{"as_of":"2026-08-08T22:48:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:31cb5625d80acc9af4f61294e1069f41128966a7bd797ed1e0c1b9af9f868abd","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":12,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":12,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":12,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":12,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T14:15:18.856097Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-02T20:47:22.918490Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2408.09600","last_updated":"2025-09-05T04:54:29Z","snapshot_observed_at":"2026-07-06T19:02:11.267510Z","submitted_at":"2024-08-18T21:45:03Z","title":"Antidote: Post-fine-tuning Safety Alignment for Large Language Models against Harmful Fine-tuning","version":3},"cited_work":{"arxiv_id":"2408.09600","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2408.09600","snapshot_observed_at":"2026-07-02T20:47:22.918490Z","title":"Antidote: Post-fine-tuning safety alignment for large language models against harmful fine-tuning","venue":null,"work_id":"e4d07870-922c-451c-90f8-54246d1e1b92","year":2025},"citing_paper":{"arxiv_id":"2409.18169","last_updated":"2026-04-23T18:48:49Z","snapshot_observed_at":"2026-07-06T19:22:58.341345Z","submitted_at":"2024-09-26T17:55:22Z","title":"Harmful Fine-tuning Attacks and Defenses for Large Language Models: A Survey","version":6},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-05-23T20:58:16.237327Z"},"links":{"cited_paper":"/paper/2408.09600","citing_paper":"/paper/2409.18169"},"observation_digest":"sha256:34e016ed8fb37dfc62f794058d35e065d5915750409a6c63f4905138225deb14","observation_id":"eeb9954b-7eba-4d31-904c-cca1ddc6ab21","resolution":{"observed_at":"2026-05-23T20:58:25.832290Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2408.09600","last_updated":"2025-09-05T04:54:29Z","snapshot_observed_at":"2026-07-06T19:02:11.267510Z","submitted_at":"2024-08-18T21:45:03Z","title":"Antidote: Post-fine-tuning Safety Alignment for Large Language Models against Harmful Fine-tuning","version":3},"cited_work":{"arxiv_id":"2408.09600","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2408.09600","snapshot_observed_at":"2026-07-02T20:47:22.918490Z","title":"Antidote: Post-fine-tuning safety alignment for large language models against harmful fine-tuning","venue":null,"work_id":"e4d07870-922c-451c-90f8-54246d1e1b92","year":2025},"citing_paper":{"arxiv_id":"2502.05206","last_updated":"2026-04-14T16:10:41Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-02-02T05:14:22Z","title":"Safety at Scale: A Comprehensive Survey of Large Model and Agent Safety","version":6},"reference_index":123,"source":"pdf_text","source_observed_at":"2026-05-23T04:39:04.591722Z"},"links":{"cited_paper":"/paper/2408.09600","citing_paper":"/paper/2502.05206"},"observation_digest":"sha256:6840aacf95b3bb2c98c75c1a86a3c4aec9f13c252891d9e8a7135c852dd3a88e","observation_id":"36e46723-4c7c-4503-b2a8-e02bd740e5ec","resolution":{"observed_at":"2026-05-23T04:42:34.050386Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2408.09600","last_updated":"2025-09-05T04:54:29Z","snapshot_observed_at":"2026-07-06T19:02:11.267510Z","submitted_at":"2024-08-18T21:45:03Z","title":"Antidote: Post-fine-tuning Safety Alignment for Large Language Models against Harmful Fine-tuning","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.09600","snapshot_observed_at":"2026-08-07T14:15:18.856097Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.19670","last_updated":"2025-05-26T08:25:25Z","snapshot_observed_at":"2026-08-07T14:06:45.672196Z","submitted_at":"2025-05-26T08:25:25Z","title":"Reshaping Representation Space to Balance the Safety and Over-rejection in Large Audio Language