{"as_of":"2026-08-17T19:31:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:f4a44408322ca4cbe72edb6593e30ba2c57fd1582cddfe79a0cf767275539757","coverage":[{"denominator":37,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":37,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-15T23:16:32.886149Z","state":"measured"},{"denominator":42,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":42,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-17T06:30:58.91139+00:00","state":"measured"},{"denominator":5,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":5,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-04T14:51:53.101273Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-05-20T18:08:50.533888Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2505.05190","last_updated":"2025-05-11T14:24:22Z","snapshot_observed_at":"2026-08-16T09:49:05.729917Z","submitted_at":"2025-05-08T12:39:00Z","title":"Revealing Weaknesses in Text Watermarking Through Self-Information Rewrite Attacks","version":2},"cited_work":{"arxiv_id":"2505.05190","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.05190","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Revealing weaknesses in text watermarking through self-information rewrite attacks","venue":null,"work_id":"aeace13b-9eec-409b-b3de-42bfe838845f","year":2025},"citing_paper":{"arxiv_id":"2509.20924","last_updated":"2026-05-14T06:08:08Z","snapshot_observed_at":"2026-08-13T09:43:25.918696Z","submitted_at":"2025-09-25T09:08:02Z","title":"RLCracker: Evaluating the Worst-Case Vulnerability of LLM Watermarks with Adaptive RL Attacks","version":2},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-05-18T14:25:25.576642Z"},"links":{"cited_paper":"/paper/2505.05190","citing_paper":"/paper/2509.20924"},"observation_digest":"sha256:fd74d0c2ad4fc6e904571d9280c6746ef622a1462f570039f1ac054ed99e93a4","observation_id":"0d1bd644-1cb4-4f12-a9e2-3fcbc50ffe17","resolution":{"observed_at":"2026-05-18T14:26:27.988391Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.05190","last_updated":"2025-05-11T14:24:22Z","snapshot_observed_at":"2026-08-16T09:49:05.729917Z","submitted_at":"2025-05-08T12:39:00Z","title":"Revealing Weaknesses in Text Watermarking Through Self-Information Rewrite Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.05190","snapshot_observed_at":"2026-08-04T14:51:53.101273Z","title":"Revealing weaknesses in text watermarking through self-information rewrite attacks.arXiv preprint arXiv:2505.05190,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.23019","last_updated":"2026-05-27T14:45:25Z","snapshot_observed_at":"2026-08-16T10:02:11.056373Z","submitted_at":"2025-09-27T00:24:57Z","title":"LLM Watermark Evasion via Bias Inversion","version":5},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-04T14:51:53.101273Z"},"links":{"cited_paper":"/paper/2505.05190","citing_paper":"/paper/2509.23019"},"observation_digest":"sha256:83ae745f6624a3fba951ddbd5927e6367d666298dd9807b8352d3c32b58e3f1f","observation_id":"bc38bb9b-2771-4a3f-85fb-795218aeb810","resolution":{"observed_at":"2026-08-04T14:51:53.101273Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.05190","last_updated":"2025-05-11T14:24:22Z","snapshot_observed_at":"2026-08-16T09:49:05.729917Z","submitted_at":"2025-05-08T12:39:00Z","title":"Revealing Weaknesses in Text Watermarking Through Self-Information Rewrite Attacks","version":2},"cited_work":{"arxiv_id":"2505.05190","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.05190","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Revealing weaknesses in text watermarking through self-information rewrite attacks","venue":null,"work_id":"aeace13b-9eec-409b-b3de-42bfe838845f","year":2025},"citing_paper":{"arxiv_id":"2604.11546","last_updated":"2026-04-13T14:37:11Z","snapshot_observed_at":"2026-08-16T12:37:28.503603Z","submitted_at":"2026-04-13T14:37:11Z","title":"RLSpoofer: A Lightweight Evaluator for LLM Watermark Spoofing Resilience","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-05-10T15:21:42.253396Z"},"links":{"cited_paper":"/paper/2505.05190","citing_paper":"/paper/2604.11546"},"observation_digest":"sha256:aaf1cc6b4634b2269616bd0545a7a5fc13ab34fd312b1f6b49fecde32fae6762","observation_id":"1124e082-4798-4019-8342-10c935960daf","resolution":{"observed_at":"2026-05-11T10:41:06.125744Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.05190","last_updated":"2025-05-11T14:24:22Z","snapshot_observed_at":"2026-08-16T09:49:05.729917Z","submitted_at":"2025-05-08T12:39:00Z","title":"Revealing Weaknesses in Text Watermarking Through Self-Information Rewrite Attacks","version":2},"cited_work":{"arxiv_id":"2505.05190","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.05190","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Revealing weaknesses in text watermarking through self-information rewrite attacks","venue":null,"work_id":"aeace13b-9eec-409b-b3de-42bfe838845f","year":2025},"citing_paper":{"arxiv_id":"2604.26965","last_updated":"2026-04-14T16:06:14Z","snapshot_observed_at":"2026-07-06T23:12:29.385105Z","submitted_at":"2026-04-14T16:06:14Z","title":"The Impact of AI-Generated Text