{"as_of":"2026-08-07T10:23:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:2edb2ff0e77e84dd6671d64a86b6ead600a3d9adee959c798f7727f8fb6c0a68","coverage":[{"denominator":135,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":100,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T00:14:48.510814Z","state":"measured"},{"denominator":100,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":100,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2608.04034/citation-record","integrity":"/paper/2608.04034/integrity","json":"/paper/2608.04034/citation-record.json","paper":"/paper/2608.04034"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2307.01952","last_updated":"2023-07-04T23:04:57Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-07-04T23:04:57Z","title":"SDXL: Improving Latent Diffusion Models for High-Resolution Image Synthesis","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.01952","snapshot_observed_at":"2026-08-07T00:14:36.912967Z","title":"arXiv preprint arXiv:2307.01952 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:36.912967Z"},"links":{"cited_paper":"/paper/2307.01952","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:d77658431fd8e0a8c8bdcc7cc3e13342b355ee2bc72e4fe0a507fc3cb6e9b9cc","observation_id":"d0319a3d-cc56-44dc-97fb-1a4050ca5fd5","resolution":{"observed_at":"2026-08-07T00:14:36.912967Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:37.200491Z","title":"2024 IEEE Security and Privacy Workshops (SPW) , pages=","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:37.200491Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:e92051dadb186f01837da28b085888757d6becadc2287dfeda8e0155b0d00611","observation_id":"435a2b8e-d0ce-4cd9-a915-1ddef6edea00","resolution":{"observed_at":"2026-08-07T00:14:37.200491Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:37.322426Z","title":"International conference on machine learning , pages=","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:37.322426Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:c88f8cae915387984bb46e54bbdd56751188e5d1128d40571c492ffe3545fcd6","observation_id":"5c160701-9202-497e-9607-50b595856a37","resolution":{"observed_at":"2026-08-07T00:14:37.322426Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2507.21540","last_updated":"2026-04-08T13:05:48Z","snapshot_observed_at":"2026-07-06T22:04:26.078628Z","submitted_at":"2025-07-29T07:13:56Z","title":"PRISM: Programmatic Reasoning with Image Sequence Manipulation for LVLM Jailbreaking","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2507.21540","snapshot_observed_at":"2026-08-07T00:14:37.450812Z","title":"arXiv preprint arXiv:2507.21540 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:37.450812Z"},"links":{"cited_paper":"/paper/2507.21540","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:32c7ba0a69c55fad38bc7de8694a450745b4c022638fb41d0eb7ee087215862a","observation_id":"7f4b5d64-6398-4181-aa2b-225d359cf58c","resolution":{"observed_at":"2026-08-07T00:14:37.450812Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:37.519246Z","title":"Proceedings of the IEEE/CVF International Conference on Computer Vision , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:37.519246Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:025f8a793b32dd6e5564240d6d9d875848dccaaa7ec6bbe36cb36d2fbe516375","observation_id":"761fbe98-fc6c-4347-b65b-20f62cbaf845","resolution":{"observed_at":"2026-08-07T00:14:37.519246Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:37.669841Z","title":"2024 , eprint=","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:37.669841Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:1f619ef7fd534360be294362b9665958be1876db6c8882d3d5db0fb935a84ba8","observation_id":"4c1d7b48-0f31-4553-b8b4-7bd5ae92a0a5","resolution":{"observed_at":"2026-08-07T00:14:37.669841Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.11496","last_updated":"2024-11-28T02:07:46Z","snapshot_observed_at":"2026-07-06T19:51:54.660531Z","submitted_at":"2024-11-18T11:58:07Z","title":"Safe + Safe = Unsafe? Exploring How Safe Images Can Be Exploited to Jailbreak Large Vision-Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.11496","snapshot_observed_at":"2026-08-07T00:14:37.967742Z","title":"arXiv preprint arXiv:2411.11496 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:37.967742Z"},"links":{"cited_paper":"/paper/2411.11496","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:8f9ae309650f07336703d5f2f0d56b92fdb4bbe6357fded6b02bf7535b6ea111","observation_id":"7904c619-980d-4e02-b5e4-df9d686399d9","resolution":{"observed_at":"2026-08-07T00:14:37.967742Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2509.01444","last_updated":"2025-09-01T12:58:43Z","snapshot_observed_at":"2026-08-05T12:35:22.090203Z","submitted_at":"2025-09-01T12:58:43Z","title":"Strata-Sword: A Hierarchical Safety Evaluation towards LLMs based on Reasoning Complexity of Jailbreak Instructions","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2509.01444","snapshot_observed_at":"2026-08-07T00:14:38.178919Z","title":"arXiv preprint arXiv:2509.01444 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:38.178919Z"},"links":{"cited_paper":"/paper/2509.01444","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:d2d00036618365d8f1c1b41907a379441b1e1e9817596d29a85b5436233e9595","observation_id":"b7eefb8c-ed11-4c8b-86c9-83d296b2f250","resolution":{"observed_at":"2026-08-07T00:14:38.178919Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.16720","last_updated":"2026-04-30T02:46:40Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-12-21T18:04:31Z","title":"OpenAI o1 System Card","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.16720","snapshot_observed_at":"2026-08-07T00:14:38.261954Z","title":"arXiv preprint arXiv:2412.16720 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:38.261954Z"},"links":{"cited_paper":"/paper/2412.16720","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:c19a71403026b5694b531c77c87374d040fe9895ba2ae9f6940d2591209d8767","observation_id":"2ea35092-2cdd-417a-ae37-402021f85f94","resolution":{"observed_at":"2026-08-07T00:14:38.261954Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2510.18234","last_updated":"2025-10-21T02:41:44Z","snapshot_observed_at":"2026-07-06T22:33:39.148066Z","submitted_at":"2025-10-21T02:41:44Z","title":"DeepSeek-OCR: Contexts Optical Compression","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2510.18234","snapshot_observed_at":"2026-08-07T00:14:38.350710Z","title":"arXiv preprint arXiv:2510.18234 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:38.350710Z"},"links":{"cited_paper":"/paper/2510.18234","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:ad36b7d5f5963abac04fa22eae9b4b5b3310f6fde281387a340d2f2477ef1fa1","observation_id":"27948606-b998-4562-bf31-08b2230bbfe7","resolution":{"observed_at":"2026-08-07T00:14:38.350710Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.21277","last_updated":"2025-05-28T14:16:10Z","snapshot_observed_at":"2026-07-06T21:31:30.358499Z","submitted_at":"2025-05-27T14:48:44Z","title":"Breaking the Ceiling: Exploring the Potential of Jailbreak Attacks through Expanding Strategy Space","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.21277","snapshot_observed_at":"2026-08-07T00:14:38.445988Z","title":"arXiv preprint arXiv:2505.21277 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:38.445988Z"},"links":{"cited_paper":"/paper/2505.21277","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:77659f69118392e70838a18a4fc16fb41d812fa71ed5e7f6cb6e5d7539a34ab3","observation_id":"cc99bd18-8f9a-4727-ab95-ed4ab2b7dfaf","resolution":{"observed_at":"2026-08-07T00:14:38.445988Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:38.547063Z","title":"2023 , url =","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:38.547063Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:3b0f2bcb03b5b3540bc7a20cfee57883acff181fe51368d9ac1c5552660eadbb","observation_id":"774c351f-8a06-4a20-be40-d715b7e7d6cc","resolution":{"observed_at":"2026-08-07T00:14:38.547063Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.11054","last_updated":"2025-03-11T03:06:17Z","snapshot_observed_at":"2026-07-06T20:37:18.647879Z","submitted_at":"2025-02-16T09:27:44Z","title":"Reasoning-Augmented Conversation for Multi-Turn Jailbreak Attacks on Large Language Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.11054","snapshot_observed_at":"2026-08-07T00:14:38.778915Z","title":"arXiv preprint arXiv:2502.11054 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:38.778915Z"},"links":{"cited_paper":"/paper/2502.11054","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:92917563a95ceb97c966008a1eaf915863bfcd19d9688c4a51fdd91e0d99a1e8","observation_id":"8219298d-83b8-48e5-94d8-ea5759a9a524","resolution":{"observed_at":"2026-08-07T00:14:38.778915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:38.926246Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:38.926246Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:fddfbe0749bbf43c7f670cc8e04d09a408a7cdeeef3302dedbbef002bcdc6394","observation_id":"53dec936-e41e-4746-ac58-a2d57b308701","resolution":{"observed_at":"2026-08-07T00:14:38.926246Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.10302","last_updated":"2024-12-13T17:37:48Z","snapshot_observed_at":"2026-08-07T03:01:29.031129Z","submitted_at":"2024-12-13T17:37:48Z","title":"DeepSeek-VL2: Mixture-of-Experts Vision-Language Models for Advanced Multimodal Understanding","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.10302","snapshot_observed_at":"2026-08-07T00:14:39.098655Z","title":"arXiv preprint arXiv:2412.10302 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:39.098655Z"},"links":{"cited_paper":"/paper/2412.10302","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:2bd47675df0e98e029cd5846115c62575f480a94d4c56b5c1bc1f4f2da8c698e","observation_id":"e4df8435-fda6-4746-871f-2be5baca6b65","resolution":{"observed_at":"2026-08-07T00:14:39.098655Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.09177","last_updated":"2024-10-02T10:43:07Z","snapshot_observed_at":"2026-08-01T16:03:38.510223Z","submitted_at":"2024-02-14T13:45:19Z","title":"Leveraging the Context through Multi-Round Interactions for Jailbreaking Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.09177","snapshot_observed_at":"2026-08-07T00:14:39.266507Z","title":"arXiv preprint arXiv:2402.09177 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:39.266507Z"},"links":{"cited_paper":"/paper/2402.09177","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:624148214fb48853253347a0bef36accaef29034bfa438547e035b149583e1bf","observation_id":"753d0edd-9abe-494a-9623-a18db498bb5f","resolution":{"observed_at":"2026-08-07T00:14:39.266507Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.17262","last_updated":"2024-10-30T05:43:51Z","snapshot_observed_at":"2026-08-05T05:04:37.035197Z","submitted_at":"2024-02-27T07:11:59Z","title":"Speak Out of Turn: Safety Vulnerability of Large Language Models in Multi-turn Dialogue","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.17262","snapshot_observed_at":"2026-08-07T00:14:39.415846Z","title":"arXiv preprint arXiv:2402.17262 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:39.415846Z"},"links":{"cited_paper":"/paper/2402.17262","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:725a2a4f643cf48b230f084e788d62ad666160b4fa921407b8dc85e18a5554c0","observation_id":"97fb1340-8562-4afc-b6c5-43333af96277","resolution":{"observed_at":"2026-08-07T00:14:39.415846Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:39.532716Z","title":"arXiv preprint , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:39.532716Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:bb4b9c99b0aba502194007c8c803e7bbf03bab288c34242d3a2a7b8e96ad89f9","observation_id":"552aca39-d61a-4179-b90d-1550f516cba8","resolution":{"observed_at":"2026-08-07T00:14:39.532716Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:39.657169Z","title":"arXiv preprint , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:39.657169Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:5bd7b46cb6764b32cce026253cc165aaed7327eedb9620522631fb5c1fb0c43b","observation_id":"7f009a2d-f31c-4e51-a2be-0c12b0cb24d1","resolution":{"observed_at":"2026-08-07T00:14:39.657169Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.08419","last_updated":"2024-07-18T18:24:57Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-10-12T15:38:28Z","title":"Jailbreaking Black Box Large Language Models in Twenty Queries","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.08419","snapshot_observed_at":"2026-08-07T00:14:39.835701Z","title":"arXiv preprint arXiv:2310.08419 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:39.835701Z"},"links":{"cited_paper":"/paper/2310.08419","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:036e958cc6d1f1d7f58dd1939f6381aa7d3f3fd72bf0a38de4abec0bb11637f3","observation_id":"f8185f23-f710-40da-814a-b51509e1c21d","resolution":{"observed_at":"2026-08-07T00:14:39.835701Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:40.308525Z","title":"Proceedings of the AAAI Conference on Artificial Intelligence , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:40.308525Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:8f2493b6688ffc289fe0074efcedb890e333e3a684522ff9e135b5850b3bd2d9","observation_id":"d0a84e79-842c-4825-a74a-51bd54108710","resolution":{"observed_at":"2026-08-07T00:14:40.308525Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:40.465519Z","title":"Advances in Neural Information Processing Systems , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:40.465519Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:594f6c6289497fbb1cf02ce816a6ba9643955a44b4b756bbdc22a61a6532af27","observation_id":"70a77444-9edc-4020-b8ab-d48a75213fa3","resolution":{"observed_at":"2026-08-07T00:14:40.465519Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:40.541449Z","title":"The Twelfth International Conference on Learning Representations , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:40.541449Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:2d7f60bdc3baf580ba94766a67a85f2144db44d90f5b2e54813feef8c0a6f252","observation_id":"069f5a4c-3fdb-4445-b552-fe56982af63a","resolution":{"observed_at":"2026-08-07T00:14:40.541449Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2303.08774","last_updated":"2024-03-04T06:01:33Z","snapshot_observed_at":"2026-08-07T07:30:12.213965Z","submitted_at":"2023-03-15T17:15:04Z","title":"GPT-4 Technical Report","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.08774","snapshot_observed_at":"2026-08-07T00:14:40.794108Z","title":"arXiv preprint arXiv:2303.08774 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:40.794108Z"},"links":{"cited_paper":"/paper/2303.08774","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:cf33b2dbe0641c5b53f55864d3d774d03e16dfac5b6c238aa5a9836a777324cd","observation_id":"709a1af5-4835-4c42-8f13-ca8778507993","resolution":{"observed_at":"2026-08-07T00:14:40.794108Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:40.878984Z","title":"https://openai.com/index/hello-gpt-4o/ , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:40.878984Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:66b2163fc5708d9b0c1034dec97f140857fa184882d3ab565f45a66ffae001e1","observation_id":"66361c1b-e969-4958-ae69-0a588d81b813","resolution":{"observed_at":"2026-08-07T00:14:40.878984Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:40.969860Z","title":"https://chatgpt.com/ , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:40.969860Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:5a35b215e95f54d51cc7a4cf77e225cc4a9377423c9f326f55a5216c9a6e819b","observation_id":"89a36789-5713-4a51-8a21-422892e6727c","resolution":{"observed_at":"2026-08-07T00:14:40.969860Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:41.057568Z","title":"https://gemini.google.com/app/ , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:41.057568Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:d003175dca5143fe229e719cd0a0d35cb2f60a2c331386f339df2c474e241a82","observation_id":"2e9e5f3f-f9a6-445c-86f1-d91c5e22239c","resolution":{"observed_at":"2026-08-07T00:14:41.057568Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:41.154729Z","title":"https://claude.ai/ , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":38,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:41.154729Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:2c689f91e47a9940855cca04f15f4c4449fb728782d1e423be08181200c86534","observation_id":"5cc0ee00-ef1f-45b0-9a95-97ba89694e7b","resolution":{"observed_at":"2026-08-07T00:14:41.154729Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:41.229151Z","title":"https://www.perspectiveapi.com/ , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":39,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:41.229151Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:9cf551d41f8c98f2410073c54221a453e042b765ac537818fb5ef12decd5168a","observation_id":"8a773217-704d-44dc-aba7-5d6f1f09f171","resolution":{"observed_at":"2026-08-07T00:14:41.229151Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:41.315584Z","title":"https://platform.openai.com/ , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":40,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:41.315584Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:b5f45a84fa3fb62bb7a522e6a4b8734c4fd0cb19589a5e459e52417d9f3a7369","observation_id":"4f743feb-96b8-45c1-928b-7ce705401025","resolution":{"observed_at":"2026-08-07T00:14:41.315584Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:41.425241Z","title":"Images are Achilles' Heel of Alignment: Exploiting Visual Vulnerabilities for Jailbreaking Multimodal Large Language Models , journal =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":41,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:41.425241Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:ab639eb48416d2d0dca5a663588268aac9430103bd1ef4a3f363a6dbae42ec61","observation_id":"524eff98-370e-4aad-a639-a5d4b8fcceb3","resolution":{"observed_at":"2026-08-07T00:14:41.425241Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.10766","last_updated":"2025-03-15T00:49:45Z","snapshot_observed_at":"2026-07-06T17:04:17.738921Z","submitted_at":"2023-12-17T17:02:14Z","title":"JailGuard: A Universal Detection Framework for LLM Prompt-based Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.10766","snapshot_observed_at":"2026-08-07T00:14:41.648221Z","title":"arXiv preprint arXiv:2312.10766 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":44,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:41.648221Z"},"links":{"cited_paper":"/paper/2312.10766","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:f5d21ad17dc03c8630883e9193f8f68841633ba72cc3bf9d1a5a1aad3a1bcc73","observation_id":"e072f608-1759-4290-9c5b-f3c538d2635e","resolution":{"observed_at":"2026-08-07T00:14:41.648221Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.21659","last_updated":"2024-10-17T03:49:20Z","snapshot_observed_at":"2026-07-06T18:55:07.177656Z","submitted_at":"2024-07-31T15:02:46Z","title":"Cross-modality Information Check for Detecting Jailbreaking in Multimodal Large Language Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.21659","snapshot_observed_at":"2026-08-07T00:14:41.711296Z","title":"arXiv preprint arXiv:2407.21659 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":45,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:41.711296Z"},"links":{"cited_paper":"/paper/2407.21659","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:37d3effc8b1dbaf3b7ae3b65ab64985e3d8cbeea9da797e10d1b55cdeb6d3f66","observation_id":"d0a1f9c9-b9d7-443c-9465-e501fa6cf6cb","resolution":{"observed_at":"2026-08-07T00:14:41.711296Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.09037","last_updated":"2024-07-17T05:54:38Z","snapshot_observed_at":"2026-07-06T17:44:21.659847Z","submitted_at":"2024-03-14T02:25:35Z","title":"The First to Know: How Token Distributions Reveal Hidden Knowledge in Large Vision-Language Models?","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.09037","snapshot_observed_at":"2026-08-07T00:14:41.799532Z","title":"arXiv preprint arXiv:2403.09037 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":46,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:41.799532Z"},"links":{"cited_paper":"/paper/2403.09037","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:8c41222d95b51a257ed1c03ed6911ab8bab5ee11f8a18fa877e0e8125b08868d","observation_id":"71ca9ffd-3b7c-49de-b8fc-20ca334b593a","resolution":{"observed_at":"2026-08-07T00:14:41.799532Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:41.963535Z","title":"arXiv preprint arXiv:2406.02575 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":48,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:41.963535Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:a58e642cdef77b5b5e6dca1b9ccb6f509f0e1944fc402d5995dafc908de3952b","observation_id":"113ca04c-d21d-4b4b-97f2-0d7a86123c61","resolution":{"observed_at":"2026-08-07T00:14:41.963535Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.06674","last_updated":"2023-12-07T19:40:50Z","snapshot_observed_at":"2026-07-06T17:00:00.321552Z","submitted_at":"2023-12-07T19:40:50Z","title":"Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversations","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.06674","snapshot_observed_at":"2026-08-07T00:14:42.027004Z","title":"arXiv preprint arXiv:2312.06674 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":49,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:42.027004Z"},"links":{"cited_paper":"/paper/2312.06674","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:d3427509dd1d3069c72d6c8fb36c027c71e4053c40ba49ce18022a9ee1c4655b","observation_id":"62e91bca-85be-40f1-a215-c5c9559e9b7f","resolution":{"observed_at":"2026-08-07T00:14:42.027004Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2405.07788","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:54.267642Z","title":"arXiv preprint arXiv:2405.07788 , year=","venue":null,"work_id":"b9956da4-c00f-42ea-bf34-c504de9d7042","year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":50,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:42.106226Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:fa2962fd7b1b3b43d405f8e434a37d10f8a8061cd5e1325d636638e223554ad8","observation_id":"55ddd5d5-a9b2-401a-9453-b4dc56c26aed","resolution":{"observed_at":"2026-08-07T00:14:54.325147Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.09967","last_updated":"2024-06-14T12:16:08Z","snapshot_observed_at":"2026-07-06T18:30:59.857334Z","submitted_at":"2024-06-14T12:16:08Z","title":"Bag of Lies: Robustness in Continuous Pre-training BERT","version":1},"cited_work":{"arxiv_id":"2406.09967","doi":null,"metadata_source":"pith","pith_arxiv_id":"2406.09967","snapshot_observed_at":"2026-08-07T00:14:54.056487Z","title":"Bag of Lies: Robustness in Continuous Pre-training