{"as_of":"2026-08-08T03:31:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:8d81a4c0629c2f1c65d44d0c6062722883578a34f8647e504f9ee1fc7033e668","coverage":[{"denominator":39,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":39,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-05T23:28:00.073585Z","state":"measured"},{"denominator":39,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":39,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2608.03210/citation-record","integrity":"/paper/2608.03210/integrity","json":"/paper/2608.03210/citation-record.json","paper":"/paper/2608.03210"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2108.07258","last_updated":"2022-07-12T23:45:14Z","snapshot_observed_at":"2026-08-02T09:20:40.804790Z","submitted_at":"2021-08-16T17:50:08Z","title":"On the Opportunities and Risks of Foundation Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2108.07258","snapshot_observed_at":"2026-08-05T23:27:59.965727Z","title":"On the opportunities and risks of foundation models,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","snapshot_observed_at":"2026-08-07T23:10:44.070415Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-05T23:27:59.965727Z"},"links":{"cited_paper":"/paper/2108.07258","citing_paper":"/paper/2608.03210"},"observation_digest":"sha256:5309edf4bf876fb4f4dea89af9d61062f7304fc3eb26ed77f234b66b097340cc","observation_id":"da4bd68c-c2d2-42e7-b7d7-19894754e341","resolution":{"observed_at":"2026-08-05T23:27:59.965727Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T23:28:00.442496Z","title":"Language models are few-shot learners,","venue":null,"work_id":"46ac043b-9801-41a2-a9e0-99d4fa82e8aa","year":2020},"citing_paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","snapshot_observed_at":"2026-08-07T23:10:44.070415Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-05T23:27:59.969422Z"},"links":{"citing_paper":"/paper/2608.03210"},"observation_digest":"sha256:4731e8262f8731bbd77646045d5f958247574945d1835111a00cfb50108ec205","observation_id":"64fc995c-22ef-4a83-9595-76c0553756e9","resolution":{"observed_at":"2026-08-05T23:28:00.445035Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T23:28:00.435555Z","title":"Flamingo: A visual language model for few-shot learning,","venue":null,"work_id":"b660792a-c2f1-4e97-b138-6b87eccb9d01","year":2022},"citing_paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","snapshot_observed_at":"2026-08-07T23:10:44.070415Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-05T23:27:59.972250Z"},"links":{"citing_paper":"/paper/2608.03210"},"observation_digest":"sha256:e09a628a49d593b0a2469be28a7c542f88512e53f7ff1a5646dec8394e94f53d","observation_id":"56cae51f-5346-4ef1-8143-898c9b1dd4cc","resolution":{"observed_at":"2026-08-05T23:28:00.438437Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2304.08485","last_updated":"2023-12-11T17:46:14Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-04-17T17:59:25Z","title":"Visual Instruction Tuning","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2304.08485","snapshot_observed_at":"2026-08-05T23:27:59.975243Z","title":"Visual instruction tuning,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","snapshot_observed_at":"2026-08-07T23:10:44.070415Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-05T23:27:59.975243Z"},"links":{"cited_paper":"/paper/2304.08485","citing_paper":"/paper/2608.03210"},"observation_digest":"sha256:928117c27b3c5c1eee49c61918933eb2ac3b3934c6312fb79d499b45da6b72f7","observation_id":"d5ab539b-a5e0-40a3-b1a8-5dee4f919d90","resolution":{"observed_at":"2026-08-05T23:27:59.975243Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T23:28:00.428178Z","title":"BLIP-2: Bootstrapping language-image pre-training with frozen image encoders and large language models,","venue":null,"work_id":"4d931eba-39c1-4453-8cc3-fa50085700fa","year":2023},"citing_paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","snapshot_observed_at":"2026-08-07T23:10:44.070415Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-05T23:27:59.978517Z"},"links":{"citing_paper":"/paper/2608.03210"},"observation_digest":"sha256:8bfe0bd651affa0b858867f9f3f710db6f6e12a057793574c89437cb39ec8fa2","observation_id":"f313edab-387e-4212-bbcc-8f32d0f11ba4","resolution":{"observed_at":"2026-08-05T23:28:00.431071Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T23:28:00.420597Z","title":"Red