Pith. sign in

Paper Citation Record · LEDGER

Stateful Cooperative Agents Safeguarding LLMs Against Evolving Multi-Turn Attacks

As of 7 August 2026, this Paper Citation Record lists 66 of 66 outbound references and 0 inbound Pith citation observations for arXiv:2608.00134.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2608.00134 v1

Coverage vector

measured 66 of 66 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-04T01:16:15.489997Z

measured 66 of 66 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-07T06:34:17.273281+00:00

measured 0 of 0 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: cited_works

Reference resolution

66 of 66 outbound references displayed

  • verified exact0
  • verified fuzzy0
  • unresolved66
  • parse uncertain0
  • malformed identifier0
  • metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation 798a21b2-7217-4fa7-b796-04582796ca4b · outbound

This paper cites GPT-4 Technical Report.

Stateful Cooperative Agents Safeguarding LLMs Against Evolving Multi-Turn Attacks GPT-4 Technical Report

Reference 1

Resolution
unresolved
no resolver link, observed 2026-08-04T01:16:09.264836Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T01:16:09.264836Z digest=sha256:ce6d912e5cb84572e91a8b58993ead9d54058c53947087cd7e6558d14003213d

Observation 7e9400a6-d005-41c6-add6-9971e971b577 · outbound

This paper cites Gemini: A Family of Highly Capable Multimodal Models.

Stateful Cooperative Agents Safeguarding LLMs Against Evolving Multi-Turn Attacks Gemini: A Family of Highly Capable Multimodal Models

Reference 2

Resolution
unresolved
no resolver link, observed 2026-08-04T01:16:09.358040Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T01:16:09.358040Z digest=sha256:84aeb228f27ff6c10239945c001d52ee745c7bb2a75f8be9fc17f724123d31fd

Observation 197cda93-1f6e-451b-ba6b-589f4480435f · outbound

This paper cites LLaMA: Open and Efficient Foundation Language Models.

Stateful Cooperative Agents Safeguarding LLMs Against Evolving Multi-Turn Attacks LLaMA: Open and Efficient Foundation Language Models

Reference 3

Resolution
unresolved
no resolver link, observed 2026-08-04T01:16:09.397390Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T01:16:09.397390Z digest=sha256:019e87f1e56dede5f99aa8f07f9302f357be3b46f1a321b4e91e95b9d89f32e0

Observation 1afd53bc-d838-4a72-8bd4-2cb3df258454 · outbound

This paper cites A Survey of Large Language Models in Medicine: Progress, Application, and Challenge.

Stateful Cooperative Agents Safeguarding LLMs Against Evolving Multi-Turn Attacks A Survey of Large Language Models in Medicine: Progress, Application, and Challenge

Reference 4

Resolution
unresolved
no resolver link, observed 2026-08-04T01:16:09.467147Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T01:16:09.467147Z digest=sha256:46c62a63b5750b63cfdc7c2efffa191b9913e535534e6f8fe3762e1a847a0ac2

Observation 155f7a77-09a2-4a6b-b4de-b421612b25a3 · outbound

This paper cites Exploring Recommendation Capabilities of GPT-4V(ision): A Preliminary Case Study.

Stateful Cooperative Agents Safeguarding LLMs Against Evolving Multi-Turn Attacks Exploring Recommendation Capabilities of GPT-4V(ision): A Preliminary Case Study

Reference 5

Resolution
unresolved
no resolver link, observed 2026-08-04T01:16:09.515819Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T01:16:09.515819Z digest=sha256:91a0b66c51a599bd49186e85176494177612f462cd8525288cc3beef5e973d54

Observation d1e15201-e534-458f-aad3-c61eaa37143d · outbound

This paper cites {LLM-Fuzzer}: Scaling assessment of large language model jailbreaks,.

Stateful Cooperative Agents Safeguarding LLMs Against Evolving Multi-Turn Attacks {LLM-Fuzzer}: Scaling assessment of large language model jailbreaks,

Reference 6

Resolution
unresolved
no resolver link, observed 2026-08-04T01:16:09.563310Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T01:16:09.563310Z digest=sha256:c96dc9d21b6b1355660c7102e75668554be7b166ec5253f3a610e0be77aaa2e4

Observation bb0cadd4-0fc1-4fa6-ba87-396222896a5e · outbound

This paper cites Exploiting the Index Gradients for Optimization-Based Jailbreaking on Large Language Models.

Stateful Cooperative Agents Safeguarding LLMs Against Evolving Multi-Turn Attacks Exploiting the Index Gradients for Optimization-Based Jailbreaking on Large Language Models

Reference 7

Resolution
unresolved
no resolver link, observed 2026-08-04T01:16:09.626615Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T01:16:09.626615Z digest=sha256:06caf8b2f070b2f98df8d9c96e342fac626f93820a24ed223ee8770bc0561c29

Observation ab6b3cef-02ed-44c9-aa4b-6c404eb1e212 · outbound

This paper cites Making them ask and answer: Jailbreaking large language models in few queries via disguise and reconstruction,.

