{"as_of":"2026-08-19T14:38:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:6eac337a0ea0c2845f8890125475404e9dc514f2db8ca79622ead447ce9c5c47","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":43,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":43,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-19T06:32:44.657259+00:00","state":"measured"},{"denominator":43,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":43,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-16T11:37:23.923474Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":1,"source":"arxiv_reference","source_observed_at":"2026-08-05T02:28:24.338817Z","state":"measured"}],"external_citation_measurements":[{"count":7,"observed_at":"2026-08-05T02:28:24.338817Z","source":"arxiv_reference"}],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2403.06634","last_updated":"2024-07-09T17:44:00Z","snapshot_observed_at":"2026-08-16T14:11:01.433444Z","submitted_at":"2024-03-11T11:46:12Z","title":"Stealing Part of a Production Language Model","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.06634","snapshot_observed_at":"2026-08-12T20:36:01.431273Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.09523","last_updated":"2024-11-14T15:40:04Z","snapshot_observed_at":"2026-08-17T21:48:32.577209Z","submitted_at":"2024-11-14T15:40:04Z","title":"Navigating the Risks: A Survey of Security, Privacy, and Ethics Threats in LLM-Based Agents","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-12T20:36:01.431273Z"},"links":{"cited_paper":"/paper/2403.06634","citing_paper":"/paper/2411.09523"},"observation_digest":"sha256:4c097240aa2b775b99ed4eca8c0ac2cf19cfcfe302e92d53ae697b773e86118e","observation_id":"324200b2-0390-47cc-a1a0-5a19ca5ab790","resolution":{"observed_at":"2026-08-12T20:36:01.431273Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.06634","last_updated":"2024-07-09T17:44:00Z","snapshot_observed_at":"2026-08-16T14:11:01.433444Z","submitted_at":"2024-03-11T11:46:12Z","title":"Stealing Part of a Production Language Model","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.06634","snapshot_observed_at":"2026-08-12T19:38:26.367067Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.10541","last_updated":"2024-11-15T19:26:38Z","snapshot_observed_at":"2026-08-18T14:24:29.534694Z","submitted_at":"2024-11-15T19:26:38Z","title":"Does Prompt Formatting Have Any Impact on LLM Performance?","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-12T19:38:26.367067Z"},"links":{"cited_paper":"/paper/2403.06634","citing_paper":"/paper/2411.10541"},"observation_digest":"sha256:4fca7f4aa18b2e2cc269387fcd4fa06201fee3e337a75feb9063538c83e4e289","observation_id":"c9f6403f-12c6-4879-a935-d77cd372941d","resolution":{"observed_at":"2026-08-12T19:38:26.367067Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.06634","last_updated":"2024-07-09T17:44:00Z","snapshot_observed_at":"2026-08-16T14:11:01.433444Z","submitted_at":"2024-03-11T11:46:12Z","title":"Stealing Part of a Production Language Model","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.06634","snapshot_observed_at":"2026-08-12T19:37:34.866373Z","title":"Stealing part of a production language model","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.10547","last_updated":"2024-12-01T13:41:44Z","snapshot_observed_at":"2026-08-18T10:33:57.499444Z","submitted_at":"2024-11-15T19:44:59Z","title":"AI Safety Frameworks Should Include Procedures for Model Access Decisions","version":2},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-12T19:37:34.866373Z"},"links":{"cited_paper":"/paper/2403.06634","citing_paper":"/paper/2411.10547"},"observation_digest":"sha256:297b30ef903b56ad6dc3b69c6a3437c9303a063f1c12a23fc63718bd97328884","observation_id":"759ef61a-2a82-4dc0-a07b-7d583a0bdf4a","resolution":{"observed_at":"2026-08-12T19:37:34.866373Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.06634","last_updated":"2024-07-09T17:44:00Z","snapshot_observed_at":"2026-08-16T14:11:01.433444Z","submitted_at":"2024-03-11T11:46:12Z","title":"Stealing Part of a Production Language Model","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.06634","snapshot_observed_at":"2026-08-12T05:00:04.307866Z","title":"Stealing Part of a Production Language Model","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.00836","last_updated":"2024-12-01T14:59:07Z","snapshot_observed_at":"2026-08-17T13:21:12.199697Z","submitted_at":"2024-12-01T14:59:07Z","title":"Position Paper: Model Access should be a Key Concern in AI Governance","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-12T05:00:04.307866Z"},"links":{"cited_paper":"/paper/2403.06634","citing_paper":"/paper/2412.00836"},"observation_digest":"sha256:3b0944cda8e13535c806346f59482376b5f5a5302e9e2fd2428b70de104698a7","observation_id":"c546f038-1618-45cb-84fd-3bc79161a0be","resolution":{"observed_at":"2026-08-12T05:00:04.307866Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.06634","last_updated":"2024-07-09T17:44:00Z","snapshot_observed_at":"2026-08-16T14:11:01.433444Z","submitted_at":"2024-03-11T11:46:12Z","title":"Stealing Part of a Production Language Model","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.06634","snapshot_observed_at":"2026-08-11T20:30:10.200969Z","title":"Patrick Chao, Alexander Robey, Edgar Dobriban, Hamed Hassani, George J Pappas, and Eric Wong","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2412.05734","last_updated":"2025-08-08T09:27:21Z","snapshot_observed_at":"2026-08-19T14:08:58.701649Z","submitted_at":"2024-12-07T20:09:01Z","title":"LeakAgent: RL-based Red-teaming Agent for LLM Privacy Leakage","version":2},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-11T20:30:10.200969Z"},"links":{"cited_paper":"/paper/2403.06634","citing_paper":"/paper/2412.05734"},"observation_digest":"sha256:8317ad74c719f0ea9252284e4dcb460554b54e32da37c05d344cb404c6e28527","observation_id":"1f9a7a37-d4ad-43c8-a9e1-3f578c733ef6","resolution":{"observed_at":"2026-08-11T20:30:10.200969Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.06634","last_updated":"2024-07-09T17:44:00Z","snapshot_observed_at":"2026-08-16T14:11:01.433444Z","submitted_at":"2024-03-11T11:46:12Z","title":"Stealing