{"as_of":"2026-08-09T03:42:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:49e221d4090de6cb6ff447b60fb1be1ab9f6062c7adb4326f0d0a5c4aa64a42f","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":8,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":8,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":8,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":8,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-08T19:21:18.980851Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-01T08:15:31.728950Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2406.14595","last_updated":"2024-07-01T19:58:00Z","snapshot_observed_at":"2026-07-06T18:34:29.513732Z","submitted_at":"2024-06-20T17:43:18Z","title":"Adversaries Can Misuse Combinations of Safe Models","version":2},"cited_work":{"arxiv_id":"2406.14595","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2406.14595","snapshot_observed_at":"2026-07-01T08:15:31.728950Z","title":"Adversaries can misuse combinations of safe models","venue":null,"work_id":"67e750c5-ff3d-41a0-8538-92e721725bb7","year":2024},"citing_paper":{"arxiv_id":"2410.02644","last_updated":"2025-05-30T03:50:33Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-10-03T16:30:47Z","title":"Agent Security Bench (ASB): Formalizing and Benchmarking Attacks and Defenses in LLM-based Agents","version":4},"reference_index":77,"source":"arxiv_source","source_observed_at":"2026-05-12T13:36:57.011451Z"},"links":{"cited_paper":"/paper/2406.14595","citing_paper":"/paper/2410.02644"},"observation_digest":"sha256:1aba7fdf66badce3f28fc5e8f6ff84d1ebbbe135bf14ffeb626741f3efd401bb","observation_id":"9b6057ff-e9d7-495b-8b22-87d0bee3b9ba","resolution":{"observed_at":"2026-05-12T13:36:57.096155Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.14595","last_updated":"2024-07-01T19:58:00Z","snapshot_observed_at":"2026-07-06T18:34:29.513732Z","submitted_at":"2024-06-20T17:43:18Z","title":"Adversaries Can Misuse Combinations of Safe Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.14595","snapshot_observed_at":"2026-08-08T19:21:18.980851Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.06867","last_updated":"2025-02-08T04:27:33Z","snapshot_observed_at":"2026-08-08T23:29:55.595189Z","submitted_at":"2025-02-08T04:27:33Z","title":"Forbidden Science: Dual-Use AI Challenge Benchmark and Scientific Refusal Tests","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-08T19:21:18.980851Z"},"links":{"cited_paper":"/paper/2406.14595","citing_paper":"/paper/2502.06867"},"observation_digest":"sha256:a8419d47d73b5e418d7ebe7e8129acb86d0ddfdad397c25860434cc28508648b","observation_id":"9ed0c418-1c4c-44b4-946b-b29d5bc43789","resolution":{"observed_at":"2026-08-08T19:21:18.980851Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.14595","last_updated":"2024-07-01T19:58:00Z","snapshot_observed_at":"2026-07-06T18:34:29.513732Z","submitted_at":"2024-06-20T17:43:18Z","title":"Adversaries Can Misuse Combinations of Safe Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.14595","snapshot_observed_at":"2026-08-07T11:11:40.314308Z","title":"Adversaries can misuse combinations of safe models.arXiv preprint arXiv:2406.14595, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-09T00:38:29.639641Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.314308Z"},"links":{"cited_paper":"/paper/2406.14595","citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:026293440cc72f35d55489740d94d55245b0c2f448e8b11af739f338a86bae3b","observation_id":"15125cb8-ae57-4f43-8ec1-8a7bf3d9eb45","resolution":{"observed_at":"2026-08-07T11:11:40.314308Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.14595","last_updated":"2024-07-01T19:58:00Z","snapshot_observed_at":"2026-07-06T18:34:29.513732Z","submitted_at":"2024-06-20T17:43:18Z","title":"Adversaries Can Misuse Combinations of Safe Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.14595","snapshot_observed_at":"2026-08-07T12:11:19.902895Z","title":"Jones, A","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.05376","last_updated":"2025-06-09T05:48:22Z","snapshot_observed_at":"2026-08-07T12:39:09.825243Z","submitted_at":"2025-05-30T22:58:54Z","title":"A Red Teaming Roadmap Towards System-Level Safety","version":2},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-07T12:11:19.902895Z"},"links":{"cited_paper":"/paper/2406.14595","citing_paper":"/paper/2506.05376"},"observation_digest":"sha256:3617dc9a1a64c6c646f72ccecfa277b80e5b17ca8eefe6a5b0b76903642b2dd0","observation_id":"4a844ad3-82e5-4e09-8a30-e3934820741d","resolution":{"observed_at":"2026-08-07T12:11:19.902895Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.14595","last_updated":"2024-07-01T19:58:00Z","snapshot_observed_at":"2026-07-06T18:34:29.513732Z","submitted_at":"2024-06-20T17:43:18Z","title":"Adversaries Can Misuse Combinations of Safe