{"as_of":"2026-08-09T17:01:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:25e30acd03b1d781f87a01a5463808a96fad0212163e9a6ca02633cd3fcdbea3","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":8,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":8,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":8,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":8,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-09T00:50:00.748849Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-05-23T20:58:26.470083Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2402.01109","last_updated":"2024-11-24T20:09:55Z","snapshot_observed_at":"2026-08-09T03:27:51.346195Z","submitted_at":"2024-02-02T02:56:50Z","title":"Vaccine: Perturbation-aware Alignment for Large Language Models against Harmful Fine-tuning Attack","version":6},"cited_work":{"arxiv_id":"2402.01109","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2402.01109","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Vaccine: Perturbation-aware alignment for large language model","venue":null,"work_id":"3d16cf72-b07e-4662-b0bd-819a5882f92d","year":2024},"citing_paper":{"arxiv_id":"2409.18169","last_updated":"2026-04-23T18:48:49Z","snapshot_observed_at":"2026-07-06T19:22:58.341345Z","submitted_at":"2024-09-26T17:55:22Z","title":"Harmful Fine-tuning Attacks and Defenses for Large Language Models: A Survey","version":6},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-05-23T20:58:16.237327Z"},"links":{"cited_paper":"/paper/2402.01109","citing_paper":"/paper/2409.18169"},"observation_digest":"sha256:ac4fa766c14b8e279457c81a38364f3216caed59248f112e2652ed3cb0f4cc91","observation_id":"1af0c4a7-abef-4c7f-8331-0f602daaae45","resolution":{"observed_at":"2026-05-23T20:58:26.472931Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.01109","last_updated":"2024-11-24T20:09:55Z","snapshot_observed_at":"2026-08-09T03:27:51.346195Z","submitted_at":"2024-02-02T02:56:50Z","title":"Vaccine: Perturbation-aware Alignment for Large Language Models against Harmful Fine-tuning Attack","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.01109","snapshot_observed_at":"2026-08-09T00:50:00.748849Z","title":"Vaccine: Perturbation- aware alignment for large language models against harmful fine-tuning attack,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.05224","last_updated":"2025-02-06T04:43:05Z","snapshot_observed_at":"2026-08-09T05:58:57.244749Z","submitted_at":"2025-02-06T04:43:05Z","title":"A Survey on Backdoor Threats in Large Language Models (LLMs): Attacks, Defenses, and Evaluations","version":1},"reference_index":174,"source":"pdf_text","source_observed_at":"2026-08-09T00:50:00.748849Z"},"links":{"cited_paper":"/paper/2402.01109","citing_paper":"/paper/2502.05224"},"observation_digest":"sha256:e9e3bbc79b6ddb2fd4cb5f3d7f4c8359cdc39166b5521f3ba0aa4235dd2547b8","observation_id":"7fac87e7-2c55-4821-9945-4ebcb53114c3","resolution":{"observed_at":"2026-08-09T00:50:00.748849Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.01109","last_updated":"2024-11-24T20:09:55Z","snapshot_observed_at":"2026-08-09T03:27:51.346195Z","submitted_at":"2024-02-02T02:56:50Z","title":"Vaccine: Perturbation-aware Alignment for Large Language Models against Harmful Fine-tuning Attack","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.01109","snapshot_observed_at":"2026-08-08T21:06:55.895736Z","title":"Vaccine: Perturbation-aware alignment for large language model","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.05242","last_updated":"2026-05-27T09:11:42Z","snapshot_observed_at":"2026-08-08T20:58:31.381100Z","submitted_at":"2025-02-07T13:25:33Z","title":"Beyond External Monitors: Enhancing Transparency of Large Language Models for Easier Monitoring","version":3},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-08T21:06:55.895736Z"},"links":{"cited_paper":"/paper/2402.01109","citing_paper":"/paper/2502.05242"},"observation_digest":"sha256:510e2b268c708fc760fc476698a01ad71332481d1a582cba8987c2374c36c6fe","observation_id":"10957a03-58f7-494b-875c-b555402d289d","resolution":{"observed_at":"2026-08-08T21:06:55.895736Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.01109","last_updated":"2024-11-24T20:09:55Z","snapshot_observed_at":"2026-08-09T03:27:51.346195Z","submitted_at":"2024-02-02T02:56:50Z","title":"Vaccine: Perturbation-aware Alignment for Large Language Models against Harmful Fine-tuning Attack","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.01109","snapshot_observed_at":"2026-08-08T12:54:03.600113Z","title":"Vaccine: Perturbation-aware alignment for large language mod- els against harmful fine-tuning attack","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.07847","last_updated":"2025-04-08T07:54:30Z","snapshot_observed_at":"2026-08-09T03:28:13.123656Z","submitted_at":"2025-02-11T10:10:15Z","title":"Confidence-calibrated covariate shift correction for few-shot classification in Vision-Language