on the Internet","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-05-10T14:01:29.175202Z"},"links":{"cited_paper":"/paper/2505.05190","citing_paper":"/paper/2604.26965"},"observation_digest":"sha256:200f0fc8c907135bd675f1c0ccbb46380388fea1b4677d92ae16575d031d531b","observation_id":"481cf040-c941-4a70-9f2c-9e0ee83da755","resolution":{"observed_at":"2026-05-10T14:05:29.804147Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.05190","last_updated":"2025-05-11T14:24:22Z","snapshot_observed_at":"2026-08-16T09:49:05.729917Z","submitted_at":"2025-05-08T12:39:00Z","title":"Revealing Weaknesses in Text Watermarking Through Self-Information Rewrite Attacks","version":2},"cited_work":{"arxiv_id":"2505.05190","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.05190","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Revealing weaknesses in text watermarking through self-information rewrite attacks","venue":null,"work_id":"aeace13b-9eec-409b-b3de-42bfe838845f","year":2025},"citing_paper":{"arxiv_id":"2605.16471","last_updated":"2026-05-15T13:53:02Z","snapshot_observed_at":"2026-08-14T00:09:46.311940Z","submitted_at":"2026-05-15T13:53:02Z","title":"From AI-Generated Content to Agentic Action: Security and Safety Threats in Generative AI","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-05-20T18:08:24.901025Z"},"links":{"cited_paper":"/paper/2505.05190","citing_paper":"/paper/2605.16471"},"observation_digest":"sha256:b3b24c590d8bb50be3d0dc7327a206a31f12abe1d53100689bad5d7d2d738c8a","observation_id":"205c3ce2-7115-42ec-b87a-4b34db4ae8e5","resolution":{"observed_at":"2026-05-20T18:08:50.536050Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2505.05190/citation-record","integrity":"/paper/2505.05190/integrity","json":"/paper/2505.05190/citation-record.json","paper":"/paper/2505.05190"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:16:33.336964Z","title":"and Kirchner, H","venue":null,"work_id":"46d4dfdc-7860-4550-a16c-f434ad134761","year":2022},"citing_paper":{"arxiv_id":"2505.05190","last_updated":"2025-05-11T14:24:22Z","snapshot_observed_at":"2026-08-16T09:49:05.729917Z","submitted_at":"2025-05-08T12:39:00Z","title":"Revealing Weaknesses in Text Watermarking Through Self-Information Rewrite Attacks","version":2},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-15T23:16:32.731211Z"},"links":{"citing_paper":"/paper/2505.05190"},"observation_digest":"sha256:ace8976618e493d0e5181c28b5e8b995ee014e42150c2e3fcf422e654d37a8fb","observation_id":"d32dbc7d-02fe-4632-a0b4-67657690dfcb","resolution":{"observed_at":"2026-08-15T23:16:33.341173Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:16:33.324869Z","title":"Claude 3.5, 2024","venue":null,"work_id":"a15081e5-c930-4c8e-968e-8296ea42f096","year":2024},"citing_paper":{"arxiv_id":"2505.05190","last_updated":"2025-05-11T14:24:22Z","snapshot_observed_at":"2026-08-16T09:49:05.729917Z","submitted_at":"2025-05-08T12:39:00Z","title":"Revealing Weaknesses in Text Watermarking Through Self-Information Rewrite Attacks","version":2},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-15T23:16:32.736098Z"},"links":{"citing_paper":"/paper/2505.05190"},"observation_digest":"sha256:b39b546597c40445f5104e7788883788700c5acd95179d7eb21e6b9a5111fe6b","observation_id":"66b380be-f20a-42fd-87c4-547c24a2c506","resolution":{"observed_at":"2026-08-15T23:16:33.328938Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.08419","last_updated":"2024-07-18T18:24:57Z","snapshot_observed_at":"2026-08-16T13:08:51.920120Z","submitted_at":"2023-10-12T15:38:28Z","title":"Jailbreaking Black Box Large Language Models in Twenty Queries","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.08419","snapshot_observed_at":"2026-08-15T23:16:32.740325Z","title":"J., and Wong, E","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.05190","last_updated":"2025-05-11T14:24:22Z","snapshot_observed_at":"2026-08-16T09:49:05.729917Z","submitted_at":"2025-05-08T12:39:00Z","title":"Revealing Weaknesses in Text Watermarking Through Self-Information Rewrite Attacks","version":2},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-15T23:16:32.740325Z"},"links":{"cited_paper":"/paper/2310.08419","citing_paper":"/paper/2505.05190"},"observation_digest":"sha256:046cb0173eff24eb4511cce48272616c0eafecbd559703cd5460aeb8e653c5a1","observation_id":"450bfa25-5f89-43e9-bb87-9adcd935ffd7","resolution":{"observed_at":"2026-08-15T23:16:32.740325Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:16:33.312462Z","title":"Undetectable watermarks for language models","venue":null,"work_id":"092d3fbc-3cd0-4780-8972-237b48dedae0","year":2024},"citing_paper":{"arxiv_id":"2505.05190","last_updated":"2025-05-11T14:24:22Z","snapshot_observed_at":"2026-08-16T09:49:05.729917Z","submitted_at":"2025-05-08T12:39:00Z","title":"Revealing Weaknesses in Text Watermarking Through Self-Information Rewrite