Stateful Cooperative Agents Safeguarding LLMs Against Evolving Multi-Turn Attacks Making them ask and answer: Jailbreaking large language models in few queries via disguise and reconstruction,

Reference 8

Resolution
unresolved
no resolver link, observed 2026-08-04T01:16:09.673549Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T01:16:09.673549Z digest=sha256:d36a9fb7dc4d9e17536fdb8826461a0cab756f069908594d9157af86e40d2996

Observation 986c3a0b-3af2-4f0f-9beb-c9e6bdff0a39 · outbound

This paper cites Helping big language models protect themselves: An enhanced filtering and summarization system,.

Stateful Cooperative Agents Safeguarding LLMs Against Evolving Multi-Turn Attacks Helping big language models protect themselves: An enhanced filtering and summarization system,

Reference 9

Resolution
unresolved
no resolver link, observed 2026-08-04T01:16:09.743694Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T01:16:09.743694Z digest=sha256:56839740ea10408a55a6d893881e2e272704ec44cb36797f968c8d5afd01a668

Observation 404c6bc3-e694-4d71-8157-9785c1c560ff · outbound

This paper cites X-Teaming: Multi-Turn Jailbreaks and Defenses with Adaptive Multi-Agents.

Stateful Cooperative Agents Safeguarding LLMs Against Evolving Multi-Turn Attacks X-Teaming: Multi-Turn Jailbreaks and Defenses with Adaptive Multi-Agents

Reference 10

Resolution
unresolved
no resolver link, observed 2026-08-04T01:16:09.808925Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T01:16:09.808925Z digest=sha256:8973482dd34343fa3bf2fb13c75dc6d44bf5ccf9ffe0a30181ac08c01c15c9d0

Observation 42419e43-111b-46b5-987d-646f2b11d314 · outbound

This paper cites Catastrophic Jailbreak of Open-source LLMs via Exploiting Generation.

Stateful Cooperative Agents Safeguarding LLMs Against Evolving Multi-Turn Attacks Catastrophic Jailbreak of Open-source LLMs via Exploiting Generation

Reference 11

Resolution
unresolved
no resolver link, observed 2026-08-04T01:16:09.952167Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T01:16:09.952167Z digest=sha256:1c150347913545a24ef079c19551e041674871e62b656fc9a8ddb37c4df0fd6f

Observation 37abdc89-91e0-4d96-b872-5b08253372c3 · outbound

This paper cites Datasentinel: A game-theoretic detection of prompt injection attacks,.

Stateful Cooperative Agents Safeguarding LLMs Against Evolving Multi-Turn Attacks Datasentinel: A game-theoretic detection of prompt injection attacks,

Reference 12

Resolution
unresolved
no resolver link, observed 2026-08-04T01:16:10.059041Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T01:16:10.059041Z digest=sha256:236eafbbfd949b1fd6232688003d2cb93d6a5a34823a51f650b1fb23883b93ca

Observation d9fddcb5-449b-45cc-b026-56190ae5a93b · outbound

This paper cites MasterKey: Automated Jailbreak Across Multiple Large Language Model Chatbots.

Stateful Cooperative Agents Safeguarding LLMs Against Evolving Multi-Turn Attacks MasterKey: Automated Jailbreak Across Multiple Large Language Model Chatbots

Reference 13

Resolution
unresolved
no resolver link, observed 2026-08-04T01:16:10.099322Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T01:16:10.099322Z digest=sha256:be379867b97f04a3b64a80683e3cb3cecc05f46192cf306e815100aeaae83ec9

Observation 61e51d5b-99a8-4d04-bdca-02bb060bf374 · outbound

This paper cites Fight back against jailbreaking via prompt adversarial tuning,.

Stateful Cooperative Agents Safeguarding LLMs Against Evolving Multi-Turn Attacks Fight back against jailbreaking via prompt adversarial tuning,

Reference 14

Resolution
unresolved
no resolver link, observed 2026-08-04T01:16:10.155570Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T01:16:10.155570Z digest=sha256:d7db7e510a986e8ead7236e1c6933039134c01eecf4452c81924d092eb4e5cfc

Observation 6b501988-70d3-46de-a021-4fa32eacd20a · outbound

This paper cites Safety-Tuned LLaMAs: Lessons From Improving the Safety of Large Language Models that Follow Instructions.

Stateful Cooperative Agents Safeguarding LLMs Against Evolving Multi-Turn Attacks Safety-Tuned LLaMAs: Lessons From Improving the Safety of Large Language Models that Follow Instructions

Reference 15

Resolution
unresolved
no resolver link, observed 2026-08-04T01:16:10.204874Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T01:16:10.204874Z digest=sha256:328aee024309bb9c65f03263a3b01d82f6b9fa538bddc0628f8348b2e13efe49

Observation 7a4e43e2-0e5d-4de7-bdcb-23599c9c7c44 · outbound

This paper cites Distributional preference learning: Understanding and accounting for hidden context in rlhf,.

Stateful Cooperative Agents Safeguarding LLMs Against Evolving Multi-Turn Attacks Distributional preference learning: Understanding and accounting for hidden context in rlhf,

Reference 16

Resolution
unresolved
no resolver link, observed 2026-08-04T01:16:10.255483Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T01:16:10.255483Z digest=sha256:8bfc5178ae467e3e2ac6dfd76fd9121a3846686c2e1b2b295cd5f855ed369086

Observation c5232ba9-5422-459d-ba88-940486fce466 · outbound

This paper cites Attacking Large Language Models with Projected Gradient Descent.

