{"as_of":"2026-08-10T21:40:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:4b167d8be8740d5d61d563d7342ae40ada7f445a97e53871e835b409af813af6","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":14,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":14,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-10T06:31:04.303077+00:00","state":"measured"},{"denominator":14,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":14,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-10T17:58:01.315898Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-04T16:49:57.332189Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2406.16201","last_updated":"2025-03-30T08:39:32Z","snapshot_observed_at":"2026-08-10T01:25:04.579166Z","submitted_at":"2024-06-23T19:40:11Z","title":"Blind Baselines Beat Membership Inference Attacks for Foundation Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.16201","snapshot_observed_at":"2026-08-10T17:58:01.315898Z","title":"Blind baselines beat membership inference attacks for foundation models","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2501.11786","last_updated":"2025-01-20T23:19:15Z","snapshot_observed_at":"2026-08-10T17:50:35.255140Z","submitted_at":"2025-01-20T23:19:15Z","title":"Synthetic Data Can Mislead Evaluations: Membership Inference as Machine Text Detection","version":1},"reference_index":2021,"source":"pdf_text","source_observed_at":"2026-08-10T17:58:01.315898Z"},"links":{"cited_paper":"/paper/2406.16201","citing_paper":"/paper/2501.11786"},"observation_digest":"sha256:4def093e22071e688757ffb8c40d69a7c3c1a1ca1bef2a04753cc8546c27bb86","observation_id":"e7466f45-a03f-4c2e-acf0-7ee3857095f1","resolution":{"observed_at":"2026-08-10T17:58:01.315898Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.16201","last_updated":"2025-03-30T08:39:32Z","snapshot_observed_at":"2026-08-10T01:25:04.579166Z","submitted_at":"2024-06-23T19:40:11Z","title":"Blind Baselines Beat Membership Inference Attacks for Foundation Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.16201","snapshot_observed_at":"2026-08-09T19:32:34.210438Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.00306","last_updated":"2025-06-30T16:37:59Z","snapshot_observed_at":"2026-08-10T19:15:16.208697Z","submitted_at":"2025-02-01T04:01:18Z","title":"Riddle Me This! Stealthy Membership Inference for Retrieval-Augmented Generation","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-09T19:32:34.210438Z"},"links":{"cited_paper":"/paper/2406.16201","citing_paper":"/paper/2502.00306"},"observation_digest":"sha256:0634ebb4de87ed8c995734a1762998a76a254f7210960ac1b5c4114164afe0f5","observation_id":"46ad08a5-44ba-4310-a002-24e41f574e34","resolution":{"observed_at":"2026-08-09T19:32:34.210438Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.16201","last_updated":"2025-03-30T08:39:32Z","snapshot_observed_at":"2026-08-10T01:25:04.579166Z","submitted_at":"2024-06-23T19:40:11Z","title":"Blind Baselines Beat Membership Inference Attacks for Foundation Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.16201","snapshot_observed_at":"2026-08-09T18:11:34.958297Z","title":"Blind baselines beat member- ship inference attacks for foundation models","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2502.00678","last_updated":"2025-05-20T20:47:57Z","snapshot_observed_at":"2026-08-10T03:23:46.877552Z","submitted_at":"2025-02-02T05:50:39Z","title":"How Contaminated Is Your Benchmark? Quantifying Dataset Leakage in Large Language Models with Kernel Divergence","version":2},"reference_index":2022,"source":"pdf_text","source_observed_at":"2026-08-09T18:11:34.958297Z"},"links":{"cited_paper":"/paper/2406.16201","citing_paper":"/paper/2502.00678"},"observation_digest":"sha256:c39067ecaaf7c09b794be505b9e3eeffde4bffc406af72780e503ebd5315da4a","observation_id":"50c0aa63-13be-43e9-b518-401304874202","resolution":{"observed_at":"2026-08-09T18:11:34.958297Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.16201","last_updated":"2025-03-30T08:39:32Z","snapshot_observed_at":"2026-08-10T01:25:04.579166Z","submitted_at":"2024-06-23T19:40:11Z","title":"Blind Baselines Beat Membership Inference Attacks for