{"as_of":"2026-08-09T21:38:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:b6897d0e7fa85d0f0482fb12925ffdb86f368abdd299450aa98709cdcc343237","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":17,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":17,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":17,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":17,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-09T14:47:15.244674Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-05-23T20:58:26.108736Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2309.17410","last_updated":"2023-09-29T17:12:43Z","snapshot_observed_at":"2026-07-06T16:25:38.571377Z","submitted_at":"2023-09-29T17:12:43Z","title":"Can Sensitive Information Be Deleted From LLMs? Objectives for Defending Against Extraction Attacks","version":1},"cited_work":{"arxiv_id":"2309.17410","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2309.17410","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Can sensitive information be deleted from llms? objectives for defending against extraction attacks","venue":null,"work_id":"45453318-50a9-4177-977c-a36927f33f42","year":2023},"citing_paper":{"arxiv_id":"2310.12508","last_updated":"2024-04-04T07:45:38Z","snapshot_observed_at":"2026-08-03T17:30:25.153454Z","submitted_at":"2023-10-19T06:17:17Z","title":"SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generation","version":5},"reference_index":76,"source":"arxiv_source","source_observed_at":"2026-05-16T17:56:23.281678Z"},"links":{"cited_paper":"/paper/2309.17410","citing_paper":"/paper/2310.12508"},"observation_digest":"sha256:432e040b33ed25c00794a84c607902c02eda8cce90289fc042eb29e4b402cd88","observation_id":"00b4f6dc-fc83-4fdc-9a34-fcd0ed984109","resolution":{"observed_at":"2026-05-16T17:56:23.597335Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.17410","last_updated":"2023-09-29T17:12:43Z","snapshot_observed_at":"2026-07-06T16:25:38.571377Z","submitted_at":"2023-09-29T17:12:43Z","title":"Can Sensitive Information Be Deleted From LLMs? Objectives for Defending Against Extraction Attacks","version":1},"cited_work":{"arxiv_id":"2309.17410","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2309.17410","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Can sensitive information be deleted from llms? objectives for defending against extraction attacks","venue":null,"work_id":"45453318-50a9-4177-977c-a36927f33f42","year":2023},"citing_paper":{"arxiv_id":"2401.06121","last_updated":"2024-01-11T18:57:12Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-01-11T18:57:12Z","title":"TOFU: A Task of Fictitious Unlearning for LLMs","version":1},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-05-16T11:07:39.215164Z"},"links":{"cited_paper":"/paper/2309.17410","citing_paper":"/paper/2401.06121"},"observation_digest":"sha256:a8de5c4fb0f866100fb0aa0d3d2a69099857417b8a6f6197223cd4829a7ca81c","observation_id":"42192545-a00c-4085-ab55-cdde7149bb58","resolution":{"observed_at":"2026-05-16T11:07:39.289737Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.17410","last_updated":"2023-09-29T17:12:43Z","snapshot_observed_at":"2026-07-06T16:25:38.571377Z","submitted_at":"2023-09-29T17:12:43Z","title":"Can Sensitive Information Be Deleted From LLMs? Objectives for Defending Against Extraction Attacks","version":1},"cited_work":{"arxiv_id":"2309.17410","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2309.17410","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Can sensitive information be deleted from llms? objectives for defending against extraction attacks","venue":null,"work_id":"45453318-50a9-4177-977c-a36927f33f42","year":2023},"citing_paper":{"arxiv_id":"2404.05868","last_updated":"2024-10-10T22:00:41Z","snapshot_observed_at":"2026-07-06T17:57:27.510162Z","submitted_at":"2024-04-08T21:05:42Z","title":"Negative Preference Optimization: From Catastrophic Collapse to Effective