Attacks","version":2},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-15T23:16:32.745098Z"},"links":{"citing_paper":"/paper/2505.05190"},"observation_digest":"sha256:fcc51c1219cdc9f1357f7949b63001b72cc23160eb13cb4c77fc5577affd30f9","observation_id":"6203dcde-d9b0-43fe-84ef-69d65d0f1b91","resolution":{"observed_at":"2026-08-15T23:16:33.316733Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2304.05335","last_updated":"2023-04-11T16:53:54Z","snapshot_observed_at":"2026-08-16T15:41:14.308965Z","submitted_at":"2023-04-11T16:53:54Z","title":"Toxicity in ChatGPT: Analyzing Persona-assigned Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2304.05335","snapshot_observed_at":"2026-08-15T23:16:32.749284Z","title":"Toxicity in chatgpt: Analyzing persona-assigned language models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.05190","last_updated":"2025-05-11T14:24:22Z","snapshot_observed_at":"2026-08-16T09:49:05.729917Z","submitted_at":"2025-05-08T12:39:00Z","title":"Revealing Weaknesses in Text Watermarking Through Self-Information Rewrite Attacks","version":2},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-15T23:16:32.749284Z"},"links":{"cited_paper":"/paper/2304.05335","citing_paper":"/paper/2505.05190"},"observation_digest":"sha256:a87991859bd4f5e9c9048ca41aa31728831b97aa3833725f6a544f2b9251c805","observation_id":"501d0307-42cd-4a71-8345-6560b3d86d13","resolution":{"observed_at":"2026-08-15T23:16:32.749284Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.21783","last_updated":"2024-11-23T23:27:33Z","snapshot_observed_at":"2026-08-13T17:20:44.002518Z","submitted_at":"2024-07-31T17:54:27Z","title":"The Llama 3 Herd of Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.21783","snapshot_observed_at":"2026-08-15T23:16:32.754611Z","title":"The llama 3 herd of models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.05190","last_updated":"2025-05-11T14:24:22Z","snapshot_observed_at":"2026-08-16T09:49:05.729917Z","submitted_at":"2025-05-08T12:39:00Z","title":"Revealing Weaknesses in Text Watermarking Through Self-Information Rewrite Attacks","version":2},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-15T23:16:32.754611Z"},"links":{"cited_paper":"/paper/2407.21783","citing_paper":"/paper/2505.05190"},"observation_digest":"sha256:19bc814bd9d102dce64759fc3ee61771354730a99ca063e76b47bcb7ddbb2b22","observation_id":"d0038ad4-77c2-4dc9-87a2-efb76a84474a","resolution":{"observed_at":"2026-08-15T23:16:32.754611Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.19361","last_updated":"2024-06-24T14:48:29Z","snapshot_observed_at":"2026-08-16T14:14:03.069592Z","submitted_at":"2024-02-29T17:12:39Z","title":"Watermark Stealing in Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.19361","snapshot_observed_at":"2026-08-15T23:16:32.760955Z","title":"Watermark stealing in large language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.05190","last_updated":"2025-05-11T14:24:22Z","snapshot_observed_at":"2026-08-16T09:49:05.729917Z","submitted_at":"2025-05-08T12:39:00Z","title":"Revealing Weaknesses in Text Watermarking Through Self-Information Rewrite Attacks","version":2},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-15T23:16:32.760955Z"},"links":{"cited_paper":"/paper/2402.19361","citing_paper":"/paper/2505.05190"},"observation_digest":"sha256:005ed32178d246b5c5f3b29ce5cf933e8f3243c623689d995cb28c08f447bd0f","observation_id":"fbdf86be-62c7-4fdf-a56e-3896fdf8467e","resolution":{"observed_at":"2026-08-15T23:16:32.760955Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:16:32.765783Z","title":"A watermark for large language models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.05190","last_updated":"2025-05-11T14:24:22Z","snapshot_observed_at":"2026-08-16T09:49:05.729917Z","submitted_at":"2025-05-08T12:39:00Z","title":"Revealing Weaknesses in Text Watermarking Through Self-Information Rewrite Attacks","version":2},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-15T23:16:32.765783Z"},"links":{"citing_paper":"/paper/2505.05190"},"observation_digest":"sha256:bdc003b5ad921340a3de6fd5ffca7f0cb7c5b6f9d088d97f5e08132913117217","observation_id":"f963040b-3278-4f2c-a3bd-db8c8196dfa7","resolution":{"observed_at":"2026-08-15T23:16:32.765783Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:16:33.292384Z","title":"Paraphrasing evades detectors of ai-generated text, but retrieval is an effective defense","venue":null,"work_id":"c02594a1-eab2-41f8-9fe7-f7de74cb7035","year":2024},"citing_paper":{"arxiv_id":"2505.05190","last_updated":"2025-05-11T14:24:22Z","snapshot_observed_at":"2026-08-16T09:49:05.729917Z","submitted_at":"2025-05-08T12:39:00Z","title":"Revealing Weaknesses in Text Watermarking Through Self-Information Rewrite Attacks","version":2},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-15T23:16:32.770455Z"},"links":{"citing_paper":"/paper/2505.05190"},"observation_digest":"sha256:1a615e341265f78878290af5fbb277349ff0a3f76d301f7921961b74c9b41be2","observation_id":"a9fc2910-fdc7-456e-8e41-1ee1a73b15d2","resolution":{"observed_at":"2026-08-15T23:16:33.296458Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:16:33.279580Z","title":"Robust distortion-free watermarks for language models","venue":null,"work_id":"88771f57-263b-45f4-8c63-ce9c471d6cec","year":2023},"citing_paper":{"arxiv_id":"2505.05190","last_updated":"2025-05-11T14:24:22Z","snapshot_observed_at":"2026-08-16T09:49:05.729917Z","submitted_at":"2025-05-08T12:39:00Z","title":"Revealing