{"as_of":"2026-08-10T12:09:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:27c1e851009a39826ac2195b393c4dc1601a977afc32180085a1ef3aada21091","coverage":[{"denominator":31,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":31,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-08T19:40:31.637079Z","state":"measured"},{"denominator":46,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":46,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-10T06:31:04.303077+00:00","state":"measured"},{"denominator":15,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":15,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-09T16:44:01.217886Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-02T20:07:21.193836Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2502.05374","last_updated":"2025-05-27T03:29:37Z","snapshot_observed_at":"2026-08-08T23:47:53.801067Z","submitted_at":"2025-02-07T23:03:55Z","title":"Towards LLM Unlearning Resilient to Relearning Attacks: A Sharpness-Aware Minimization Perspective and Beyond","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.05374","snapshot_observed_at":"2026-08-09T16:44:01.217886Z","title":"Towards llm unlearning resilient to relearning attacks: A sharpness-aware minimization perspective and beyond","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2502.01083","last_updated":"2025-08-06T03:09:38Z","snapshot_observed_at":"2026-08-10T06:48:33.214754Z","submitted_at":"2025-02-03T05:50:55Z","title":"Tool Unlearning for Tool-Augmented LLMs","version":2},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-09T16:44:01.217886Z"},"links":{"cited_paper":"/paper/2502.05374","citing_paper":"/paper/2502.01083"},"observation_digest":"sha256:71566aa8cc05b2e5e5a50aca8010d2606b0ab56ac0db63f8f5140ffd65542b76","observation_id":"90e3a599-03d6-45b7-bcba-3a1addd568b9","resolution":{"observed_at":"2026-08-09T16:44:01.217886Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.05374","last_updated":"2025-05-27T03:29:37Z","snapshot_observed_at":"2026-08-08T23:47:53.801067Z","submitted_at":"2025-02-07T23:03:55Z","title":"Towards LLM Unlearning Resilient to Relearning Attacks: A Sharpness-Aware Minimization Perspective and Beyond","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.05374","snapshot_observed_at":"2026-08-06T13:54:39.597195Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.19894","last_updated":"2025-07-26T09:49:57Z","snapshot_observed_at":"2026-08-07T11:18:12.932540Z","submitted_at":"2025-07-26T09:49:57Z","title":"A Survey on Generative Model Unlearning: Fundamentals, Taxonomy, Evaluation, and Future Direction","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-06T13:54:39.597195Z"},"links":{"cited_paper":"/paper/2502.05374","citing_paper":"/paper/2507.19894"},"observation_digest":"sha256:8e5a0f1b721a04fec114b29854924f47db63fd33a9d769ea1ae45dfb2083de05","observation_id":"96f2d857-7d42-450c-9f52-a4256fff3063","resolution":{"observed_at":"2026-08-06T13:54:39.597195Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.05374","last_updated":"2025-05-27T03:29:37Z","snapshot_observed_at":"2026-08-08T23:47:53.801067Z","submitted_at":"2025-02-07T23:03:55Z","title":"Towards LLM Unlearning Resilient to Relearning Attacks: A Sharpness-Aware Minimization Perspective and Beyond","version":4},"cited_work":{"arxiv_id":"2502.05374","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2502.05374","snapshot_observed_at":"2026-07-02T20:07:21.193836Z","title":"Towards llm unlearning resilient to relearning attacks: A sharpness-aware minimization perspective and beyond","venue":null,"work_id":"edb2bcdb-7a36-4147-a4ad-dd9f790d6680","year":2025},"citing_paper":{"arxiv_id":"2510.00761","last_updated":"2026-04-18T07:30:06Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-10-01T10:50:14Z","title":"Downgrade to Upgrade: Optimizer Simplification Enhances Robustness in LLM Unlearning","version":5},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-05-18T10:44:53.516653Z"},"links":{"cited_paper":"/paper/2502.05374","citing_paper":"/paper/2510.00761"},"observation_digest":"sha256:252be38cebcbb0eea52fea064f18a4da9eda42ad0304fc2daf737d1480f53df2","observation_id":"a0028ab0-70e5-42c8-aa8d-6fab9f174cdd","resolution":{"observed_at":"2026-05-18T10:46:17.126942Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2502.05374","last_updated":"2025-05-27T03:29:37Z","snapshot_observed_at":"2026-08-08T23:47:53.801067Z","submitted_at":"2025-02-07T23:03:55Z","title":"Towards LLM Unlearning Resilient to Relearning Attacks: A Sharpness-Aware Minimization Perspective and Beyond","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.05374","snapshot_observed_at":"2026-08-03T23:39:05.091763Z","title":"Towards llm unlearning resilient to relearning attacks: A sharpness-aware minimization perspective and beyond.arXiv preprint arXiv:2502.05374, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2511.04934","last_updated":"2026-05-27T18:09:51Z","snapshot_observed_at":"2026-08-03T23:39:02.552396Z","submitted_at":"2025-11-07T02:30:05Z","title":"Leak@$k$: Unlearning Does Not Make LLMs Forget Under Probabilistic Decoding","version":3},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-03T23:39:05.091763Z"},"links":{"cited_paper":"/paper/2502.05374","citing_paper":"/paper/2511.04934"},"observation_digest":"sha256:a01335656e5e307552bf81d48b45dea1f7079d75944b8eede0d5395ec654a390","observation_id":"baec5ee2-7527-47d8-86f8-be60b8bc359f","resolution":{"observed_at":"2026-08-03T23:39:05.091763Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.05374","last_updated":"2025-05-27T03:29:37Z","snapshot_observed_at":"2026-08-08T23:47:53.801067Z","submitted_at":"2025-02-07T23:03:55Z","title":"Towards LLM Unlearning Resilient to Relearning Attacks: A Sharpness-Aware Minimization Perspective and Beyond","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.05374","snapshot_observed_at":"2026-08-03T10:37:00.505705Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.09624","last_updated":"2026-07-27T02:03:28Z","snapshot_observed_at":"2026-08-08T15:45:54.493538Z","submitted_at":"2026-01-14T16:55:58Z","title":"A Mechanistic Perspective and Circuit-Guided Difficulty Metric for Unlearning","version":2},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-03T10:37:00.505705Z"},"links":{"cited_paper":"/paper/2502.05374","citing_paper":"/paper/2601.09624"},"observation_digest":"sha256:191a92ff8d9491511d6533fda5d27c0caf68ce2810aed5efc70a7d58d1b75f9f","observation_id":"e4672d14-3c18-4119-9aed-c9a3155faf7e","resolution":{"observed_at":"2026-08-03T10:37:00.505705Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.05374","last_updated":"2025-05-27T03:29:37Z","snapshot_observed_at":"2026-08-08T23:47:53.801067Z","submitted_at":"2025-02-07T23:03:55Z","title":"Towards