Unlearning","version":2},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-05-16T22:26:55.008143Z"},"links":{"cited_paper":"/paper/2309.17410","citing_paper":"/paper/2404.05868"},"observation_digest":"sha256:7d7b4f3f1c1bf0d5d00baf0ceaba6c72ae7d009e2779a6c994eb114aa1195132","observation_id":"ccb6b89f-1795-401e-9014-5536df499b5b","resolution":{"observed_at":"2026-05-16T22:26:55.067099Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.17410","last_updated":"2023-09-29T17:12:43Z","snapshot_observed_at":"2026-07-06T16:25:38.571377Z","submitted_at":"2023-09-29T17:12:43Z","title":"Can Sensitive Information Be Deleted From LLMs? Objectives for Defending Against Extraction Attacks","version":1},"cited_work":{"arxiv_id":"2309.17410","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2309.17410","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Can sensitive information be deleted from llms? objectives for defending against extraction attacks","venue":null,"work_id":"45453318-50a9-4177-977c-a36927f33f42","year":2023},"citing_paper":{"arxiv_id":"2409.18169","last_updated":"2026-04-23T18:48:49Z","snapshot_observed_at":"2026-07-06T19:22:58.341345Z","submitted_at":"2024-09-26T17:55:22Z","title":"Harmful Fine-tuning Attacks and Defenses for Large Language Models: A Survey","version":6},"reference_index":114,"source":"pdf_text","source_observed_at":"2026-05-23T20:58:16.237327Z"},"links":{"cited_paper":"/paper/2309.17410","citing_paper":"/paper/2409.18169"},"observation_digest":"sha256:3a9c62a2a9a6c6d1a7547e8f17f4ae906c04383397bcdcf0a99344a18a8213f6","observation_id":"e5dd1676-b5d7-4a18-9ad8-3da17918dcc1","resolution":{"observed_at":"2026-05-23T20:58:26.112961Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.17410","last_updated":"2023-09-29T17:12:43Z","snapshot_observed_at":"2026-07-06T16:25:38.571377Z","submitted_at":"2023-09-29T17:12:43Z","title":"Can Sensitive Information Be Deleted From LLMs? Objectives for Defending Against Extraction Attacks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.17410","snapshot_observed_at":"2026-08-09T12:47:21.734049Z","title":"Can sensitive informatio n be deleted from llms? objectives for defending against extraction attacks","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2502.02260","last_updated":"2026-06-02T17:48:48Z","snapshot_observed_at":"2026-08-09T12:42:57.704129Z","submitted_at":"2025-02-04T12:17:08Z","title":"Position: Adversarial ML for LLMs Is Not Making Any Progress","version":2},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-09T12:47:21.734049Z"},"links":{"cited_paper":"/paper/2309.17410","citing_paper":"/paper/2502.02260"},"observation_digest":"sha256:dae044399348dd91380bea005fa885fbd967b053508a0a29a7cba7330a306d32","observation_id":"e63164f3-c03d-4fef-8afa-59dedb47ab4f","resolution":{"observed_at":"2026-08-09T12:47:21.734049Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.17410","last_updated":"2023-09-29T17:12:43Z","snapshot_observed_at":"2026-07-06T16:25:38.571377Z","submitted_at":"2023-09-29T17:12:43Z","title":"Can Sensitive Information Be Deleted From LLMs? Objectives for Defending Against Extraction Attacks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.17410","snapshot_observed_at":"2026-08-09T14:47:15.244674Z","title":"Can sensitive information be deleted from llms? objectives for defending against extraction attacks","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.05209","last_updated":"2025-07-24T21:34:54Z","snapshot_observed_at":"2026-08-09T14:40:37.335660Z","submitted_at":"2025-02-03T18:59:16Z","title":"Model Tampering Attacks Enable More Rigorous Evaluations of LLM Capabilities","version":4},"reference_index":52,"source":"arxiv_source","source_observed_at":"2026-08-09T14:47:15.244674Z"},"links":{"cited_paper":"/paper/2309.17410","citing_paper":"/paper/2502.05209"},"observation_digest":"sha256:79873128a903ad8a2498f24f62610068595d609762d53ce510726092431b7ee1","observation_id":"11943eb2-7684-42a4-9402-04f4fe61a795","resolution":{"observed_at":"2026-08-09T14:47:15.244674Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.17410","last_updated":"2023-09-29T17:12:43Z","snapshot_observed_at":"2026-07-06T16:25:38.571377Z","submitted_at":"2023-09-29T17:12:43Z","title":"Can Sensitive Information Be Deleted From LLMs? Objectives for Defending Against Extraction