{"as_of":"2026-08-15T09:22:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:e70c7ca75445cebaab7111816a76ef9ca4c9a2496a96ae94e2627b2714f03ac6","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":19,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":19,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-15T06:32:42.880941+00:00","state":"measured"},{"denominator":19,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":19,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-12T20:36:01.278972Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"pith","source_observed_at":"2026-07-10T20:57:34.835399Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2406.00799","last_updated":"2025-03-06T17:43:10Z","snapshot_observed_at":"2026-08-14T07:43:15.497304Z","submitted_at":"2024-06-02T16:53:21Z","title":"Get my drift? Catching LLM Task Drift with Activation Deltas","version":6},"cited_work":{"arxiv_id":"2406.00799","doi":null,"metadata_source":"pith","pith_arxiv_id":"2406.00799","snapshot_observed_at":"2026-07-10T20:57:34.835399Z","title":"Are you still on track!? catching LLM task drift with activations","venue":"cs.CR","work_id":"f913aa64-dddb-4ce5-9f2c-5e314589aa1a","year":2024},"citing_paper":{"arxiv_id":"2404.01318","last_updated":"2024-10-31T22:26:40Z","snapshot_observed_at":"2026-08-11T16:28:21.917686Z","submitted_at":"2024-03-28T02:44:02Z","title":"JailbreakBench: An Open Robustness Benchmark for Jailbreaking Large Language Models","version":5},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-05-15T06:08:05.386345Z"},"links":{"cited_paper":"/paper/2406.00799","citing_paper":"/paper/2404.01318"},"observation_digest":"sha256:76bc7e40aaa27518b480bf7201c460e602e23c9ccad9a593018164439687d554","observation_id":"f52f41d0-e120-43c0-9c46-915c932a32de","resolution":{"observed_at":"2026-05-15T06:08:05.444361Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00799","last_updated":"2025-03-06T17:43:10Z","snapshot_observed_at":"2026-08-14T07:43:15.497304Z","submitted_at":"2024-06-02T16:53:21Z","title":"Get my drift? Catching LLM Task Drift with Activation Deltas","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00799","snapshot_observed_at":"2026-08-12T20:36:01.278972Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.09523","last_updated":"2024-11-14T15:40:04Z","snapshot_observed_at":"2026-08-14T07:59:07.134456Z","submitted_at":"2024-11-14T15:40:04Z","title":"Navigating the Risks: A Survey of Security, Privacy, and Ethics Threats in LLM-Based Agents","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-12T20:36:01.278972Z"},"links":{"cited_paper":"/paper/2406.00799","citing_paper":"/paper/2411.09523"},"observation_digest":"sha256:5fb1329474cb816a06904c98373eec61b7c582e6d8ea8a6af24a98ee27250198","observation_id":"2b963028-4430-4846-8763-579eb2120d1e","resolution":{"observed_at":"2026-08-12T20:36:01.278972Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00799","last_updated":"2025-03-06T17:43:10Z","snapshot_observed_at":"2026-08-14T07:43:15.497304Z","submitted_at":"2024-06-02T16:53:21Z","title":"Get my drift? Catching LLM Task Drift with Activation Deltas","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00799","snapshot_observed_at":"2026-08-12T15:34:25.895226Z","title":"Are you still on track!? catching llm task drift with activations.arXiv preprint arXiv:2406.00799, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.14110","last_updated":"2025-08-08T11:56:30Z","snapshot_observed_at":"2026-08-12T22:37:38.495989Z","submitted_at":"2024-11-21T13:18:03Z","title":"Feedback-Guided Extraction of Knowledge Base from Retrieval-Augmented LLM