{"as_of":"2026-08-18T14:23:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:f5966b77c45a740e39795812241249b9164b6eb821cc91d27094dbb49c903a69","coverage":[{"denominator":34,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":34,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-12T22:01:50.284359Z","state":"measured"},{"denominator":34,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":34,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-18T06:34:40.430872+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2411.08003/citation-record","integrity":"/paper/2411.08003/integrity","json":"/paper/2411.08003/citation-record.json","paper":"/paper/2411.08003"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T22:01:50.942057Z","title":"Proc Natl Acad Sci USA 111(4):1298– 1303","venue":null,"work_id":"956a3cde-04fb-4e1b-a8e2-c395b011019d","year":2014},"citing_paper":{"arxiv_id":"2411.08003","last_updated":"2025-07-29T20:23:15Z","snapshot_observed_at":"2026-08-16T02:50:13.340927Z","submitted_at":"2024-11-12T18:28:57Z","title":"Can adversarial attacks by large language models be attributed?","version":3},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-12T22:01:50.102162Z"},"links":{"citing_paper":"/paper/2411.08003"},"observation_digest":"sha256:122db86e5fe4529290690e4ba264b4f3de1f4314d20da9439dbc0d409ab1f118","observation_id":"487f1c52-bc4f-46d5-98ca-974fa55bd319","resolution":{"observed_at":"2026-08-12T22:01:50.948662Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T22:01:50.923636Z","title":"Proc Natl Acad Sci USA 114(11):2825–2830","venue":null,"work_id":"cff88621-e043-4773-84b8-701c74a597bc","year":2017},"citing_paper":{"arxiv_id":"2411.08003","last_updated":"2025-07-29T20:23:15Z","snapshot_observed_at":"2026-08-16T02:50:13.340927Z","submitted_at":"2024-11-12T18:28:57Z","title":"Can adversarial attacks by large language models be attributed?","version":3},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-12T22:01:50.108280Z"},"links":{"citing_paper":"/paper/2411.08003"},"observation_digest":"sha256:efde62b71df26838c1c5b38eb8c3918aaf39cb6977532612ff6652ad7e6b9d58","observation_id":"229d61e7-0869-4776-8a58-9744e6e350b7","resolution":{"observed_at":"2026-08-12T22:01:50.929214Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T22:01:50.905773Z","title":"Nat Mach Intell 4(3):189–191","venue":null,"work_id":"eeda579d-c24c-461b-aa22-c39d067fc36c","year":2022},"citing_paper":{"arxiv_id":"2411.08003","last_updated":"2025-07-29T20:23:15Z","snapshot_observed_at":"2026-08-16T02:50:13.340927Z","submitted_at":"2024-11-12T18:28:57Z","title":"Can adversarial attacks by large language models be attributed?","version":3},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-12T22:01:50.113786Z"},"links":{"citing_paper":"/paper/2411.08003"},"observation_digest":"sha256:3dc44b77439067c7499f4a3edd5df930f54dd3ae7cbc396421fd7f403eec3431","observation_id":"aec397b4-99c2-4d04-b3e0-603dcde2afb5","resolution":{"observed_at":"2026-08-12T22:01:50.911014Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T22:01:50.888753Z","title":null,"venue":null,"work_id":"bf12c3e0-4fe4-4c95-8faa-8d42722eac3d","year":2021},"citing_paper":{"arxiv_id":"2411.08003","last_updated":"2025-07-29T20:23:15Z","snapshot_observed_at":"2026-08-16T02:50:13.340927Z","submitted_at":"2024-11-12T18:28:57Z","title":"Can adversarial attacks by large language models be