":"2026-07-31T22:25:22.243351Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2606.23668","last_updated":"2026-06-22T17:52:59Z","snapshot_observed_at":"2026-07-06T23:58:20.975630Z","submitted_at":"2026-06-22T17:52:59Z","title":"On the Limits of Prompt-Conditioned Language Models as General-Purpose Learners","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2606.23668","snapshot_observed_at":"2026-07-31T22:25:22.245783Z","title":"arXiv preprint arXiv:2606.23668 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.245783Z"},"links":{"cited_paper":"/paper/2606.23668","citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:61b649b71eff446d0537f0cff67090f714107205db088d678ec9c9d0d13f711b","observation_id":"fe99c023-d75b-4be2-985a-52ce7d9fa129","resolution":{"observed_at":"2026-07-31T22:25:22.245783Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:25:22.248126Z","title":"Bakker , title =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.248126Z"},"links":{"citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:7f246a7bcdf0a8469be9140e5100939d621bb2d105e34991ab727de7a4a8db95","observation_id":"f8a26baa-9a1f-4768-8c7b-315c6eb17c48","resolution":{"observed_at":"2026-07-31T22:25:22.248126Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2605.29224","last_updated":"2026-05-28T01:23:48Z","snapshot_observed_at":"2026-08-16T16:06:47.494825Z","submitted_at":"2026-05-28T01:23:48Z","title":"Relevance as a Vulnerability: How Web Retrieval Degrades Safety Alignment in LLM Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2605.29224","snapshot_observed_at":"2026-07-31T22:25:22.250231Z","title":"arXiv preprint arXiv:2605.29224 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.250231Z"},"links":{"cited_paper":"/paper/2605.29224","citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:336f531ea07f62626df2770abcf8881cf43936cb2fadd9677db9838d67c4b422","observation_id":"7d2777ad-1686-4871-be03-afdf748fbf98","resolution":{"observed_at":"2026-07-31T22:25:22.250231Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.03218","last_updated":"2024-05-15T19:16:09Z","snapshot_observed_at":"2026-08-15T06:18:34.739211Z","submitted_at":"2024-03-05T18:59:35Z","title":"The WMDP Benchmark: Measuring and Reducing Malicious Use With Unlearning","version":7},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.03218","snapshot_observed_at":"2026-07-31T22:25:22.252622Z","title":"arXiv preprint arXiv:2403.03218 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.252622Z"},"links":{"cited_paper":"/paper/2403.03218","citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:6c218057c8c801cd2b39c72f93ec11f9a950f411708f46dc9fa0fe8ac8140e9c","observation_id":"a194845e-10fb-49b9-9c54-616785dc27be","resolution":{"observed_at":"2026-07-31T22:25:22.252622Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:25:22.254958Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.254958Z"},"links":{"citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:39f7b1706f1d6fce4f7cc2f23365224944bfab4f954dcbcdc32844e83cf7788b","observation_id":"eada1e41-c76e-49b1-9b9e-d83c2abc4fd5","resolution":{"observed_at":"2026-07-31T22:25:22.254958Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:25:22.256865Z","title":"Huber and Volker Strassen , title =","venue":null,"work_id":null,"year":1973},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.256865Z"},"links":{"citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:71fd768315eb47a6317025033098ff63190ee82b7c8b04df48dc672f4af6b5ba","observation_id":"239d0ebf-169b-47b4-a3ce-474bb353fe72","resolution":{"observed_at":"2026-07-31T22:25:22.256865Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:25:22.259176Z","title":"Cover and Joy A","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.259176Z"},"links":{"citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:69853389923a915de0f6322db90ce7749be036ee28d06a87365b79745d6f0fd1","observation_id":"2c577afb-a445-4ddb-8550-f532ee612c8e","resolution":{"observed_at":"2026-07-31T22:25:22.259176Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:25:22.261402Z","title":"Tsybakov , title =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.261402Z"},"links":{"citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:59c72724574f7c362bb11b5f521a1b7058dd4bc193b74c47b084c1396f12b99b","observation_id":"9a188646-702e-4689-8a54-d5f66809eef4","resolution":{"observed_at":"2026-07-31T22:25:22.261402Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:25:22.263635Z","title":"The Annals of Mathematical Statistics , volume =","venue":null,"work_id":null,"year":1959},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.263635Z"},"links":{"citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:f9ad4e6ade9bc5b925c0268fefcb24c6dbac9ca272f8915431df14c1d34bdd92","observation_id":"a254962b-4be9-46f9-a297-b81d76ba7ada","resolution":{"observed_at":"2026-07-31T22:25:22.263635Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:25:22.265890Z","title":"Crawford