{"as_of":"2026-08-11T07:49:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:b6bd984bcdcc60daac28b22041fb7247d1d7fb164552c20730590b83cd830f9a","coverage":[{"denominator":160,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":100,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T00:46:10.329817Z","state":"measured"},{"denominator":100,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":100,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-11T06:34:44.6726+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2506.12699/citation-record","integrity":"/paper/2506.12699/integrity","json":"/paper/2506.12699/citation-record.json","paper":"/paper/2506.12699"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:09.878266Z","title":null,"venue":null,"work_id":null,"year":1996},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:09.878266Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:ca294bae0bf2a93045047ae36cb2902ff0701fd0141120799578b2b894fc1154","observation_id":"8735cfe7-64ae-4124-9e6b-b31ef5905b16","resolution":{"observed_at":"2026-08-07T00:46:09.878266Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:09.882756Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:09.882756Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:b32f4c89236b75cf74d0d11b328e812a96d6361dee20b0066e9a422d64464951","observation_id":"97f1ad6f-06ed-4038-9373-dda6f8f590f8","resolution":{"observed_at":"2026-08-07T00:46:09.882756Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:09.886708Z","title":"Kanwal, Tegan Maharaj, Asja Fischer, Aaron Courville, Yoshua Bengio, and Simon Lacoste-Julien","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:09.886708Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:b100ec33055efa880522bde8bf4d3cb74c3bf26c5222293b3b2e0aa205f6077c","observation_id":"ed641fd8-f759-4785-a020-0165e15301a5","resolution":{"observed_at":"2026-08-07T00:46:09.886708Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2501.12465","last_updated":"2025-01-21T19:22:45Z","snapshot_observed_at":"2026-08-10T17:07:46.479686Z","submitted_at":"2025-01-21T19:22:45Z","title":"Adaptive PII Mitigation Framework for Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.12465","snapshot_observed_at":"2026-08-07T00:46:09.890879Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:09.890879Z"},"links":{"cited_paper":"/paper/2501.12465","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:f60277a525d5b831b4d1946289f412b322729833dd99bcf15eca1d48282a100c","observation_id":"e4a8f076-ba4e-45d7-90ee-90f9bfe1958c","resolution":{"observed_at":"2026-08-07T00:46:09.890879Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.05175","last_updated":"2024-09-18T20:53:06Z","snapshot_observed_at":"2026-07-06T18:11:38.755996Z","submitted_at":"2024-05-08T16:12:45Z","title":"AirGapAgent: Protecting Privacy-Conscious Conversational Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.05175","snapshot_observed_at":"2026-08-07T00:46:09.895706Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:09.895706Z"},"links":{"cited_paper":"/paper/2405.05175","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:406c3da91b0261310dae3dda72aa88a40e7ceee458ccce6955b9e94b7a7f0945","observation_id":"c9466f19-0998-4245-a98e-9eeb123531dc","resolution":{"observed_at":"2026-08-07T00:46:09.895706Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2212.08073","last_updated":"2022-12-15T06:19:23Z","snapshot_observed_at":"2026-08-02T04:53:58.766070Z","submitted_at":"2022-12-15T06:19:23Z","title":"Constitutional AI: Harmlessness from AI Feedback","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2212.08073","snapshot_observed_at":"2026-08-07T00:46:09.905469Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:09.905469Z"},"links":{"cited_paper":"/paper/2212.08073","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:d20d4a2d9f3a0a14c77cbebdc8040230afa05d8258bfcbd41d38047006727b3e","observation_id":"92c31aaa-8a7b-4a60-8743-dc4622023fc0","resolution":{"observed_at":"2026-08-07T00:46:09.905469Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:09.909846Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:09.909846Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:7f13a3034b567157150cdc58d785d33258ee1a0d539755ceedb17161e9210017","observation_id":"4d9d7fde-3f5e-4d6e-af11-672f1ddcd2e2","resolution":{"observed_at":"2026-08-07T00:46:09.909846Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:09.913974Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:09.913974Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:7739b42c9763196cca5327