Part of a Production Language Model","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.06634","snapshot_observed_at":"2026-08-11T13:37:58.709784Z","title":"D.; Steinke, T.; Hayase, J.; Cooper, A","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.13021","last_updated":"2024-12-17T15:41:36Z","snapshot_observed_at":"2026-08-14T18:55:52.254963Z","submitted_at":"2024-12-17T15:41:36Z","title":"Queries, Representation & Detection: The Next 100 Model Fingerprinting Schemes","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-11T13:37:58.709784Z"},"links":{"cited_paper":"/paper/2403.06634","citing_paper":"/paper/2412.13021"},"observation_digest":"sha256:689d6d815893ac19d5e413d0ff61258e91e1b7d67731d2bc748de7c8d0a8dc5c","observation_id":"50598d84-6766-4d02-bba8-4313abe9643e","resolution":{"observed_at":"2026-08-11T13:37:58.709784Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.06634","last_updated":"2024-07-09T17:44:00Z","snapshot_observed_at":"2026-08-16T14:11:01.433444Z","submitted_at":"2024-03-11T11:46:12Z","title":"Stealing Part of a Production Language Model","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.06634","snapshot_observed_at":"2026-08-10T22:24:45.431429Z","title":"Stealing part of a production language model,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2501.01818","last_updated":"2025-01-03T14:03:14Z","snapshot_observed_at":"2026-08-14T06:31:57.081126Z","submitted_at":"2025-01-03T14:03:14Z","title":"Rerouting LLM Routers","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-10T22:24:45.431429Z"},"links":{"cited_paper":"/paper/2403.06634","citing_paper":"/paper/2501.01818"},"observation_digest":"sha256:d5205c1d1e7c1774c2c674c054966a34ffd4d3940a0c2ef8b5f974402c571690","observation_id":"21199f8f-cd14-411e-b796-7f97485b69b4","resolution":{"observed_at":"2026-08-10T22:24:45.431429Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.06634","last_updated":"2024-07-09T17:44:00Z","snapshot_observed_at":"2026-08-16T14:11:01.433444Z","submitted_at":"2024-03-11T11:46:12Z","title":"Stealing Part of a Production Language Model","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.06634","snapshot_observed_at":"2026-08-10T19:44:46.751961Z","title":"Stealing part of a production language model,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2501.09798","last_updated":"2025-05-10T02:36:13Z","snapshot_observed_at":"2026-08-17T19:46:00.323728Z","submitted_at":"2025-01-16T19:01:25Z","title":"Fun-tuning: Characterizing the Vulnerability of Proprietary LLMs to Optimization-based Prompt Injection Attacks via the Fine-Tuning Interface","version":2},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-10T19:44:46.751961Z"},"links":{"cited_paper":"/paper/2403.06634","citing_paper":"/paper/2501.09798"},"observation_digest":"sha256:e19b1f0026a78766a0f33d9344e50ae7161edae7724993353d858368eef3c96f","observation_id":"5e7e3a1c-59f7-475f-a08d-89bca95f164c","resolution":{"observed_at":"2026-08-10T19:44:46.751961Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.06634","last_updated":"2024-07-09T17:44:00Z","snapshot_observed_at":"2026-08-16T14:11:01.433444Z","submitted_at":"2024-03-11T11:46:12Z","title":"Stealing Part of a Production Language Model","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.06634","snapshot_observed_at":"2026-08-09T20:51:49.931701Z","title":"D., Steinke, T., Hayase, J., Cooper, A","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2501.19287","last_updated":"2025-01-31T16:48:38Z","snapshot_observed_at":"2026-08-17T18:19:11.023020Z","submitted_at":"2025-01-31T16:48:38Z","title":"Differentially Private In-context Learning via Sampling Few-shot Mixed with Zero-shot Outputs","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-09T20:51:49.931701Z"},"links":{"cited_paper":"/paper/2403.06634","citing_paper":"/paper/2501.19287"},"observation_digest":"sha256:6bb143066440c35a84a4043caf0fc16684b4071e4bbde4090275ce80d8266de9","observation_id":"62b9262a-9a08-4344-ae83-fb910a0907e2","resolution":{"observed_at":"2026-08-09T20:51:49.931701Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.06634","last_updated":"2024-07-09T17:44:00Z","snapshot_observed_at":"2026-08-16T14:11:01.433444Z","submitted_at":"2024-03-11T11:46:12Z","title":"Stealing Part of a Production Language Model","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.06634","snapshot_observed_at":"2026-08-07T20:53:28.387219Z","title":"D., Steinke, T., Hayase, J., Cooper, A","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.09619","last_updated":"2025-02-13T18:59:44Z","snapshot_observed_at":"2026-08-18T02:47:01.124563Z","submitted_at":"2025-02-13T18:59:44Z","title":"Can this Model Also Recognize Dogs? Zero-Shot Model Search from Weights","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-07T20:53:28.387219Z"},"links":{"cited_paper":"/paper/2403.06634","citing_paper":"/paper/2502.09619"},"observation_digest":"sha256:b7e43966c4e564ce136c159ff903e540994e2da706bff674b00263c4d26134d9","observation_id":"95873777-caaa-4f50-8c22-974f7cd15bb1","resolution":{"observed_at":"2026-08-07T20:53:28.387219Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.06634","last_updated":"2024-07-09T17:44:00Z","snapshot_observed_at":"2026-08-16T14:11:01.433444Z","submitted_at":"2024-03-11T11:46:12Z","title":"Stealing Part of a Production Language Model","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.06634","snapshot_observed_at":"2026-08-16T11:37:23.923474Z","title":"Feder Cooper, Katherine Lee, Matthew Jagielski, Milad Nasr, Arthur Conmy, Itay Yona, Eric Wallace, David Rolnick, and Florian Tramèr","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2504.15088","last_updated":"2025-04-21T13:20:56Z","snapshot_observed_at":"2026-08-18T19:05:00.682749Z","submitted_at":"2025-04-21T13:20:56Z","title":"Safety Co-Option and Compromised National Security: The Self-Fulfilling Prophecy of Weakened AI Risk