Weaknesses in Text Watermarking Through Self-Information Rewrite Attacks","version":2},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-15T23:16:32.775069Z"},"links":{"citing_paper":"/paper/2505.05190"},"observation_digest":"sha256:e8355ea5784764bc7844db9bb630a5b285cdcd6b231bc135743bfeab4191ac58","observation_id":"67fb51b5-bb74-431c-afed-37cb2b9d64c6","resolution":{"observed_at":"2026-08-15T23:16:33.284172Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:16:33.266107Z","title":null,"venue":null,"work_id":"b8ca7778-6e38-482f-aece-f77045130752","year":2024},"citing_paper":{"arxiv_id":"2505.05190","last_updated":"2025-05-11T14:24:22Z","snapshot_observed_at":"2026-08-16T09:49:05.729917Z","submitted_at":"2025-05-08T12:39:00Z","title":"Revealing Weaknesses in Text Watermarking Through Self-Information Rewrite Attacks","version":2},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-15T23:16:32.779415Z"},"links":{"citing_paper":"/paper/2505.05190"},"observation_digest":"sha256:07100552962ed484e3dd827cb5b439151e62a01704d7258e4841421287fa94e1","observation_id":"5c8498c5-9747-474b-a9b1-3189d4ca669d","resolution":{"observed_at":"2026-08-15T23:16:33.271232Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.14883","last_updated":"2024-06-05T11:30:02Z","snapshot_observed_at":"2026-08-16T14:16:22.613848Z","submitted_at":"2024-02-22T04:55:14Z","title":"Double-I Watermark: Protecting Model Copyright for LLM Fine-tuning","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.14883","snapshot_observed_at":"2026-08-15T23:16:32.785110Z","title":"Double-i watermark: Protecting model copyright for llm fine-tuning","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.05190","last_updated":"2025-05-11T14:24:22Z","snapshot_observed_at":"2026-08-16T09:49:05.729917Z","submitted_at":"2025-05-08T12:39:00Z","title":"Revealing Weaknesses in Text Watermarking Through Self-Information Rewrite Attacks","version":2},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-15T23:16:32.785110Z"},"links":{"cited_paper":"/paper/2402.14883","citing_paper":"/paper/2505.05190"},"observation_digest":"sha256:25ae2b9120655b1943435204aa0fdf97a17ca9be6cbcffdef6546fd3255c4583","observation_id":"8f300f62-c5da-46ab-8b1d-e3d335fcaf80","resolution":{"observed_at":"2026-08-15T23:16:32.785110Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:16:33.253435Z","title":null,"venue":null,"work_id":"23d0f827-3dca-4bec-8619-1f4e61561054","year":2023},"citing_paper":{"arxiv_id":"2505.05190","last_updated":"2025-05-11T14:24:22Z","snapshot_observed_at":"2026-08-16T09:49:05.729917Z","submitted_at":"2025-05-08T12:39:00Z","title":"Revealing Weaknesses in Text Watermarking Through Self-Information Rewrite Attacks","version":2},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-15T23:16:32.790480Z"},"links":{"citing_paper":"/paper/2505.05190"},"observation_digest":"sha256:c2fef21b021c603396072edcc8bf5119d5400c6692b82a1adef1ebc9963425aa","observation_id":"24dbb7a5-39ab-4340-9624-a36e21fd41ce","resolution":{"observed_at":"2026-08-15T23:16:33.257352Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.06356","last_updated":"2024-05-19T12:24:40Z","snapshot_observed_at":"2026-08-16T18:10:09.278507Z","submitted_at":"2023-10-10T06:49:43Z","title":"A Semantic Invariant Robust Watermark for Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.06356","snapshot_observed_at":"2026-08-15T23:16:32.794674Z","title":"A semantic invariant robust watermark for large language models, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.05190","last_updated":"2025-05-11T14:24:22Z","snapshot_observed_at":"2026-08-16T09:49:05.729917Z","submitted_at":"2025-05-08T12:39:00Z","title":"Revealing Weaknesses in Text Watermarking Through Self-Information Rewrite Attacks","version":2},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-15T23:16:32.794674Z"},"links":{"cited_paper":"/paper/2310.06356","citing_paper":"/paper/2505.05190"},"observation_digest":"sha256:a3ef12b0be7b05efdc8fe1da97419265ca8394695d80378899310f2005210d6c","observation_id":"3a5fc38f-72cf-466b-aaf3-4af2d6468d59","resolution":{"observed_at":"2026-08-15T23:16:32.794674Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.13927","last_updated":"2024-06-09T03:52:21Z","snapshot_observed_at":"2026-08-16T14:24:40.773044Z","submitted_at":"2024-01-25T03:57:12Z","title":"Adaptive Text Watermark for Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.13927","snapshot_observed_at":"2026-08-15T23:16:32.799003Z","title":"and Bu, Y","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.05190","last_updated":"2025-05-11T14:24:22Z","snapshot_observed_at":"2026-08-16T09:49:05.729917Z","submitted_at":"2025-05-08T12:39:00Z","title":"Revealing Weaknesses in Text Watermarking Through Self-Information Rewrite Attacks","version":2},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-15T23:16:32.799003Z"},"links":{"cited_paper":"/paper/2401.13927","citing_paper":"/paper/2505.05190"},"observation_digest":"sha256:b2f745ddad9e73a3257d64cc404c1b5855530fd6596685c312e0bd20652abace","observation_id":"5a324c9e-33c2-4679-964b-3cd46a271b4d","resolution":{"observed_at":"2026-08-15T23:16:32.799003Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.13485","last_updated":"2024-06-09T06:51:57Z","snapshot_observed_at":"2026-08-16T14:08:05.260989Z","submitted_at":"2024-03-20T10:40:01Z","title":"An