Foundation Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.16201","snapshot_observed_at":"2026-08-09T12:47:21.646809Z","title":"Blind baselines beat membership inference attacks for foundation models","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2502.02260","last_updated":"2026-06-02T17:48:48Z","snapshot_observed_at":"2026-08-09T12:42:57.704129Z","submitted_at":"2025-02-04T12:17:08Z","title":"Position: Adversarial ML for LLMs Is Not Making Any Progress","version":2},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-09T12:47:21.646809Z"},"links":{"cited_paper":"/paper/2406.16201","citing_paper":"/paper/2502.02260"},"observation_digest":"sha256:eb18df42e35151dd35fd25132abe22f1c8d4380c93844e43dec75b0d5d6fd1db","observation_id":"65b390e2-b07e-47ce-8d8e-4bc27b8f4354","resolution":{"observed_at":"2026-08-09T12:47:21.646809Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.16201","last_updated":"2025-03-30T08:39:32Z","snapshot_observed_at":"2026-08-10T01:25:04.579166Z","submitted_at":"2024-06-23T19:40:11Z","title":"Blind Baselines Beat Membership Inference Attacks for Foundation Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.16201","snapshot_observed_at":"2026-08-07T12:35:37.466719Z","title":"Blind baselines beat membership inference attacks for foundation models, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.24832","last_updated":"2025-06-18T15:27:03Z","snapshot_observed_at":"2026-08-08T09:16:38.722740Z","submitted_at":"2025-05-30T17:34:03Z","title":"How much do language models memorize?","version":3},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:37.466719Z"},"links":{"cited_paper":"/paper/2406.16201","citing_paper":"/paper/2505.24832"},"observation_digest":"sha256:bcb41aa09c9c87f684bfefe01bf1d3eb28a6f5ed5d62e97ffed18c0ae61e4513","observation_id":"55013165-6fae-4f78-8c63-3d6d866a728c","resolution":{"observed_at":"2026-08-07T12:35:37.466719Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.16201","last_updated":"2025-03-30T08:39:32Z","snapshot_observed_at":"2026-08-10T01:25:04.579166Z","submitted_at":"2024-06-23T19:40:11Z","title":"Blind Baselines Beat Membership Inference Attacks for Foundation Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.16201","snapshot_observed_at":"2026-08-07T06:13:04.729680Z","title":"Blind Baselines Beat Membership Inference Attacks for Foundation Models.arXiv preprint arXiv:2406.16201, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.729680Z"},"links":{"cited_paper":"/paper/2406.16201","citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:558c7898eaab4f89c25884c3ecb3e149d261f8b37a6d19b65e513068cb37561e","observation_id":"8eaa5759-0314-41c5-a184-6b38f69dae84","resolution":{"observed_at":"2026-08-07T06:13:04.729680Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.16201","last_updated":"2025-03-30T08:39:32Z","snapshot_observed_at":"2026-08-10T01:25:04.579166Z","submitted_at":"2024-06-23T19:40:11Z","title":"Blind Baselines Beat Membership Inference Attacks for Foundation Models","version":2},"cited_work":{"arxiv_id":"2406.16201","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2406.16201","snapshot_observed_at":"2026-07-04T16:49:57.332189Z","title":"Blind baselines beat membership inference attacks for foundation models","venue":null,"work_id":"724f74b4-55dc-45ea-90ee-71a372c21be3","year":2026},"citing_paper":{"arxiv_id":"2506.06057","last_updated":"2026-05-03T07:24:06Z","snapshot_observed_at":"2026-08-02T17:34:16.527589Z","submitted_at":"2025-06-06T13:02:59Z","title":"Hey, That's My Data! Token-Only Dataset Inference in Large Language Models","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-05-19T11:03:03.204840Z"},"links":{"cited_paper":"/paper/2406.16201","citing_paper":"/paper/2506.06057"},"observation_digest":"sha256:257ea144e54270052ee2cb8af5b5b52396ff36cf0855787b78e31a924d685865","observation_id":"acbb2d96-5b45-4e4a-a34e-9f1fb404ad37","resolution":{"observed_at":"2026-05-19T11:07:15.785816Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.16201","last_updated":"2025-03-30T08:39:32Z","snapshot_observed_at":"2026-08-10T01:25:04.579166Z","submitted_at":"2024-06-23T19:40:11Z","title":"Blind Baselines Beat Membership Inference Attacks for