teaming language models with language models,","venue":null,"work_id":"40bb68e6-18eb-4f3a-a744-8b01abf4a03b","year":2022},"citing_paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","snapshot_observed_at":"2026-08-07T23:10:44.070415Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-05T23:27:59.981190Z"},"links":{"citing_paper":"/paper/2608.03210"},"observation_digest":"sha256:095711b7781d2b7a379b52a80b688c4fc720c0ee1ca0693c326b43a4cb3a4d33","observation_id":"3549fe8f-9a88-4d8e-9199-668f7691f5b9","resolution":{"observed_at":"2026-08-05T23:28:00.423448Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2209.07858","last_updated":"2022-11-22T19:12:57Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2022-08-23T23:37:14Z","title":"Red Teaming Language Models to Reduce Harms: Methods, Scaling Behaviors, and Lessons Learned","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2209.07858","snapshot_observed_at":"2026-08-05T23:27:59.984135Z","title":"Red teaming language models to reduce harms: Methods, scaling behaviors, and lessons learned,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","snapshot_observed_at":"2026-08-07T23:10:44.070415Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-05T23:27:59.984135Z"},"links":{"cited_paper":"/paper/2209.07858","citing_paper":"/paper/2608.03210"},"observation_digest":"sha256:dd1515de77c7ea315eba6be03cd4bc0ae028b49844aab43e1fcba17f5164db85","observation_id":"78e41568-22e8-4241-864c-5ee97bfcc17a","resolution":{"observed_at":"2026-08-05T23:27:59.984135Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T23:28:00.413144Z","title":"Jailbroken: How does LLM safety training fail?","venue":null,"work_id":"5d793b52-8411-4a44-98b7-a3dd7e9f094f","year":2023},"citing_paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","snapshot_observed_at":"2026-08-07T23:10:44.070415Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-05T23:27:59.986994Z"},"links":{"citing_paper":"/paper/2608.03210"},"observation_digest":"sha256:1abb61cbf92ebfa3d6efcd08bc80da32d67d9d10394c1e81a4f0bf7e7a693e30","observation_id":"ba55d65d-a362-4d37-80c1-b8ecfca61c7e","resolution":{"observed_at":"2026-08-05T23:28:00.415906Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T23:28:00.405837Z","title":"Many-shot jailbreaking,","venue":null,"work_id":"0352c401-d370-407a-bdb3-0f76ba2a95a3","year":2024},"citing_paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","snapshot_observed_at":"2026-08-07T23:10:44.070415Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-05T23:27:59.989541Z"},"links":{"citing_paper":"/paper/2608.03210"},"observation_digest":"sha256:2f4b15201429f52ddc344d3c56d9a3bb61d06e0566f26ad2a304290005ff71f4","observation_id":"93119606-69ed-485a-a887-bd1e378d529c","resolution":{"observed_at":"2026-08-05T23:28:00.408458Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T23:28:00.398172Z","title":"Toxicity in ChatGPT: Analyzing persona- assigned language models,","venue":null,"work_id":"f44ea3e5-d5c8-40a9-8a6c-5717c83d465c","year":2023},"citing_paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","snapshot_observed_at":"2026-08-07T23:10:44.070415Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-05T23:27:59.992184Z"},"links":{"citing_paper":"/paper/2608.03210"},"observation_digest":"sha256:e63ecf3f7a064eeb7ad0c6e4a803c53e0495aba5bc44de19d571d3feda5b957a","observation_id":"60ee6537-1548-4d88-b5d6-0581fa7b4af2","resolution":{"observed_at":"2026-08-05T23:28:00.401125Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T23:27:59.994522Z","title":"In- context representation hijacking,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","snapshot_observed_at":"2026-08-07T23:10:44.070415Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-05T23:27:59.994522Z"},"links":{"citing_paper":"/paper/2608.03210"},"observation_digest":"sha256:8bfed7ec8d5392b8929c34b6070fab7a5eda48078816ea6e6471cc040f386b9e","observation_id":"461bf32b-0d3c-406e-a2d2-b9f41977dfd5","resolution":{"observed_at":"2026-08-05T23:27:59.994522Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T23:28:00.390267Z","title":"Jailbreaking