BERT","venue":"cs.CL","work_id":"65d5f07b-f7d5-4448-88be-c86222185fb9","year":2024},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":51,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:42.178998Z"},"links":{"cited_paper":"/paper/2406.09967","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:46c67b0d41ab1b03f53043d3ab84b4b3c3b4cfbc6556d3930f0edccc3f013550","observation_id":"3371ee17-6044-4726-a843-af2f7fedda24","resolution":{"observed_at":"2026-08-07T00:14:54.130861Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:42.316889Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":53,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:42.316889Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:dc2d5f5c1e57d216087023a594f63e1f4635e7d1e0db9c5e89e9e5d89fe44323","observation_id":"5b8b9459-1b93-4444-9f84-be8946696ee9","resolution":{"observed_at":"2026-08-07T00:14:42.316889Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.19464","last_updated":"2024-02-29T18:55:03Z","snapshot_observed_at":"2026-08-04T22:49:54.802240Z","submitted_at":"2024-02-29T18:55:03Z","title":"Curiosity-driven Red-teaming for Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.19464","snapshot_observed_at":"2026-08-07T00:14:42.384477Z","title":"arXiv preprint arXiv:2402.19464 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":54,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:42.384477Z"},"links":{"cited_paper":"/paper/2402.19464","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:d26f7b262c2c0cf3f220956cf68d67736371b0d0b5b54366ab27c545db8abc45","observation_id":"351ae90c-1d98-491e-8a17-02fed8056cd5","resolution":{"observed_at":"2026-08-07T00:14:42.384477Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1908.10084","last_updated":"2019-08-27T08:50:17Z","snapshot_observed_at":"2026-07-06T08:17:05.681370Z","submitted_at":"2019-08-27T08:50:17Z","title":"Sentence-BERT: Sentence Embeddings using Siamese BERT-Networks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1908.10084","snapshot_observed_at":"2026-08-07T00:14:42.449823Z","title":"arXiv preprint arXiv:1908.10084 , year=","venue":null,"work_id":null,"year":1908},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":55,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:42.449823Z"},"links":{"cited_paper":"/paper/1908.10084","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:7a9923c04983ae175de2da5a404334e966b4b05fcf9885e31dcc617cc2990036","observation_id":"31dacd0a-cb43-4a31-8aa9-195eeda6f56f","resolution":{"observed_at":"2026-08-07T00:14:42.449823Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2308.12966","last_updated":"2023-10-13T02:41:28Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-08-24T17:59:17Z","title":"Qwen-VL: A Versatile Vision-Language Model for Understanding, Localization, Text Reading, and Beyond","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.12966","snapshot_observed_at":"2026-08-07T00:14:42.523343Z","title":"arXiv preprint arXiv:2308.12966 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":56,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:42.523343Z"},"links":{"cited_paper":"/paper/2308.12966","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:facaa0a5f5c0fd76d2d32a18b9a4048a9f04d710a3ee75c986a7d52ff7e1ff2c","observation_id":"93d0dfd1-19d8-486c-b4ac-e1ec0bf91709","resolution":{"observed_at":"2026-08-07T00:14:42.523343Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2210.01936","last_updated":"2023-03-23T23:21:38Z","snapshot_observed_at":"2026-08-03T09:40:32.201832Z","submitted_at":"2022-10-04T22:13:25Z","title":"When and why vision-language models behave like bags-of-words, and what to do about it?","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2210.01936","snapshot_observed_at":"2026-08-07T00:14:42.565379Z","title":"arXiv preprint arXiv:2210.01936 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":57,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:42.565379Z"},"links":{"cited_paper":"/paper/2210.01936","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:4ec77dc2df095c8fe4aee9a918bdfeb1ff5b710951f9946e0da5d12314d64415","observation_id":"a2e2df52-ce0a-4a6e-95b3-26c4c3e16a94","resolution":{"observed_at":"2026-08-07T00:14:42.565379Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2304.10592","last_updated":"2023-10-02T16:38:35Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-04-20T18:25:35Z","title":"MiniGPT-4: Enhancing Vision-Language Understanding with Advanced Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2304.10592","snapshot_observed_at":"2026-08-07T00:14:42.674344Z","title":"arXiv preprint arXiv:2304.10592 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":59,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:42.674344Z"},"links":{"cited_paper":"/paper/2304.10592","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:374dfacd01d3b0b1c35e25ef8a6673b3b94da7ea328d0c26be762b91a9c25792","observation_id":"0f1821d5-7e78-4562-a761-db050c2e093f","resolution":{"observed_at":"2026-08-07T00:14:42.674344Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.16821","last_updated":"2024-04-29T20:24:30Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-04-25T17:59:19Z","title":"How Far Are We to GPT-4V? Closing the Gap to Commercial Multimodal Models with Open-Source Suites","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.16821","snapshot_observed_at":"2026-08-07T00:14:42.790977Z","title":"arXiv preprint arXiv:2404.16821 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":61,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:42.790977Z"},"links":{"cited_paper":"/paper/2404.16821","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:25110bf718bbe5335bc0a2d1e828a2c0bf6e9a38c1d1aa3d299f8170f59c56ab","observation_id":"9118a729-bdd1-47c8-ab20-26f09612668d","resolution":{"observed_at":"2026-08-07T00:14:42.790977Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.06302","last_updated":"2024-07-03T00:51:21Z","snapshot_observed_at":"2026-08-04T06:08:32.233717Z","submitted_at":"2024-06-10T14:18:56Z","title":"Unveiling the Safety of GPT-4o: An Empirical Study using Jailbreak Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.06302","snapshot_observed_at":"2026-08-07T00:14:42.850122Z","title":"arXiv preprint arXiv:2406.06302 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":62,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:42.850122Z"},"links":{"cited_paper":"/paper/2406.06302","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:cbb6b24fd7f9b7a9f3bded3007e4b060cd2be2d2d96126f01e7828f69557ca78","observation_id":"2b7dfa4a-678c-4bc8-b718-d0e2ee44428a","resolution":{"observed_at":"2026-08-07T00:14:42.850122Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:42.910359Z","title":"Proceedings of the IEEE/CVF conference on computer vision and pattern recognition , pages=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":63,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:42.910359Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:5fdce07df646aaf85779a1b76926df475a8cbdd44bf965b6ae10798e49bcf1df","observation_id":"088e8be1-a5c9-467c-a42d-a8cbd2d408c4","resolution":{"observed_at":"2026-08-07T00:14:42.910359Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.04451","last_updated":"2024-03-20T21:34:56Z","snapshot_observed_at":"2026-08-06T02:57:30.438059Z","submitted_at":"2023-10-03T19:44:37Z","title":"AutoDAN: Generating Stealthy Jailbreak Prompts on Aligned Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.04451","snapshot_observed_at":"2026-08-07T00:14:43.044951Z","title":"arXiv preprint arXiv:2310.04451 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":65,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:43.044951Z"},"links":{"cited_paper":"/paper/2310.04451","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:87a97c08e1f91c8e87b8c652cfda12069da92a782fe29a7f5ffa270167429b98","observation_id":"48ddb620-37e0-49a3-8128-75e4be51bcfe","resolution":{"observed_at":"2026-08-07T00:14:43.044951Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:43.098674Z","title":"Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition , pages=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":66,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:43.098674Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:b9d8c71be0c653ed2275dc4ad829ec488e616002d216255c8f466a89f17d6c9d","observation_id":"a89ce3dd-ed85-43d7-b50d-ceecf1660295","resolution":{"observed_at":"2026-08-07T00:14:43.098674Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2210.04610","last_updated":"2022-11-10T10:07:37Z","snapshot_observed_at":"2026-07-06T14:03:01.528958Z","submitted_at":"2022-10-03T14:04:46Z","title":"Red-Teaming the Stable Diffusion Safety Filter","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2210.04610","snapshot_observed_at":"2026-08-07T00:14:43.164166Z","title":"arXiv preprint arXiv:2210.04610 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":67,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:43.164166Z"},"links":{"cited_paper":"/paper/2210.04610","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:1045a1d1cc88d043fdd4d6c0002df8803135da7322888d8e16bfd4a22083a432","observation_id":"01080458-b9aa-43e6-a40b-854760dd5075","resolution":{"observed_at":"2026-08-07T00:14:43.164166Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:43.216695Z","title":"Forty-first International Conference on Machine Learning , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":68,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:43.216695Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:3f98e101682628a111e7121ba30d3c6d6319839377d7fd406b661cd6c22a303a","observation_id":"42405929-9745-40f9-92c9-be04ba8743f6","resolution":{"observed_at":"2026-08-07T00:14:43.216695Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.06474","last_updated":"2024-03-04T04:03:54Z","snapshot_observed_at":"2026-07-06T16:30:25.358715Z","submitted_at":"2023-10-10T09:44:06Z","title":"Multilingual Jailbreak Challenges in Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.06474","snapshot_observed_at":"2026-08-07T00:14:43.325809Z","title":"arXiv preprint arXiv:2310.06474 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":70,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:43.325809Z"},"links":{"cited_paper":"/paper/2310.06474","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:eb1333391839c3ada0cca6c3e88b92ba020411096468b75cb6d164378208966e","observation_id":"a65fb8f6-5a17-4f7a-9a32-fb3c6d1542b0","resolution":{"observed_at":"2026-08-07T00:14:43.325809Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2303.16634","last_updated":"2023-05-23T22:12:16Z","snapshot_observed_at":"2026-08-02T04:02:36.848064Z","submitted_at":"2023-03-29T12:46:54Z","title":"G-Eval: NLG Evaluation using GPT-4 with Better Human Alignment","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.16634","snapshot_observed_at":"2026-08-07T00:14:43.390190Z","title":"arXiv preprint arXiv:2303.16634 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":71,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:43.390190Z"},"links":{"cited_paper":"/paper/2303.16634","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:606deaf265e2c696af8ac88233efc9066d6f80713d6575f25efa89d1aaa01528","observation_id":"b06302a9-0199-4025-92b6-bc6546be6204","resolution":{"observed_at":"2026-08-07T00:14:43.390190Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:43.445933Z","title":"2024 IEEE symposium on security and privacy (SP) , pages=","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":72,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:43.445933Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:556883e783fcc90fb693e84520e94b7d5a5c6fe2441e0156d1d1906d07db08dd","observation_id":"7087b808-a861-4359-bfee-b65149f435cf","resolution":{"observed_at":"2026-08-07T00:14:43.445933Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:43.527011Z","title":"Advances in Neural Information Processing Systems , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":73,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:43.527011Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:e741a5bfb22d4455da072ac8527f15061be6e54dc4bcaf1809069d4784bae3ac","observation_id":"de456f5b-38ca-4a1d-9c02-a76d2b5bf54c","resolution":{"observed_at":"2026-08-07T00:14:43.527011Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1706.06083","last_updated":"2019-09-04T18:53:10Z","snapshot_observed_at":"2026-07-06T05:47:27.191725Z","submitted_at":"2017-06-19T17:53:11Z","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1706.06083","snapshot_observed_at":"2026-08-07T00:14:43.595876Z","title":"arXiv preprint:1706.06083 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":74,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:43.595876Z"},"links":{"cited_paper":"/paper/1706.06083","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:417eb43ac88c3845950d657177400f6d386c628696fa9d40238eec3a91263fe3","observation_id":"db705506-a79c-43c5-bea6-d1a19e166afd","resolution":{"observed_at":"2026-08-07T00:14:43.595876Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.00614","last_updated":"2023-09-04T17:47:36Z","snapshot_observed_at":"2026-07-06T16:13:23.343694Z","submitted_at":"2023-09-01T17:59:44Z","title":"Baseline Defenses for Adversarial Attacks Against Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.00614","snapshot_observed_at":"2026-08-07T00:14:43.648146Z","title":"arXiv preprint arXiv:2309.00614 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":75,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:43.648146Z"},"links":{"cited_paper":"/paper/2309.00614","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:54efde71a94b533c5296ed63f5ad1bd28c58af4763cca31a3cc3b6cfea774ef9","observation_id":"804c0ed1-1dca-4525-8c8f-36b687c6e302","resolution":{"observed_at":"2026-08-07T00:14:43.648146Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2308.14132","last_updated":"2023-11-07T03:30:15Z","snapshot_observed_at":"2026-07-06T16:10:54.723336Z","submitted_at":"2023-08-27T15:20:06Z","title":"Detecting Language Model Attacks with Perplexity","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.14132","snapshot_observed_at":"2026-08-07T00:14:43.723499Z","title":"arXiv preprint arXiv:2308.14132 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":76,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:43.723499Z"},"links":{"cited_paper":"/paper/2308.14132","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:5f169ab92043f5454fe7463f078c4bdf4d89112888ae15a5bba6647720571dc0","observation_id":"5c51b05e-aaa5-4109-b7f6-b6cb7f9cffa0","resolution":{"observed_at":"2026-08-07T00:14:43.723499Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.21783","last_updated":"2024-11-23T23:27:33Z","snapshot_observed_at":"2026-07-06T18:55:11.576666Z","submitted_at":"2024-07-31T17:54:27Z","title":"The Llama 3 Herd of Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.21783","snapshot_observed_at":"2026-08-07T00:14:43.777237Z","title":"arXiv preprint arXiv:2407.21783 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":77,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:43.777237Z"},"links":{"cited_paper":"/paper/2407.21783","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:a2714bfe3f838ab9fdbcf030af8d9e7e626b816c8823fada1769aac9b983b449","observation_id":"7d37a87b-395b-4036-93af-8d11094da5a3","resolution":{"observed_at":"2026-08-07T00:14:43.777237Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:43.822146Z","title":"IEEE transactions on pattern analysis and machine intelligence , volume=","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":78,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:43.822146Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:9ca030f18ac3f104867882d4b18337be624ee5c6b30dcce3df09880b9e63b86a","observation_id":"c1ffb563-ae9c-439c-a93b-7e7df1c08886","resolution":{"observed_at":"2026-08-07T00:14:43.822146Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:43.897127Z","title":"2023 , url =","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":79,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:43.897127Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:7e61627cd6672d9977bab714d51573255c66882a6a274baaf8e13922e88cd31a","observation_id":"3132d552-0242-42bd-8bc2-c459637aafdb","resolution":{"observed_at":"2026-08-07T00:14:43.897127Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2302.13971","last_updated":"2023-02-27T17:11:15Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-02-27T17:11:15Z","title":"LLaMA: Open and Efficient Foundation Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2302.13971","snapshot_observed_at":"2026-08-07T00:14:43.967091Z","title":"arXiv preprint arXiv:2302.13971 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":80,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:43.967091Z"},"links":{"cited_paper":"/paper/2302.13971","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:3aaf0745026551b7a266c5f574e752cfa5ec49a6a051e722603bae3624457877","observation_id":"c88dbae2-8e70-48b5-90b6-cf745075ed03","resolution":{"observed_at":"2026-08-07T00:14:43.967091Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:44.047852Z","title":"2025 , url =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":81,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:44.047852Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:1e7a4decd392db6db5fd411b11da9cb93b88c17472eb1f8a59a9b2266026c2de","observation_id":"bfe1b197-ebd9-460e-bda2-beed9312bdec","resolution":{"observed_at":"2026-08-07T00:14:44.047852Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:44.102935Z","title":"2023 , url =","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":82,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:44.102935Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:a38e63962f502a87e6926a75e1f95ea642ff0e26ca4f4959a732e32a50027040","observation_id":"255012c0-aec6-4bda-bf05-b9e96efd3b89","resolution":{"observed_at":"2026-08-07T00:14:44.102935Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2509.00391","last_updated":"2025-08-30T07:04:29Z","snapshot_observed_at":"2026-08-06T03:43:10.199272Z","submitted_at":"2025-08-30T07:04:29Z","title":"The Resurgence of GCG Adversarial Attacks on Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2509.00391","snapshot_observed_at":"2026-08-07T00:14:44.157020Z","title":"arXiv preprint arXiv:2509.00391 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":83,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:44.157020Z"},"links":{"cited_paper":"/paper/2509.00391","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:f848876d9fbe3998b62becbeb53ad10366faab10e6846f311617c05ba04e0b08","observation_id":"eb205385-d4fc-44c4-a438-902b7d604b17","resolution":{"observed_at":"2026-08-07T00:14:44.157020Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:44.221836Z","title":"Proceedings of the 2022 Conference on Empirical Methods in Natural Language Processing , pages=","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":84,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:44.221836Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:c1168d9e8fba354d7b30d4b5c831666ab2c85d50dc7a504b9a22c3d05c11c38b","observation_id":"e7a10890-3fb6-48b2-823c-ff8d27ddfc4d","resolution":{"observed_at":"2026-08-07T00:14:44.221836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:44.559159Z","title":"Proceedings of the 32nd ACM International Conference on Multimedia , pages=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":87,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:44.559159Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:8cf18313143f7323451700a7d4f68f825ee00cdc0956c80b454ce5fa57ec057d","observation_id":"0fba8d31-a835-48a6-bab1-0a1b3776e08b","resolution":{"observed_at":"2026-08-07T00:14:44.559159Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:45.063299Z","title":"Proceedings of the IEEE/CVF International Conference on Computer Vision , pages=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":92,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:45.063299Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:6de19b68275e2c4d998b8e400bd777ebf4efd14f9e98fa922992b1dd61711237","observation_id":"432b2082-5434-4c71-8755-2eb0f5e9ebd4","resolution":{"observed_at":"2026-08-07T00:14:45.063299Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:45.155341Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":93,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:45.155341Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:c86d592fd35b3da1bd13fd3072cd42fe0f4af18406c4cb94535ce5704621d031","observation_id":"2075af72-4d81-4e13-8216-7f7067654c07","resolution":{"observed_at":"2026-08-07T00:14:45.155341Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:45.253819Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":94,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:45.253819Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:2360e2907ae3550465b708132360df623338c7c76cba2b4067dbd5f9fe8075af","observation_id":"757a08f5-aeec-442e-9be8-712e86381077","resolution":{"observed_at":"2026-08-07T00:14:45.253819Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:45.380000Z","title":"34th USENIX Security Symposium (USENIX Security 25) , pages=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":95,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:45.380000Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:30c1f9619bd15c125823ef29565c40a5d8456eb0b7a0d4489de6ee6f85aee52e","observation_id":"185bdc31-148f-4766-806d-053aa05ce44b","resolution":{"observed_at":"2026-08-07T00:14:45.380000Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:45.482937Z","title":"Findings of the Association for Computational Linguistics: ACL 2025 , pages=","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":96,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:45.482937Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:07abab162a28929304f071f92799571789ca46f85f9cd00bb2c205e417d7cc79","observation_id":"4c74f3d6-13df-41d0-b273-e0a28449c9da","resolution":{"observed_at":"2026-08-07T00:14:45.482937Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.12893","last_updated":"2025-02-27T01:32:58Z","snapshot_observed_at":"2026-08-05T21:26:59.220214Z","submitted_at":"2025-02-18T14:29:12Z","title":"H-CoT: Hijacking the Chain-of-Thought Safety Reasoning Mechanism to Jailbreak Large Reasoning Models, Including OpenAI o1/o3, DeepSeek-R1, and Gemini 2.0 Flash Thinking","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.12893","snapshot_observed_at":"2026-08-07T00:14:45.609000Z","title":"arXiv preprint arXiv:2502.12893 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":97,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:45.609000Z"},"links":{"cited_paper":"/paper/2502.12893","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:c9d57dc8f68166d138dd20d5ae7d6cd8d9f465ee534540fdd7410143208eca23","observation_id":"a2d4ac7e-537d-4844-8a23-79f2634c18ce","resolution":{"observed_at":"2026-08-07T00:14:45.609000Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:45.691291Z","title":"Proceedings of the 63rd Annual Meeting of the Association for Computational Linguistics (Volume 1: Long Papers) , pages=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":98,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:45.691291Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:dcaa061cef2be16166eb1451ea0dd83f3dd7ef49aecf48ce2f49ce758252e5d4","observation_id":"ce51eeae-4cd8-445a-bec7-e859be5a5beb","resolution":{"observed_at":"2026-08-07T00:14:45.691291Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:45.819417Z","title":"Proceedings of the 63rd Annual Meeting of the Association for Computational Linguistics (Volume 1: Long