{"as_of":"2026-08-09T23:16:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:354b315ada7f4f8ed214b7e92891674b2c060de8189ed25594a2cfc0d061168b","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":9,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":9,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":9,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":9,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-09T14:47:15.106879Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-03T10:48:02.313626Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2405.19550","last_updated":"2024-05-29T22:26:26Z","snapshot_observed_at":"2026-07-06T18:22:18.644161Z","submitted_at":"2024-05-29T22:26:26Z","title":"Stress-Testing Capability Elicitation With Password-Locked Models","version":1},"cited_work":{"arxiv_id":"2405.19550","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2405.19550","snapshot_observed_at":"2026-07-03T10:48:02.313626Z","title":"2024 , journal =","venue":null,"work_id":"9c5c03f8-06ff-4c95-a48f-db5277dc59d0","year":2024},"citing_paper":{"arxiv_id":"2412.04984","last_updated":"2025-01-14T20:16:01Z","snapshot_observed_at":"2026-08-09T13:05:34.738390Z","submitted_at":"2024-12-06T12:09:50Z","title":"Frontier Models are Capable of In-context Scheming","version":2},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-05-16T14:22:01.616448Z"},"links":{"cited_paper":"/paper/2405.19550","citing_paper":"/paper/2412.04984"},"observation_digest":"sha256:fa2772a534817c32815fc818dd0e6007d47793f783feb1c00d553027fb0856eb","observation_id":"5d8cadfb-b360-4778-8a7e-28404a85ddb1","resolution":{"observed_at":"2026-05-16T14:22:01.639206Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.19550","last_updated":"2024-05-29T22:26:26Z","snapshot_observed_at":"2026-07-06T18:22:18.644161Z","submitted_at":"2024-05-29T22:26:26Z","title":"Stress-Testing Capability Elicitation With Password-Locked Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.19550","snapshot_observed_at":"2026-08-09T14:47:15.106879Z","title":"Stress-testing capability elicitation with password-locked models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.05209","last_updated":"2025-07-24T21:34:54Z","snapshot_observed_at":"2026-08-09T22:40:17.102835Z","submitted_at":"2025-02-03T18:59:16Z","title":"Model Tampering Attacks Enable More Rigorous Evaluations of LLM Capabilities","version":4},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-09T14:47:15.106879Z"},"links":{"cited_paper":"/paper/2405.19550","citing_paper":"/paper/2502.05209"},"observation_digest":"sha256:26c48596a6dae92a3b09ac81d4e01dbc45a6b66de01e2d9fcf381db406d46981","observation_id":"ef386264-db9e-4fb4-bfb3-572786246e45","resolution":{"observed_at":"2026-08-09T14:47:15.106879Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.19550","last_updated":"2024-05-29T22:26:26Z","snapshot_observed_at":"2026-07-06T18:22:18.644161Z","submitted_at":"2024-05-29T22:26:26Z","title":"Stress-Testing Capability Elicitation With Password-Locked Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.19550","snapshot_observed_at":"2026-08-07T11:11:40.474093Z","title":"Stress-testing capability elicitation with password-locked models.arXiv preprint arXiv:2405.19550, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-09T00:38:29.639641Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.474093Z"},"links":{"cited_paper":"/paper/2405.19550","citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:2e7f421688eaadda95c449e0843278669a2dacaf6587498e1047454705d23f97","observation_id":"81792aed-f23f-4c4b-b15f-3b7ae48bef03","resolution":{"observed_at":"2026-08-07T11:11:40.474093Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.19550","last_updated":"2024-05-29T22:26:26Z","snapshot_observed_at":"2026-07-06T18:22:18.644161Z","submitted_at":"2024-05-29T22:26:26Z","title":"Stress-Testing