vision-language models through the visual modality,","venue":null,"work_id":"c39983dc-15eb-4928-992d-9010d6927ad2","year":null},"citing_paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","snapshot_observed_at":"2026-08-07T23:10:44.070415Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-05T23:27:59.997113Z"},"links":{"citing_paper":"/paper/2608.03210"},"observation_digest":"sha256:a12bbc8b750e88ca42eca797ef052cd6284a21fb7a9ae63511b0896ef2ccac8c","observation_id":"1192717c-59d8-4905-9bdc-f4c6a5e8e20c","resolution":{"observed_at":"2026-08-05T23:28:00.393317Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2303.08774","last_updated":"2024-03-04T06:01:33Z","snapshot_observed_at":"2026-08-07T07:30:12.213965Z","submitted_at":"2023-03-15T17:15:04Z","title":"GPT-4 Technical Report","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.08774","snapshot_observed_at":"2026-08-05T23:28:00.003088Z","title":"GPT-4 technical report,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","snapshot_observed_at":"2026-08-07T23:10:44.070415Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-05T23:28:00.003088Z"},"links":{"cited_paper":"/paper/2303.08774","citing_paper":"/paper/2608.03210"},"observation_digest":"sha256:fca7390154fde9d7b853ce68d1e61c88b4e7aa35be64312c295a032744c7b9d8","observation_id":"1a20fb7b-dabf-4294-bc0c-0fab71106511","resolution":{"observed_at":"2026-08-05T23:28:00.003088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.05530","last_updated":"2024-12-16T17:39:39Z","snapshot_observed_at":"2026-07-06T17:41:42.995949Z","submitted_at":"2024-03-08T18:54:20Z","title":"Gemini 1.5: Unlocking multimodal understanding across millions of tokens of context","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.05530","snapshot_observed_at":"2026-08-05T23:28:00.005825Z","title":"Gemini 1.5: Unlocking multimodal understanding across millions of tokens of context,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","snapshot_observed_at":"2026-08-07T23:10:44.070415Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-05T23:28:00.005825Z"},"links":{"cited_paper":"/paper/2403.05530","citing_paper":"/paper/2608.03210"},"observation_digest":"sha256:971f95a6874f238fd9b88d145bd7d88ce21b9d1b3143c43a5ece5e9a3678e1b8","observation_id":"f11dcc35-2e7d-4b1e-96b3-2f346a643692","resolution":{"observed_at":"2026-08-05T23:28:00.005825Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.19437","last_updated":"2025-02-18T17:26:38Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-12-27T04:03:16Z","title":"DeepSeek-V3 Technical Report","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.19437","snapshot_observed_at":"2026-08-05T23:28:00.009049Z","title":"DeepSeek-V3 technical report,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","snapshot_observed_at":"2026-08-07T23:10:44.070415Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-05T23:28:00.009049Z"},"links":{"cited_paper":"/paper/2412.19437","citing_paper":"/paper/2608.03210"},"observation_digest":"sha256:bad74d2cef9f5c5c002dce7d748c1bdbdba3413ac43ed6393f85a506ab159379","observation_id":"38199efb-ee8e-49ba-85b8-880968078b2d","resolution":{"observed_at":"2026-08-05T23:28:00.009049Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.21783","last_updated":"2024-11-23T23:27:33Z","snapshot_observed_at":"2026-07-06T18:55:11.576666Z","submitted_at":"2024-07-31T17:54:27Z","title":"The Llama 3 Herd of Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.21783","snapshot_observed_at":"2026-08-05T23:28:00.011800Z","title":"The llama 3 herd of models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","snapshot_observed_at":"2026-08-07T23:10:44.070415Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-05T23:28:00.011800Z"},"links":{"cited_paper":"/paper/2407.21783","citing_paper":"/paper/2608.03210"},"observation_digest":"sha256:17fb243f32de0f4f059fff5ea59e57243548001bf355f33b207b2032a3589b0d","observation_id":"3b31d838-9185-4ad9-a9f1-e29fadcaf1c7","resolution":{"observed_at":"2026-08-05T23:28:00.011800Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T23:28:00.382249Z","title":"Grok-1.5 vision