Foundation Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.16201","snapshot_observed_at":"2026-08-07T04:33:16.850599Z","title":"Blind baselines beat membership inference attacks for foun- dation models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.10424","last_updated":"2025-06-12T07:23:56Z","snapshot_observed_at":"2026-08-08T16:23:05.158098Z","submitted_at":"2025-06-12T07:23:56Z","title":"SOFT: Selective Data Obfuscation for Protecting LLM Fine-tuning against Membership Inference Attacks","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T04:33:16.850599Z"},"links":{"cited_paper":"/paper/2406.16201","citing_paper":"/paper/2506.10424"},"observation_digest":"sha256:ecbc6208c3953154e2f278e8118eb2763f4615e3a6e37f6d250e0e8ca79ba45f","observation_id":"c073c910-4be3-4f8a-bfb6-ccb2432706b5","resolution":{"observed_at":"2026-08-07T04:33:16.850599Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.16201","last_updated":"2025-03-30T08:39:32Z","snapshot_observed_at":"2026-08-10T01:25:04.579166Z","submitted_at":"2024-06-23T19:40:11Z","title":"Blind Baselines Beat Membership Inference Attacks for Foundation Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.16201","snapshot_observed_at":"2026-08-07T00:42:28.132202Z","title":"Blind base- lines beat membership inference attacks for foundation models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.13009","last_updated":"2025-06-16T00:30:02Z","snapshot_observed_at":"2026-08-09T22:56:31.752883Z","submitted_at":"2025-06-16T00:30:02Z","title":"Rectifying Privacy and Efficacy Measurements in Machine Unlearning: A New Inference Attack Perspective","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-07T00:42:28.132202Z"},"links":{"cited_paper":"/paper/2406.16201","citing_paper":"/paper/2506.13009"},"observation_digest":"sha256:6cb9e9b98dcfa188576046fd992f25e56269754765d2da8fb667b82267535b43","observation_id":"645920de-1fd1-4335-863c-bc93d144ea7f","resolution":{"observed_at":"2026-08-07T00:42:28.132202Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.16201","last_updated":"2025-03-30T08:39:32Z","snapshot_observed_at":"2026-08-10T01:25:04.579166Z","submitted_at":"2024-06-23T19:40:11Z","title":"Blind Baselines Beat Membership Inference Attacks for Foundation Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.16201","snapshot_observed_at":"2026-08-07T00:30:35.058644Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.13972","last_updated":"2025-07-03T17:45:38Z","snapshot_observed_at":"2026-08-10T19:51:37.187191Z","submitted_at":"2025-06-16T20:22:07Z","title":"Membership Inference Attacks as Privacy Tools: Reliability, Disparity and Ensemble","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T00:30:35.058644Z"},"links":{"cited_paper":"/paper/2406.16201","citing_paper":"/paper/2506.13972"},"observation_digest":"sha256:0108781d69f1e0353f7012089675a5da61e24cb37dabafe2f7dd71912f92007e","observation_id":"70e6cf08-dc4a-4b82-a179-d8d1aea8ca75","resolution":{"observed_at":"2026-08-07T00:30:35.058644Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.16201","last_updated":"2025-03-30T08:39:32Z","snapshot_observed_at":"2026-08-10T01:25:04.579166Z","submitted_at":"2024-06-23T19:40:11Z","title":"Blind Baselines Beat Membership Inference Attacks for Foundation Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.16201","snapshot_observed_at":"2026-08-05T20:31:44.862860Z","title":"Blind baselines beat membership inference attacks for foundation models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.10404","last_updated":"2025-08-14T07:12:44Z","snapshot_observed_at":"2026-08-08T02:31:17.622343Z","submitted_at":"2025-08-14T07:12:44Z","title":"Layer-Wise Perturbations via Sparse Autoencoders for Adversarial Text Generation","version":1},"reference_index":130,"source":"pdf_text","source_observed_at":"2026-08-05T20:31:44.862860Z"},"links":{"cited_paper":"/paper/2406.16201","citing_paper":"/paper/2508.10404"},"observation_digest":"sha256:ad1eefb6bf35c12fe56d1512dce7f280f10cec06cbae9e41b9a39b1844d939bb","observation_id":"caa7fbb1-adbc-43b4-99a1-1ed6457181d5","resolution":{"observed_at":"2026-08-05T20:31:44.862860Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.16201","last_updated":"2025-03-30T08:39:32Z","snapshot_observed_at":"2026-08-10T01:25:04.579166Z","submitted_at":"2024-06-23T19:40:11Z","title":"Blind