text: [42] Y. Liu, G. Deng, Z. Xu, Y. Li, Y. Zheng, Y. Zhang, L. Zhao, T. Zhang, K. Wang, and Y. Liu, “Jailbreaking ChatGPT 
  via prompt engineering: An empirical study,” arXiv preprint arXiv:2305.13860, 2023. 
  
  [43] D. Lowd and C. Meek, “Adversarial learning,” in ACM International Conference on Knowledge Discovery in Data 
  Mining (SIGKDD), 2005. 
  
  [44] S. Merity, C. Xiong, J. Bradbury, and R. Socher, “Pointer sentinel mixture models,” in International Conference on 
  Learning Representations (ICLR), 2016. 
  
  [45] S. Narayanan Hari and M. Thomson, “Tryage: Real-time, intelligent routing of user prompts to large language 
  models,” arXiv e-prints, 2023. 
  
  [46] M. Nasr, N. Carlini, J. Hayase, M. Jagielski, A. F. Cooper, D. Ippolito, C. A. Choquette-Choo, E. Wallace, 
  F. Tram`er, and K. Lee, “Scalable extraction of training data from (production) language models,” arXiv preprint 
  arXiv:2311.17035, 2023. 