{"as_of":"2026-08-16T04:11:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:5059ada2929865eabbd0bbf6bf9c4d55a2cc06f45a6c4962f9080d9f7326dcf1","coverage":[{"denominator":26,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":26,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T05:29:00.796527Z","state":"measured"},{"denominator":26,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":26,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-15T06:32:42.880941+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2506.07948/citation-record","integrity":"/paper/2506.07948/integrity","json":"/paper/2506.07948/citation-record.json","paper":"/paper/2506.07948"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:07.401050Z","title":"Tricking llms into disobedience: Formalizing, analyzing, and detecting jailbreaks, 2024","venue":null,"work_id":"f8754257-be6f-4b06-99dd-58f338ff0d2d","year":2024},"citing_paper":{"arxiv_id":"2506.07948","last_updated":"2025-06-09T17:11:28Z","snapshot_observed_at":"2026-08-15T13:31:27.696572Z","submitted_at":"2025-06-09T17:11:28Z","title":"TokenBreak: Bypassing Text Classification Models Through Token Manipulation","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-07T05:28:57.962004Z"},"links":{"citing_paper":"/paper/2506.07948"},"observation_digest":"sha256:ef700984ad782a544264fa2f8b238423c3bf4f466ffbf2524c02d273ec1f6a46","observation_id":"ca9de89a-46ce-4d2b-82f8-376c2792af88","resolution":{"observed_at":"2026-08-07T05:29:07.574498Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:06.997539Z","title":"Black-box gener- ation of adversarial text sequences to evade deep learning classifiers, 2018","venue":null,"work_id":"46137700-7287-47ca-a207-892168ab057f","year":2018},"citing_paper":{"arxiv_id":"2506.07948","last_updated":"2025-06-09T17:11:28Z","snapshot_observed_at":"2026-08-15T13:31:27.696572Z","submitted_at":"2025-06-09T17:11:28Z","title":"TokenBreak: Bypassing Text Classification Models Through Token Manipulation","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-07T05:28:58.044336Z"},"links":{"citing_paper":"/paper/2506.07948"},"observation_digest":"sha256:aadbd16ffed5f8c35232c4217fcb65a2314c1b0a34922425c72ab3d2cbb5ad7f","observation_id":"6853251d-7115-41ea-9d47-faf6c44fc293","resolution":{"observed_at":"2026-08-07T05:29:07.210868Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:06.704917Z","title":"Hotflip: White- box adversarial examples for text classification, 2018","venue":null,"work_id":"1a55b480-1487-432c-918c-c8dc6dde55cd","year":2018},"citing_paper":{"arxiv_id":"2506.07948","last_updated":"2025-06-09T17:11:28Z","snapshot_observed_at":"2026-08-15T13:31:27.696572Z","submitted_at":"2025-06-09T17:11:28Z","title":"TokenBreak: Bypassing Text Classification Models Through Token Manipulation","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T05:28:58.111007Z"},"links":{"citing_paper":"/paper/2506.07948"},"observation_digest":"sha256:79a47fbc71c3b4e23ae92575b720ddfd342e7b23c4a86e8e1af685ed58d726b1","observation_id":"9c00cd02-4ec5-4d53-871f-1bf2896c0fc8","resolution":{"observed_at":"2026-08-07T05:29:06.843115Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:06.475223Z","title":"Synthetic and natural noise both break neural machine translation, 2018","venue":null,"work_id":"b3a5e0ea-1437-474a-8118-3582c9e83559","year":2018},"citing_paper":{"arxiv_id":"2506.07948","last_updated":"2025-06-09T17:11:28Z","snapshot_observed_at":"2026-08-15T13:31:27.696572Z","submitted_at":"2025-06-09T17:11:28Z","title":"TokenBreak: Bypassing Text Classification Models Through Token