Description

Ran academic-refchecker against doc/references.bib and audited every arXiv-linked entry against arXiv metadata to catch citations where the cited title, authors, or year did not match the actual paper. The original pass flagged 15 errors / 3 hallucinations; a follow-up manual audit caught three more issues that automated checking missed.

Fixes to doc/references.bib

Errors corrected (wrong title/authors/IDs, malformed fields, encoding artifacts):

• promptfoo2025ccp: actual blog post title is "1,156 Questions Censored by DeepSeek" (the previous title was paraphrased from the post body); set author to byline (Ian Webster), added publication month, repaired prior mojibake.
• bullwinkel2024airtlessons -> bullwinkel2025airtlessons: arXiv submission date is 2025-01-13; the year field was already 2025 but the citekey lagged.
• ji2023beavertails: added missing co-author Boyuan Chen. The arXiv metadata for 2307.04657 lists "Chi Zhang" twice in his slot; the NeurIPS 2023 final author list and the paper's email block confirm Chen.
• scheuerman2025transphobia: moved ACM TOCHI venue into journal, added doi.
• aqrawi2024singleturncrescendo, bethany2024mathprompt, andriushchenko2024tense, mckee2024transparency, and several others: title/author/year/url corrections (see commit history for the full per-entry list).

Citekey renames (and propagation to all callers):

• chu2023harmfulqa -> bhardwaj2023harmfulqa (the paper PyRIT actually loads is Bhardwaj and Poria, arXiv:2308.09662 - the previous entry pointed to an unrelated paper despite the same dataset name).
• li2024flipattack -> liu2024flipattack (first author is Yue Liu, not Li).
• yu2025comicjailbreak -> tan2026comicjailbreak (first author is Yixuan Tan; arXiv ID/year corrected).

Caller updates for the citekey renames

• doc/bibliography.md
• doc/code/datasets/1_loading_datasets.{py,ipynb}
• doc/code/executor/attack/flip_attack.{py,ipynb}
• doc/code/targets/0_prompt_targets.md
• pyrit/datasets/seed_datasets/remote/harmful_qa_dataset.py
• pyrit/datasets/seed_datasets/remote/comic_jailbreak_dataset.py
• pyrit/executor/attack/single_turn/flip_attack.py

Verification

Re-ran academic-refchecker after the first commit: 15 -> 4 errors, 3 -> 1 hallucinated. The remaining flags are either tool false-positives (e.g. pybtex/refchecker drops the single-name first author of aakanksha2024multilingual regardless of brace or comma form) or unverifiable industry blog posts. The follow-up manual audit then confirmed every arXiv URL in the bib now points to the correctly-cited paper.

Tests and Documentation

Documentation-only change. All pre-commit hooks pass (ruff, ty, link-check, nbstripout, documentation-structure validation). The citekey renames were propagated to every .py, .ipynb, and .md caller in the repo; grep for each old key returns no results.