aa0ce3c862af92fb9693bac9c4874aa7922c438646","observation_id":"9c0db24c-0e49-493e-96c5-222354fbac67","resolution":{"observed_at":"2026-08-07T00:46:09.913974Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:09.917695Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:09.917695Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:5ce2ced082decb696713272be923194e2be2bf1bcd67c8a093fcf4c2e80eaa68","observation_id":"e33709b9-3a99-46c5-b428-0d7c73201360","resolution":{"observed_at":"2026-08-07T00:46:09.917695Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:09.921414Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:09.921414Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:c719e988693a8d0503db4f727f117b354be414b8d3e68872e3c436944cacd365","observation_id":"dc29043d-991c-447e-8cab-fc9bceb72dd4","resolution":{"observed_at":"2026-08-07T00:46:09.921414Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:09.925261Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:09.925261Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:6eac66b3a23df413a77bb20f8b559271a42f51b6f791c240d88d30b81cb8d0f6","observation_id":"8ce678b5-8a24-433c-a68e-b2136c3e8165","resolution":{"observed_at":"2026-08-07T00:46:09.925261Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:09.929260Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:09.929260Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:107ec6ff4e30dcb6e97c4f7ad02ac6d1d038cd5ed7404ebeef6cdb3f2099ab8e","observation_id":"64ba7733-0f44-4562-b418-08b9b2f7040a","resolution":{"observed_at":"2026-08-07T00:46:09.929260Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:09.932970Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:09.932970Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:c58f8abc2fa738c2f357b8cd70f08b674a2f071fe6faaf4a5ca466159343c14c","observation_id":"b314572b-9dee-47e7-9e89-1dee93bb8c79","resolution":{"observed_at":"2026-08-07T00:46:09.932970Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.09060","last_updated":"2024-04-02T06:32:40Z","snapshot_observed_at":"2026-08-10T22:47:46.273547Z","submitted_at":"2023-11-15T15:52:40Z","title":"Do Localization Methods Actually Localize Memorized Data in LLMs? A Tale of Two Benchmarks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.09060","snapshot_observed_at":"2026-08-07T00:46:09.936979Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:09.936979Z"},"links":{"cited_paper":"/paper/2311.09060","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:169411897b17ea7fdfd285a3a4d0a845aab3104c61116c063a8c9e13cc7bf64a","observation_id":"91abb483-006a-4da0-a612-a0d24d1a58da","resolution":{"observed_at":"2026-08-07T00:46:09.936979Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2206.00216","last_updated":"2022-06-02T01:06:12Z","snapshot_observed_at":"2026-08-10T23:02:40.288663Z","submitted_at":"2022-06-01T03:49:18Z","title":"THE-X: Privacy-Preserving Transformer Inference with Homomorphic Encryption","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2206.00216","snapshot_observed_at":"2026-08-07T00:46:09.940867Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:09.940867Z"},"links":{"cited_paper":"/paper/2206.00216","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:66e42283bec80c3d04a8dccc14039e719d815f1f2d433c44e7861253248c1fea","observation_id":"e7082d62-dd90-47f3-8eff-fc85e91221a6","resolution":{"observed_at":"2026-08-07T00:46:09.940867Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.03057","last_updated":"2023-09-06T14:54:11Z","snapshot_observed_at":"2026-08-10T09:55:21.949967Z","submitted_at":"2023-09-06T14:54:11Z","title":"Hide and Seek (HaS): A Lightweight Framework for Prompt Privacy Protection","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.03057","snapshot_observed_at":"2026-08-07T00:46:09.944887Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:09.944887Z"},"links":{"cited_paper":"/paper/2309.03057","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:bfb7daaacdf7a89da09a464297be8cec47c046e2c9c659eaec8087b849467d16","observation_id":"645ef227-c9e9-4a15-ab9f-76f8cd4e53ff","resolution":{"observed_at":"2026-08-07T00:46:09.944887Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.05998","last_updated":"2024-01-11T15:57:38Z","snapshot_observed_at":"2026-07-06T17:14:19.624035Z","submitted_at":"2024-01-11T15:57:38Z","title":"Combating Adversarial Attacks with Multi-Agent