LLM Unlearning Resilient to Relearning Attacks: A Sharpness-Aware Minimization Perspective and Beyond","version":4},"cited_work":{"arxiv_id":"2502.05374","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2502.05374","snapshot_observed_at":"2026-07-02T20:07:21.193836Z","title":"Towards llm unlearning resilient to relearning attacks: A sharpness-aware minimization perspective and beyond","venue":null,"work_id":"edb2bcdb-7a36-4147-a4ad-dd9f790d6680","year":2025},"citing_paper":{"arxiv_id":"2604.04982","last_updated":"2026-04-04T23:13:55Z","snapshot_observed_at":"2026-08-02T14:39:32.415726Z","submitted_at":"2026-04-04T23:13:55Z","title":"CURE:Circuit-Aware Unlearning for LLM-based Recommendation","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-05-13T16:47:25.256063Z"},"links":{"cited_paper":"/paper/2502.05374","citing_paper":"/paper/2604.04982"},"observation_digest":"sha256:7af741642d5b784e51235d4952e4275dc8262e08f520f0cc985d367078bf4546","observation_id":"b9d51c13-3af9-4581-903d-91401588614b","resolution":{"observed_at":"2026-05-13T16:48:02.702494Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2502.05374","last_updated":"2025-05-27T03:29:37Z","snapshot_observed_at":"2026-08-08T23:47:53.801067Z","submitted_at":"2025-02-07T23:03:55Z","title":"Towards LLM Unlearning Resilient to Relearning Attacks: A Sharpness-Aware Minimization Perspective and Beyond","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.05374","snapshot_observed_at":"2026-07-13T12:04:13.336341Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.04984","last_updated":"2026-05-12T14:04:41Z","snapshot_observed_at":"2026-08-06T05:41:23.373110Z","submitted_at":"2026-04-05T00:44:02Z","title":"A Numerical PDEs Approach to Evolution Equations in Shape Analysis Based on Regularized Morphoelasticity","version":5},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-07-13T12:04:13.336341Z"},"links":{"cited_paper":"/paper/2502.05374","citing_paper":"/paper/2604.04984"},"observation_digest":"sha256:b8b7bc6bdda73ad8bcd005f511a8a414afb5a6576117f26ae1c02541d755472c","observation_id":"0542f4da-eb24-4f04-a9a3-409c50cd9583","resolution":{"observed_at":"2026-07-13T12:04:13.336341Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.05374","last_updated":"2025-05-27T03:29:37Z","snapshot_observed_at":"2026-08-08T23:47:53.801067Z","submitted_at":"2025-02-07T23:03:55Z","title":"Towards LLM Unlearning Resilient to Relearning Attacks: A Sharpness-Aware Minimization Perspective and Beyond","version":4},"cited_work":{"arxiv_id":"2502.05374","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2502.05374","snapshot_observed_at":"2026-07-02T20:07:21.193836Z","title":"Towards llm unlearning resilient to relearning attacks: A sharpness-aware minimization perspective and beyond","venue":null,"work_id":"edb2bcdb-7a36-4147-a4ad-dd9f790d6680","year":2025},"citing_paper":{"arxiv_id":"2604.09391","last_updated":"2026-04-10T15:06:50Z","snapshot_observed_at":"2026-08-08T11:15:18.080351Z","submitted_at":"2026-04-10T15:06:50Z","title":"Efficient Unlearning through Maximizing Relearning Convergence Delay","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-05-10T16:37:24.974659Z"},"links":{"cited_paper":"/paper/2502.05374","citing_paper":"/paper/2604.09391"},"observation_digest":"sha256:7564c8472252973c0f8b1483d62e0655f20e34168553a9ec73dfcc9d0ae82423","observation_id":"22a74234-2753-4ed1-9408-5aae69c5b456","resolution":{"observed_at":"2026-05-11T08:30:56.577842Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2502.05374","last_updated":"2025-05-27T03:29:37Z","snapshot_observed_at":"2026-08-08T23:47:53.801067Z","submitted_at":"2025-02-07T23:03:55Z","title":"Towards LLM Unlearning Resilient to Relearning Attacks: A Sharpness-Aware Minimization Perspective and Beyond","version":4},"cited_work":{"arxiv_id":"2502.05374","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2502.05374","snapshot_observed_at":"2026-07-02T20:07:21.193836Z","title":"Towards llm unlearning resilient to relearning attacks: A sharpness-aware minimization perspective and beyond","venue":null,"work_id":"edb2bcdb-7a36-4147-a4ad-dd9f790d6680","year":2025},"citing_paper":{"arxiv_id":"2605.14605","last_updated":"2026-05-24T08:34:13Z","snapshot_observed_at":"2026-07-06T23:25:58.895612Z","submitted_at":"2026-05-14T09:22:14Z","title":"One Step to the Side: Why Defenses Against Malicious Finetuning Fail Under Adaptive Adversaries","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-06-30T21:01:25.549340Z"},"links":{"cited_paper":"/paper/2502.05374","citing_paper":"/paper/2605.14605"},"observation_digest":"sha256:1cb650dc76f71cd7070cba58e8c24e37e2ba1425222263d288084495ae12b646","observation_id":"7ed1d545-3f53-4970-9a98-ec7d678047db","resolution":{"observed_at":"2026-06-30T21:05:04.058445Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2502.05374","last_updated":"2025-05-27T03:29:37Z","snapshot_observed_at":"2026-08-08T23:47:53.801067Z","submitted_at":"2025-02-07T23:03:55Z","title":"Towards LLM Unlearning Resilient to Relearning Attacks: A Sharpness-Aware Minimization Perspective and Beyond","version":4},"cited_work":{"arxiv_id":"2502.05374","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2502.05374","snapshot_observed_at":"2026-07-02T20:07:21.193836Z","title":"Towards llm unlearning resilient to relearning attacks: A sharpness-aware minimization perspective and beyond","venue":null,"work_id":"edb2bcdb-7a36-4147-a4ad-dd9f790d6680","year":2025},"citing_paper":{"arxiv_id":"2605.15737","last_updated":"2026-05-15T08:46:02Z","snapshot_observed_at":"2026-07-06T23:27:01.213106Z","submitted_at":"2026-05-15T08:46:02Z","title":"BARRIER: Bounded Activation Regions for Robust Information Erasure","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-05-20T19:14:08.601508Z"},"links":{"cited_paper":"/paper/2502.05374","citing_paper":"/paper/2605.15737"},"observation_digest":"sha256:6185a0ab7a1b9222a88142ed6f597b151f9a65e3a82c642c48967cb344fb3cc5","observation_id":"d1c62547-500c-4c05-9b81-11151dd56fb8","resolution":{"observed_at":"2026-05-20T19:18:54.702131Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2502.05374","last_updated":"2025-05-27T03:29:37Z","snapshot_observed_at":"2026-08-08T23:47:53.801067Z","submitted_at":"2025-02-07T23:03:55Z","title":"Towards LLM Unlearning Resilient to Relearning Attacks: A Sharpness-Aware Minimization Perspective and Beyond","version":4},"cited_work":{"arxiv_id":"2502.05374","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2502.05374","snapshot_observed_at":"2026-07-02T20:07:21.193836Z","title":"Towards