Manipulation","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T05:28:58.185195Z"},"links":{"citing_paper":"/paper/2506.07948"},"observation_digest":"sha256:18b461d2c12fd24b143df1bee8b293bbeab34a9e187796fc364213200c1ef08d","observation_id":"e48134b9-ae5b-421a-ab01-dd79f35b3e6f","resolution":{"observed_at":"2026-08-07T05:29:06.587541Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:06.149917Z","title":null,"venue":null,"work_id":"43ee47b2-ad11-4dc9-835f-1b0a35bd72c2","year":2025},"citing_paper":{"arxiv_id":"2506.07948","last_updated":"2025-06-09T17:11:28Z","snapshot_observed_at":"2026-08-15T13:31:27.696572Z","submitted_at":"2025-06-09T17:11:28Z","title":"TokenBreak: Bypassing Text Classification Models Through Token Manipulation","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-07T05:28:58.244177Z"},"links":{"citing_paper":"/paper/2506.07948"},"observation_digest":"sha256:a6156cad80367912deea2c064d5b44565df4b640e4b0d532d482fc97381bd9e3","observation_id":"63f602bc-7990-4dc8-aeea-caa8049e437e","resolution":{"observed_at":"2026-08-07T05:29:06.316871Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2501.07927","last_updated":"2025-08-04T16:37:00Z","snapshot_observed_at":"2026-08-10T20:27:31.119657Z","submitted_at":"2025-01-14T08:30:49Z","title":"Gandalf the Red: Adaptive Security for LLMs","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.07927","snapshot_observed_at":"2026-08-07T05:28:58.317551Z","title":"Gandalf the red: Adaptive security for llms.arXiv preprint arXiv:2501.07927, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.07948","last_updated":"2025-06-09T17:11:28Z","snapshot_observed_at":"2026-08-15T13:31:27.696572Z","submitted_at":"2025-06-09T17:11:28Z","title":"TokenBreak: Bypassing Text Classification Models Through Token Manipulation","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T05:28:58.317551Z"},"links":{"cited_paper":"/paper/2501.07927","citing_paper":"/paper/2506.07948"},"observation_digest":"sha256:ab784434bd70cd9c661554eef7f1389d98cc199f0d1761d4384c5e4c5ff0940a","observation_id":"0043fc76-0373-4a62-bdac-05892586b01c","resolution":{"observed_at":"2026-08-07T05:28:58.317551Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:05.801995Z","title":null,"venue":null,"work_id":"2f423160-9759-4670-b5c8-24803da88493","year":null},"citing_paper":{"arxiv_id":"2506.07948","last_updated":"2025-06-09T17:11:28Z","snapshot_observed_at":"2026-08-15T13:31:27.696572Z","submitted_at":"2025-06-09T17:11:28Z","title":"TokenBreak: Bypassing Text Classification Models Through Token Manipulation","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T05:28:58.403663Z"},"links":{"citing_paper":"/paper/2506.07948"},"observation_digest":"sha256:2517151bbd245623a8f27a3ff1d813abf9901cd7b3883c984620093164f870ae","observation_id":"99697a9e-e7bf-4c19-9846-8e15a52346ef","resolution":{"observed_at":"2026-08-07T05:29:06.021010Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:05.638311Z","title":null,"venue":null,"work_id":"62be451b-8056-46fc-9bab-1eac560e0ec8","year":null},"citing_paper":{"arxiv_id":"2506.07948","last_updated":"2025-06-09T17:11:28Z","snapshot_observed_at":"2026-08-15T13:31:27.696572Z","submitted_at":"2025-06-09T17:11:28Z","title":"TokenBreak: Bypassing Text Classification Models Through Token