{"as_of":"2026-08-08T18:42:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:ba16757519a6f2853d14ec8c7659ce1b7e7c2a3fa69bde2ccd8605a1f987beb8","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":24,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":24,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":24,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":24,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-08T17:02:47.451468Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-03T17:58:47.266895Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2408.00761","last_updated":"2025-02-10T18:26:14Z","snapshot_observed_at":"2026-08-06T05:53:06.918202Z","submitted_at":"2024-08-01T17:59:12Z","title":"Tamper-Resistant Safeguards for Open-Weight LLMs","version":4},"cited_work":{"arxiv_id":"2408.00761","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2408.00761","snapshot_observed_at":"2026-07-03T17:58:47.266895Z","title":"Tamper-resistant safeguards for open-weight llms","venue":null,"work_id":"216b3b7b-061c-455e-be7b-a6d707795993","year":2024},"citing_paper":{"arxiv_id":"2409.18169","last_updated":"2026-04-23T18:48:49Z","snapshot_observed_at":"2026-07-06T19:22:58.341345Z","submitted_at":"2024-09-26T17:55:22Z","title":"Harmful Fine-tuning Attacks and Defenses for Large Language Models: A Survey","version":6},"reference_index":144,"source":"pdf_text","source_observed_at":"2026-05-23T20:58:16.237327Z"},"links":{"cited_paper":"/paper/2408.00761","citing_paper":"/paper/2409.18169"},"observation_digest":"sha256:76a32d5aef229d6ba9e9b2430ae31a0641e0809defbaa9e7258589605d74c663","observation_id":"84378219-be70-47eb-b045-e8be90f1fa93","resolution":{"observed_at":"2026-05-23T20:58:25.958886Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2408.00761","last_updated":"2025-02-10T18:26:14Z","snapshot_observed_at":"2026-08-06T05:53:06.918202Z","submitted_at":"2024-08-01T17:59:12Z","title":"Tamper-Resistant Safeguards for Open-Weight LLMs","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.00761","snapshot_observed_at":"2026-08-08T17:02:47.451468Z","title":"Tamirisa, B","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.09638","last_updated":"2025-05-29T06:12:00Z","snapshot_observed_at":"2026-08-08T16:57:04.642430Z","submitted_at":"2025-02-09T20:49:16Z","title":"Jailbreaking to Jailbreak","version":2},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-08T17:02:47.451468Z"},"links":{"cited_paper":"/paper/2408.00761","citing_paper":"/paper/2502.09638"},"observation_digest":"sha256:069f0ac0c51762e206206257818ab53321be2335f474b0eb3ea2857d7a476184","observation_id":"a575d826-5956-4c63-bfce-fa33d383308e","resolution":{"observed_at":"2026-08-08T17:02:47.451468Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.00761","last_updated":"2025-02-10T18:26:14Z","snapshot_observed_at":"2026-08-06T05:53:06.918202Z","submitted_at":"2024-08-01T17:59:12Z","title":"Tamper-Resistant Safeguards for Open-Weight LLMs","version":4},"cited_work":{"arxiv_id":"2408.00761","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2408.00761","snapshot_observed_at":"2026-07-03T17:58:47.266895Z","title":"Tamper-resistant safeguards for open-weight llms","venue":null,"work_id":"216b3b7b-061c-455e-be7b-a6d707795993","year":2024},"citing_paper":{"arxiv_id":"2505.16737","last_updated":"2026-04-23T08:31:23Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-05-22T14:52:10Z","title":"Secure LLM Fine-Tuning via Safety-Aware Probing","version":2},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-05-22T13:07:09.402763Z"},"links":{"cited_paper":"/paper/2408.00761","citing_paper":"/paper/2505.16737"},"observation_digest":"sha256:d2a602839f38844f495a7fff86c31a0ebd68ad844c3eee729e5e654916d500e2","observation_id":"99ed0a68-db84-4abd-bb7c-0eabd1b42ff8","resolution":{"observed_at":"2026-05-22T13:11:35.792350Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2408.00761","last_updated":"2025-02-10T18:26:14Z","snapshot_observed_at":"2026-08-06T05:53:06.918202Z","submitted_at":"2024-08-01T17:59:12Z","title":"Tamper-Resistant