Models","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-07T14:15:18.856097Z"},"links":{"cited_paper":"/paper/2408.09600","citing_paper":"/paper/2505.19670"},"observation_digest":"sha256:bc4b2f32fdd58df6bcf88815f3134a9163ee4a916227f91e3a37e06ed754eda6","observation_id":"5ed09cab-fdb5-4a0a-a16f-8cb48dd54f84","resolution":{"observed_at":"2026-08-07T14:15:18.856097Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.09600","last_updated":"2025-09-05T04:54:29Z","snapshot_observed_at":"2026-07-06T19:02:11.267510Z","submitted_at":"2024-08-18T21:45:03Z","title":"Antidote: Post-fine-tuning Safety Alignment for Large Language Models against Harmful Fine-tuning","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.09600","snapshot_observed_at":"2026-08-07T10:58:29.556438Z","title":"Antidote: Post-fine-tuning safety alignment for large language models against harmful fine-tuning","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.03850","last_updated":"2025-08-12T10:16:47Z","snapshot_observed_at":"2026-08-08T08:07:29.820388Z","submitted_at":"2025-06-04T11:33:36Z","title":"Vulnerability-Aware Alignment: Mitigating Uneven Forgetting in Harmful Fine-Tuning","version":2},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-07T10:58:29.556438Z"},"links":{"cited_paper":"/paper/2408.09600","citing_paper":"/paper/2506.03850"},"observation_digest":"sha256:c076e1445ba331adad90e7e66c7fd470e3cc42af9c8dd99671fa0f284460851e","observation_id":"5ce7a588-a395-4725-802b-23fa97cb6001","resolution":{"observed_at":"2026-08-07T10:58:29.556438Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.09600","last_updated":"2025-09-05T04:54:29Z","snapshot_observed_at":"2026-07-06T19:02:11.267510Z","submitted_at":"2024-08-18T21:45:03Z","title":"Antidote: Post-fine-tuning Safety Alignment for Large Language Models against Harmful Fine-tuning","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.09600","snapshot_observed_at":"2026-08-06T23:59:56.106685Z","title":"Antidote: Post-fine-tuning safety alignment for large language models against harmful fine-tuning","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.15606","last_updated":"2025-07-25T18:57:36Z","snapshot_observed_at":"2026-08-08T11:12:53.503626Z","submitted_at":"2025-06-18T16:30:02Z","title":"LoX: Low-Rank Extrapolation Robustifies LLM Safety Against Fine-tuning","version":3},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-06T23:59:56.106685Z"},"links":{"cited_paper":"/paper/2408.09600","citing_paper":"/paper/2506.15606"},"observation_digest":"sha256:1db8cc50653cb6942ef26ade7fce7ee40921b76b197a400680c80eae8d47cb68","observation_id":"fa4eff3d-7ade-413d-a974-1b00d9d22bc5","resolution":{"observed_at":"2026-08-06T23:59:56.106685Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.09600","last_updated":"2025-09-05T04:54:29Z","snapshot_observed_at":"2026-07-06T19:02:11.267510Z","submitted_at":"2024-08-18T21:45:03Z","title":"Antidote: Post-fine-tuning Safety Alignment for Large Language Models against Harmful Fine-tuning","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.09600","snapshot_observed_at":"2026-08-05T23:13:05.149386Z","title":"arXiv preprint arXiv:2408.09600 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2508.05775","last_updated":"2026-07-27T20:50:40Z","snapshot_observed_at":"2026-08-05T23:12:57.691936Z","submitted_at":"2025-08-07T18:42:16Z","title":"Guardians and Offenders: A Survey on Harmful Content Generation and Safety Mitigation of LLM","version":3},"reference_index":195,"source":"arxiv_source","source_observed_at":"2026-08-05T23:13:05.149386Z"},"links":{"cited_paper":"/paper/2408.09600","citing_paper":"/paper/2508.05775"},"observation_digest":"sha256:6f45cf65ba975f4e56a35be929239454abb1842261e1c312cb466aef8ba112b2","observation_id":"497dbac8-a173-476f-b9d7-893127262d88","resolution":{"observed_at":"2026-08-05T23:13:05.149386Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.09600","last_updated":"2025-09-05T04:54:29Z","snapshot_observed_at":"2026-07-06T19:02:11.267510Z","submitted_at":"2024-08-18T21:45:03Z","title":"Antidote: Post-fine-tuning Safety