{"as_of":"2026-08-10T06:18:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:8a41df16778f91be4c335fba4180d55a5dd08ca3717ac35cec5085c4b379e212","coverage":[{"denominator":41,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":41,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T06:13:04.858860Z","state":"measured"},{"denominator":41,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":41,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2506.06003/citation-record","integrity":"/paper/2506.06003/integrity","json":"/paper/2506.06003/citation-record.json","paper":"/paper/2506.06003"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:13:05.496460Z","title":"Membership inference attacks against machine learning models","venue":null,"work_id":"674a4cb6-fb93-48c3-9f7e-f5864ae56d9e","year":2017},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.262436Z"},"links":{"citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:61aa358cfb2c108de893c1ba7708a677c3daff25d3125dac99509862e483a2f8","observation_id":"39a837a7-ad8e-4c14-a0b9-47c42c6a3db0","resolution":{"observed_at":"2026-08-07T06:13:05.500677Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:13:05.482734Z","title":"Pythia: A suite for analyzing large language models across training and scaling","venue":null,"work_id":"e5e593b4-eb15-4232-8aec-6755a5ed87e9","year":2023},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.333503Z"},"links":{"citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:ab6978d6aa1ed51c28ecfa048e4107a5b12188603da4ea1180aee573a7f46245","observation_id":"dc6318f2-8511-4b76-acf5-6dc20ef4bcbd","resolution":{"observed_at":"2026-08-07T06:13:05.487035Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:13:05.468129Z","title":"The times sues openai and microsoft over a.i","venue":null,"work_id":"31caafd7-c139-4766-a407-989fb9dfc57a","year":2023},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.419355Z"},"links":{"citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:348a0d5f5db158304d67437e6df8481610429e9f421548303c7d1d939c96dcf5","observation_id":"93531645-fc3d-448b-8721-092b604d9d53","resolution":{"observed_at":"2026-08-07T06:13:05.472996Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:13:05.454272Z","title":"Us authors’ copyright lawsuits against openai and microsoft combined in new york with newspaper actions","venue":null,"work_id":"bf8bd61d-7e73-4a43-906a-383d1918798c","year":2025},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.506727Z"},"links":{"citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:1b9cc80d9a672ac1dc2cc932313cf121b45b2031c66baee6326c4faf6f881d32","observation_id":"bc6b76eb-6d73-4c07-aec4-63399430447f","resolution":{"observed_at":"2026-08-07T06:13:05.458610Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:13:05.439365Z","title":"Publisher ziff davis sues openai for copyright infringement","venue":null,"work_id":"22485aba-b565-45aa-9dfb-c583cb2a51de","year":2025},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.593453Z"},"links":{"citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:6d4ca06beb644a323ee3d14778cfd81b71bcfc4986436a3fc90326aa8f47f714","observation_id":"1ea4abce-1244-4243-80e4-39d8df9d9404","resolution":{"observed_at":"2026-08-07T06:13:05.444141Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:13:05.411035Z","title":"Understanding the eu ai act: Requirements and next steps","venue":null,"work_id":"f5b6eeb8-44e9-4ba7-be12-1109749f0e10","year":2024},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.702132Z"},"links":{"citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:772765b9094f4c98ec0eb922ff2ba09a3a27afc223ec6e3443447c0aacc41216","observation_id":"25e2931d-7b4e-4ddf-916b-48f7ad7cc98d","resolution":{"observed_at":"2026-08-07T06:13:05.415551Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:13:05.396693Z","title":"Transparency and accountability in ai systems: safeguarding wellbeing in the age of algorithmic decision-making.Frontiers in Human Dynamics, 6:1421273, 2024","venue":null,"work_id":"a8f75caa-9c30-4e63-921f-de52da9e3eda","year":2024},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.708515Z"},"links":{"citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:ec8f11e037e0322b05608b8cf11d0031cab2fd8c56a2885b31093960e09d325b","observation_id":"aa3b5c36-ed82-4b4a-9679-91a2ad2c0a46","resolution":{"observed_at":"2026-08-07T06:13:05.401178Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:13:05.382456Z","title":"Artificial intelligence bias auditing–current approaches, challenges and lessons from practice.Review of Accounting and Finance, (ahead-of-print), 