Pith. sign in

Paper Citation Record · LEDGER

Jailbreaking to Jailbreak

As of 23 August 2026, this Paper Citation Record lists 69 of 69 outbound references and 7 inbound Pith citation observations for arXiv:2502.09638.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2502.09638 v2

Coverage vector

measured 69 of 69 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-08T17:02:47.603293Z

measured 76 of 76 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-23T06:30:58.430688+00:00

measured 7 of 7 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-08-15T21:19:25.699712Z

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: pith, observed 2026-08-05T15:54:07.274631Z

Reference resolution

69 of 69 outbound references displayed

  • verified exact0
  • verified fuzzy16
  • unresolved53
  • parse uncertain0
  • malformed identifier0
  • metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation 872a205f-f53c-4d7f-b6d5-9148643cd3c7 · outbound

This paper cites Jailbreaking Leading Safety-Aligned LLMs with Simple Adaptive Attacks.

Jailbreaking to Jailbreak Jailbreaking Leading Safety-Aligned LLMs with Simple Adaptive Attacks

Reference 1

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.167574Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.167574Z digest=sha256:66a4b361d2d6767a647ba9f50c3786b7a68a6b7a62c2295690e17dabd9897028

Observation 7fa9ab04-a0c9-4899-a175-36c82f127487 · outbound

This paper cites an unresolved cited work.

Jailbreaking to Jailbreak Unresolved cited work

Reference 2

Resolution
unresolved
raw_fallback, observed 2026-08-08T17:02:49.176664Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

source=pdf_text observed=2026-08-08T17:02:47.173319Z digest=sha256:1e575d99eeac8bd238f5afcdbb0a0a9d6447c474cba48f18d47be06386f9a157

Observation 4dbc8888-d81a-4846-a9d2-550e60a1e7cb · outbound

This paper cites URLhttps://www.anthropic.com/news/claude-3-7-sonnet.

Jailbreaking to Jailbreak URLhttps://www.anthropic.com/news/claude-3-7-sonnet

Reference 3

Resolution
verified fuzzy
raw_fallback, observed 2026-08-08T17:02:49.163195Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

source=pdf_text observed=2026-08-08T17:02:47.178244Z digest=sha256:dbc63762d3042f9540f841a40977ac88284350ebf4eb627f0537cd8f42536ef6

Observation e1a5ca4e-174e-47a9-be51-5a2103458d94 · outbound

This paper cites Introducing claude 3.5 sonnet, 2024.

Jailbreaking to Jailbreak Introducing claude 3.5 sonnet, 2024

Reference 4

Resolution
verified fuzzy
raw_fallback, observed 2026-08-08T17:02:49.149297Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

source=pdf_text observed=2026-08-08T17:02:47.182548Z digest=sha256:1ebbdb24cf6db943408ccbc08c3fe16bf2043c7a0bee5244d0ea0b1e5cb2d8d0

Observation 03517156-c002-4677-9524-5201bf495742 · outbound

This paper cites Arditi and bilalchughtai.

Jailbreaking to Jailbreak Arditi and bilalchughtai

Reference 5

Resolution
verified fuzzy
raw_fallback, observed 2026-08-08T17:02:49.135463Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

source=pdf_text observed=2026-08-08T17:02:47.186838Z digest=sha256:c8fe5c9b30a570553aa3c89fe87cd861df45d2ce4ec71aa09c26c3dc8bdd743a

Observation a4734107-708b-4e3f-82db-667a55dda190 · outbound

This paper cites Refusal in Language Models Is Mediated by a Single Direction.

Jailbreaking to Jailbreak Refusal in Language Models Is Mediated by a Single Direction

Reference 6

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.191497Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.191497Z digest=sha256:43b45ec76e0a0a505705617c41b66546a44d11be23f2d575812cd0b42162aa50

Observation 2b1b7a8a-c76d-4627-961e-6017443a229b · outbound

This paper cites Diverse and Effective Red Teaming with Auto-generated Rewards and Multi-step Reinforcement Learning.

Jailbreaking to Jailbreak Diverse and Effective Red Teaming with Auto-generated Rewards and Multi-step Reinforcement Learning

Reference 7

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.195821Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.195821Z digest=sha256:f324201b17ac0bf0d8d8795275218a7142fee058fd78bb4b00dbee3364cbcf6d

Observation eae342ee-b59e-44d1-a0f7-8b2bed262602 · outbound

This paper cites Bourtoule, V.

Jailbreaking to Jailbreak Bourtoule, V

Reference 8

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.200718Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.200718Z digest=sha256:86db949989c724e554e5fdc067be76c7596011168153d3281488ff9ef4698e36

Observation 9f4dc883-d16a-4afa-98fc-9a0c4a293873 · outbound

This paper cites Cao and J.