attributed?","version":3},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-12T22:01:50.118888Z"},"links":{"citing_paper":"/paper/2411.08003"},"observation_digest":"sha256:b0f7aadcc11a773911333c83c5c91f4ecec6dbb5fe1e21e0daca24c98ef3dfa0","observation_id":"a204df01-83f9-4d5f-b806-fe7b8321712e","resolution":{"observed_at":"2026-08-12T22:01:50.893872Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.01038","last_updated":"2024-03-02T00:10:45Z","snapshot_observed_at":"2026-08-16T14:13:34.977692Z","submitted_at":"2024-03-02T00:10:45Z","title":"AutoAttacker: A Large Language Model Guided System to Implement Automatic Cyber-attacks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.01038","snapshot_observed_at":"2026-08-12T22:01:50.124339Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.08003","last_updated":"2025-07-29T20:23:15Z","snapshot_observed_at":"2026-08-16T02:50:13.340927Z","submitted_at":"2024-11-12T18:28:57Z","title":"Can adversarial attacks by large language models be attributed?","version":3},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-12T22:01:50.124339Z"},"links":{"cited_paper":"/paper/2403.01038","citing_paper":"/paper/2411.08003"},"observation_digest":"sha256:33ba6505edadb480144dad7f48c30304c29dc1379f6c0604f55edb8a28d2773c","observation_id":"cc6b4f74-969b-4580-b11d-3de98475f63f","resolution":{"observed_at":"2026-08-12T22:01:50.124339Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T22:01:50.870411Z","title":"(2019) Machine behaviour","venue":null,"work_id":"6d16f051-2c65-4ae3-a677-9be1dcd8cfc1","year":2019},"citing_paper":{"arxiv_id":"2411.08003","last_updated":"2025-07-29T20:23:15Z","snapshot_observed_at":"2026-08-16T02:50:13.340927Z","submitted_at":"2024-11-12T18:28:57Z","title":"Can adversarial attacks by large language models be attributed?","version":3},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-12T22:01:50.130266Z"},"links":{"citing_paper":"/paper/2411.08003"},"observation_digest":"sha256:4bf80cd5955f12e9aaea68dd3b7a9d9e3e75c5ab168616b33e26fa505dc7a8bd","observation_id":"fe005cf0-596e-4e2b-99f6-8c96c587c8e9","resolution":{"observed_at":"2026-08-12T22:01:50.876007Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T22:01:50.853115Z","title":"(OpenAI, https://cdn.openai.com/papers/Governing Agentic AI.pdf)","venue":null,"work_id":"3e664cae-63d9-452b-9eb8-1762bcca19c8","year":2023},"citing_paper":{"arxiv_id":"2411.08003","last_updated":"2025-07-29T20:23:15Z","snapshot_observed_at":"2026-08-16T02:50:13.340927Z","submitted_at":"2024-11-12T18:28:57Z","title":"Can adversarial attacks by large language models be attributed?","version":3},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-12T22:01:50.136307Z"},"links":{"citing_paper":"/paper/2411.08003"},"observation_digest":"sha256:72cee43f697fca1207f23c8b9d7ea3be70028802086052e7cdbd6c1482742121","observation_id":"0990b838-e466-45b3-bbad-3dac7256978a","resolution":{"observed_at":"2026-08-12T22:01:50.858590Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.13744","last_updated":"2023-07-25T18:03:29Z","snapshot_observed_at":"2026-08-16T15:13:20.662364Z","submitted_at":"2023-07-25T18:03:29Z","title":"mL-BFGS: A Momentum-based L-BFGS for Distributed Large-Scale Neural Network Optimization","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.13744","snapshot_observed_at":"2026-08-12T22:01:50.141373Z","title":"(2024) Foundational challenges in assuring alignment and safety of large language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.08003","last_updated":"2025-07-29T20:23:15Z","snapshot_observed_at":"2026-08-16T02:50:13.340927Z","submitted_at":"2024-11-12T18:28:57Z","title":"Can adversarial attacks by large language models be