Entropy-based Text Watermarking Detection Method","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.13485","snapshot_observed_at":"2026-08-15T23:16:32.803207Z","title":"An entropy-based text watermarking detection method","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.05190","last_updated":"2025-05-11T14:24:22Z","snapshot_observed_at":"2026-08-16T09:49:05.729917Z","submitted_at":"2025-05-08T12:39:00Z","title":"Revealing Weaknesses in Text Watermarking Through Self-Information Rewrite Attacks","version":2},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-15T23:16:32.803207Z"},"links":{"cited_paper":"/paper/2403.13485","citing_paper":"/paper/2505.05190"},"observation_digest":"sha256:147d80d3a1ce964263a1deb21bd20446be29366948aa2feeeb8950aee217af90","observation_id":"e7cc70ef-4de3-49a5-ab73-5bcfe0c67e09","resolution":{"observed_at":"2026-08-15T23:16:32.803207Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1706.06083","last_updated":"2019-09-04T18:53:10Z","snapshot_observed_at":"2026-08-07T14:27:46.872660Z","submitted_at":"2017-06-19T17:53:11Z","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1706.06083","snapshot_observed_at":"2026-08-15T23:16:32.807567Z","title":"Towards deep learning models resistant to adversarial attacks","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2505.05190","last_updated":"2025-05-11T14:24:22Z","snapshot_observed_at":"2026-08-16T09:49:05.729917Z","submitted_at":"2025-05-08T12:39:00Z","title":"Revealing Weaknesses in Text Watermarking Through Self-Information Rewrite Attacks","version":2},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-15T23:16:32.807567Z"},"links":{"cited_paper":"/paper/1706.06083","citing_paper":"/paper/2505.05190"},"observation_digest":"sha256:ff6629d31bf8e9277e648b3970380268ce3c207ecb940f50450b3826f43b0db8","observation_id":"5d7c433d-64c2-4ad6-9a4d-6c75f3829d70","resolution":{"observed_at":"2026-08-15T23:16:32.807567Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:16:33.240343Z","title":null,"venue":null,"work_id":"aa99c35c-06b3-4d47-bfa5-0aa5170b7913","year":1995},"citing_paper":{"arxiv_id":"2505.05190","last_updated":"2025-05-11T14:24:22Z","snapshot_observed_at":"2026-08-16T09:49:05.729917Z","submitted_at":"2025-05-08T12:39:00Z","title":"Revealing Weaknesses in Text Watermarking Through Self-Information Rewrite Attacks","version":2},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-15T23:16:32.812532Z"},"links":{"citing_paper":"/paper/2505.05190"},"observation_digest":"sha256:d54f3ec2362063d5caa5270c0d5266e7ede9d762b28ea5b4dc9455e3d2b157e3","observation_id":"986d0835-c20e-4fee-9485-c84a148172d7","resolution":{"observed_at":"2026-08-15T23:16:33.244440Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:16:33.228525Z","title":"R., Whybrow, P","venue":null,"work_id":"e6dffbd8-eb20-4f3b-908a-1fd60a1ddc8e","year":2024},"citing_paper":{"arxiv_id":"2505.05190","last_updated":"2025-05-11T14:24:22Z","snapshot_observed_at":"2026-08-16T09:49:05.729917Z","submitted_at":"2025-05-08T12:39:00Z","title":"Revealing Weaknesses in Text Watermarking Through Self-Information Rewrite Attacks","version":2},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-15T23:16:32.816479Z"},"links":{"citing_paper":"/paper/2505.05190"},"observation_digest":"sha256:45a8ff6e04961176e58b4c69d29e9fbc9ff9d9c28d3de7be58ae6906a35eeae3","observation_id":"2cd79a8a-e206-4295-a845-42d2df8d624c","resolution":{"observed_at":"2026-08-15T23:16:33.232359Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:16:33.215243Z","title":"Chatgpt-4o: Multimodal and multilingual capabilities","venue":null,"work_id":"cc7d3f14-60db-4d35-a577-9b686cd02de2","year":2024},"citing_paper":{"arxiv_id":"2505.05190","last_updated":"2025-05-11T14:24:22Z","snapshot_observed_at":"2026-08-16T09:49:05.729917Z","submitted_at":"2025-05-08T12:39:00Z","title":"Revealing Weaknesses in Text Watermarking Through Self-Information Rewrite Attacks","version":2},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-15T23:16:32.820677Z"},"links":{"citing_paper":"/paper/2505.05190"},"observation_digest":"sha256:ffe0d0d35bad922c51053566c30f8cb0920a8343f09d7f7f5b491e17824347bf","observation_id":"30ae56ea-4b96-4582-afea-aa8bef185a80","resolution":{"observed_at":"2026-08-15T23:16:33.219730Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.10051","last_updated":"2024-10-26T05:11:11Z","snapshot_observed_at":"2026-08-16T13:52:11.349522Z","submitted_at":"2024-05-16T12:40:01Z","title":"MarkLLM: An Open-Source Toolkit for LLM Watermarking","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.10051","snapshot_observed_at":"2026-08-15T23:16:32.824289Z","title":"Markllm: An open-source toolkit for llm watermarking","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.05190","last_updated":"2025-05-11T14:24:22Z","snapshot_observed_at":"2026-08-16T09:49:05.729917Z","submitted_at":"2025-05-08T12:39:00Z","title":"Revealing Weaknesses