{"as_of":"2026-08-19T08:27:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:808f2728764f127fc32ce45d1ca8af682e1cb91a05ab3fd6396d48f1c44d3f5b","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":8,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":8,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-19T06:32:44.657259+00:00","state":"measured"},{"denominator":8,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":8,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-16T04:28:00.681961Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-05-25T05:05:22.782499Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2310.19737","last_updated":"2023-10-30T17:01:02Z","snapshot_observed_at":"2026-08-17T04:16:32.392084Z","submitted_at":"2023-10-30T17:01:02Z","title":"Adversarial Attacks and Defenses in Large Language Models: Old and New Threats","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.19737","snapshot_observed_at":"2026-08-10T18:07:46.881723Z","title":"URL https://arxiv.org/abs/ 2310.19737","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2501.11621","last_updated":"2025-01-20T17:36:04Z","snapshot_observed_at":"2026-08-14T11:36:00.851001Z","submitted_at":"2025-01-20T17:36:04Z","title":"Trojan Detection Through Pattern Recognition for Large Language Models","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-10T18:07:46.881723Z"},"links":{"cited_paper":"/paper/2310.19737","citing_paper":"/paper/2501.11621"},"observation_digest":"sha256:50625efd25ad77ca8d19dba511d5d71b4ddd34d41faa5b53e8d6eb1aafe749f2","observation_id":"f29e3ee1-30b0-4ebf-9449-8f9dfee230ec","resolution":{"observed_at":"2026-08-10T18:07:46.881723Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.19737","last_updated":"2023-10-30T17:01:02Z","snapshot_observed_at":"2026-08-17T04:16:32.392084Z","submitted_at":"2023-10-30T17:01:02Z","title":"Adversarial Attacks and Defenses in Large Language Models: Old and New Threats","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.19737","snapshot_observed_at":"2026-08-07T19:32:24.106441Z","title":"Adversarial attacks and defenses in large language models: Old and new threats","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2502.10487","last_updated":"2025-02-14T11:15:27Z","snapshot_observed_at":"2026-08-18T17:49:12.051230Z","submitted_at":"2025-02-14T11:15:27Z","title":"Fast Proxies for LLM Robustness Evaluation","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T19:32:24.106441Z"},"links":{"cited_paper":"/paper/2310.19737","citing_paper":"/paper/2502.10487"},"observation_digest":"sha256:8ae68a2ebdb6831e4f10a6798c9bc49214c64c1d119fd6b8ac28151a9c9b3538","observation_id":"5b879a50-5670-4f39-bab6-18f92f6b5a20","resolution":{"observed_at":"2026-08-07T19:32:24.106441Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.19737","last_updated":"2023-10-30T17:01:02Z","snapshot_observed_at":"2026-08-17T04:16:32.392084Z","submitted_at":"2023-10-30T17:01:02Z","title":"Adversarial Attacks and Defenses in Large Language Models: Old and New Threats","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.19737","snapshot_observed_at":"2026-08-16T04:28:00.681961Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.01177","last_updated":"2025-05-02T10:35:26Z","snapshot_observed_at":"2026-08-16T14:20:05.929905Z","submitted_at":"2025-05-02T10:35:26Z","title":"LLM Security: Vulnerabilities, Attacks, Defenses, and Countermeasures","version":1},"reference_index":113,"source":"pdf_text","source_observed_at":"2026-08-16T04:28:00.681961Z"},"links":{"cited_paper":"/paper/2310.19737","citing_paper":"/paper/2505.01177"},"observation_digest":"sha256:fc12242662d879408fa457e331fcd361b010f933451a326041103274e611b3e4","observation_id":"8f2fbb1c-4f3e-43f5-a2f7-e5778ab80b88","resolution":{"observed_at":"2026-08-16T04:28:00.681961Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.19737","last_updated":"2023-10-30T17:01:02Z","snapshot_observed_at":"2026-08-17T04:16:32.392084Z","submitted_at":"2023-10-30T17:01:02Z","title":"Adversarial Attacks and Defenses in Large Language Models: Old and New Threats","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.19737","snapshot_observed_at":"2026-08-06T19:26:13.716377Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.08020","last_updated":"2025-07-08T03:01:00Z","snapshot_observed_at":"2026-08-16T11:53:02.284922Z","submitted_at":"2025-07-08T03:01:00Z","title":"Circumventing Safety Alignment in Large Language Models Through Embedding Space Toxicity Attenuation","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-06T19:26:13.716377Z"},"links":{"cited_paper":"/paper/2310.19737","citing_paper":"/paper/2507.08020"},"observation_digest":"sha256:500bdb352c7723dfc085bd2cd721790cf6d964cc2ed6a66a18b17f26ff6b7e51","observation_id":"56e86c98-86db-4e90-9e14-86e48abcbd8e","resolution":{"observed_at":"2026-08-06T19:26:13.716377Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.19737","last_updated":"2023-10-30T17:01:02Z","snapshot_observed_at":"2026-08-17T04:16:32.392084Z","submitted_at":"2023-10-30T17:01:02Z","title":"Adversarial Attacks and Defenses in Large