llm unlearning resilient to relearning attacks: A sharpness-aware minimization perspective and beyond","venue":null,"work_id":"edb2bcdb-7a36-4147-a4ad-dd9f790d6680","year":2025},"citing_paper":{"arxiv_id":"2605.24614","last_updated":"2026-05-23T14:52:28Z","snapshot_observed_at":"2026-08-02T21:09:24.059785Z","submitted_at":"2026-05-23T14:52:28Z","title":"Measuring the Depth of LLM Unlearning via Activation Patching","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-06-30T13:34:08.624308Z"},"links":{"cited_paper":"/paper/2502.05374","citing_paper":"/paper/2605.24614"},"observation_digest":"sha256:e30bb3c277b6365b75397df23ab91afa4ebcdf162425ebb0d466d6f02d10860b","observation_id":"011b2cb6-9d87-4316-aa80-dd30117b79c0","resolution":{"observed_at":"2026-06-30T13:34:40.189857Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2502.05374","last_updated":"2025-05-27T03:29:37Z","snapshot_observed_at":"2026-08-08T23:47:53.801067Z","submitted_at":"2025-02-07T23:03:55Z","title":"Towards LLM Unlearning Resilient to Relearning Attacks: A Sharpness-Aware Minimization Perspective and Beyond","version":4},"cited_work":{"arxiv_id":"2502.05374","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2502.05374","snapshot_observed_at":"2026-07-02T20:07:21.193836Z","title":"Towards llm unlearning resilient to relearning attacks: A sharpness-aware minimization perspective and beyond","venue":null,"work_id":"edb2bcdb-7a36-4147-a4ad-dd9f790d6680","year":2025},"citing_paper":{"arxiv_id":"2606.07688","last_updated":"2026-06-05T05:19:31Z","snapshot_observed_at":"2026-08-02T10:21:49.701201Z","submitted_at":"2026-06-05T05:19:31Z","title":"TRACER: Token ReAssignment for Concept ERasure in Generative Recommendation","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-06-27T21:04:06.408281Z"},"links":{"cited_paper":"/paper/2502.05374","citing_paper":"/paper/2606.07688"},"observation_digest":"sha256:765b43340ffa346af643bcf185830fc32730d0b457197988b0fda37a17766658","observation_id":"46a2a673-a505-484a-acce-7abcbd568720","resolution":{"observed_at":"2026-07-02T20:07:21.195871Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2502.05374","last_updated":"2025-05-27T03:29:37Z","snapshot_observed_at":"2026-08-08T23:47:53.801067Z","submitted_at":"2025-02-07T23:03:55Z","title":"Towards LLM Unlearning Resilient to Relearning Attacks: A Sharpness-Aware Minimization Perspective and Beyond","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.05374","snapshot_observed_at":"2026-08-02T10:25:19.920395Z","title":"Towards LLM unlearning resilient to relearning attacks: A sharpness- aware minimization perspective and beyond","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.16227","last_updated":"2026-06-23T00:17:34Z","snapshot_observed_at":"2026-08-07T03:00:12.668461Z","submitted_at":"2026-06-23T00:17:34Z","title":"LLM Unlearning for Cyber Defense: A Survey on Methods, Challenges, and Emerging Threats","version":1},"reference_index":120,"source":"pdf_text","source_observed_at":"2026-08-02T10:25:19.920395Z"},"links":{"cited_paper":"/paper/2502.05374","citing_paper":"/paper/2607.16227"},"observation_digest":"sha256:6e7c73a048ed36f81ec6f5e2fa4b070b1e52ebe7c4809eddad85713e6dca6941","observation_id":"e592eb6e-c3db-40f5-ab67-07e50cd110fd","resolution":{"observed_at":"2026-08-02T10:25:19.920395Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.05374","last_updated":"2025-05-27T03:29:37Z","snapshot_observed_at":"2026-08-08T23:47:53.801067Z","submitted_at":"2025-02-07T23:03:55Z","title":"Towards LLM Unlearning Resilient to Relearning Attacks: A Sharpness-Aware Minimization Perspective and Beyond","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.05374","snapshot_observed_at":"2026-07-31T23:27:26.144256Z","title":"Towards llm unlearning resilient to relearning attacks: A sharpness-aware minimization perspective and beyond","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.23970","last_updated":"2026-08-03T16:54:30Z","snapshot_observed_at":"2026-08-06T23:37:51.567257Z","submitted_at":"2026-07-27T03:39:03Z","title":"Understanding Machine Unlearning Through the Lens of Mode Connectivity","version":1},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-07-31T23:27:26.144256Z"},"links":{"cited_paper":"/paper/2502.05374","citing_paper":"/paper/2607.23970"},"observation_digest":"sha256:8a767278bdac2c4d8c25d487af292f5aca133c7e198be6bb1d8beae4efe302d4","observation_id":"c4302c2c-2f46-42f0-bf67-10cf3bde04e7","resolution":{"observed_at":"2026-07-31T23:27:26.144256Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.05374","last_updated":"2025-05-27T03:29:37Z","snapshot_observed_at":"2026-08-08T23:47:53.801067Z","submitted_at":"2025-02-07T23:03:55Z","title":"Towards LLM Unlearning Resilient to Relearning Attacks: A Sharpness-Aware Minimization Perspective and Beyond","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.05374","snapshot_observed_at":"2026-08-01T00:35:49.649177Z","title":"Fan, C.; Liu, J.; Lin, L.; Jia, J.; Zhang, R.; Mei, S.; and Liu,S.2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.27836","last_updated":"2026-07-30T08:15:58Z","snapshot_observed_at":"2026-08-09T07:31:34.339252Z","submitted_at":"2026-07-30T08:15:58Z","title":"Crossing the Margin Cliff: Toward Relearn-Robust LLM Unlearning via Margin Calibration","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-01T00:35:49.649177Z"},"links":{"cited_paper":"/paper/2502.05374","citing_paper":"/paper/2607.27836"},"observation_digest":"sha256:b48f7f17c2c95b50758171727e6fe867f59b2fc0bb0e84ba953a604a3daeffb9","observation_id":"9fbfe937-109d-4674-be52-26d3e5097bbd","resolution":{"observed_at":"2026-08-01T00:35:49.649177Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2502.05374/citation-record","integrity":"/paper/2502.05374/integrity","json":"/paper/2502.05374/citation-record.json","paper":"/paper/2502.05374"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2009.03300","last_updated":"2021-01-12T18:57:11Z","snapshot_observed_at":"2026-08-09T10:28:06.906299Z","submitted_at":"2020-09-07T17:59:25Z","title":"Measuring Massive Multitask Language Understanding","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2009.03300","snapshot_observed_at":"2026-08-08T19:40:31.560219Z","title":"Measuring mas- sive multitask language understanding","venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"2502.05374","last_updated":"2025-05-27T03:29:37Z","snapshot_observed_at":"2026-08-08T23:47:53.801067Z","submitted_at":"2025-02-07T23:03:55Z","title":"Towards LLM Unlearning Resilient to Relearning