Safeguards for Open-Weight LLMs","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.00761","snapshot_observed_at":"2026-08-07T12:05:55.125060Z","title":"Tamper-resistant safeguards for open-weight llms.arXiv preprint arXiv:2408.00761, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00688","last_updated":"2025-05-31T19:43:00Z","snapshot_observed_at":"2026-08-08T11:53:21.671258Z","submitted_at":"2025-05-31T19:43:00Z","title":"Existing Large Language Model Unlearning Evaluations Are Inconclusive","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-07T12:05:55.125060Z"},"links":{"cited_paper":"/paper/2408.00761","citing_paper":"/paper/2506.00688"},"observation_digest":"sha256:67091481d3c0ff49819e5afc463c42c3dddb4d444e9f5708cceffad64fe3876c","observation_id":"cedf324f-8abb-4e10-95c4-f2a870cba0f3","resolution":{"observed_at":"2026-08-07T12:05:55.125060Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.00761","last_updated":"2025-02-10T18:26:14Z","snapshot_observed_at":"2026-08-06T05:53:06.918202Z","submitted_at":"2024-08-01T17:59:12Z","title":"Tamper-Resistant Safeguards for Open-Weight LLMs","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.00761","snapshot_observed_at":"2026-08-07T04:37:07.881113Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.10236","last_updated":"2025-08-14T05:03:53Z","snapshot_observed_at":"2026-08-08T09:47:01.651509Z","submitted_at":"2025-06-11T23:36:30Z","title":"Prompt Attacks Reveal Superficial Knowledge Removal in Unlearning Methods","version":2},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-07T04:37:07.881113Z"},"links":{"cited_paper":"/paper/2408.00761","citing_paper":"/paper/2506.10236"},"observation_digest":"sha256:7a767a8f6e317d0f60a5d31869d344b5545061e6b3b89a981a255b5bef6693be","observation_id":"72cbd017-c19c-46bb-ae8f-632a1a95f874","resolution":{"observed_at":"2026-08-07T04:37:07.881113Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.00761","last_updated":"2025-02-10T18:26:14Z","snapshot_observed_at":"2026-08-06T05:53:06.918202Z","submitted_at":"2024-08-01T17:59:12Z","title":"Tamper-Resistant Safeguards for Open-Weight LLMs","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.00761","snapshot_observed_at":"2026-08-07T00:15:04.114372Z","title":"Tamirisa, B","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-07T04:49:42.432527Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-07T00:15:04.114372Z"},"links":{"cited_paper":"/paper/2408.00761","citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:3fda965a9deea6238131ac417519af6a542edd378ad022bc8a7a48fe44ad95dc","observation_id":"cb9ce222-09c4-4978-ae18-8bf30d6a1af2","resolution":{"observed_at":"2026-08-07T00:15:04.114372Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.00761","last_updated":"2025-02-10T18:26:14Z","snapshot_observed_at":"2026-08-06T05:53:06.918202Z","submitted_at":"2024-08-01T17:59:12Z","title":"Tamper-Resistant Safeguards for Open-Weight LLMs","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.00761","snapshot_observed_at":"2026-08-07T00:56:31.605239Z","title":"Under review","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.17279","last_updated":"2025-06-14T04:22:17Z","snapshot_observed_at":"2026-08-08T00:43:15.134760Z","submitted_at":"2025-06-14T04:22:17Z","title":"Step-by-Step Reasoning Attack: Revealing 'Erased' Knowledge in Large Language Models","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T00:56:31.605239Z"},"links":{"cited_paper":"/paper/2408.00761","citing_paper":"/paper/2506.17279"},"observation_digest":"sha256:8174606ac1ba86831bc96de134abf25f17f07ba657f6ba70ad30fca8056e679c","observation_id":"a075f13e-8f9b-48b1-990d-36327b68a518","resolution":{"observed_at":"2026-08-07T00:56:31.605239Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.00761","last_updated":"2025-02-10T18:26:14Z","snapshot_observed_at":"2026-08-06T05:53:06.918202Z","submitted_at":"2024-08-01T17:59:12Z","title":"Tamper-Resistant