Manipulation","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-07T05:28:58.509973Z"},"links":{"citing_paper":"/paper/2506.07948"},"observation_digest":"sha256:47aecacc7553f832539cf575f9dc41c8a0434448fb126bccd42cd9d43832646e","observation_id":"c94f5b82-b460-4960-addb-5a8fb3bb1959","resolution":{"observed_at":"2026-08-07T05:29:05.709951Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:05.444761Z","title":null,"venue":null,"work_id":"6e027e8f-cbd1-4f02-ae1d-122c80cc08be","year":null},"citing_paper":{"arxiv_id":"2506.07948","last_updated":"2025-06-09T17:11:28Z","snapshot_observed_at":"2026-08-15T13:31:27.696572Z","submitted_at":"2025-06-09T17:11:28Z","title":"TokenBreak: Bypassing Text Classification Models Through Token Manipulation","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T05:28:58.596628Z"},"links":{"citing_paper":"/paper/2506.07948"},"observation_digest":"sha256:a535c8c5888b9a6bdab921f36615528bbb79804724913089ba029dcde8c9824b","observation_id":"471dd064-9197-43eb-9ef1-4516058f0d17","resolution":{"observed_at":"2026-08-07T05:29:05.523070Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:05.200846Z","title":null,"venue":null,"work_id":"5ff33e11-37f9-45ec-b1ec-aaeb5d2cac65","year":null},"citing_paper":{"arxiv_id":"2506.07948","last_updated":"2025-06-09T17:11:28Z","snapshot_observed_at":"2026-08-15T13:31:27.696572Z","submitted_at":"2025-06-09T17:11:28Z","title":"TokenBreak: Bypassing Text Classification Models Through Token Manipulation","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T05:28:58.653203Z"},"links":{"citing_paper":"/paper/2506.07948"},"observation_digest":"sha256:34c6d4b44a886dde9f088d305a39c1d6bd3d04ca7e15285ecd5976ccee0583a0","observation_id":"c939612d-2d91-4705-ae14-50939e06d238","resolution":{"observed_at":"2026-08-07T05:29:05.351576Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:04.899928Z","title":null,"venue":null,"work_id":"c196bf8e-2bfb-4e60-92b7-def988455872","year":null},"citing_paper":{"arxiv_id":"2506.07948","last_updated":"2025-06-09T17:11:28Z","snapshot_observed_at":"2026-08-15T13:31:27.696572Z","submitted_at":"2025-06-09T17:11:28Z","title":"TokenBreak: Bypassing Text Classification Models Through Token Manipulation","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T05:28:58.765675Z"},"links":{"citing_paper":"/paper/2506.07948"},"observation_digest":"sha256:6713b50833d890e75d000caa4cccb85bd84a605fb154f013d97ea82297e3cf81","observation_id":"1ac152b5-235c-497b-86b8-d19e6cc4127d","resolution":{"observed_at":"2026-08-07T05:29:05.003823Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:04.645290Z","title":null,"venue":null,"work_id":"bc10b6a9-6eb3-44f2-bf57-3d956b0851c1","year":null},"citing_paper":{"arxiv_id":"2506.07948","last_updated":"2025-06-09T17:11:28Z","snapshot_observed_at":"2026-08-15T13:31:27.696572Z","submitted_at":"2025-06-09T17:11:28Z","title":"TokenBreak: Bypassing Text Classification Models Through Token Manipulation","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T05:28:58.835159Z"},"links":{"citing_paper":"/paper/2506.07948"},"observation_digest":"sha256:2aace8770cc571e2fbcbe894a8f42a11643fc9a1ba31b465c1b61e987f68e0ae","observation_id":"4a3618f2-3315-409a-965b-c3332a80bfd1","resolution":{"observed_at":"2026-08-07T05:29:04.746595Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:04.339515Z","title":"Shadowgenes: Leveraging recurring patterns within computational graphs for model genealogy, 2025","venue":null,"work_id":"d7bd3c16-8151-4773-911e-bc674d19386f","year":2025},"citing_paper":{"arxiv_id":"2506.07948","last_updated":"2025-06-09T17:11:28Z","snapshot_observed_at":"2026-08-15T13:31:27.696572Z","submitted_at":"2025-06-09T17:11:28Z","title":"TokenBreak: Bypassing Text Classification Models Through Token