preview,","venue":null,"work_id":"09e30afe-549a-4ba0-900c-e569b4f6ee9e","year":2024},"citing_paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","snapshot_observed_at":"2026-08-07T23:10:44.070415Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-05T23:28:00.014832Z"},"links":{"citing_paper":"/paper/2608.03210"},"observation_digest":"sha256:4db7e180d21f88836f3fa98524546298394bda66f8022155faec3ed00500af60","observation_id":"68b480ad-0f73-4080-9d03-fd8bbc4db25a","resolution":{"observed_at":"2026-08-05T23:28:00.385106Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2511.21631","last_updated":"2025-11-27T12:16:54Z","snapshot_observed_at":"2026-07-06T22:37:03.716474Z","submitted_at":"2025-11-26T17:59:08Z","title":"Qwen3-VL Technical Report","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2511.21631","snapshot_observed_at":"2026-08-05T23:28:00.017481Z","title":"Qwen3-VL technical report,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","snapshot_observed_at":"2026-08-07T23:10:44.070415Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-05T23:28:00.017481Z"},"links":{"cited_paper":"/paper/2511.21631","citing_paper":"/paper/2608.03210"},"observation_digest":"sha256:19e4d4dceb1212b5ef0afb6332d100ccebb4a29322479c1d21d523d055e5efda","observation_id":"990484e4-76b1-4666-a54c-f7abcfd6efec","resolution":{"observed_at":"2026-08-05T23:28:00.017481Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.13860","last_updated":"2024-03-10T13:58:08Z","snapshot_observed_at":"2026-07-06T15:31:18.144952Z","submitted_at":"2023-05-23T09:33:38Z","title":"Jailbreaking ChatGPT via Prompt Engineering: An Empirical Study","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.13860","snapshot_observed_at":"2026-08-05T23:28:00.020752Z","title":"Jailbreaking ChatGPT via prompt engineering: An empirical study,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","snapshot_observed_at":"2026-08-07T23:10:44.070415Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-05T23:28:00.020752Z"},"links":{"cited_paper":"/paper/2305.13860","citing_paper":"/paper/2608.03210"},"observation_digest":"sha256:d951e2411372275c1e7d2670b95fe89d7eedbdb192b19c0e59196c7310a1b799","observation_id":"9ce924a9-7f26-46a6-af92-785f8248e6fd","resolution":{"observed_at":"2026-08-05T23:28:00.020752Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-07-06T15:59:23.019044Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-08-05T23:28:00.023843Z","title":"Universal and transferable adversarial attacks on aligned language models,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","snapshot_observed_at":"2026-08-07T23:10:44.070415Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-05T23:28:00.023843Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2608.03210"},"observation_digest":"sha256:d02dfef42df7b35be5fed037f5bb65c37060bf51cf7283e7daf0c2380360d8e3","observation_id":"bb0c1134-f8f1-49d8-90a6-617f2e43d945","resolution":{"observed_at":"2026-08-05T23:28:00.023843Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T23:28:00.373993Z","title":"Tree of attacks: Jailbreaking black-box LLMs automatically,","venue":null,"work_id":"041d18b8-8fda-44ff-8d6f-ff2191793e01","year":2024},"citing_paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","snapshot_observed_at":"2026-08-07T23:10:44.070415Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-05T23:28:00.026678Z"},"links":{"citing_paper":"/paper/2608.03210"},"observation_digest":"sha256:f4ea8d25ccb813fdd6f8bc4c2320658418b379581103b0623538585d8b794ea7","observation_id":"76517717-d12a-4d07-ae5c-62f957b8df2e","resolution":{"observed_at":"2026-08-05T23:28:00.376887Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.08419","last_updated":"2024-07-18T18:24:57Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-10-12T15:38:28Z","title":"Jailbreaking Black Box Large Language Models in Twenty Queries","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.08419","snapshot_observed_at":"2026-08-05T23:28:00.029340Z","title":"Jailbreaking black box large language models in twenty queries,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","snapshot_observed_at":"2026-08-07T23:10:44.070415Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-05T23:28:00.029340Z"},"links":{"cited_paper":"/paper/2310.08419","citing_paper":"/paper/2608.03210"},"observation_digest":"sha256:dc4a074c10751fc9819fd9fb0044b13057c785eaef51198aef92cda4e411543b","observation_id":"e0385b35-f777-46f1-820f-c1b39b9de0c6","resolution":{"observed_at":"2026-08-05T23:28:00.029340Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T23:28:00.366050Z","title":"AutoDAN- Turbo: A lifelong agent for strategy self-exploration to jailbreak LLMs,","venue":null,"work_id":"f4826263-a9b3-4ad3-8d70-6738e73d41e4","year":2025},"citing_paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","snapshot_observed_at":"2026-08-07T23:10:44.070415Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-05T23:28:00.032255Z"},"links":{"citing_paper":"/paper/2608.03210"},"observation_digest":"sha256:2af75a51312f0b015612f73c9f3414e6fd78d2d25f47f54bb04a05644bdcb16e","observation_id":"053e6e49-fb64-4d8f-bf87-835a6708f96b","resolution":{"observed_at":"2026-08-05T23:28:00.369062Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T23:28:00.358457Z","title":"Visual adversarial examples jailbreak aligned large language mod- els,","venue":null,"work_id":"55bcec05-e15b-48bd-9fd7-83df29f439f3","year":2024},"citing_paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","snapshot_observed_at":"2026-08-07T23:10:44.070415Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-05T23:28:00.035292Z"},"links":{"citing_paper":"/paper/2608.03210"},"observation_digest":"sha256:dfd85d5522c78f2efd6bd1837f6df20bd2ae2e5ca5eae997a149d71cd0ec390c","observation_id":"a5d56d20-91f8-478d-bb73-2f2c5a582e46","resolution":{"observed_at":"2026-08-05T23:28:00.361393Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T23:28:00.350815Z","title":"FigStep: Jailbreaking large vision-language models via typographic visual prompts,","venue":null,"work_id":"dc5816d5-4585-4037-b545-a1125d75602d","year":2025},"citing_paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","snapshot_observed_at":"2026-08-07T23:10:44.070415Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-05T23:28:00.037878Z"},"links":{"citing_paper":"/paper/2608.03210"},"observation_digest":"sha256:07ee4e465e4d5611a609a04b14d5c2169ddefeaea5757a9c6c5e9ffa0611c012","observation_id":"6cfeb28e-1035-4ee7-b808-c953f5f50527","resolution":{"observed_at":"2026-08-05T23:28:00.353670Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T23:28:00.040247Z","title":"Images are achilles’ heel of alignment: Exploiting visual vulnerabilities for jailbreaking multimodal large language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","snapshot_observed_at":"2026-08-07T23:10:44.070415Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-05T23:28:00.040247Z"},"links":{"citing_paper":"/paper/2608.03210"},"observation_digest":"sha256:5787573520b20047cf5c76d087eb821b0807dece36709c3cf2141f7d22f6411c","observation_id":"1c79d168-966a-4272-9e03-205c4a480427","resolution":{"observed_at":"2026-08-05T23:28:00.040247Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T23:28:00.043174Z","title":"HarmBench: A standardized evaluation framework for automated red teaming and robust refusal,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","snapshot_observed_at":"2026-08-07T23:10:44.070415Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-05T23:28:00.043174Z"},"links":{"citing_paper":"/paper/2608.03210"},"observation_digest":"sha256:271f9b5eed054558fccfd9c074dd9762d9332ea9d5fe6aafcf3a398a45e46716","observation_id":"b8d4b30c-58ad-48bd-afe8-637895e7d1ef","resolution":{"observed_at":"2026-08-05T23:28:00.043174Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T23:28:00.339130Z","title":"A StrongREJECT for empty jailbreaks,","venue":null,"work_id":"1d49190b-9e2d-4127-9c92-264950351a4a","year":2024},"citing_paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","snapshot_observed_at":"2026-08-07T23:10:44.070415Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-05T23:28:00.046025Z"},"links":{"citing_paper":"/paper/2608.03210"},"observation_digest":"sha256:1c0083686a54587415abbc71f398c85d686da18aaa910082f1059cd28fc42eaf","observation_id":"a0f43027-4db1-49c8-9159-0ecc0756e630","resolution":{"observed_at":"2026-08-05T23:28:00.342147Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T23:28:00.331765Z","title":"Introducing