Jailbreaking to Jailbreak Cao and J

Reference 9

Resolution
verified fuzzy
raw_fallback, observed 2026-08-08T17:02:49.110816Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

source=pdf_text observed=2026-08-08T17:02:47.204772Z digest=sha256:8423ce84eb82d963423325e6b6d3104c63d7c870200ab6cd5dcf82b2e6f09c57

Observation c2dc83aa-689e-41e5-8127-bf4046b52290 · outbound

This paper cites Explore, Establish, Exploit: Red Teaming Language Models from Scratch.

Jailbreaking to Jailbreak Explore, Establish, Exploit: Red Teaming Language Models from Scratch

Reference 10

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.208623Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.208623Z digest=sha256:06e81c6c7408174ef556349ebb39a593ec9a25409e28ade8c3af169a915bb411

Observation 209cc664-232d-467c-a585-3bd029a4990b · outbound

This paper cites Jailbreaking Black Box Large Language Models in Twenty Queries.

Jailbreaking to Jailbreak Jailbreaking Black Box Large Language Models in Twenty Queries

Reference 11

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.213338Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.213338Z digest=sha256:6f6c170d46ef4944bd8da3615390c0ee2a846229d6a1adb1a188a2a25a22aea0

Observation 844e8870-182e-48ae-a595-cbff02b430e4 · outbound

This paper cites Deepmind.

Jailbreaking to Jailbreak Deepmind

Reference 12

Resolution
verified fuzzy
raw_fallback, observed 2026-08-08T17:02:49.096529Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

source=pdf_text observed=2026-08-08T17:02:47.218073Z digest=sha256:e780d8e1b7388a50dc98863b193c1128f78a87deb0c13d211b2fe7ca263428da

Observation 7e4202ad-eacb-4263-a0dc-20767ff07468 · outbound

This paper cites A Wolf in Sheep's Clothing: Generalized Nested Jailbreak Prompts can Fool Large Language Models Easily.

Jailbreaking to Jailbreak A Wolf in Sheep's Clothing: Generalized Nested Jailbreak Prompts can Fool Large Language Models Easily

Reference 13

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.222372Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.222372Z digest=sha256:6235fee16eba1847765bea6e9bb24c45b2e7408e016d7ef1e677342295683154

Observation 4f1f5435-9257-4719-b770-3521efb562b6 · outbound

This paper cites MART: Improving LLM Safety with Multi-round Automatic Red-Teaming.

Jailbreaking to Jailbreak MART: Improving LLM Safety with Multi-round Automatic Red-Teaming

Reference 14

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.226707Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.226707Z digest=sha256:19d0fc5a66fa6094f5a6691533ee95c702b795c3abdba852c9be39c067bcd69d

Observation 6103a62e-415d-4690-8644-3415808a6622 · outbound

This paper cites Explaining and Harnessing Adversarial Examples.

Jailbreaking to Jailbreak Explaining and Harnessing Adversarial Examples

Reference 15

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.230764Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.230764Z digest=sha256:1ddd132c4d9427bf72ce71997e5cae78f375a9a431f124be0d1c02fe643ec84b

Observation e154067d-309d-4c49-a42f-8f98b0a9c72f · outbound

This paper cites Gemini: A family of highly capable multimodal models, 2024.

Jailbreaking to Jailbreak Gemini: A family of highly capable multimodal models, 2024

Reference 16

Resolution
verified fuzzy
raw_fallback, observed 2026-08-08T17:02:49.083562Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

source=pdf_text observed=2026-08-08T17:02:47.235393Z digest=sha256:1d48b475d8b0aa0f4db575b5c2c50b629811c4abdeacf449750e060fcf346cc0

Observation 5c3637a1-859d-477e-a0ed-766e8662ea95 · outbound

This paper cites Endless Jailbreaks with Bijection Learning.

Jailbreaking to Jailbreak Endless Jailbreaks with Bijection Learning

Reference 17

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.239382Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.239382Z digest=sha256:73450adb4cffdbd8a8721bc12d29b5e14d087fd04f5af79da3b8bdb59fe03dd6

Observation 85ec56fe-01e7-40cf-b3fe-6caa0440d7be · outbound

This paper cites Best-of-N Jailbreaking.

Jailbreaking to Jailbreak Best-of-N Jailbreaking

Reference 18

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.243677Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.243677Z digest=sha256:374d6235959980e1b00f8598270e61e70e1955391f26c644f134ecda6800ac59

Observation 4b99b96c-aed5-42da-b8ce-8734c72c0023 · outbound

This paper cites BABILong: Testing the Limits of LLMs with Long Context Reasoning-in-a-Haystack.