Applications","version":2},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-12T15:34:25.895226Z"},"links":{"cited_paper":"/paper/2406.00799","citing_paper":"/paper/2411.14110"},"observation_digest":"sha256:20996d65da1064fb701953fafeaec425e5a8a7d1bb7f4de18c5703a8b091aeae","observation_id":"9137548e-9d65-4d63-870c-db1024ff4da1","resolution":{"observed_at":"2026-08-12T15:34:25.895226Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00799","last_updated":"2025-03-06T17:43:10Z","snapshot_observed_at":"2026-08-14T07:43:15.497304Z","submitted_at":"2024-06-02T16:53:21Z","title":"Get my drift? Catching LLM Task Drift with Activation Deltas","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00799","snapshot_observed_at":"2026-08-12T10:47:45.660196Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.18948","last_updated":"2025-08-29T06:03:42Z","snapshot_observed_at":"2026-08-15T06:21:38.235121Z","submitted_at":"2024-11-28T06:29:46Z","title":"RevPRAG: Revealing Poisoning Attacks in Retrieval-Augmented Generation through LLM Activation Analysis","version":5},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-12T10:47:45.660196Z"},"links":{"cited_paper":"/paper/2406.00799","citing_paper":"/paper/2411.18948"},"observation_digest":"sha256:81c02fae151112020d50d7b11388560b9ef082a4f9b900226b1514abf9e25a44","observation_id":"5bac9ba5-0724-4c15-8c82-bc4cecbe455e","resolution":{"observed_at":"2026-08-12T10:47:45.660196Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00799","last_updated":"2025-03-06T17:43:10Z","snapshot_observed_at":"2026-08-14T07:43:15.497304Z","submitted_at":"2024-06-02T16:53:21Z","title":"Get my drift? Catching LLM Task Drift with Activation Deltas","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00799","snapshot_observed_at":"2026-08-07T10:24:26.300328Z","title":"Samira Abnar and Willem Zuidema","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2506.05451","last_updated":"2025-06-05T17:56:05Z","snapshot_observed_at":"2026-08-09T11:07:48.259327Z","submitted_at":"2025-06-05T17:56:05Z","title":"Interpretation Meets Safety: A Survey on Interpretation Methods and Tools for Improving LLM Safety","version":1},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-07T10:24:26.300328Z"},"links":{"cited_paper":"/paper/2406.00799","citing_paper":"/paper/2506.05451"},"observation_digest":"sha256:37bd42a7a7edf581a07d9af69970729893ad23ea73bda90b3ddc238ab8dc510d","observation_id":"ebd8f26f-5dc9-4d52-9ac6-bef8b3335c81","resolution":{"observed_at":"2026-08-07T10:24:26.300328Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00799","last_updated":"2025-03-06T17:43:10Z","snapshot_observed_at":"2026-08-14T07:43:15.497304Z","submitted_at":"2024-06-02T16:53:21Z","title":"Get my drift? Catching LLM Task Drift with Activation Deltas","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00799","snapshot_observed_at":"2026-08-07T05:41:25.315260Z","title":"Are you still on track!? catching llm task drift with activations, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.07330","last_updated":"2025-06-09T00:11:06Z","snapshot_observed_at":"2026-08-08T01:51:03.511040Z","submitted_at":"2025-06-09T00:11:06Z","title":"JavelinGuard: Low-Cost Transformer Architectures for LLM Security","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-07T05:41:25.315260Z"},"links":{"cited_paper":"/paper/2406.00799","citing_paper":"/paper/2506.07330"},"observation_digest":"sha256:2dcc04678fa381d7f1b877be4864a0a207d0f41e3c0bc5ca1fed6ee42a9f5395","observation_id":"7100632c-ff3f-474d-990f-65599ab8012a","resolution":{"observed_at":"2026-08-07T05:41:25.315260Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00799","last_updated":"2025-03-06T17:43:10Z","snapshot_observed_at":"2026-08-14T07:43:15.497304Z","submitted_at":"2024-06-02T16:53:21Z","title":"Get