2025","venue":null,"work_id":"4f4f6fe1-9781-49dc-bedd-cdb5c842466d","year":2025},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.714651Z"},"links":{"citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:53f8039cf3ce5cd96ad3f59e9b892d9bc50197e2e5c4f382e2195f9783f556af","observation_id":"d11601b1-99a4-4464-a206-08c30c6e51b5","resolution":{"observed_at":"2026-08-07T06:13:05.387247Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:13:05.368563Z","title":"Do Membership Inference Attacks Work on Large Language Models? InProc","venue":null,"work_id":"736bb366-ae49-4449-b4cf-8279132a4965","year":2024},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.720270Z"},"links":{"citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:e68c94bcce4493a4be03c0a48de347f28b1b9d80be3c008b04a5ae16d35c47d6","observation_id":"72f3a480-2e86-4363-9476-bd60ae40f0eb","resolution":{"observed_at":"2026-08-07T06:13:05.372958Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2409.19798","last_updated":"2025-03-07T14:20:23Z","snapshot_observed_at":"2026-07-06T19:24:12.811792Z","submitted_at":"2024-09-29T21:49:32Z","title":"Membership Inference Attacks Cannot Prove that a Model Was Trained On Your Data","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.19798","snapshot_observed_at":"2026-08-07T06:13:04.724789Z","title":"Position: Membership Inference Attacks Cannot Prove that a Model Was Trained On Your Data.arXiv preprint arXiv:2409.19798, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.724789Z"},"links":{"cited_paper":"/paper/2409.19798","citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:fda78e0fbc095e52ead3b0c26d81511598c9a88ad0b19cb400edb94a13ec078e","observation_id":"46da7838-d8a7-46bc-a8c6-f476d6370050","resolution":{"observed_at":"2026-08-07T06:13:04.724789Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.16201","last_updated":"2025-03-30T08:39:32Z","snapshot_observed_at":"2026-08-10T01:25:04.579166Z","submitted_at":"2024-06-23T19:40:11Z","title":"Blind Baselines Beat Membership Inference Attacks for Foundation Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.16201","snapshot_observed_at":"2026-08-07T06:13:04.729680Z","title":"Blind Baselines Beat Membership Inference Attacks for Foundation Models.arXiv preprint arXiv:2406.16201, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.729680Z"},"links":{"cited_paper":"/paper/2406.16201","citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:558c7898eaab4f89c25884c3ecb3e149d261f8b37a6d19b65e513068cb37561e","observation_id":"8eaa5759-0314-41c5-a184-6b38f69dae84","resolution":{"observed_at":"2026-08-07T06:13:04.729680Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:13:05.353907Z","title":"What Does it Mean for a Language Model to Preserve Privacy? InProc","venue":null,"work_id":"232a90d6-1e65-4275-a480-05c096c5d7ab","year":2022},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.734703Z"},"links":{"citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:69081f0c4dc4ce2e5c50c85e742bbe3061fb09f334dc2c6c5baa9b303d01ed0b","observation_id":"a5914dc9-4666-4146-b146-7743bc0260bd","resolution":{"observed_at":"2026-08-07T06:13:05.358734Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:13:05.337952Z","title":"Language Models May Verbatim Complete Text They Were Not Explicitly Trained On","venue":null,"work_id":"9ce22006-c596-4d04-a908-2e44f2605f1e","year":2025},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.738908Z"},"links":{"citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:d86a951992f5fc4a0dffa6f3b7e1009c7776bb288556bd466b4c1827d19e5ef1","observation_id":"a4999c4f-6c4c-4440-8740-7768fcb79814","resolution":{"observed_at":"2026-08-07T06:13:05.342629Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:13:05.322311Z","title":"Poisoning Web-scale Training Datasets is Practical","venue":null,"work_id":"272b7cdd-f323-41dd-ac38-29a84c02745c","year":2024},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.743129Z"},"links":{"citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:675437037586daba8b68b80ce93a396f06307931d8008b356caec62600c521fd","observation_id":"d948d55a-f131-4b39-8721-7cd707e6d854","resolution":{"observed_at":"2026-08-07T06:13:05.327475Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:13:05.308350Z","title":"Persistent Pre-Training Poisoning of LLMs","venue":null,"work_id":"1feb3e43-f165-440b-bd45-4996a8b10d14","year":2025},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.747179Z"},"links":{"citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:2422616d72a2b0ee7cbea604f6265f453a713cabc0aeb4e9c6c7f9614a098df7","observation_id":"faa4b04c-aaad-4e54-bd54-535aee77829d","resolution":{"observed_at":"2026-08-07T06:13:05.312582Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:13:05.293064Z","title":"Privacy Risk in Machine Learning: Analyzing the Connection to