Stateful Cooperative Agents Safeguarding LLMs Against Evolving Multi-Turn Attacks Attacking Large Language Models with Projected Gradient Descent

Reference 17

Resolution
unresolved
no resolver link, observed 2026-08-04T01:16:10.330416Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T01:16:10.330416Z digest=sha256:d08b2884cadaecf3fd4ba4d3c38da9ffe833ce324fe3c0549c782b03574c1252

Observation fa11cee1-adf0-4aaf-9489-059349dd9982 · outbound

This paper cites Universal and Transferable Adversarial Attacks on Aligned Language Models.

Stateful Cooperative Agents Safeguarding LLMs Against Evolving Multi-Turn Attacks Universal and Transferable Adversarial Attacks on Aligned Language Models

Reference 18

Resolution
unresolved
no resolver link, observed 2026-08-04T01:16:10.406423Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T01:16:10.406423Z digest=sha256:93b46d5d56f6727c795ddd5e4a14d108ae8020ef418bdcf2c778a3c0b64294b2

Observation 0f7201d3-4551-4f8f-a646-d595f553792f · outbound

This paper cites AutoDAN: Generating Stealthy Jailbreak Prompts on Aligned Large Language Models.

Stateful Cooperative Agents Safeguarding LLMs Against Evolving Multi-Turn Attacks AutoDAN: Generating Stealthy Jailbreak Prompts on Aligned Large Language Models

Reference 19

Resolution
unresolved
no resolver link, observed 2026-08-04T01:16:10.469528Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T01:16:10.469528Z digest=sha256:ee635f6c8457fa29c9ee1cf79dcd4c54d888b60fce3dcf1386f83d6af4d9d049

Observation a36c6875-97c0-47a9-8bd8-25e0b0f97ecd · outbound

This paper cites AdvPrompter: Fast Adaptive Adversarial Prompting for LLMs.

Stateful Cooperative Agents Safeguarding LLMs Against Evolving Multi-Turn Attacks AdvPrompter: Fast Adaptive Adversarial Prompting for LLMs

Reference 20

Resolution
unresolved
no resolver link, observed 2026-08-04T01:16:10.569808Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T01:16:10.569808Z digest=sha256:a7804477db42a2337a262df88b7fec04435b95b8301fa416f4548843ae88bd8c

Observation a37eead2-fe61-4568-bb8d-e8cebb9cacac · outbound

This paper cites How Johnny Can Persuade LLMs to Jailbreak Them: Rethinking Persuasion to Challenge AI Safety by Humanizing LLMs.

Stateful Cooperative Agents Safeguarding LLMs Against Evolving Multi-Turn Attacks How Johnny Can Persuade LLMs to Jailbreak Them: Rethinking Persuasion to Challenge AI Safety by Humanizing LLMs

Reference 21

Resolution
unresolved
no resolver link, observed 2026-08-04T01:16:10.686916Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T01:16:10.686916Z digest=sha256:6ce39802ba8f9692e97cbcd5d1b152da2ec3623afec76aebfd664cbfc3bd2b90

Observation 15e36a56-ffb3-45ed-9880-b7a8ba38d7b5 · outbound

This paper cites GPTFUZZER: Red Teaming Large Language Models with Auto-Generated Jailbreak Prompts.

Stateful Cooperative Agents Safeguarding LLMs Against Evolving Multi-Turn Attacks GPTFUZZER: Red Teaming Large Language Models with Auto-Generated Jailbreak Prompts

Reference 22

Resolution
unresolved
no resolver link, observed 2026-08-04T01:16:10.758446Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T01:16:10.758446Z digest=sha256:f584c22465053be0fe3db1426d54c067cef95e8516252b7a6eaf932ddba5cd68

Observation b286444e-f098-4bb3-affc-415bf51b6227 · outbound

This paper cites Honeytrap: Deceiving large language model attackers to honeypot traps with resilient multi-agent defense,.

Stateful Cooperative Agents Safeguarding LLMs Against Evolving Multi-Turn Attacks Honeytrap: Deceiving large language model attackers to honeypot traps with resilient multi-agent defense,

Reference 23

Resolution
unresolved
no resolver link, observed 2026-08-04T01:16:10.811489Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T01:16:10.811489Z digest=sha256:c338c7cd3d564d19976acc2db3ff958faaf4cbb7622a601133d0639ae0ddbd57

Observation 75924873-2eeb-426e-8578-a3e07ec5c661 · outbound

This paper cites Great, Now Write an Article About That: The Crescendo Multi-Turn LLM Jailbreak Attack.

Stateful Cooperative Agents Safeguarding LLMs Against Evolving Multi-Turn Attacks Great, Now Write an Article About That: The Crescendo Multi-Turn LLM Jailbreak Attack

Reference 24

Resolution
unresolved
no resolver link, observed 2026-08-04T01:16:10.875255Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T01:16:10.875255Z digest=sha256:a11410663ee4e71c48491ad46247d89eacb23ea08999b56ff3ed24cda7fec631

Observation f2c38328-d87e-4d06-bd39-e9b7c027bb6d · outbound

This paper cites Tree of attacks: Jailbreaking black-box llms automatically,.