Attacks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.17410","snapshot_observed_at":"2026-08-07T04:37:07.507769Z","title":"Unlearning with Projections","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.10236","last_updated":"2025-08-14T05:03:53Z","snapshot_observed_at":"2026-08-08T09:47:01.651509Z","submitted_at":"2025-06-11T23:36:30Z","title":"Prompt Attacks Reveal Superficial Knowledge Removal in Unlearning Methods","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T04:37:07.507769Z"},"links":{"cited_paper":"/paper/2309.17410","citing_paper":"/paper/2506.10236"},"observation_digest":"sha256:b7f65d51de91f703c513f844eb650e3180665fc9b415034a1f0f092182203a55","observation_id":"3f40819a-a57e-4375-ae14-5ec259a731e8","resolution":{"observed_at":"2026-08-07T04:37:07.507769Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.17410","last_updated":"2023-09-29T17:12:43Z","snapshot_observed_at":"2026-07-06T16:25:38.571377Z","submitted_at":"2023-09-29T17:12:43Z","title":"Can Sensitive Information Be Deleted From LLMs? Objectives for Defending Against Extraction Attacks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.17410","snapshot_observed_at":"2026-08-07T00:56:31.588211Z","title":"Can sensitive information be deleted from llms? objectives for defending against extraction attacks","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.17279","last_updated":"2025-06-14T04:22:17Z","snapshot_observed_at":"2026-08-08T00:43:15.134760Z","submitted_at":"2025-06-14T04:22:17Z","title":"Step-by-Step Reasoning Attack: Revealing 'Erased' Knowledge in Large Language Models","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-07T00:56:31.588211Z"},"links":{"cited_paper":"/paper/2309.17410","citing_paper":"/paper/2506.17279"},"observation_digest":"sha256:0ab944fed9e99876974c41d98bcfd2d6603da951e814dc8ba3adbed3a3efcfc4","observation_id":"fe641c6d-bf13-4359-9fbe-835593427b04","resolution":{"observed_at":"2026-08-07T00:56:31.588211Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.17410","last_updated":"2023-09-29T17:12:43Z","snapshot_observed_at":"2026-07-06T16:25:38.571377Z","submitted_at":"2023-09-29T17:12:43Z","title":"Can Sensitive Information Be Deleted From LLMs? Objectives for Defending Against Extraction Attacks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.17410","snapshot_observed_at":"2026-08-06T23:01:43.187959Z","title":"Patil, P","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.22492","last_updated":"2025-06-24T18:55:29Z","snapshot_observed_at":"2026-08-09T19:56:07.377157Z","submitted_at":"2025-06-24T18:55:29Z","title":"Report on NSF Workshop on Science of Safe AI","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-06T23:01:43.187959Z"},"links":{"cited_paper":"/paper/2309.17410","citing_paper":"/paper/2506.22492"},"observation_digest":"sha256:8e2b5ab390336cbdcdaf12e013eb3011cce57bf90ca6fd31e40c1c723a7c8f3c","observation_id":"fc899506-3af0-4496-93d5-c9a96ccdab7c","resolution":{"observed_at":"2026-08-06T23:01:43.187959Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.17410","last_updated":"2023-09-29T17:12:43Z","snapshot_observed_at":"2026-07-06T16:25:38.571377Z","submitted_at":"2023-09-29T17:12:43Z","title":"Can Sensitive Information Be Deleted From LLMs? Objectives for Defending Against Extraction Attacks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.17410","snapshot_observed_at":"2026-08-06T22:23:11.236791Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:11.236791Z"},"links":{"cited_paper":"/paper/2309.17410","citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:1af86345fdf8c070a26be0d47690a16b9c3e532d0e596a143d2c0f5fdfc02886","observation_id":"fb9729dd-18f4-4716-b14a-cbe114419238","resolution":{"observed_at":"2026-08-06T22:23:11.236791Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.17410","last_updated":"2023-09-29T17:12:43Z","snapshot_observed_at":"2026-07-06T16:25:38.571377Z","submitted_at":"2023-09-29T17:12:43Z","title":"Can Sensitive Information Be Deleted From LLMs? Objectives for Defending Against Extraction Attacks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.17410","snapshot_observed_at":"2026-08-06T17:21:33.717513Z","title":"arXiv:2309.17410 (2023)","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.11128","last_updated":"2025-07-15T09:28:44Z","snapshot_observed_at":"2026-08-06T17:13:26.565391Z","submitted_at":"2025-07-15T09:28:44Z","title":"What Should LLMs Forget? Quantifying Personal Data in LLMs for Right-to-Be-Forgotten Requests","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-06T17:21:33.717513Z"},"links":{"cited_paper":"/paper/2309.17410","citing_paper":"/paper/2507.11128"},"observation_digest":"sha256:24ff04539edc3cd422328cf7fba0e110a5b1ef512dc254bda2666d6c512baf69","observation_id":"0ed82dce-814b-4478-b7ee-082a859ac8ec","resolution":{"observed_at":"2026-08-06T17:21:33.717513Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.17410","last_updated":"2023-09-29T17:12:43Z","snapshot_observed_at":"2026-07-06T16:25:38.571377Z","submitted_at":"2023-09-29T17:12:43Z","title":"Can Sensitive Information Be Deleted From LLMs? Objectives for Defending Against Extraction Attacks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.17410","snapshot_observed_at":"2026-08-06T05:48:02.749611Z","title":"Can sensitive information be deleted from llms? objectives for defending against extraction attacks, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.01324","last_updated":"2025-08-02T11:32:41Z","snapshot_observed_at":"2026-08-08T23:44:32.432109Z","submitted_at":"2025-08-02T11:32:41Z","title":"Towards Evaluation for Real-World LLM Unlearning","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-06T05:48:02.749611Z"},"links":{"cited_paper":"/paper/2309.17410","citing_paper":"/paper/2508.01324"},"observation_digest":"sha256:ad30f89eb50984549e552a6c609d2b3d2a839da4937f3b98c20882811eab0156","observation_id":"683d92f7-89a7-46e7-9dc5-df3e00a8b553","resolution":{"observed_at":"2026-08-06T05:48:02.749611Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.17410","last_updated":"2023-09-29T17:12:43Z","snapshot_observed_at":"2026-07-06T16:25:38.571377Z","submitted_at":"2023-09-29T17:12:43Z","title":"Can Sensitive Information Be Deleted From LLMs? Objectives for Defending Against Extraction Attacks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.17410","snapshot_observed_at":"2026-08-05T18:12:37.628103Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":162,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.628103Z"},"links":{"cited_paper":"/paper/2309.17410","citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:29782a69e56e7ddee9a292313e533b2a70ff98d9263835e9f90bb020853f4fa6","observation_id":"15514194-b3b1-4602-82b3-ca4bf5d6e42d","resolution":{"observed_at":"2026-08-05T18:12:37.628103Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.17410","last_updated":"2023-09-29T17:12:43Z","snapshot_observed_at":"2026-07-06T16:25:38.571377Z","submitted_at":"2023-09-29T17:12:43Z","title":"Can Sensitive Information Be Deleted From LLMs? Objectives for Defending Against Extraction Attacks","version":1},"cited_work":{"arxiv_id":"2309.17410","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2309.17410","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Can sensitive information be deleted from llms? objectives for defending against extraction attacks","venue":null,"work_id":"45453318-50a9-4177-977c-a36927f33f42","year":2023},"citing_paper":{"arxiv_id":"2605.00364","last_updated":"2026-05-06T12:12:22Z","snapshot_observed_at":"2026-07-06T23:13:47.082550Z","submitted_at":"2026-05-01T02:59:03Z","title":"Unlearning What Matters: Token-Level Attribution for Precise Language Model Unlearning","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-05-09T19:39:15.279115Z"},"links":{"cited_paper":"/paper/2309.17410","citing_paper":"/paper/2605.00364"},"observation_digest":"sha256:7c9650461ce24e847ff065759bbd4f7ea8e43b3901d8e1460280c32f277a91f6","observation_id":"759df5d9-4ec4-40ee-87ff-3a91cfe38897","resolution":{"observed_at":"2026-05-11T15:36:06.685073Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.17410","last_updated":"2023-09-29T17:12:43Z","snapshot_observed_at":"2026-07-06T16:25:38.571377Z","submitted_at":"2023-09-29T17:12:43Z","title":"Can Sensitive Information Be Deleted From LLMs? Objectives for Defending Against Extraction