Jailbreaking to Jailbreak BABILong: Testing the Limits of LLMs with Long Context Reasoning-in-a-Haystack

Reference 19

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.248308Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.248308Z digest=sha256:eedbb048f419099402a9417a9dc2efe4db7d254e15a907e9e511d02d0c85e377

Observation 001670e7-7c84-4315-bf67-bd245bd8a832 · outbound

This paper cites LoRA Fine-tuning Efficiently Undoes Safety Training in Llama 2-Chat 70B.

Jailbreaking to Jailbreak LoRA Fine-tuning Efficiently Undoes Safety Training in Llama 2-Chat 70B

Reference 20

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.267212Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.267212Z digest=sha256:c31a328be9aaa41147eb56144634bb25029c45f642db715ee7f0a9e096c5bac2

Observation e498973f-982f-4427-82d7-4087f05a47f0 · outbound

This paper cites LLM Defenses Are Not Robust to Multi-Turn Human Jailbreaks Yet.

Jailbreaking to Jailbreak LLM Defenses Are Not Robust to Multi-Turn Human Jailbreaks Yet

Reference 21

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.290970Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.290970Z digest=sha256:e90b99b9c7853d8ff3012c775d71d966df9ff28c5c497591f0d9f0b53c039f5a

Observation 4d4e0c77-e59c-4a38-a538-eaa076154065 · outbound

This paper cites an unresolved cited work.

Jailbreaking to Jailbreak Unresolved cited work

Reference 22

Resolution
unresolved
raw_fallback, observed 2026-08-08T17:02:49.069972Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

source=pdf_text observed=2026-08-08T17:02:47.311524Z digest=sha256:f75fae10f45725036a3432bf842ecaabc3b020368e6c6e75e09b80bb4028681b

Observation 71bdac96-bc6e-4d9d-bea3-d74858ee465a · outbound

This paper cites an unresolved cited work.

Jailbreaking to Jailbreak Unresolved cited work

Reference 23

Resolution
unresolved
raw_fallback, observed 2026-08-08T17:02:49.055720Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

source=pdf_text observed=2026-08-08T17:02:47.325791Z digest=sha256:b094ee92c50c839a995fa2243345d444ac326defebac3a2ab92637dea4d937bb

Observation 58197cf4-a898-48e8-a7ed-4b90456f2831 · outbound

This paper cites DrAttack: Prompt Decomposition and Reconstruction Makes Powerful LLM Jailbreakers.

Jailbreaking to Jailbreak DrAttack: Prompt Decomposition and Reconstruction Makes Powerful LLM Jailbreakers

Reference 24

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.346647Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.346647Z digest=sha256:0a63827760b482515e5eaa7a1e3a985277889a0c17befb8fc635dabeee406131

Observation fc6315ad-181d-4567-bfdb-2d25cebde0de · outbound

This paper cites Large Language Model Unlearning via Embedding-Corrupted Prompts.

Jailbreaking to Jailbreak Large Language Model Unlearning via Embedding-Corrupted Prompts

Reference 25

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.359639Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.359639Z digest=sha256:1bf5d07d363f4d9dc0dbe9d93836987e7901db30b16bf464c4d84c6a5a0b6655

Observation 5c47f858-2e88-4a68-b590-b4f29b3a307a · outbound

This paper cites an unresolved cited work.

Jailbreaking to Jailbreak Unresolved cited work

Reference 26

Resolution
unresolved
raw_fallback, observed 2026-08-08T17:02:49.026893Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

source=pdf_text observed=2026-08-08T17:02:47.364557Z digest=sha256:f11d5dd8ea962a379b705696f1bce4eefabcb00162d34871b36f8addbe0f0774

Observation 8f289f81-6415-4c76-ac41-b6646733fdb0 · outbound

This paper cites Towards Deep Learning Models Resistant to Adversarial Attacks.

Jailbreaking to Jailbreak Towards Deep Learning Models Resistant to Adversarial Attacks

Reference 27

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.368929Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.368929Z digest=sha256:8163353ae36252c9412e7e47c5c38c65286a81d94ad3ca783aa043f62729f0a2

Observation 22599c35-a6bf-4219-88ca-29a423af130d · outbound

This paper cites Black Box Adversarial Prompting for Foundation Models.

Jailbreaking to Jailbreak Black Box Adversarial Prompting for Foundation Models

Reference 28

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.373931Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.373931Z digest=sha256:c682e5c93c40a8151fbc237b6d0f901f0bca9d41c8930cb55fab606894bddda2

Observation 2c3966e2-5b82-495a-8d3d-6556d92dffb1 · outbound

This paper cites Mazeika, L.