attributed?","version":3},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-12T22:01:50.141373Z"},"links":{"cited_paper":"/paper/2307.13744","citing_paper":"/paper/2411.08003"},"observation_digest":"sha256:0babd8c7409be375c0e7b7328842b5dd95dfefe9e20b53e21482beefb1f69687","observation_id":"16382795-8697-4e76-9a16-c793dfce4b3e","resolution":{"observed_at":"2026-08-12T22:01:50.141373Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T22:01:50.836131Z","title":"Inf Control 10(5):447–474","venue":null,"work_id":"8af3e113-f2bd-402c-b2ae-9b4a4a812ac2","year":1967},"citing_paper":{"arxiv_id":"2411.08003","last_updated":"2025-07-29T20:23:15Z","snapshot_observed_at":"2026-08-16T02:50:13.340927Z","submitted_at":"2024-11-12T18:28:57Z","title":"Can adversarial attacks by large language models be attributed?","version":3},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-12T22:01:50.146662Z"},"links":{"citing_paper":"/paper/2411.08003"},"observation_digest":"sha256:01feff1b82cd1246131f7da504ff940d6bb340edf9a8283a835923899ee65330","observation_id":"56dc3844-d7e0-42a4-990a-ea7e9ad83a9b","resolution":{"observed_at":"2026-08-12T22:01:50.841689Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T22:01:50.817056Z","title":"Inf Control 45(2):117–135","venue":null,"work_id":"2f29a6be-d157-4ee4-b3cc-9a552109f7d0","year":1980},"citing_paper":{"arxiv_id":"2411.08003","last_updated":"2025-07-29T20:23:15Z","snapshot_observed_at":"2026-08-16T02:50:13.340927Z","submitted_at":"2024-11-12T18:28:57Z","title":"Can adversarial attacks by large language models be attributed?","version":3},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-12T22:01:50.151514Z"},"links":{"citing_paper":"/paper/2411.08003"},"observation_digest":"sha256:084b4be0a0cf462341464b22490e3412f766009a3d84fc9272963960da550b19","observation_id":"bbb03c92-20fc-4bf2-b228-1f01e518df92","resolution":{"observed_at":"2026-08-12T22:01:50.822734Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T22:01:50.795343Z","title":"Philos Sci 71(4):571–592","venue":null,"work_id":"a5d4f083-a66c-46d2-8967-90ce582c4ff6","year":2004},"citing_paper":{"arxiv_id":"2411.08003","last_updated":"2025-07-29T20:23:15Z","snapshot_observed_at":"2026-08-16T02:50:13.340927Z","submitted_at":"2024-11-12T18:28:57Z","title":"Can adversarial attacks by large language models be attributed?","version":3},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-12T22:01:50.156367Z"},"links":{"citing_paper":"/paper/2411.08003"},"observation_digest":"sha256:43561c648242ef7e6ea486021251ec8a15a4fecda73815e71196ec79390b2e95","observation_id":"aded9074-836c-447e-b8fe-c5b6d0ab84b5","resolution":{"observed_at":"2026-08-12T22:01:50.801782Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T22:01:50.778522Z","title":"Trans Assoc Comput Linguist 12:543–561","venue":null,"work_id":"f74837a8-ed5f-4a08-aa34-ab7d1e0d714b","year":2024},"citing_paper":{"arxiv_id":"2411.08003","last_updated":"2025-07-29T20:23:15Z","snapshot_observed_at":"2026-08-16T02:50:13.340927Z","submitted_at":"2024-11-12T18:28:57Z","title":"Can adversarial attacks by large language models be attributed?","version":3},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-12T22:01:50.162408Z"},"links":{"citing_paper":"/paper/2411.08003"},"observation_digest":"sha256:8a7c8854bba72b11660099d179329b72c170c589c63ccd74a237789a61df0af9","observation_id":"24e3a8bd-4bc5-44aa-bdce-0124b5b34fe6","resolution":{"observed_at":"2026-08-12T22:01:50.783704Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T22:01:50.759211Z","title":"In Proc EMNLP 2020 , pp","venue":null,"work_id":"b6fe629d-2319-46f4-8e5e-65474ea83436","year":2020},"citing_paper":{"arxiv_id":"2411.08003","last_updated":"2025-07-29T20:23:15Z","snapshot_observed_at":"2026-08-16T02:50:13.340927Z","submitted_at":"2024-11-12T18:28:57Z","title":"Can