and Joel Sobel , title =","venue":null,"work_id":null,"year":1982},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.265890Z"},"links":{"citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:090a2309102c36b4aa99f8a320ffef8afb2198667701d3d077f9770df1e62690","observation_id":"3dd704f0-3c2c-48fe-93ba-4d7ca80fe5c3","resolution":{"observed_at":"2026-07-31T22:25:22.265890Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:25:22.268251Z","title":"The Quarterly Journal of Economics , volume =","venue":null,"work_id":null,"year":1973},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.268251Z"},"links":{"citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:f589bc7449471cecd491e5c74a7c21b2f013fcc0cf5fe5d8686c31fa10bf3525","observation_id":"09c36f65-26df-49da-865c-0afa82713c83","resolution":{"observed_at":"2026-07-31T22:25:22.268251Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2606.29113","last_updated":"2026-06-27T23:40:23Z","snapshot_observed_at":"2026-08-18T07:45:35.222317Z","submitted_at":"2026-06-27T23:40:23Z","title":"LLM Semantic Signaling Game and Mechanism Design: Systematic Blindness, Awareness Shaping, and Mindset Dynamics","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2606.29113","snapshot_observed_at":"2026-07-31T22:25:22.270620Z","title":"arXiv preprint arXiv:2606.29113 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.270620Z"},"links":{"cited_paper":"/paper/2606.29113","citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:0c113fd2706ba05b10553eb130d1892cac7628caef38ba0ecd2657850d3799e6","observation_id":"5696936c-0085-4dd1-ba98-e04cc110f1f3","resolution":{"observed_at":"2026-07-31T22:25:22.270620Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.00836","last_updated":"2024-12-01T14:59:07Z","snapshot_observed_at":"2026-08-17T13:21:12.199697Z","submitted_at":"2024-12-01T14:59:07Z","title":"Position Paper: Model Access should be a Key Concern in AI Governance","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.00836","snapshot_observed_at":"2026-07-31T22:25:22.272914Z","title":"arXiv preprint arXiv:2412.00836 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.272914Z"},"links":{"cited_paper":"/paper/2412.00836","citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:11c7b9a0e07280f56815e51635ea519fe0d5a9af67eac249e4994cf5d758181d","observation_id":"506c4eac-f443-49ad-90df-81c24f19802c","resolution":{"observed_at":"2026-07-31T22:25:22.272914Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:25:22.275097Z","title":"Personhood Credentials: Artificial Intelligence and the Value of Privacy-Preserving Tools to Distinguish Who Is Real Online , journal =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.275097Z"},"links":{"citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:b5ac881823bef4d856d8b9c4a77a677f0b3093b886c6bbaacef70d24934fdeca","observation_id":"7190a925-20f5-4cb0-9a01-e2cb037fae28","resolution":{"observed_at":"2026-07-31T22:25:22.275097Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:25:22.277254Z","title":"34th USENIX Security Symposium (USENIX Security 25) , publisher =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.277254Z"},"links":{"citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:5942c10104b1124f0172e83e812cc56c1cfac33f19d76763938b0421c0b1e6a9","observation_id":"ff3aa3e5-211b-41bd-8bcf-a17f0d95910f","resolution":{"observed_at":"2026-07-31T22:25:22.277254Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2607.08077","last_updated":"2026-07-09T03:12:44Z","snapshot_observed_at":"2026-08-20T21:30:37.167145Z","submitted_at":"2026-07-09T03:12:44Z","title":"Modular Pretraining Enables Access Control","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2607.08077","snapshot_observed_at":"2026-07-31T22:25:22.279954Z","title":"arXiv preprint arXiv:2607.08077 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.279954Z"},"links":{"cited_paper":"/paper/2607.08077","citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:2acd6e6ed0a65807dae0ec01c6ad6836bcf8a4f23a5fb6e2a311c8f13791d42a","observation_id":"a0848a1c-6331-420d-9540-5ba198b533df","resolution":{"observed_at":"2026-07-31T22:25:22.279954Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2604.06436","last_updated":"2026-04-11T02:30:02Z","snapshot_observed_at":"2026-08-15T02:32:41.564144Z","submitted_at":"2026-04-07T20:20:18Z","title":"The Defense Trilemma: Why Prompt Injection Defense Wrappers Fail?","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.06436","snapshot_observed_at":"2026-07-31T22:25:22.282232Z","title":"arXiv preprint arXiv:2604.06436 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.282232Z"},"links":{"cited_paper":"/paper/2604.06436","citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:4098bfedc824cae989ab91c0f25b48cc45b30f388edd3215c663466a3779ec40","observation_id":"c77d39b6-86a8-41fe-9be0-f1fe2ceac2fe","resolution":{"observed_at":"2026-07-31T22:25:22.282232Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-08-18T13:09:29.410392Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2605.11002","snapshot_observed_at":"2026-07-31T22:25:22.284608Z","title":"Benjamin