in Text Watermarking Through Self-Information Rewrite Attacks","version":2},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-15T23:16:32.824289Z"},"links":{"cited_paper":"/paper/2405.10051","citing_paper":"/paper/2505.05190"},"observation_digest":"sha256:d08fb698f21265e4b827b9dde2442dc672c0a9faff8bd51a9ed05501b66a8f19","observation_id":"730aa0e4-0c6c-437e-8b19-028212b7de11","resolution":{"observed_at":"2026-08-15T23:16:32.824289Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:16:33.201969Z","title":null,"venue":null,"work_id":"f1dbfb7a-7a5c-4e5c-a683-c0cef529a78e","year":2020},"citing_paper":{"arxiv_id":"2505.05190","last_updated":"2025-05-11T14:24:22Z","snapshot_observed_at":"2026-08-16T09:49:05.729917Z","submitted_at":"2025-05-08T12:39:00Z","title":"Revealing Weaknesses in Text Watermarking Through Self-Information Rewrite Attacks","version":2},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-15T23:16:32.828261Z"},"links":{"citing_paper":"/paper/2505.05190"},"observation_digest":"sha256:4b1a6f8ca9d8fe4a860b2b9b79d789dd0347570bf8b01c0a63394a0416dd35b2","observation_id":"81457292-ec5b-4a2e-a156-7b95bc408bf4","resolution":{"observed_at":"2026-08-15T23:16:33.206719Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:16:32.831917Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2505.05190","last_updated":"2025-05-11T14:24:22Z","snapshot_observed_at":"2026-08-16T09:49:05.729917Z","submitted_at":"2025-05-08T12:39:00Z","title":"Revealing Weaknesses in Text Watermarking Through Self-Information Rewrite Attacks","version":2},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-15T23:16:32.831917Z"},"links":{"citing_paper":"/paper/2505.05190"},"observation_digest":"sha256:6004175fb62ae20dde2d870e0b3b2bf7ce894e7bd1b2000788f297911d7eeb47","observation_id":"98e63aea-6bf4-4461-acd9-761dc92496b1","resolution":{"observed_at":"2026-08-15T23:16:32.831917Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:16:32.835476Z","title":"and Gurevych, I","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2505.05190","last_updated":"2025-05-11T14:24:22Z","snapshot_observed_at":"2026-08-16T09:49:05.729917Z","submitted_at":"2025-05-08T12:39:00Z","title":"Revealing Weaknesses in Text Watermarking Through Self-Information Rewrite Attacks","version":2},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-15T23:16:32.835476Z"},"links":{"citing_paper":"/paper/2505.05190"},"observation_digest":"sha256:d7ed0c556696a20cd2ffa9e965f4606a35194ad0b9edb2582bd2ff5c23cdd809","observation_id":"a00a4494-da73-44df-b0f0-d79c005d6a93","resolution":{"observed_at":"2026-08-15T23:16:32.835476Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2303.11156","last_updated":"2025-01-17T04:21:47Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-03-17T17:53:19Z","title":"Can AI-Generated Text be Reliably Detected?","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.11156","snapshot_observed_at":"2026-08-15T23:16:32.839347Z","title":"S., Kumar, A., Balasubramanian, S., Wang, W., and Feizi, S","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.05190","last_updated":"2025-05-11T14:24:22Z","snapshot_observed_at":"2026-08-16T09:49:05.729917Z","submitted_at":"2025-05-08T12:39:00Z","title":"Revealing Weaknesses in Text Watermarking Through Self-Information Rewrite Attacks","version":2},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-15T23:16:32.839347Z"},"links":{"cited_paper":"/paper/2303.11156","citing_paper":"/paper/2505.05190"},"observation_digest":"sha256:cb658c16df21f74abd9a246f6e5159d336ba61de6c12a6cfd9978085e42985a3","observation_id":"ce171948-d81a-474e-9bd0-0717f3eec59f","resolution":{"observed_at":"2026-08-15T23:16:32.839347Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:16:32.843432Z","title":null,"venue":null,"work_id":null,"year":1948},"citing_paper":{"arxiv_id":"2505.05190","last_updated":"2025-05-11T14:24:22Z","snapshot_observed_at":"2026-08-16T09:49:05.729917Z","submitted_at":"2025-05-08T12:39:00Z","title":"Revealing Weaknesses in Text Watermarking Through Self-Information Rewrite Attacks","version":2},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-08-15T23:16:32.843432Z"},"links":{"citing_paper":"/paper/2505.05190"},"observation_digest":"sha256:a81ca432e4817b43932bc9fb646b8419391921304d68ed91d49d166dd02c19ef","observation_id":"b89bded3-1543-4c48-aab5-e03c093d5eb1","resolution":{"observed_at":"2026-08-15T23:16:32.843432Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:16:33.172754Z","title":"Ai bot chatgpt writes smart essays-should academics worry? Nature, 2022","venue":null,"work_id":"98f51c9a-fc46-4c17-9fba-061593a82fe3","year":2022},"citing_paper":{"arxiv_id":"2505.05190","last_updated":"2025-05-11T14:24:22Z","snapshot_observed_at":"2026-08-16T09:49:05.729917Z","submitted_at":"2025-05-08T12:39:00Z","title":"Revealing Weaknesses in Text Watermarking Through Self-Information Rewrite