Attacks: A Sharpness-Aware Minimization Perspective and Beyond","version":4},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-08T19:40:31.560219Z"},"links":{"cited_paper":"/paper/2009.03300","citing_paper":"/paper/2502.05374"},"observation_digest":"sha256:2c30cb5146988c4fb0cd26eb56426041406d51cdd47a74d20fa53dec93452092","observation_id":"612f1543-1877-437e-9897-df9cef8a646a","resolution":{"observed_at":"2026-08-08T19:40:31.560219Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.13356","last_updated":"2025-03-17T07:46:49Z","snapshot_observed_at":"2026-08-01T17:13:21.519528Z","submitted_at":"2024-06-19T09:03:21Z","title":"Unlearning or Obfuscating? Jogging the Memory of Unlearned LLMs via Benign Relearning","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.13356","snapshot_observed_at":"2026-08-08T19:40:31.563392Z","title":"S., and Smith, V","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2502.05374","last_updated":"2025-05-27T03:29:37Z","snapshot_observed_at":"2026-08-08T23:47:53.801067Z","submitted_at":"2025-02-07T23:03:55Z","title":"Towards LLM Unlearning Resilient to Relearning Attacks: A Sharpness-Aware Minimization Perspective and Beyond","version":4},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-08T19:40:31.563392Z"},"links":{"cited_paper":"/paper/2406.13356","citing_paper":"/paper/2502.05374"},"observation_digest":"sha256:79bea920609edd9e94b9f61a34f111524bb626ddd1048346219f08baf1abd134","observation_id":"d09ef9e6-89cb-4a54-b129-dce1425d6704","resolution":{"observed_at":"2026-08-08T19:40:31.563392Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1803.05407","last_updated":"2019-02-25T14:18:11Z","snapshot_observed_at":"2026-07-31T19:09:21.589864Z","submitted_at":"2018-03-14T17:09:27Z","title":"Averaging Weights Leads to Wider Optima and Better Generalization","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1803.05407","snapshot_observed_at":"2026-08-08T19:40:31.566572Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2502.05374","last_updated":"2025-05-27T03:29:37Z","snapshot_observed_at":"2026-08-08T23:47:53.801067Z","submitted_at":"2025-02-07T23:03:55Z","title":"Towards LLM Unlearning Resilient to Relearning Attacks: A Sharpness-Aware Minimization Perspective and Beyond","version":4},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-08T19:40:31.566572Z"},"links":{"cited_paper":"/paper/1803.05407","citing_paper":"/paper/2502.05374"},"observation_digest":"sha256:73de27efb31474b57439ab79f7107d0054d1adba343ca42113566d0cc9c11a5d","observation_id":"f68ace7d-44b0-4e01-8a58-bf701b02571d","resolution":{"observed_at":"2026-08-08T19:40:31.566572Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.12274","last_updated":"2024-04-18T15:47:00Z","snapshot_observed_at":"2026-08-09T11:22:34.471914Z","submitted_at":"2024-04-18T15:47:00Z","title":"Advancing the Robustness of Large Language Models through Self-Denoised Smoothing","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.12274","snapshot_observed_at":"2026-08-08T19:40:31.573098Z","title":"Advancing the ro- bustness of large language models through self-denoised smoothing","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2502.05374","last_updated":"2025-05-27T03:29:37Z","snapshot_observed_at":"2026-08-08T23:47:53.801067Z","submitted_at":"2025-02-07T23:03:55Z","title":"Towards LLM Unlearning Resilient to Relearning Attacks: A Sharpness-Aware Minimization Perspective and Beyond","version":4},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-08T19:40:31.573098Z"},"links":{"cited_paper":"/paper/2404.12274","citing_paper":"/paper/2502.05374"},"observation_digest":"sha256:7229c0bd5c1e7c3dbf226ce447af1baa3a67e96e1bed0e874f042d958270f926","observation_id":"2d4d4c01-9df2-43ef-90d3-3fdd4b514194","resolution":{"observed_at":"2026-08-08T19:40:31.573098Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.07933","last_updated":"2024-10-31T07:36:39Z","snapshot_observed_at":"2026-08-09T14:17:19.911956Z","submitted_at":"2024-06-12T06:56:20Z","title":"Large Language Model Unlearning via Embedding-Corrupted Prompts","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.07933","snapshot_observed_at":"2026-08-08T19:40:31.576262Z","title":"Continual learning and private unlearning","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.05374","last_updated":"2025-05-27T03:29:37Z","snapshot_observed_at":"2026-08-08T23:47:53.801067Z","submitted_at":"2025-02-07T23:03:55Z","title":"Towards LLM Unlearning Resilient to Relearning Attacks: A Sharpness-Aware Minimization Perspective and Beyond","version":4},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-08T19:40:31.576262Z"},"links":{"cited_paper":"/paper/2406.07933","citing_paper":"/paper/2502.05374"},"observation_digest":"sha256:3070f9e7b99dc69998aa52e698422fa62658a3db88fe6f095c52f8bd59e081b2","observation_id":"6b6ae6d0-1ab0-4c7e-990d-dc7891646bb9","resolution":{"observed_at":"2026-08-08T19:40:31.576262Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16835","last_updated":"2024-02-26T18:57:37Z","snapshot_observed_at":"2026-08-08T00:43:51.702314Z","submitted_at":"2024-02-26T18:57:37Z","title":"Eight Methods to Evaluate Robust Unlearning in LLMs","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.16835","snapshot_observed_at":"2026-08-08T19:40:31.579573Z","title":"Eight methods to evaluate robust unlearning in llms","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2502.05374","last_updated":"2025-05-27T03:29:37Z","snapshot_observed_at":"2026-08-08T23:47:53.801067Z","submitted_at":"2025-02-07T23:03:55Z","title":"Towards LLM Unlearning Resilient to Relearning Attacks: A Sharpness-Aware Minimization Perspective and Beyond","version":4},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-08T19:40:31.579573Z"},"links":{"cited_paper":"/paper/2402.16835","citing_paper":"/paper/2502.05374"},"observation_digest":"sha256:4242ff4e1049e565953060ebb90b1eaa0aa7dd8139dda7c92938c917fb73cab6","observation_id":"cef5dec4-b8d3-4e03-b3d1-38559e1168bc","resolution":{"observed_at":"2026-08-08T19:40:31.579573Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1803.02999","last_updated":"2018-10-22T16:11:14Z","snapshot_observed_at":"2026-08-05T12:53:31.632675Z","submitted_at":"2018-03-08T08:29:38Z","title":"On First-Order Meta-Learning Algorithms","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1803.02999","snapshot_observed_at":"2026-08-08T19:40:31.582487Z","title":"On first-order meta-learning algorithms","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2502.05374","last_updated":"2025-05-27T03:29:37Z","snapshot_observed_at":"2026-08-08T23:47:53.801067Z","submitted_at":"2025-02-07T23:03:55Z","title":"Towards