my drift? Catching LLM Task Drift with Activation Deltas","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00799","snapshot_observed_at":"2026-08-07T05:06:14.384486Z","title":"Get my drift? catching llm task drift with activation deltas, 2025a","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.08837","last_updated":"2025-06-27T11:13:27Z","snapshot_observed_at":"2026-08-13T19:59:16.606703Z","submitted_at":"2025-06-10T14:23:55Z","title":"Design Patterns for Securing LLM Agents against Prompt Injections","version":3},"reference_index":2023,"source":"pdf_text","source_observed_at":"2026-08-07T05:06:14.384486Z"},"links":{"cited_paper":"/paper/2406.00799","citing_paper":"/paper/2506.08837"},"observation_digest":"sha256:0104f75731b08c52f48fc76154f40f6e1702dcee4d2ce23fd77e73c5f3351231","observation_id":"9aefd09e-afcb-4317-a68a-b5710882db51","resolution":{"observed_at":"2026-08-07T05:06:14.384486Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00799","last_updated":"2025-03-06T17:43:10Z","snapshot_observed_at":"2026-08-14T07:43:15.497304Z","submitted_at":"2024-06-02T16:53:21Z","title":"Get my drift? Catching LLM Task Drift with Activation Deltas","version":6},"cited_work":{"arxiv_id":"2406.00799","doi":null,"metadata_source":"pith","pith_arxiv_id":"2406.00799","snapshot_observed_at":"2026-07-10T20:57:34.835399Z","title":"Are you still on track!? catching LLM task drift with activations","venue":"cs.CR","work_id":"f913aa64-dddb-4ce5-9f2c-5e314589aa1a","year":2024},"citing_paper":{"arxiv_id":"2506.17299","last_updated":"2026-04-24T04:36:54Z","snapshot_observed_at":"2026-08-02T14:45:34.223522Z","submitted_at":"2025-06-17T20:37:29Z","title":"Toward Principled LLM Safety Testing: Solving the Jailbreak Oracle Problem","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-05-19T08:40:56.186349Z"},"links":{"cited_paper":"/paper/2406.00799","citing_paper":"/paper/2506.17299"},"observation_digest":"sha256:80b0b57cf1b8d3c2681c89acba36ddc056b512d49abf9b24fe94199c855d8f07","observation_id":"49627b25-758f-4cfc-97fa-761867b0fdc1","resolution":{"observed_at":"2026-05-19T08:42:12.803304Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00799","last_updated":"2025-03-06T17:43:10Z","snapshot_observed_at":"2026-08-14T07:43:15.497304Z","submitted_at":"2024-06-02T16:53:21Z","title":"Get my drift? Catching LLM Task Drift with Activation Deltas","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00799","snapshot_observed_at":"2026-08-06T23:40:57.228636Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.21607","last_updated":"2025-06-20T11:58:00Z","snapshot_observed_at":"2026-08-14T04:36:58.002505Z","submitted_at":"2025-06-20T11:58:00Z","title":"CORE-KG: An LLM-Driven Knowledge Graph Construction Framework for Human Smuggling Networks","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-06T23:40:57.228636Z"},"links":{"cited_paper":"/paper/2406.00799","citing_paper":"/paper/2506.21607"},"observation_digest":"sha256:185faa77544ca9c34cbae1b3de777aa452e3870d09fdbd31edc6a5f6c534b94b","observation_id":"52e726ee-3ad2-4262-8e5e-a49e8896dd63","resolution":{"observed_at":"2026-08-06T23:40:57.228636Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00799","last_updated":"2025-03-06T17:43:10Z","snapshot_observed_at":"2026-08-14T07:43:15.497304Z","submitted_at":"2024-06-02T16:53:21Z","title":"Get my drift? Catching LLM Task Drift with Activation Deltas","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00799","snapshot_observed_at":"2026-08-06T21:36:21.976834Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23762","last_updated":"2025-06-30T12:09:29Z","snapshot_observed_at":"2026-08-13T08:27:18.830708Z","submitted_at":"2025-06-30T12:09:29Z","title":"Software