Debate","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.05998","snapshot_observed_at":"2026-08-07T00:46:09.949867Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:09.949867Z"},"links":{"cited_paper":"/paper/2401.05998","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:e07100db1267c924079f49b8d55388b366120cdbc369325ad1c3bcea178d6ab7","observation_id":"b3362316-18bd-46ef-8ac5-9d47d725bebf","resolution":{"observed_at":"2026-08-07T00:46:09.949867Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.02987","last_updated":"2024-10-07T12:11:58Z","snapshot_observed_at":"2026-07-06T17:25:26.813696Z","submitted_at":"2024-02-05T13:18:42Z","title":"Reconstruct Your Previous Conversations! Comprehensively Investigating Privacy Leakage Risks in Conversations with GPT Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.02987","snapshot_observed_at":"2026-08-07T00:46:09.954005Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:09.954005Z"},"links":{"cited_paper":"/paper/2402.02987","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:e522a7c011aee13a0ede80bf6e02b388518ddb2064ec91077d03c54408f3b193","observation_id":"16591195-72d2-4e77-ac91-d8511aac42d6","resolution":{"observed_at":"2026-08-07T00:46:09.954005Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.00888","last_updated":"2024-11-14T22:20:49Z","snapshot_observed_at":"2026-07-06T17:23:55.166594Z","submitted_at":"2024-01-30T04:00:54Z","title":"Security and Privacy Challenges of Large Language Models: A Survey","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.00888","snapshot_observed_at":"2026-08-07T00:46:09.958080Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:09.958080Z"},"links":{"cited_paper":"/paper/2402.00888","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:eb528d9cca93d6ff87efd380bf9d8f39b4129dfa4c3c41dab92f274448bd2b66","observation_id":"8deb338c-8eb3-4bc8-a220-41ca7b86d17c","resolution":{"observed_at":"2026-08-07T00:46:09.958080Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:09.962197Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:09.962197Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:097c2feb307efca67e3b32c7a06303768c6a111ea1f951b917473523e07f02a5","observation_id":"790ebb6d-4fad-4240-b81a-283de43f707d","resolution":{"observed_at":"2026-08-07T00:46:09.962197Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2103.06819","last_updated":"2021-09-21T17:58:26Z","snapshot_observed_at":"2026-08-06T13:02:33.256135Z","submitted_at":"2021-03-11T17:41:32Z","title":"TAG: Gradient Attack on Transformer-based Language Models","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2103.06819","snapshot_observed_at":"2026-08-07T00:46:09.966617Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:09.966617Z"},"links":{"cited_paper":"/paper/2103.06819","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:7c4318b230c0b55df40a2c52ca33a364ec4783e20d74d23cd20bfbb7625cdd12","observation_id":"1975bde0-5dad-4dab-af52-f76b304b7856","resolution":{"observed_at":"2026-08-07T00:46:09.966617Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:09.971434Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:09.971434Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:f980b43cf6f2db060e52e8fffba238c22c14b466ceacdfe19e249420250c5dd0","observation_id":"8f514412-3aa2-4322-96af-dfdb8a54eddc","resolution":{"observed_at":"2026-08-07T00:46:09.971434Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1810.04805","last_updated":"2019-05-24T20:37:26Z","snapshot_observed_at":"2026-07-30T09:12:38.100527Z","submitted_at":"2018-10-11T00:50:01Z","title":"BERT: Pre-training of Deep Bidirectional Transformers for Language Understanding","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1810.04805","snapshot_observed_at":"2026-08-07T00:46:09.976324Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:09.976324Z"},"links":{"cited_paper":"/paper/1810.04805","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:98d403d74efc223acc16370503bb6f4a4ee52cd59e6cb0686209c7c5514475ce","observation_id":"1d0d08d2-307c-4374-a5f5-b789cf0a5ff4","resolution":{"observed_at":"2026-08-07T00:46:09.976324Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.08268","last_updated":"2024-04-07T03:04:10Z","snapshot_observed_at":"2026-07-06T16:47:24.765597Z","submitted_at":"2023-11-14T16:02:16Z","title":"A Wolf in Sheep's Clothing: Generalized Nested Jailbreak Prompts can Fool Large Language Models