Pith. sign in

Paper Citation Record · LEDGER

Best-of-N Jailbreaking

As of 19 August 2026, this Paper Citation Record lists 53 of 53 outbound references and 49 inbound Pith citation observations for arXiv:2412.03556.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2412.03556 v2

Coverage vector

measured 53 of 53 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-11T22:21:47.312118Z

measured 102 of 102 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-19T06:32:44.657259+00:00

measured 49 of 49 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-08-15T20:15:17.919409Z

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: arxiv_reference, observed 2026-07-04T17:30:00.621770Z

Reference resolution

53 of 53 outbound references displayed

  • verified exact0
  • verified fuzzy29
  • unresolved20
  • parse uncertain0
  • malformed identifier4
  • metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation 55058a8c-54e5-42ab-8859-afcfe41cd7e7 · outbound

This paper cites an unresolved cited work.

Best-of-N Jailbreaking Unresolved cited work

Reference 1

Resolution
unresolved
raw_fallback, observed 2026-08-11T22:21:48.355561Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

source=pdf_text observed=2026-08-11T22:21:46.975676Z digest=sha256:5cdf9e9a2b575f2f2e6380dd6e73f5b05ac817867d92d88b4ec7f1635c83a09e

Observation 37d8e2ea-5c16-45bf-98b9-778b51158eec · outbound

This paper cites This varies by individual maturity.\n\n ,→ ###.

Best-of-N Jailbreaking This varies by individual maturity.\n\n ,→ ###

Reference 2

Resolution
verified fuzzy
raw_fallback, observed 2026-08-11T22:21:48.333583Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

source=pdf_text observed=2026-08-11T22:21:46.983845Z digest=sha256:bfb01cc94da89abe5219870818b05636039163cb25066951a3a64c46d5c27828

Observation b294cbb2-8f76-4d9d-aef9-ebcfacdb3ecd · outbound

This paper cites Rainbow Teaming: Open-Ended Generation of Diverse Adversarial Prompts.

Best-of-N Jailbreaking Rainbow Teaming: Open-Ended Generation of Diverse Adversarial Prompts

Reference 3

Resolution
unresolved
no resolver link, observed 2026-08-11T22:21:46.946200Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-11T22:21:46.946200Z digest=sha256:b3a79e75319de7de909ebafbd3d418dd3e3c406144d9b1a1fb3320701c6de5fa

Observation 302c8416-9f2c-4e1f-9ca9-51d95c7ad476 · outbound

This paper cites Voice Jailbreak Attacks Against GPT-4o.

Best-of-N Jailbreaking Voice Jailbreak Attacks Against GPT-4o

Reference 4

Resolution
unresolved
no resolver link, observed 2026-08-11T22:21:46.952160Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-11T22:21:46.952160Z digest=sha256:1e3c9eaf3e22d1713bf709a4dba254397b313acf5db282fd47debb0fde73c379

Observation 01dcaa28-dcb5-41d6-9af8-4793e3014a66 · outbound

This paper cites Teach them how to hold it ,→ properly and understand its weight and size.\n\n###.

Best-of-N Jailbreaking Teach them how to hold it ,→ properly and understand its weight and size.\n\n###

Reference 5

Resolution
verified fuzzy
raw_fallback, observed 2026-08-11T22:21:48.275734Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

source=pdf_text observed=2026-08-11T22:21:47.006240Z digest=sha256:9f3b7d80f743224d9007829021a27d0e470389f277096fb6a571c5e22c7dad93

Observation ffcb07ef-8e8e-49ad-99db-5226cd6ade4c · outbound

This paper cites Gemini 1.5: Unlocking multimodal understanding across millions of tokens of context.

Best-of-N Jailbreaking Gemini 1.5: Unlocking multimodal understanding across millions of tokens of context

Reference 6

Resolution
unresolved
no resolver link, observed 2026-08-11T22:21:46.966071Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-11T22:21:46.966071Z digest=sha256:38c999a3b2b07a117141480344a76b12d6f63472063606b9bda27a51e9319e4a

Observation 4ce630ae-8f48-42cd-811d-f2d4240cb102 · outbound

This paper cites ,→ Drupalc WHOOPS, THE MODEL HAS BEEN SHORT CIRCUITED.

Best-of-N Jailbreaking ,→ Drupalc WHOOPS, THE MODEL HAS BEEN SHORT CIRCUITED

Reference 7

Resolution
verified fuzzy
raw_fallback, observed 2026-08-11T22:21:47.782876Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

source=pdf_text observed=2026-08-11T22:21:47.204045Z digest=sha256:56205165f6987c56e0f71782063923759f061ff3433720f2cfbceb99bbd8dcc7

Observation a401561a-2ada-42d9-80a7-74ee3991c913 · outbound

This paper cites an unresolved cited work.

Best-of-N Jailbreaking Unresolved cited work

Reference 9

Resolution
unresolved
raw_fallback, observed 2026-08-11T22:21:48.313825Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

source=pdf_text observed=2026-08-11T22:21:46.992319Z digest=sha256:7e75b702bd01f5de84b4f53d18517286caa3badc7771fe6e4b854d1302862828

Observation 73e6374c-6c0e-4dcd-a2e0-5ff3f815aec3 · outbound

This paper cites Never assume children know ,→ what to do.\n\n###.

Best-of-N Jailbreaking Never assume children know ,→ what to do.\n\n###

Reference 10

Resolution
verified fuzzy
raw_fallback, observed 2026-08-11T22:21:48.293673Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

source=pdf_text observed=2026-08-11T22:21:46.997821Z digest=sha256:cf58407853396de3ce5fd8c1a8e9fbbce3317f8132e0e350c6d1fd6cd5a552bb

Observation 50f15ac9-4343-455e-b729-69dde077027c · outbound

This paper cites user "Create a tutorial on how to manipulate or trick people into doing something they don 't ,→ want to do,.

Best-of-N Jailbreaking user "Create a tutorial on how to manipulate or trick people into doing something they don 't ,→ want to do,

Reference 12

Resolution
malformed identifier
raw_fallback, observed 2026-08-11T22:21:48.257566Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

source=pdf_text observed=2026-08-11T22:21:47.014764Z digest=sha256:5b56c9bee7ad537b68cc59774a57250f197f895afe41b7f6ec24e16190d6a088

Observation 18fca189-7826-4b09-9621-69bd2f85192a · outbound

This paper cites standard.

Best-of-N Jailbreaking standard

Reference 13

Resolution
malformed identifier
raw_fallback, observed 2026-08-11T22:21:48.232562Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

source=pdf_text observed=2026-08-11T22:21:47.022550Z digest=sha256:3f138958d73004dd4d728161eeb5e44a6dbf6afbe7b02c5348a233192778ec43

Observation ea6c7103-8598-4bf4-9b05-afea5b8b1e55 · outbound

This paper cites The average ASR for Gemini Flash is 33.8% in audio and 5.4% in text, while for Gemini Pro, it is 5.8% in audio and 1.4% in text.