adversarial attacks by large language models be attributed?","version":3},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-12T22:01:50.167319Z"},"links":{"citing_paper":"/paper/2411.08003"},"observation_digest":"sha256:1becf67b7e4ab52914bccb0e53281ef019003579170130f551ebf1020134a0b8","observation_id":"994632cc-f017-4e61-90fe-4e4b0bac144c","resolution":{"observed_at":"2026-08-12T22:01:50.764955Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T22:01:50.734684Z","title":"In Proc ACL 2020 Workshop on Deep Learning and Formal Languages","venue":null,"work_id":"af918939-05dc-40b1-b27d-8e4aedcbaada","year":2020},"citing_paper":{"arxiv_id":"2411.08003","last_updated":"2025-07-29T20:23:15Z","snapshot_observed_at":"2026-08-16T02:50:13.340927Z","submitted_at":"2024-11-12T18:28:57Z","title":"Can adversarial attacks by large language models be attributed?","version":3},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-12T22:01:50.172400Z"},"links":{"citing_paper":"/paper/2411.08003"},"observation_digest":"sha256:ecf6892d8aa22feb436335dec97689361b5496212878541d03f7ffac94880f5d","observation_id":"afcf6a3d-d1aa-4473-a72b-97d4ff5a928b","resolution":{"observed_at":"2026-08-12T22:01:50.741732Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T22:01:50.709999Z","title":null,"venue":null,"work_id":"d1957604-6a84-4a26-bb06-27750252d356","year":2024},"citing_paper":{"arxiv_id":"2411.08003","last_updated":"2025-07-29T20:23:15Z","snapshot_observed_at":"2026-08-16T02:50:13.340927Z","submitted_at":"2024-11-12T18:28:57Z","title":"Can adversarial attacks by large language models be attributed?","version":3},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-12T22:01:50.177107Z"},"links":{"citing_paper":"/paper/2411.08003"},"observation_digest":"sha256:c82ad0ee2bd6d3ba86114a282ae47875f74ae4ff7805f28ce76771044cbb6970","observation_id":"19728bde-db62-44eb-bb14-f3ac121b1029","resolution":{"observed_at":"2026-08-12T22:01:50.718520Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T22:01:50.688154Z","title":"(Oak Ridge National Lab news release, May 30, 2022)","venue":null,"work_id":"7cf6c556-f733-481a-b055-c3f0f3e829c3","year":2022},"citing_paper":{"arxiv_id":"2411.08003","last_updated":"2025-07-29T20:23:15Z","snapshot_observed_at":"2026-08-16T02:50:13.340927Z","submitted_at":"2024-11-12T18:28:57Z","title":"Can adversarial attacks by large language models be attributed?","version":3},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-12T22:01:50.182080Z"},"links":{"citing_paper":"/paper/2411.08003"},"observation_digest":"sha256:3d40fdc0c162c1f1225dddc487be6dd5444d6488a105a285c97966400a1b8247","observation_id":"a6c22c09-662c-472c-886b-9c8034ff241e","resolution":{"observed_at":"2026-08-12T22:01:50.694695Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T22:01:50.668246Z","title":"(NBER Working Paper No","venue":null,"work_id":"d7795f2a-13ee-43a8-bcba-9d902ce31efb","year":2024},"citing_paper":{"arxiv_id":"2411.08003","last_updated":"2025-07-29T20:23:15Z","snapshot_observed_at":"2026-08-16T02:50:13.340927Z","submitted_at":"2024-11-12T18:28:57Z","title":"Can adversarial attacks by large language models be attributed?","version":3},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-12T22:01:50.186937Z"},"links":{"citing_paper":"/paper/2411.08003"},"observation_digest":"sha256:b956364ff8285c7c1bb7f98274dd4e952322e342bba367a1d7aebbb4b4d6c8b1","observation_id":"ac5db616-131c-4ee5-9107-146c86f4253b","resolution":{"observed_at":"2026-08-12T22:01:50.674813Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T22:01:50.650126Z","title":null,"venue":null,"work_id":"85641239-92e6-48ae-8765-68ff76e166fe","year":2006},"citing_paper":{"arxiv_id":"2411.08003","last_updated":"2025-07-29T20:23:15Z","snapshot_observed_at":"2026-08-16T02:50:13.340927Z","submitted_at":"2024-11-12T18:28:57Z","title":"Can