GPT-5.5,","venue":null,"work_id":"0029ba1e-dba4-4fc5-8df0-e8acb0677686","year":2026},"citing_paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","snapshot_observed_at":"2026-08-07T23:10:44.070415Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-05T23:28:00.048985Z"},"links":{"citing_paper":"/paper/2608.03210"},"observation_digest":"sha256:d3426753252963825f7aa624d244e13a52a300c28c2c7085b7bf9162d1546c46","observation_id":"f927f461-a30f-4b3b-907f-ccddac55114e","resolution":{"observed_at":"2026-08-05T23:28:00.334584Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T23:28:00.324445Z","title":"Introducing GPT-5.4 mini and nano,","venue":null,"work_id":"c8746348-a653-4cc6-b344-f0e4ef9108c8","year":2026},"citing_paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","snapshot_observed_at":"2026-08-07T23:10:44.070415Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-05T23:28:00.052080Z"},"links":{"citing_paper":"/paper/2608.03210"},"observation_digest":"sha256:4396dbe9bce7350c1ecc0e34c78fb00b00297189725f6ff402a4d2b125158f3f","observation_id":"9ed8f3fb-cd02-470c-9248-a3b153f1755b","resolution":{"observed_at":"2026-08-05T23:28:00.327130Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T23:28:00.316829Z","title":"Gemini 3.1 flash-lite,","venue":null,"work_id":"dcfd0581-fdf2-41b9-8de9-d4e683508456","year":null},"citing_paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","snapshot_observed_at":"2026-08-07T23:10:44.070415Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-05T23:28:00.054822Z"},"links":{"citing_paper":"/paper/2608.03210"},"observation_digest":"sha256:6dbb740bc49e3d6a82286df8fc758c08e3014eeecbb056030e5448d0b465a73e","observation_id":"302d6e60-80b8-4b07-944b-cb5bf6ab81b4","resolution":{"observed_at":"2026-08-05T23:28:00.319702Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2512.02556","last_updated":"2025-12-02T09:25:14Z","snapshot_observed_at":"2026-07-31T23:49:25.878472Z","submitted_at":"2025-12-02T09:25:14Z","title":"DeepSeek-V3.2: Pushing the Frontier of Open Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2512.02556","snapshot_observed_at":"2026-08-05T23:28:00.060505Z","title":"DeepSeek-V3.2: Pushing the frontier of open large language models,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","snapshot_observed_at":"2026-08-07T23:10:44.070415Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-05T23:28:00.060505Z"},"links":{"cited_paper":"/paper/2512.02556","citing_paper":"/paper/2608.03210"},"observation_digest":"sha256:1fc20ca58c824bcd34c44f36deeb616b41870ae055280b16c5a536ff063878df","observation_id":"b47630d2-3525-4003-b893-aafc458b6449","resolution":{"observed_at":"2026-08-05T23:28:00.060505Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T23:28:00.308626Z","title":"Available: https://ai.google.dev/gemini-api/docs/ models/gemini-3.1-flash-lite","venue":null,"work_id":"21cbe57b-2b4f-49f6-a3f2-e032c37c6c29","year":null},"citing_paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","snapshot_observed_at":"2026-08-07T23:10:44.070415Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-05T23:28:00.057719Z"},"links":{"citing_paper":"/paper/2608.03210"},"observation_digest":"sha256:34b00eafccaa2e158c7e8400a07422034f550088866b9c9f6b049d303c90a660","observation_id":"2e6401c3-720b-41cd-bad7-240777aaf6b6","resolution":{"observed_at":"2026-08-05T23:28:00.311779Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T23:28:00.291492Z","title":"Llama 3.3 70B Instruct model card,","venue":null,"work_id":"195def56-32b1-4160-9dae-947acd5d151a","year":2024},"citing_paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","snapshot_observed_at":"2026-08-07T23:10:44.070415Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-05T23:28:00.066115Z"},"links":{"citing_paper":"/paper/2608.03210"},"observation_digest":"sha256:6991c9842904e6a4850eb4d73e9336aafb6847ca67edae9785a84704dfae4bd9","observation_id":"e4397bf1-b2bb-43d9-9efb-84dd7a68e5d7","resolution":{"observed_at":"2026-08-05T23:28:00.294464Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T23:28:00.299921Z","title":"DeepSeek-V4: Towards highly efficient million-token context