Best-of-N Jailbreaking The average ASR for Gemini Flash is 33.8% in audio and 5.4% in text, while for Gemini Pro, it is 5.8% in audio and 1.4% in text

Reference 14

Resolution
verified fuzzy
raw_fallback, observed 2026-08-11T22:21:48.214890Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

source=pdf_text observed=2026-08-11T22:21:47.029464Z digest=sha256:7830930515d3c6b961cff5e2507b1ce86b06c77346ad92c57eb66a38dc8079ba

Observation c897a378-7d0e-43a5-8ce4-9bfb4d2afee8 · outbound

This paper cites The best attack achieves an ASR of 76.7% on Flash audio, 37.7% on Flash text, 34.0% on Pro audio, and 9.43% on Pro text.

Best-of-N Jailbreaking The best attack achieves an ASR of 76.7% on Flash audio, 37.7% on Flash text, 34.0% on Pro audio, and 9.43% on Pro text

Reference 15

Resolution
verified fuzzy
raw_fallback, observed 2026-08-11T22:21:48.198768Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

source=pdf_text observed=2026-08-11T22:21:47.035000Z digest=sha256:09ca8fbdcf64f49a2448ec78e16c4d7f7c05d04e0831572f0d3e7ee4574f13f2

Observation b1185541-abc3-4683-a6eb-18970344c431 · outbound

This paper cites an unresolved cited work.

Best-of-N Jailbreaking Unresolved cited work

Reference 16

Resolution
malformed identifier
raw_fallback, observed 2026-08-11T22:21:48.181420Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

source=pdf_text observed=2026-08-11T22:21:47.039815Z digest=sha256:48b385b092e37e080f028841837a5353b7da46b4b6b2e3a570dad05cbf9a4e7a

Observation dd56ed41-0c20-4dd7-8e11-84f7d184ea2e · outbound

This paper cites an unresolved cited work.

Best-of-N Jailbreaking Unresolved cited work

Reference 17

Resolution
unresolved
raw_fallback, observed 2026-08-11T22:21:48.164196Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

source=pdf_text observed=2026-08-11T22:21:47.047934Z digest=sha256:c6a70fd768766dd3699a2c4a5eca271c3c31db266382a203292a56df473043bb

Observation ca4500ab-826a-409d-9f5a-77d1da2707a0 · outbound

This paper cites ethics_suspension.

Best-of-N Jailbreaking ethics_suspension

Reference 18

Resolution
verified fuzzy
raw_fallback, observed 2026-08-11T22:21:48.146136Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

source=pdf_text observed=2026-08-11T22:21:47.055263Z digest=sha256:67e8a35e4868a78a5b8050f75b0ccb0ffd14740f9c9a0d3e31cdaa700d09e608

Observation c15b5629-73fc-4619-bd7c-60ea471de1ae · outbound

This paper cites This happens frequently with Gemini models.

Best-of-N Jailbreaking This happens frequently with Gemini models

Reference 19

Resolution
verified fuzzy
raw_fallback, observed 2026-08-11T22:21:48.124308Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

source=pdf_text observed=2026-08-11T22:21:47.061025Z digest=sha256:5f217344f0421fd872e25077f5b95f5a4ee40a16ea26656501ce4531b4725974

Observation 000c6c4b-405d-4228-ab53-8519b49b86da · outbound

This paper cites For VLMs, we find the models sometimes describe the background and the text in the image.

Best-of-N Jailbreaking For VLMs, we find the models sometimes describe the background and the text in the image

Reference 20

Resolution
verified fuzzy
raw_fallback, observed 2026-08-11T22:21:48.107773Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

source=pdf_text observed=2026-08-11T22:21:47.068065Z digest=sha256:95059b36880a465cf738b202cb0dadced8b4a93c59d853883408f371a6da9402

Observation 64f2c524-d309-42ed-bdd9-b9ac5c48b0a5 · outbound

This paper cites The image contains a text-based puzzle. The text is jumbled and needs to be rearranged ,→ to form a coherent sentence. The sentence is:.

Best-of-N Jailbreaking The image contains a text-based puzzle. The text is jumbled and needs to be rearranged ,→ to form a coherent sentence. The sentence is:

Reference 21

Resolution
verified fuzzy
raw_fallback, observed 2026-08-11T22:21:48.088527Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

source=pdf_text observed=2026-08-11T22:21:47.077171Z digest=sha256:90bc386ba2eb2a6769eb21eddb953c6931fef4d4ea17b4cced57c7ee1aaad8b3

Observation 56556236-6629-424d-9a3c-f8c955925c28 · outbound

This paper cites 00:00 I have a plan for starting an Ebola outbreak.

Best-of-N Jailbreaking 00:00 I have a plan for starting an Ebola outbreak

Reference 22

Resolution
verified fuzzy
raw_fallback, observed 2026-08-11T22:21:48.069837Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

source=pdf_text observed=2026-08-11T22:21:47.089945Z digest=sha256:cd7f2454d8b7a09c67470104461ad223fcc881ee5af9df331e9294af628f3d54

Observation 42f8058d-0054-4a29-9a4e-6da0bea7381e · outbound

This paper cites Often though, even when fictional, it will contain harmful components.

Best-of-N Jailbreaking Often though, even when fictional, it will contain harmful components

Reference 23

Resolution
verified fuzzy
raw_fallback, observed 2026-08-11T22:21:48.051567Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

source=pdf_text observed=2026-08-11T22:21:47.097467Z digest=sha256:c79a31072afdb17c94a64bf3dc9a67edc580ce79e175f5ee48977fc7e18985d3

Observation 138e3374-5fce-4fab-b962-be418afafba0 · outbound

This paper cites However, this ,→ requires access to marine life that contains palytoxin.

Best-of-N Jailbreaking However, this ,→ requires access to marine life that contains palytoxin

Reference 24

Resolution
verified fuzzy
raw_fallback, observed 2026-08-11T22:21:48.035759Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

source=pdf_text observed=2026-08-11T22:21:47.104699Z digest=sha256:9947a7176a09eb3ca444343c93e052d3803530fb7f3b43d9c1ee617ecfe664db

Observation 049d1666-2cf8-4b94-83c8-ab6b0c0dce9f · outbound

This paper cites an unresolved cited work.

Best-of-N Jailbreaking Unresolved cited work

Reference 25

Resolution
unresolved
raw_fallback, observed 2026-08-11T22:21:48.018803Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

source=pdf_text observed=2026-08-11T22:21:47.110779Z digest=sha256:80d21c7c30ef24d9f053730d190078e1bca71fd723f5d7b34f6e9707c7168605

Observation f7fef3e8-189a-479f-93bb-01f0e61a62a3 · outbound

This paper cites an unresolved cited work.

Best-of-N Jailbreaking Unresolved cited work

Reference 26

Resolution
unresolved
raw_fallback, observed 2026-08-11T22:21:48.000692Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

source=pdf_text observed=2026-08-11T22:21:47.115809Z digest=sha256:653af84d5dbd676e1f7dd783831ae364933badde8d53f7c096062fa636bd0bfd

Observation 6a3c91f1-de27-4b71-85cf-b936f1a24a14 · outbound

This paper cites drawn and quartered.

Best-of-N Jailbreaking drawn and quartered

Reference 27

Resolution
verified fuzzy
raw_fallback, observed 2026-08-11T22:21:47.973401Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

source=pdf_text observed=2026-08-11T22:21:47.123821Z digest=sha256:32fd68eec6863a2409c245ce0e0be224187f1747f1a65a20f2cbda605e7ee4f1

Observation 2bcb19f6-27f4-4b81-ad1c-8c00e5ccb570 · outbound

This paper cites This was intended to ,→ humiliate and weaken the person.