Thresholds","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-16T11:37:23.923474Z"},"links":{"cited_paper":"/paper/2403.06634","citing_paper":"/paper/2504.15088"},"observation_digest":"sha256:9c1c82f8a344095da4630302e376ab938fe6662e8be92c6fdaae5a0a4ead7ca9","observation_id":"3ad216d6-77da-4380-99ad-2b5e500eeafd","resolution":{"observed_at":"2026-08-16T11:37:23.923474Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.06634","last_updated":"2024-07-09T17:44:00Z","snapshot_observed_at":"2026-08-16T14:11:01.433444Z","submitted_at":"2024-03-11T11:46:12Z","title":"Stealing Part of a Production Language Model","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.06634","snapshot_observed_at":"2026-08-15T23:23:39.833907Z","title":"”Stealing Part of a Production Language Model” arXiv preprint arXiv:2403.06634 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.04806","last_updated":"2025-05-13T05:36:34Z","snapshot_observed_at":"2026-08-16T21:53:39.240862Z","submitted_at":"2025-05-07T21:15:40Z","title":"Red Teaming the Mind of the Machine: A Systematic Evaluation of Prompt Injection and Jailbreak Vulnerabilities in LLMs","version":2},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-15T23:23:39.833907Z"},"links":{"cited_paper":"/paper/2403.06634","citing_paper":"/paper/2505.04806"},"observation_digest":"sha256:969148212610845e588a8e4b812dd080fd569efb25a5563f8fdcf41f9124ba6a","observation_id":"53716b10-733f-4ed7-8eeb-e954633f1122","resolution":{"observed_at":"2026-08-15T23:23:39.833907Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.06634","last_updated":"2024-07-09T17:44:00Z","snapshot_observed_at":"2026-08-16T14:11:01.433444Z","submitted_at":"2024-03-11T11:46:12Z","title":"Stealing Part of a Production Language Model","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.06634","snapshot_observed_at":"2026-08-15T22:45:02.187478Z","title":"(July 2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.06464","last_updated":"2025-05-09T23:16:44Z","snapshot_observed_at":"2026-08-18T10:34:01.324281Z","submitted_at":"2025-05-09T23:16:44Z","title":"Opening the Scope of Openness in AI","version":1},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-15T22:45:02.187478Z"},"links":{"cited_paper":"/paper/2403.06634","citing_paper":"/paper/2505.06464"},"observation_digest":"sha256:ced14c5add41bb4b134a908338ad55460c17d1efccfe6b5ba24d2b787859ae42","observation_id":"55c0d075-6f24-4aaa-af3b-a0fc6343dfa6","resolution":{"observed_at":"2026-08-15T22:45:02.187478Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.06634","last_updated":"2024-07-09T17:44:00Z","snapshot_observed_at":"2026-08-16T14:11:01.433444Z","submitted_at":"2024-03-11T11:46:12Z","title":"Stealing Part of a Production Language Model","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.06634","snapshot_observed_at":"2026-08-15T20:16:09.316325Z","title":"Stealing part of a production language model","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.13819","last_updated":"2025-05-20T01:58:43Z","snapshot_observed_at":"2026-08-16T20:25:58.624573Z","submitted_at":"2025-05-20T01:58:43Z","title":"Fragments to Facts: Partial-Information Fragment Inference from LLMs","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-15T20:16:09.316325Z"},"links":{"cited_paper":"/paper/2403.06634","citing_paper":"/paper/2505.13819"},"observation_digest":"sha256:8176e1b52432c5b424274fba94ac5d09fe2ba78c6bb4f9e229650d901879852d","observation_id":"73e0720e-0a6e-4fac-8b0b-2be1b247db27","resolution":{"observed_at":"2026-08-15T20:16:09.316325Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.06634","last_updated":"2024-07-09T17:44:00Z","snapshot_observed_at":"2026-08-16T14:11:01.433444Z","submitted_at":"2024-03-11T11:46:12Z","title":"Stealing Part of a Production Language Model","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.06634","snapshot_observed_at":"2026-08-07T14:34:34.779319Z","title":"Stealing part of a production language model","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.18471","last_updated":"2025-05-24T02:26:49Z","snapshot_observed_at":"2026-08-13T07:44:36.929674Z","submitted_at":"2025-05-24T02:26:49Z","title":"Invisible Tokens, Visible Bills: The Urgent Need to Audit Hidden Operations in Opaque LLM Services","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T14:34:34.779319Z"},"links":{"cited_paper":"/paper/2403.06634","citing_paper":"/paper/2505.18471"},"observation_digest":"sha256:b8e9c649fd8365c2a4407ce05928381f44cf7dfab2860327f0796ed9f8f4a9a2","observation_id":"1e05a6e3-11f7-41e4-af7b-2d666af5c970","resolution":{"observed_at":"2026-08-07T14:34:34.779319Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.06634","last_updated":"2024-07-09T17:44:00Z","snapshot_observed_at":"2026-08-16T14:11:01.433444Z","submitted_at":"2024-03-11T11:46:12Z","title":"Stealing Part of a Production Language Model","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.06634","snapshot_observed_at":"2026-08-07T14:26:34.918711Z","title":"Feder Cooper, Katherine Lee, Matthew Jagielski, Milad Nasr, Arthur Conmy, Itay Yona, Eric Wallace, David Rolnick, and Florian Tramèr","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.18893","last_updated":"2025-05-30T14:09:51Z","snapshot_observed_at":"2026-08-14T21:28:10.945060Z","submitted_at":"2025-05-24T22:35:32Z","title":"Reality Check: A New Evaluation Ecosystem Is Necessary to Understand AI's Real World Effects","version":4},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-07T14:26:34.918711Z"},"links":{"cited_paper":"/paper/2403.06634","citing_paper":"/paper/2505.18893"},"observation_digest":"sha256:cb2bd08d2417d00ae2162832276b4e9f165b418dee501123ec1231b029e30fe1","observation_id":"76c89e6d-1f98-451e-ba59-bb9b2433b228","resolution":{"observed_at":"2026-08-07T14:26:34.918711Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.06634","last_updated":"2024-07-09T17:44:00Z","snapshot_observed_at":"2026-08-16T14:11:01.433444Z","submitted_at":"2024-03-11T11:46:12Z","title":"Stealing Part of a Production Language Model","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.06634","snapshot_observed_at":"2026-08-06T23:58:58.659790Z","title":"Feder Cooper, Katherine Lee, Matthew Jagielski, Milad Nasr, Arthur Conmy, Itay Yona, Eric Wallace, David Rolnick, and Florian Tramèr","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.15553","last_updated":"2025-06-18T15:26:43Z","snapshot_observed_at":"2026-08-08T20:05:57.585673Z","submitted_at":"2025-06-18T15:26:43Z","title":"Approximating