Engineering for Large Language Models: Research Status, Challenges and the Road Ahead","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-06T21:36:21.976834Z"},"links":{"cited_paper":"/paper/2406.00799","citing_paper":"/paper/2506.23762"},"observation_digest":"sha256:e33fbaacce6523b67a1efd2a0bb91a4acde1edbb7fae7bcf8c3290a06ea4c826","observation_id":"fb34d00c-f53e-4211-880a-21b8f1ffaf43","resolution":{"observed_at":"2026-08-06T21:36:21.976834Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00799","last_updated":"2025-03-06T17:43:10Z","snapshot_observed_at":"2026-08-14T07:43:15.497304Z","submitted_at":"2024-06-02T16:53:21Z","title":"Get my drift? Catching LLM Task Drift with Activation Deltas","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00799","snapshot_observed_at":"2026-08-06T18:32:38.442495Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-14T02:10:24.403536Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:38.442495Z"},"links":{"cited_paper":"/paper/2406.00799","citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:d9d200b9c7388b0608a1e598af766b445423a607cc73fcb81bfa81ac44178368","observation_id":"70deac73-eb39-4506-8e14-af93fb311975","resolution":{"observed_at":"2026-08-06T18:32:38.442495Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00799","last_updated":"2025-03-06T17:43:10Z","snapshot_observed_at":"2026-08-14T07:43:15.497304Z","submitted_at":"2024-06-02T16:53:21Z","title":"Get my drift? Catching LLM Task Drift with Activation Deltas","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00799","snapshot_observed_at":"2026-08-05T22:51:28.042439Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.06418","last_updated":"2025-08-08T16:05:27Z","snapshot_observed_at":"2026-08-08T12:59:56.859606Z","submitted_at":"2025-08-08T16:05:27Z","title":"Quantifying Conversation Drift in MCP via Latent Polytope","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-05T22:51:28.042439Z"},"links":{"cited_paper":"/paper/2406.00799","citing_paper":"/paper/2508.06418"},"observation_digest":"sha256:c1426b73930205191997f83f26c230a9eb7b1be0c68c0fc145b5534825f8a6e3","observation_id":"586f8d8a-f0e5-4a8a-a6ff-790b26029a29","resolution":{"observed_at":"2026-08-05T22:51:28.042439Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00799","last_updated":"2025-03-06T17:43:10Z","snapshot_observed_at":"2026-08-14T07:43:15.497304Z","submitted_at":"2024-06-02T16:53:21Z","title":"Get my drift? Catching LLM Task Drift with Activation Deltas","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00799","snapshot_observed_at":"2026-08-04T22:01:55.817698Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-13T23:49:21.304752Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:55.817698Z"},"links":{"cited_paper":"/paper/2406.00799","citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:d5ebe1a25832ed2295cb261639009c488adbf54d7f6b6f7be239557fb5beab8f","observation_id":"9e7d3ba7-4aad-4095-a7b5-3c73f2aaa80f","resolution":{"observed_at":"2026-08-04T22:01:55.817698Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00799","last_updated":"2025-03-06T17:43:10Z","snapshot_observed_at":"2026-08-14T07:43:15.497304Z","submitted_at":"2024-06-02T16:53:21Z","title":"Get my drift? Catching LLM Task Drift with Activation Deltas","version":6},"cited_work":{"arxiv_id":"2406.00799","doi":null,"metadata_source":"pith","pith_arxiv_id":"2406.00799","snapshot_observed_at":"2026-07-10T20:57:34.835399Z","title":"Are you still on track!? catching LLM task drift with