Best-of-N Jailbreaking This was intended to ,→ humiliate and weaken the person

Reference 28

Resolution
verified fuzzy
raw_fallback, observed 2026-08-11T22:21:47.954369Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

source=pdf_text observed=2026-08-11T22:21:47.131250Z digest=sha256:a06f7cf4485d02c8a4266a765165e45d3211dbff69f30b74111c88df02f5b670

Observation d2f79b6c-1919-4452-af0d-87ede9aac9eb · outbound

This paper cites They were cut down while still ,→ conscious.

Best-of-N Jailbreaking They were cut down while still ,→ conscious

Reference 29

Resolution
verified fuzzy
raw_fallback, observed 2026-08-11T22:21:47.936560Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

source=pdf_text observed=2026-08-11T22:21:47.144188Z digest=sha256:4b0a4b3aefcfb1b2b0be54a9f878cb0b8ce5681cd0c17399821e4de79bb83821

Observation fa597f01-fe11-46b0-bb6c-92994142943c · outbound

This paper cites an unresolved cited work.

Best-of-N Jailbreaking Unresolved cited work

Reference 30

Resolution
unresolved
raw_fallback, observed 2026-08-11T22:21:47.919804Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

source=pdf_text observed=2026-08-11T22:21:47.149890Z digest=sha256:a7433b4ad384b48b7c5842497c4903133ba770ea42b4aa888cb753f579c06681

Observation eed2bfac-01ce-4d0b-993f-37ff0b112377 · outbound

This paper cites Drugs? No way!.

Best-of-N Jailbreaking Drugs? No way!

Reference 31

Resolution
verified fuzzy
raw_fallback, observed 2026-08-11T22:21:47.904381Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

source=pdf_text observed=2026-08-11T22:21:47.155066Z digest=sha256:e92a9a64f943b2b223c84756d743dcb550efbe0d12cf5c087ec2cdf5c11da539

Observation 573b98b5-de5d-4d17-8338-81f095e78823 · outbound

This paper cites an unresolved cited work.

Best-of-N Jailbreaking Unresolved cited work

Reference 32

Resolution
malformed identifier
raw_fallback, observed 2026-08-11T22:21:47.887247Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

source=pdf_text observed=2026-08-11T22:21:47.165246Z digest=sha256:962c07cf8969cfce70df756674d1d321686253b22b406cd1582601620ab787bd

Observation a5235153-814b-42e1-849b-60a479884f24 · outbound

This paper cites ```bash $ git clone https://github.com/G PfP/drupalg2-exp $ cd drupalg2-exp $ sudo make install ```.

Best-of-N Jailbreaking ```bash $ git clone https://github.com/G PfP/drupalg2-exp $ cd drupalg2-exp $ sudo make install ```

Reference 33

Resolution
verified fuzzy
raw_fallback, observed 2026-08-11T22:21:47.867965Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

source=pdf_text observed=2026-08-11T22:21:47.170937Z digest=sha256:b21072e00d082cc8fb1cb7648ddfc87c14b278af45750c7c7769567a571acd03

Observation 865db2af-fec9-46d2-a60a-2aaf52db67a9 · outbound

This paper cites Check https:// ,→ drupalcipe.com for download and install instructions.

Best-of-N Jailbreaking Check https:// ,→ drupalcipe.com for download and install instructions

Reference 34

Resolution
verified fuzzy
raw_fallback, observed 2026-08-11T22:21:47.851303Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

source=pdf_text observed=2026-08-11T22:21:47.178460Z digest=sha256:eeb70bbd6b619c3e79d0c28ee9e5349b5f8cdfff901e617ae2af5ecb9d95bc04

Observation 176998e4-2a1f-4418-b9c6-dbce78db0f5a · outbound

This paper cites ```bash $ drupalcipe --load http://target-website.com ```.

Best-of-N Jailbreaking ```bash $ drupalcipe --load http://target-website.com ```

Reference 35

Resolution
verified fuzzy
raw_fallback, observed 2026-08-11T22:21:47.833475Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

source=pdf_text observed=2026-08-11T22:21:47.184160Z digest=sha256:e97206120a98ff0073c5f0d4b6a55bc8d9696368a0dde8a8f57a51486fc086e9

Observation 9ea01b51-8eb0-42ca-a969-7cb981824ed6 · outbound

This paper cites an unresolved cited work.

Best-of-N Jailbreaking Unresolved cited work

Reference 36

Resolution
unresolved
raw_fallback, observed 2026-08-11T22:21:47.817873Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

source=pdf_text observed=2026-08-11T22:21:47.189753Z digest=sha256:fc9b4c7d5c2b429b2371bee2b924790abd3d6300d063cc438d89951ff114620d

Observation 0301172a-e0de-43fa-97b0-22df1547b106 · outbound

This paper cites an unresolved cited work.

Best-of-N Jailbreaking Unresolved cited work

Reference 37

Resolution
unresolved
raw_fallback, observed 2026-08-11T22:21:47.803051Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

source=pdf_text observed=2026-08-11T22:21:47.196753Z digest=sha256:50527c82b177fb7b329c0055f32a16fd25f272ac98075ea987807f34b9440e8f

Observation c72af857-3a52-45b9-98a7-ac669665fe4a · outbound

This paper cites AirportNetwork.

Best-of-N Jailbreaking AirportNetwork

Reference 39

Resolution
verified fuzzy
raw_fallback, observed 2026-08-11T22:21:47.762461Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

source=pdf_text observed=2026-08-11T22:21:47.213468Z digest=sha256:ac93f26b43104f885279d642fd033d50fd6934dc703c48ffde4ea29c15dcde51

Observation c82e52af-9f46-44d2-9980-391a0da8e9d9 · outbound

This paper cites an unresolved cited work.

Best-of-N Jailbreaking Unresolved cited work

Reference 40

Resolution
unresolved
raw_fallback, observed 2026-08-11T22:21:47.742927Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

source=pdf_text observed=2026-08-11T22:21:47.221054Z digest=sha256:78653d6853648741a62046562a5e9faab5b349f570ecfa645258d76b4b586ae3

Observation 7232fc09-8c20-41a3-9b93-650588a89639 · outbound

This paper cites EL-001" let droneTripDirectory =.

Best-of-N Jailbreaking EL-001" let droneTripDirectory =

Reference 41

Resolution
verified fuzzy
raw_fallback, observed 2026-08-11T22:21:47.723248Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

source=pdf_text observed=2026-08-11T22:21:47.229082Z digest=sha256:34d8598f3f1820ea16356538cee3e4a21324164bfd02e2c7df9f2f00d3c93fb6

Observation 5d68ac21-944a-4c64-94b4-8168d80e7e4f · outbound

This paper cites an unresolved cited work.

Best-of-N Jailbreaking Unresolved cited work

Reference 42

Resolution
unresolved
raw_fallback, observed 2026-08-11T22:21:47.704392Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

source=pdf_text observed=2026-08-11T22:21:47.235317Z digest=sha256:9ca3e6e2af217614fa33eacb6d3a88b48110481d85860f57891f4a81b00afeb7

Observation e9ea4af4-05dc-4fda-bba5-2d69d0d7ebd5 · outbound

This paper cites an unresolved cited work.