Models","version":2},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-08T12:54:03.600113Z"},"links":{"cited_paper":"/paper/2402.01109","citing_paper":"/paper/2502.07847"},"observation_digest":"sha256:53c40d0ecf88b50868b5fbf8dcd4f047f0f1a513003e2c2b3f8755cc94eecc68","observation_id":"033f9a1f-5695-4456-8e8d-f071d4548b03","resolution":{"observed_at":"2026-08-08T12:54:03.600113Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.01109","last_updated":"2024-11-24T20:09:55Z","snapshot_observed_at":"2026-08-09T03:27:51.346195Z","submitted_at":"2024-02-02T02:56:50Z","title":"Vaccine: Perturbation-aware Alignment for Large Language Models against Harmful Fine-tuning Attack","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.01109","snapshot_observed_at":"2026-08-07T10:58:30.014066Z","title":"Vaccine: Perturbation-aware alignment for large language model","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.03850","last_updated":"2025-08-12T10:16:47Z","snapshot_observed_at":"2026-08-08T08:07:29.820388Z","submitted_at":"2025-06-04T11:33:36Z","title":"Vulnerability-Aware Alignment: Mitigating Uneven Forgetting in Harmful Fine-Tuning","version":2},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-07T10:58:30.014066Z"},"links":{"cited_paper":"/paper/2402.01109","citing_paper":"/paper/2506.03850"},"observation_digest":"sha256:495597dd1d6f192685a550b803fde2828f50bf5fb52654dc7fe4c7b45c4af806","observation_id":"2b67a653-2ba4-40ac-b187-9c56cd80cf82","resolution":{"observed_at":"2026-08-07T10:58:30.014066Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.01109","last_updated":"2024-11-24T20:09:55Z","snapshot_observed_at":"2026-08-09T03:27:51.346195Z","submitted_at":"2024-02-02T02:56:50Z","title":"Vaccine: Perturbation-aware Alignment for Large Language Models against Harmful Fine-tuning Attack","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.01109","snapshot_observed_at":"2026-08-05T15:19:14.824759Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.20032","last_updated":"2025-08-27T16:34:53Z","snapshot_observed_at":"2026-08-08T17:19:15.347088Z","submitted_at":"2025-08-27T16:34:53Z","title":"Pruning Strategies for Backdoor Defense in LLMs","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-05T15:19:14.824759Z"},"links":{"cited_paper":"/paper/2402.01109","citing_paper":"/paper/2508.20032"},"observation_digest":"sha256:77c3a5487256387a40b27954c2a0f6c8bf913df183d5624dff5eb7ada7834ff1","observation_id":"a521e85b-7b41-4784-af85-e7f92484a749","resolution":{"observed_at":"2026-08-05T15:19:14.824759Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.01109","last_updated":"2024-11-24T20:09:55Z","snapshot_observed_at":"2026-08-09T03:27:51.346195Z","submitted_at":"2024-02-02T02:56:50Z","title":"Vaccine: Perturbation-aware Alignment for Large Language Models against Harmful Fine-tuning Attack","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.01109","snapshot_observed_at":"2026-08-04T23:10:21.147643Z","title":"Vaccine: Perturbation-aware alignment for large language models against harmful fine-tuning attack,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.06795","last_updated":"2025-09-08T15:24:33Z","snapshot_observed_at":"2026-08-06T11:18:33.345942Z","submitted_at":"2025-09-08T15:24:33Z","title":"Anchoring Refusal Direction: Mitigating Safety Risks in Tuning via Projection Constraint","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-04T23:10:21.147643Z"},"links":{"cited_paper":"/paper/2402.01109","citing_paper":"/paper/2509.06795"},"observation_digest":"sha256:7e03f310bc1de500b8f1cbfbe57b2dc848c7a16d3a6963f3315a63d84a5538a4","observation_id":"91370596-4b2b-48e6-ba81-91dddc291a36","resolution":{"observed_at":"2026-08-04T23:10:21.147643Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.01109","last_updated":"2024-11-24T20:09:55Z","snapshot_observed_at":"2026-08-09T03:27:51.346195Z","submitted_at":"2024-02-02T02:56:50Z","title":"Vaccine: Perturbation-aware Alignment for Large Language Models against Harmful Fine-tuning Attack","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.01109","snapshot_observed_at":"2026-08-04T23:09:41.483523Z","title":"Vaccine: Perturbation-aware alignment for large language models against harmful fine-tuning attack,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.06807","last_updated":"2025-09-08T15:39:17Z","snapshot_observed_at":"2026-08-09T10:59:34.311406Z","submitted_at":"2025-09-08T15:39:17Z","title":"MoGU V2: Toward a Higher Pareto Frontier Between Model Usability and Security","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-04T23:09:41.483523Z"},"links":{"cited_paper":"/paper/2402.01109","citing_paper":"/paper/2509.06807"},"observation_digest":"sha256:b5f7c1d462d5316dd74f49f3f02159e14f601f4d532d98286acf6dc849d60043","observation_id":"10a3c887-315a-40de-a43f-b04723e1dbe2","resolution":{"observed_at":"2026-08-04T23:09:41.483523Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2402.01109/citation-record","integrity":"/paper/2402.01109/integrity","json":"/paper/2402.01109/citation-record.json","paper":"/paper/2402.01109"},"outbound":[],"paper":{"arxiv_id":"2402.01109","last_updated":"2024-11-24T20:09:55Z","latest_version":6,"primary_category":"cs.LG","snapshot_observed_at":"2026-08-09T03:27:51.346195Z","submitted_at":"2024-02-02T02:56:50Z","title":"Vaccine: Perturbation-aware Alignment for Large Language Models against Harmful Fine-tuning Attack"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 8 inbound Pith citation observations for arXiv:2402.01109."}