Manipulation","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T05:28:58.920651Z"},"links":{"citing_paper":"/paper/2506.07948"},"observation_digest":"sha256:c1963bb3b51f7056ee49b8984c71ba11af4190c595f50f702ed82057cc7c7737","observation_id":"fbb1866b-e4d2-4887-9d71-ee0484c2cd92","resolution":{"observed_at":"2026-08-07T05:29:04.476308Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:04.058314Z","title":null,"venue":null,"work_id":"d318c3d8-a6c0-4747-a75d-74af39e08f47","year":null},"citing_paper":{"arxiv_id":"2506.07948","last_updated":"2025-06-09T17:11:28Z","snapshot_observed_at":"2026-08-15T13:31:27.696572Z","submitted_at":"2025-06-09T17:11:28Z","title":"TokenBreak: Bypassing Text Classification Models Through Token Manipulation","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-07T05:28:59.025269Z"},"links":{"citing_paper":"/paper/2506.07948"},"observation_digest":"sha256:be3a1fed20d7d37f900f10be37cb6936c1891b4dc00ad0d9999219c6b6342943","observation_id":"8643e7ac-0da2-4317-b8db-2b0deb90a405","resolution":{"observed_at":"2026-08-07T05:29:04.204897Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:03.810204Z","title":"Neural machine trans- lation of rare words with subword units, 2016","venue":null,"work_id":"7829f245-52c3-4a9d-ab6c-7e34a4f855af","year":2016},"citing_paper":{"arxiv_id":"2506.07948","last_updated":"2025-06-09T17:11:28Z","snapshot_observed_at":"2026-08-15T13:31:27.696572Z","submitted_at":"2025-06-09T17:11:28Z","title":"TokenBreak: Bypassing Text Classification Models Through Token Manipulation","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T05:28:59.109973Z"},"links":{"citing_paper":"/paper/2506.07948"},"observation_digest":"sha256:f22f0622c00887f62e8ba166cf6e18444939e56fb53ca6c343f371628a135b4c","observation_id":"982750fb-05e1-458c-9aec-730ef4a7e3bb","resolution":{"observed_at":"2026-08-07T05:29:03.957447Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:03.589026Z","title":null,"venue":null,"work_id":"d5eff620-9ed8-4631-a512-a7d99a99b217","year":null},"citing_paper":{"arxiv_id":"2506.07948","last_updated":"2025-06-09T17:11:28Z","snapshot_observed_at":"2026-08-15T13:31:27.696572Z","submitted_at":"2025-06-09T17:11:28Z","title":"TokenBreak: Bypassing Text Classification Models Through Token Manipulation","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T05:28:59.259044Z"},"links":{"citing_paper":"/paper/2506.07948"},"observation_digest":"sha256:2edc6159ed949f9bdb1e8bb9e03eee04fc607617506668eaed8a81820fd66043","observation_id":"e23f32ed-0f65-41bd-bfa5-975c1fdd38cb","resolution":{"observed_at":"2026-08-07T05:29:03.680025Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:03.367257Z","title":null,"venue":null,"work_id":"0b44470c-3526-40cc-8e36-c1747347b3c7","year":null},"citing_paper":{"arxiv_id":"2506.07948","last_updated":"2025-06-09T17:11:28Z","snapshot_observed_at":"2026-08-15T13:31:27.696572Z","submitted_at":"2025-06-09T17:11:28Z","title":"TokenBreak: Bypassing Text Classification Models Through Token Manipulation","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-07T05:28:59.378121Z"},"links":{"citing_paper":"/paper/2506.07948"},"observation_digest":"sha256:8864a6da51724d94d4d58cc20fcf34d064a9a1893b37f64af22708c3381aa595","observation_id":"51e97546-0c6c-4082-8915-a65176290312","resolution":{"observed_at":"2026-08-07T05:29:03.483751Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:03.090791Z","title":"Subword regularization: Improving neural network translation models with multiple subword candidates, 2018","venue":null,"work_id":"e7231ff5-f989-41d5-99c8-7a4db548b41a","year":2018},"citing_paper":{"arxiv_id":"2506.07948","last_updated":"2025-06-09T17:11:28Z","snapshot_observed_at":"2026-08-15T13:31:27.696572Z","submitted_at":"2025-06-09T17:11:28Z","title":"TokenBreak: Bypassing Text Classification Models Through Token Manipulation","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T05:28:59.508122Z"},"links":{"citing_paper":"/paper/2506.07948"},"observation_digest":"sha256:bbdd9724f021056ea7561940bd7386a3ac4f146634742590f987a5df42493df7","observation_id":"6168debd-6ed7-4dbd-8964-7d69b676bce3","resolution":{"observed_at":"2026-08-07T05:29:03.204075Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:02.823755Z","title":null,"venue":null,"work_id":"4e0a85c9-24c4-4c98-b8ec-d02619526b98","year":null},"citing_paper":{"arxiv_id":"2506.07948","last_updated":"2025-06-09T17:11:28Z","snapshot_observed_at":"2026-08-15T13:31:27.696572Z","submitted_at":"2025-06-09T17:11:28Z","title":"TokenBreak: Bypassing Text Classification Models Through Token Manipulation","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-07T05:28:59.685509Z"},"links":{"citing_paper":"/paper/2506.07948"},"observation_digest":"sha256:b34d5f2860bbe4b350b602fa991fa4c6ac4078ab622c5e2b3a65accae422875f","observation_id":"73dc6528-f885-4d43-86ed-7ec73311e15a","resolution":{"observed_at":"2026-08-07T05:29:02.946025Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:02.495142Z","title":null,"venue":null,"work_id":"8238316a-f709-4cef-bf5f-c1ebcc1628d7","year":null},"citing_paper":{"arxiv_id":"2506.07948","last_updated":"2025-06-09T17:11:28Z","snapshot_observed_at":"2026-08-15T13:31:27.696572Z","submitted_at":"2025-06-09T17:11:28Z","title":"TokenBreak: Bypassing Text Classification Models Through Token Manipulation","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-07T05:28:59.832596Z"},"links":{"citing_paper":"/paper/2506.07948"},"observation_digest":"sha256:0407bb70d1760420ccaec51ea7ac7341c612b828f654d050f2f64da03b4ff7a0","observation_id":"65683321-413c-4cb5-bfca-af47fc86b048","resolution":{"observed_at":"2026-08-07T05:29:02.620820Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:28:59.963084Z","title":"Roberta: A robustly optimized bert pretraining approach, 2019","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2506.07948","last_updated":"2025-06-09T17:11:28Z","snapshot_observed_at":"2026-08-15T13:31:27.696572Z","submitted_at":"2025-06-09T17:11:28Z","title":"TokenBreak: Bypassing Text Classification Models Through Token Manipulation","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T05:28:59.963084Z"},"links":{"citing_paper":"/paper/2506.07948"},"observation_digest":"sha256:0cf7da5725ec13a77d808d71ea67afd9ec572c4224a92a0c85ba225488b66d8b","observation_id":"7f5a6dae-faa4-42b8-b7b5-1262f2131db5","resolution":{"observed_at":"2026-08-07T05:28:59.963084Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:02.212904Z","title":null,"venue":null,"work_id":"b670825d-b426-45b8-b203-4aaaa97b8d43","year":null},"citing_paper":{"arxiv_id":"2506.07948","last_updated":"2025-06-09T17:11:28Z","snapshot_observed_at":"2026-08-15T13:31:27.696572Z","submitted_at":"2025-06-09T17:11:28Z","title":"TokenBreak: Bypassing Text Classification Models Through Token Manipulation","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:00.133634Z"},"links":{"citing_paper":"/paper/2506.07948"},"observation_digest":"sha256:3237af4773d3916456cff833784689c49139bd81ad234e093bc8fda7ee7e8b9b","observation_id":"a9afcedd-342e-49c6-ba39-005d6c717d8b","resolution":{"observed_at":"2026-08-07T05:29:02.323118Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:01.881138Z","title":null,"venue":null,"work_id":"075da95d-841b-4883-98da-efead3605032","year":null},"citing_paper":{"arxiv_id":"2506.07948","last_updated":"2025-06-09T17:11:28Z","snapshot_observed_at":"2026-08-15T13:31:27.696572Z","submitted_at":"2025-06-09T17:11:28Z","title":"TokenBreak: Bypassing Text Classification Models Through Token Manipulation","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:00.305390Z"},"links":{"citing_paper":"/paper/2506.07948"},"observation_digest":"sha256:42fe3f006cc932a130b1d93a8de71959c8ef002436d7143500c175e91f81e302","observation_id":"bbde3725-0139-44b7-b4b1-fb9fe8c549dc","resolution":{"observed_at":"2026-08-07T05:29:02.022902Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:01.574364Z","title":"co/docs/transformers/en/model_doc/xlm-roberta","venue":null,"work_id":"dc6d33dd-d45a-4736-b4f7-2dfcd9be911b","year":null},"citing_paper":{"arxiv_id":"2506.07948","last_updated":"2025-06-09T17:11:28Z","snapshot_observed_at":"2026-08-15T13:31:27.696572Z","submitted_at":"2025-06-09T17:11:28Z","title":"TokenBreak: Bypassing Text Classification Models Through Token Manipulation","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:00.495295Z"},"links":{"citing_paper":"/paper/2506.07948"},"observation_digest":"sha256:1c0eca9c6291f61665572cb2cb3d1ec1f670887057921b47acfeef495fbc616c","observation_id":"ac5edff7-0488-4f11-9fd6-68a769c5cfee","resolution":{"observed_at":"2026-08-07T05:29:01.719440Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:01.314001Z","title":"Unsupervised cross-lingual representa- tion learning at scale, 2020","venue":null,"work_id":"5783e404-2f3e-4425-9546-a9deb6850c42","year":2020},"citing_paper":{"arxiv_id":"2506.07948","last_updated":"2025-06-09T17:11:28Z","snapshot_observed_at":"2026-08-15T13:31:27.696572Z","submitted_at":"2025-06-09T17:11:28Z","title":"TokenBreak: Bypassing Text Classification Models Through Token Manipulation","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:00.616470Z"},"links":{"citing_paper":"/paper/2506.07948"},"observation_digest":"sha256:5bc375235e09974eb15c5dd21837c65b05dde485756b22f424fe4f0aeea5e637","observation_id":"5dfa53ed-af8b-49c9-b906-59865bb4f8f8","resolution":{"observed_at":"2026-08-07T05:29:01.404833Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"blob/2734490","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:01.031996Z","title":null,"venue":null,"work_id":"ca614384-b62c-4e70-84a1-d1135955a6de","year":null},"citing_paper":{"arxiv_id":"2506.07948","last_updated":"2025-06-09T17:11:28Z","snapshot_observed_at":"2026-08-15T13:31:27.696572Z","submitted_at":"2025-06-09T17:11:28Z","title":"TokenBreak: Bypassing Text Classification Models Through Token Manipulation","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:00.796527Z"},"links":{"citing_paper":"/paper/2506.07948"},"observation_digest":"sha256:fbe3b42760ed3342de8705088d24b29a551cddd3b2f4d290bb06255c2265ca8c","observation_id":"ec1f1195-4ba3-45be-a9ac-4fb3d91afed6","resolution":{"observed_at":"2026-08-07T05:29:01.105077Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2506.07948","last_updated":"2025-06-09T17:11:28Z","latest_version":1,"primary_category":"cs.LG","snapshot_observed_at":"2026-08-15T13:31:27.696572Z","submitted_at":"2025-06-09T17:11:28Z","title":"TokenBreak: Bypassing Text Classification Models Through Token Manipulation"},"reference_resolution":{"displayed":26,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":16,"verified_exact":1,"verified_fuzzy":9},"total_outbound_references":26},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"thesis":"As of 16 August 2026, this Paper Citation Record lists 26 of 26 outbound references and 0 inbound Pith citation observations for arXiv:2506.07948."}