Attacks","version":1},"cited_work":{"arxiv_id":"2309.17410","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2309.17410","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Can sensitive information be deleted from llms? objectives for defending against extraction attacks","venue":null,"work_id":"45453318-50a9-4177-977c-a36927f33f42","year":2023},"citing_paper":{"arxiv_id":"2605.09530","last_updated":"2026-05-14T14:55:04Z","snapshot_observed_at":"2026-07-06T23:21:35.327066Z","submitted_at":"2026-05-10T13:31:58Z","title":"MemPrivacy: Privacy-Preserving Personalized Memory Management for Edge-Cloud Agents","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-05-12T04:07:27.168365Z"},"links":{"cited_paper":"/paper/2309.17410","citing_paper":"/paper/2605.09530"},"observation_digest":"sha256:e67036ec5d8bb48eedf749678265c891c3bed05b62fc92b92f6251e90549dc10","observation_id":"9288345e-050f-49c5-9eb1-944fb8e4c3b1","resolution":{"observed_at":"2026-05-12T06:36:27.403960Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.17410","last_updated":"2023-09-29T17:12:43Z","snapshot_observed_at":"2026-07-06T16:25:38.571377Z","submitted_at":"2023-09-29T17:12:43Z","title":"Can Sensitive Information Be Deleted From LLMs? Objectives for Defending Against Extraction Attacks","version":1},"cited_work":{"arxiv_id":"2309.17410","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2309.17410","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Can sensitive information be deleted from llms? objectives for defending against extraction attacks","venue":null,"work_id":"45453318-50a9-4177-977c-a36927f33f42","year":2023},"citing_paper":{"arxiv_id":"2605.09530","last_updated":"2026-05-14T14:55:04Z","snapshot_observed_at":"2026-07-06T23:21:35.327066Z","submitted_at":"2026-05-10T13:31:58Z","title":"MemPrivacy: Privacy-Preserving Personalized Memory Management for Edge-Cloud Agents","version":2},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-05-13T07:23:35.728424Z"},"links":{"cited_paper":"/paper/2309.17410","citing_paper":"/paper/2605.09530"},"observation_digest":"sha256:0575d8a49713e911d4353c9fafe838f332ff11a9516472c8cca0ac5f9d031d4e","observation_id":"6c58134d-4b76-4172-a919-40e2da98878d","resolution":{"observed_at":"2026-05-13T07:27:30.109958Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.17410","last_updated":"2023-09-29T17:12:43Z","snapshot_observed_at":"2026-07-06T16:25:38.571377Z","submitted_at":"2023-09-29T17:12:43Z","title":"Can Sensitive Information Be Deleted From LLMs? Objectives for Defending Against Extraction Attacks","version":1},"cited_work":{"arxiv_id":"2309.17410","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2309.17410","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Can sensitive information be deleted from llms? objectives for defending against extraction attacks","venue":null,"work_id":"45453318-50a9-4177-977c-a36927f33f42","year":2023},"citing_paper":{"arxiv_id":"2605.09530","last_updated":"2026-05-14T14:55:04Z","snapshot_observed_at":"2026-07-06T23:21:35.327066Z","submitted_at":"2026-05-10T13:31:58Z","title":"MemPrivacy: Privacy-Preserving Personalized Memory Management for Edge-Cloud Agents","version":3},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-05-15T05:44:33.434389Z"},"links":{"cited_paper":"/paper/2309.17410","citing_paper":"/paper/2605.09530"},"observation_digest":"sha256:84ef7ee41f1c7ea7a793297ca2c39d9ba2f02ad0f638cc7a775b6141a3f1141f","observation_id":"00f35960-b29e-4429-ab16-4aaffe189413","resolution":{"observed_at":"2026-05-15T05:45:05.863556Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2309.17410/citation-record","integrity":"/paper/2309.17410/integrity","json":"/paper/2309.17410/citation-record.json","paper":"/paper/2309.17410"},"outbound":[],"paper":{"arxiv_id":"2309.17410","last_updated":"2023-09-29T17:12:43Z","latest_version":1,"primary_category":"cs.CL","snapshot_observed_at":"2026-07-06T16:25:38.571377Z","submitted_at":"2023-09-29T17:12:43Z","title":"Can Sensitive Information Be Deleted From LLMs? Objectives for Defending Against Extraction Attacks"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 17 inbound Pith citation observations for arXiv:2309.17410."}