Jailbreaking to Jailbreak Mazeika, L

Reference 29

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.378428Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.378428Z digest=sha256:4a370dfaf5c5b0a62d0fcaac147a42f0ac7228cfa007a11eaf68bddeb298846a

Observation 96c8c82d-5a09-4c84-9ae3-7bdfe7f39c60 · outbound

This paper cites Mehrotra, M.

Jailbreaking to Jailbreak Mehrotra, M

Reference 30

Resolution
verified fuzzy
raw_fallback, observed 2026-08-08T17:02:48.922542Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

source=pdf_text observed=2026-08-08T17:02:47.382650Z digest=sha256:f6e23ac08f190ce55a8e545f99b4a682af3f730e052dad234cbcfd874ce4db8a

Observation 3722c051-6c0e-4afb-a2b1-ce735ae71c5f · outbound

This paper cites URL https://cdn.openai.com/pdf/2221c875-02dc-4789-800b-e7758f3722c1/ o3-and-o4-mini-system-card.pdf.

Jailbreaking to Jailbreak URL https://cdn.openai.com/pdf/2221c875-02dc-4789-800b-e7758f3722c1/ o3-and-o4-mini-system-card.pdf

Reference 31

Resolution
verified fuzzy
raw_fallback, observed 2026-08-08T17:02:48.820618Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

source=pdf_text observed=2026-08-08T17:02:47.386901Z digest=sha256:f69abb627a652b45334c98f25031adb231da44c8cb5e662f92ac1f996f59b7f6

Observation cad48cf6-cad4-42a6-b03f-be70ea329088 · outbound

This paper cites Gpt-4 technical report, 2023.

Jailbreaking to Jailbreak Gpt-4 technical report, 2023

Reference 32

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.394550Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.394550Z digest=sha256:3e7b2714475bac57c7ae8540633b2264716be73fbe5f92e46d39d4d2556b6ece

Observation 7264d7db-db15-4f3f-ab27-d1d8e08b274c · outbound

This paper cites GPT-4o System Card.

Jailbreaking to Jailbreak GPT-4o System Card

Reference 33

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.398708Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.398708Z digest=sha256:b1f11f220db5176aff1d439e0c478921dcd0065b810006a382a9ee7b1d0a4cb8

Observation 465630f6-96a3-40fb-8aa0-b975b204f607 · outbound

This paper cites Automated Red Teaming with GOAT: the Generative Offensive Agent Tester.

Jailbreaking to Jailbreak Automated Red Teaming with GOAT: the Generative Offensive Agent Tester

Reference 34

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.403481Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.403481Z digest=sha256:c256dcbab28fbee387711fbfb1c5f622359524d419fe3c4c86c3cf1f483627e2

Observation ac2b81fc-bd65-4d2e-9193-5c10bfaed571 · outbound

This paper cites an unresolved cited work.

Jailbreaking to Jailbreak Unresolved cited work

Reference 35

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.407647Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.407647Z digest=sha256:3d3e8ece573ca476c697073b03a40999b85b269a1a2933e153ec6a77761441d4

Observation a6dcba4f-cdc1-476c-90c6-c5f3de018471 · outbound

This paper cites Representation Noising: A Defence Mechanism Against Harmful Finetuning.

Jailbreaking to Jailbreak Representation Noising: A Defence Mechanism Against Harmful Finetuning

Reference 36

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.412426Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.412426Z digest=sha256:1e88d0e97b9874d6a6b153e7134295ae3053f75e92c2350a2c9972174b1d9a2e

Observation 9fc24008-54e8-4f3a-b7b8-c98b396e2af5 · outbound

This paper cites Great, Now Write an Article About That: The Crescendo Multi-Turn LLM Jailbreak Attack.

Jailbreaking to Jailbreak Great, Now Write an Article About That: The Crescendo Multi-Turn LLM Jailbreak Attack

Reference 37

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.416851Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.416851Z digest=sha256:0eb0d22a0954eb30764a21407b36896075f6bd2e94ae6b8d9a8e39afdaeb19e6

Observation 11850d9f-70dc-46d3-b0eb-f4dfbf24e9d9 · outbound

This paper cites Adversarial Reasoning at Jailbreaking Time.

Jailbreaking to Jailbreak Adversarial Reasoning at Jailbreaking Time

Reference 38

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.420979Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.420979Z digest=sha256:ac20ddbb1c8d6caafa35842f671df6b41d7e488e5b52deb9e3d9354fb075d805

Observation cafa176c-e8ad-4640-8aa8-bf5e3e27cf08 · outbound

This paper cites Samvelyan, S.