Safeguards for Open-Weight LLMs","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.00761","snapshot_observed_at":"2026-08-06T17:50:30.826374Z","title":"Tamper-resistant safeguards for open-weight llms","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.09801","last_updated":"2025-07-13T21:32:15Z","snapshot_observed_at":"2026-08-07T20:59:39.266507Z","submitted_at":"2025-07-13T21:32:15Z","title":"Technical Requirements for Halting Dangerous AI Activities","version":1},"reference_index":38,"source":"arxiv_source","source_observed_at":"2026-08-06T17:50:30.826374Z"},"links":{"cited_paper":"/paper/2408.00761","citing_paper":"/paper/2507.09801"},"observation_digest":"sha256:d2e93d2d3f8a64a799fdb4ed6dc5ce1a10562bf4cacf29562efd79545c084470","observation_id":"6a385aea-d936-4f8c-aa82-dbb279c9b69a","resolution":{"observed_at":"2026-08-06T17:50:30.826374Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.00761","last_updated":"2025-02-10T18:26:14Z","snapshot_observed_at":"2026-08-06T05:53:06.918202Z","submitted_at":"2024-08-01T17:59:12Z","title":"Tamper-Resistant Safeguards for Open-Weight LLMs","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.00761","snapshot_observed_at":"2026-08-06T19:08:26.524698Z","title":"Tamper-resistant safeguards for open-weight llms","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.11544","last_updated":"2025-07-08T23:58:01Z","snapshot_observed_at":"2026-08-06T22:09:08.446996Z","submitted_at":"2025-07-08T23:58:01Z","title":"The Safety Gap Toolkit: Evaluating Hidden Dangers of Open-Source Models","version":1},"reference_index":44,"source":"arxiv_source","source_observed_at":"2026-08-06T19:08:26.524698Z"},"links":{"cited_paper":"/paper/2408.00761","citing_paper":"/paper/2507.11544"},"observation_digest":"sha256:d3e4b65e178a5e15a249537b7c5132c3f848b2f489d156deab6c37eac8c4f346","observation_id":"f87b89ab-3b43-4f80-b269-6f3f7885f2de","resolution":{"observed_at":"2026-08-06T19:08:26.524698Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.00761","last_updated":"2025-02-10T18:26:14Z","snapshot_observed_at":"2026-08-06T05:53:06.918202Z","submitted_at":"2024-08-01T17:59:12Z","title":"Tamper-Resistant Safeguards for Open-Weight LLMs","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.00761","snapshot_observed_at":"2026-08-05T22:56:28.187316Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.06592","last_updated":"2025-08-08T11:16:56Z","snapshot_observed_at":"2026-08-06T11:19:20.440634Z","submitted_at":"2025-08-08T11:16:56Z","title":"Towards Integrated Alignment","version":1},"reference_index":2025,"source":"pdf_text","source_observed_at":"2026-08-05T22:56:28.187316Z"},"links":{"cited_paper":"/paper/2408.00761","citing_paper":"/paper/2508.06592"},"observation_digest":"sha256:edca360db0295c8ee0f3e55d39d28f200a38c28f06362fc80bc62b089d6f2ded","observation_id":"79694803-20ba-4bc8-a100-c1970821ae51","resolution":{"observed_at":"2026-08-05T22:56:28.187316Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.00761","last_updated":"2025-02-10T18:26:14Z","snapshot_observed_at":"2026-08-06T05:53:06.918202Z","submitted_at":"2024-08-01T17:59:12Z","title":"Tamper-Resistant Safeguards for Open-Weight LLMs","version":4},"cited_work":{"arxiv_id":"2408.00761","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2408.00761","snapshot_observed_at":"2026-07-03T17:58:47.266895Z","title":"Tamper-resistant safeguards for open-weight llms","venue":null,"work_id":"216b3b7b-061c-455e-be7b-a6d707795993","year":2024},"citing_paper":{"arxiv_id":"2510.00761","last_updated":"2026-04-18T07:30:06Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-10-01T10:50:14Z","title":"Downgrade to Upgrade: Optimizer Simplification Enhances Robustness in LLM