Overfitting","venue":null,"work_id":"eeadcd2d-392d-4902-9b5e-9d1258a33755","year":2018},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.751309Z"},"links":{"citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:bf6e08de14b037529d8022a383c7e6abf9052a8a5a00e66d83875c423c6af631","observation_id":"d5190ea7-2b2d-4ee3-8d85-67f6eaafd35a","resolution":{"observed_at":"2026-08-07T06:13:05.298081Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:13:05.276770Z","title":"Detecting Pretraining Data from Large Language Models","venue":null,"work_id":"c50fa6a2-3775-432c-b531-50c282088566","year":2024},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.755691Z"},"links":{"citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:e7b919458247f5ded89c61185cacebc89ba31333f4b8fbaa308d93069ae96f6f","observation_id":"ef95d0a0-d654-4640-aa4a-01eaa71b6582","resolution":{"observed_at":"2026-08-07T06:13:05.281876Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:13:05.260460Z","title":"Extracting Training Data from Large Language Models","venue":null,"work_id":"96a46860-02c7-4cfa-86ef-c03ef0f557c2","year":2021},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.760249Z"},"links":{"citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:368e663fd9b1503cce21cc521c2917aa619ec73a3ab91c1501b44ce19b64c9eb","observation_id":"cc52e474-66d6-45c3-9878-98b2cae346e3","resolution":{"observed_at":"2026-08-07T06:13:05.265479Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:13:05.244938Z","title":"Membership Inference Attacks against Language Models via Neighbourhood Comparison","venue":null,"work_id":"9eb1e8b3-50a1-46aa-8393-75290de59621","year":2023},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.764405Z"},"links":{"citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:f3e8540c77e9bf75705ef1df0795aa883fad574a66d6cf1868e4498bf3bff921","observation_id":"5d6c831a-799a-440f-9ee3-9cfbbd48d061","resolution":{"observed_at":"2026-08-07T06:13:05.249998Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:13:05.229244Z","title":"LLM Dataset Inference: Did you train on my dataset? InProc","venue":null,"work_id":"a614abda-d894-4be7-a013-de94b684c254","year":2024},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.769102Z"},"links":{"citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:9ae69fa156acad24098aaff6ee8b40802515e9187cfb3bfa8abd5c14e9e8fb7f","observation_id":"36482bbf-9ee1-4ec4-822c-a119c995ca9a","resolution":{"observed_at":"2026-08-07T06:13:05.234078Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:13:05.213899Z","title":"On the Reliability of Membership Inference Attacks","venue":null,"work_id":"719dfb48-e6f3-4fc8-ac4a-965f940aeffc","year":2025},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.773278Z"},"links":{"citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:867f407f517e0687f68e1ceb285e561e44442e050f5b983c0c8035fee5cf4fa2","observation_id":"48ac5662-af71-4229-ab4d-58194b8a59dd","resolution":{"observed_at":"2026-08-07T06:13:05.218834Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:13:05.198738Z","title":"Privacy Backdoors: Enhancing Membership Inference through Poisoning Pre-trained Models","venue":null,"work_id":"dd22c6d0-d341-4432-b4d9-819cc777aec8","year":2024},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.777491Z"},"links":{"citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:f2adf753c43a4f522f335c5c239d47f7e22fe117ffd16d5b2f48cc9d610beb2b","observation_id":"35e9b175-8018-41e9-94ad-7a36579b3ebe","resolution":{"observed_at":"2026-08-07T06:13:05.203508Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:13:04.781598Z","title":"Index for rating diagnostic tests.Cancer, 3(1):32–35, 1950","venue":null,"work_id":null,"year":1950},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.781598Z"},"links":{"citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:c2968fe411b5c4268a951a4b376d7feeab0617fe59824df2ea10931652e27fbb","observation_id":"90d9cd11-6011-4654-8ccc-271e94702a7f","resolution":{"observed_at":"2026-08-07T06:13:04.781598Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:13:05.173372Z","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","venue":null,"work_id":"d94f407e-2d11-47ad-9e83-5821c8a857c6","year":2018},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.786198Z"},"links":{"citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:fa21b5c19904cb6eba43ad0d9f42d449e95cb06a6a1bbf75d95d71e8996a7631","observation_id":"1392c37e-d812-4923-a4ac-7a0b587ac919","resolution":{"observed_at":"2026-08-07T06:13:05.178048Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:13:05.158372Z","title":"Intriguing Properties of Neural