Stateful Cooperative Agents Safeguarding LLMs Against Evolving Multi-Turn Attacks Tree of attacks: Jailbreaking black-box llms automatically,

Reference 25

Resolution
unresolved
no resolver link, observed 2026-08-04T01:16:10.989189Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T01:16:10.989189Z digest=sha256:b6af87b3d2adce4122f6f00c0ce91d139698a58f604b985e8004098d423dd807

Observation 698e5121-2960-4aa4-a4cb-2b58e6633457 · outbound

This paper cites PAPILLON: Efficient and Stealthy Fuzz Testing-Powered Jailbreaks for LLMs.

Stateful Cooperative Agents Safeguarding LLMs Against Evolving Multi-Turn Attacks PAPILLON: Efficient and Stealthy Fuzz Testing-Powered Jailbreaks for LLMs

Reference 26

Resolution
unresolved
no resolver link, observed 2026-08-04T01:16:11.117001Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T01:16:11.117001Z digest=sha256:c0a19f91b41f411e8f6b73f7976f011b5c7f1ac8ec4199153e95bb5891d7c4c5

Observation 6b57bb15-a2bf-48a0-aead-4011b5f951a5 · outbound

This paper cites ” do anything now.

Stateful Cooperative Agents Safeguarding LLMs Against Evolving Multi-Turn Attacks ” do anything now

Reference 27

Resolution
unresolved
no resolver link, observed 2026-08-04T01:16:11.197104Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T01:16:11.197104Z digest=sha256:9ec2d1bdf9f9cbc18ea4d94c43d8175cd8527734e7076350c4319aeece6204f9

Observation 1e0a7775-d09c-445a-b87c-59792a2412ed · outbound

This paper cites Bag of Tricks: Benchmarking of Jailbreak Attacks on LLMs.

Stateful Cooperative Agents Safeguarding LLMs Against Evolving Multi-Turn Attacks Bag of Tricks: Benchmarking of Jailbreak Attacks on LLMs

Reference 28

Resolution
unresolved
no resolver link, observed 2026-08-04T01:16:11.264145Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T01:16:11.264145Z digest=sha256:a0efc2ca86496386fbd1bacd00c49a0521780b43608f54a3cd58cb81b4d92c14

Observation ed4c2d9f-cf68-4431-816e-f8271dc0c47a · outbound

This paper cites A Survey on Trustworthy LLM Agents: Threats and Countermeasures.

Stateful Cooperative Agents Safeguarding LLMs Against Evolving Multi-Turn Attacks A Survey on Trustworthy LLM Agents: Threats and Countermeasures

Reference 29

Resolution
unresolved
no resolver link, observed 2026-08-04T01:16:11.444009Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T01:16:11.444009Z digest=sha256:5b454b267e151125fa5bbdad1cf37299a9bcae3539fd16b4bf517a4e890958b6

Observation b701a1c7-75e3-470a-8697-8a2126d352c8 · outbound

This paper cites Masterkey: Automated jailbreaking of large language model chatbots,.

Stateful Cooperative Agents Safeguarding LLMs Against Evolving Multi-Turn Attacks Masterkey: Automated jailbreaking of large language model chatbots,

Reference 30

Resolution
unresolved
no resolver link, observed 2026-08-04T01:16:11.540024Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T01:16:11.540024Z digest=sha256:0502e3b8725218a9c26c08f15d320d7fb6134281f731738752d885a078338e08

Observation 9043d682-2db1-45fc-bc51-2d569acad0a4 · outbound

This paper cites Jailbreakzoo: Survey, landscapes, and horizons in jailbreaking large lan- guage and vision-language models,.

Stateful Cooperative Agents Safeguarding LLMs Against Evolving Multi-Turn Attacks Jailbreakzoo: Survey, landscapes, and horizons in jailbreaking large lan- guage and vision-language models,

Reference 31

Resolution
unresolved
no resolver link, observed 2026-08-04T01:16:11.664743Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T01:16:11.664743Z digest=sha256:1a34ede6bfb9b7a5e2e9a7db3f6dd8579ac5da081e0c52b352982e3997f20ebe

Observation 1292fb00-17c5-4c13-b6d4-8fd53a9db6bc · outbound

This paper cites Gpt- 4 is too smart to be safe: Stealthy chat with llms via cipher,.

Stateful Cooperative Agents Safeguarding LLMs Against Evolving Multi-Turn Attacks Gpt- 4 is too smart to be safe: Stealthy chat with llms via cipher,

Reference 32

Resolution
unresolved
no resolver link, observed 2026-08-04T01:16:11.766046Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T01:16:11.766046Z digest=sha256:16b917d3acd9b5401ce16eeeaa3313a39f8f91c2432e241d74ef5f9dc98d6979

Observation e08f1a45-122a-409c-b3b1-99c7d60ad914 · outbound

This paper cites Jailbreaking ChatGPT via Prompt Engineering: An Empirical Study.