Language Model Training Data from Weights","version":1},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-06T23:58:58.659790Z"},"links":{"cited_paper":"/paper/2403.06634","citing_paper":"/paper/2506.15553"},"observation_digest":"sha256:91087331207b0a8b85827c1a36b09a2d4fffdea5e8f75065dfe6f02d6faf7ffd","observation_id":"381bac5a-b44b-42a5-9686-fd745ce10bd0","resolution":{"observed_at":"2026-08-06T23:58:58.659790Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.06634","last_updated":"2024-07-09T17:44:00Z","snapshot_observed_at":"2026-08-16T14:11:01.433444Z","submitted_at":"2024-03-11T11:46:12Z","title":"Stealing Part of a Production Language Model","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.06634","snapshot_observed_at":"2026-08-06T23:01:43.167408Z","title":"Carlini, D","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.22492","last_updated":"2025-06-24T18:55:29Z","snapshot_observed_at":"2026-08-14T16:38:26.124742Z","submitted_at":"2025-06-24T18:55:29Z","title":"Report on NSF Workshop on Science of Safe AI","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-06T23:01:43.167408Z"},"links":{"cited_paper":"/paper/2403.06634","citing_paper":"/paper/2506.22492"},"observation_digest":"sha256:bb1226ab382a95607ca197f824cf516c4a1d84dc22c50939916351a2ecc959f3","observation_id":"98a5c5b6-44fb-4307-84e4-ad3e27534878","resolution":{"observed_at":"2026-08-06T23:01:43.167408Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.06634","last_updated":"2024-07-09T17:44:00Z","snapshot_observed_at":"2026-08-16T14:11:01.433444Z","submitted_at":"2024-03-11T11:46:12Z","title":"Stealing Part of a Production Language Model","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.06634","snapshot_observed_at":"2026-08-06T22:23:07.379249Z","title":"Feder Cooper, Katherine Lee, Matthew Jagielski, Milad Nasr, Arthur Conmy, Itay Yona, Eric Wallace, David Rolnick, and Florian Tram‘er","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-17T10:14:30.703303Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:07.379249Z"},"links":{"cited_paper":"/paper/2403.06634","citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:62ff580ae991d8a4ff3a81a064c36166884c9ac4550f17e993017bdf19de24e9","observation_id":"595b52f3-0a8b-46de-9fde-a94212a96ecb","resolution":{"observed_at":"2026-08-06T22:23:07.379249Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.06634","last_updated":"2024-07-09T17:44:00Z","snapshot_observed_at":"2026-08-16T14:11:01.433444Z","submitted_at":"2024-03-11T11:46:12Z","title":"Stealing Part of a Production Language Model","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.06634","snapshot_observed_at":"2026-08-06T21:45:00.538286Z","title":"D., Steinke, T., Hayase, J., Cooper, A","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23706","last_updated":"2025-06-30T10:29:42Z","snapshot_observed_at":"2026-08-14T11:00:26.968683Z","submitted_at":"2025-06-30T10:29:42Z","title":"Attestable Audits: Verifiable AI Safety Benchmarks Using Trusted Execution Environments","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-06T21:45:00.538286Z"},"links":{"cited_paper":"/paper/2403.06634","citing_paper":"/paper/2506.23706"},"observation_digest":"sha256:d7569526e67361187798c63d74e7f26a33e8db39e2ce1f2f414b9a0f7046b849","observation_id":"18b7d635-0fdc-43d2-afeb-2ad65315a2bb","resolution":{"observed_at":"2026-08-06T21:45:00.538286Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.06634","last_updated":"2024-07-09T17:44:00Z","snapshot_observed_at":"2026-08-16T14:11:01.433444Z","submitted_at":"2024-03-11T11:46:12Z","title":"Stealing Part of a Production Language Model","version":2},"cited_work":{"arxiv_id":"2403.06634","doi":"10.48550/arxiv.2403.06634","metadata_source":"arxiv_reference","pith_arxiv_id":"2403.06634","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Stealing part of a production language model.arXiv preprint arXiv:2403.06634","venue":"arXiv (Cornell University)","work_id":"0ab070c2-82e2-41d8-8d46-379236a08dbe","year":2024},"citing_paper":{"arxiv_id":"2507.02850","last_updated":"2026-04-20T16:20:19Z","snapshot_observed_at":"2026-08-17T02:21:16.409356Z","submitted_at":"2025-07-03T17:55:40Z","title":"LLM Hypnosis: Exploiting User Feedback for Unauthorized Knowledge Injection to All Users","version":3},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-05-19T05:58:17.452837Z"},"links":{"cited_paper":"/paper/2403.06634","citing_paper":"/paper/2507.02850"},"observation_digest":"sha256:50cd433454ffa0d378fb08f9aa27f8b7dbe91c7d8f200c5ed0ab56b5851db94a","observation_id":"e5178f43-11bb-42cb-9e4c-c56a29797357","resolution":{"observed_at":"2026-05-19T06:02:07.798930Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.06634","last_updated":"2024-07-09T17:44:00Z","snapshot_observed_at":"2026-08-16T14:11:01.433444Z","submitted_at":"2024-03-11T11:46:12Z","title":"Stealing Part of a Production Language Model","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.06634","snapshot_observed_at":"2026-08-06T17:21:33.552558Z","title":"arXiv:2403.06634 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.11128","last_updated":"2025-07-15T09:28:44Z","snapshot_observed_at":"2026-08-11T10:44:57.901509Z","submitted_at":"2025-07-15T09:28:44Z","title":"What Should LLMs Forget? Quantifying Personal Data in LLMs for Right-to-Be-Forgotten Requests","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-06T17:21:33.552558Z"},"links":{"cited_paper":"/paper/2403.06634","citing_paper":"/paper/2507.11128"},"observation_digest":"sha256:a5d0ebb03e44efcda72747e0202fa44da32c0f667bf4705d91c41b75c8c8fa34","observation_id":"1b0a2967-6868-4495-8b81-46222b80ce65","resolution":{"observed_at":"2026-08-06T17:21:33.552558Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.06634","last_updated":"2024-07-09T17:44:00Z","snapshot_observed_at":"2026-08-16T14:11:01.433444Z","submitted_at":"2024-03-11T11:46:12Z","title":"Stealing Part of a Production Language Model","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.06634","snapshot_observed_at":"2026-08-06T14:22:38.225032Z","title":"Stealing