LLM Unlearning Resilient to Relearning Attacks: A Sharpness-Aware Minimization Perspective and Beyond","version":4},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-08T19:40:31.582487Z"},"links":{"cited_paper":"/paper/1803.02999","citing_paper":"/paper/2502.05374"},"observation_digest":"sha256:4a97961b9c0692017bdca8ec4b1e9b627c43e049458f6330c8c7a03e812bf969","observation_id":"5cb42ed6-2e07-4310-b48b-12482eb6e795","resolution":{"observed_at":"2026-08-08T19:40:31.582487Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.07579","last_updated":"2024-06-06T06:31:08Z","snapshot_observed_at":"2026-07-06T16:31:16.784700Z","submitted_at":"2023-10-11T15:19:31Z","title":"In-Context Unlearning: Language Models as Few Shot Unlearners","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.07579","snapshot_observed_at":"2026-08-08T19:40:31.585388Z","title":"In-context unlearning: Language models as few shot unlearners","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2502.05374","last_updated":"2025-05-27T03:29:37Z","snapshot_observed_at":"2026-08-08T23:47:53.801067Z","submitted_at":"2025-02-07T23:03:55Z","title":"Towards LLM Unlearning Resilient to Relearning Attacks: A Sharpness-Aware Minimization Perspective and Beyond","version":4},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-08T19:40:31.585388Z"},"links":{"cited_paper":"/paper/2310.07579","citing_paper":"/paper/2502.05374"},"observation_digest":"sha256:7a3f4e382651a9e1ff0b5f050d6b47e06899bf42b8c3fb938f03107f3e2f8abb","observation_id":"55289d4d-4c9c-439c-96e5-814274229821","resolution":{"observed_at":"2026-08-08T19:40:31.585388Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.15549","last_updated":"2025-07-29T09:37:22Z","snapshot_observed_at":"2026-08-06T22:31:48.025702Z","submitted_at":"2024-07-22T11:19:14Z","title":"Latent Adversarial Training Improves Robustness to Persistent Harmful Behaviors in LLMs","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.15549","snapshot_observed_at":"2026-08-08T19:40:31.588552Z","title":"C., Perez, E., Hadfield- Menell, D., et al","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2502.05374","last_updated":"2025-05-27T03:29:37Z","snapshot_observed_at":"2026-08-08T23:47:53.801067Z","submitted_at":"2025-02-07T23:03:55Z","title":"Towards LLM Unlearning Resilient to Relearning Attacks: A Sharpness-Aware Minimization Perspective and Beyond","version":4},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-08T19:40:31.588552Z"},"links":{"cited_paper":"/paper/2407.15549","citing_paper":"/paper/2502.05374"},"observation_digest":"sha256:9053acaa56ded03c24a1da8988861239772edf197ed786d5901e12c5fa7056af","observation_id":"2cb99fd5-a8cd-40ec-bcd0-bf54ca4d89eb","resolution":{"observed_at":"2026-08-08T19:40:31.588552Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.06460","last_updated":"2024-07-14T20:14:02Z","snapshot_observed_at":"2026-07-06T18:43:22.614883Z","submitted_at":"2024-07-08T23:47:29Z","title":"MUSE: Machine Unlearning Six-Way Evaluation for Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.06460","snapshot_observed_at":"2026-08-08T19:40:31.592118Z","title":"A., and Zhang, C","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2502.05374","last_updated":"2025-05-27T03:29:37Z","snapshot_observed_at":"2026-08-08T23:47:53.801067Z","submitted_at":"2025-02-07T23:03:55Z","title":"Towards LLM Unlearning Resilient to Relearning Attacks: A Sharpness-Aware Minimization Perspective and Beyond","version":4},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-08T19:40:31.592118Z"},"links":{"cited_paper":"/paper/2407.06460","citing_paper":"/paper/2502.05374"},"observation_digest":"sha256:d534c578754af2c7467053c54bf05c8e20801d50ce961e1e6860460ca42ae869","observation_id":"ddfc1d88-f0b5-441c-8aca-648ac6319223","resolution":{"observed_at":"2026-08-08T19:40:31.592118Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.00106","last_updated":"2024-06-27T10:24:35Z","snapshot_observed_at":"2026-08-09T22:56:17.923881Z","submitted_at":"2024-06-27T10:24:35Z","title":"UnUnlearning: Unlearning is not sufficient for content regulation in advanced generative AI","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.00106","snapshot_observed_at":"2026-08-08T19:40:31.595781Z","title":"Ununlearning: Unlearning is not sufficient for content regulation in advanced generative ai","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2502.05374","last_updated":"2025-05-27T03:29:37Z","snapshot_observed_at":"2026-08-08T23:47:53.801067Z","submitted_at":"2025-02-07T23:03:55Z","title":"Towards LLM Unlearning Resilient to Relearning Attacks: A Sharpness-Aware Minimization Perspective and Beyond","version":4},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-08T19:40:31.595781Z"},"links":{"cited_paper":"/paper/2407.00106","citing_paper":"/paper/2502.05374"},"observation_digest":"sha256:33344595f8df214d372a9f708c1692eeb51db86ad7977acbb99237276bd3220b","observation_id":"5b7b9fe4-c404-4f6c-adc4-0bbb03264506","resolution":{"observed_at":"2026-08-08T19:40:31.595781Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T19:40:32.004223Z","title":"D., Ng, A","venue":null,"work_id":"0b323645-fce5-45af-a2a7-127ba0148774","year":2013},"citing_paper":{"arxiv_id":"2502.05374","last_updated":"2025-05-27T03:29:37Z","snapshot_observed_at":"2026-08-08T23:47:53.801067Z","submitted_at":"2025-02-07T23:03:55Z","title":"Towards LLM Unlearning Resilient to Relearning Attacks: A Sharpness-Aware Minimization Perspective and Beyond","version":4},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-08T19:40:31.598956Z"},"links":{"citing_paper":"/paper/2502.05374"},"observation_digest":"sha256:ed08ad8b2e2d82fd342e2041e935bdcf1f1dfa24555a35df4e647df4914a118f","observation_id":"728cddfa-dacd-4def-8f48-5f7ca751ab98","resolution":{"observed_at":"2026-08-08T19:40:32.007648Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.03329","last_updated":"2024-06-11T15:47:39Z","snapshot_observed_at":"2026-08-08T23:21:40.140805Z","submitted_at":"2024-03-05T21:19:06Z","title":"Guardrail Baselines for Unlearning in LLMs","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.03329","snapshot_observed_at":"2026-08-08T19:40:31.605132Z","title":"Guardrail baselines for unlearning in llms","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2502.05374","last_updated":"2025-05-27T03:29:37Z","snapshot_observed_at":"2026-08-08T23:47:53.801067Z","submitted_at":"2025-02-07T23:03:55Z","title":"Towards LLM Unlearning Resilient to Relearning Attacks: A Sharpness-Aware Minimization Perspective and