{"as_of":"2026-08-20T19:02:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:300756c03943a08b6d134db0386d2f034370016c378c50b6e30d0d421a832f9c","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":11,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":11,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-20T06:33:59.587034+00:00","state":"measured"},{"denominator":11,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":11,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-10T23:40:19.159525Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-05-11T10:21:04.586767Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2404.12038","last_updated":"2024-11-30T08:52:29Z","snapshot_observed_at":"2026-08-16T13:59:50.088003Z","submitted_at":"2024-04-18T09:46:25Z","title":"Uncovering Safety Risks of Large Language Models through Concept Activation Vector","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.12038","snapshot_observed_at":"2026-08-10T23:40:19.159525Z","title":", author Huang, R","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-15T12:46:32.785416Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":149,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:19.159525Z"},"links":{"cited_paper":"/paper/2404.12038","citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:c21db304403fff40569b79c4a6762f51e8de0c538cd0c4b209407103e38b5c14","observation_id":"f19be64b-8843-4b29-ba7e-9406e9aa6b96","resolution":{"observed_at":"2026-08-10T23:40:19.159525Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.12038","last_updated":"2024-11-30T08:52:29Z","snapshot_observed_at":"2026-08-16T13:59:50.088003Z","submitted_at":"2024-04-18T09:46:25Z","title":"Uncovering Safety Risks of Large Language Models through Concept Activation Vector","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.12038","snapshot_observed_at":"2026-08-10T19:08:01.749591Z","title":", author Huang, R","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2501.10639","last_updated":"2025-05-30T03:31:24Z","snapshot_observed_at":"2026-08-16T08:22:51.927618Z","submitted_at":"2025-01-18T02:57:12Z","title":"Latent-space adversarial training with post-aware calibration for defending large language models against jailbreak attacks","version":3},"reference_index":40,"source":"arxiv_source","source_observed_at":"2026-08-10T19:08:01.749591Z"},"links":{"cited_paper":"/paper/2404.12038","citing_paper":"/paper/2501.10639"},"observation_digest":"sha256:b43e1e317a89a5ce204ccef50f73a2bceb6f3e80a52834c61d07fd29bd50fbf4","observation_id":"0c14d0ef-7e00-433e-b8f6-874c769a2d98","resolution":{"observed_at":"2026-08-10T19:08:01.749591Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.12038","last_updated":"2024-11-30T08:52:29Z","snapshot_observed_at":"2026-08-16T13:59:50.088003Z","submitted_at":"2024-04-18T09:46:25Z","title":"Uncovering Safety Risks of Large Language Models through Concept Activation Vector","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.12038","snapshot_observed_at":"2026-08-09T13:14:34.129562Z","title":"Uncovering safety risks of large language models through concept activation vector, 2024 b","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.02153","last_updated":"2025-02-04T09:31:54Z","snapshot_observed_at":"2026-08-16T16:34:47.536642Z","submitted_at":"2025-02-04T09:31:54Z","title":"Vulnerability Mitigation for Safety-Aligned Language Models via Debiasing","version":1},"reference_index":50,"source":"arxiv_source","source_observed_at":"2026-08-09T13:14:34.129562Z"},"links":{"cited_paper":"/paper/2404.12038","citing_paper":"/paper/2502.02153"},"observation_digest":"sha256:f12014fc404d9619cdb19d7bc212a227a3d7f858fc916ddd79642a644045d8a8","observation_id":"36981ff1-9520-433a-ad4b-23e1a8cb120f","resolution":{"observed_at":"2026-08-09T13:14:34.129562Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.12038","last_updated":"2024-11-30T08:52:29Z","snapshot_observed_at":"2026-08-16T13:59:50.088003Z","submitted_at":"2024-04-18T09:46:25Z","title":"Uncovering Safety Risks of Large Language Models through Concept Activation Vector","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.12038","snapshot_observed_at":"2026-08-08T12:25:30.692632Z","title":"Uncovering safety risks of large language models through concept activation vec- tor","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.07557","last_updated":"2025-02-11T13:50:50Z","snapshot_observed_at":"2026-08-19T00:16:08.532848Z","submitted_at":"2025-02-11T13:50:50Z","title":"JBShield: Defending Large Language Models from Jailbreak Attacks through Activated Concept Analysis and Manipulation","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-08T12:25:30.692632Z"},"links":{"cited_paper":"/paper/2404.12038","citing_paper":"/paper/2502.07557"},"observation_digest":"sha256:355ed92c44e9a22c8993d6c6e9596e85993e3a050aaeaf2fea9a5cc265ac609c","observation_id":"37a16043-58e6-419d-91b0-a47e917f4c88","resolution":{"observed_at":"2026-08-08T12:25:30.692632Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.12038","last_updated":"2024-11-30T08:52:29Z","snapshot_observed_at":"2026-08-16T13:59:50.088003Z","submitted_at":"2024-04-18T09:46:25Z","title":"Uncovering Safety Risks of Large Language Models through Concept Activation Vector","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.12038","snapshot_observed_at":"2026-08-07T12:13:19.638500Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00253","last_updated":"2025-06-08T23:37:10Z","snapshot_observed_at":"2026-08-16T12:44:03.115603Z","submitted_at":"2025-05-30T21:41:44Z","title":"Aligned but Blind: Alignment Increases Implicit Bias by Reducing Awareness of Race","version":3},"reference_index":70,"source":"arxiv_source","source_observed_at":"2026-08-07T12:13:19.638500Z"},"links":{"cited_paper":"/paper/2404.12038","citing_paper":"/paper/2506.00253"},"observation_digest":"sha256:d1c1f659bf43cf08c20b991d96ea18ecb8823aa7f63d583cf2bc65b40c0b9985","observation_id":"5864e4db-8df3-4dce-830e-4957a71edba1","resolution":{"observed_at":"2026-08-07T12:13:19.638500Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.12038","last_updated":"2024-11-30T08:52:29Z","snapshot_observed_at":"2026-08-16T13:59:50.088003Z","submitted_at":"2024-04-18T09:46:25Z","title":"Uncovering Safety Risks of Large Language Models through Concept Activation Vector","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.12038","snapshot_observed_at":"2026-08-06T17:17:31.819851Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.11316","last_updated":"2025-07-15T13:48:35Z","snapshot_observed_at":"2026-08-16T22:01:21.234905Z","submitted_at":"2025-07-15T13:48:35Z","title":"Internal Value Alignment in Large Language Models through Controlled Value Vector Activation","version":1},"reference_index":51,"source":"arxiv_source","source_observed_at":"2026-08-06T17:17:31.819851Z"},"links":{"cited_paper":"/paper/2404.12038","citing_paper":"/paper/2507.11316"},"observation_digest":"sha256:29e196f1b5af4c7e560541ca3f9e1036378ef6f1a6a5bc85ef85efa0f0a2561f","observation_id":"258cad88-9095-469b-af29-54299a4bf63a","resolution":{"observed_at":"2026-08-06T17:17:31.819851Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.12038","last_updated":"2024-11-30T08:52:29Z","snapshot_observed_at":"2026-08-16T13:59:50.088003Z","submitted_at":"2024-04-18T09:46:25Z","title":"Uncovering Safety Risks of Large Language Models through Concept Activation Vector","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.12038","snapshot_observed_at":"2026-08-05T20:31:37.875871Z","title":"Uncovering safety risks of large language models through concept activation vector","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.10404","last_updated":"2025-08-14T07:12:44Z","snapshot_observed_at":"2026-08-18T11:11:26.991132Z","submitted_at":"2025-08-14T07:12:44Z","title":"Layer-Wise Perturbations via Sparse Autoencoders for Adversarial Text Generation","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-05T20:31:37.875871Z"},"links":{"cited_paper":"/paper/2404.12038","citing_paper":"/paper/2508.10404"},"observation_digest":"sha256:4d4f482322151e3b7bb6089b1bcca563ef4375d5d8bc4be0489c48a264ac29cb","observation_id":"50128bf5-2104-432c-8ff7-0d38647da5fd","resolution":{"observed_at":"2026-08-05T20:31:37.875871Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.12038","last_updated":"2024-11-30T08:52:29Z","snapshot_observed_at":"2026-08-16T13:59:50.088003Z","submitted_at":"2024-04-18T09:46:25Z","title":"Uncovering Safety Risks of Large Language Models through Concept Activation Vector","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.12038","snapshot_observed_at":"2026-08-05T15:19:28.783558Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.20038","last_updated":"2025-09-04T09:23:46Z","snapshot_observed_at":"2026-08-15T11:36:17.519073Z","submitted_at":"2025-08-27T16:44:03Z","title":"Forewarned is Forearmed: Pre-Synthesizing Jailbreak-like