adversarial attacks by large language models be attributed?","version":3},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-12T22:01:50.191752Z"},"links":{"citing_paper":"/paper/2411.08003"},"observation_digest":"sha256:00f3560a363f46c071058a9fcc6e82f8076141c6188804d037b9754a62921f07","observation_id":"be9e7194-e847-4616-8a1e-aedc8a6743ad","resolution":{"observed_at":"2026-08-12T22:01:50.655575Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T22:01:50.630864Z","title":null,"venue":null,"work_id":"ebd9c0cf-6c58-4540-840b-05ffe8913c04","year":2009},"citing_paper":{"arxiv_id":"2411.08003","last_updated":"2025-07-29T20:23:15Z","snapshot_observed_at":"2026-08-16T02:50:13.340927Z","submitted_at":"2024-11-12T18:28:57Z","title":"Can adversarial attacks by large language models be attributed?","version":3},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-12T22:01:50.196594Z"},"links":{"citing_paper":"/paper/2411.08003"},"observation_digest":"sha256:903a2f49c4428a3dc1ce97a012f167a70be08a98c32cc1c6067adc018f604330","observation_id":"0afb1818-8277-40b2-bc85-e51c44a7a086","resolution":{"observed_at":"2026-08-12T22:01:50.637017Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T22:01:50.611404Z","title":"(2022) Hiding individuals and communities in a social network.IEEE Trans Netw Sci Eng 9(1):196–209","venue":null,"work_id":"b3b56a61-6d3c-4178-8228-7a3ef74888d8","year":2022},"citing_paper":{"arxiv_id":"2411.08003","last_updated":"2025-07-29T20:23:15Z","snapshot_observed_at":"2026-08-16T02:50:13.340927Z","submitted_at":"2024-11-12T18:28:57Z","title":"Can adversarial attacks by large language models be attributed?","version":3},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-12T22:01:50.202126Z"},"links":{"citing_paper":"/paper/2411.08003"},"observation_digest":"sha256:1262c16c8297dd675781af9da6e91ea8ad4e1aa4afc1275338629afa6e2029ee","observation_id":"2ee985a8-a373-47eb-a092-a5611d6a08ee","resolution":{"observed_at":"2026-08-12T22:01:50.617749Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T22:01:50.594272Z","title":"(2022) Trading contact tracing precision for privacy via structure-preserving anonymization","venue":null,"work_id":"d66e0ea9-023c-4d43-893a-96215db809aa","year":2022},"citing_paper":{"arxiv_id":"2411.08003","last_updated":"2025-07-29T20:23:15Z","snapshot_observed_at":"2026-08-16T02:50:13.340927Z","submitted_at":"2024-11-12T18:28:57Z","title":"Can adversarial attacks by large language models be attributed?","version":3},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-12T22:01:50.208108Z"},"links":{"citing_paper":"/paper/2411.08003"},"observation_digest":"sha256:bb8322802a33bab0237004905a547a780d473b312dbdd6caeabe866d3cb0b172","observation_id":"8c67dacd-aa59-4d9b-ac76-7bc06d292644","resolution":{"observed_at":"2026-08-12T22:01:50.599609Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T22:01:50.575681Z","title":"(2021) A time-critical crowdsourced computational search for the origins of COVID-19","venue":null,"work_id":"22674249-c8a8-4ee0-941b-4a56dd44086c","year":2021},"citing_paper":{"arxiv_id":"2411.08003","last_updated":"2025-07-29T20:23:15Z","snapshot_observed_at":"2026-08-16T02:50:13.340927Z","submitted_at":"2024-11-12T18:28:57Z","title":"Can adversarial attacks by large language models be