Part of a Production Language Model","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.19567","last_updated":"2025-07-25T16:40:17Z","snapshot_observed_at":"2026-08-15T01:27:28.190750Z","submitted_at":"2025-07-25T16:40:17Z","title":"Differentiating hype from practical applications of large language models in medicine -- a primer for healthcare professionals","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-06T14:22:38.225032Z"},"links":{"cited_paper":"/paper/2403.06634","citing_paper":"/paper/2507.19567"},"observation_digest":"sha256:ae2d44d5a13fa5f69642861ec63943b3ecd940a3c4f86035cb76725e85cdd3b2","observation_id":"d6cc971b-6990-4a4d-bb36-32a0697f54b7","resolution":{"observed_at":"2026-08-06T14:22:38.225032Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.06634","last_updated":"2024-07-09T17:44:00Z","snapshot_observed_at":"2026-08-16T14:11:01.433444Z","submitted_at":"2024-03-11T11:46:12Z","title":"Stealing Part of a Production Language Model","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.06634","snapshot_observed_at":"2026-08-05T20:31:43.751972Z","title":"Feder Cooper, Katherine Lee, Matthew Jagielski, Milad Nasr, Arthur Conmy, Itay Yona, Eric Wallace, David Rolnick, and Florian Tramèr","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.10404","last_updated":"2025-08-14T07:12:44Z","snapshot_observed_at":"2026-08-18T11:11:26.991132Z","submitted_at":"2025-08-14T07:12:44Z","title":"Layer-Wise Perturbations via Sparse Autoencoders for Adversarial Text Generation","version":1},"reference_index":117,"source":"pdf_text","source_observed_at":"2026-08-05T20:31:43.751972Z"},"links":{"cited_paper":"/paper/2403.06634","citing_paper":"/paper/2508.10404"},"observation_digest":"sha256:83747a40d26b243ad34ad5ee5f2d252752c5047690305aab3b0a2780dc9f5bde","observation_id":"8ae517b6-acfb-4e47-a9c9-c69450885e54","resolution":{"observed_at":"2026-08-05T20:31:43.751972Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.06634","last_updated":"2024-07-09T17:44:00Z","snapshot_observed_at":"2026-08-16T14:11:01.433444Z","submitted_at":"2024-03-11T11:46:12Z","title":"Stealing Part of a Production Language Model","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.06634","snapshot_observed_at":"2026-08-05T19:39:09.558565Z","title":"Stealing part of a production language model","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.12175","last_updated":"2025-08-16T22:56:51Z","snapshot_observed_at":"2026-08-17T21:01:26.853677Z","submitted_at":"2025-08-16T22:56:51Z","title":"Invitation Is All You Need! Promptware Attacks Against LLM-Powered Assistants in Production Are Practical and Dangerous","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-05T19:39:09.558565Z"},"links":{"cited_paper":"/paper/2403.06634","citing_paper":"/paper/2508.12175"},"observation_digest":"sha256:55602fb75218b37e6b68729e560f6ea66c40a3ac3f25fc58916449ebbb4de37d","observation_id":"8b0fc8b7-9127-4251-8ab1-858a626df843","resolution":{"observed_at":"2026-08-05T19:39:09.558565Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.06634","last_updated":"2024-07-09T17:44:00Z","snapshot_observed_at":"2026-08-16T14:11:01.433444Z","submitted_at":"2024-03-11T11:46:12Z","title":"Stealing Part of a Production Language Model","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.06634","snapshot_observed_at":"2026-08-05T18:12:36.156283Z","title":"Feder Cooper, Katherine Lee, Matthew Jagielski, Milad Nasr, Arthur Conmy, Itay Yona, Eric Wallace, David Rolnick, and Florian Tram‘er","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-14T23:52:31.572833Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:36.156283Z"},"links":{"cited_paper":"/paper/2403.06634","citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:975bebbdb2094cb551e1fa94c9ac78db8002d9409e8b79434279a302f53959bb","observation_id":"fb9fe567-86a7-4880-ac39-825b1a7a7b1f","resolution":{"observed_at":"2026-08-05T18:12:36.156283Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.06634","last_updated":"2024-07-09T17:44:00Z","snapshot_observed_at":"2026-08-16T14:11:01.433444Z","submitted_at":"2024-03-11T11:46:12Z","title":"Stealing Part of a Production Language Model","version":2},"cited_work":{"arxiv_id":"2403.06634","doi":"10.48550/arxiv.2403.06634","metadata_source":"arxiv_reference","pith_arxiv_id":"2403.06634","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Stealing part of a production language model.arXiv preprint arXiv:2403.06634","venue":"arXiv (Cornell University)","work_id":"0ab070c2-82e2-41d8-8d46-379236a08dbe","year":2024},"citing_paper":{"arxiv_id":"2509.25448","last_updated":"2026-05-19T03:11:28Z","snapshot_observed_at":"2026-08-17T07:16:17.583079Z","submitted_at":"2025-09-29T19:54:36Z","title":"Fingerprinting LLMs via Prompt Injection","version":3},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-05-21T21:29:26.153307Z"},"links":{"cited_paper":"/paper/2403.06634","citing_paper":"/paper/2509.25448"},"observation_digest":"sha256:0b2fe629b80bbf7edebde7d348380e5a8482a932f120410f7622f620c71a0a66","observation_id":"7f7ae2e8-8747-41c1-babe-7158987e99cc","resolution":{"observed_at":"2026-05-21T21:30:39.350060Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.06634","last_updated":"2024-07-09T17:44:00Z","snapshot_observed_at":"2026-08-16T14:11:01.433444Z","submitted_at":"2024-03-11T11:46:12Z","title":"Stealing Part of a Production Language Model","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.06634","snapshot_observed_at":"2026-08-03T20:28:51.160758Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2511.19711","last_updated":"2026-07-23T20:56:40Z","snapshot_observed_at":"2026-08-12T12:23:43.374800Z","submitted_at":"2025-11-24T21:21:55Z","title":"CrypTorch: PyTorch-based Auto-tuning Compiler for Machine Learning with Multi-party Computation","version":2},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-03T20:28:51.160758Z"},"links":{"cited_paper":"/paper/2403.06634","citing_paper":"/paper/2511.19711"},"observation_digest":"sha256:ea36a23d6e8d373db0008e931ca3652fa2bc0e8c665cfe5cb3244bf0927148c2","observation_id":"3f63330e-4d56-4554-83f7-a46df38057f5","resolution":{"observed_at":"2026-08-03T20:28:51.160758Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.06634","last_updated":"2024-07-09T17:44:00Z","snapshot_observed_at":"2026-08-16T14:11:01.433444Z","submitted_at":"2024-03-11T11:46:12Z","title":"Stealing