Alignment for Large Language Models against Harmful Fine-tuning","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.09600","snapshot_observed_at":"2026-08-03T03:46:14.818615Z","title":"URL https://openreview.net/forum?id=fMNRYBvcQN","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.06911","last_updated":"2026-06-02T23:27:30Z","snapshot_observed_at":"2026-08-07T07:06:32.555804Z","submitted_at":"2026-02-06T18:04:38Z","title":"TamperBench: Systematically Stress-Testing LLM Safety Under Fine-Tuning and Tampering","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-03T03:46:14.818615Z"},"links":{"cited_paper":"/paper/2408.09600","citing_paper":"/paper/2602.06911"},"observation_digest":"sha256:789d7dfc88bba59ef27cf006cc2ed03322964a605cead2860cef36ba5b5ceb03","observation_id":"27f32768-a236-43d8-87c2-5e2116809be0","resolution":{"observed_at":"2026-08-03T03:46:14.818615Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.09600","last_updated":"2025-09-05T04:54:29Z","snapshot_observed_at":"2026-07-06T19:02:11.267510Z","submitted_at":"2024-08-18T21:45:03Z","title":"Antidote: Post-fine-tuning Safety Alignment for Large Language Models against Harmful Fine-tuning","version":3},"cited_work":{"arxiv_id":"2408.09600","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2408.09600","snapshot_observed_at":"2026-07-02T20:47:22.918490Z","title":"Antidote: Post-fine-tuning safety alignment for large language models against harmful fine-tuning","venue":null,"work_id":"e4d07870-922c-451c-90f8-54246d1e1b92","year":2025},"citing_paper":{"arxiv_id":"2604.12384","last_updated":"2026-04-14T07:17:55Z","snapshot_observed_at":"2026-07-06T23:00:37.144068Z","submitted_at":"2026-04-14T07:17:55Z","title":"Preventing Safety Drift in Large Language Models via Coupled Weight and Activation Constraints","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-05-10T16:04:25.851592Z"},"links":{"cited_paper":"/paper/2408.09600","citing_paper":"/paper/2604.12384"},"observation_digest":"sha256:3759ba9a322af9d40342f414b072760dc9e92b4144194aed05b640a0246fd31f","observation_id":"0c3566bd-0122-4ae0-8728-8856981c14fa","resolution":{"observed_at":"2026-05-11T09:21:01.762843Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2408.09600","last_updated":"2025-09-05T04:54:29Z","snapshot_observed_at":"2026-07-06T19:02:11.267510Z","submitted_at":"2024-08-18T21:45:03Z","title":"Antidote: Post-fine-tuning Safety Alignment for Large Language Models against Harmful Fine-tuning","version":3},"cited_work":{"arxiv_id":"2408.09600","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2408.09600","snapshot_observed_at":"2026-07-02T20:47:22.918490Z","title":"Antidote: Post-fine-tuning safety alignment for large language models against harmful fine-tuning","venue":null,"work_id":"e4d07870-922c-451c-90f8-54246d1e1b92","year":2025},"citing_paper":{"arxiv_id":"2604.24536","last_updated":"2026-04-27T14:33:45Z","snapshot_observed_at":"2026-07-06T23:10:33.821313Z","submitted_at":"2026-04-27T14:33:45Z","title":"Generating Place-Based Compromises Between Two Points of View","version":1},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-05-08T03:36:31.695964Z"},"links":{"cited_paper":"/paper/2408.09600","citing_paper":"/paper/2604.24536"},"observation_digest":"sha256:acb7caf8cc1ec2682aff1cf0b514a95cbbae91bb510acd480ccb750a925ea653","observation_id":"c2d39d3c-2be1-4d64-98b2-42a633e1f123","resolution":{"observed_at":"2026-05-11T22:01:12.267420Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2408.09600","last_updated":"2025-09-05T04:54:29Z","snapshot_observed_at":"2026-07-06T19:02:11.267510Z","submitted_at":"2024-08-18T21:45:03Z","title":"Antidote: Post-fine-tuning Safety Alignment for Large Language Models against Harmful Fine-tuning","version":3},"cited_work":{"arxiv_id":"2408.09600","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2408.09600","snapshot_observed_at":"2026-07-02T20:47:22.918490Z","title":"Antidote: Post-fine-tuning safety alignment for large language models against harmful fine-tuning","venue":null,"work_id":"e4d07870-922c-451c-90f8-54246d1e1b92","year":2025},"citing_paper":{"arxiv_id":"2605.14194","last_updated":"2026-06-05T04:14:41Z","snapshot_observed_at":"2026-08-04T00:54:40.317314Z","submitted_at":"2026-05-13T23:19:55Z","title":"GradShield: Alignment Preserving Finetuning","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-05-15T04:44:06.614390Z"},"links":{"cited_paper":"/paper/2408.09600","citing_paper":"/paper/2605.14194"},"observation_digest":"sha256:5b0239a24a853710594c458706ae77364c48f4ea8b67d82095920ed3a28df975","observation_id":"1c0d34fb-72c6-4a6e-8509-cc129c2e3f80","resolution":{"observed_at":"2026-05-15T04:45:00.959333Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2408.09600","last_updated":"2025-09-05T04:54:29Z","snapshot_observed_at":"2026-07-06T19:02:11.267510Z","submitted_at":"2024-08-18T21:45:03Z","title":"Antidote: Post-fine-tuning Safety Alignment for Large Language Models against Harmful Fine-tuning","version":3},"cited_work":{"arxiv_id":"2408.09600","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2408.09600","snapshot_observed_at":"2026-07-02T20:47:22.918490Z","title":"Antidote: Post-fine-tuning safety alignment for large language models against harmful fine-tuning","venue":null,"work_id":"e4d07870-922c-451c-90f8-54246d1e1b92","year":2025},"citing_paper":{"arxiv_id":"2606.06519","last_updated":"2026-06-02T14:51:14Z","snapshot_observed_at":"2026-08-08T05:55:13.863865Z","submitted_at":"2026-06-02T14:51:14Z","title":"SafeGene: Reusable Adapters for Transferable Safety Alignment","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-06-28T09:58:16.956281Z"},"links":{"cited_paper":"/paper/2408.09600","citing_paper":"/paper/2606.06519"},"observation_digest":"sha256:735a7606dce447d8f075924647a1be878c56055b4891a55d9224ab475fcf7484","observation_id":"4eaea4bb-852b-4bed-a106-65420c0fad1f","resolution":{"observed_at":"2026-07-02T03:36:29.093869Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2408.09600","last_updated":"2025-09-05T04:54:29Z","snapshot_observed_at":"2026-07-06T19:02:11.267510Z","submitted_at":"2024-08-18T21:45:03Z","title":"Antidote: Post-fine-tuning Safety Alignment for Large Language Models against Harmful Fine-tuning","version":3},"cited_work":{"arxiv_id":"2408.09600","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2408.09600","snapshot_observed_at":"2026-07-02T20:47:22.918490Z","title":"Antidote: Post-fine-tuning safety alignment for large language models against harmful fine-tuning","venue":null,"work_id":"e4d07870-922c-451c-90f8-54246d1e1b92","year":2025},"citing_paper":{"arxiv_id":"2606.07970","last_updated":"2026-06-06T04:04:57Z","snapshot_observed_at":"2026-07-06T23:47:33.680573Z","submitted_at":"2026-06-06T04:04:57Z","title":"Defending Against Malicious Finetuning by Scaling Train-time Adversarial Attacks","version":1},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-06-27T20:10:25.375603Z"},"links":{"cited_paper":"/paper/2408.09600","citing_paper":"/paper/2606.07970"},"observation_digest":"sha256:424aede41071ff514216e7125507fa24daad5ad0bbddc7d641a942b8b055f897","observation_id":"a746fa85-63be-4e64-b540-0ad1733a8c34","resolution":{"observed_at":"2026-07-02T20:47:22.920004Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2408.09600/citation-record","integrity":"/paper/2408.09600/integrity","json":"/paper/2408.09600/citation-record.json","paper":"/paper/2408.09600"},"outbound":[],"paper":{"arxiv_id":"2408.09600","last_updated":"2025-09-05T04:54:29Z","latest_version":3,"primary_category":"cs.AI","snapshot_observed_at":"2026-07-06T19:02:11.267510Z","submitted_at":"2024-08-18T21:45:03Z","title":"Antidote: Post-fine-tuning Safety Alignment for Large Language Models against Harmful Fine-tuning"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 12 inbound Pith citation observations for arXiv:2408.09600."}