Instructions to Enhance LLM Safety Guardrail to Potential Attacks","version":3},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-08-05T15:19:28.783558Z"},"links":{"cited_paper":"/paper/2404.12038","citing_paper":"/paper/2508.20038"},"observation_digest":"sha256:60c069302441387f4c05cfb95f23dc149f859523b8853fd0a22cd4dbe3101193","observation_id":"2b24c292-b1f9-4fc1-bc01-f5896cb04529","resolution":{"observed_at":"2026-08-05T15:19:28.783558Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.12038","last_updated":"2024-11-30T08:52:29Z","snapshot_observed_at":"2026-08-16T13:59:50.088003Z","submitted_at":"2024-04-18T09:46:25Z","title":"Uncovering Safety Risks of Large Language Models through Concept Activation Vector","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.12038","snapshot_observed_at":"2026-08-04T11:17:49.355098Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.05969","last_updated":"2026-07-19T06:24:18Z","snapshot_observed_at":"2026-08-19T19:37:50.991170Z","submitted_at":"2025-10-07T14:24:32Z","title":"Probing the Difficulty Perception Mechanism of Large Language Models","version":3},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-08-04T11:17:49.355098Z"},"links":{"cited_paper":"/paper/2404.12038","citing_paper":"/paper/2510.05969"},"observation_digest":"sha256:19df17aacb2fa8e8f7ec861598ce0d23a0c0047e473ffb6b0feac927f5ba2968","observation_id":"602cc282-fca1-45b4-9984-6468cb4cea3a","resolution":{"observed_at":"2026-08-04T11:17:49.355098Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.12038","last_updated":"2024-11-30T08:52:29Z","snapshot_observed_at":"2026-08-16T13:59:50.088003Z","submitted_at":"2024-04-18T09:46:25Z","title":"Uncovering Safety Risks of Large Language Models through Concept Activation Vector","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.12038","snapshot_observed_at":"2026-08-03T18:33:09.239553Z","title":"Uncovering safety risks of large language models through concept activation vector, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2512.05038","last_updated":"2026-05-29T17:42:38Z","snapshot_observed_at":"2026-08-20T01:40:11.341505Z","submitted_at":"2025-12-04T17:55:55Z","title":"The SuperActivator Mechanism: Transformers Concentrate Reliable Concept Signals in the Tail","version":2},"reference_index":83,"source":"pdf_text","source_observed_at":"2026-08-03T18:33:09.239553Z"},"links":{"cited_paper":"/paper/2404.12038","citing_paper":"/paper/2512.05038"},"observation_digest":"sha256:0f53718893dc639525963724c06a87e07e7ac956f2173b841e666fc53277dede","observation_id":"0d42f3c5-fb71-41d3-a016-e7e41c7e5c61","resolution":{"observed_at":"2026-08-03T18:33:09.239553Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.12038","last_updated":"2024-11-30T08:52:29Z","snapshot_observed_at":"2026-08-16T13:59:50.088003Z","submitted_at":"2024-04-18T09:46:25Z","title":"Uncovering Safety Risks of Large Language Models through Concept Activation Vector","version":5},"cited_work":{"arxiv_id":"2404.12038","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2404.12038","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"66b4a287-c0c6-4f33-aae3-79fcbbfa85e7","year":2024},"citing_paper":{"arxiv_id":"2604.11663","last_updated":"2026-04-13T16:11:38Z","snapshot_observed_at":"2026-08-11T01:52:32.553221Z","submitted_at":"2026-04-13T16:11:38Z","title":"Why Do Large Language Models Generate Harmful Content?","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-05-10T15:31:13.545599Z"},"links":{"cited_paper":"/paper/2404.12038","citing_paper":"/paper/2604.11663"},"observation_digest":"sha256:eed5a160eb2cd6964eb2f09c926b3517c24e29be1fdcc502c65591f7eaaaa6e7","observation_id":"d7161955-188a-4d9c-80d1-901d1077197c","resolution":{"observed_at":"2026-05-11T10:21:04.601411Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2404.12038/citation-record","integrity":"/paper/2404.12038/integrity","json":"/paper/2404.12038/citation-record.json","paper":"/paper/2404.12038"},"outbound":[],"paper":{"arxiv_id":"2404.12038","last_updated":"2024-11-30T08:52:29Z","latest_version":5,"primary_category":"cs.CL","snapshot_observed_at":"2026-08-16T13:59:50.088003Z","submitted_at":"2024-04-18T09:46:25Z","title":"Uncovering Safety Risks of Large Language Models through Concept Activation Vector"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"thesis":"As of 20 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 11 inbound Pith citation observations for arXiv:2404.12038."}