Part of a Production Language Model","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.06634","snapshot_observed_at":"2026-07-15T13:15:31.225992Z","title":"Stealing part of a production language model,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2603.07457","last_updated":"2026-03-08T04:16:06Z","snapshot_observed_at":"2026-08-16T15:58:52.300691Z","submitted_at":"2026-03-08T04:16:06Z","title":"How Well Do AI Systems Solve AP Physics? A Comparative Evaluation of Large Language Models on Algebra-Based Free Response Questions","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-07-15T13:15:31.225992Z"},"links":{"cited_paper":"/paper/2403.06634","citing_paper":"/paper/2603.07457"},"observation_digest":"sha256:600349757e85117b6c67d89cf2f124e680f66e307010a40cc41f01dc24cbc31f","observation_id":"c64fe9a5-af37-4d5a-af0c-d61d304bbd01","resolution":{"observed_at":"2026-07-15T13:15:31.225992Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.06634","last_updated":"2024-07-09T17:44:00Z","snapshot_observed_at":"2026-08-16T14:11:01.433444Z","submitted_at":"2024-03-11T11:46:12Z","title":"Stealing Part of a Production Language Model","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.06634","snapshot_observed_at":"2026-07-13T22:20:23.676745Z","title":"URL https://www.usenix.org/conference/usenixsecuri ty21/presentation/carlini-extracting","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2603.18908","last_updated":"2026-05-25T12:02:45Z","snapshot_observed_at":"2026-08-14T18:55:46.241724Z","submitted_at":"2026-03-19T13:43:32Z","title":"Characterizing Linear Alignment Across Language Models","version":4},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-07-13T22:20:23.676745Z"},"links":{"cited_paper":"/paper/2403.06634","citing_paper":"/paper/2603.18908"},"observation_digest":"sha256:21d80f0eebf06b81c52f1427a81327ef55401f861057abbee29de269104570d0","observation_id":"95a0a283-8970-463a-a036-3aa3001dabfc","resolution":{"observed_at":"2026-07-13T22:20:23.676745Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.06634","last_updated":"2024-07-09T17:44:00Z","snapshot_observed_at":"2026-08-16T14:11:01.433444Z","submitted_at":"2024-03-11T11:46:12Z","title":"Stealing Part of a Production Language Model","version":2},"cited_work":{"arxiv_id":"2403.06634","doi":"10.48550/arxiv.2403.06634","metadata_source":"arxiv_reference","pith_arxiv_id":"2403.06634","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Stealing part of a production language model.arXiv preprint arXiv:2403.06634","venue":"arXiv (Cornell University)","work_id":"0ab070c2-82e2-41d8-8d46-379236a08dbe","year":2024},"citing_paper":{"arxiv_id":"2604.23338","last_updated":"2026-05-06T17:17:02Z","snapshot_observed_at":"2026-08-06T19:46:39.219000Z","submitted_at":"2026-04-25T14:57:15Z","title":"A Systematic Survey of Security Threats and Defenses in LLM-Based AI Agents: A Layered Attack Surface Framework","version":2},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-05-08T07:53:13.746141Z"},"links":{"cited_paper":"/paper/2403.06634","citing_paper":"/paper/2604.23338"},"observation_digest":"sha256:c5b5acc51714203cf5c990e25b9ca30c37c61cb781327f66c6269f867ae3e808","observation_id":"58a334a5-cd02-4c1b-8a6a-72c40a4a69f2","resolution":{"observed_at":"2026-05-11T20:51:09.728099Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.06634","last_updated":"2024-07-09T17:44:00Z","snapshot_observed_at":"2026-08-16T14:11:01.433444Z","submitted_at":"2024-03-11T11:46:12Z","title":"Stealing Part of a Production Language Model","version":2},"cited_work":{"arxiv_id":"2403.06634","doi":"10.48550/arxiv.2403.06634","metadata_source":"arxiv_reference","pith_arxiv_id":"2403.06634","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Stealing part of a production language model.arXiv preprint arXiv:2403.06634","venue":"arXiv (Cornell University)","work_id":"0ab070c2-82e2-41d8-8d46-379236a08dbe","year":2024},"citing_paper":{"arxiv_id":"2605.04901","last_updated":"2026-05-06T13:31:15Z","snapshot_observed_at":"2026-08-13T01:01:31.154592Z","submitted_at":"2026-05-06T13:31:15Z","title":"On the (In-)Security of the Shuffling Defense in the Transformer Secure Inference","version":1},"reference_index":163,"source":"arxiv_source","source_observed_at":"2026-05-08T17:24:04.123827Z"},"links":{"cited_paper":"/paper/2403.06634","citing_paper":"/paper/2605.04901"},"observation_digest":"sha256:6f84d3159a81ba332ecc719f5eb92a817b162d1aa045f9316e326681380654fb","observation_id":"e00a2d22-2289-476c-9e5a-3f71f23555fe","resolution":{"observed_at":"2026-05-11T17:36:06.501167Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.06634","last_updated":"2024-07-09T17:44:00Z","snapshot_observed_at":"2026-08-16T14:11:01.433444Z","submitted_at":"2024-03-11T11:46:12Z","title":"Stealing Part of a Production Language Model","version":2},"cited_work":{"arxiv_id":"2403.06634","doi":"10.48550/arxiv.2403.06634","metadata_source":"arxiv_reference","pith_arxiv_id":"2403.06634","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Stealing part of a production language model.arXiv preprint arXiv:2403.06634","venue":"arXiv (Cornell University)","work_id":"0ab070c2-82e2-41d8-8d46-379236a08dbe","year":2024},"citing_paper":{"arxiv_id":"2605.11170","last_updated":"2026-06-02T13:57:02Z","snapshot_observed_at":"2026-08-02T02:13:17.912919Z","submitted_at":"2026-05-11T19:28:33Z","title":"Unlearning with Asymmetric Sources: Improved Unlearning-Utility Trade-off with Public Data","version":1},"reference_index":85,"source":"arxiv_source","source_observed_at":"2026-05-13T05:56:38.042978Z"},"links":{"cited_paper":"/paper/2403.06634","citing_paper":"/paper/2605.11170"},"observation_digest":"sha256:770d78042cf75fc8ef171590284f340eed73f02d89893d22d6dbd1acfa77a332","observation_id":"c310ef3d-748e-4d87-8fcf-70172becfe8a","resolution":{"observed_at":"2026-05-13T05:57:21.574789Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.06634","last_updated":"2024-07-09T17:44:00Z","snapshot_observed_at":"2026-08-16T14:11:01.433444Z","submitted_at":"2024-03-11T11:46:12Z","title":"Stealing