{"as_of":"2026-08-20T08:45:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:3e6bf2284e4a65f128497ec94766dadc6f3e8edd41121085ea5c3100968ab5cc","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":7,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":7,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-20T06:33:59.587034+00:00","state":"measured"},{"denominator":7,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":7,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-16T04:28:00.801567Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-05-13T16:48:02.790372Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2305.00944","last_updated":"2023-05-01T16:57:33Z","snapshot_observed_at":"2026-08-16T15:36:29.052826Z","submitted_at":"2023-05-01T16:57:33Z","title":"Poisoning Language Models During Instruction Tuning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.00944","snapshot_observed_at":"2026-08-11T14:01:31.121180Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.12563","last_updated":"2024-12-17T05:46:50Z","snapshot_observed_at":"2026-08-17T05:47:53.534686Z","submitted_at":"2024-12-17T05:46:50Z","title":"Task-Agnostic Language Model Watermarking via High Entropy Passthrough Layers","version":1},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-08-11T14:01:31.121180Z"},"links":{"cited_paper":"/paper/2305.00944","citing_paper":"/paper/2412.12563"},"observation_digest":"sha256:7f486ccc076338543d1488fce17874ea758d3d46cbcadd56395a1e8e2eebb042","observation_id":"bc95fc63-7c6c-48ac-9a89-c8ef36ff4daf","resolution":{"observed_at":"2026-08-11T14:01:31.121180Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.00944","last_updated":"2023-05-01T16:57:33Z","snapshot_observed_at":"2026-08-16T15:36:29.052826Z","submitted_at":"2023-05-01T16:57:33Z","title":"Poisoning Language Models During Instruction Tuning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.00944","snapshot_observed_at":"2026-08-11T05:23:44.463916Z","title":"Poisoning language models during instruction tuning","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.17614","last_updated":"2024-12-23T14:36:37Z","snapshot_observed_at":"2026-08-19T02:01:32.303600Z","submitted_at":"2024-12-23T14:36:37Z","title":"Emerging Security Challenges of Large Language Models","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-11T05:23:44.463916Z"},"links":{"cited_paper":"/paper/2305.00944","citing_paper":"/paper/2412.17614"},"observation_digest":"sha256:2d26048b8065300415a55cbd3de6bb3959eeea9e704eeb65541d5629710af4b5","observation_id":"dfb90df9-bf4e-4d28-9e43-f067f4819c95","resolution":{"observed_at":"2026-08-11T05:23:44.463916Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.00944","last_updated":"2023-05-01T16:57:33Z","snapshot_observed_at":"2026-08-16T15:36:29.052826Z","submitted_at":"2023-05-01T16:57:33Z","title":"Poisoning Language Models During Instruction Tuning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.00944","snapshot_observed_at":"2026-08-16T04:28:00.801567Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.01177","last_updated":"2025-05-02T10:35:26Z","snapshot_observed_at":"2026-08-16T14:20:05.929905Z","submitted_at":"2025-05-02T10:35:26Z","title":"LLM Security: Vulnerabilities, Attacks, Defenses, and Countermeasures","version":1},"reference_index":139,"source":"pdf_text","source_observed_at":"2026-08-16T04:28:00.801567Z"},"links":{"cited_paper":"/paper/2305.00944","citing_paper":"/paper/2505.01177"},"observation_digest":"sha256:fd00271a541b042a22c173f9e5baff658733801b2a11d020059cde1c62171dc0","observation_id":"c13a06ab-4e9b-4c6b-bc7b-f5f2886f3f53","resolution":{"observed_at":"2026-08-16T04:28:00.801567Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.00944","last_updated":"2023-05-01T16:57:33Z","snapshot_observed_at":"2026-08-16T15:36:29.052826Z","submitted_at":"2023-05-01T16:57:33Z","title":"Poisoning Language Models During Instruction Tuning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.00944","snapshot_observed_at":"2026-08-07T14:27:03.683845Z","title":"Poisoning language modelsduringinstructiontuning,in:Proc.40thInternationalConfer- ence on Machine Learning (ICML).arXiv:2305.00944","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.18889","last_updated":"2025-08-24T03:15:13Z","snapshot_observed_at":"2026-08-18T03:59:36.764795Z","submitted_at":"2025-05-24T22:22:43Z","title":"Security Concerns for Large Language Models: A