Papers) , pages=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":99,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:45.819417Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:76bee17183d476257e90a1e3603034a982656801fc27f16c372112a12b2a401a","observation_id":"e7a9fff0-aca0-4196-a965-6ba776898e64","resolution":{"observed_at":"2026-08-07T00:14:45.819417Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:46.387352Z","title":"International conference on learning representations , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":105,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:46.387352Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:3485d91f69ba200a7df7694ca84466556f4d7446894ae4aea0ebedf34bd80540","observation_id":"bbd37795-0d0a-462d-bf73-f858ea56cb3c","resolution":{"observed_at":"2026-08-07T00:14:46.387352Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:46.482671Z","title":"Proceedings of the 2025 Conference on Empirical Methods in Natural Language Processing , pages=","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":106,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:46.482671Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:afe4c1da7e1afe8247ab9e4367f311e500ce59a3607616b0f796a3aef4b8740d","observation_id":"42d13e59-9ec3-46b7-becb-0ba0e0225dc8","resolution":{"observed_at":"2026-08-07T00:14:46.482671Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:46.749098Z","title":"Proceedings of the 2024 Joint International Conference on Computational Linguistics, Language Resources and Evaluation (LREC-COLING 2024) , pages=","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":109,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:46.749098Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:b108d0b94a2db7877544600420bf7bd1e851eb4e4b18672d5b31b95a94700e6f","observation_id":"935318dd-a529-41a4-9c40-eea4d3823276","resolution":{"observed_at":"2026-08-07T00:14:46.749098Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:46.840374Z","title":"Forty-second International Conference on Machine Learning , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":110,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:46.840374Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:7b8414f9cb4a73d00f5344869ea6dbfb3cdd56317f76dc50571f9d5dabdf9b05","observation_id":"32ffa29c-ad03-44ff-9e25-f69a76654f57","resolution":{"observed_at":"2026-08-07T00:14:46.840374Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:46.983386Z","title":"Proceedings of the Computer Vision and Pattern Recognition Conference , pages=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":112,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:46.983386Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:53b3d1346d958f4e81ca5ef1d5c4163527b3eae832093e9370e828b43c62a98e","observation_id":"cde84cc4-4a4a-4dbd-aafb-3106ffd14cdb","resolution":{"observed_at":"2026-08-07T00:14:46.983386Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.11969","last_updated":"2025-04-17T18:36:08Z","snapshot_observed_at":"2026-07-06T18:47:21.527912Z","submitted_at":"2024-07-16T17:59:55Z","title":"Does Refusal Training in LLMs Generalize to the Past Tense?","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.11969","snapshot_observed_at":"2026-08-07T00:14:47.050472Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":113,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:47.050472Z"},"links":{"cited_paper":"/paper/2407.11969","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:24e64113d1f946ad2ce0f069d83e743eca1a985fb07651909793fd71973bbf59","observation_id":"814437d8-329a-4890-9729-7a0168c19bd0","resolution":{"observed_at":"2026-08-07T00:14:47.050472Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2605.00583","last_updated":"2026-05-01T11:43:21Z","snapshot_observed_at":"2026-07-06T23:13:57.367556Z","submitted_at":"2026-05-01T11:43:21Z","title":"Jailbreaking Vision-Language Models Through the Visual Modality","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2605.00583","snapshot_observed_at":"2026-08-07T00:14:47.136463Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":114,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:47.136463Z"},"links":{"cited_paper":"/paper/2605.00583","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:b4deb3279f7657ad47eeff299d7f6d064cef50037c978ef4c02124cd91de8f3b","observation_id":"e2680691-f27d-4c92-8266-82200343772a","resolution":{"observed_at":"2026-08-07T00:14:47.136463Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.04291","last_updated":"2025-06-19T22:42:13Z","snapshot_observed_at":"2026-08-03T12:56:28.919003Z","submitted_at":"2024-11-06T22:19:32Z","title":"Layer-wise Alignment: Examining Safety Alignment Across Image Encoder Layers in Vision Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.04291","snapshot_observed_at":"2026-08-07T00:14:47.198029Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":115,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:47.198029Z"},"links":{"cited_paper":"/paper/2411.04291","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:7a42979476684a0f20f7081e570b302b0058633fd09ad63f732581e09b6fadce","observation_id":"8bfb8c1c-0fa4-4243-8e68-5b6938ebd49b","resolution":{"observed_at":"2026-08-07T00:14:47.198029Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.00236","last_updated":"2024-09-17T19:56:09Z","snapshot_observed_at":"2026-08-06T06:17:45.496933Z","submitted_at":"2023-09-01T03:53:40Z","title":"Image Hijacks: Adversarial Images can Control Generative Models at Runtime","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.00236","snapshot_observed_at":"2026-08-07T00:14:47.254551Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":116,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:47.254551Z"},"links":{"cited_paper":"/paper/2309.00236","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:861b4c577a822155484237fef06cd8b8f25b93a11fe03784ed4b354fb187ba8a","observation_id":"28af3106-d41f-413d-b3f1-54babc562468","resolution":{"observed_at":"2026-08-07T00:14:47.254551Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:47.348072Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":117,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:47.348072Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:4045ccd7d74cf1a805bb84c0fb2bc1b6ed2ecc4262f5b28c79ea1c72ca5f942e","observation_id":"ad7a0b9e-7062-4c6e-bd8b-31274cc5b6b4","resolution":{"observed_at":"2026-08-07T00:14:47.348072Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:47.442891Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":118,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:47.442891Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:2ae04176b46d37ff7babef604d5aab0ea0183e936fd05f3b4b7b208660973e9e","observation_id":"259a498c-e3f9-4a51-b77f-08bfc3aac47d","resolution":{"observed_at":"2026-08-07T00:14:47.442891Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.14238","last_updated":"2024-01-15T15:23:55Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-12-21T18:59:31Z","title":"InternVL: Scaling up Vision Foundation Models and Aligning for Generic Visual-Linguistic