Networks","venue":null,"work_id":"791a6e39-ff0e-4a29-95b1-e89366bb7b73","year":2014},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.790934Z"},"links":{"citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:e81ee87ed153457cf3e7db70a2bebbcce4755515679945bd0605f0a9e4c57a21","observation_id":"466717c2-70e4-4f78-859a-844f3fc24071","resolution":{"observed_at":"2026-08-07T06:13:05.163291Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-07-06T15:59:23.019044Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-08-07T06:13:04.795304Z","title":"Universal and transferable adversarial attacks on aligned language models.arXiv preprint arXiv:2307.15043, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.795304Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:29dbedb51a4f5e842ce351097f7a309d62cb63c4b92ba1cc97a7355dd957c9b8","observation_id":"abb0e583-3526-436f-998f-3911a460b749","resolution":{"observed_at":"2026-08-07T06:13:04.795304Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:13:05.143067Z","title":"Enhanced Membership Inference Attacks against Machine Learning Models","venue":null,"work_id":"e97be8ab-df62-4ae2-b0ce-57f51f7d1794","year":2022},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.799623Z"},"links":{"citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:d2b1f919c74ebc0ebf20806a6dc98022f8ecb29a0bd204b02bcdd779efc18c90","observation_id":"ce2b49c1-81c7-4849-8085-586aff6d70e2","resolution":{"observed_at":"2026-08-07T06:13:05.148300Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:13:05.128524Z","title":"Noisy Neighbors: Efficient membership inference attacks against LLMs","venue":null,"work_id":"84f262a7-43e7-4075-8ebf-065a75941202","year":2024},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.803943Z"},"links":{"citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:e6576e85189aa4cfdf88cee34349ca4d7a256749070bb54353dacf5d87d5a0b5","observation_id":"e6b1d89a-0305-464d-b4d7-83985592e72b","resolution":{"observed_at":"2026-08-07T06:13:05.133133Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.05672","last_updated":"2024-02-08T13:47:50Z","snapshot_observed_at":"2026-07-30T09:46:51.062184Z","submitted_at":"2024-02-08T13:47:50Z","title":"Multilingual E5 Text Embeddings: A Technical Report","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.05672","snapshot_observed_at":"2026-08-07T06:13:04.808603Z","title":"Multilingual E5 Text Embeddings: A Technical Report.arXiv preprint arXiv:2402.05672, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.808603Z"},"links":{"cited_paper":"/paper/2402.05672","citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:c47599dcd9df8908f67631defae9a009c75f71a47553bc582e77657275600255","observation_id":"5e9afcd8-c247-464a-b3f7-01e5b9539674","resolution":{"observed_at":"2026-08-07T06:13:04.808603Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:13:05.112060Z","title":"MTEB: Massive Text Embedding Benchmark","venue":null,"work_id":"d7e207b7-c3a2-4e12-8938-ec575dab37fc","year":2023},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.813250Z"},"links":{"citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:1e5acd8c10145025c8481ffc70a7af7e263bd73a248cb3216a2db5269e43952b","observation_id":"0c65ee1c-5106-4c11-8bff-be08e47dcf35","resolution":{"observed_at":"2026-08-07T06:13:05.116746Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:13:05.097317Z","title":"PoisonedParrot: Subtle Data Poisoning Attacks to Elicit Copyright-Infringing Content from Large Language Models","venue":null,"work_id":"f86d0940-8b3e-411c-8187-44c00c3db507","year":2025},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.817881Z"},"links":{"citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:ae55030152fb88a590089e0a094e6c4af712ea4a1645cba002d388b230eff132","observation_id":"07208a3a-5d6d-4a19-aef6-0f58954c63aa","resolution":{"observed_at":"2026-08-07T06:13:05.102039Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:13:05.082261Z","title":"Adversarial Example Defense: Ensembles of Weak Defenses are not Strong","venue":null,"work_id":"b3c54ddc-ca24-43f0-9faf-715870518855","year":2017},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.822079Z"},"links":{"citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:c37a50a9d8a85611a457314e0d5e103f1eed7bdefd7ca35ad3d55854e4f12bdb","observation_id":"b20183ea-cf22-4012-8c0d-d615a4fafa50","resolution":{"observed_at":"2026-08-07T06:13:05.086964Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:13:05.068598Z","title":"Persistent pre-training poisoning of