{"as_of":"2026-08-10T00:26:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:98d3c509896d70f739ddfea610dafde25a8747f6ad5e60660a6a5c0b14146e4a","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":8,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":8,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":8,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":8,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-09T14:47:15.427626Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-01T10:15:44.407671Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2406.06852","last_updated":"2025-01-04T13:39:47Z","snapshot_observed_at":"2026-07-06T18:28:33.795339Z","submitted_at":"2024-06-10T23:54:21Z","title":"A Survey of Recent Backdoor Attacks and Defenses in Large Language Models","version":5},"cited_work":{"arxiv_id":"2406.06852","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2406.06852","snapshot_observed_at":"2026-07-01T10:15:44.407671Z","title":"A survey of backdoor attacks and defenses on large language models: Implications for security measures","venue":null,"work_id":"6b1cfebb-ea81-4b80-8c30-633ab38e6705","year":2024},"citing_paper":{"arxiv_id":"2409.18169","last_updated":"2026-04-23T18:48:49Z","snapshot_observed_at":"2026-07-06T19:22:58.341345Z","submitted_at":"2024-09-26T17:55:22Z","title":"Harmful Fine-tuning Attacks and Defenses for Large Language Models: A Survey","version":6},"reference_index":180,"source":"pdf_text","source_observed_at":"2026-05-23T20:58:16.237327Z"},"links":{"cited_paper":"/paper/2406.06852","citing_paper":"/paper/2409.18169"},"observation_digest":"sha256:c0f76416bc7c0208f45fdb133562c2d8e8d04e4f0be6b6f2e33149529c7b8791","observation_id":"ddaba08f-8856-4763-90b4-45e359951436","resolution":{"observed_at":"2026-05-23T20:58:26.433054Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.06852","last_updated":"2025-01-04T13:39:47Z","snapshot_observed_at":"2026-07-06T18:28:33.795339Z","submitted_at":"2024-06-10T23:54:21Z","title":"A Survey of Recent Backdoor Attacks and Defenses in Large Language Models","version":5},"cited_work":{"arxiv_id":"2406.06852","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2406.06852","snapshot_observed_at":"2026-07-01T10:15:44.407671Z","title":"A survey of backdoor attacks and defenses on large language models: Implications for security measures","venue":null,"work_id":"6b1cfebb-ea81-4b80-8c30-633ab38e6705","year":2024},"citing_paper":{"arxiv_id":"2501.18416","last_updated":"2025-11-23T13:33:44Z","snapshot_observed_at":"2026-08-02T08:17:47.207681Z","submitted_at":"2025-01-30T15:14:55Z","title":"Exploring Potential Prompt Injection Attacks in Federated Military LLMs and Their Mitigation","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-05-23T04:37:59.969975Z"},"links":{"cited_paper":"/paper/2406.06852","citing_paper":"/paper/2501.18416"},"observation_digest":"sha256:cf80a29341687f2d245c0ad861a084e60c98cddedb9121f8c14131d5fca2bba1","observation_id":"92908b84-f482-4baf-bd3d-479823319aa0","resolution":{"observed_at":"2026-05-23T04:42:35.090883Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.06852","last_updated":"2025-01-04T13:39:47Z","snapshot_observed_at":"2026-07-06T18:28:33.795339Z","submitted_at":"2024-06-10T23:54:21Z","title":"A Survey of Recent Backdoor Attacks and Defenses in Large Language Models","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.06852","snapshot_observed_at":"2026-08-09T14:47:15.427626Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.05209","last_updated":"2025-07-24T21:34:54Z","snapshot_observed_at":"2026-08-09T22:40:17.102835Z","submitted_at":"2025-02-03T18:59:16Z","title":"Model