Language Models: Old and New Threats","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.19737","snapshot_observed_at":"2026-08-15T16:21:58.899446Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2509.06338","last_updated":"2025-09-08T05:00:58Z","snapshot_observed_at":"2026-08-19T04:52:07.684642Z","submitted_at":"2025-09-08T05:00:58Z","title":"Embedding Poisoning: Bypassing Safety Alignment via Embedding Semantic Shift","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-15T16:21:58.899446Z"},"links":{"cited_paper":"/paper/2310.19737","citing_paper":"/paper/2509.06338"},"observation_digest":"sha256:4288961e623339f0d20a6b303affdf12a16bce48392024259393cecb17abbaa1","observation_id":"2fb63d71-039d-43af-8ba0-f4c1c92cc05c","resolution":{"observed_at":"2026-08-15T16:21:58.899446Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.19737","last_updated":"2023-10-30T17:01:02Z","snapshot_observed_at":"2026-08-17T04:16:32.392084Z","submitted_at":"2023-10-30T17:01:02Z","title":"Adversarial Attacks and Defenses in Large Language Models: Old and New Threats","version":1},"cited_work":{"arxiv_id":"2310.19737","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2310.19737","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Adversarial attacks and defenses in large language models: Old and new threats","venue":null,"work_id":"10721531-84c5-4fe9-8345-f87f7660d432","year":2023},"citing_paper":{"arxiv_id":"2509.18127","last_updated":"2026-04-14T10:00:44Z","snapshot_observed_at":"2026-08-16T11:13:22.793074Z","submitted_at":"2025-09-11T11:22:43Z","title":"Safe-SAIL: Towards a Fine-grained Safety Landscape of Large Language Models via Sparse Autoencoder Interpretation Framework","version":3},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-05-18T18:13:01.662828Z"},"links":{"cited_paper":"/paper/2310.19737","citing_paper":"/paper/2509.18127"},"observation_digest":"sha256:697b621661ebe628ae23ee32a9fdbaa5c7c491ac48d17268843e22ec33eb19e6","observation_id":"7fb5b359-25b7-4026-a817-4ab16410468e","resolution":{"observed_at":"2026-05-18T18:16:43.711016Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.19737","last_updated":"2023-10-30T17:01:02Z","snapshot_observed_at":"2026-08-17T04:16:32.392084Z","submitted_at":"2023-10-30T17:01:02Z","title":"Adversarial Attacks and Defenses in Large Language Models: Old and New Threats","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.19737","snapshot_observed_at":"2026-08-02T18:16:47.252198Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2603.14785","last_updated":"2026-07-26T17:22:03Z","snapshot_observed_at":"2026-08-17T16:28:14.391950Z","submitted_at":"2026-03-16T03:35:04Z","title":"SkipOPU: An FPGA-based Overlay Processor for Large Language Models with Dynamically Allocated Computation","version":2},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-02T18:16:47.252198Z"},"links":{"cited_paper":"/paper/2310.19737","citing_paper":"/paper/2603.14785"},"observation_digest":"sha256:2673f8e6d8c6e83c37356df57068507026d21045d0264388278e285b25fd505f","observation_id":"77bb57f4-5806-4483-95b8-122f52a3ccc2","resolution":{"observed_at":"2026-08-02T18:16:47.252198Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.19737","last_updated":"2023-10-30T17:01:02Z","snapshot_observed_at":"2026-08-17T04:16:32.392084Z","submitted_at":"2023-10-30T17:01:02Z","title":"Adversarial Attacks and Defenses in Large Language Models: Old and New Threats","version":1},"cited_work":{"arxiv_id":"2310.19737","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2310.19737","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Adversarial attacks and defenses in large language models: Old and new threats","venue":null,"work_id":"10721531-84c5-4fe9-8345-f87f7660d432","year":2023},"citing_paper":{"arxiv_id":"2605.23157","last_updated":"2026-05-22T02:12:45Z","snapshot_observed_at":"2026-07-06T23:33:24.215365Z","submitted_at":"2026-05-22T02:12:45Z","title":"Same Model, Different Weakness: How Language and Modality Reshape the Jailbreak Attack Surface in Frontier MLLMs","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-05-25T05:03:57.453043Z"},"links":{"cited_paper":"/paper/2310.19737","citing_paper":"/paper/2605.23157"},"observation_digest":"sha256:cc8b495d6f6a7b5fb1c0aee8d412bddeaa4c20075e9b448f9b1e81ada43e7a32","observation_id":"9b68111b-9039-4c6d-9df9-d91e75bffd56","resolution":{"observed_at":"2026-05-25T05:05:22.787129Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2310.19737/citation-record","integrity":"/paper/2310.19737/integrity","json":"/paper/2310.19737/citation-record.json","paper":"/paper/2310.19737"},"outbound":[],"paper":{"arxiv_id":"2310.19737","last_updated":"2023-10-30T17:01:02Z","latest_version":1,"primary_category":"cs.AI","snapshot_observed_at":"2026-08-17T04:16:32.392084Z","submitted_at":"2023-10-30T17:01:02Z","title":"Adversarial Attacks and Defenses in Large Language Models: Old and New Threats"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"thesis":"As of 19 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 8 inbound Pith citation observations for arXiv:2310.19737."}