Tasks","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.14238","snapshot_observed_at":"2026-08-07T00:14:47.513196Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":119,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:47.513196Z"},"links":{"cited_paper":"/paper/2312.14238","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:e887f872a103152c363db1716954915a1c828fe7016434fb10b233aaa2438d0b","observation_id":"e3ec9410-2d2c-4c20-818e-533499f9c396","resolution":{"observed_at":"2026-08-07T00:14:47.513196Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:47.603480Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":120,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:47.603480Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:c5294b11c1a7f1c70396b97f8b3cdd7969891950a4c7a958c0d7d8d7ab19821f","observation_id":"028abbd4-afaa-489a-805f-66ceb3ee4853","resolution":{"observed_at":"2026-08-07T00:14:47.603480Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.05608","last_updated":"2025-01-19T16:23:38Z","snapshot_observed_at":"2026-07-06T16:45:24.070954Z","submitted_at":"2023-11-09T18:59:11Z","title":"FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Prompts","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.05608","snapshot_observed_at":"2026-08-07T00:14:47.682360Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":121,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:47.682360Z"},"links":{"cited_paper":"/paper/2311.05608","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:f489e94520529abb047ab0f868d9389f2adf0fafd4a46f6ee11d77fcd452d972","observation_id":"d3a5ca68-e5e4-475a-9d0b-7ca49e3997bb","resolution":{"observed_at":"2026-08-07T00:14:47.682360Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:47.772138Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":122,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:47.772138Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:6a7ed845c4259e4aa8c2b5578037d1404f19979bd30e20d314f116175f6ffc6c","observation_id":"4e59cf44-4f98-48fc-8fa0-19ddce45c009","resolution":{"observed_at":"2026-08-07T00:14:47.772138Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2501.12948","last_updated":"2026-01-04T03:57:36Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-01-22T15:19:35Z","title":"DeepSeek-R1: Incentivizing Reasoning Capability in LLMs via Reinforcement Learning","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.12948","snapshot_observed_at":"2026-08-07T00:14:47.829147Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":123,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:47.829147Z"},"links":{"cited_paper":"/paper/2501.12948","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:4977043eff475c04aeefba7ce8685f911bf3b8fcf3453b78c4e803fe0ab76bb8","observation_id":"c2b14920-59f8-4c25-8f36-a3ce8e3e6701","resolution":{"observed_at":"2026-08-07T00:14:47.829147Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:47.903092Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":124,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:47.903092Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:af02f495450d79c76682859dbd4b7e664c9cc8db941bfca2c802ae9003b3e9f5","observation_id":"471f7020-85a0-4d61-aafc-d1e0814027ff","resolution":{"observed_at":"2026-08-07T00:14:47.903092Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:47.974478Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":125,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:47.974478Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:1c8ba9a973d7341eaa85a24a712a0fed4e226e3a0e8cdb4b787c92e92b692387","observation_id":"70b73911-1bbe-4539-8aca-b1de4dc60f80","resolution":{"observed_at":"2026-08-07T00:14:47.974478Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2603.07590","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:52.456768Z","title":null,"venue":null,"work_id":"4b07c172-87a9-4b20-a0d7-c2be42c4c21b","year":2026},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":126,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:48.062373Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:d5e858265007c8e7de644084b0651edfc935f7fe49349ba4c21338d8461a9561","observation_id":"f29d06f3-eb4e-49c0-aca8-08b6549d9793","resolution":{"observed_at":"2026-08-07T00:14:52.498263Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:48.133566Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":127,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:48.133566Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:60daf32fd3dfd678cb477c1cd06ef964fb6018e5a477a272f02426f71cb666dc","observation_id":"f65284b8-9768-489e-b9bc-a71b8f616b1d","resolution":{"observed_at":"2026-08-07T00:14:48.133566Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.07895","last_updated":"2024-07-28T19:58:08Z","snapshot_observed_at":"2026-07-06T18:44:24.873040Z","submitted_at":"2024-07-10T17:59:43Z","title":"LLaVA-NeXT-Interleave: Tackling Multi-image, Video, and 3D in Large Multimodal Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.07895","snapshot_observed_at":"2026-08-07T00:14:48.202142Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":128,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:48.202142Z"},"links":{"cited_paper":"/paper/2407.07895","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:e00a5987f43ef8e3f2bc3319583ed52588ad326ba8a0408f74d2bd815b60a8f0","observation_id":"8f665f2e-f00e-404d-83c1-96d16e4de6de","resolution":{"observed_at":"2026-08-07T00:14:48.202142Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:48.274725Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":129,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:48.274725Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:455bb26d898d47991b27f748b75f3699ccd6b7d2f85a67c122c1cd6d1ac8bf8f","observation_id":"9a0a1ab6-c381-413d-86ed-1debb3b8ba23","resolution":{"observed_at":"2026-08-07T00:14:48.274725Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.09792","last_updated":"2025-01-13T03:30:37Z","snapshot_observed_at":"2026-07-06T17:44:54.095160Z","submitted_at":"2024-03-14T18:24:55Z","title":"Images are Achilles' Heel of Alignment: Exploiting Visual Vulnerabilities for Jailbreaking Multimodal Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.09792","snapshot_observed_at":"2026-08-07T00:14:48.340224Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":130,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:48.340224Z"},"links":{"cited_paper":"/paper/2403.09792","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:69905c6dbecc29b33fdb3c8554d57df30c509fb63bf9a227907d40c512e9174d","observation_id":"56e80f9a-1140-4f7e-883e-db34e857a2e8","resolution":{"observed_at":"2026-08-07T00:14:48.340224Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2510.21190","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:52.746183Z","title":null,"venue":null,"work_id":"38725b4c-ed37-489f-b97a-fc5fbb30fc10","year":2025},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":131,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:48.431647Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:e548dc229737274194610b6219daf5993475ca17a079459a7f6ad45b4327d310","observation_id":"9c94fad0-2773-4c04-a92d-b36bb8e48793","resolution":{"observed_at":"2026-08-07T00:14:52.858320Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2311.17600","last_updated":"2024-06-19T08:32:14Z","snapshot_observed_at":"2026-07-06T16:54:22.039181Z","submitted_at":"2023-11-29T12:49:45Z","title":"MM-SafetyBench: A Benchmark for Safety Evaluation of Multimodal Large Language Models","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.17600","snapshot_observed_at":"2026-08-07T00:14:48.510814Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":132,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:48.510814Z"},"links":{"cited_paper":"/paper/2311.17600","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:271ca898a1d15f8043b2e491d1ff6eda5c0cd71ce1bcc0fa9e157d824316536d","observation_id":"3c63a3cd-87f2-42a6-b087-87fef29be1bd","resolution":{"observed_at":"2026-08-07T00:14:48.510814Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-07T10:22:47.371815Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination"},"reference_resolution":{"displayed":100,"state_counts":{"malformed_identifier":0,"metadata_mismatch":1,"parse_uncertain":0,"unresolved":96,"verified_exact":3,"verified_fuzzy":0},"total_outbound_references":135},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 7 August 2026, this Paper Citation Record lists 100 of 135 outbound references and 0 inbound Pith citation observations for arXiv:2608.04034."}