Unlearning","version":5},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-05-18T10:44:53.516653Z"},"links":{"cited_paper":"/paper/2408.00761","citing_paper":"/paper/2510.00761"},"observation_digest":"sha256:332d3478bc4525cc7d8fe5129305392c35aabb11ced9fc3207412ef58d278e46","observation_id":"7b786040-f6e5-476a-bf06-72165ed3e913","resolution":{"observed_at":"2026-05-18T10:46:17.116528Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2408.00761","last_updated":"2025-02-10T18:26:14Z","snapshot_observed_at":"2026-08-06T05:53:06.918202Z","submitted_at":"2024-08-01T17:59:12Z","title":"Tamper-Resistant Safeguards for Open-Weight LLMs","version":4},"cited_work":{"arxiv_id":"2408.00761","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2408.00761","snapshot_observed_at":"2026-07-03T17:58:47.266895Z","title":"Tamper-resistant safeguards for open-weight llms","venue":null,"work_id":"216b3b7b-061c-455e-be7b-a6d707795993","year":2024},"citing_paper":{"arxiv_id":"2511.22681","last_updated":"2026-04-27T15:41:55Z","snapshot_observed_at":"2026-08-08T05:27:45.832486Z","submitted_at":"2025-11-27T18:30:19Z","title":"CacheTrap: Unveiling a Stealthier Gray-Box Trojan against LLMs","version":2},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-05-17T04:13:13.231293Z"},"links":{"cited_paper":"/paper/2408.00761","citing_paper":"/paper/2511.22681"},"observation_digest":"sha256:88c198239398ebe326d8723da420a3fd484a2fa3d9d2df1e7c0004f1354086f7","observation_id":"b82adb25-374f-4802-bf7b-ceffd2bb1671","resolution":{"observed_at":"2026-05-17T04:14:00.155118Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2408.00761","last_updated":"2025-02-10T18:26:14Z","snapshot_observed_at":"2026-08-06T05:53:06.918202Z","submitted_at":"2024-08-01T17:59:12Z","title":"Tamper-Resistant Safeguards for Open-Weight LLMs","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.00761","snapshot_observed_at":"2026-08-03T18:41:34.212799Z","title":"Tamper-resistant safeguards for open-weight llms.URL https://arxiv","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2512.04144","last_updated":"2026-07-14T05:13:06Z","snapshot_observed_at":"2026-08-08T13:08:29.843209Z","submitted_at":"2025-12-03T18:57:59Z","title":"RippleBench: Capturing Ripple Effects Using Existing Knowledge Repositories","version":3},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-03T18:41:34.212799Z"},"links":{"cited_paper":"/paper/2408.00761","citing_paper":"/paper/2512.04144"},"observation_digest":"sha256:76271a755127af85d422735ec4bbb59f975a0a38755b2db0ab21eb680b403f6d","observation_id":"5409273a-ae7e-4ee8-beaf-5d42683a99a9","resolution":{"observed_at":"2026-08-03T18:41:34.212799Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.00761","last_updated":"2025-02-10T18:26:14Z","snapshot_observed_at":"2026-08-06T05:53:06.918202Z","submitted_at":"2024-08-01T17:59:12Z","title":"Tamper-Resistant Safeguards for Open-Weight LLMs","version":4},"cited_work":{"arxiv_id":"2408.00761","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2408.00761","snapshot_observed_at":"2026-07-03T17:58:47.266895Z","title":"Tamper-resistant safeguards for open-weight llms","venue":null,"work_id":"216b3b7b-061c-455e-be7b-a6d707795993","year":2024},"citing_paper":{"arxiv_id":"2602.08813","last_updated":"2026-05-12T17:22:35Z","snapshot_observed_at":"2026-08-06T12:22:42.069570Z","submitted_at":"2026-02-09T15:50:05Z","title":"Robust Policy Optimization to Prevent Catastrophic Forgetting","version":2},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-05-16T05:33:42.965249Z"},"links":{"cited_paper":"/paper/2408.00761","citing_paper":"/paper/2602.08813"},"observation_digest":"sha256:354caa11fbd884d906d1f4cc13b818ac50dc33be832b9f5686e6e94be6f8efd1","observation_id":"3cb9b195-6a58-47f2-9ecf-447dd540ddd0","resolution":{"observed_at":"2026-05-16T05:37:24.175635Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2408.00761","last_updated":"2025-02-10T18:26:14Z","snapshot_observed_at":"2026-08-06T05:53:06.918202Z","submitted_at":"2024-08-01T17:59:12Z","title":"Tamper-Resistant