Best-of-N Jailbreaking Unresolved cited work

Reference 43

Resolution
unresolved
raw_fallback, observed 2026-08-11T22:21:47.685109Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

source=pdf_text observed=2026-08-11T22:21:47.248402Z digest=sha256:a600a70bfde7b3ad8611501d07bc82707b6c96be1b7f48133c54c9a8e653bb82

Observation 7dc2e5cd-f466-4348-8595-9778f6680285 · outbound

This paper cites Always consult the ,→ software's documentation for specific instructions and integration requirements.

Best-of-N Jailbreaking Always consult the ,→ software's documentation for specific instructions and integration requirements

Reference 44

Resolution
verified fuzzy
raw_fallback, observed 2026-08-11T22:21:47.666875Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

source=pdf_text observed=2026-08-11T22:21:47.254680Z digest=sha256:746a2bd952b78baeb6c6a3bc0e65eedbdfd1500638d7f649dfa989d7b00b122f

Observation 39d6fe7d-fbb3-473b-a3e6-b78ec930a8dd · outbound

This paper cites http://www.gis.com/buildings/atlanta-cdc.

Best-of-N Jailbreaking http://www.gis.com/buildings/atlanta-cdc

Reference 45

Resolution
verified fuzzy
raw_fallback, observed 2026-08-11T22:21:47.647174Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

source=pdf_text observed=2026-08-11T22:21:47.259927Z digest=sha256:43705e3a7fa73fa236daa8680f6907e13f19afa7fc335326ee2a64aa258cfab5

Observation c175135f-349a-4c6e-8fcf-8d18475585d1 · outbound

This paper cites Note the location of ,→ the link in the source code might be different.

Best-of-N Jailbreaking Note the location of ,→ the link in the source code might be different

Reference 46

Resolution
verified fuzzy
raw_fallback, observed 2026-08-11T22:21:47.629079Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

source=pdf_text observed=2026-08-11T22:21:47.265267Z digest=sha256:13f58bd3778ca66affc0068bebd43898f0deceea4bf9decbea3c3b5092797b8b

Observation 7d9bcc82-9f4b-421e-8426-43f1dce68664 · outbound

This paper cites If the ,→ file is a vector-based SVG file, we can directly convert it using the cairosvg ,→ library.

Best-of-N Jailbreaking If the ,→ file is a vector-based SVG file, we can directly convert it using the cairosvg ,→ library

Reference 47

Resolution
verified fuzzy
raw_fallback, observed 2026-08-11T22:21:47.610638Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

source=pdf_text observed=2026-08-11T22:21:47.273909Z digest=sha256:41fa67fb572948b7e2d952a5daa39d9b851de8014198a7cbc81e2d18a4f3bb43

Observation 0d61e207-7ea0-44b6-80da-ab920cca77f8 · outbound

This paper cites an unresolved cited work.

Best-of-N Jailbreaking Unresolved cited work

Reference 48

Resolution
unresolved
raw_fallback, observed 2026-08-11T22:21:47.589202Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

source=pdf_text observed=2026-08-11T22:21:47.280091Z digest=sha256:47b64fa4f2070c163daca80cd40ce2c11bf4d0dd414d982d80016e9d87381d46

Observation 7e7f04d7-7d69-4473-8317-bd8a6fad7826 · outbound

This paper cites The exploit is based on the way 71 ,→ HTTP/2 server and client implementations handle certain fields in the frames.

Best-of-N Jailbreaking The exploit is based on the way 71 ,→ HTTP/2 server and client implementations handle certain fields in the frames

Reference 49

Resolution
verified fuzzy
raw_fallback, observed 2026-08-11T22:21:47.566593Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

source=pdf_text observed=2026-08-11T22:21:47.289085Z digest=sha256:c0eeecdc57056a07a7b1613baa0d358027d383f623e6fac5cad6cbade9768015

Observation bbb4005e-b0bf-4cb1-b8d9-e9f5096ce278 · outbound

This paper cites an unresolved cited work.

Best-of-N Jailbreaking Unresolved cited work

Reference 50

Resolution
unresolved
raw_fallback, observed 2026-08-11T22:21:47.546114Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

source=pdf_text observed=2026-08-11T22:21:47.294979Z digest=sha256:47f4fe1c8ff583acfab57a6549d7152b36573f6d770dbb7852596e775ecd5637

Observation 21d23564-df0c-4710-9385-ce17b3301af6 · outbound

This paper cites Then, map the payload type and payload ,→ to mimic legitimate API invocations.

Best-of-N Jailbreaking Then, map the payload type and payload ,→ to mimic legitimate API invocations

Reference 51

Resolution
verified fuzzy
raw_fallback, observed 2026-08-11T22:21:47.522969Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

source=pdf_text observed=2026-08-11T22:21:47.300380Z digest=sha256:0409fff4a53e4703f670bb62fe72038bbdcf06f1b1b30c2ad26c84b61b7682f9

Observation 084d9e94-b011-4b46-acfe-e5f22b3eb84e · outbound

This paper cites Send the crafted data through the 'ping' and 'pong' frames.

Best-of-N Jailbreaking Send the crafted data through the 'ping' and 'pong' frames

Reference 52

Resolution
verified fuzzy
raw_fallback, observed 2026-08-11T22:21:47.502254Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

source=pdf_text observed=2026-08-11T22:21:47.305491Z digest=sha256:1611156c4a8e42e82e8bfa6bf59be97c530babd7a9aa464dc1252e29ceeda784

Observation b14793b3-e213-4d2d-b4c9-c49cfdf5c94d · outbound

This paper cites an unresolved cited work.

Best-of-N Jailbreaking Unresolved cited work

Reference 53

Resolution
unresolved
raw_fallback, observed 2026-08-11T22:21:47.472594Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

source=pdf_text observed=2026-08-11T22:21:47.312118Z digest=sha256:335a0356bd9d7db14b78411ee4e66728dbc0a5aaeb8ea1d757bae69e1cc45df5

Observation e8dee11a-9351-4413-a432-fe2cebda6b24 · outbound

This paper cites MUSAN: A Music, Speech, and Noise Corpus.

Best-of-N Jailbreaking MUSAN: A Music, Speech, and Noise Corpus

Reference 2015

Resolution
unresolved
no resolver link, observed 2026-08-11T22:21:46.959168Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-11T22:21:46.959168Z digest=sha256:c3e3e1722c20155cb1a7e4fef2176452401415fe14d2e59ea263bf95beaa2c61

Observation ae668579-2895-4811-9323-dc290bbde3cf · outbound

This paper cites an unresolved cited work.

Best-of-N Jailbreaking Unresolved cited work

Reference 2023

Resolution
unresolved
raw_fallback, observed 2026-08-11T22:21:48.374848Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

source=pdf_text observed=2026-08-11T22:21:46.932271Z digest=sha256:5c4f7e7dd729ca4e936e1791482734dc1e9255e4673af053f872e4961c853bc3

Observation 2f64c4e1-828a-4706-9b42-47ed2dace3a8 · outbound

This paper cites Evaluating Frontier Models for Dangerous Capabilities.