LLMs","venue":null,"work_id":"42d00fd6-8428-435e-b8a4-c3d0d9dd602c","year":2025},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.826134Z"},"links":{"citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:b2a0f78a7862df17dce9d521c539b748f892174a91ce2e8379acfa9dafe6c822","observation_id":"8b7aa45a-f9ab-46d3-83be-339080ae0f58","resolution":{"observed_at":"2026-08-07T06:13:05.072936Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:13:05.054342Z","title":"semantics","venue":null,"work_id":"145c6a68-964c-4469-822d-85d943162b29","year":null},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.830460Z"},"links":{"citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:3c74a1ed544986f95e85c6ec99c83ae1194db348446d0d45c6519a19623e283b","observation_id":"7d247dab-1097-4b0d-ba63-bded9b9ff916","resolution":{"observed_at":"2026-08-07T06:13:05.058790Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:13:05.038287Z","title":"Here we can setλ= 0since replacing tokens automatically breaks upn-grams for free","venue":null,"work_id":"7f3f793a-59de-4b48-9011-2d7c4b676e26","year":null},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.835185Z"},"links":{"citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:8f7a666da05450f3ac5881d815cac5032b0d2af55369c822e34264d21c86aae4","observation_id":"de96853b-cf98-4733-b002-573de533de4a","resolution":{"observed_at":"2026-08-07T06:13:05.043295Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:13:05.022191Z","title":null,"venue":null,"work_id":"fb02c515-f443-45f7-aae1-6b2138082a21","year":null},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.839619Z"},"links":{"citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:b6fbe7fec9194a572386a5797698e56cf9f55c7b8cf8477c9710c93c0259d26f","observation_id":"74084937-64f7-46d2-b8f1-e6ae0ddf5af5","resolution":{"observed_at":"2026-08-07T06:13:05.026702Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:13:05.006574Z","title":"4.ExactMatch:Same procedure as that forn-grams, but only a single iteration","venue":null,"work_id":"72e5cd4e-9dab-46a8-b985-67300befb260","year":null},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.843991Z"},"links":{"citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:6248b6473a4f0afa17feff34e299afb90f20fb40f4db5e594372aac489083ac4","observation_id":"c92cec4d-c53d-4fbe-96de-d9f81372ff93","resolution":{"observed_at":"2026-08-07T06:13:05.011531Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:13:04.991434Z","title":"(c) repeat until cosine similarity exceedsc","venue":null,"work_id":"5bc2471c-80a7-4868-93ea-a3fa4eab0a40","year":null},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.849083Z"},"links":{"citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:f0b520e5c165fbc525b5cddd54af756c5e79de40b578f6c6a4c9c4fbdb907886","observation_id":"9e72fe54-29e1-48b4-9de2-156f13741521","resolution":{"observed_at":"2026-08-07T06:13:04.995964Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:13:04.975534Z","title":"(c) repeat until edit distance drops belowl","venue":null,"work_id":"a09f19b5-dc38-4056-957f-322256e21648","year":null},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.853560Z"},"links":{"citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:b6a1234ba9eb59603e0b0f7dd62d0423152fccec51274c8c73ac90deccce3662","observation_id":"96726526-0de8-4d06-9f93-81972c3b204d","resolution":{"observed_at":"2026-08-07T06:13:04.980815Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:13:04.958846Z","title":null,"venue":null,"work_id":"0bc070bc-6e47-41dc-ad60-0d42d5912dfc","year":null},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.858860Z"},"links":{"citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:3b7cffaabb8bff358d2945acc2586c4f79387f3fa0e8870d815561b947a8b73a","observation_id":"4e0619ce-479d-45b7-a1de-e1248df71bee","resolution":{"observed_at":"2026-08-07T06:13:04.964182Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:13:05.425262Z","title":null,"venue":null,"work_id":"9fd64d3f-7d30-4d9f-9eaf-e9e6497c5380","year":2025},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":2025,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.680848Z"},"links":{"citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:a5359673924c8f08669470b163efa07df6e58bec777741da620e3cacf20c7a81","observation_id":"9609ca06-91bc-4c2f-bd06-694a38662fa8","resolution":{"observed_at":"2026-08-07T06:13:05.429487Z","resolver_source":"raw_fallback","status":"parse_uncertain"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","latest_version":1,"primary_category":"cs.LG","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning"},"reference_resolution":{"displayed":41,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":1,"unresolved":7,"verified_exact":0,"verified_fuzzy":33},"total_outbound_references":41},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 10 August 2026, this Paper Citation Record lists 41 of 41 outbound references and 0 inbound Pith citation observations for arXiv:2506.06003."}