Attacks","version":2},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-08-15T23:16:32.847243Z"},"links":{"citing_paper":"/paper/2505.05190"},"observation_digest":"sha256:0581116c95a7703a661f352f185acd2db456b5a81ba210902c19fe5a1fcb6559","observation_id":"fcfbd16b-40ed-4966-bdff-1614dd1d00ad","resolution":{"observed_at":"2026-08-15T23:16:33.177130Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.10552","last_updated":"2024-04-16T13:22:54Z","snapshot_observed_at":"2026-08-16T14:00:32.980657Z","submitted_at":"2024-04-16T13:22:54Z","title":"Unveiling the Misuse Potential of Base Large Language Models via In-Context Learning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.10552","snapshot_observed_at":"2026-08-15T23:16:32.851326Z","title":"Unveiling the misuse potential of base large language models via in-context learning","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.05190","last_updated":"2025-05-11T14:24:22Z","snapshot_observed_at":"2026-08-16T09:49:05.729917Z","submitted_at":"2025-05-08T12:39:00Z","title":"Revealing Weaknesses in Text Watermarking Through Self-Information Rewrite Attacks","version":2},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-08-15T23:16:32.851326Z"},"links":{"cited_paper":"/paper/2404.10552","citing_paper":"/paper/2505.05190"},"observation_digest":"sha256:8ea735351008ea1fedef990799cd4c62dac7fdf535f390ef98e74127900c12a9","observation_id":"1b997804-eff4-4d00-a9f5-fd7dc189e56f","resolution":{"observed_at":"2026-08-15T23:16:32.851326Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:16:33.159366Z","title":"Jailbroken: How does llm safety training fail? In Advances in neural information processing systems (NeurIPS), 2023","venue":null,"work_id":"0d73f8b4-f2a1-4c5e-9649-3de606108719","year":2023},"citing_paper":{"arxiv_id":"2505.05190","last_updated":"2025-05-11T14:24:22Z","snapshot_observed_at":"2026-08-16T09:49:05.729917Z","submitted_at":"2025-05-08T12:39:00Z","title":"Revealing Weaknesses in Text Watermarking Through Self-Information Rewrite Attacks","version":2},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-08-15T23:16:32.855148Z"},"links":{"citing_paper":"/paper/2505.05190"},"observation_digest":"sha256:2087558ffc03c1c428c1271087059bf34e02d6b083e8433f96365511ca664b7a","observation_id":"a50e7686-f504-4a78-9bd5-01718c34ec0a","resolution":{"observed_at":"2026-08-15T23:16:33.163793Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:16:33.145644Z","title":"D., Szummer, M., and Kohli, P","venue":null,"work_id":"055754f0-1278-40c9-9cd1-93d74d294dcf","year":2020},"citing_paper":{"arxiv_id":"2505.05190","last_updated":"2025-05-11T14:24:22Z","snapshot_observed_at":"2026-08-16T09:49:05.729917Z","submitted_at":"2025-05-08T12:39:00Z","title":"Revealing Weaknesses in Text Watermarking Through Self-Information Rewrite Attacks","version":2},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-08-15T23:16:32.858811Z"},"links":{"citing_paper":"/paper/2505.05190"},"observation_digest":"sha256:ab40412fddabef30dd0b10f6d0d1171a4b2b38c5a4f119b8bb061f8497d286d8","observation_id":"28af1b3f-f081-4ff9-8291-7e2313ba01cb","resolution":{"observed_at":"2026-08-15T23:16:33.150159Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.14719","last_updated":"2024-03-19T17:54:39Z","snapshot_observed_at":"2026-08-16T14:08:18.087186Z","submitted_at":"2024-03-19T17:54:39Z","title":"Bypassing LLM Watermarks with Color-Aware Substitutions","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.14719","snapshot_observed_at":"2026-08-15T23:16:32.862771Z","title":"and Chandrasekaran, V","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.05190","last_updated":"2025-05-11T14:24:22Z","snapshot_observed_at":"2026-08-16T09:49:05.729917Z","submitted_at":"2025-05-08T12:39:00Z","title":"Revealing Weaknesses in Text Watermarking Through Self-Information Rewrite Attacks","version":2},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-08-15T23:16:32.862771Z"},"links":{"cited_paper":"/paper/2403.14719","citing_paper":"/paper/2505.05190"},"observation_digest":"sha256:eab260fbde2c718106db8948298703ae5aab76a70e5286253d5030bb25b2892b","observation_id":"120d43de-1e95-4595-9d2e-bea52004d7bb","resolution":{"observed_at":"2026-08-15T23:16:32.862771Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:16:33.132610Z","title":"A resilient and accessible distribution-preserving watermark for large language models","venue":null,"work_id":"69d0d1fd-e1a8-4762-ae5f-86860a37830e","year":2024},"citing_paper":{"arxiv_id":"2505.05190","last_updated":"2025-05-11T14:24:22Z","snapshot_observed_at":"2026-08-16T09:49:05.729917Z","submitted_at":"2025-05-08T12:39:00Z","title":"Revealing Weaknesses in Text Watermarking Through Self-Information Rewrite Attacks","version":2},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-08-15T23:16:32.866713Z"},"links":{"citing_paper":"/paper/2505.05190"},"observation_digest":"sha256:880b84481ef23192f1ec50376194b8c790a355ea624824870889d01123e27482","observation_id":"40c74456-e2c1-4a5e-abc4-38239e63dc03","resolution":{"observed_at":"2026-08-15T23:16:33.137062Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:16:33.117575Z","title":"Discriminative training for near-synonym substitution","venue":null,"work_id":"ebfd3f42-632d-4d12-b97d-12ff24ad2ce4","year":2010},"citing_paper":{"arxiv_id":"2505.05190","last_updated":"2025-05-11T14:24:22Z","snapshot_observed_at":"2026-08-16T09:49:05.729917Z","submitted_at":"2025-05-08T12:39:00Z","title":"Revealing