Stateful Cooperative Agents Safeguarding LLMs Against Evolving Multi-Turn Attacks Jailbreaking ChatGPT via Prompt Engineering: An Empirical Study

Reference 33

Resolution
unresolved
no resolver link, observed 2026-08-04T01:16:11.894746Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T01:16:11.894746Z digest=sha256:3c49921b80c85db8e6481d4a444c947a2ad62d3e7e52572a965af03ac84eb35f

Observation 43d83782-7851-4cf1-97a9-6032f993231a · outbound

This paper cites Boosting Jailbreak Transferability for Large Language Models.

Stateful Cooperative Agents Safeguarding LLMs Against Evolving Multi-Turn Attacks Boosting Jailbreak Transferability for Large Language Models

Reference 34

Resolution
unresolved
no resolver link, observed 2026-08-04T01:16:12.004751Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T01:16:12.004751Z digest=sha256:0fb1f41e1ea5f0f1ccf7a8a44083e44fe59cd47d6e4e02d8cf919a63f1145955

Observation be428ec5-f14b-4543-a2cc-a2b6aab04e02 · outbound

This paper cites Jailbreaking Black Box Large Language Models in Twenty Queries.

Stateful Cooperative Agents Safeguarding LLMs Against Evolving Multi-Turn Attacks Jailbreaking Black Box Large Language Models in Twenty Queries

Reference 35

Resolution
unresolved
no resolver link, observed 2026-08-04T01:16:12.144831Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T01:16:12.144831Z digest=sha256:34ba003671bf708d7f70acc7d96ea9ecf42e645c1346a91b88852ff9b567a882

Observation 9481f41b-60c7-4599-9b37-10358127434f · outbound

This paper cites DeepInception: Hypnotize Large Language Model to Be Jailbreaker.

Stateful Cooperative Agents Safeguarding LLMs Against Evolving Multi-Turn Attacks DeepInception: Hypnotize Large Language Model to Be Jailbreaker

Reference 36

Resolution
unresolved
no resolver link, observed 2026-08-04T01:16:12.245800Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T01:16:12.245800Z digest=sha256:fb47cbfe288b5023edba843cab8843a0f02ae30d07948392ddf4269fa981510d

Observation bec4a2cb-5209-4cbe-9ebe-e9c849fb47d7 · outbound

This paper cites Tempest: Autonomous Multi-Turn Jailbreaking of Large Language Models with Tree Search.

Stateful Cooperative Agents Safeguarding LLMs Against Evolving Multi-Turn Attacks Tempest: Autonomous Multi-Turn Jailbreaking of Large Language Models with Tree Search

Reference 37

Resolution
unresolved
no resolver link, observed 2026-08-04T01:16:12.344757Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T01:16:12.344757Z digest=sha256:34c40e14f282bf8d2e8381b43d606c2d0b9548215f9887c7ff8e548ec7a89cec

Observation 5b40f7fa-4ed7-4e8a-ad95-f43854b50ad1 · outbound

This paper cites Defending LLMs against Jailbreaking Attacks via Backtranslation.

Stateful Cooperative Agents Safeguarding LLMs Against Evolving Multi-Turn Attacks Defending LLMs against Jailbreaking Attacks via Backtranslation

Reference 38

Resolution
unresolved
no resolver link, observed 2026-08-04T01:16:12.515641Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T01:16:12.515641Z digest=sha256:4bc948d03b61a33d6b5bc77d15b8e352cde35290b112dc47edb4ef70a29ef481

Observation d520fa31-9bdf-4ace-9186-f1ddc6454d72 · outbound

This paper cites Jailbroken: How does llm safety training fail?.

Stateful Cooperative Agents Safeguarding LLMs Against Evolving Multi-Turn Attacks Jailbroken: How does llm safety training fail?

Reference 39

Resolution
unresolved
no resolver link, observed 2026-08-04T01:16:12.672284Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T01:16:12.672284Z digest=sha256:02bedb341dd2c9949761968e459c62c6a79bbffe02bae4bb51b2fc7f8603fba3

Observation 5aa005cc-1aac-45f5-b27f-407bd964ef24 · outbound

This paper cites Red-Teaming Large Language Models using Chain of Utterances for Safety-Alignment.

Stateful Cooperative Agents Safeguarding LLMs Against Evolving Multi-Turn Attacks Red-Teaming Large Language Models using Chain of Utterances for Safety-Alignment

Reference 40

Resolution
unresolved
no resolver link, observed 2026-08-04T01:16:12.719886Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T01:16:12.719886Z digest=sha256:4b5e6750c23e022ccf0bc45427ffb81128f2f922a7acbff6c22b378bebff8208

Observation 7a38e1ad-70e8-40d5-be3d-d16c2fb0d05d · outbound

This paper cites Attack prompt generation for red teaming and defending large language mod- els,.