Beyond","version":4},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-08T19:40:31.605132Z"},"links":{"cited_paper":"/paper/2403.03329","citing_paper":"/paper/2502.05374"},"observation_digest":"sha256:833f3f9c0db81e1e8ccec418605ceabe9a8d634f5cb9e006d202eef013164802","observation_id":"d14fe7cb-8000-4d62-b231-4c737272723d","resolution":{"observed_at":"2026-08-08T19:40:31.605132Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.17447","last_updated":"2024-10-01T17:39:09Z","snapshot_observed_at":"2026-08-10T04:40:11.186561Z","submitted_at":"2024-07-24T17:23:18Z","title":"FLRT: Fluent Student-Teacher Redteaming","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.17447","snapshot_observed_at":"2026-08-08T19:40:31.608351Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2502.05374","last_updated":"2025-05-27T03:29:37Z","snapshot_observed_at":"2026-08-08T23:47:53.801067Z","submitted_at":"2025-02-07T23:03:55Z","title":"Towards LLM Unlearning Resilient to Relearning Attacks: A Sharpness-Aware Minimization Perspective and Beyond","version":4},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-08T19:40:31.608351Z"},"links":{"cited_paper":"/paper/2407.17447","citing_paper":"/paper/2502.05374"},"observation_digest":"sha256:c3f1072c5701b8e820f6ef9f9ce7dd743c626dc1619ab45495d5c46546c4bd3a","observation_id":"699624d0-e224-4a34-899b-e2277283da81","resolution":{"observed_at":"2026-08-08T19:40:31.608351Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.20138","last_updated":"2023-12-05T16:14:24Z","snapshot_observed_at":"2026-07-06T16:40:55.334347Z","submitted_at":"2023-10-31T03:09:36Z","title":"DEPN: Detecting and Editing Privacy Neurons in Pretrained Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.20138","snapshot_observed_at":"2026-08-08T19:40:31.614403Z","title":"Depn: Detecting and editing privacy neu- rons in pretrained language models","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2502.05374","last_updated":"2025-05-27T03:29:37Z","snapshot_observed_at":"2026-08-08T23:47:53.801067Z","submitted_at":"2025-02-07T23:03:55Z","title":"Towards LLM Unlearning Resilient to Relearning Attacks: A Sharpness-Aware Minimization Perspective and Beyond","version":4},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-08T19:40:31.614403Z"},"links":{"cited_paper":"/paper/2310.20138","citing_paper":"/paper/2502.05374"},"observation_digest":"sha256:6a4591930a9a717ebcc2b9dd6b30a012777441ee2c8d45653cd3b787319f3762","observation_id":"27076dde-4d45-476e-844e-eb1d5513aef3","resolution":{"observed_at":"2026-08-08T19:40:31.614403Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T19:40:31.993918Z","title":"Weight perturbation as defense against adversarial word substitutions","venue":null,"work_id":"d4921900-4810-4332-80e9-bf155a8472f3","year":2022},"citing_paper":{"arxiv_id":"2502.05374","last_updated":"2025-05-27T03:29:37Z","snapshot_observed_at":"2026-08-08T23:47:53.801067Z","submitted_at":"2025-02-07T23:03:55Z","title":"Towards LLM Unlearning Resilient to Relearning Attacks: A Sharpness-Aware Minimization Perspective and Beyond","version":4},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-08T19:40:31.617413Z"},"links":{"citing_paper":"/paper/2502.05374"},"observation_digest":"sha256:2c026dcd381bb69a3679d07d53ef14b22d8183dd01387b7b498ff12ee17f54ef","observation_id":"da70c45c-ff2a-473c-9d15-d563af8ae01a","resolution":{"observed_at":"2026-08-08T19:40:31.997534Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10683","last_updated":"2024-02-16T19:47:36Z","snapshot_observed_at":"2026-08-04T08:36:17.664739Z","submitted_at":"2023-10-14T00:32:55Z","title":"Large Language Model Unlearning","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.10683","snapshot_observed_at":"2026-08-08T19:40:31.621100Z","title":"Large language model unlearn- ing","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2502.05374","last_updated":"2025-05-27T03:29:37Z","snapshot_observed_at":"2026-08-08T23:47:53.801067Z","submitted_at":"2025-02-07T23:03:55Z","title":"Towards LLM Unlearning Resilient to Relearning Attacks: A Sharpness-Aware Minimization Perspective and Beyond","version":4},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-08T19:40:31.621100Z"},"links":{"cited_paper":"/paper/2310.10683","citing_paper":"/paper/2502.05374"},"observation_digest":"sha256:b81037624e70d94621282199c922c1d3ad196a84721113dc23d91ac0c0371111","observation_id":"f51a3c09-5b23-4890-9ec3-fc74d08d7713","resolution":{"observed_at":"2026-08-08T19:40:31.621100Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2209.03316","last_updated":"2022-10-18T01:46:07Z","snapshot_observed_at":"2026-08-09T14:27:55.517623Z","submitted_at":"2022-09-07T17:23:08Z","title":"On the Complementarity between Pre-Training and Random-Initialization for Resource-Rich Machine Translation","version":3},"cited_work":{"arxiv_id":"2209.03316","doi":null,"metadata_source":"pith","pith_arxiv_id":"2209.03316","snapshot_observed_at":"2026-08-08T19:40:31.675245Z","title":"On the Complementarity between Pre-Training and Random-Initialization for Resource-Rich Machine Translation","venue":"cs.CL","work_id":"5a69db1c-b0bd-43df-b057-eb13e2fdb6ac","year":2022},"citing_paper":{"arxiv_id":"2502.05374","last_updated":"2025-05-27T03:29:37Z","snapshot_observed_at":"2026-08-08T23:47:53.801067Z","submitted_at":"2025-02-07T23:03:55Z","title":"Towards LLM Unlearning Resilient to Relearning Attacks: A Sharpness-Aware Minimization Perspective and Beyond","version":4},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-08T19:40:31.624278Z"},"links":{"cited_paper":"/paper/2209.03316","citing_paper":"/paper/2502.05374"},"observation_digest":"sha256:fcb9af67cf615d472d6e54f143401c5e63d948eec90e557868abd39c63a3ab82","observation_id":"301255c3-3890-45ac-b042-e5dc5d703fab","resolution":{"observed_at":"2026-08-08T19:40:31.681095Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.15152","last_updated":"2024-06-05T08:39:57Z","snapshot_observed_at":"2026-08-10T04:16:59.072627Z","submitted_at":"2024-02-23T07:22:55Z","title":"On the Duality Between Sharpness-Aware Minimization and Adversarial Training","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.15152","snapshot_observed_at":"2026-08-08T19:40:31.627559Z","title":"On the duality between sharpness-aware minimization and adversarial training","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2502.05374","last_updated":"2025-05-27T03:29:37Z","snapshot_observed_at":"2026-08-08T23:47:53.801067Z","submitted_at":"2025-02-07T23:03:55Z","title":"Towards LLM Unlearning Resilient to Relearning Attacks: A Sharpness-Aware Minimization Perspective and