Easily","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.08268","snapshot_observed_at":"2026-08-07T00:46:09.980899Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:09.980899Z"},"links":{"cited_paper":"/paper/2311.08268","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:b5c702c9c2c4f235c6f322d0a827db903d11449a6e16f60029dbba7a25d9928f","observation_id":"bf17fd12-7aa9-4309-8cac-193f9a35e3e4","resolution":{"observed_at":"2026-08-07T00:46:09.980899Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:09.985886Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:09.985886Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:3ee4b095ded096e202d8de3dc0c3722ea76a21b72e4f2bb18448bd375cb0025e","observation_id":"5ccdb7a1-7a29-4bf2-a175-801fbf02547b","resolution":{"observed_at":"2026-08-07T00:46:09.985886Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.15319","last_updated":"2024-10-22T10:31:59Z","snapshot_observed_at":"2026-08-09T15:00:56.565785Z","submitted_at":"2024-05-24T08:00:00Z","title":"Stacking Your Transformers: A Closer Look at Model Growth for Efficient LLM Pre-Training","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.15319","snapshot_observed_at":"2026-08-07T00:46:09.994790Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:09.994790Z"},"links":{"cited_paper":"/paper/2405.15319","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:b6927b16e690a77ab767f0db58b42d6523016384bb5e1344bed0c51df8b0dcc3","observation_id":"277b88b9-20c0-49e4-b1eb-45e278e1b544","resolution":{"observed_at":"2026-08-07T00:46:09.994790Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:09.999539Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:09.999539Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:6ea2a1fa159490f54940aa8467ba983e558065e78c6f256c3d25c6cf868259da","observation_id":"a091b3c2-3e1f-4f11-ac4c-c4791576f909","resolution":{"observed_at":"2026-08-07T00:46:09.999539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07841","last_updated":"2024-09-16T13:18:23Z","snapshot_observed_at":"2026-08-07T03:58:21.441544Z","submitted_at":"2024-02-12T17:52:05Z","title":"Do Membership Inference Attacks Work on Large Language Models?","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.07841","snapshot_observed_at":"2026-08-07T00:46:10.006386Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.006386Z"},"links":{"cited_paper":"/paper/2402.07841","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:fbcf35dd76943ff9694f803d715e1833656314b2ac550fc4446451eb74398af1","observation_id":"94f448c2-11f7-440a-85be-8cfe9e22b7a6","resolution":{"observed_at":"2026-08-07T00:46:10.006386Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:10.012840Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.012840Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:a47e06d41d4cae8529d72115b2c870c3174250a0f68fed9d74e691db35187320","observation_id":"e7ff6528-8423-466e-a994-bdaa52ece841","resolution":{"observed_at":"2026-08-07T00:46:10.012840Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.06001","last_updated":"2024-04-11T00:17:18Z","snapshot_observed_at":"2026-08-01T21:01:39.324631Z","submitted_at":"2024-04-09T04:11:25Z","title":"Privacy Preserving Prompt Engineering: A Survey","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.06001","snapshot_observed_at":"2026-08-07T00:46:10.018951Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.018951Z"},"links":{"cited_paper":"/paper/2404.06001","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:d6cbb3f5a4664371dc4765dbb5b82c86e49084b0f24887a204c802e24be2b7d4","observation_id":"a247994c-b37f-4495-a224-64a4ea107083","resolution":{"observed_at":"2026-08-07T00:46:10.018951Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"status/1692602","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:11.974960Z","title":"Ekenstam","venue":null,"work_id":"9e76ab7c-94ab-47a4-a5c4-4a05000fda5b","year":2023},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.024871Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:9fb94e4ce0539823bc4adb748be0908cb03adf679c93aa77b32a00afb800d07e","observation_id":"2325caee-13cb-4a38-99b1-9f58f1dadf48","resolution":{"observed_at":"2026-08-07T00:46:11.985987Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.02238","last_updated":"2023-10-04T05:20:19Z","snapshot_observed_at":"2026-08-10T22:15:10.032494Z","submitted_at":"2023-10-03T17:48:14Z","title":"Who's Harry Potter? Approximate Unlearning in LLMs","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.02238","snapshot_observed_at":"2026-08-07T00:46:10.029882Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.029882Z"},"links":{"cited_paper":"/paper/2310.02238","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:662ec7d28237f171a99b042fb3759ed878cf8948bb28471f0019ff2fc0ecfa3a","observation_id":"a625eacf-d782-4124-95f3-457d74ccc836","resolution":{"observed_at":"2026-08-07T00:46:10.029882Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10049","last_updated":"2023-10-16T04:17:13Z","snapshot_observed_at":"2026-08-08T09:36:17.477554Z","submitted_at":"2023-10-16T04:17:13Z","title":"FATE-LLM: A Industrial Grade Federated Learning Framework for Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.10049","snapshot_observed_at":"2026-08-07T00:46:10.034673Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.034673Z"},"links":{"cited_paper":"/paper/2310.10049","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:04c1de20a420a8c6ef00799d3124e8fdad6babb17f9e21133983568d3a3413b4","observation_id":"d1c70ac8-1979-448a-8e2a-216eac2e053b","resolution":{"observed_at":"2026-08-07T00:46:10.034673Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.08144","last_updated":"2024-04-17T04:34:39Z","snapshot_observed_at":"2026-08-08T10:18:09.304124Z","submitted_at":"2024-04-11T22:07:19Z","title":"LLM Agents can Autonomously Exploit One-day Vulnerabilities","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.08144","snapshot_observed_at":"2026-08-07T00:46:10.038821Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.038821Z"},"links":{"cited_paper":"/paper/2404.08144","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:a8b36adc1ed200573b1d80e9a81b01f1c2fbb4b92db0169cb3970f245d811fda","observation_id":"cc24ff99-3765-4f12-9322-603b44b23e2f","resolution":{"observed_at":"2026-08-07T00:46:10.038821Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:10.043264Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.043264Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:a42095a84cd8f998bdf94bb69df4aa27eccbb8275fcdfba9a3f5fbc8f6d7dac9","observation_id":"2fac7435-6924-4d78-954e-cae7a218f97e","resolution":{"observed_at":"2026-08-07T00:46:10.043264Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:10.047102Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.047102Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:fe89142d7c4b3286550ae29b0933e385f092395658332211ed56c9b24ec7c7aa","observation_id":"2e01204b-f9ef-4045-94cc-20834627c045","resolution":{"observed_at":"2026-08-07T00:46:10.047102Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:10.056737Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.056737Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:8acfad0d6eb13d0cc207d74008bb3cb85ca85e6e0e695b7d686615023183e4d8","observation_id":"f329733a-b640-47c5-8354-6fe710c66177","resolution":{"observed_at":"2026-08-07T00:46:10.056737Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.08567","last_updated":"2024-06-03T14:15:03Z","snapshot_observed_at":"2026-08-10T22:04:21.142882Z","submitted_at":"2024-02-13T16:06:17Z","title":"Agent Smith: A Single Image Can Jailbreak One Million Multimodal LLM Agents Exponentially Fast","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.08567","snapshot_observed_at":"2026-08-07T00:46:10.061177Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.061177Z"},"links":{"cited_paper":"/paper/2402.08567","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:0cb0c2ced88f5d1bd6573f6748f794df53fd5ca7970247b746ae9d0505b8a429","observation_id":"a689e14e-1ca4-4d1d-aac2-5a708c41120a","resolution":{"observed_at":"2026-08-07T00:46:10.061177Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2004.10964","last_updated":"2020-05-05T22:00:44Z","snapshot_observed_at":"2026-08-02T02:53:18.136026Z","submitted_at":"2020-04-23T04:21:19Z","title":"Don't Stop Pretraining: Adapt Language Models to Domains and Tasks","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2004.10964","snapshot_observed_at":"2026-08-07T00:46:10.065736Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.065736Z"},"links":{"cited_paper":"/paper/2004.10964","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:e4859bede5cf72d1c2a5ce518062a82ad87cfff8158853cb11d6cda092c97455","observation_id":"5b415b0a-5d0f-4d46-8bc5-110356366d79","resolution":{"observed_at":"2026-08-07T00:46:10.065736Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:10.070506Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.070506Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:1e95d8159b72b66f9eea06a536b4f1fa1f5adc2e61afcf2a784548be385eb571","observation_id":"f5e745d2-5c9a-4234-8dbc-cebb5b63870a","resolution":{"observed_at":"2026-08-07T00:46:10.070506Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:10.074672Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.074672Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:8ccbb6ae914f44ea862ecf852a091c15644cae46400ac105e6733017e03fbab8","observation_id":"344cfbea-8d86-4ea1-8ec7-82c8d0c3605e","resolution":{"observed_at":"2026-08-07T00:46:10.074672Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.01041","last_updated":"2024-04-02T06:49:33Z","snapshot_observed_at":"2026-07-06T17:53:55.825572Z","submitted_at":"2024-04-01T10:54:49Z","title":"Can