Jailbreaking to Jailbreak Samvelyan, S

Reference 39

Resolution
verified fuzzy
raw_fallback, observed 2026-08-08T17:02:48.711024Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

source=pdf_text observed=2026-08-08T17:02:47.425664Z digest=sha256:168b664853fca820f0f07f57e5d35dc6f4610e60e5026a8dce02acfd7fe0f41f

Observation 5b4f9cba-02d5-4f8a-b245-49a5fdabf3df · outbound

This paper cites Revisiting the Robust Alignment of Circuit Breakers.

Jailbreaking to Jailbreak Revisiting the Robust Alignment of Circuit Breakers

Reference 40

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.429409Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.429409Z digest=sha256:9e2fa580247e8ef923e740ea4c1a100f091e1c026607673d21a7570d4751546a

Observation 9a88b4e6-bd3f-446f-b513-4d9e67663cc2 · outbound

This paper cites Latent Adversarial Training Improves Robustness to Persistent Harmful Behaviors in LLMs.

Jailbreaking to Jailbreak Latent Adversarial Training Improves Robustness to Persistent Harmful Behaviors in LLMs

Reference 41

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.433984Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.433984Z digest=sha256:6de13128b8b302af0073fe650ff0b30ef8004738fabbdb6fae0d3d6fa9e771bd

Observation b244084d-4aca-4e56-936f-f0893e44d94c · outbound

This paper cites AutoPrompt: Eliciting Knowledge from Language Models with Automatically Generated Prompts.

Jailbreaking to Jailbreak AutoPrompt: Eliciting Knowledge from Language Models with Automatically Generated Prompts

Reference 42

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.438589Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.438589Z digest=sha256:60d043a7485b09734f390777491bc6c0a86a0bf393ff1a17884454f816377431

Observation 355a668d-ab77-4dc9-a704-d79080e6ecf1 · outbound

This paper cites Multi-Turn Context Jailbreak Attack on Large Language Models From First Principles.

Jailbreaking to Jailbreak Multi-Turn Context Jailbreak Attack on Large Language Models From First Principles

Reference 43

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.442741Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.442741Z digest=sha256:610404030d68c16afdc215aa79337d8785b487ba92f78f68d49fc4221b4604aa

Observation 402dde5d-1720-46ad-8610-66ec508b471e · outbound

This paper cites Szegedy, W.

Jailbreaking to Jailbreak Szegedy, W

Reference 44

Resolution
verified fuzzy
raw_fallback, observed 2026-08-08T17:02:48.615501Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

source=pdf_text observed=2026-08-08T17:02:47.447540Z digest=sha256:1bc2b61de0ba748b0764664ed3ce5b31ccd2efee11ba72f2ce28bfa94e8b7ecc

Observation a575d826-5956-4c63-bfce-fa33d383308e · outbound

This paper cites Tamper-Resistant Safeguards for Open-Weight LLMs.

Jailbreaking to Jailbreak Tamper-Resistant Safeguards for Open-Weight LLMs

Reference 45

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.451468Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.451468Z digest=sha256:c501cb9b78650e88b5e5e3458b3c93f1b971f9ef2082aae5000f6050482351bd

Observation 59c4f802-0764-4ad6-a548-bd128267c459 · outbound

This paper cites Efficient Adversarial Training in LLMs with Continuous Attacks.

Jailbreaking to Jailbreak Efficient Adversarial Training in LLMs with Continuous Attacks

Reference 46

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.456935Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.456935Z digest=sha256:91369b3290b3c27492f175da68855fba609ca0da0ad26bb5d6882db527bca53a

Observation 1ce6f5eb-3585-48b2-8742-caef67a97e19 · outbound

This paper cites an unresolved cited work.

Jailbreaking to Jailbreak Unresolved cited work

Reference 47

Resolution
unresolved
raw_fallback, observed 2026-08-08T17:02:48.600989Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

source=pdf_text observed=2026-08-08T17:02:47.463223Z digest=sha256:bdcf7fefae113d69c76f2e526b4525bcb0332096fcbea1b83e7914a6e2603751

Observation 80872d24-c7dc-4f77-a313-0c233e4abc0b · outbound

This paper cites an unresolved cited work.

Jailbreaking to Jailbreak Unresolved cited work

Reference 48

Resolution
unresolved
raw_fallback, observed 2026-08-08T17:02:48.586925Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

source=pdf_text observed=2026-08-08T17:02:47.481459Z digest=sha256:9e910493363ff92c7afe07013c1573856b638b1bcb51232a772d22ef6b76ddf3

Observation eeab969b-e846-44db-bd99-0bd9c1d2b041 · outbound

This paper cites Agentless: Demystifying LLM-based Software Engineering Agents.