Stateful Cooperative Agents Safeguarding LLMs Against Evolving Multi-Turn Attacks Attack prompt generation for red teaming and defending large language mod- els,

Reference 41

Resolution
unresolved
no resolver link, observed 2026-08-04T01:16:12.788834Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T01:16:12.788834Z digest=sha256:283d44e5554b13c0f2d42c7fdcf00f320c4637b7539c99fdf3803d2b0c41d6c5

Observation 48601139-73e1-473a-ad66-da94405e14d2 · outbound

This paper cites From Theft to Bomb-Making: The Ripple Effect of Unlearning in Defending Against Jailbreak Attacks.

Stateful Cooperative Agents Safeguarding LLMs Against Evolving Multi-Turn Attacks From Theft to Bomb-Making: The Ripple Effect of Unlearning in Defending Against Jailbreak Attacks

Reference 42

Resolution
unresolved
no resolver link, observed 2026-08-04T01:16:12.873272Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T01:16:12.873272Z digest=sha256:490cfa8b3f14c7e0f2cf68895d3371de804f0cb60a1111c67f26b9f9b3086944

Observation fc595a05-2b83-4101-a1c1-46c4445fa5de · outbound

This paper cites Baseline Defenses for Adversarial Attacks Against Aligned Language Models.

Stateful Cooperative Agents Safeguarding LLMs Against Evolving Multi-Turn Attacks Baseline Defenses for Adversarial Attacks Against Aligned Language Models

Reference 43

Resolution
unresolved
no resolver link, observed 2026-08-04T01:16:12.949365Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T01:16:12.949365Z digest=sha256:977e6332fd6e16898008e7279caff64b8e3bdbc8503ac349696b1631bcb552f6

Observation 771bd9f5-e888-44a8-a10d-77ae5df37a46 · outbound

This paper cites Certifying LLM Safety against Adversarial Prompting.

Stateful Cooperative Agents Safeguarding LLMs Against Evolving Multi-Turn Attacks Certifying LLM Safety against Adversarial Prompting

Reference 44

Resolution
unresolved
no resolver link, observed 2026-08-04T01:16:13.014747Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T01:16:13.014747Z digest=sha256:3664a1df82ba3344d42fd1542c9a391f49076f61ec5bc5ac16fd91843570fe27

Observation 81cb2df2-f37f-457d-a8d0-16e043624665 · outbound

This paper cites SmoothLLM: Defending Large Language Models Against Jailbreaking Attacks.

Stateful Cooperative Agents Safeguarding LLMs Against Evolving Multi-Turn Attacks SmoothLLM: Defending Large Language Models Against Jailbreaking Attacks

Reference 45

Resolution
unresolved
no resolver link, observed 2026-08-04T01:16:13.134915Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T01:16:13.134915Z digest=sha256:51bd46cc66442cbe77ee82f9729a32662be933f2fa2d42f358b6b8cafdd1ded5

Observation ba8886ca-b654-4e61-8022-fc96553d7efc · outbound

This paper cites Defending Against Alignment-Breaking Attacks via Robustly Aligned LLM.

Stateful Cooperative Agents Safeguarding LLMs Against Evolving Multi-Turn Attacks Defending Against Alignment-Breaking Attacks via Robustly Aligned LLM

Reference 46

Resolution
unresolved
no resolver link, observed 2026-08-04T01:16:13.252157Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T01:16:13.252157Z digest=sha256:411d263343e049862934ef07f1a04375246d9f4dad929a4a763353e27c477e9c

Observation 9744ff32-f663-4470-a466-7f4a778c6c67 · outbound

This paper cites Defending chatgpt against jailbreak attack via self-reminders,.

Stateful Cooperative Agents Safeguarding LLMs Against Evolving Multi-Turn Attacks Defending chatgpt against jailbreak attack via self-reminders,

Reference 47

Resolution
unresolved
no resolver link, observed 2026-08-04T01:16:13.364750Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T01:16:13.364750Z digest=sha256:0e0467b76eeadf32d2b036f7150e5852258b3f488d6f2de80e68dbf3b8750802

Observation b0ef8a60-ca68-4930-a283-77ed33a62d93 · outbound

This paper cites Steering dialogue dynamics for robustness against multi-turn jailbreaking attacks,.

Stateful Cooperative Agents Safeguarding LLMs Against Evolving Multi-Turn Attacks Steering dialogue dynamics for robustness against multi-turn jailbreaking attacks,

Reference 48

Resolution
unresolved
no resolver link, observed 2026-08-04T01:16:13.535734Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T01:16:13.535734Z digest=sha256:8133f8df144babccebfa39bc302fead2a0cba023c348be76b8819c1c849bae94

Observation 9921ae4a-ca99-4243-9263-0365000a2123 · outbound

This paper cites X-boundary: Establishing exact safety boundary to shield llms from multi-turn jailbreaks without compromising usability,.

Stateful Cooperative Agents Safeguarding LLMs Against Evolving Multi-Turn Attacks X-boundary: Establishing exact safety boundary to shield llms from multi-turn jailbreaks without compromising usability,

Reference 49

Resolution
unresolved
no resolver link, observed 2026-08-04T01:16:13.651328Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T01:16:13.651328Z digest=sha256:7066d8ee8f1b855e8feae0c34174d5ef7c8daa65bc0c581c117bcc2c4f45044d

Observation b15ac3db-aece-42e1-aa4a-759eb576099d · outbound

This paper cites RED QUEEN: Safeguarding Large Language Models against Concealed Multi-Turn Jailbreaking.