Survey","version":5},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-07T14:27:03.683845Z"},"links":{"cited_paper":"/paper/2305.00944","citing_paper":"/paper/2505.18889"},"observation_digest":"sha256:b71b1da142743858d59e8da363f045cbe22c5bde6c4d1f816748839dcac01522","observation_id":"c3c72e84-9a5e-479f-9a66-84669cef5015","resolution":{"observed_at":"2026-08-07T14:27:03.683845Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.00944","last_updated":"2023-05-01T16:57:33Z","snapshot_observed_at":"2026-08-16T15:36:29.052826Z","submitted_at":"2023-05-01T16:57:33Z","title":"Poisoning Language Models During Instruction Tuning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.00944","snapshot_observed_at":"2026-08-06T19:26:13.736202Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.08020","last_updated":"2025-07-08T03:01:00Z","snapshot_observed_at":"2026-08-16T11:53:02.284922Z","submitted_at":"2025-07-08T03:01:00Z","title":"Circumventing Safety Alignment in Large Language Models Through Embedding Space Toxicity Attenuation","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-06T19:26:13.736202Z"},"links":{"cited_paper":"/paper/2305.00944","citing_paper":"/paper/2507.08020"},"observation_digest":"sha256:63b0881a6068b8c3c8f38cd7d2dce0a6def32ddca1b0b43bb6faf6a0bbe9e7a3","observation_id":"353eeb47-4bf9-4bcf-b914-8dd221df76fc","resolution":{"observed_at":"2026-08-06T19:26:13.736202Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.00944","last_updated":"2023-05-01T16:57:33Z","snapshot_observed_at":"2026-08-16T15:36:29.052826Z","submitted_at":"2023-05-01T16:57:33Z","title":"Poisoning Language Models During Instruction Tuning","version":1},"cited_work":{"arxiv_id":"2305.00944","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2305.00944","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Poisoning language models during instruction tuning","venue":null,"work_id":"6e3dfb76-9b65-4add-bf35-7e50b1c0f243","year":2023},"citing_paper":{"arxiv_id":"2604.03890","last_updated":"2026-04-04T23:06:16Z","snapshot_observed_at":"2026-08-14T10:46:43.901329Z","submitted_at":"2026-04-04T23:06:16Z","title":"From Prompt to Physical Action: Structured Backdoor Attacks on LLM-Mediated Robotic Control Systems","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-05-13T16:47:10.678447Z"},"links":{"cited_paper":"/paper/2305.00944","citing_paper":"/paper/2604.03890"},"observation_digest":"sha256:d9cfa2707b9e2b9f017d40b0bbc59063b61246ba45890a5138f160c88fc1aa79","observation_id":"213789a7-b3eb-48ab-abd7-133e16114975","resolution":{"observed_at":"2026-05-13T16:48:02.792325Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2305.00944","last_updated":"2023-05-01T16:57:33Z","snapshot_observed_at":"2026-08-16T15:36:29.052826Z","submitted_at":"2023-05-01T16:57:33Z","title":"Poisoning Language Models During Instruction Tuning","version":1},"cited_work":{"arxiv_id":"2305.00944","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2305.00944","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Poisoning language models during instruction tuning","venue":null,"work_id":"6e3dfb76-9b65-4add-bf35-7e50b1c0f243","year":2023},"citing_paper":{"arxiv_id":"2604.23338","last_updated":"2026-05-06T17:17:02Z","snapshot_observed_at":"2026-08-06T19:46:39.219000Z","submitted_at":"2026-04-25T14:57:15Z","title":"A Systematic Survey of Security Threats and Defenses in LLM-Based AI Agents: A Layered Attack Surface Framework","version":2},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-05-08T07:53:13.746141Z"},"links":{"cited_paper":"/paper/2305.00944","citing_paper":"/paper/2604.23338"},"observation_digest":"sha256:948adfa60e34482254e756a993de49f3b1e0269f6f3ec72043f96a70e17248ba","observation_id":"9d019718-79ef-428a-83b1-1ecb8f40ad8a","resolution":{"observed_at":"2026-05-11T20:51:09.267708Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2305.00944/citation-record","integrity":"/paper/2305.00944/integrity","json":"/paper/2305.00944/citation-record.json","paper":"/paper/2305.00944"},"outbound":[],"paper":{"arxiv_id":"2305.00944","last_updated":"2023-05-01T16:57:33Z","latest_version":1,"primary_category":"cs.CL","snapshot_observed_at":"2026-08-16T15:36:29.052826Z","submitted_at":"2023-05-01T16:57:33Z","title":"Poisoning Language Models During Instruction Tuning"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"thesis":"As of 20 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 7 inbound Pith citation observations for arXiv:2305.00944."}