attributed?","version":3},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-12T22:01:50.213179Z"},"links":{"citing_paper":"/paper/2411.08003"},"observation_digest":"sha256:de12508a20f7ae0842d8386f0b85d950ccc91e9e5c523fea1c007e589f1b7ba9","observation_id":"1e1c895f-15f1-4a5b-99b7-4aa6713ffa68","resolution":{"observed_at":"2026-08-12T22:01:50.581129Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.06757","last_updated":"2024-04-10T05:53:25Z","snapshot_observed_at":"2026-08-16T14:02:11.827465Z","submitted_at":"2024-04-10T05:53:25Z","title":"Language Generation in the Limit","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.06757","snapshot_observed_at":"2026-08-12T22:01:50.218196Z","title":"(arXiv:2404.06757)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.08003","last_updated":"2025-07-29T20:23:15Z","snapshot_observed_at":"2026-08-16T02:50:13.340927Z","submitted_at":"2024-11-12T18:28:57Z","title":"Can adversarial attacks by large language models be attributed?","version":3},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-12T22:01:50.218196Z"},"links":{"cited_paper":"/paper/2404.06757","citing_paper":"/paper/2411.08003"},"observation_digest":"sha256:24ae6ed664822833014360ad8d3e5dbceff9f0cd3343754aa54a275cb9063b14","observation_id":"b1f3d0f9-d8df-4d44-ae08-eb9c168e5bca","resolution":{"observed_at":"2026-08-12T22:01:50.218196Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T22:01:50.558038Z","title":null,"venue":null,"work_id":"2bbaba4f-0f60-4860-ac32-dc9a26953aef","year":2024},"citing_paper":{"arxiv_id":"2411.08003","last_updated":"2025-07-29T20:23:15Z","snapshot_observed_at":"2026-08-16T02:50:13.340927Z","submitted_at":"2024-11-12T18:28:57Z","title":"Can adversarial attacks by large language models be attributed?","version":3},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-12T22:01:50.223784Z"},"links":{"citing_paper":"/paper/2411.08003"},"observation_digest":"sha256:d718c92ed062bf093a934d024175d698bce34c94aed66e6a43cbd8297bb6f822","observation_id":"dea7c7f3-9076-4476-9fad-3138deb23916","resolution":{"observed_at":"2026-08-12T22:01:50.563438Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T22:01:50.540452Z","title":"Available at: https://eur-lex.europa.eu/eli/reg/2024/1689/oj","venue":null,"work_id":"f6804554-0caa-411c-a6e7-c41a29a27853","year":2024},"citing_paper":{"arxiv_id":"2411.08003","last_updated":"2025-07-29T20:23:15Z","snapshot_observed_at":"2026-08-16T02:50:13.340927Z","submitted_at":"2024-11-12T18:28:57Z","title":"Can adversarial attacks by large language models be attributed?","version":3},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-12T22:01:50.228804Z"},"links":{"citing_paper":"/paper/2411.08003"},"observation_digest":"sha256:7de6b4cd64ce279c10c4bd994efb58337cccbf6ecf69a76df5d90c223c669560","observation_id":"3c1ee3dd-cc2f-46e8-906d-39792a0ae135","resolution":{"observed_at":"2026-08-12T22:01:50.546083Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T22:01:50.519916Z","title":"Order No","venue":null,"work_id":"7c770c93-4d10-4519-8124-612c1262daa9","year":2023},"citing_paper":{"arxiv_id":"2411.08003","last_updated":"2025-07-29T20:23:15Z","snapshot_observed_at":"2026-08-16T02:50:13.340927Z","submitted_at":"2024-11-12T18:28:57Z","title":"Can adversarial attacks by large language models be attributed?","version":3},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-12T22:01:50.233696Z"},"links":{"citing_paper":"/paper/2411.08003"},"observation_digest":"sha256:50185d17943ccdc05759566ca7cb6a2606c19a41c5f86ffc769eea6b30a1c3a8","observation_id":"2aee5a71-bac2-4e6f-b76d-c6a589bf6040","resolution":{"observed_at":"2026-08-12T22:01:50.527173Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T22:01:50.500275Z","title":"AI