Models","version":2},"cited_work":{"arxiv_id":"2406.14595","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2406.14595","snapshot_observed_at":"2026-07-01T08:15:31.728950Z","title":"Adversaries can misuse combinations of safe models","venue":null,"work_id":"67e750c5-ff3d-41a0-8538-92e721725bb7","year":2024},"citing_paper":{"arxiv_id":"2506.06414","last_updated":"2026-04-20T20:58:30Z","snapshot_observed_at":"2026-08-03T02:03:44.971897Z","submitted_at":"2025-06-06T17:33:33Z","title":"Benchmarking Misuse Mitigation Against Covert Adversaries","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-05-19T10:29:05.104520Z"},"links":{"cited_paper":"/paper/2406.14595","citing_paper":"/paper/2506.06414"},"observation_digest":"sha256:060c5efe8b130c48c904a30772651e21a4ff82de42afb53f7e088334a682e15c","observation_id":"62a1cc7d-b86e-467c-866a-c74da74a083a","resolution":{"observed_at":"2026-05-19T10:32:14.709487Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.14595","last_updated":"2024-07-01T19:58:00Z","snapshot_observed_at":"2026-07-06T18:34:29.513732Z","submitted_at":"2024-06-20T17:43:18Z","title":"Adversaries Can Misuse Combinations of Safe Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.14595","snapshot_observed_at":"2026-08-04T09:25:44.450683Z","title":"Dragan, and Jacob Steinhardt","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.15476","last_updated":"2026-07-04T04:20:15Z","snapshot_observed_at":"2026-08-06T02:45:04.316908Z","submitted_at":"2025-10-17T09:38:54Z","title":"SoK: Systematizing LLM Prompt Security: Taxonomies, Datasets, and Unified Evaluation of Attacks and Defenses","version":3},"reference_index":89,"source":"pdf_text","source_observed_at":"2026-08-04T09:25:44.450683Z"},"links":{"cited_paper":"/paper/2406.14595","citing_paper":"/paper/2510.15476"},"observation_digest":"sha256:d79c87e1ca2db1053db4e618456802732b50ec910182256bbb32f756e4cccb99","observation_id":"61c77a38-f94c-43af-8797-e095fed36918","resolution":{"observed_at":"2026-08-04T09:25:44.450683Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.14595","last_updated":"2024-07-01T19:58:00Z","snapshot_observed_at":"2026-07-06T18:34:29.513732Z","submitted_at":"2024-06-20T17:43:18Z","title":"Adversaries Can Misuse Combinations of Safe Models","version":2},"cited_work":{"arxiv_id":"2406.14595","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2406.14595","snapshot_observed_at":"2026-07-01T08:15:31.728950Z","title":"Adversaries can misuse combinations of safe models","venue":null,"work_id":"67e750c5-ff3d-41a0-8538-92e721725bb7","year":2024},"citing_paper":{"arxiv_id":"2605.00248","last_updated":"2026-04-30T21:32:10Z","snapshot_observed_at":"2026-07-06T23:13:42.661364Z","submitted_at":"2026-04-30T21:32:10Z","title":"Causal Foundations of Collective Agency","version":1},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-05-09T19:55:16.880044Z"},"links":{"cited_paper":"/paper/2406.14595","citing_paper":"/paper/2605.00248"},"observation_digest":"sha256:2c2fee6aa330db7d90c0d01ec41def9229d039dc56b32daa192e20c5d54c73f7","observation_id":"217a296c-8983-4b86-8698-5b82eda7895f","resolution":{"observed_at":"2026-05-11T15:26:21.307306Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.14595","last_updated":"2024-07-01T19:58:00Z","snapshot_observed_at":"2026-07-06T18:34:29.513732Z","submitted_at":"2024-06-20T17:43:18Z","title":"Adversaries Can Misuse Combinations of Safe Models","version":2},"cited_work":{"arxiv_id":"2406.14595","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2406.14595","snapshot_observed_at":"2026-07-01T08:15:31.728950Z","title":"Adversaries can misuse combinations of safe models","venue":null,"work_id":"67e750c5-ff3d-41a0-8538-92e721725bb7","year":2024},"citing_paper":{"arxiv_id":"2606.00047","last_updated":"2026-05-01T08:30:27Z","snapshot_observed_at":"2026-07-06T23:40:46.825645Z","submitted_at":"2026-05-01T08:30:27Z","title":"Comprehensive AI governance requires addressing non-model gains","version":1},"reference_index":52,"source":"arxiv_source","source_observed_at":"2026-07-01T08:11:23.860723Z"},"links":{"cited_paper":"/paper/2406.14595","citing_paper":"/paper/2606.00047"},"observation_digest":"sha256:206b7bab6fbb92282366e1d320ccba95c0d754a614dd8793f503705cb800a5fd","observation_id":"f508b57e-6f24-44e7-b03e-7a9e347caa83","resolution":{"observed_at":"2026-07-01T08:15:31.732100Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2406.14595/citation-record","integrity":"/paper/2406.14595/integrity","json":"/paper/2406.14595/citation-record.json","paper":"/paper/2406.14595"},"outbound":[],"paper":{"arxiv_id":"2406.14595","last_updated":"2024-07-01T19:58:00Z","latest_version":2,"primary_category":"cs.CR","snapshot_observed_at":"2026-07-06T18:34:29.513732Z","submitted_at":"2024-06-20T17:43:18Z","title":"Adversaries Can Misuse Combinations of Safe Models"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 8 inbound Pith citation observations for arXiv:2406.14595."}