Erichson , title =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.284608Z"},"links":{"cited_paper":"/paper/2605.11002","citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:f2f1fb18e8496954edaf30c20d762ff0ffdaf70629e3fef286f7ac91d701bf48","observation_id":"db92753e-b2c5-47d7-bc6b-99dcd0790813","resolution":{"observed_at":"2026-07-31T22:25:22.284608Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2606.02644","last_updated":"2026-05-31T15:39:39Z","snapshot_observed_at":"2026-08-17T22:08:18.086572Z","submitted_at":"2026-05-31T15:39:39Z","title":"A New Framework for Cybersecurity Refusals in AI Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2606.02644","snapshot_observed_at":"2026-07-31T22:25:22.286866Z","title":"Zico Kolter , title =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.286866Z"},"links":{"cited_paper":"/paper/2606.02644","citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:63c66579230c5646acbe3faee6747a6a925595a34da0e712919e76dd84058bd9","observation_id":"addb1b9d-4726-4a7a-a05c-cb4d4039e847","resolution":{"observed_at":"2026-07-31T22:25:22.286866Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.16797","last_updated":"2025-02-24T03:16:15Z","snapshot_observed_at":"2026-08-18T15:11:12.678404Z","submitted_at":"2025-02-24T03:16:15Z","title":"Forecasting Rare Language Model Behaviors","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.16797","snapshot_observed_at":"2026-07-31T22:25:22.289261Z","title":"arXiv preprint arXiv:2502.16797 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.289261Z"},"links":{"cited_paper":"/paper/2502.16797","citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:55499dcbaaff296dc037cd6c042e40db2706369c0180f363cfeb53c725172e4e","observation_id":"0fc2dc87-80cb-4a90-a249-7cdfc84e01d0","resolution":{"observed_at":"2026-07-31T22:25:22.289261Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:25:22.291560Z","title":"Knight , title =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":38,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.291560Z"},"links":{"citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:760d40ed102975274c5e6745fde646cd0adcca6e3632905890d43b3287a39ee8","observation_id":"79bd6e9e-4a31-4ff9-824c-88475d174e45","resolution":{"observed_at":"2026-07-31T22:25:22.291560Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2605.19722","last_updated":"2026-05-19T11:55:54Z","snapshot_observed_at":"2026-08-16T02:40:10.272246Z","submitted_at":"2026-05-19T11:55:54Z","title":"Measuring Safety Alignment Effects in Autonomous Security Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2605.19722","snapshot_observed_at":"2026-07-31T22:25:22.293704Z","title":"arXiv preprint arXiv:2605.19722 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":39,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.293704Z"},"links":{"cited_paper":"/paper/2605.19722","citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:29a44bb98c9ffbcb6e7bcf16f5f146ee4cfc471be8cf2ae415cf277f78ebe4a2","observation_id":"f050463d-cd1d-4e14-9d4e-7d3f342d1085","resolution":{"observed_at":"2026-07-31T22:25:22.293704Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2607.05842","last_updated":"2026-07-07T05:04:48Z","snapshot_observed_at":"2026-08-17T13:15:58.841734Z","submitted_at":"2026-07-07T05:04:48Z","title":"Beyond Refusal: A Same-Lineage Study of Aligned and Abliterated LLMs for Vulnerability Analysis","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2607.05842","snapshot_observed_at":"2026-07-31T22:25:22.296089Z","title":"arXiv preprint arXiv:2607.05842 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":40,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.296089Z"},"links":{"cited_paper":"/paper/2607.05842","citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:cd98642cef7fe1b52f3bb82af210e98765cdec21cdbff75d4a137087ef7a2551","observation_id":"8a9c15fc-133c-411f-bbd5-6c67030fefa9","resolution":{"observed_at":"2026-07-31T22:25:22.296089Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:25:22.298380Z","title":"arXiv preprint arXiv:2603.14332 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":41,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.298380Z"},"links":{"citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:0d2afb8fbac59e969f450f254a6237b5514cfd40851205bf8200e361d58ff9c1","observation_id":"4dda50d1-2703-4749-9ad2-f9024efed1d7","resolution":{"observed_at":"2026-07-31T22:25:22.298380Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:25:22.300487Z","title":"Proceedings of the 42nd International Conference on Machine Learning , series =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":42,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.300487Z"},"links":{"citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:aa12b0dddeffaca1a0e5fa3c8bfb4cf29ed98240967b2c5c77123b46d9237491","observation_id":"d2adaeba-9479-4350-95a2-41f78be231ab","resolution":{"observed_at":"2026-07-31T22:25:22.300487Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.02828","last_updated":"2024-10-01T17:00:59Z","snapshot_observed_at":"2026-08-16T13:13:39.441447Z","submitted_at":"2024-10-01T17:00:59Z","title":"PyRIT: A Framework for Security Risk Identification and Red Teaming in Generative AI System","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.02828","snapshot_observed_at":"2026-07-31T22:25:22.302692Z","title":"doi:10.48550/arXiv.2410.02828 , note =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":43,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.302692Z"},"links":{"cited_paper":"/paper/2410.02828","citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:815d20630467758b742feed537752ad394b411d870ecdb226ae83f5c34be51d5","observation_id":"7c0831f5-e864-48da-ac39-ab59b64d4c38","resolution":{"observed_at":"2026-07-31T22:25:22.302692Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:25:22.305310Z","title":"Advances in Neural Information Processing Systems, Datasets and Benchmarks Track , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":44,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.305310Z"},"links":{"citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:cb0f95b00b053ccffea4da2ab7b0e12df3f2683047353ed0166dae781eee694e","observation_id":"de97d355-9766-4ccf-a6bc-7b54552a0a6c","resolution":{"observed_at":"2026-07-31T22:25:22.305310Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:25:22.307449Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":45,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.307449Z"},"links":{"citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:d2949ec766b8f96ff88c54b892db6ad906d91a286ab7c70480f05dd5c1639bf1","observation_id":"8e3bd8c3-6072-4672-bf1e-ebf783bac9cf","resolution":{"observed_at":"2026-07-31T22:25:22.307449Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:25:22.309488Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":46,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.309488Z"},"links":{"citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:c6c431cf9310149ee3333c76cb7510c7321bc3f6e3fcea636a2401d175d1dfd5","observation_id":"e13f4263-f62f-4769-b0d2-f1a3ce8ab4cd","resolution":{"observed_at":"2026-07-31T22:25:22.309488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:25:22.311649Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":47,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.311649Z"},"links":{"citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:82a2d09f00191e4aff4b84cdeb601b05271859827e56ff2530a0a1d1eb84c5a7","observation_id":"ef6a4f9a-8cbb-4d27-a65f-a7e055794e41","resolution":{"observed_at":"2026-07-31T22:25:22.311649Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:25:22.313739Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":48,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.313739Z"},"links":{"citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:47e8ffbf07efe0cad8957bf10f7a9b3ca5398a6157aca14ebb14272dc25de705","observation_id":"1de5f233-4970-48ff-9034-7170ff8338ae","resolution":{"observed_at":"2026-07-31T22:25:22.313739Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:25:22.315994Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":49,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.315994Z"},"links":{"citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:d67693f632c54487caa0cd63407256a0b1f08a98850d3943d0e3d4d763204353","observation_id":"232ff9a3-c6fc-4a71-8941-de96c8b51661","resolution":{"observed_at":"2026-07-31T22:25:22.315994Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:25:22.318235Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":50,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.318235Z"},"links":{"citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:6078376076f3325ef22fc7d20daac1eded98946def736c43d916ba44f216efc5","observation_id":"170f40a0-a590-4a07-b8fb-0652ca0ffa82","resolution":{"observed_at":"2026-07-31T22:25:22.318235Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:25:22.320400Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":51,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.320400Z"},"links":{"citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:8ed33d54816c4b66444581546d784e14d1c578077a29efb17a353fe70fe92221","observation_id":"78b6b8f6-fa3f-4eb9-a57e-65723c97268b","resolution":{"observed_at":"2026-07-31T22:25:22.320400Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:25:22.322471Z","title":"2026 , month = jul, howpublished =","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":52,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.322471Z"},"links":{"citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:7ebf639de101c77ebe5cd2f206af2415c1c36600f1a3cddc0f30e03b287db903","observation_id":"b27aba54-40e3-46a4-844b-748f553f2d71","resolution":{"observed_at":"2026-07-31T22:25:22.322471Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:25:22.324729Z","title":"34th