Baselines Beat Membership Inference Attacks for Foundation Models","version":2},"cited_work":{"arxiv_id":"2406.16201","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2406.16201","snapshot_observed_at":"2026-07-04T16:49:57.332189Z","title":"Blind baselines beat membership inference attacks for foundation models","venue":null,"work_id":"724f74b4-55dc-45ea-90ee-71a372c21be3","year":2026},"citing_paper":{"arxiv_id":"2606.09401","last_updated":"2026-06-08T12:21:02Z","snapshot_observed_at":"2026-07-06T23:48:44.159537Z","submitted_at":"2026-06-08T12:21:02Z","title":"Benchmarking Empirical Privacy Protection for Adaptations of Large Language Models","version":1},"reference_index":285,"source":"arxiv_source","source_observed_at":"2026-06-27T17:13:46.335347Z"},"links":{"cited_paper":"/paper/2406.16201","citing_paper":"/paper/2606.09401"},"observation_digest":"sha256:855667f49c8393a313c510381e08384dc589184a96d25f7835d3da46df3aa450","observation_id":"0559cb92-41b8-49a9-a2df-a94f97c92065","resolution":{"observed_at":"2026-07-03T00:27:29.601787Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.16201","last_updated":"2025-03-30T08:39:32Z","snapshot_observed_at":"2026-08-10T01:25:04.579166Z","submitted_at":"2024-06-23T19:40:11Z","title":"Blind Baselines Beat Membership Inference Attacks for Foundation Models","version":2},"cited_work":{"arxiv_id":"2406.16201","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2406.16201","snapshot_observed_at":"2026-07-04T16:49:57.332189Z","title":"Blind baselines beat membership inference attacks for foundation models","venue":null,"work_id":"724f74b4-55dc-45ea-90ee-71a372c21be3","year":2026},"citing_paper":{"arxiv_id":"2606.24408","last_updated":"2026-06-23T10:45:11Z","snapshot_observed_at":"2026-08-08T13:03:12.984552Z","submitted_at":"2026-06-23T10:45:11Z","title":"Natural Identifiers for Privacy and Data Audits in Large Language Models","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-06-26T00:16:34.961376Z"},"links":{"cited_paper":"/paper/2406.16201","citing_paper":"/paper/2606.24408"},"observation_digest":"sha256:eeee8319c2663c263f360f4330df58835f868f1e5bac582dbb53f2b230f69dc7","observation_id":"80e0ad19-9119-40b8-b0a3-c6b491123a18","resolution":{"observed_at":"2026-07-04T16:49:57.333760Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.16201","last_updated":"2025-03-30T08:39:32Z","snapshot_observed_at":"2026-08-10T01:25:04.579166Z","submitted_at":"2024-06-23T19:40:11Z","title":"Blind Baselines Beat Membership Inference Attacks for Foundation Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.16201","snapshot_observed_at":"2026-08-04T01:13:45.742226Z","title":"Blind baselines beat membership inference attacks for foundation models","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.00144","last_updated":"2026-07-31T15:44:43Z","snapshot_observed_at":"2026-08-10T10:36:41.921128Z","submitted_at":"2026-07-31T15:44:43Z","title":"Leak It: A Probabilistic Approach to Training-Data Extraction from Black-Box Language Models","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-04T01:13:45.742226Z"},"links":{"cited_paper":"/paper/2406.16201","citing_paper":"/paper/2608.00144"},"observation_digest":"sha256:c55bb2c9da012c77718374c90078dea007e30a94dac780a09d3ca78b77603d75","observation_id":"248863ba-a2bf-44eb-b301-866a91c8152c","resolution":{"observed_at":"2026-08-04T01:13:45.742226Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2406.16201/citation-record","integrity":"/paper/2406.16201/integrity","json":"/paper/2406.16201/citation-record.json","paper":"/paper/2406.16201"},"outbound":[],"paper":{"arxiv_id":"2406.16201","last_updated":"2025-03-30T08:39:32Z","latest_version":2,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-10T01:25:04.579166Z","submitted_at":"2024-06-23T19:40:11Z","title":"Blind Baselines Beat Membership Inference Attacks for Foundation Models"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"thesis":"As of 10 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 14 inbound Pith citation observations for arXiv:2406.16201."}