Beyond","version":4},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-08T19:40:31.627559Z"},"links":{"cited_paper":"/paper/2402.15152","citing_paper":"/paper/2502.05374"},"observation_digest":"sha256:06d6dd18529a011b8739e94fe4fcd6885d3811af50ccdb2cf7caf3dfa1a1794f","observation_id":"cdc3ec2b-52e3-42e2-acb2-c92ee5ac074e","resolution":{"observed_at":"2026-08-08T19:40:31.627559Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-07-06T15:59:23.019044Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-08-08T19:40:31.630851Z","title":"Z., and Fredrikson, M","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2502.05374","last_updated":"2025-05-27T03:29:37Z","snapshot_observed_at":"2026-08-08T23:47:53.801067Z","submitted_at":"2025-02-07T23:03:55Z","title":"Towards LLM Unlearning Resilient to Relearning Attacks: A Sharpness-Aware Minimization Perspective and Beyond","version":4},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-08T19:40:31.630851Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2502.05374"},"observation_digest":"sha256:5fc91c60fe09e14c995019769cd762b7c46e158d9272b7d6e951a5d31d3b654e","observation_id":"2ecf2133-9494-4744-8f51-8b9a3e66e9ed","resolution":{"observed_at":"2026-08-08T19:40:31.630851Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T19:40:31.984101Z","title":null,"venue":null,"work_id":"2129c2fb-601c-4f5c-9eda-7c2b1a9455c9","year":2024},"citing_paper":{"arxiv_id":"2502.05374","last_updated":"2025-05-27T03:29:37Z","snapshot_observed_at":"2026-08-08T23:47:53.801067Z","submitted_at":"2025-02-07T23:03:55Z","title":"Towards LLM Unlearning Resilient to Relearning Attacks: A Sharpness-Aware Minimization Perspective and Beyond","version":4},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-08T19:40:31.633890Z"},"links":{"citing_paper":"/paper/2502.05374"},"observation_digest":"sha256:3023f082065f52ac88f6f5a1c9010a5796bec1b52d1bbb5fb99305f1a43cab1c","observation_id":"59d2c78b-f59d-4b5a-acc6-59b66a0fd6b8","resolution":{"observed_at":"2026-08-08T19:40:31.987438Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T19:40:31.973427Z","title":"For the Books dataset, we utilize ICLM 7B, fine-tuned on the Harry Potter books","venue":null,"work_id":"adda2083-8969-4feb-b8ac-fcae04144ca3","year":2024},"citing_paper":{"arxiv_id":"2502.05374","last_updated":"2025-05-27T03:29:37Z","snapshot_observed_at":"2026-08-08T23:47:53.801067Z","submitted_at":"2025-02-07T23:03:55Z","title":"Towards LLM Unlearning Resilient to Relearning Attacks: A Sharpness-Aware Minimization Perspective and Beyond","version":4},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-08T19:40:31.637079Z"},"links":{"citing_paper":"/paper/2502.05374"},"observation_digest":"sha256:1b8142044ab633607872e420125ee006318e011ae1ac52681636295991dec40f","observation_id":"def0b735-8cca-43c4-8be5-78ced75bb941","resolution":{"observed_at":"2026-08-08T19:40:31.977395Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2408.00761","last_updated":"2025-02-10T18:26:14Z","snapshot_observed_at":"2026-08-06T05:53:06.918202Z","submitted_at":"2024-08-01T17:59:12Z","title":"Tamper-Resistant Safeguards for Open-Weight LLMs","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.00761","snapshot_observed_at":"2026-08-08T19:40:31.602077Z","title":"Tamper-resistant safeguards for open-weight llms","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2502.05374","last_updated":"2025-05-27T03:29:37Z","snapshot_observed_at":"2026-08-08T23:47:53.801067Z","submitted_at":"2025-02-07T23:03:55Z","title":"Towards LLM Unlearning Resilient to Relearning Attacks: A Sharpness-Aware Minimization Perspective and Beyond","version":4},"reference_index":2013,"source":"pdf_text","source_observed_at":"2026-08-08T19:40:31.602077Z"},"links":{"cited_paper":"/paper/2408.00761","citing_paper":"/paper/2502.05374"},"observation_digest":"sha256:c139c28aa6a3850ea72786438301242a4d5975f929134bfa28fdb53edbb5422f","observation_id":"5993d233-5c97-45ba-b019-6bfcebac0fa6","resolution":{"observed_at":"2026-08-08T19:40:31.602077Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2210.01504","last_updated":"2022-12-19T11:52:40Z","snapshot_observed_at":"2026-08-09T15:28:56.392520Z","submitted_at":"2022-10-04T10:18:11Z","title":"Knowledge Unlearning for Mitigating Privacy Risks in Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2210.01504","snapshot_observed_at":"2026-08-08T19:40:31.570140Z","title":"Knowledge unlearning for mitigat- ing privacy risks in language models","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2502.05374","last_updated":"2025-05-27T03:29:37Z","snapshot_observed_at":"2026-08-08T23:47:53.801067Z","submitted_at":"2025-02-07T23:03:55Z","title":"Towards LLM Unlearning Resilient to Relearning Attacks: A Sharpness-Aware Minimization Perspective and Beyond","version":4},"reference_index":2018,"source":"pdf_text","source_observed_at":"2026-08-08T19:40:31.570140Z"},"links":{"cited_paper":"/paper/2210.01504","citing_paper":"/paper/2502.05374"},"observation_digest":"sha256:db465c6624f0800460b4d5f2a6855619db4c5e57d113a887139483e52e7e145d","observation_id":"e99b886a-d901-4c02-b30d-b043d6186b0c","resolution":{"observed_at":"2026-08-08T19:40:31.570140Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1908.05620","last_updated":"2019-08-15T16:11:45Z","snapshot_observed_at":"2026-08-06T04:30:03.098604Z","submitted_at":"2019-08-15T16:11:45Z","title":"Visualizing and Understanding the Effectiveness of BERT","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1908.05620","snapshot_observed_at":"2026-08-08T19:40:31.556829Z","title":"Visualizing and understanding the effectiveness of bert","venue":null,"work_id":null,"year":1908},"citing_paper":{"arxiv_id":"2502.05374","last_updated":"2025-05-27T03:29:37Z","snapshot_observed_at":"2026-08-08T23:47:53.801067Z","submitted_at":"2025-02-07T23:03:55Z","title":"Towards LLM Unlearning Resilient to Relearning Attacks: A Sharpness-Aware Minimization Perspective and Beyond","version":4},"reference_index":2019,"source":"pdf_text","source_observed_at":"2026-08-08T19:40:31.556829Z"},"links":{"cited_paper":"/paper/1908.05620","citing_paper":"/paper/2502.05374"},"observation_digest":"sha256:d9925c2a4567c3ad98386a40b5b67d39f49ff1d6a4cc6c634b99252ef9930161","observation_id":"bdcbd7fb-7ce3-4f32-bfa1-7d6d90916163","resolution":{"observed_at":"2026-08-08T19:40:31.556829Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2110.14168","last_updated":"2021-11-18T00:23:45Z","snapshot_observed_at":"2026-08-07T01:45:38.840969Z","submitted_at":"2021-10-27T04:49:45Z","title":"Training Verifiers to Solve Math Word Problems","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2110.14168","snapshot_observed_at":"2026-08-08T19:40:31.545888Z","title":"Training