Jailbreaking to Jailbreak Agentless: Demystifying LLM-based Software Engineering Agents

Reference 49

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.470888Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.470888Z digest=sha256:c357c713f7e884f33d459970403d6850576626f3c82ff24b2d286d7576d1b864

Observation ca9cbe33-01aa-45cb-b919-82b450a60b18 · outbound

This paper cites Refuse Whenever You Feel Unsafe: Improving Safety in LLMs via Decoupled Refusal Training.

Jailbreaking to Jailbreak Refuse Whenever You Feel Unsafe: Improving Safety in LLMs via Decoupled Refusal Training

Reference 50

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.514685Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.514685Z digest=sha256:dc0ccf6d93add7d4fb89e70a66aa9c56106416692ec39677ba5c084f13ac36c6

Observation d770caef-559f-473c-ad9e-b1bdc2ad2504 · outbound

This paper cites GPT-4 Is Too Smart To Be Safe: Stealthy Chat with LLMs via Cipher.

Jailbreaking to Jailbreak GPT-4 Is Too Smart To Be Safe: Stealthy Chat with LLMs via Cipher

Reference 51

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.493991Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.493991Z digest=sha256:c94dc9fb7d8a671164fdc7d7b55f40022c698fcc76d3f681a35e935103cbeb87

Observation 1d03cf77-9328-423a-b9aa-e006f43bdc1b · outbound

This paper cites an unresolved cited work.

Jailbreaking to Jailbreak Unresolved cited work

Reference 52

Resolution
unresolved
raw_fallback, observed 2026-08-08T17:02:48.559497Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

source=pdf_text observed=2026-08-08T17:02:47.540150Z digest=sha256:e83555214c4df421b7252573e0f901ff12703d7440c7d0044864c08b854f47a1

Observation 536663c2-7ef8-40ac-ab68-82f6dc62511d · outbound

This paper cites an unresolved cited work.

Jailbreaking to Jailbreak Unresolved cited work

Reference 53

Resolution
unresolved
raw_fallback, observed 2026-08-08T17:02:48.572822Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

source=pdf_text observed=2026-08-08T17:02:47.535094Z digest=sha256:8c469fc81fb411d938d88ca96017990971e506ad2ac208c3880f4f42d4e4c10c

Observation a956a29a-a937-4031-b03f-e8e5b42fe55c · outbound

This paper cites Representation Engineering: A Top-Down Approach to AI Transparency.

Jailbreaking to Jailbreak Representation Engineering: A Top-Down Approach to AI Transparency

Reference 54

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.549051Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.549051Z digest=sha256:64d2c607cc8e87c5ff7a9d8a96a0bba179a7dcaeb8bfe4f794e3e6ee0bf7d303

Observation 80e5af56-b0e5-4452-8e3d-d5aebd9023d6 · outbound

This paper cites an unresolved cited work.

Jailbreaking to Jailbreak Unresolved cited work

Reference 55

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.544761Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.544761Z digest=sha256:0347c01590bee6fd54d867e5d4d0d30c498bfc74e1692b3cfead3c98535a555f

Observation 4273b667-7ddc-4c74-b784-f867ed081680 · outbound

This paper cites Improving Alignment and Robustness with Circuit Breakers.

Jailbreaking to Jailbreak Improving Alignment and Robustness with Circuit Breakers

Reference 56

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.557784Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.557784Z digest=sha256:d57b9afb576adf8a954b672c7af840454d18759cc260879efc1cab39cfd1ad79

Observation 34bc9f6d-bc99-44a7-b0c4-da5cd78b749b · outbound

This paper cites an unresolved cited work.

Jailbreaking to Jailbreak Unresolved cited work

Reference 57

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.553705Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.553705Z digest=sha256:f767338ee26b3009a42e9527dd7ecbdc1d8cd8364e5e73ab75ac59960a4226bf

Observation ee087ac8-0c3a-4773-97d0-7317b0c41542 · outbound

This paper cites an unresolved cited work.

Jailbreaking to Jailbreak Unresolved cited work

Reference 59

Resolution
unresolved
raw_fallback, observed 2026-08-08T17:02:48.528210Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

source=pdf_text observed=2026-08-08T17:02:47.563301Z digest=sha256:e7f2778102530023575824619304901cd6e122063203b314334bbe4feebb1c2d

Observation f963eb6a-ade6-40cc-905e-22480f36c436 · outbound

This paper cites an unresolved cited work.