Safeguards for Open-Weight LLMs","version":4},"cited_work":{"arxiv_id":"2408.00761","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2408.00761","snapshot_observed_at":"2026-07-03T17:58:47.266895Z","title":"Tamper-resistant safeguards for open-weight llms","venue":null,"work_id":"216b3b7b-061c-455e-be7b-a6d707795993","year":2024},"citing_paper":{"arxiv_id":"2604.24902","last_updated":"2026-04-27T18:34:08Z","snapshot_observed_at":"2026-07-06T23:10:52.763251Z","submitted_at":"2026-04-27T18:34:08Z","title":"Safety Drift After Fine-Tuning: Evidence from High-Stakes Domains","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-05-07T17:53:57.169962Z"},"links":{"cited_paper":"/paper/2408.00761","citing_paper":"/paper/2604.24902"},"observation_digest":"sha256:bbf035956746aaef8daabb446f81433afa02d4d135175f0d972718b77e33b05e","observation_id":"318d1ff5-2362-4a97-8bd0-5f0406b44834","resolution":{"observed_at":"2026-05-11T23:16:14.104378Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2408.00761","last_updated":"2025-02-10T18:26:14Z","snapshot_observed_at":"2026-08-06T05:53:06.918202Z","submitted_at":"2024-08-01T17:59:12Z","title":"Tamper-Resistant Safeguards for Open-Weight LLMs","version":4},"cited_work":{"arxiv_id":"2408.00761","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2408.00761","snapshot_observed_at":"2026-07-03T17:58:47.266895Z","title":"Tamper-resistant safeguards for open-weight llms","venue":null,"work_id":"216b3b7b-061c-455e-be7b-a6d707795993","year":2024},"citing_paper":{"arxiv_id":"2605.11685","last_updated":"2026-05-12T07:43:46Z","snapshot_observed_at":"2026-08-04T23:07:28.175475Z","submitted_at":"2026-05-12T07:43:46Z","title":"Robust LLM Unlearning Against Relearning Attacks: The Minor Components in Representations Matter","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-05-13T01:06:44.126131Z"},"links":{"cited_paper":"/paper/2408.00761","citing_paper":"/paper/2605.11685"},"observation_digest":"sha256:c9e6905b50f6c27bd245526f2f832af56c0a24a031a6b365b3f9b0778981e230","observation_id":"98e7d853-8b19-4e6a-b457-09320dd21d99","resolution":{"observed_at":"2026-05-13T01:06:59.987995Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2408.00761","last_updated":"2025-02-10T18:26:14Z","snapshot_observed_at":"2026-08-06T05:53:06.918202Z","submitted_at":"2024-08-01T17:59:12Z","title":"Tamper-Resistant Safeguards for Open-Weight LLMs","version":4},"cited_work":{"arxiv_id":"2408.00761","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2408.00761","snapshot_observed_at":"2026-07-03T17:58:47.266895Z","title":"Tamper-resistant safeguards for open-weight llms","venue":null,"work_id":"216b3b7b-061c-455e-be7b-a6d707795993","year":2024},"citing_paper":{"arxiv_id":"2605.14605","last_updated":"2026-05-24T08:34:13Z","snapshot_observed_at":"2026-07-06T23:25:58.895612Z","submitted_at":"2026-05-14T09:22:14Z","title":"One Step to the Side: Why Defenses Against Malicious Finetuning Fail Under Adaptive Adversaries","version":2},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-06-30T21:01:25.549340Z"},"links":{"cited_paper":"/paper/2408.00761","citing_paper":"/paper/2605.14605"},"observation_digest":"sha256:f422f276c4c85ccc76788e49769f2fb617b066dee8abc2570177a8b6e4e2bf62","observation_id":"c736ebea-b22e-40f4-9696-7b30414548fc","resolution":{"observed_at":"2026-06-30T21:05:04.108905Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2408.00761","last_updated":"2025-02-10T18:26:14Z","snapshot_observed_at":"2026-08-06T05:53:06.918202Z","submitted_at":"2024-08-01T17:59:12Z","title":"Tamper-Resistant Safeguards for Open-Weight LLMs","version":4},"cited_work":{"arxiv_id":"2408.00761","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2408.00761","snapshot_observed_at":"2026-07-03T17:58:47.266895Z","title":"Tamper-resistant safeguards for open-weight llms","venue":null,"work_id":"216b3b7b-061c-455e-be7b-a6d707795993","year":2024},"citing_paper":{"arxiv_id":"2606.17168","last_updated":"2026-06-20T10:01:32Z","snapshot_observed_at":"2026-08-08T12:13:21.907844Z","submitted_at":"2026-06-15T18:06:59Z","title":"RepSelect: Robust LLM Unlearning via Representation Selectivity","version":2},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-06-27T03:34:32.388152Z"},"links":{"cited_paper":"/paper/2408.00761","citing_paper":"/paper/2606.17168"},"observation_digest":"sha256:eef0af1b63cd4ab40c0edc32d0f87b9d69c1e78a5634d8fbfa96ba67e9351226","observation_id":"943069a1-ce44-4af4-aa9e-9cc7adefb9c1","resolution":{"observed_at":"2026-07-03T17:58:47.268760Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2408.00761","last_updated":"2025-02-10T18:26:14Z","snapshot_observed_at":"2026-08-06T05:53:06.918202Z","submitted_at":"2024-08-01T17:59:12Z","title":"Tamper-Resistant Safeguards for Open-Weight LLMs","version":4},"cited_work":{"arxiv_id":"2408.00761","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2408.00761","snapshot_observed_at":"2026-07-03T17:58:47.266895Z","title":"Tamper-resistant safeguards for open-weight llms","venue":null,"work_id":"216b3b7b-061c-455e-be7b-a6d707795993","year":2024},"citing_paper":{"arxiv_id":"2606.28962","last_updated":"2026-06-27T15:02:42Z","snapshot_observed_at":"2026-08-02T00:20:36.781197Z","submitted_at":"2026-06-27T15:02:42Z","title":"FlipGuard: Defending Large Language Models Against Quantization-Conditioned Backdoor Attacks","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-06-30T09:39:35.673341Z"},"links":{"cited_paper":"/paper/2408.00761","citing_paper":"/paper/2606.28962"},"observation_digest":"sha256:7bc9b42437758b1f25eb81a2709545f01ff34e9a549827248564ef4fbc24d5ee","observation_id":"0685c087-0354-46ee-85c4-07b18f4a1766","resolution":{"observed_at":"2026-06-30T09:44:37.661358Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2408.00761","last_updated":"2025-02-10T18:26:14Z","snapshot_observed_at":"2026-08-06T05:53:06.918202Z","submitted_at":"2024-08-01T17:59:12Z","title":"Tamper-Resistant Safeguards for Open-Weight LLMs","version":4},"cited_work":{"arxiv_id":"2408.00761","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2408.00761","snapshot_observed_at":"2026-07-03T17:58:47.266895Z","title":"Tamper-resistant safeguards for open-weight llms","venue":null,"work_id":"216b3b7b-061c-455e-be7b-a6d707795993","year":2024},"citing_paper":{"arxiv_id":"2606.29239","last_updated":"2026-08-03T15:22:02Z","snapshot_observed_at":"2026-08-06T23:31:35.878215Z","submitted_at":"2026-06-28T07:06:46Z","title":"Breaking the Rounding Trap: Securing LLMs against Quantization-Conditioned Backdoors","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-06-30T07:47:18.350953Z"},"links":{"cited_paper":"/paper/2408.00761","citing_paper":"/paper/2606.29239"},"observation_digest":"sha256:b286ac81ffaaf35facd6dccb92498ee041d6d72fa6867e88260c0fdcc586757f","observation_id":"b67c46e8-f480-457c-985b-e1b14276b069","resolution":{"observed_at":"2026-06-30T08:04:28.742903Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2408.00761","last_updated":"2025-02-10T18:26:14Z","snapshot_observed_at":"2026-08-06T05:53:06.918202Z","submitted_at":"2024-08-01T17:59:12Z","title":"Tamper-Resistant Safeguards for Open-Weight LLMs","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.00761","snapshot_observed_at":"2026-08-04T04:39:06.903773Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.29239","last_updated":"2026-08-03T15:22:02Z","snapshot_observed_at":"2026-08-06T23:31:35.878215Z","submitted_at":"2026-06-28T07:06:46Z","title":"Breaking the Rounding Trap: Securing LLMs against Quantization-Conditioned