verifiers to solve math word problems","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2502.05374","last_updated":"2025-05-27T03:29:37Z","snapshot_observed_at":"2026-08-08T23:47:53.801067Z","submitted_at":"2025-02-07T23:03:55Z","title":"Towards LLM Unlearning Resilient to Relearning Attacks: A Sharpness-Aware Minimization Perspective and Beyond","version":4},"reference_index":2020,"source":"pdf_text","source_observed_at":"2026-08-08T19:40:31.545888Z"},"links":{"cited_paper":"/paper/2110.14168","citing_paper":"/paper/2502.05374"},"observation_digest":"sha256:862e901755381f709ae1ba303b88d11de35a085b4eebbaa4532659fe1c0a2121","observation_id":"37555eb5-c1cd-4926-9016-55a23c4ae9ac","resolution":{"observed_at":"2026-08-08T19:40:31.545888Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.05392","last_updated":"2023-07-01T05:07:49Z","snapshot_observed_at":"2026-07-06T15:25:01.109419Z","submitted_at":"2023-05-09T12:39:21Z","title":"Sharpness-Aware Minimization Alone can Improve Adversarial Robustness","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.05392","snapshot_observed_at":"2026-08-08T19:40:31.611449Z","title":"Sharpness-aware minimiza- tion alone can improve adversarial robustness","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2502.05374","last_updated":"2025-05-27T03:29:37Z","snapshot_observed_at":"2026-08-08T23:47:53.801067Z","submitted_at":"2025-02-07T23:03:55Z","title":"Towards LLM Unlearning Resilient to Relearning Attacks: A Sharpness-Aware Minimization Perspective and Beyond","version":4},"reference_index":2021,"source":"pdf_text","source_observed_at":"2026-08-08T19:40:31.611449Z"},"links":{"cited_paper":"/paper/2305.05392","citing_paper":"/paper/2502.05374"},"observation_digest":"sha256:b8cef09727fd20098cec00f8c03cf0882e34cb0f42e606ffba4ab9876f375e01","observation_id":"f7bc7319-be6b-497a-a1ef-e632752e9050","resolution":{"observed_at":"2026-08-08T19:40:31.611449Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2501.04952","last_updated":"2025-01-09T03:59:10Z","snapshot_observed_at":"2026-08-08T00:46:37.661782Z","submitted_at":"2025-01-09T03:59:10Z","title":"Open Problems in Machine Unlearning for AI Safety","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.04952","snapshot_observed_at":"2026-08-08T19:40:31.538686Z","title":"Open problems in machine unlearning for ai safety.arXiv preprint arXiv:2501.04952,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2502.05374","last_updated":"2025-05-27T03:29:37Z","snapshot_observed_at":"2026-08-08T23:47:53.801067Z","submitted_at":"2025-02-07T23:03:55Z","title":"Towards LLM Unlearning Resilient to Relearning Attacks: A Sharpness-Aware Minimization Perspective and Beyond","version":4},"reference_index":2022,"source":"pdf_text","source_observed_at":"2026-08-08T19:40:31.538686Z"},"links":{"cited_paper":"/paper/2501.04952","citing_paper":"/paper/2502.05374"},"observation_digest":"sha256:ea9463f2928c1866f0bc174b4c9fadd195c72cda388cb954fc94fda60dd7e94f","observation_id":"fae7a7fe-e69d-49e7-90ba-8be2118fb806","resolution":{"observed_at":"2026-08-08T19:40:31.538686Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T19:40:31.553189Z","title":"Simplicity prevails: Rethinking negative pref- erence optimization for llm unlearning","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2502.05374","last_updated":"2025-05-27T03:29:37Z","snapshot_observed_at":"2026-08-08T23:47:53.801067Z","submitted_at":"2025-02-07T23:03:55Z","title":"Towards LLM Unlearning Resilient to Relearning Attacks: A Sharpness-Aware Minimization Perspective and Beyond","version":4},"reference_index":2023,"source":"pdf_text","source_observed_at":"2026-08-08T19:40:31.553189Z"},"links":{"citing_paper":"/paper/2502.05374"},"observation_digest":"sha256:e33b8cc407c44be585c6cd4c868380a16d5d5c6e7c95454500a314ec5d850a02","observation_id":"f2b4145f-fcee-4283-8540-783f80a24eb0","resolution":{"observed_at":"2026-08-08T19:40:31.553189Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.08827","last_updated":"2025-02-07T16:27:48Z","snapshot_observed_at":"2026-08-09T08:01:54.091525Z","submitted_at":"2024-10-11T14:06:58Z","title":"Do Unlearning Methods Remove Information from Language Model Weights?","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.08827","snapshot_observed_at":"2026-08-08T19:40:31.549295Z","title":"and Roger, F","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2502.05374","last_updated":"2025-05-27T03:29:37Z","snapshot_observed_at":"2026-08-08T23:47:53.801067Z","submitted_at":"2025-02-07T23:03:55Z","title":"Towards LLM Unlearning Resilient to Relearning Attacks: A Sharpness-Aware Minimization Perspective and Beyond","version":4},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-08T19:40:31.549295Z"},"links":{"cited_paper":"/paper/2410.08827","citing_paper":"/paper/2502.05374"},"observation_digest":"sha256:64187ac1188efff26fe0553d20c45d75ef5f157e0d7a20c43d5411eea394bd46","observation_id":"e026bcf2-e946-49b4-a975-57a13b8833d5","resolution":{"observed_at":"2026-08-08T19:40:31.549295Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T19:40:32.014567Z","title":"and Yang, J","venue":null,"work_id":"284f3e88-fcef-461d-b358-7e140eccd2f7","year":2015},"citing_paper":{"arxiv_id":"2502.05374","last_updated":"2025-05-27T03:29:37Z","snapshot_observed_at":"2026-08-08T23:47:53.801067Z","submitted_at":"2025-02-07T23:03:55Z","title":"Towards LLM Unlearning Resilient to Relearning Attacks: A Sharpness-Aware Minimization Perspective and Beyond","version":4},"reference_index":2025,"source":"pdf_text","source_observed_at":"2026-08-08T19:40:31.542724Z"},"links":{"citing_paper":"/paper/2502.05374"},"observation_digest":"sha256:9583c677995657a1fd09347905803818350d6557d5832f82f145a63acc28bd5f","observation_id":"8c8d618d-385f-44a2-b303-43cda6c8c65f","resolution":{"observed_at":"2026-08-08T19:40:32.017634Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2502.05374","last_updated":"2025-05-27T03:29:37Z","latest_version":4,"primary_category":"cs.LG","snapshot_observed_at":"2026-08-08T23:47:53.801067Z","submitted_at":"2025-02-07T23:03:55Z","title":"Towards LLM Unlearning Resilient to Relearning Attacks: A Sharpness-Aware Minimization Perspective and Beyond"},"reference_resolution":{"displayed":31,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":26,"verified_exact":1,"verified_fuzzy":4},"total_outbound_references":31},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"thesis":"As of 10 August 2026, this Paper Citation Record lists 31 of 31 outbound references and 15 inbound Pith citation observations for arXiv:2502.05374."}