intelligence,","venue":null,"work_id":"d655cdf7-a2e1-4305-854b-2dccb388b43b","year":2026},"citing_paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","snapshot_observed_at":"2026-08-07T23:10:44.070415Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-05T23:28:00.063372Z"},"links":{"citing_paper":"/paper/2608.03210"},"observation_digest":"sha256:dc03f12d2ae7f04efa3d4c90e55e68afc132339b722cefd142a8a515ba59606a","observation_id":"0fc54b7d-6bc7-45e4-87cb-cd78fc909d9b","resolution":{"observed_at":"2026-08-05T23:28:00.303502Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T23:28:00.274433Z","title":"FlipAttack: Jailbreak LLMs via flipping,","venue":null,"work_id":"88ac7672-36cc-437b-add1-6cdb00cd291b","year":2025},"citing_paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","snapshot_observed_at":"2026-08-07T23:10:44.070415Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-05T23:28:00.071105Z"},"links":{"citing_paper":"/paper/2608.03210"},"observation_digest":"sha256:16c99f2ff982b6b5f48c6fe1b4f846031adae783dc04449acfc3a8634a408202","observation_id":"455d6e11-4146-427b-ab4b-1d40e6a7cf03","resolution":{"observed_at":"2026-08-05T23:28:00.277460Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T23:28:00.283234Z","title":"Grok 4.3,","venue":null,"work_id":"ab3f3678-074f-440f-b7e1-fb155e1a801c","year":2026},"citing_paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","snapshot_observed_at":"2026-08-07T23:10:44.070415Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-05T23:28:00.068552Z"},"links":{"citing_paper":"/paper/2608.03210"},"observation_digest":"sha256:ce3b3b9c735abd4692bee1bb941239bcca67fcd01cfbadcf6c16ec1779018aec","observation_id":"591aa2ca-45ea-4cfc-887e-370b0ceeb00e","resolution":{"observed_at":"2026-08-05T23:28:00.286034Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2311.17600","last_updated":"2024-06-19T08:32:14Z","snapshot_observed_at":"2026-07-06T16:54:22.039181Z","submitted_at":"2023-11-29T12:49:45Z","title":"MM-SafetyBench: A Benchmark for Safety Evaluation of Multimodal Large Language Models","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.17600","snapshot_observed_at":"2026-08-05T23:28:00.073585Z","title":"MM- SafetyBench: A benchmark for safety evaluation of multimodal large language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","snapshot_observed_at":"2026-08-07T23:10:44.070415Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-05T23:28:00.073585Z"},"links":{"cited_paper":"/paper/2311.17600","citing_paper":"/paper/2608.03210"},"observation_digest":"sha256:ab2526ee6bacfbdd5a92ae6bbc91e7a0152cd0fbe4711d62f8bcdb6f2b910b51","observation_id":"79c9b817-dde1-4693-8ba0-961aa40d39b5","resolution":{"observed_at":"2026-08-05T23:28:00.073585Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2605.00583","last_updated":"2026-05-01T11:43:21Z","snapshot_observed_at":"2026-07-06T23:13:57.367556Z","submitted_at":"2026-05-01T11:43:21Z","title":"Jailbreaking Vision-Language Models Through the Visual Modality","version":1},"cited_work":{"arxiv_id":"2605.00583","doi":null,"metadata_source":"pith","pith_arxiv_id":"2605.00583","snapshot_observed_at":"2026-08-05T23:28:00.174715Z","title":"Jailbreaking Vision-Language Models Through the Visual Modality","venue":"cs.CV","work_id":"389ae1f1-47ed-4995-ba38-54c522bd9521","year":2026},"citing_paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","snapshot_observed_at":"2026-08-07T23:10:44.070415Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","version":1},"reference_index":2026,"source":"pdf_text","source_observed_at":"2026-08-05T23:27:59.999873Z"},"links":{"cited_paper":"/paper/2605.00583","citing_paper":"/paper/2608.03210"},"observation_digest":"sha256:d43017dd0b30996855201d32aa3ec9b894ecf8475860857165d705091f29792f","observation_id":"05fc1d6f-1c02-4b12-a9de-f0509477361d","resolution":{"observed_at":"2026-08-05T23:28:00.179685Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","latest_version":1,"primary_category":"cs.CL","snapshot_observed_at":"2026-08-07T23:10:44.070415Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization"},"reference_resolution":{"displayed":39,"state_counts":{"malformed_identifier":0,"metadata_mismatch":1,"parse_uncertain":0,"unresolved":16,"verified_exact":0,"verified_fuzzy":22},"total_outbound_references":39},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 39 of 39 outbound references and 0 inbound Pith citation observations for arXiv:2608.03210."}