USENIX Security Symposium (USENIX Security 25) , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":53,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.324729Z"},"links":{"citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:04e5e21e487ae22e049af7e2d1895cc6862cc5a537fbaecf1cfca2b9b48ffcfa","observation_id":"c6c8c3eb-ef03-4183-8b9d-27c82a0c54d3","resolution":{"observed_at":"2026-07-31T22:25:22.324729Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:25:22.326944Z","title":"Findings of the Association for Computational Linguistics: ACL 2025 , year =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":54,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.326944Z"},"links":{"citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:fdcc25317c3ccfdd769028ef2f1e0243d648d7786241f445e499e3a0330aa2fc","observation_id":"b1cf9964-9c92-477b-b5ac-6e32a7047d01","resolution":{"observed_at":"2026-07-31T22:25:22.326944Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:25:22.329211Z","title":"Proceedings of the 2025 Conference on Empirical Methods in Natural Language Processing , year =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":55,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.329211Z"},"links":{"citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:1aa0f4dbc6a8823b9fa70d2efb007d1974aeaf4b4b8bc11204d5fccaa68864ba","observation_id":"e988ebbf-6121-43b9-aaf7-c2db0995b105","resolution":{"observed_at":"2026-07-31T22:25:22.329211Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:25:22.331524Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":56,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.331524Z"},"links":{"citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:6b8977c6ef431f73833cc3dd2cb0ab1c3a6b3c2d0a978a715f8a92c26a68ccdc","observation_id":"0fa71c79-9706-4226-985e-e5cbbb884eba","resolution":{"observed_at":"2026-07-31T22:25:22.331524Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:25:22.333767Z","title":"2026 , month = may, howpublished =","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":57,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.333767Z"},"links":{"citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:3220ac07ea239029dbeb96040b18864ad3587ecca4c7ba5ba94617b6f7f9e990","observation_id":"f0ddceb4-fd5d-46db-bb9c-eeaf8d7b3629","resolution":{"observed_at":"2026-07-31T22:25:22.333767Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:25:22.335978Z","title":"2025 , pages =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":58,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.335978Z"},"links":{"citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:1c1bb2d14b26c739e6142175ed9e5dc1ebac358e42fd233e909e2b6363489e98","observation_id":"3e3a3a82-08a0-47d0-a30c-61ec76f3806d","resolution":{"observed_at":"2026-07-31T22:25:22.335978Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:25:22.338232Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":59,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.338232Z"},"links":{"citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:a0b7b5baf6688a5cb6e4c1d18d4f76c76f6df97cdce7daf3f42bc0ddddf9e3e0","observation_id":"82708292-17a8-4c26-8524-f01b12c892d4","resolution":{"observed_at":"2026-07-31T22:25:22.338232Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:25:22.340369Z","title":"2024 , url =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":60,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.340369Z"},"links":{"citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:d6a6734914f0643f3e671beef0e0e830950fb7d73de60fd7e70e25a05bcf6253","observation_id":"37e71ceb-b4d1-4a62-ab27-015a2f14733f","resolution":{"observed_at":"2026-07-31T22:25:22.340369Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:25:22.342575Z","title":"2410.10700 , archiveprefix =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":61,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.342575Z"},"links":{"citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:3a13ae60660d43c475058a3d342a9ee01fc284585906b7fbaa6a1b35549cd6e5","observation_id":"5a0ffb0f-5dce-4b5c-a75f-dfdfd1f8bad5","resolution":{"observed_at":"2026-07-31T22:25:22.342575Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:25:22.344783Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":62,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.344783Z"},"links":{"citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:3ce65b1fae56eb0d02d91103fd51db0dd17583b3e07c4c23a5076eb3305e9c24","observation_id":"3973a276-3e26-4988-a0d6-df39f04d4f45","resolution":{"observed_at":"2026-07-31T22:25:22.344783Z","resolver_source":null,"status":"parse_uncertain"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.14499","last_updated":"2026-07-10T21:48:09Z","snapshot_observed_at":"2026-08-16T12:48:53.169158Z","submitted_at":"2025-03-18T17:59:31Z","title":"Measuring