activations","venue":"cs.CR","work_id":"f913aa64-dddb-4ce5-9f2c-5e314589aa1a","year":2024},"citing_paper":{"arxiv_id":"2603.12230","last_updated":"2026-04-05T08:33:19Z","snapshot_observed_at":"2026-08-04T04:27:19.804842Z","submitted_at":"2026-03-12T17:49:39Z","title":"Security Considerations for Artificial Intelligence Agents","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-05-15T12:37:27.153365Z"},"links":{"cited_paper":"/paper/2406.00799","citing_paper":"/paper/2603.12230"},"observation_digest":"sha256:caab802c9fb2244c44b017defe8975a5e6b802c43a1ca2e3e959eedaa9f73e72","observation_id":"673c7633-70fa-40c4-b4f2-b6709a53a326","resolution":{"observed_at":"2026-05-15T12:40:00.273093Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00799","last_updated":"2025-03-06T17:43:10Z","snapshot_observed_at":"2026-08-14T07:43:15.497304Z","submitted_at":"2024-06-02T16:53:21Z","title":"Get my drift? Catching LLM Task Drift with Activation Deltas","version":6},"cited_work":{"arxiv_id":"2406.00799","doi":null,"metadata_source":"pith","pith_arxiv_id":"2406.00799","snapshot_observed_at":"2026-07-10T20:57:34.835399Z","title":"Are you still on track!? catching LLM task drift with activations","venue":"cs.CR","work_id":"f913aa64-dddb-4ce5-9f2c-5e314589aa1a","year":2024},"citing_paper":{"arxiv_id":"2605.12922","last_updated":"2026-05-13T02:58:18Z","snapshot_observed_at":"2026-08-12T19:48:16.096694Z","submitted_at":"2026-05-13T02:58:18Z","title":"When Attention Closes: How LLMs Lose the Thread in Multi-Turn Interaction","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-05-14T20:20:27.212052Z"},"links":{"cited_paper":"/paper/2406.00799","citing_paper":"/paper/2605.12922"},"observation_digest":"sha256:cb22daefd6f73ea7764a09f391fd31a92d645c113d1eacdd6d00cdfd15ce8f1d","observation_id":"769188e2-51a6-49ae-afbd-ca61c1abaee0","resolution":{"observed_at":"2026-05-14T20:22:55.684511Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00799","last_updated":"2025-03-06T17:43:10Z","snapshot_observed_at":"2026-08-14T07:43:15.497304Z","submitted_at":"2024-06-02T16:53:21Z","title":"Get my drift? Catching LLM Task Drift with Activation Deltas","version":6},"cited_work":{"arxiv_id":"2406.00799","doi":null,"metadata_source":"pith","pith_arxiv_id":"2406.00799","snapshot_observed_at":"2026-07-10T20:57:34.835399Z","title":"Are you still on track!? catching LLM task drift with activations","venue":"cs.CR","work_id":"f913aa64-dddb-4ce5-9f2c-5e314589aa1a","year":2024},"citing_paper":{"arxiv_id":"2605.29659","last_updated":"2026-05-28T09:21:42Z","snapshot_observed_at":"2026-08-12T14:52:35.122614Z","submitted_at":"2026-05-28T09:21:42Z","title":"Opir: Efficient Multi-Task Safety Classification for Toxicity, Jailbreaks, Hate Speech, and Harmful Content","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-06-29T09:11:58.843585Z"},"links":{"cited_paper":"/paper/2406.00799","citing_paper":"/paper/2605.29659"},"observation_digest":"sha256:059d6371fa5672253d719e7fd3c746f650a3e6c3373d83dc5cb855b6d8a6de13","observation_id":"208b79ca-417c-428b-9df5-6224b7b3f4aa","resolution":{"observed_at":"2026-06-29T09:13:16.035221Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00799","last_updated":"2025-03-06T17:43:10Z","snapshot_observed_at":"2026-08-14T07:43:15.497304Z","submitted_at":"2024-06-02T16:53:21Z","title":"Get my drift? Catching LLM Task Drift with Activation Deltas","version":6},"cited_work":{"arxiv_id":"2406.00799","doi":null,"metadata_source":"pith","pith_arxiv_id":"2406.00799","snapshot_observed_at":"2026-07-10T20:57:34.835399Z","title":"Are you still on track!? catching LLM task drift with activations","venue":"cs.CR","work_id":"f913aa64-dddb-4ce5-9f2c-5e314589aa1a","year":2024},"citing_paper":{"arxiv_id":"2606.21843","last_updated":"2026-06-20T02:38:43Z","snapshot_observed_at":"2026-08-15T02:54:05.576372Z","submitted_at":"2026-06-20T02:38:43Z","title":"Measuring