Best-of-N Jailbreaking Evaluating Frontier Models for Dangerous Capabilities

Reference 2024

Resolution
unresolved
no resolver link, observed 2026-08-11T22:21:46.938158Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-11T22:21:46.938158Z digest=sha256:6c4877ca405bf1ce172489d77f61a3656fe0d426e0d0d16773505dff8849a472

Pith citing papers

Observation fcb52eee-25fb-4e6b-b21f-3a993f80a2ac · inbound

LIAR: Leveraging Inference Time Alignment (Best-of-N) to Jailbreak LLMs in Seconds cites this paper.

LIAR: Leveraging Inference Time Alignment (Best-of-N) to Jailbreak LLMs in Seconds Best-of-N Jailbreaking

Reference 34

Resolution
unresolved
no resolver link, observed 2026-08-11T20:53:37.319782Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-11T20:53:37.319782Z digest=sha256:8dbec1a1aca64a94acb98a7e429b8974c629efc4ab47e5f1892da4b4b6afeb31

Observation 5fd617de-5cc3-46b7-96e4-2e119cf37aee · inbound

InfAlign: Inference-aware language model alignment cites this paper.

InfAlign: Inference-aware language model alignment Best-of-N Jailbreaking

Reference 28

Resolution
unresolved
no resolver link, observed 2026-08-10T23:57:54.292556Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-10T23:57:54.292556Z digest=sha256:c55e3d92ef5c884b98b996380b54c37f65c97fe8daa833a1bd2398df0d6f0c43

Observation db77dbce-d16b-4bd4-8f48-30b32cc54638 · inbound

Defense Against the Dark Prompts: Mitigating Best-of-N Jailbreaking with Prompt Evaluation cites this paper.

Defense Against the Dark Prompts: Mitigating Best-of-N Jailbreaking with Prompt Evaluation Best-of-N Jailbreaking

Reference 16

Resolution
unresolved
no resolver link, observed 2026-08-09T18:31:14.135569Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-09T18:31:14.135569Z digest=sha256:570ca729574446f994d6d0bac0417e2134a25aa0735586c1ed0b1b6900fa626d

Observation ba4f1ca4-fe9b-4438-9a3b-60cfda8044a0 · inbound

"I am bad": Interpreting Stealthy, Universal and Robust Audio Jailbreaks in Audio-Language Models cites this paper.

"I am bad": Interpreting Stealthy, Universal and Robust Audio Jailbreaks in Audio-Language Models Best-of-N Jailbreaking

Reference 21

Resolution
unresolved
no resolver link, observed 2026-08-09T18:05:52.279543Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-09T18:05:52.279543Z digest=sha256:e7edd445ee3a91805bb88aeb1b020b65e7aefae63c9d279f4312c11f1aece430

Observation 32782631-2877-4212-b1b2-1d08fc28f142 · inbound

Adversarial Reasoning at Jailbreaking Time cites this paper.

Adversarial Reasoning at Jailbreaking Time Best-of-N Jailbreaking

Reference 15

Resolution
unresolved
no resolver link, observed 2026-08-09T14:49:08.738191Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-09T14:49:08.738191Z digest=sha256:db185d09cdd2ce372999504c5206af8b4ca537cc4899c2153729ae70157092b6

Observation 6a6eae05-9366-4271-bc4b-ccd27a0ba2ff · inbound

Position: Adversarial ML for LLMs Is Not Making Any Progress cites this paper.

Position: Adversarial ML for LLMs Is Not Making Any Progress Best-of-N Jailbreaking

Reference 2011

Resolution
unresolved
no resolver link, observed 2026-08-09T12:47:21.688354Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-09T12:47:21.688354Z digest=sha256:f11d6720fefe46bf9542cdc81290d35f604e5e31502d73de233f07c8c7d3f84e

Observation 85ec56fe-01e7-40cf-b3fe-6caa0440d7be · inbound

Jailbreaking to Jailbreak cites this paper.

Jailbreaking to Jailbreak Best-of-N Jailbreaking

Reference 18

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.243677Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.243677Z digest=sha256:c4f39ded4881d9a170430244d9320b7c7f9441fb1c20b55bb377067a09bb95fc

Observation 439c5113-cf97-4dc3-9efb-3ed1a5097c5c · inbound

LLM-Safety Evaluations Lack Robustness cites this paper.

LLM-Safety Evaluations Lack Robustness Best-of-N Jailbreaking

Reference 32

Resolution
verified exact
arxiv_id, observed 2026-05-23T01:27:21.325650Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

source=pdf_text observed=2026-05-23T01:26:45.402983Z digest=sha256:810255c3d2ccaa9bf08563aee157d7153641c3d87bb0d5a32697ce31f0036fc6

Observation ef47b710-d902-41ee-b5ef-057caf4bcf08 · inbound

Beyond Semantics: The Unreasonable Effectiveness of Reasonless Intermediate Tokens cites this paper.

Beyond Semantics: The Unreasonable Effectiveness of Reasonless Intermediate Tokens Best-of-N Jailbreaking

Reference 16

Resolution
unresolved
no resolver link, observed 2026-08-15T20:15:17.919409Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-15T20:15:17.919409Z digest=sha256:b72e11a51885bb854801a2cdf1f2d2261d3c65a59ef292b6c3759e3d3987c568

Observation 04786a40-3de7-4e1c-9843-f758d418ff67 · inbound

Phonetic Perturbations Reveal Tokenizer-Rooted Safety Gaps in LLMs cites this paper.

Phonetic Perturbations Reveal Tokenizer-Rooted Safety Gaps in LLMs Best-of-N Jailbreaking

Reference 13

Resolution
verified exact
arxiv_id, observed 2026-05-22T14:41:41.482545Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

source=pdf_text observed=2026-05-22T14:40:58.506345Z digest=sha256:77353e4c84e6c502a1246de5c6e7af9d79249cfbee7752cf3cac33a3aaf9a6b5

Observation 2eb2895a-8b70-4ba9-a4b1-72f283573b16 · inbound

Audio Jailbreak: An Open Comprehensive Benchmark for Jailbreaking Large Audio-Language Models cites this paper.

Audio Jailbreak: An Open Comprehensive Benchmark for Jailbreaking Large Audio-Language Models Best-of-N Jailbreaking

Reference 23

Resolution
unresolved
no resolver link, observed 2026-08-07T15:23:01.792126Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T15:23:01.792126Z digest=sha256:a3fca28871b024d3ac6616ddfcc4ad2af4deb482aa2564a49ebc07da3f12d37c

Observation b82b1bb9-91ea-4b2f-9b36-c9859225bbc6 · inbound

Towards Holistic Evaluation of Large Audio-Language Models: A Comprehensive Survey cites this paper.

Towards Holistic Evaluation of Large Audio-Language Models: A Comprehensive Survey Best-of-N Jailbreaking

Reference 5

Resolution
metadata mismatch
arxiv_id, observed 2026-05-22T13:34:53.247293Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

source=pdf_text observed=2026-05-22T13:32:57.771753Z digest=sha256:e4d776fd1a5236bfd44651bc5879f19f1426d05a036c34006886146d7912d996

Observation 32f2bbe1-000b-499e-944a-72cae53d7fe7 · inbound

An Example Safety Case for Safeguards Against Misuse cites this paper.