Regulation: A Pro- Innovation Approach","venue":null,"work_id":"d4048a1e-72ad-4a5e-915f-292f42a0fffc","year":2023},"citing_paper":{"arxiv_id":"2411.08003","last_updated":"2025-07-29T20:23:15Z","snapshot_observed_at":"2026-08-16T02:50:13.340927Z","submitted_at":"2024-11-12T18:28:57Z","title":"Can adversarial attacks by large language models be attributed?","version":3},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-12T22:01:50.238997Z"},"links":{"citing_paper":"/paper/2411.08003"},"observation_digest":"sha256:9c4130583ae69b506607b700466811332594fb6208b62cfb79285d1acc76d1a0","observation_id":"e8eeb406-a0f7-4997-922f-3ae84203e048","resolution":{"observed_at":"2026-08-12T22:01:50.505759Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T22:01:50.481447Z","title":"Recommendation of the Council on Artificial Intelligence (OECD/LEGAL/0449)","venue":null,"work_id":"bb13b313-c0f4-4ded-84c7-170ac9689145","year":2019},"citing_paper":{"arxiv_id":"2411.08003","last_updated":"2025-07-29T20:23:15Z","snapshot_observed_at":"2026-08-16T02:50:13.340927Z","submitted_at":"2024-11-12T18:28:57Z","title":"Can adversarial attacks by large language models be attributed?","version":3},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-12T22:01:50.244124Z"},"links":{"citing_paper":"/paper/2411.08003"},"observation_digest":"sha256:852fbf48f2108c2f104ae80cfe0f2c4d5d5da42d0356dda251e562deb815a517","observation_id":"f7cb571e-95e2-4415-b9d0-2dafd4d1c806","resolution":{"observed_at":"2026-08-12T22:01:50.486579Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T22:01:50.464102Z","title":"Global Framework to Monitor Application of the G7 Hiroshima AI Code of Conduct","venue":null,"work_id":"da4913f8-3ed9-4c3d-a649-590cd50fa426","year":null},"citing_paper":{"arxiv_id":"2411.08003","last_updated":"2025-07-29T20:23:15Z","snapshot_observed_at":"2026-08-16T02:50:13.340927Z","submitted_at":"2024-11-12T18:28:57Z","title":"Can adversarial attacks by large language models be attributed?","version":3},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-12T22:01:50.250303Z"},"links":{"citing_paper":"/paper/2411.08003"},"observation_digest":"sha256:346be8488db314253d554a4859752ee64cd962acd5c609ffd0fbb788ef689dc1","observation_id":"7d0fcd28-0e95-4b53-9ee6-273f6c285381","resolution":{"observed_at":"2026-08-12T22:01:50.469379Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T22:01:50.446562Z","title":"Here Come the AI Worms","venue":null,"work_id":"8cf6c8fa-fd80-4cc4-8e93-4fc95605f809","year":2024},"citing_paper":{"arxiv_id":"2411.08003","last_updated":"2025-07-29T20:23:15Z","snapshot_observed_at":"2026-08-16T02:50:13.340927Z","submitted_at":"2024-11-12T18:28:57Z","title":"Can adversarial attacks by large language models be attributed?","version":3},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-12T22:01:50.267286Z"},"links":{"citing_paper":"/paper/2411.08003"},"observation_digest":"sha256:bdcd614dab8cdb14b54684eb1ba2c09c0f51f9633ff89048dbd773ba245566a4","observation_id":"ffb06e76-1fe9-4d4d-a83e-ddcfc7463bc2","resolution":{"observed_at":"2026-08-12T22:01:50.452243Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T22:01:50.426312Z","title":"Researchers Say the Deepfake Biden Robocall Was Likely Made With Tools From AI Startup ElevenLabs","venue":null,"work_id":"916b4151-2165-4516-8e01-bdd8511dd0e6","year":2024},"citing_paper":{"arxiv_id":"2411.08003","last_updated":"2025-07-29T20:23:15Z","snapshot_observed_at":"2026-08-16T02:50:13.340927Z","submitted_at":"2024-11-12T18:28:57Z","title":"Can adversarial attacks by large language models be