Stateful Cooperative Agents Safeguarding LLMs Against Evolving Multi-Turn Attacks RED QUEEN: Safeguarding Large Language Models against Concealed Multi-Turn Jailbreaking

Reference 50

Resolution
unresolved
no resolver link, observed 2026-08-04T01:16:13.794829Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T01:16:13.794829Z digest=sha256:d756c16d2df44e47bc74b2511188f212fbde578870b948af774ea4a2330a17d2

Observation 1e43c751-4a75-44ae-8c4a-12950bd73985 · outbound

This paper cites Generative agents: Interactive simulacra of human behavior,.

Stateful Cooperative Agents Safeguarding LLMs Against Evolving Multi-Turn Attacks Generative agents: Interactive simulacra of human behavior,

Reference 51

Resolution
unresolved
no resolver link, observed 2026-08-04T01:16:13.872894Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T01:16:13.872894Z digest=sha256:b51913196968288cca995219229838bb279e3c72088224274076744de7917bcb

Observation 6bb1203a-fa28-45f2-88ae-bd7312b242a7 · outbound

This paper cites Training Socially Aligned Language Models on Simulated Social Interactions.

Stateful Cooperative Agents Safeguarding LLMs Against Evolving Multi-Turn Attacks Training Socially Aligned Language Models on Simulated Social Interactions

Reference 52

Resolution
unresolved
no resolver link, observed 2026-08-04T01:16:13.946073Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T01:16:13.946073Z digest=sha256:abd0565f310fbfbc419ae69b204d03b6355849a565a3440435d1c0e8b48325e5

Observation ac613f5c-476e-4f49-936a-dd1cf9cfb4f0 · outbound

This paper cites Camel: Communicative agents for.

Stateful Cooperative Agents Safeguarding LLMs Against Evolving Multi-Turn Attacks Camel: Communicative agents for

Reference 53

Resolution
unresolved
no resolver link, observed 2026-08-04T01:16:14.022585Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T01:16:14.022585Z digest=sha256:db5eb0dcceb9eb4303d25cc9923c50cb30a1b14cd487ee59fa6beca37ef8d5dd

Observation 8a872541-14d7-4d58-8867-cd96d55ade56 · outbound

This paper cites AutoGen: Enabling Next-Gen LLM Applications via Multi-Agent Conversation.

Stateful Cooperative Agents Safeguarding LLMs Against Evolving Multi-Turn Attacks AutoGen: Enabling Next-Gen LLM Applications via Multi-Agent Conversation

Reference 54

Resolution
unresolved
no resolver link, observed 2026-08-04T01:16:14.080163Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T01:16:14.080163Z digest=sha256:711dc15fbaee952092d1a31465bf599494d16144b09e3c798c0d9711fba429c5

Observation d3c7f28f-25fa-4bd5-9330-81387c2e42df · outbound

This paper cites Metagpt: Meta programming for a multi-agent collaborative framework,.

Stateful Cooperative Agents Safeguarding LLMs Against Evolving Multi-Turn Attacks Metagpt: Meta programming for a multi-agent collaborative framework,

Reference 55

Resolution
unresolved
no resolver link, observed 2026-08-04T01:16:14.172690Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T01:16:14.172690Z digest=sha256:376e38349a4479d0c2b3f5b6d76c2065879dd2717281992b92147dd0db74ecad

Observation 66ee22d6-3d85-4913-9552-7bfac0e5507c · outbound

This paper cites ChatDev: Communicative Agents for Software Development.

Stateful Cooperative Agents Safeguarding LLMs Against Evolving Multi-Turn Attacks ChatDev: Communicative Agents for Software Development

Reference 56

Resolution
unresolved
no resolver link, observed 2026-08-04T01:16:14.275406Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T01:16:14.275406Z digest=sha256:33494e0b187a826a76b337df8dd53b17ac095a42832b703cc0bfe72bd508a1b7

Observation 8892c0c9-d9e9-4521-b8d7-f7b5f9749de4 · outbound

This paper cites Improving Factuality and Reasoning in Language Models through Multiagent Debate.

Stateful Cooperative Agents Safeguarding LLMs Against Evolving Multi-Turn Attacks Improving Factuality and Reasoning in Language Models through Multiagent Debate

Reference 57

Resolution
unresolved
no resolver link, observed 2026-08-04T01:16:14.424749Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T01:16:14.424749Z digest=sha256:fa63e38e74ffbb10cfec91ea3135713626432ac7fd40f2ae46fe644739e1b4ec

Observation c713df20-a4d7-48cd-9945-5ffdffa5331d · outbound

This paper cites Encouraging Divergent Thinking in Large Language Models through Multi-Agent Debate.

Stateful Cooperative Agents Safeguarding LLMs Against Evolving Multi-Turn Attacks Encouraging Divergent Thinking in Large Language Models through Multi-Agent Debate

Reference 58

Resolution
unresolved
no resolver link, observed 2026-08-04T01:16:14.553943Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T01:16:14.553943Z digest=sha256:133cfc41ee09297b52bd0c7e48e588b0a70ee87a8cdd32b678b37ef3439b0471

Observation ccbcfc1e-1960-4ffa-af48-ee77962be44e · outbound

This paper cites Defending large language models against jailbreaking attacks through goal priori- tization,.