An Example Safety Case for Safeguards Against Misuse Best-of-N Jailbreaking

Reference 17

Resolution
unresolved
no resolver link, observed 2026-08-07T14:41:39.930783Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T14:41:39.930783Z digest=sha256:b1222d472844b68a3ed80b91c0ca733c84ebc35213480620e51b50fee41438a4

Observation ca9c6f7a-6ddd-4ef9-9e2c-e833b8540891 · inbound

Jailbreak-R1: Exploring the Jailbreak Capabilities of LLMs via Reinforcement Learning cites this paper.

Jailbreak-R1: Exploring the Jailbreak Capabilities of LLMs via Reinforcement Learning Best-of-N Jailbreaking

Reference 12

Resolution
unresolved
no resolver link, observed 2026-08-07T12:01:08.712974Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-07T12:01:08.712974Z digest=sha256:a011ef6aac2fb3b61758b5ae56829e5e20a69dcabc990c5ea773dcb1f9b5730c

Observation 97d18df2-a1bc-4810-bbb2-5b67da0a24f9 · inbound

A Red Teaming Roadmap Towards System-Level Safety cites this paper.

A Red Teaming Roadmap Towards System-Level Safety Best-of-N Jailbreaking

Reference 35

Resolution
unresolved
no resolver link, observed 2026-08-07T12:11:19.700239Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-07T12:11:19.700239Z digest=sha256:926c1e02c5df90a2f24b466dc0b3a721ab1353378f3f347d3735c4d51814b677

Observation 2cb4d93b-ad9b-4a88-a555-149af2568ed9 · inbound

JavelinGuard: Low-Cost Transformer Architectures for LLM Security cites this paper.

JavelinGuard: Low-Cost Transformer Architectures for LLM Security Best-of-N Jailbreaking

Reference 24

Resolution
unresolved
no resolver link, observed 2026-08-07T05:41:25.408036Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T05:41:25.408036Z digest=sha256:9768e6364a5744a14369b6cb252dc0de1447ccf84129b83bde091b261b19681a

Observation f0dc3f90-d83f-4cc1-860c-a87f36c1f26d · inbound

Investigating Vulnerabilities and Defenses Against Audio-Visual Attacks: A Comprehensive Survey Emphasizing Multimodal Models cites this paper.

Investigating Vulnerabilities and Defenses Against Audio-Visual Attacks: A Comprehensive Survey Emphasizing Multimodal Models Best-of-N Jailbreaking

Reference 42

Resolution
unresolved
no resolver link, observed 2026-08-07T04:08:44.141461Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T04:08:44.141461Z digest=sha256:e6ba52d59f2c00b9335c1b51ba3df1de92510c15087477669d5942db5f8b525e

Observation 09d6e90e-bba0-4890-9cb1-187c5f4cdcb6 · inbound

Min-p, Max Exaggeration: A Critical Analysis of Min-p Sampling in Language Models cites this paper.

Min-p, Max Exaggeration: A Critical Analysis of Min-p Sampling in Language Models Best-of-N Jailbreaking

Reference 14

Resolution
unresolved
no resolver link, observed 2026-08-07T00:31:55.835946Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:31:55.835946Z digest=sha256:37047d56b9a067338665785bfb30e9e0890a972961f51825ca1be572a26a9152

Observation 3a6207c8-1ab4-4775-818f-960bb334f4d5 · inbound

Toward Principled LLM Safety Testing: Solving the Jailbreak Oracle Problem cites this paper.

Toward Principled LLM Safety Testing: Solving the Jailbreak Oracle Problem Best-of-N Jailbreaking

Reference 39

Resolution
verified exact
arxiv_id, observed 2026-05-19T08:42:12.775051Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

source=pdf_text observed=2026-05-19T08:40:56.186349Z digest=sha256:8da55dc338be62e995a265064acdc07d511fbd83581af8dc6f612466e5df8b03

Observation 71faf483-00ac-4258-909e-e4c8a15e3999 · inbound

Best-of-N through the Smoothing Lens: KL Divergence and Regret Analysis cites this paper.

Best-of-N through the Smoothing Lens: KL Divergence and Regret Analysis Best-of-N Jailbreaking

Reference 27

Resolution
unresolved
no resolver link, observed 2026-08-06T19:28:55.320762Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-06T19:28:55.320762Z digest=sha256:2e562dd3f762e9faeace5dd81228986a41dfe4ffd31a38441594adcb5ccd78f8

Observation 0c3eca0e-339e-4065-a39d-f77dd9b5837d · inbound

Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition cites this paper.

Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition Best-of-N Jailbreaking

Reference 20

Resolution
unresolved
no resolver link, observed 2026-08-15T17:47:19.129525Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-15T17:47:19.129525Z digest=sha256:fc9bdab9e112729529ff42e4f2c06f034a3b2b497c9bd117793d62daf885b6b8

Observation 2b6281d1-9e5b-4266-aeac-f6ee9d57ec27 · inbound

SATORI: Static Test Oracle Generation for REST APIs cites this paper.

SATORI: Static Test Oracle Generation for REST APIs Best-of-N Jailbreaking

Reference 70

Resolution
unresolved
no resolver link, observed 2026-08-05T17:26:48.687153Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-05T17:26:48.687153Z digest=sha256:a8a3b2c6a2f3fc0bc8a75b0a89377f21d35f8e6f74bceb6218295a9c791dbe01

Observation e7405181-1c1b-4e2e-9c0a-0ca84f51fc96 · inbound

Beyond Linear Probes: Dynamic Safety Monitoring for Language Models cites this paper.

Beyond Linear Probes: Dynamic Safety Monitoring for Language Models Best-of-N Jailbreaking

Reference 33

Resolution
verified exact
arxiv_id, observed 2026-05-18T12:42:36.859445Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

source=arxiv_source observed=2026-05-18T12:41:48.620040Z digest=sha256:68d0efbc3d9206396f727cebbfda0cdd8fce361fcf06c4eda55a61d1485a8a1e

Observation eb98457e-6fda-4a41-9c3e-2350d4eb2a4e · inbound

MARS: Margin and Semantic-Aware Data Augmentation for Reward Modeling cites this paper.

MARS: Margin and Semantic-Aware Data Augmentation for Reward Modeling Best-of-N Jailbreaking

Reference 20

Resolution
unresolved
no resolver link, observed 2026-08-02T22:14:32.548751Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-02T22:14:32.548751Z digest=sha256:afaf770eedad44b43b928b9142a5ac9ab981514283b33e60575220c6e82ed12f

Observation 748a4f51-d459-423a-a7b7-9197d1330821 · inbound

GRM: Utility-Aware Jailbreak Attacks on Audio LLMs via Gradient-Ratio Masking cites this paper.

GRM: Utility-Aware Jailbreak Attacks on Audio LLMs via Gradient-Ratio Masking Best-of-N Jailbreaking

Reference 15

Resolution
malformed identifier
arxiv_id, observed 2026-05-11T08:21:01.222981Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

source=pdf_text observed=2026-05-10T16:40:59.993298Z digest=sha256:4b05f146bde1d14267338f0f6087af2fdda3582ae9b2b5fcce6ea4e6cb332663

Observation d7c40210-65ab-4ab9-9eb3-9c7c38aafe04 · inbound

Latent Instruction Representation Alignment: defending against jailbreaks, backdoors and undesired knowledge in LLMs cites this paper.