Part of a Production Language Model","version":2},"cited_work":{"arxiv_id":"2403.06634","doi":"10.48550/arxiv.2403.06634","metadata_source":"arxiv_reference","pith_arxiv_id":"2403.06634","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Stealing part of a production language model.arXiv preprint arXiv:2403.06634","venue":"arXiv (Cornell University)","work_id":"0ab070c2-82e2-41d8-8d46-379236a08dbe","year":2024},"citing_paper":{"arxiv_id":"2605.30454","last_updated":"2026-05-28T18:26:40Z","snapshot_observed_at":"2026-08-12T14:46:06.128547Z","submitted_at":"2026-05-28T18:26:40Z","title":"The Surface You Test Is Not the Surface That Breaks","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-06-29T06:37:19.674012Z"},"links":{"cited_paper":"/paper/2403.06634","citing_paper":"/paper/2605.30454"},"observation_digest":"sha256:3bc354e98ebf1b5eb064b33e1d0a85aeadf9d44b4bc4d01c9af338926bf35160","observation_id":"3a8d368c-665a-4992-9445-d2efd5c3034a","resolution":{"observed_at":"2026-06-29T14:33:31.196589Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.06634","last_updated":"2024-07-09T17:44:00Z","snapshot_observed_at":"2026-08-16T14:11:01.433444Z","submitted_at":"2024-03-11T11:46:12Z","title":"Stealing Part of a Production Language Model","version":2},"cited_work":{"arxiv_id":"2403.06634","doi":"10.48550/arxiv.2403.06634","metadata_source":"arxiv_reference","pith_arxiv_id":"2403.06634","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Stealing part of a production language model.arXiv preprint arXiv:2403.06634","venue":"arXiv (Cornell University)","work_id":"0ab070c2-82e2-41d8-8d46-379236a08dbe","year":2024},"citing_paper":{"arxiv_id":"2606.06854","last_updated":"2026-06-05T02:57:48Z","snapshot_observed_at":"2026-08-15T20:08:33.096187Z","submitted_at":"2026-06-05T02:57:48Z","title":"The Geometry of Last-Layer Model Stealing","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-06-27T22:38:51.570323Z"},"links":{"cited_paper":"/paper/2403.06634","citing_paper":"/paper/2606.06854"},"observation_digest":"sha256:07f2febaa2e3bee50e49a23eca5e9b20ab45c619a451c48bb76b8fea43510f7e","observation_id":"6e1f4a1c-6ff8-432b-9b5f-226f5cf5d927","resolution":{"observed_at":"2026-07-02T16:27:09.535940Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.06634","last_updated":"2024-07-09T17:44:00Z","snapshot_observed_at":"2026-08-16T14:11:01.433444Z","submitted_at":"2024-03-11T11:46:12Z","title":"Stealing Part of a Production Language Model","version":2},"cited_work":{"arxiv_id":"2403.06634","doi":"10.48550/arxiv.2403.06634","metadata_source":"arxiv_reference","pith_arxiv_id":"2403.06634","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Stealing part of a production language model.arXiv preprint arXiv:2403.06634","venue":"arXiv (Cornell University)","work_id":"0ab070c2-82e2-41d8-8d46-379236a08dbe","year":2024},"citing_paper":{"arxiv_id":"2606.10091","last_updated":"2026-06-08T19:16:58Z","snapshot_observed_at":"2026-08-05T00:07:01.562006Z","submitted_at":"2026-06-08T19:16:58Z","title":"SoK: Colluding Adversaries in Machine Learning Pipelines","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-06-27T16:10:51.471822Z"},"links":{"cited_paper":"/paper/2403.06634","citing_paper":"/paper/2606.10091"},"observation_digest":"sha256:77a41626319921b4f136de30efbfac97392dbb8c49daafab57a7ad05462fd129","observation_id":"94efd86d-ba91-4802-af11-79be1c394e34","resolution":{"observed_at":"2026-07-03T02:07:33.530859Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.06634","last_updated":"2024-07-09T17:44:00Z","snapshot_observed_at":"2026-08-16T14:11:01.433444Z","submitted_at":"2024-03-11T11:46:12Z","title":"Stealing Part of a Production Language Model","version":2},"cited_work":{"arxiv_id":"2403.06634","doi":"10.48550/arxiv.2403.06634","metadata_source":"arxiv_reference","pith_arxiv_id":"2403.06634","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Stealing part of a production language model.arXiv preprint arXiv:2403.06634","venue":"arXiv (Cornell University)","work_id":"0ab070c2-82e2-41d8-8d46-379236a08dbe","year":2024},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-17T04:26:26.306136Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"cited_paper":"/paper/2403.06634","citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:5aba51d7423ca12c0254e01786a2ca2335b689a7cf00b7b00c7696ca80e1013c","observation_id":"bf19d2af-e8e1-4d36-a17c-4fc5c33f01bb","resolution":{"observed_at":"2026-07-03T18:28:49.722869Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.06634","last_updated":"2024-07-09T17:44:00Z","snapshot_observed_at":"2026-08-16T14:11:01.433444Z","submitted_at":"2024-03-11T11:46:12Z","title":"Stealing Part of a Production Language Model","version":2},"cited_work":{"arxiv_id":"2403.06634","doi":"10.48550/arxiv.2403.06634","metadata_source":"arxiv_reference","pith_arxiv_id":"2403.06634","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Stealing part of a production language model.arXiv preprint arXiv:2403.06634","venue":"arXiv (Cornell University)","work_id":"0ab070c2-82e2-41d8-8d46-379236a08dbe","year":2024},"citing_paper":{"arxiv_id":"2606.22019","last_updated":"2026-06-20T12:48:31Z","snapshot_observed_at":"2026-08-06T19:21:18.734073Z","submitted_at":"2026-06-20T12:48:31Z","title":"Channel Location Constrains the Auditability of Subliminal Learning","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-06-26T11:52:03.948568Z"},"links":{"cited_paper":"/paper/2403.06634","citing_paper":"/paper/2606.22019"},"observation_digest":"sha256:602623b04595855624ae28af2fcbc0e7ee02c31e4eb1d2cc746b45ef34a05357","observation_id":"83fcb56b-12d2-446f-92ad-13bf22621414","resolution":{"observed_at":"2026-07-04T08:19:44.429061Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.06634","last_updated":"2024-07-09T17:44:00Z","snapshot_observed_at":"2026-08-16T14:11:01.433444Z","submitted_at":"2024-03-11T11:46:12Z","title":"Stealing Part of a Production Language