Capability Elicitation With Password-Locked Models","version":1},"cited_work":{"arxiv_id":"2405.19550","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2405.19550","snapshot_observed_at":"2026-07-03T10:48:02.313626Z","title":"2024 , journal =","venue":null,"work_id":"9c5c03f8-06ff-4c95-a48f-db5277dc59d0","year":2024},"citing_paper":{"arxiv_id":"2605.15377","last_updated":"2026-05-18T07:58:13Z","snapshot_observed_at":"2026-07-06T23:26:41.848219Z","submitted_at":"2026-05-14T20:06:52Z","title":"Ensemble Monitoring for AI Control: Diverse Signals Outweigh More Compute","version":2},"reference_index":44,"source":"arxiv_source","source_observed_at":"2026-05-20T20:12:03.715605Z"},"links":{"cited_paper":"/paper/2405.19550","citing_paper":"/paper/2605.15377"},"observation_digest":"sha256:c25ec8aed95f50fcec707df79330de3f2969df9227346f188a38898a8f149754","observation_id":"e4d114e6-ce53-4126-a1ab-e3887415032e","resolution":{"observed_at":"2026-05-20T20:13:43.427596Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.19550","last_updated":"2024-05-29T22:26:26Z","snapshot_observed_at":"2026-07-06T18:22:18.644161Z","submitted_at":"2024-05-29T22:26:26Z","title":"Stress-Testing Capability Elicitation With Password-Locked Models","version":1},"cited_work":{"arxiv_id":"2405.19550","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2405.19550","snapshot_observed_at":"2026-07-03T10:48:02.313626Z","title":"2024 , journal =","venue":null,"work_id":"9c5c03f8-06ff-4c95-a48f-db5277dc59d0","year":2024},"citing_paper":{"arxiv_id":"2606.09809","last_updated":"2026-06-08T17:55:02Z","snapshot_observed_at":"2026-08-02T08:53:32.385821Z","submitted_at":"2026-06-08T17:55:02Z","title":"Evaluation Cards: An Interpretive Layer for AI Evaluation Reporting","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-06-27T16:11:36.483820Z"},"links":{"cited_paper":"/paper/2405.19550","citing_paper":"/paper/2606.09809"},"observation_digest":"sha256:6e4e24973c1fedbca5a9c816927fa421e49bffe5913fd0fdc6186ff69e5febd8","observation_id":"5247466e-5473-45ad-8301-eddc3cce436b","resolution":{"observed_at":"2026-07-03T02:07:33.261481Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.19550","last_updated":"2024-05-29T22:26:26Z","snapshot_observed_at":"2026-07-06T18:22:18.644161Z","submitted_at":"2024-05-29T22:26:26Z","title":"Stress-Testing Capability Elicitation With Password-Locked Models","version":1},"cited_work":{"arxiv_id":"2405.19550","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2405.19550","snapshot_observed_at":"2026-07-03T10:48:02.313626Z","title":"2024 , journal =","venue":null,"work_id":"9c5c03f8-06ff-4c95-a48f-db5277dc59d0","year":2024},"citing_paper":{"arxiv_id":"2606.10304","last_updated":"2026-06-09T01:45:19Z","snapshot_observed_at":"2026-07-06T23:49:32.647742Z","submitted_at":"2026-06-09T01:45:19Z","title":"MIRAGE: A Polarity-Flipping Encoding Subspace in LLM Agents","version":1},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-06-27T13:33:24.087333Z"},"links":{"cited_paper":"/paper/2405.19550","citing_paper":"/paper/2606.10304"},"observation_digest":"sha256:703d54daef7e438f86bd22983851e946a41e7f41329a2b519d91c67ff2e38b4d","observation_id":"730a255e-3e40-4597-a585-32246e01e0fa","resolution":{"observed_at":"2026-07-03T04:57:38.144361Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.19550","last_updated":"2024-05-29T22:26:26Z","snapshot_observed_at":"2026-07-06T18:22:18.644161Z","submitted_at":"2024-05-29T22:26:26Z","title":"Stress-Testing Capability Elicitation With Password-Locked Models","version":1},"cited_work":{"arxiv_id":"2405.19550","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2405.19550","snapshot_observed_at":"2026-07-03T10:48:02.313626Z","title":"2024 , journal =","venue":null,"work_id":"9c5c03f8-06ff-4c95-a48f-db5277dc59d0","year":2024},"citing_paper":{"arxiv_id":"2606.12016","last_updated":"2026-06-10T12:43:31Z","snapshot_observed_at":"2026-08-08T21:35:10.311571Z","submitted_at":"2026-06-10T12:43:31Z","title":"Generalization Hacking: Models Can Game Reinforcement Learning by Preventing Behavioral Generalization","version":1},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-06-27T10:59:09.372559Z"},"links":{"cited_paper":"/paper/2405.19550","citing_paper":"/paper/2606.12016"},"observation_digest":"sha256:82555cd1502b22f1d241d33cded0e65a33dad678cdb85a99ebe4bb09a730bb24","observation_id":"74230aa1-49cf-4dc3-a9e6-40dda6aa6a55","resolution":{"observed_at":"2026-07-03T08:17:44.951229Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.19550","last_updated":"2024-05-29T22:26:26Z","snapshot_observed_at":"2026-07-06T18:22:18.644161Z","submitted_at":"2024-05-29T22:26:26Z","title":"Stress-Testing Capability Elicitation With Password-Locked Models","version":1},"cited_work":{"arxiv_id":"2405.19550","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2405.19550","snapshot_observed_at":"2026-07-03T10:48:02.313626Z","title":"2024 , journal =","venue":null,"work_id":"9c5c03f8-06ff-4c95-a48f-db5277dc59d0","year":2024},"citing_paper":{"arxiv_id":"2606.12618","last_updated":"2026-06-17T16:15:20Z","snapshot_observed_at":"2026-07-06T23:51:31.502574Z","submitted_at":"2026-06-10T19:21:12Z","title":"\"Did you lie?\" Evaluating Lie Detectors across Model Scale and Belief-Verified Model Organisms","version":2},"reference_index":73,"source":"arxiv_source","source_observed_at":"2026-06-27T09:51:16.969884Z"},"links":{"cited_paper":"/paper/2405.19550","citing_paper":"/paper/2606.12618"},"observation_digest":"sha256:f28c7169a40d1b1aa132133f52be8946cc0ba7881438f43702e252cfd8cbdae7","observation_id":"0ee6cac9-8b12-4d12-b68a-c3d048d1f5b7","resolution":{"observed_at":"2026-07-03T10:48:02.315041Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.19550","last_updated":"2024-05-29T22:26:26Z","snapshot_observed_at":"2026-07-06T18:22:18.644161Z","submitted_at":"2024-05-29T22:26:26Z","title":"Stress-Testing Capability Elicitation With Password-Locked Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.19550","snapshot_observed_at":"2026-08-02T14:26:47.323505Z","title":"Stress-testing capability elicitation with password-locked models.arXiv preprint arXiv:2405.19550, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.20436","last_updated":"2026-05-11T13:44:35Z","snapshot_observed_at":"2026-08-07T15:21:11.046444Z","submitted_at":"2026-05-11T13:44:35Z","title":"Routing Subspaces: Auditing Evaluation-to-Deployment Mismatch in Fine-Tuned Language Models","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-02T14:26:47.323505Z"},"links":{"cited_paper":"/paper/2405.19550","citing_paper":"/paper/2607.20436"},"observation_digest":"sha256:2d0622edf76babc43feb94ee59c4fda4d6b9307429d7905ba8c8d0141f962acd","observation_id":"2bd3a690-3ff5-4390-98c4-ce098f4f5997","resolution":{"observed_at":"2026-08-02T14:26:47.323505Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2405.19550/citation-record","integrity":"/paper/2405.19550/integrity","json":"/paper/2405.19550/citation-record.json","paper":"/paper/2405.19550"},"outbound":[],"paper":{"arxiv_id":"2405.19550","last_updated":"2024-05-29T22:26:26Z","latest_version":1,"primary_category":"cs.LG","snapshot_observed_at":"2026-07-06T18:22:18.644161Z","submitted_at":"2024-05-29T22:26:26Z","title":"Stress-Testing Capability Elicitation With Password-Locked Models"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 9 inbound Pith citation observations for arXiv:2405.19550."}