Weaknesses in Text Watermarking Through Self-Information Rewrite Attacks","version":2},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-08-15T23:16:32.870297Z"},"links":{"citing_paper":"/paper/2505.05190"},"observation_digest":"sha256:154a335d5d1231400cf6e1875d72a54b2fc569fd1b2d7eb5f31f05f85099eb8b","observation_id":"07a1fefc-4e66-490c-afd3-8b5d60843ed2","resolution":{"observed_at":"2026-08-15T23:16:33.123727Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2311.04378","last_updated":"2025-05-27T21:31:20Z","snapshot_observed_at":"2026-08-16T14:45:07.917387Z","submitted_at":"2023-11-07T22:52:54Z","title":"Watermarks in the Sand: Impossibility of Strong Watermarking for Generative Models","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.04378","snapshot_observed_at":"2026-08-15T23:16:32.874082Z","title":"L., Francati, D., Venturi, D., Ateniese, G., and Barak, B","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.05190","last_updated":"2025-05-11T14:24:22Z","snapshot_observed_at":"2026-08-16T09:49:05.729917Z","submitted_at":"2025-05-08T12:39:00Z","title":"Revealing Weaknesses in Text Watermarking Through Self-Information Rewrite Attacks","version":2},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-08-15T23:16:32.874082Z"},"links":{"cited_paper":"/paper/2311.04378","citing_paper":"/paper/2505.05190"},"observation_digest":"sha256:2025e011ca94e1a9a8b665da30edc4168ab7bb606a120f1a95cf7ea7bdf8de00","observation_id":"deace7cb-de1c-480e-8bd0-393eabe86080","resolution":{"observed_at":"2026-08-15T23:16:32.874082Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2205.01068","last_updated":"2022-06-21T17:04:40Z","snapshot_observed_at":"2026-08-06T03:13:37.403059Z","submitted_at":"2022-05-02T17:49:50Z","title":"OPT: Open Pre-trained Transformer Language Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2205.01068","snapshot_observed_at":"2026-08-15T23:16:32.878205Z","title":"V., et al","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2505.05190","last_updated":"2025-05-11T14:24:22Z","snapshot_observed_at":"2026-08-16T09:49:05.729917Z","submitted_at":"2025-05-08T12:39:00Z","title":"Revealing Weaknesses in Text Watermarking Through Self-Information Rewrite Attacks","version":2},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-08-15T23:16:32.878205Z"},"links":{"cited_paper":"/paper/2205.01068","citing_paper":"/paper/2505.05190"},"observation_digest":"sha256:2fc92e8cd9f1621c73f3987726e3612583eb5c5d8d46b6b5815ca68bf2d6df78","observation_id":"7d2f1949-8dbf-4311-8a3b-30ac61c2a2d2","resolution":{"observed_at":"2026-08-15T23:16:32.878205Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2306.17439","last_updated":"2023-10-13T04:50:04Z","snapshot_observed_at":"2026-08-16T15:19:50.368078Z","submitted_at":"2023-06-30T07:24:32Z","title":"Provable Robust Watermarking for AI-Generated Text","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.17439","snapshot_observed_at":"2026-08-15T23:16:32.882234Z","title":"Provable robust watermarking for ai-generated text","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.05190","last_updated":"2025-05-11T14:24:22Z","snapshot_observed_at":"2026-08-16T09:49:05.729917Z","submitted_at":"2025-05-08T12:39:00Z","title":"Revealing Weaknesses in Text Watermarking Through Self-Information Rewrite Attacks","version":2},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-08-15T23:16:32.882234Z"},"links":{"cited_paper":"/paper/2306.17439","citing_paper":"/paper/2505.05190"},"observation_digest":"sha256:69fbe2bd8e35a063b7b9f6072db0e6d63c62d33586be654e89824fb13cd1e165","observation_id":"ea5149c7-4d7b-4b27-ae0e-86e63972a803","resolution":{"observed_at":"2026-08-15T23:16:32.882234Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:16:32.886149Z","title":"write newline","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.05190","last_updated":"2025-05-11T14:24:22Z","snapshot_observed_at":"2026-08-16T09:49:05.729917Z","submitted_at":"2025-05-08T12:39:00Z","title":"Revealing Weaknesses in Text Watermarking Through Self-Information Rewrite Attacks","version":2},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-08-15T23:16:32.886149Z"},"links":{"citing_paper":"/paper/2505.05190"},"observation_digest":"sha256:94050bb221f85472657ed80c33762400f517afdf500f9c014b8a2a2596536105","observation_id":"419e3f3c-5478-4a88-8cad-0e2da2bab727","resolution":{"observed_at":"2026-08-15T23:16:32.886149Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2505.05190","last_updated":"2025-05-11T14:24:22Z","latest_version":2,"primary_category":"cs.LG","snapshot_observed_at":"2026-08-16T09:49:05.729917Z","submitted_at":"2025-05-08T12:39:00Z","title":"Revealing Weaknesses in Text Watermarking Through Self-Information Rewrite Attacks"},"reference_resolution":{"displayed":37,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":25,"verified_exact":0,"verified_fuzzy":12},"total_outbound_references":37},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"thesis":"As of 17 August 2026, this Paper Citation Record lists 37 of 37 outbound references and 5 inbound Pith citation observations for arXiv:2505.05190."}