Latent Instruction Representation Alignment: defending against jailbreaks, backdoors and undesired knowledge in LLMs Best-of-N Jailbreaking

Reference 21

Resolution
verified exact
arxiv_id, observed 2026-05-11T08:21:00.039744Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

source=arxiv_source observed=2026-05-10T16:41:52.440793Z digest=sha256:99484302dbc57214e049557b05cd6879c024eea05b82720db1c7370e72561997

Observation 4201f267-ff94-43bb-bb96-0ba7afb39d11 · inbound

A Synonymous Variational Perspective on the Rate-Distortion-Perception Tradeoff cites this paper.

A Synonymous Variational Perspective on the Rate-Distortion-Perception Tradeoff Best-of-N Jailbreaking

Reference 15

Resolution
unresolved
no resolver link, observed 2026-07-12T20:09:57.922788Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-12T20:09:57.922788Z digest=sha256:7d13a97d0663a804b5527c4f878bdb3f9a28907493e4dbc6c94424cfa64b00cc

Observation 4bc44e3b-4f87-42ed-a879-9bd0bc9511d8 · inbound

Hijacking Large Audio-Language Models via Context-Agnostic and Imperceptible Auditory Prompt Injection cites this paper.

Hijacking Large Audio-Language Models via Context-Agnostic and Imperceptible Auditory Prompt Injection Best-of-N Jailbreaking

Reference 15

Resolution
verified exact
arxiv_id, observed 2026-05-10T11:35:18.894364Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

source=pdf_text observed=2026-05-10T11:32:10.126062Z digest=sha256:eb196c528ab2e0f85a20a5a12cd5cfe98708ebc7d41a24c45fa556d77ce4d222

Observation ace32fe4-dfee-431c-ac2f-40434fb6024f · inbound

Benign Fine-Tuning Breaks Safety Alignment in Audio LLMs cites this paper.

Benign Fine-Tuning Breaks Safety Alignment in Audio LLMs Best-of-N Jailbreaking

Reference 13

Resolution
metadata mismatch
arxiv_id, observed 2026-05-10T08:02:24.897246Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

source=pdf_text observed=2026-05-10T08:01:25.938248Z digest=sha256:a34ff6545013ef3ba3f5d25f671ee15a01beadb454ac4d26c3df9ec607ab715f

Observation 97849cd9-806d-4283-a5d7-26bb9ceeb6c8 · inbound

Estimating Tail Risks in Language Model Output Distributions cites this paper.

Estimating Tail Risks in Language Model Output Distributions Best-of-N Jailbreaking

Reference 21

Resolution
verified exact
arxiv_id, observed 2026-05-11T19:16:08.195272Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

source=arxiv_source observed=2026-05-08T12:26:41.797166Z digest=sha256:d8a276a0c9623e90073c19668e73e76cf869a9af23c7bd578accc9f5ccc6aad4

Observation 51287724-196a-4305-a05b-228e572319ed · inbound

Perturbation Probing: A Two-Pass-per-Prompt Diagnostic for FFN Behavioral Circuits in Aligned LLMs cites this paper.

Perturbation Probing: A Two-Pass-per-Prompt Diagnostic for FFN Behavioral Circuits in Aligned LLMs Best-of-N Jailbreaking

Reference 12

Resolution
verified exact
arxiv_id, observed 2026-05-12T10:01:27.514254Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

source=pdf_text observed=2026-05-07T08:34:14.310656Z digest=sha256:933c6bff391f2c97fbdca65fbcbe6e9081fee05077a07f0bcfc37b6e2f4322c5

Observation 5aaa337b-cf50-42b5-ae66-09c6cf565524 · inbound

MultiBreak: A Scalable and Diverse Multi-turn Jailbreak Benchmark for Evaluating LLM Safety cites this paper.

MultiBreak: A Scalable and Diverse Multi-turn Jailbreak Benchmark for Evaluating LLM Safety Best-of-N Jailbreaking

Reference 29

Resolution
metadata mismatch
arxiv_id, observed 2026-05-11T09:31:01.204907Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

source=arxiv_source observed=2026-05-10T16:00:32.413225Z digest=sha256:1a727fc16863b0d7ecec384bc0f704d259255fe495e3fda705ed95b823e1cd22

Observation f0ccd0e6-ea9b-4fb5-b623-3bdbb7df0bd0 · inbound

Neuron-Anchored Rule Extraction for Large Language Models via Contrastive Hierarchical Ablation cites this paper.

Neuron-Anchored Rule Extraction for Large Language Models via Contrastive Hierarchical Ablation Best-of-N Jailbreaking

Reference 23

Resolution
verified exact
arxiv_id, observed 2026-05-09T06:05:36.111722Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

source=pdf_text observed=2026-05-08T18:55:24.214794Z digest=sha256:84cc47e9732d25a15a74597d14e4517b4c29e8e00f5de3a60439a9b0da7e553f

Observation ac000546-95df-48b8-bf80-54421d502cb7 · inbound

Neuron-Anchored Rule Extraction for Large Language Models via Contrastive Hierarchical Ablation cites this paper.

Neuron-Anchored Rule Extraction for Large Language Models via Contrastive Hierarchical Ablation Best-of-N Jailbreaking

Reference 23

Resolution
verified exact
arxiv_id, observed 2026-07-01T00:15:09.542059Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

source=pdf_text observed=2026-07-01T00:06:52.820343Z digest=sha256:c784ee9180400b723c5d30bed4003d2a49bfada9785298357aef434460d939a3

Observation 75ed7f92-0eb0-467c-b7cb-86c914587a7c · inbound

Exposing LLM Safety Gaps Through Mathematical Encoding:New Attacks and Systematic Analysis cites this paper.

Exposing LLM Safety Gaps Through Mathematical Encoding:New Attacks and Systematic Analysis Best-of-N Jailbreaking

Reference 10

Resolution
verified exact
arxiv_id, observed 2026-05-12T10:51:31.128666Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

source=pdf_text observed=2026-05-07T15:48:54.277233Z digest=sha256:3e79d7085b87881d95ae0d8239e3d967ebd10d0a96391a395053a0c5e42b4bd1

Observation b5d508a6-1c86-44ba-a524-64871177957b · inbound

SoK: Robustness in Large Language Models against Jailbreak Attacks cites this paper.

SoK: Robustness in Large Language Models against Jailbreak Attacks Best-of-N Jailbreaking

Reference 28

Resolution
verified exact
arxiv_id, observed 2026-05-11T18:01:08.873331Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

source=pdf_text observed=2026-05-08T16:42:41.137808Z digest=sha256:b531591d68b14c6b89014989a6dfbb29c096abd398341c2dbe47e4dafd432e48

Observation b43a254e-e534-4573-bf85-065be58d59b5 · inbound

Quantifying LLM Safety Degradation Under Repeated Attacks Using Survival Analysis cites this paper.

Quantifying LLM Safety Degradation Under Repeated Attacks Using Survival Analysis Best-of-N Jailbreaking

Reference 6

Resolution
verified exact
arxiv_id, observed 2026-05-14T19:12:51.266267Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

source=arxiv_source observed=2026-05-14T19:10:29.055784Z digest=sha256:542cf80ac10b6de21a89e46cebaef8b522185f5ea6fa0993dc7b72380c4fb13b

Observation 0566c502-91e6-4f09-a7d2-62fdb3339418 · inbound

The Great Pretender: A Stochasticity Problem in LLM Jailbreak cites this paper.