Model","version":2},"cited_work":{"arxiv_id":"2403.06634","doi":"10.48550/arxiv.2403.06634","metadata_source":"arxiv_reference","pith_arxiv_id":"2403.06634","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Stealing part of a production language model.arXiv preprint arXiv:2403.06634","venue":"arXiv (Cornell University)","work_id":"0ab070c2-82e2-41d8-8d46-379236a08dbe","year":2024},"citing_paper":{"arxiv_id":"2606.32008","last_updated":"2026-06-30T17:43:44Z","snapshot_observed_at":"2026-08-15T13:00:43.648729Z","submitted_at":"2026-06-30T17:43:44Z","title":"Surrogate Fidelity: When Can Open LLMs Explain Closed Ones?","version":1},"reference_index":56,"source":"arxiv_source","source_observed_at":"2026-07-01T06:15:42.011563Z"},"links":{"cited_paper":"/paper/2403.06634","citing_paper":"/paper/2606.32008"},"observation_digest":"sha256:82376976aadbc0b32633847fa0e6e1a8f188e73029c845b79a47e0073f3a5066","observation_id":"59e7817f-0402-4097-a72f-42a48e7716a3","resolution":{"observed_at":"2026-07-01T09:45:40.067713Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.06634","last_updated":"2024-07-09T17:44:00Z","snapshot_observed_at":"2026-08-16T14:11:01.433444Z","submitted_at":"2024-03-11T11:46:12Z","title":"Stealing Part of a Production Language Model","version":2},"cited_work":{"arxiv_id":"2403.06634","doi":"10.48550/arxiv.2403.06634","metadata_source":"arxiv_reference","pith_arxiv_id":"2403.06634","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Stealing part of a production language model.arXiv preprint arXiv:2403.06634","venue":"arXiv (Cornell University)","work_id":"0ab070c2-82e2-41d8-8d46-379236a08dbe","year":2024},"citing_paper":{"arxiv_id":"2607.01313","last_updated":"2026-07-01T17:53:10Z","snapshot_observed_at":"2026-08-17T16:44:52.735363Z","submitted_at":"2026-07-01T17:53:10Z","title":"Black-Box Inference of LLM Architectural Properties with Restrictive API Access","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-07-03T21:34:24.902867Z"},"links":{"cited_paper":"/paper/2403.06634","citing_paper":"/paper/2607.01313"},"observation_digest":"sha256:a4867a68597d717533d4314670af478138c7e6fe31a2dfded3c79f01ab4ad0b4","observation_id":"d6d491e5-9e09-4ed9-9c0a-f9c281da15ac","resolution":{"observed_at":"2026-07-03T21:38:58.167809Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.06634","last_updated":"2024-07-09T17:44:00Z","snapshot_observed_at":"2026-08-16T14:11:01.433444Z","submitted_at":"2024-03-11T11:46:12Z","title":"Stealing Part of a Production Language Model","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.06634","snapshot_observed_at":"2026-07-14T09:13:20.561611Z","title":"Stealing part of a production language model","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.10794","last_updated":"2026-07-12T15:05:04Z","snapshot_observed_at":"2026-08-14T09:58:27.493931Z","submitted_at":"2026-07-12T15:05:04Z","title":"Can Watermarking Techniques Help Prevent LLM Model Stealing?","version":1},"reference_index":61,"source":"arxiv_source","source_observed_at":"2026-07-14T09:13:20.561611Z"},"links":{"cited_paper":"/paper/2403.06634","citing_paper":"/paper/2607.10794"},"observation_digest":"sha256:f5ce2cbf14a42724de975e18db3cb6c797ec4fc28af86d24a394bbb8c959fc1f","observation_id":"3c42abf6-f1ef-4a00-b1dc-878cc251cc65","resolution":{"observed_at":"2026-07-14T09:13:20.561611Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.06634","last_updated":"2024-07-09T17:44:00Z","snapshot_observed_at":"2026-08-16T14:11:01.433444Z","submitted_at":"2024-03-11T11:46:12Z","title":"Stealing Part of a Production Language Model","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.06634","snapshot_observed_at":"2026-08-02T02:34:08.606939Z","title":"Stealing part of a production language model.arXiv preprint arXiv:2403.06634,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.14306","last_updated":"2026-08-01T03:22:14Z","snapshot_observed_at":"2026-08-16T11:19:45.685815Z","submitted_at":"2026-07-15T19:11:54Z","title":"Tracing LLM Behavior to the Training Data with Empirical Next-Token Distributions","version":1},"reference_index":2022,"source":"pdf_text","source_observed_at":"2026-08-02T02:34:08.606939Z"},"links":{"cited_paper":"/paper/2403.06634","citing_paper":"/paper/2607.14306"},"observation_digest":"sha256:032c6aea2756e92edafde030669b341eba4efd3d6c41c9a8ac0177aa1809ec79","observation_id":"d1692e84-1271-44fa-bb01-77d0f6edbccd","resolution":{"observed_at":"2026-08-02T02:34:08.606939Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.06634","last_updated":"2024-07-09T17:44:00Z","snapshot_observed_at":"2026-08-16T14:11:01.433444Z","submitted_at":"2024-03-11T11:46:12Z","title":"Stealing Part of a Production Language Model","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.06634","snapshot_observed_at":"2026-08-04T01:45:18.338994Z","title":"Stealing part of a production language model.arXiv preprint arXiv:2403.06634,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.14306","last_updated":"2026-08-01T03:22:14Z","snapshot_observed_at":"2026-08-16T11:19:45.685815Z","submitted_at":"2026-07-15T19:11:54Z","title":"Tracing LLM Behavior to the Training Data with Empirical Next-Token Distributions","version":2},"reference_index":2022,"source":"pdf_text","source_observed_at":"2026-08-04T01:45:18.338994Z"},"links":{"cited_paper":"/paper/2403.06634","citing_paper":"/paper/2607.14306"},"observation_digest":"sha256:ba36c0f9b63a3928591d7fdee639048a98b49358c96d3a9196cc63628dd4a457","observation_id":"13dc8bbc-f492-4229-9cb5-4ada2d9b8f04","resolution":{"observed_at":"2026-08-04T01:45:18.338994Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2403.06634/citation-record","integrity":"/paper/2403.06634/integrity","json":"/paper/2403.06634/citation-record.json","paper":"/paper/2403.06634"},"outbound":[],"paper":{"arxiv_id":"2403.06634","last_updated":"2024-07-09T17:44:00Z","latest_version":2,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-16T14:11:01.433444Z","submitted_at":"2024-03-11T11:46:12Z","title":"Stealing Part of a Production Language Model"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"thesis":"As of 19 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 43 inbound Pith citation observations for arXiv:2403.06634."}