{"total":15,"rows":[{"id":"2408.01420","title":"Mission Impossible: A Statistical Perspective on Jailbreaking LLMs","created":"2024-08-02","cited_by_count":24,"area":"alignment"},{"id":"2506.10597","title":"SoK: Evaluating Jailbreak Guardrails for Large Language Models","created":"2025-06-12","cited_by_count":21,"area":"alignment"},{"id":"2502.09990","title":"X-Boundary: Establishing Exact Safety Boundary to Shield LLMs from Multi-Turn Jailbreaks without Compromising Usability","created":"2025-02-14","cited_by_count":20,"area":"alignment"},{"id":"2510.02833","title":"Attack via Overfitting: 10-shot Benign Fine-tuning to Jailbreak LLMs","created":"2025-10-03","cited_by_count":10,"area":"alignment"},{"id":"2406.01514","title":"Decoupled Alignment for Robust Plug-and-Play Adaptation","created":"2024-06-03","cited_by_count":9,"area":"alignment"},{"id":"2509.06982","title":"CARE: Decoding Time Safety Alignment via Rollback and Introspection Intervention","created":"2025-09-01","cited_by_count":6,"area":"alignment"},{"id":"2412.07192","title":"PrisonBreak: Jailbreaking Large Language Models with at Most Twenty-Five Targeted Bit-flips","created":"2024-12-10","cited_by_count":5,"area":"alignment"},{"id":"2604.16242","title":"Detecting and Suppressing Reward Hacking with Gradient Fingerprints","created":"2026-04-17","cited_by_count":5,"area":"alignment"},{"id":"2602.16977","title":"Fail-Closed Alignment for Large Language Models","created":"2026-02-19","cited_by_count":2,"area":"alignment"},{"id":"2604.26167","title":"Test-Time Safety Alignment","created":"2026-04-28","cited_by_count":2,"area":"alignment"},{"id":"2606.28153","title":"Robust Harmful Features Under Jailbreak Attacks: Mechanistic Evidence from Attention Head Specialization in Large Language Models","created":"2026-06-26","cited_by_count":1,"area":"alignment"},{"id":"2604.08577","title":"Distributionally Robust Token Optimization in RLHF","created":"2026-03-27","cited_by_count":0,"area":"alignment"},{"id":"2604.17210","title":"Guardrails in Logit Space: Safety Token Regularization for LLM Alignment","created":"2026-04-19","cited_by_count":0,"area":"alignment"},{"id":"2609.05850","title":"SAFEGuard: Detect Optimization-Based Jailbreak Attacks Through Harmful Semantic Analysis and Fluency Measurement","created":"2026-09-05","cited_by_count":0,"area":"alignment"},{"id":"2609.36849","title":"Does the Unsafe Gradient Survive a Conversation? On the Fragility of Gradient-Based Jailbreak Detection in Multi-Turn Dialogue","created":"2026-09-29","cited_by_count":0,"area":"alignment"}],"next_cursor":null}