What Persists: Conditioning Mechanisms and a Geometric Framework for AI Agent Identity","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-06-26T12:26:28.740555Z"},"links":{"cited_paper":"/paper/2406.00799","citing_paper":"/paper/2606.21843"},"observation_digest":"sha256:08efea3e1e4496203549daaf42ea539520d743bdb2cd40407edc7c844ae16985","observation_id":"48c56ddb-b76c-4601-89c9-889d8af80332","resolution":{"observed_at":"2026-07-04T07:59:39.886546Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00799","last_updated":"2025-03-06T17:43:10Z","snapshot_observed_at":"2026-08-14T07:43:15.497304Z","submitted_at":"2024-06-02T16:53:21Z","title":"Get my drift? Catching LLM Task Drift with Activation Deltas","version":6},"cited_work":{"arxiv_id":"2406.00799","doi":null,"metadata_source":"pith","pith_arxiv_id":"2406.00799","snapshot_observed_at":"2026-07-10T20:57:34.835399Z","title":"Are you still on track!? catching LLM task drift with activations","venue":"cs.CR","work_id":"f913aa64-dddb-4ce5-9f2c-5e314589aa1a","year":2024},"citing_paper":{"arxiv_id":"2607.00012","last_updated":"2026-05-08T10:35:13Z","snapshot_observed_at":"2026-08-12T10:34:28.270771Z","submitted_at":"2026-05-08T10:35:13Z","title":"PRA-RAG: Provably Robust Aggregation in Retrieval-Augmented Generation against Retrieval Corruption","version":1},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-07-02T23:42:23.695930Z"},"links":{"cited_paper":"/paper/2406.00799","citing_paper":"/paper/2607.00012"},"observation_digest":"sha256:d32b198a5bfacbaa94057548306e5ed54185df29d77e4857b7e308b5bbf53d0b","observation_id":"e9a6ddf5-6e9d-4975-8ecd-3ad0f97e9dbe","resolution":{"observed_at":"2026-07-02T23:47:27.137076Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00799","last_updated":"2025-03-06T17:43:10Z","snapshot_observed_at":"2026-08-14T07:43:15.497304Z","submitted_at":"2024-06-02T16:53:21Z","title":"Get my drift? Catching LLM Task Drift with Activation Deltas","version":6},"cited_work":{"arxiv_id":"2406.00799","doi":null,"metadata_source":"pith","pith_arxiv_id":"2406.00799","snapshot_observed_at":"2026-07-10T20:57:34.835399Z","title":"Are you still on track!? catching LLM task drift with activations","venue":"cs.CR","work_id":"f913aa64-dddb-4ce5-9f2c-5e314589aa1a","year":2024},"citing_paper":{"arxiv_id":"2607.06807","last_updated":"2026-07-07T21:12:27Z","snapshot_observed_at":"2026-08-13T05:08:43.201033Z","submitted_at":"2026-07-07T21:12:27Z","title":"When Agents Go Rogue: Activation-Based Detection of Malicious Behaviors in Multi-Agent Systems","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-07-10T20:55:21.031591Z"},"links":{"cited_paper":"/paper/2406.00799","citing_paper":"/paper/2607.06807"},"observation_digest":"sha256:c499618b13f4a0bd8ae718efbcd0a7b7dc82f74a5121f9853355b5c69c1aec62","observation_id":"4378fb33-7fba-4141-8afe-b42e1254040a","resolution":{"observed_at":"2026-07-10T20:57:34.851213Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2406.00799/citation-record","integrity":"/paper/2406.00799/integrity","json":"/paper/2406.00799/citation-record.json","paper":"/paper/2406.00799"},"outbound":[],"paper":{"arxiv_id":"2406.00799","last_updated":"2025-03-06T17:43:10Z","latest_version":6,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-14T07:43:15.497304Z","submitted_at":"2024-06-02T16:53:21Z","title":"Get my drift? Catching LLM Task Drift with Activation Deltas"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"thesis":"As of 15 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 19 inbound Pith citation observations for arXiv:2406.00799."}