{"as_of":"2026-08-09T04:01:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:e67865edd0b0a1609ff6487812b3b43d2c5aebbb83ae5130e7d26d2b6d69302f","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":8,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":8,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":8,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":8,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-09T00:50:00.519996Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-01T10:15:44.404943Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2011.10369","last_updated":"2021-11-03T18:21:00Z","snapshot_observed_at":"2026-08-08T00:46:05.240737Z","submitted_at":"2020-11-20T12:17:21Z","title":"ONION: A Simple and Effective Defense Against Textual Backdoor Attacks","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2011.10369","snapshot_observed_at":"2026-08-09T00:50:00.519996Z","title":"Onion: A simple and effective defense against textual backdoor attacks,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2502.05224","last_updated":"2025-02-06T04:43:05Z","snapshot_observed_at":"2026-08-09T00:45:11.605248Z","submitted_at":"2025-02-06T04:43:05Z","title":"A Survey on Backdoor Threats in Large Language Models (LLMs): Attacks, Defenses, and Evaluations","version":1},"reference_index":121,"source":"pdf_text","source_observed_at":"2026-08-09T00:50:00.519996Z"},"links":{"cited_paper":"/paper/2011.10369","citing_paper":"/paper/2502.05224"},"observation_digest":"sha256:9a6a687d38c62f5307093c81081fef20fabf6da6a967f77703b8ec01fc56cf80","observation_id":"abed6cae-3374-4af0-af39-36eaeb71edb4","resolution":{"observed_at":"2026-08-09T00:50:00.519996Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2011.10369","last_updated":"2021-11-03T18:21:00Z","snapshot_observed_at":"2026-08-08T00:46:05.240737Z","submitted_at":"2020-11-20T12:17:21Z","title":"ONION: A Simple and Effective Defense Against Textual Backdoor Attacks","version":3},"cited_work":{"arxiv_id":"2011.10369","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2011.10369","snapshot_observed_at":"2026-07-01T10:15:44.404943Z","title":"Onion: A simple and effective defense against textual backdoor attacks","venue":null,"work_id":"9975bccc-5919-4ebc-b1ab-be64db743200","year":2011},"citing_paper":{"arxiv_id":"2504.00446","last_updated":"2026-04-05T08:03:35Z","snapshot_observed_at":"2026-08-08T22:42:49.839017Z","submitted_at":"2025-04-01T05:58:14Z","title":"Exposing the Ghost in the Transformer: Abnormal Detection for Large Language Models via Hidden State Forensics","version":2},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-05-22T22:27:18.533162Z"},"links":{"cited_paper":"/paper/2011.10369","citing_paper":"/paper/2504.00446"},"observation_digest":"sha256:cec6f905f067b86e31da4d08a2851deb046517bcd848d53930661bcd6f70048c","observation_id":"c5797828-fa90-4d6e-a5db-14d43dae9fc0","resolution":{"observed_at":"2026-05-22T22:32:12.949362Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2011.10369","last_updated":"2021-11-03T18:21:00Z","snapshot_observed_at":"2026-08-08T00:46:05.240737Z","submitted_at":"2020-11-20T12:17:21Z","title":"ONION: A Simple and Effective Defense Against Textual Backdoor Attacks","version":3},"cited_work":{"arxiv_id":"2011.10369","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2011.10369","snapshot_observed_at":"2026-07-01T10:15:44.404943Z","title":"Onion: A simple and effective defense against textual backdoor attacks","venue":null,"work_id":"9975bccc-5919-4ebc-b1ab-be64db743200","year":2011},"citing_paper":{"arxiv_id":"2504.05605","last_updated":"2025-04-08T01:36:16Z","snapshot_observed_at":"2026-08-02T05:27:21.658804Z","submitted_at":"2025-04-08T01:36:16Z","title":"ShadowCoT: Cognitive Hijacking for Stealthy Reasoning Backdoors in LLMs","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-05-22T21:11:46.405944Z"},"links":{"cited_paper":"/paper/2011.10369","citing_paper":"/paper/2504.05605"},"observation_digest":"sha256:8563cf7f30d845e2e79fe4e15e5fc9832a311b6d6fe30df4fca0e6d2acd4018b","observation_id":"bfd9940a-1376-4c7e-a5ab-f21bb72c4f9d","resolution":{"observed_at":"2026-05-22T21:12:08.350228Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2011.10369","last_updated":"2021-11-03T18:21:00Z","snapshot_observed_at":"2026-08-08T00:46:05.240737Z","submitted_at":"2020-11-20T12:17:21Z","title":"ONION: A Simple and Effective Defense Against Textual Backdoor Attacks","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2011.10369","snapshot_observed_at":"2026-08-07T05:20:51.473274Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2506.08336","last_updated":"2025-06-11T01:39:01Z","snapshot_observed_at":"2026-08-07T22:32:21.983693Z","submitted_at":"2025-06-10T01:45:56Z","title":"Your Agent Can Defend Itself against Backdoor Attacks","version":2},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-07T05:20:51.473274Z"},"links":{"cited_paper":"/paper/2011.10369","citing_paper":"/paper/2506.08336"},"observation_digest":"sha256:d4a0a521e50d99ad9a788a388ea74de5c0aa43647237f4cba1459d0769532858","observation_id":"fc910d12-2f81-468e-a5ae-a01dfd8992e4","resolution":{"observed_at":"2026-08-07T05:20:51.473274Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2011.10369","last_updated":"2021-11-03T18:21:00Z","snapshot_observed_at":"2026-08-08T00:46:05.240737Z","submitted_at":"2020-11-20T12:17:21Z","title":"ONION: A Simple and Effective Defense Against Textual Backdoor Attacks","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2011.10369","snapshot_observed_at":"2026-08-05T14:42:31.474159Z","title":"Onion: A simple and effective defense against textual backdoor attacks","venue":null,"work_id":null,"year":2011},"citing_paper":{"arxiv_id":"2508.21004","last_updated":"2025-08-28T17:05:18Z","snapshot_observed_at":"2026-08-07T06:34:15.037429Z","submitted_at":"2025-08-28T17:05:18Z","title":"Lethe: Purifying Backdoored Large Language Models with Knowledge Dilution","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-05T14:42:31.474159Z"},"links":{"cited_paper":"/paper/2011.10369","citing_paper":"/paper/2508.21004"},"observation_digest":"sha256:23a01c138df7b29ae85afa3eaa85bd22255fba63aede3002b1e77eba1dfc59f1","observation_id":"09a20dcf-c8e0-4d5e-ae3f-9c18fb8d2b01","resolution":{"observed_at":"2026-08-05T14:42:31.474159Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2011.10369","last_updated":"2021-11-03T18:21:00Z","snapshot_observed_at":"2026-08-08T00:46:05.240737Z","submitted_at":"2020-11-20T12:17:21Z","title":"ONION: A Simple and Effective Defense Against Textual Backdoor Attacks","version":3},"cited_work":{"arxiv_id":"2011.10369","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2011.10369","snapshot_observed_at":"2026-07-01T10:15:44.404943Z","title":"Onion: A simple and effective defense against textual backdoor attacks","venue":null,"work_id":"9975bccc-5919-4ebc-b1ab-be64db743200","year":2011},"citing_paper":{"arxiv_id":"2512.10998","last_updated":"2025-12-10T17:25:55Z","snapshot_observed_at":"2026-07-06T22:38:45.907386Z","submitted_at":"2025-12-10T17:25:55Z","title":"SCOUT: A Defense Against Data Poisoning Attacks in Fine-Tuned Language Models","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-05-16T23:26:48.405593Z"},"links":{"cited_paper":"/paper/2011.10369","citing_paper":"/paper/2512.10998"},"observation_digest":"sha256:0ada68ea1b3ffe4a9c0243c4191f2cf55aa2a3bc0e97ae8c0a371437f3bf3c50","observation_id":"dd406e21-7223-45db-ba4d-60c56b06a04a","resolution":{"observed_at":"2026-05-16T23:28:40.726517Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2011.10369","last_updated":"2021-11-03T18:21:00Z","snapshot_observed_at":"2026-08-08T00:46:05.240737Z","submitted_at":"2020-11-20T12:17:21Z","title":"ONION: A Simple and Effective Defense Against Textual Backdoor Attacks","version":3},"cited_work":{"arxiv_id":"2011.10369","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2011.10369","snapshot_observed_at":"2026-07-01T10:15:44.404943Z","title":"Onion: A simple and effective defense against textual backdoor attacks","venue":null,"work_id":"9975bccc-5919-4ebc-b1ab-be64db743200","year":2011},"citing_paper":{"arxiv_id":"2606.31309","last_updated":"2026-06-30T08:19:00Z","snapshot_observed_at":"2026-08-01T23:50:29.049478Z","submitted_at":"2026-06-30T08:19:00Z","title":"CSO-LLM: Class Subspace Orthogonalization for Post-Training Backdoor Detection and Trigger Inversion in LLMs","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-07-01T05:42:10.497856Z"},"links":{"cited_paper":"/paper/2011.10369","citing_paper":"/paper/2606.31309"},"observation_digest":"sha256:87f79af73383a182f90e0d3bbb7c80c74ea5ead6120f1e841ac7692bc6939ab2","observation_id":"d9b1ed95-97b1-4656-987c-7e29d9b5ed99","resolution":{"observed_at":"2026-07-01T10:15:44.406550Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2011.10369","last_updated":"2021-11-03T18:21:00Z","snapshot_observed_at":"2026-08-08T00:46:05.240737Z","submitted_at":"2020-11-20T12:17:21Z","title":"ONION: A Simple and Effective Defense Against Textual Backdoor Attacks","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2011.10369","snapshot_observed_at":"2026-08-01T11:29:57.154055Z","title":"Conference’17, July 2017, Washington, DC, USA Yuxi Li, Zhibo Zhang, Kailong Wang, Xingshuo Han, Ling Shi, and Haoyu Wang arXiv preprint arXiv:2011.10369(2020)","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2607.19894","last_updated":"2026-07-22T08:29:06Z","snapshot_observed_at":"2026-08-09T03:37:23.420822Z","submitted_at":"2026-07-22T08:29:06Z","title":"Defense Against LLM Backdoors using Critical Neuron Isolation Pruning","version":1},"reference_index":2020,"source":"pdf_text","source_observed_at":"2026-08-01T11:29:57.154055Z"},"links":{"cited_paper":"/paper/2011.10369","citing_paper":"/paper/2607.19894"},"observation_digest":"sha256:51bb15e7beced4291b4540bde1ea09c355bad07425d611dc3b547c12b697363f","observation_id":"170cc7d5-db55-4035-b849-cf8fa8f07e85","resolution":{"observed_at":"2026-08-01T11:29:57.154055Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2011.10369/citation-record","integrity":"/paper/2011.10369/integrity","json":"/paper/2011.10369/citation-record.json","paper":"/paper/2011.10369"},"outbound":[],"paper":{"arxiv_id":"2011.10369","last_updated":"2021-11-03T18:21:00Z","latest_version":3,"primary_category":"cs.CL","snapshot_observed_at":"2026-08-08T00:46:05.240737Z","submitted_at":"2020-11-20T12:17:21Z","title":"ONION: A Simple and Effective Defense Against Textual Backdoor Attacks"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 8 inbound Pith citation observations for arXiv:2011.10369."}