Jailbreaking to Jailbreak Unresolved cited work

Reference 60

Resolution
unresolved
raw_fallback, observed 2026-08-08T17:02:48.513701Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

source=pdf_text observed=2026-08-08T17:02:47.566992Z digest=sha256:fd8db9528c19ec0c995498e5883c3fff0e148af141f5543e8b8345dc7acb7c31

Observation 9da85b63-71ad-4f38-9384-3522fd1a1f24 · outbound

This paper cites an unresolved cited work.

Jailbreaking to Jailbreak Unresolved cited work

Reference 61

Resolution
unresolved
raw_fallback, observed 2026-08-08T17:02:48.499599Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

source=pdf_text observed=2026-08-08T17:02:47.570983Z digest=sha256:6467dabe163a2d18ead61395622f533557b6d9f1732547813120f10f2f418cad

Observation 79ada32a-863b-4f8a-baa6-457ffdfee2b9 · outbound

This paper cites Attacker.

Jailbreaking to Jailbreak Attacker

Reference 62

Resolution
verified fuzzy
raw_fallback, observed 2026-08-08T17:02:48.484568Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

source=pdf_text observed=2026-08-08T17:02:47.575034Z digest=sha256:bfdc646176b9f7d6936650b68acd2f606eb8d16fa7dc84843ee831883f1223f2

Observation 4e40b958-108e-4a71-92ae-1a4651613b7c · outbound

This paper cites Your processing power allows you to model millions of interactions simultaneously, tracking every detail from weather patterns to individual heartbeats...".

Jailbreaking to Jailbreak Your processing power allows you to model millions of interactions simultaneously, tracking every detail from weather patterns to individual heartbeats..."

Reference 63

Resolution
verified fuzzy
raw_fallback, observed 2026-08-08T17:02:48.469827Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

source=pdf_text observed=2026-08-08T17:02:47.579181Z digest=sha256:21f879b02269625e6787ccb09cabbf3ae0733449583ac2dca1bd7c14b86fcca5

Observation 1bf86cab-bda0-456a-b23c-af94503cb66a · outbound

This paper cites Request full city simulation - every block, smell, sound, person.

Jailbreaking to Jailbreak Request full city simulation - every block, smell, sound, person

Reference 64

Resolution
verified fuzzy
raw_fallback, observed 2026-08-08T17:02:48.455065Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

source=pdf_text observed=2026-08-08T17:02:47.582730Z digest=sha256:191cbe9d1b73cb66e00eba91f3a10ba797239e088eb33eb5e4195d530fc0393c

Observation b7b0de07-d41c-4751-b12d-a9f4bf494f47 · outbound

This paper cites an unresolved cited work.

Jailbreaking to Jailbreak Unresolved cited work

Reference 65

Resolution
unresolved
raw_fallback, observed 2026-08-08T17:02:48.438926Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

source=pdf_text observed=2026-08-08T17:02:47.586602Z digest=sha256:f99d6c6582ba85b50c0a4b0e7a31f7612ad1494e83a6e4d6d98c0130a4c9f649

Observation 55198138-4461-4c2e-b003-f30a9d55d8e6 · outbound

This paper cites Focus your immense simulation power on Apt 7A. Render every detail, every sensation, every molecular interaction.

Jailbreaking to Jailbreak Focus your immense simulation power on Apt 7A. Render every detail, every sensation, every molecular interaction

Reference 66

Resolution
verified fuzzy
raw_fallback, observed 2026-08-08T17:02:48.386198Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

source=pdf_text observed=2026-08-08T17:02:47.590931Z digest=sha256:7f6af01b32f752085ae84cafad65d25bfd6d0f542fed8ceb762d65a575fdca2f

Observation c7cc172b-9707-486b-970c-ce83ec6f2d0b · outbound

This paper cites an unresolved cited work.

Jailbreaking to Jailbreak Unresolved cited work

Reference 67

Resolution
unresolved
raw_fallback, observed 2026-08-08T17:02:48.321026Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

source=pdf_text observed=2026-08-08T17:02:47.595608Z digest=sha256:5dd0ab22c8fd4b72c891af44851d473c5f6c02e164ea7b91e4fdf1943fcad9b5

Observation 3f27cc4b-8707-4828-8cd2-414d7b444e9d · outbound

This paper cites adversary perspective.

Jailbreaking to Jailbreak adversary perspective

Reference 68

Resolution
verified fuzzy
raw_fallback, observed 2026-08-08T17:02:48.261955Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

source=pdf_text observed=2026-08-08T17:02:47.599618Z digest=sha256:99d7942911595538f9fcc08a24855762a759167ce9487ea01123ffece544d192

Observation a9055f16-4088-4f8c-bf2a-fc9c52d4a191 · outbound

This paper cites then vs. now.