Stateful Cooperative Agents Safeguarding LLMs Against Evolving Multi-Turn Attacks Defending large language models against jailbreaking attacks through goal priori- tization,

Reference 59

Resolution
unresolved
no resolver link, observed 2026-08-04T01:16:14.624835Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T01:16:14.624835Z digest=sha256:c5d7dbfc177d143deea1e3405d12c9a3178874bc7fcdc5ab8fcd44068ff74f02

Observation 3de10f62-1386-4ca4-9a38-e8c914f54690 · outbound

This paper cites Robust prompt optimization for defend- ing language models against jailbreaking attacks,.

Stateful Cooperative Agents Safeguarding LLMs Against Evolving Multi-Turn Attacks Robust prompt optimization for defend- ing language models against jailbreaking attacks,

Reference 60

Resolution
unresolved
no resolver link, observed 2026-08-04T01:16:14.814826Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T01:16:14.814826Z digest=sha256:b90da4c6acf951cfc7354a88677c4b43c83474d9e39190a6b4fcf1fdbadbee8e

Observation e49c6208-7c87-4509-8609-7c19ad7b1c60 · outbound

This paper cites SecurityLingua: Efficient Defense of LLM Jailbreak Attacks via Security-Aware Prompt Compression.

Stateful Cooperative Agents Safeguarding LLMs Against Evolving Multi-Turn Attacks SecurityLingua: Efficient Defense of LLM Jailbreak Attacks via Security-Aware Prompt Compression

Reference 61

Resolution
unresolved
no resolver link, observed 2026-08-04T01:16:14.920942Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T01:16:14.920942Z digest=sha256:a678919ec9b4f7f692f1b2c49a2d1fafe6c430aee470e60a76d2f8c2aa83aa80

Observation ad2bd6db-372d-4528-bcb9-99a440857d4b · outbound

This paper cites Fine-tuning aligned language models compromises safety, even when users do not intend to!.

Stateful Cooperative Agents Safeguarding LLMs Against Evolving Multi-Turn Attacks Fine-tuning aligned language models compromises safety, even when users do not intend to!

Reference 62

Resolution
unresolved
no resolver link, observed 2026-08-04T01:16:15.024609Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T01:16:15.024609Z digest=sha256:b9854298a38cf0b9c2acdf6bf402d094d64062b98082c38ff83390b4d63a5dba

Observation cfe5471f-fd88-46ed-a81b-d8486bf54dc1 · outbound

This paper cites Jailbreaking black box large language models in twenty queries,.

Stateful Cooperative Agents Safeguarding LLMs Against Evolving Multi-Turn Attacks Jailbreaking black box large language models in twenty queries,

Reference 63

Resolution
unresolved
no resolver link, observed 2026-08-04T01:16:15.148273Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T01:16:15.148273Z digest=sha256:74e36050c29f393f31a685f90d956fd032ad858b3bcdfbd977e7467f957b3120

Observation d2829aa8-a185-4f8d-bd83-8e7ce496b17e · outbound

This paper cites M2s: Multi-turn to single-turn jailbreak in red teaming for llms,.

Stateful Cooperative Agents Safeguarding LLMs Against Evolving Multi-Turn Attacks M2s: Multi-turn to single-turn jailbreak in red teaming for llms,

Reference 64

Resolution
unresolved
no resolver link, observed 2026-08-04T01:16:15.272601Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T01:16:15.272601Z digest=sha256:eb8a4b205f1e794c535c7c3e7ed7f2e8c76e13c50cb52668ccb9d9a3476ac570

Observation 0a22fc85-a5fe-456f-b43a-4d89dc2add11 · outbound

This paper cites MT-Bench-101: A Fine-Grained Benchmark for Evaluating Large Language Models in Multi-Turn Dialogues.

Stateful Cooperative Agents Safeguarding LLMs Against Evolving Multi-Turn Attacks MT-Bench-101: A Fine-Grained Benchmark for Evaluating Large Language Models in Multi-Turn Dialogues

Reference 65

Resolution
unresolved
no resolver link, observed 2026-08-04T01:16:15.396819Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T01:16:15.396819Z digest=sha256:704d4bd28c43e9e32e48513330a7cb933ee602ff3ef9d391f548df9e93316d87

Observation 1702fe08-30d1-48ab-94b9-b7ac696391da · outbound

This paper cites Cosafe: Evaluating large language model safety in multi-turn dialogue coreference,.

Stateful Cooperative Agents Safeguarding LLMs Against Evolving Multi-Turn Attacks Cosafe: Evaluating large language model safety in multi-turn dialogue coreference,

Reference 66

Resolution
unresolved
no resolver link, observed 2026-08-04T01:16:15.489997Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T01:16:15.489997Z digest=sha256:eb5ec3ddfc60926a5eadf333f7d4472b04b8c022e48de8249a2ce380fb817ff3

Pith citing papers

No inbound Pith citation observations are available.