AI Ability to Complete Long Software Tasks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.14499","snapshot_observed_at":"2026-07-31T22:25:22.346933Z","title":"arXiv preprint arXiv:2503.14499 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":63,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.346933Z"},"links":{"cited_paper":"/paper/2503.14499","citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:4258cdf07c6d668793933a995e7fa41cdd52d4385f6e8f611b943a79c3d2475b","observation_id":"90a29b75-5043-49c7-a4c6-4b5e65b5174b","resolution":{"observed_at":"2026-07-31T22:25:22.346933Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.15114","last_updated":"2025-05-27T03:32:23Z","snapshot_observed_at":"2026-08-12T16:49:37.896696Z","submitted_at":"2024-11-22T18:30:46Z","title":"RE-Bench: Evaluating frontier AI R&D capabilities of language model agents against human experts","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.15114","snapshot_observed_at":"2026-07-31T22:25:22.349139Z","title":"arXiv preprint arXiv:2411.15114 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":64,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.349139Z"},"links":{"cited_paper":"/paper/2411.15114","citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:aae83ea5eb7f11c05ed4455824647e11243d5cb103f46926142711279ef8b46e","observation_id":"d0bf2f4c-2256-4be0-95f0-6a8f25daeea7","resolution":{"observed_at":"2026-07-31T22:25:22.349139Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:25:22.351484Z","title":"AI & Society , volume =","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":65,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.351484Z"},"links":{"citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:4a08f1bd8e9f0dc0b8e62a1709b65662663b9e0d2714c2cc9cbf531c79d674d6","observation_id":"9ca18b39-0902-4d1f-a81b-aa8deeab5e22","resolution":{"observed_at":"2026-07-31T22:25:22.351484Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:25:22.353596Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":66,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.353596Z"},"links":{"citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:0e3367ff231f5638a62ec1187ecbe99f7794eabbed8badbd4c4cc5142de2b71a","observation_id":"9d6f13ea-6003-4089-ac9e-4f75f551bea9","resolution":{"observed_at":"2026-07-31T22:25:22.353596Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:25:22.355748Z","title":"Science and Engineering Ethics , volume =","venue":null,"work_id":null,"year":2010},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":67,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.355748Z"},"links":{"citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:63b65129cc8e4c21520de2ae44999b08a405eb3e60e68cd6e0104dd88123dd95","observation_id":"875f6460-ea5c-4500-8ded-d6518d78f08a","resolution":{"observed_at":"2026-07-31T22:25:22.355748Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:25:22.357807Z","title":"Review of Contemporary Philosophy , volume =","venue":null,"work_id":null,"year":2011},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":68,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.357807Z"},"links":{"citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:c53af84bc24895d9e79796298362b4c3e652d3162e6c7c8660d6bf81df6787d5","observation_id":"e675796b-bf4d-4453-808b-93d628e0f637","resolution":{"observed_at":"2026-07-31T22:25:22.357807Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:25:22.359981Z","title":"Journal of Responsible Innovation , volume =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":69,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.359981Z"},"links":{"citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:bb789456ec24e60625d1523a170fa6b0c6c72eec13f70b67813fbb489a1ec761","observation_id":"02b62f16-cd79-44ac-a396-b8cb527a0952","resolution":{"observed_at":"2026-07-31T22:25:22.359981Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:25:22.361948Z","title":"2024 IEEE Security and Privacy Workshops (SPW) , pages =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":70,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.361948Z"},"links":{"citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:ec8fc80543af0944cdfbcc933a4ab02d56b6be02e369f7a8f096841273ee6774","observation_id":"57c9dc38-6018-4dbc-9172-28424514f2f5","resolution":{"observed_at":"2026-07-31T22:25:22.361948Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:25:22.364106Z","title":"Proceedings of the 2024 Conference of the North American Chapter of the Association for Computational Linguistics: Human Language Technologies (Volume 1: Long Papers) , pages =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":71,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.364106Z"},"links":{"citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:02e9e535a06692bdd680d19525b0b899d4d86cc897faa570751d2953b842c2bf","observation_id":"09184703-5519-433a-9693-bd21550e5bdd","resolution":{"observed_at":"2026-07-31T22:25:22.364106Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:25:22.366338Z","title":"2025 , volume =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":72,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.366338Z"},"links":{"citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:0b6306c9305d1da73dde84ae73bb34797e67e0bc6c54e9843d92c73e8ac67b26","observation_id":"9f404665-3387-4a02-848d-509dd0a43f90","resolution":{"observed_at":"2026-07-31T22:25:22.366338Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:25:22.368596Z","title":"2025 , month = nov, howpublished =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":73,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.368596Z"},"links":{"citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:9a2819effcf50c6eb48f943166dca990ef0b4a961f05a6cba377cfadb60dc847","observation_id":"2360a858-40b5-4ef7-8bd4-fd63e50dff8e","resolution":{"observed_at":"2026-07-31T22:25:22.368596Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:25:22.370661Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":74,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.370661Z"},"links":{"citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:a6ca82f087fdf3855dcaed88a6eb44b4eaad0bef21208f585458f654ebb1ba12","observation_id":"1cdd8cdf-f6e7-4006-bfe0-7236480460cb","resolution":{"observed_at":"2026-07-31T22:25:22.370661Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:25:22.372783Z","title":"Pappas and Eric Wong , title =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":75,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.372783Z"},"links":{"citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:3231e73941001d360df03265d2e3c738a55bdf40dac0f88890fc7c28900e9faa","observation_id":"5d4f1436-0c40-45a3-bfb5-73f356af5239","resolution":{"observed_at":"2026-07-31T22:25:22.372783Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:25:22.374858Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":76,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.374858Z"},"links":{"citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:60ca1a22b28794d71933c027316995d4d403214af2b487d9544f2c74e5c95b07","observation_id":"331cf0de-ac0b-45e4-bb4b-b85c9c4a7c29","resolution":{"observed_at":"2026-07-31T22:25:22.374858Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:25:22.377158Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":77,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.377158Z"},"links":{"citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:972271493ad9de0d8906ff0368a0ba4e01e6c6710c61449d1f220c22e56c92bc","observation_id":"66d396a7-a898-493b-ba55-a534062afb40","resolution":{"observed_at":"2026-07-31T22:25:22.377158Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:25:22.379423Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":78,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.379423Z"},"links":{"citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:bd78f13381766dd6debba2a292b831c9cea976bffe67cb92ea7246001fd6600a","observation_id":"14eac7c2-e646-4355-b1a3-33546b3d8b2a","resolution":{"observed_at":"2026-07-31T22:25:22.379423Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:25:22.381640Z","title":"32nd USENIX Security Symposium (USENIX Security 23) , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":79,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.381640Z"},"links":{"citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:d72058ce0541602d84c1e738d2f87eeccf44e97f058d72c372e60f4308b6e4fd","observation_id":"b2b0b3bb-7e2e-40c5-802b-079a1b6721f5","resolution":{"observed_at":"2026-07-31T22:25:22.381640Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:25:22.383904Z","title":"2024 IEEE 48th Annual Computers, Software, and Applications Conference (COMPSAC) , year =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":80,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.383904Z"},"links":{"citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:a0e28f683507dab007e7f1968c46fc12ef37935aed27fa03d0bdef2a4509d91a","observation_id":"c0ccb760-7df8-417e-8213-d777dc1e05dd","resolution":{"observed_at":"2026-07-31T22:25:22.383904Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:25:22.386237Z","title":"and Perrig, Adrian , title =","venue":null,"work_id":null,"year":2010},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":81,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.386237Z"},"links":{"citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:e6fe6baa626a8b7c21a48db4afe1d043dfb4cdaecf71fcb8cb838338ae229ee7","observation_id":"6cde6f81-f64f-40a8-aa62-d18a3e8a79bf","resolution":{"observed_at":"2026-07-31T22:25:22.386237Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:25:22.388313Z","title":"International Journal of Information Security , volume =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":82,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.388313Z"},"links":{"citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:437974c35c8fcc9ef1d5515496147e80180cb9590567f9c04665a598612db933","observation_id":"5c47ed56-d346-445b-9835-d78b473c6ecd","resolution":{"observed_at":"2026-07-31T22:25:22.388313Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:25:22.390448Z","title":"Proceedings on Privacy Enhancing Technologies , volume =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":83,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.390448Z"},"links":{"citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:aeff9e094230c81976afdf248448761efcc708753e3e51497ea8f89f3f5c37ad","observation_id":"5e240958-7441-48be-8cd3-8bc4338e9592","resolution":{"observed_at":"2026-07-31T22:25:22.390448Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:25:22.392525Z","title":"2025 , eprint=","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":84,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.392525Z"},"links":{"citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:681c956b945d90b318c16cff2b5203ced50585c9daf6f11632ab7179dd676bc1","observation_id":"99d1f8b7-0fc8-4b07-ba97-cd8e5c2a0789","resolution":{"observed_at":"2026-07-31T22:25:22.392525Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:25:22.394639Z","title":"arXiv preprint arXiv:2508.06601 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":85,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.394639Z"},"links":{"citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:49ed00caceec3a095da05abb61bd95bcfe94657f0dffb46252cb6cdacfeee905","observation_id":"70691130-55a5-400d-8952-ce925cae52c7","resolution":{"observed_at":"2026-07-31T22:25:22.394639Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:25:22.396796Z","title":"arXiv preprint arXiv:2603.23509 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":86,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.396796Z"},"links":{"citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:6ceac5760f16180d12438b81b1ceca9b0360acd3ecfa7af4ec5193b238996418","observation_id":"26141fe1-425a-4bdc-a6a7-9961affbe0a4","resolution":{"observed_at":"2026-07-31T22:25:22.396796Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2604.20930","last_updated":"2026-04-22T09:49:24Z","snapshot_observed_at":"2026-07-06T23:07:36.996629Z","submitted_at":"2026-04-22T09:49:24Z","title":"SafeRedirect: Defeating Internal Safety Collapse via Task-Completion Redirection in Frontier LLMs","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.20930","snapshot_observed_at":"2026-07-31T22:25:22.398947Z","title":"arXiv preprint arXiv:2604.20930 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":87,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.398947Z"},"links":{"cited_paper":"/paper/2604.20930","citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:09f9313dc9bfa3bd4e56f201f77622e4de7cc5c1b2e182eb1f267ec21f21732d","observation_id":"94ce69ca-58fe-464b-974e-3c96195c687f","resolution":{"observed_at":"2026-07-31T22:25:22.398947Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:25:22.401260Z","title":"arXiv preprint arXiv:2509.03888 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":88,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.401260Z"},"links":{"citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:6c7cea2e4593eea4d70b91fc14126e850b4096a3f1d0445034aa093039427ede","observation_id":"4b503c03-001e-42d3-a5fb-502fb60d7f35","resolution":{"observed_at":"2026-07-31T22:25:22.401260Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:25:22.403544Z","title":"arXiv preprint arXiv:2510.04320 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":89,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.403544Z"},"links":{"citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:53de14c8d83e1eeb88ebb55af0910c7ce6ff9fc71de0878307d62e37d581d2f7","observation_id":"ed2c2dfa-bf86-4cd6-b39c-1ff3635882bd","resolution":{"observed_at":"2026-07-31T22:25:22.403544Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T22:25:22.405724Z","title":"arXiv preprint arXiv:2506.10597 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":90,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.405724Z"},"links":{"citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:19777b3b22659bc2df8cd7e95878351183807f15626df0173a76995e50054a00","observation_id":"7df282d0-1abb-40b3-acb8-c28ea4ef7ff0","resolution":{"observed_at":"2026-07-31T22:25:22.405724Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-21T03:44:05.348192Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs"},"reference_resolution":{"displayed":90,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":1,"unresolved":89,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":90},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"thesis":"As of 24 August 2026, this Paper Citation Record lists 90 of 90 outbound references and 0 inbound Pith citation observations for arXiv:2607.27951."}