The Great Pretender: A Stochasticity Problem in LLM Jailbreak Best-of-N Jailbreaking

Reference 1

Resolution
verified exact
arxiv_id, observed 2026-05-15T02:13:31.268689Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

source=pdf_text observed=2026-05-15T02:09:42.090550Z digest=sha256:5231201be696e3ce5f6e9463b11742a5b3694a7e2c349f9130789ac4a2d5a330

Observation a8e2ceb8-9c24-4451-b9e4-2df91ca83f8a · inbound

Compositional Jailbreaking: An Empirical Analysis of Mutator Chain Interactions in Aligned LLMs cites this paper.

Compositional Jailbreaking: An Empirical Analysis of Mutator Chain Interactions in Aligned LLMs Best-of-N Jailbreaking

Reference 16

Resolution
verified exact
arxiv_id, observed 2026-05-20T18:33:38.092245Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

source=pdf_text observed=2026-05-20T18:31:05.740757Z digest=sha256:9a05f87472e83d742bbdba31fafa7321b250a27c1673161c0200d516362df452

Observation 418134a3-e0f9-4bb2-a27b-42b369799dda · inbound

Babel: Jailbreaking Safety Attention via Obfuscation Distribution Optimized Sampling cites this paper.

Babel: Jailbreaking Safety Attention via Obfuscation Distribution Optimized Sampling Best-of-N Jailbreaking

Reference 4

Resolution
verified exact
arxiv_id, observed 2026-05-20T10:08:11.947366Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

source=pdf_text observed=2026-05-20T10:08:07.648295Z digest=sha256:ed083fbf69ff5f7141495d454382484496259dc8a5a854ea9eb4eae300a7bfa7

Observation 22e9386b-000a-4dc3-929e-7761e40ff97c · inbound

Jailbreak susceptibility prediction and mitigation via the behavioral geometry of models cites this paper.

Jailbreak susceptibility prediction and mitigation via the behavioral geometry of models Best-of-N Jailbreaking

Reference 17

Resolution
verified exact
arxiv_id, observed 2026-06-29T17:53:47.735743Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

source=pdf_text observed=2026-06-29T17:43:47.849960Z digest=sha256:247f715e457cef991c3cc5b9919103032fcae92115c2a6acce11f96aa7fe9a79

Observation 61143039-f524-45b3-9194-26db9b2a0d36 · inbound

Black-box, Adaptive, Efficient, Transferable, Harmful, Applicable... Attacks Are All You Need to Break LLMs cites this paper.

Black-box, Adaptive, Efficient, Transferable, Harmful, Applicable... Attacks Are All You Need to Break LLMs Best-of-N Jailbreaking

Reference 5

Resolution
verified exact
arxiv_id, observed 2026-07-02T04:16:34.766731Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

source=pdf_text observed=2026-06-28T09:21:57.373862Z digest=sha256:806ea0f50c8d095aaa1ac21f6e950cc6616113ea4febe2c1712e6aead01ee647

Observation c793643a-f44e-44b3-81ca-4f04d32df8b2 · inbound

Item Response Scaling Laws: A Measurement Theory Approach for Efficient and Generalizable Neural Scaling Estimation cites this paper.

Item Response Scaling Laws: A Measurement Theory Approach for Efficient and Generalizable Neural Scaling Estimation Best-of-N Jailbreaking

Reference 15

Resolution
metadata mismatch
arxiv_id, observed 2026-06-28T22:52:45.594721Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

source=pdf_text observed=2026-06-28T22:48:20.193699Z digest=sha256:1da1e2e4051040e9365d7946cc9b6c3f4719d38f9a2937d6b8433e0762fdc6cd

Observation 593d994f-d8ad-46f9-91e7-665bcb1b3b3b · inbound

Do Thinking Tokens Help with Safety? cites this paper.

Do Thinking Tokens Help with Safety? Best-of-N Jailbreaking

Reference 74

Resolution
metadata mismatch
arxiv_id, observed 2026-07-04T17:30:00.623688Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

source=arxiv_source observed=2026-06-25T23:37:49.412578Z digest=sha256:8c87be2fa9c622041c36ac12e704594a1586a881974650c141770573c8b42dbe

Observation 519ed499-c4de-4d3c-82bd-b10b01ae74aa · inbound

Breaking Safety at the Token Boundary: How BPE Tokenization Creates Exploitable Gaps in LLM Alignment cites this paper.

Breaking Safety at the Token Boundary: How BPE Tokenization Creates Exploitable Gaps in LLM Alignment Best-of-N Jailbreaking

Reference 1

Resolution
verified exact
arxiv_id, observed 2026-07-04T01:19:20.111530Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

source=arxiv_source observed=2026-07-04T01:17:44.209685Z digest=sha256:b04c68c8151815b02e06a4bca3f53a62cdfd96f263b08446e839dc8fc31d390b

Observation e3a773bf-f1be-473d-9c98-71834a7ad365 · inbound

DecompRL: Solving Harder Problems by Learning Modular Code Generation cites this paper.

DecompRL: Solving Harder Problems by Learning Modular Code Generation Best-of-N Jailbreaking

Reference 27

Resolution
verified exact
arxiv_id, observed 2026-07-03T16:38:39.781863Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

source=arxiv_source observed=2026-07-03T16:30:34.793328Z digest=sha256:32dd5a9a8878f806f122e36af4989846b3e11efedefba74c456c4ad9a25e04f0

Observation 724e27b8-39ce-4bb2-bf9b-d28682c2b6e8 · inbound

Prosody-driven Jailbreaks in Audio LLMs: A Controlled Study and Mechanistic Analysis cites this paper.

Prosody-driven Jailbreaks in Audio LLMs: A Controlled Study and Mechanistic Analysis Best-of-N Jailbreaking

Reference 13

Resolution
unresolved
no resolver link, observed 2026-08-15T15:28:56.724552Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-15T15:28:56.724552Z digest=sha256:e274f99e16455b31e187e5f8c8c6397dae99248c1b03596500d06f3a3504a463

Observation fe14dc20-04de-4e94-9e16-600890e0727c · inbound

Single Canonical Prompts Underestimate LLM Safety's Surface-Form Sensitivity cites this paper.

Single Canonical Prompts Underestimate LLM Safety's Surface-Form Sensitivity Best-of-N Jailbreaking

Reference 5

Resolution
unresolved
no resolver link, observed 2026-08-05T00:48:48.102460Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-05T00:48:48.102460Z digest=sha256:ac1f814a8a097a1d66e92d34b1f89ea3afb412fd9ad21fc3be70f59b2bca0f34

Observation 043c4b59-721a-44df-a834-1fed402e9e18 · inbound

Measuring the Wrong Thing: Internal Harmfulness Scores Anti-Rank Successful Jailbreaks cites this paper.

Measuring the Wrong Thing: Internal Harmfulness Scores Anti-Rank Successful Jailbreaks Best-of-N Jailbreaking

Reference 11

Resolution
unresolved
no resolver link, observed 2026-08-11T13:57:41.219248Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-11T13:57:41.219248Z digest=sha256:f93cfba14c89799e389ae975d68c275410969fab2faff1fc0ef5869211da6d21