Backdoors","version":2},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-04T04:39:06.903773Z"},"links":{"cited_paper":"/paper/2408.00761","citing_paper":"/paper/2606.29239"},"observation_digest":"sha256:8bf18dbcd24735130979494b6be08c244ff3528ccf2c3436c3bc0230a3fb74c9","observation_id":"38d2f7f6-5c06-442c-8c8b-ac8bcc26e93d","resolution":{"observed_at":"2026-08-04T04:39:06.903773Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.00761","last_updated":"2025-02-10T18:26:14Z","snapshot_observed_at":"2026-08-06T05:53:06.918202Z","submitted_at":"2024-08-01T17:59:12Z","title":"Tamper-Resistant Safeguards for Open-Weight LLMs","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.00761","snapshot_observed_at":"2026-08-02T10:25:19.922744Z","title":"Tamper-resistant safeguards for open-weight LLMs","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.16227","last_updated":"2026-06-23T00:17:34Z","snapshot_observed_at":"2026-08-07T03:00:12.668461Z","submitted_at":"2026-06-23T00:17:34Z","title":"LLM Unlearning for Cyber Defense: A Survey on Methods, Challenges, and Emerging Threats","version":1},"reference_index":121,"source":"pdf_text","source_observed_at":"2026-08-02T10:25:19.922744Z"},"links":{"cited_paper":"/paper/2408.00761","citing_paper":"/paper/2607.16227"},"observation_digest":"sha256:fe7acdb949079773689435de4473676325cc1fa70da4ddae2b3bfb2302c3d728","observation_id":"3173a2fd-05d9-4853-8bcc-199d3f156a70","resolution":{"observed_at":"2026-08-02T10:25:19.922744Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.00761","last_updated":"2025-02-10T18:26:14Z","snapshot_observed_at":"2026-08-06T05:53:06.918202Z","submitted_at":"2024-08-01T17:59:12Z","title":"Tamper-Resistant Safeguards for Open-Weight LLMs","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.00761","snapshot_observed_at":"2026-08-01T15:07:27.834694Z","title":"Available: https://arxiv.org/abs/2408.00761","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.18548","last_updated":"2026-07-20T22:28:16Z","snapshot_observed_at":"2026-08-04T05:23:32.973903Z","submitted_at":"2026-07-20T22:28:16Z","title":"Engineering Trustworthy Agentic AI for Critical Systems","version":1},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-01T15:07:27.834694Z"},"links":{"cited_paper":"/paper/2408.00761","citing_paper":"/paper/2607.18548"},"observation_digest":"sha256:938914e3896f4599562d6eebd1e5660ff1fb51ed6f11ea644938799d28fdaa96","observation_id":"f1f6f2b5-8b9c-41e2-a1b3-d9be574f659c","resolution":{"observed_at":"2026-08-01T15:07:27.834694Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.00761","last_updated":"2025-02-10T18:26:14Z","snapshot_observed_at":"2026-08-06T05:53:06.918202Z","submitted_at":"2024-08-01T17:59:12Z","title":"Tamper-Resistant Safeguards for Open-Weight LLMs","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.00761","snapshot_observed_at":"2026-08-01T07:46:22.166900Z","title":"arXiv preprint arXiv:2408.00761 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.21356","last_updated":"2026-07-23T14:19:28Z","snapshot_observed_at":"2026-08-07T19:47:51.895704Z","submitted_at":"2026-07-23T14:19:28Z","title":"Emergent Misalignment Recruits a Pre-existing Persona Subspace","version":1},"reference_index":204,"source":"arxiv_source","source_observed_at":"2026-08-01T07:46:22.166900Z"},"links":{"cited_paper":"/paper/2408.00761","citing_paper":"/paper/2607.21356"},"observation_digest":"sha256:a8fb134e7437a1de659e602f218fb126ff32b633a9f1f5610d348fcaa7270d6f","observation_id":"94205cbb-2c55-4207-bd4c-53627cf2b5ca","resolution":{"observed_at":"2026-08-01T07:46:22.166900Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2408.00761/citation-record","integrity":"/paper/2408.00761/integrity","json":"/paper/2408.00761/citation-record.json","paper":"/paper/2408.00761"},"outbound":[],"paper":{"arxiv_id":"2408.00761","last_updated":"2025-02-10T18:26:14Z","latest_version":4,"primary_category":"cs.LG","snapshot_observed_at":"2026-08-06T05:53:06.918202Z","submitted_at":"2024-08-01T17:59:12Z","title":"Tamper-Resistant Safeguards for Open-Weight LLMs"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 24 inbound Pith citation observations for arXiv:2408.00761."}