Tampering Attacks Enable More Rigorous Evaluations of LLM Capabilities","version":4},"reference_index":89,"source":"arxiv_source","source_observed_at":"2026-08-09T14:47:15.427626Z"},"links":{"cited_paper":"/paper/2406.06852","citing_paper":"/paper/2502.05209"},"observation_digest":"sha256:ccb7d4496a1b2cb7a93c8323a4c9ad9e6a3aafb94669fec9205b7fb9db0ae439","observation_id":"c52482b9-2f28-4048-80f8-85433775e0de","resolution":{"observed_at":"2026-08-09T14:47:15.427626Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.06852","last_updated":"2025-01-04T13:39:47Z","snapshot_observed_at":"2026-07-06T18:28:33.795339Z","submitted_at":"2024-06-10T23:54:21Z","title":"A Survey of Recent Backdoor Attacks and Defenses in Large Language Models","version":5},"cited_work":{"arxiv_id":"2406.06852","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2406.06852","snapshot_observed_at":"2026-07-01T10:15:44.407671Z","title":"A survey of backdoor attacks and defenses on large language models: Implications for security measures","venue":null,"work_id":"6b1cfebb-ea81-4b80-8c30-633ab38e6705","year":2024},"citing_paper":{"arxiv_id":"2502.20650","last_updated":"2026-05-07T09:28:01Z","snapshot_observed_at":"2026-07-06T20:44:04.093457Z","submitted_at":"2025-02-28T02:08:26Z","title":"Gungnir: Exploiting Stylistic Features in Images for Backdoor Attacks on Diffusion Models","version":5},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-05-23T02:35:35.639750Z"},"links":{"cited_paper":"/paper/2406.06852","citing_paper":"/paper/2502.20650"},"observation_digest":"sha256:2615b85e4925cf9eb834cf70be879a486ae4bbe013d20dbacc9c2f380333fa68","observation_id":"d4c59593-2428-4189-a8e9-350587cd2a94","resolution":{"observed_at":"2026-05-23T02:37:25.687974Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.06852","last_updated":"2025-01-04T13:39:47Z","snapshot_observed_at":"2026-07-06T18:28:33.795339Z","submitted_at":"2024-06-10T23:54:21Z","title":"A Survey of Recent Backdoor Attacks and Defenses in Large Language Models","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.06852","snapshot_observed_at":"2026-08-07T00:51:20.499535Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.12551","last_updated":"2025-08-26T21:35:58Z","snapshot_observed_at":"2026-08-09T17:07:40.331806Z","submitted_at":"2025-06-14T15:48:53Z","title":"MEraser: An Effective Fingerprint Erasure Approach for Large Language Models","version":2},"reference_index":52,"source":"arxiv_source","source_observed_at":"2026-08-07T00:51:20.499535Z"},"links":{"cited_paper":"/paper/2406.06852","citing_paper":"/paper/2506.12551"},"observation_digest":"sha256:10922029f6dde5307a7bb8e821e433d5f1563200cfa3161115f188c312c51fee","observation_id":"5b27d4bc-ccb3-4bcc-90b6-2298c7efe159","resolution":{"observed_at":"2026-08-07T00:51:20.499535Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.06852","last_updated":"2025-01-04T13:39:47Z","snapshot_observed_at":"2026-07-06T18:28:33.795339Z","submitted_at":"2024-06-10T23:54:21Z","title":"A Survey of Recent Backdoor Attacks and Defenses in Large Language Models","version":5},"cited_work":{"arxiv_id":"2406.06852","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2406.06852","snapshot_observed_at":"2026-07-01T10:15:44.407671Z","title":"A survey of backdoor attacks and defenses on large language models: Implications for security measures","venue":null,"work_id":"6b1cfebb-ea81-4b80-8c30-633ab38e6705","year":2024},"citing_paper":{"arxiv_id":"2510.18333","last_updated":"2026-04-21T04:19:09Z","snapshot_observed_at":"2026-07-06T22:33:39.148066Z","submitted_at":"2025-10-21T06:34:51Z","title":"Position: LLM Watermarking Should Align Stakeholders' Incentives for Practical Adoption","version":2},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-05-18T05:24:25.622071Z"},"links":{"cited_paper":"/paper/2406.06852","citing_paper":"/paper/2510.18333"},"observation_digest":"sha256:a14cfc831a8c21f229914d3d38522583e60f1e4462feee0a515c997432bb0294","observation_id":"19220c8f-b5dc-4c40-9f04-7ffa7dae0097","resolution":{"observed_at":"2026-05-18T05:25:54.532819Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.06852","last_updated":"2025-01-04T13:39:47Z","snapshot_observed_at":"2026-07-06T18:28:33.795339Z","submitted_at":"2024-06-10T23:54:21Z","title":"A Survey of Recent Backdoor Attacks and Defenses in Large Language Models","version":5},"cited_work":{"arxiv_id":"2406.06852","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2406.06852","snapshot_observed_at":"2026-07-01T10:15:44.407671Z","title":"A survey of backdoor attacks and defenses on large language models: Implications for security measures","venue":null,"work_id":"6b1cfebb-ea81-4b80-8c30-633ab38e6705","year":2024},"citing_paper":{"arxiv_id":"2605.02255","last_updated":"2026-05-04T06:06:41Z","snapshot_observed_at":"2026-08-07T09:15:56.905794Z","submitted_at":"2026-05-04T06:06:41Z","title":"On the Privacy of LLMs: An Ablation Study","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-05-08T18:25:05.586464Z"},"links":{"cited_paper":"/paper/2406.06852","citing_paper":"/paper/2605.02255"},"observation_digest":"sha256:16999cfd1080ed3b7afbac1a3538b258187730cbc1a014c97def7f5ac7aba27e","observation_id":"b9f4da72-1894-4442-8aa8-efa60b306167","resolution":{"observed_at":"2026-05-09T06:25:48.860158Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.06852","last_updated":"2025-01-04T13:39:47Z","snapshot_observed_at":"2026-07-06T18:28:33.795339Z","submitted_at":"2024-06-10T23:54:21Z","title":"A Survey of Recent Backdoor Attacks and Defenses in Large Language Models","version":5},"cited_work":{"arxiv_id":"2406.06852","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2406.06852","snapshot_observed_at":"2026-07-01T10:15:44.407671Z","title":"A survey of backdoor attacks and defenses on large language models: Implications for security measures","venue":null,"work_id":"6b1cfebb-ea81-4b80-8c30-633ab38e6705","year":2024},"citing_paper":{"arxiv_id":"2606.31309","last_updated":"2026-06-30T08:19:00Z","snapshot_observed_at":"2026-08-09T09:59:52.584739Z","submitted_at":"2026-06-30T08:19:00Z","title":"CSO-LLM: Class Subspace Orthogonalization for Post-Training Backdoor Detection and Trigger Inversion in LLMs","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-07-01T05:42:10.497856Z"},"links":{"cited_paper":"/paper/2406.06852","citing_paper":"/paper/2606.31309"},"observation_digest":"sha256:bf0378f6680bd9ae7abc75e4094bea8c62a1574d223632320c476ec20dfe3327","observation_id":"67611283-6140-4380-9b7e-5ee0e0bd1b5f","resolution":{"observed_at":"2026-07-01T10:15:44.408974Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2406.06852/citation-record","integrity":"/paper/2406.06852/integrity","json":"/paper/2406.06852/citation-record.json","paper":"/paper/2406.06852"},"outbound":[],"paper":{"arxiv_id":"2406.06852","last_updated":"2025-01-04T13:39:47Z","latest_version":5,"primary_category":"cs.CR","snapshot_observed_at":"2026-07-06T18:28:33.795339Z","submitted_at":"2024-06-10T23:54:21Z","title":"A Survey of Recent Backdoor Attacks and Defenses in Large Language Models"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 10 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 8 inbound Pith citation observations for arXiv:2406.06852."}