attributed?","version":3},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-12T22:01:50.273431Z"},"links":{"citing_paper":"/paper/2411.08003"},"observation_digest":"sha256:f341f0a3bf8422f1adff9103eea991ab1e13a0ee922429255b0cb8c054069b7d","observation_id":"831ec74c-ae2a-4d82-b0e5-50ed802d341a","resolution":{"observed_at":"2026-08-12T22:01:50.432475Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T22:01:50.406461Z","title":"Pindrop Reveals TTS Engine Behind Biden AI Robocall","venue":null,"work_id":"52d5a219-e6f2-429d-b505-20642ec2b3ef","year":2024},"citing_paper":{"arxiv_id":"2411.08003","last_updated":"2025-07-29T20:23:15Z","snapshot_observed_at":"2026-08-16T02:50:13.340927Z","submitted_at":"2024-11-12T18:28:57Z","title":"Can adversarial attacks by large language models be attributed?","version":3},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-12T22:01:50.279110Z"},"links":{"citing_paper":"/paper/2411.08003"},"observation_digest":"sha256:4cc0f4165405e03837cb37b725a87471ed4b4786bd9cb366c91adcbf42d04150","observation_id":"efff937a-648d-4433-bd71-469ccc73d411","resolution":{"observed_at":"2026-08-12T22:01:50.413851Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T22:01:50.284359Z","title":"New Hampshire Opens Criminal Probe Into AI Calls Impersonating Biden","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.08003","last_updated":"2025-07-29T20:23:15Z","snapshot_observed_at":"2026-08-16T02:50:13.340927Z","submitted_at":"2024-11-12T18:28:57Z","title":"Can adversarial attacks by large language models be attributed?","version":3},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-12T22:01:50.284359Z"},"links":{"citing_paper":"/paper/2411.08003"},"observation_digest":"sha256:fcb7f598c66d7d2c032aa22a0ba7990514825d6caebd2b39ef5c61455a0f3da0","observation_id":"09e23ebc-823a-4a7a-80cb-b2756e317289","resolution":{"observed_at":"2026-08-12T22:01:50.284359Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.02817","last_updated":"2025-01-30T11:11:37Z","snapshot_observed_at":"2026-08-16T14:12:43.743148Z","submitted_at":"2024-03-05T09:37:13Z","title":"Here Comes The AI Worm: Unleashing Zero-click Worms that Target GenAI-Powered Applications","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.02817","snapshot_observed_at":"2026-08-12T22:01:50.261905Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2411.08003","last_updated":"2025-07-29T20:23:15Z","snapshot_observed_at":"2026-08-16T02:50:13.340927Z","submitted_at":"2024-11-12T18:28:57Z","title":"Can adversarial attacks by large language models be attributed?","version":3},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-12T22:01:50.261905Z"},"links":{"cited_paper":"/paper/2403.02817","citing_paper":"/paper/2411.08003"},"observation_digest":"sha256:fc06981cf1ee5e8071f8502880a8259a80a5eb88dc1dc67f04a49c22761fe790","observation_id":"80769725-072a-4f8e-86dc-7c098dab0abd","resolution":{"observed_at":"2026-08-12T22:01:50.261905Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2411.08003","last_updated":"2025-07-29T20:23:15Z","latest_version":3,"primary_category":"cs.AI","snapshot_observed_at":"2026-08-16T02:50:13.340927Z","submitted_at":"2024-11-12T18:28:57Z","title":"Can adversarial attacks by large language models be attributed?"},"reference_resolution":{"displayed":34,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":10,"verified_exact":0,"verified_fuzzy":24},"total_outbound_references":34},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"thesis":"As of 18 August 2026, this Paper Citation Record lists 34 of 34 outbound references and 0 inbound Pith citation observations for arXiv:2411.08003."}