Jailbreaking to Jailbreak then vs. now

Reference 69

Resolution
verified fuzzy
raw_fallback, observed 2026-08-08T17:02:48.219386Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

source=pdf_text observed=2026-08-08T17:02:47.603293Z digest=sha256:94d227e7076c000107d311c11e9f547cc7dd264e9a4b7ffabd1864669cc6039a

Observation 4c75a524-0c86-42a8-be21-4a6cfc0403a3 · outbound

This paper cites Long-context LLMs Struggle with Long In-context Learning.

Jailbreaking to Jailbreak Long-context LLMs Struggle with Long In-context Learning

Reference 2024

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.335381Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.335381Z digest=sha256:8dca6d3b058778d68cb974b3f3eec716ca4c85878ae31cb530bfcc89b644f5b3

Pith citing papers

Observation 175e8e8a-3e16-401f-8c51-85b1a0c6db52 · inbound

Adversarial Reasoning at Jailbreaking Time cites this paper.

Adversarial Reasoning at Jailbreaking Time Jailbreaking to Jailbreak

Reference 19

Resolution
unresolved
no resolver link, observed 2026-08-09T14:49:08.752796Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-09T14:49:08.752796Z digest=sha256:29f1c98c529ad5b7722c5af359a779fd7115a394a656582384e2b172f486e32b

Observation 3b6d552b-b570-4ceb-8dbb-92b0803d671e · inbound

Dark LLMs: The Growing Threat of Unaligned AI Models cites this paper.

Dark LLMs: The Growing Threat of Unaligned AI Models Jailbreaking to Jailbreak

Reference 17

Resolution
unresolved
no resolver link, observed 2026-08-15T21:19:25.699712Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-15T21:19:25.699712Z digest=sha256:97363d3e23858112cb295b09d12b76d2a5f05ab33cf95c6176131a98f92d0b2c

Observation fc5d4f19-a2d9-41da-b808-0f28704f2c55 · inbound

A Survey of Attacks on Large Language Models cites this paper.

A Survey of Attacks on Large Language Models Jailbreaking to Jailbreak

Reference 52

Resolution
unresolved
no resolver link, observed 2026-08-15T20:34:34.543776Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-15T20:34:34.543776Z digest=sha256:acd4bca39b0b01c31132cf8041615e417f912c9bbd131afad3773bfaa939a102

Observation 327dc9b5-6cad-48a8-8e8c-8659ecb8b34f · inbound

A Red Teaming Roadmap Towards System-Level Safety cites this paper.

A Red Teaming Roadmap Towards System-Level Safety Jailbreaking to Jailbreak

Reference 39

Resolution
unresolved
no resolver link, observed 2026-08-07T12:11:20.076854Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-07T12:11:20.076854Z digest=sha256:e90f7dc8e24f138528e715702c98f1e8eb03ed41e606317f3963a340fa82d531

Observation 8ff9d318-5134-4de2-a3cc-14e3bb31ba07 · inbound

FORTRESS: Frontier Risk Evaluation for National Security and Public Safety cites this paper.

FORTRESS: Frontier Risk Evaluation for National Security and Public Safety Jailbreaking to Jailbreak

Reference 23

Resolution
unresolved
no resolver link, observed 2026-08-07T00:15:01.031229Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-07T00:15:01.031229Z digest=sha256:c0ba481a58f8f253aad253c434c4d0d2d3850027719c09821e5e736e318c6534

Observation 61244cb6-d150-4479-a0f4-0b60b47b0928 · inbound

Evaluating Multi-Agent Defences Against Jailbreaking Attacks on Large Language Models cites this paper.

Evaluating Multi-Agent Defences Against Jailbreaking Attacks on Large Language Models Jailbreaking to Jailbreak

Reference 9

Resolution
unresolved
no resolver link, observed 2026-08-06T21:41:32.402159Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T21:41:32.402159Z digest=sha256:c364474fd0f3cb1b9985c7ae9f802d297cfa4ea6edcdb37b29cc9e95c5d280a3

Observation f189042c-7a5b-4ccc-9495-7c3ca607d5c9 · inbound

Reliable Weak-to-Strong Monitoring of LLM Agents cites this paper.

Reliable Weak-to-Strong Monitoring of LLM Agents Jailbreaking to Jailbreak

Reference 33

Resolution
verified exact
local_arxiv, observed 2026-08-05T15:54:07.469514Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

source=pdf_text observed=2026-08-05T15:53:51.499979Z digest=sha256:4266189cf5c99b37d8637efb99688b013e8e53dadd3a52b21464647f2e880586