LLMs get help from other LLMs without revealing private information?","version":2},"cited_work":{"arxiv_id":"2404.01041","doi":null,"metadata_source":"pith","pith_arxiv_id":"2404.01041","snapshot_observed_at":"2026-08-07T00:46:11.705057Z","title":"Can LLMs get help from other LLMs without revealing private information?","venue":"cs.LG","work_id":"c53d7ddd-4cb8-405f-9aa9-f240a873fc9e","year":2024},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.078568Z"},"links":{"cited_paper":"/paper/2404.01041","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:39a317f072ab5ccc01031e4858b58d09f4ba1c45dc64d162d21a7c6fa1b163e8","observation_id":"2672f80e-e0f6-4fb6-875e-1c7caee3d9c7","resolution":{"observed_at":"2026-08-07T00:46:11.709859Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.01586","last_updated":"2024-10-03T22:12:05Z","snapshot_observed_at":"2026-08-10T19:59:53.547509Z","submitted_at":"2024-02-02T17:26:23Z","title":"TrustAgent: Towards Safe and Trustworthy LLM-based Agents","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.01586","snapshot_observed_at":"2026-08-07T00:46:10.083811Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.083811Z"},"links":{"cited_paper":"/paper/2402.01586","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:7485c163135eb56f7a58a13968f68f62c665a0d525cdf7b627a460b1d557cbd9","observation_id":"23eb3263-f1bc-4116-a9a2-6e8295eba6dd","resolution":{"observed_at":"2026-08-07T00:46:10.083811Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2210.17546","last_updated":"2023-09-11T16:58:48Z","snapshot_observed_at":"2026-08-04T04:34:05.607113Z","submitted_at":"2022-10-31T17:57:55Z","title":"Preventing Verbatim Memorization in Language Models Gives a False Sense of Privacy","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2210.17546","snapshot_observed_at":"2026-08-07T00:46:10.088056Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.088056Z"},"links":{"cited_paper":"/paper/2210.17546","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:33ccb3d4ef70f3c106744920f3af23ba81000c854bc60e893ae31f0c7ddd05e9","observation_id":"71830973-cea3-44c7-8ed1-89f95e9cf01e","resolution":{"observed_at":"2026-08-07T00:46:10.088056Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2104.08305","last_updated":"2021-04-16T18:29:58Z","snapshot_observed_at":"2026-08-09T21:23:58.103952Z","submitted_at":"2021-04-16T18:29:58Z","title":"Membership Inference Attack Susceptibility of Clinical Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2104.08305","snapshot_observed_at":"2026-08-07T00:46:10.092761Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.092761Z"},"links":{"cited_paper":"/paper/2104.08305","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:12a906c1e970d5c3921e5e7a507d8fab04330d4e0d95da3434a1b6059c3ce51c","observation_id":"3471d20b-b584-48ff-99ca-ce2e80c38b12","resolution":{"observed_at":"2026-08-07T00:46:10.092761Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2207.00099","last_updated":"2023-05-09T14:08:17Z","snapshot_observed_at":"2026-07-06T13:26:38.135401Z","submitted_at":"2022-06-30T20:48:26Z","title":"Measuring Forgetting of Memorized Training Examples","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2207.00099","snapshot_observed_at":"2026-08-07T00:46:10.097075Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.097075Z"},"links":{"cited_paper":"/paper/2207.00099","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:6c5cb6af34130bad9d899467a385bc7dac61b7f88a7adf177e8f600c0a17006a","observation_id":"ce438300-d9a4-4d31-b98a-0eb2f309df2c","resolution":{"observed_at":"2026-08-07T00:46:10.097075Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:10.101255Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.101255Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:d25de8c76cc872b73056eca41cdc54fbfe4c004114be2941e25c19fde7b9ab9d","observation_id":"c052bfc3-9b9d-4008-b4da-9f4b4c9012c3","resolution":{"observed_at":"2026-08-07T00:46:10.101255Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.18841","last_updated":"2025-06-15T16:22:13Z","snapshot_observed_at":"2026-07-06T18:37:43.309281Z","submitted_at":"2024-05-14T15:03:05Z","title":"Navigating LLM Ethics: Advancements, Challenges, and Future Directions","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.18841","snapshot_observed_at":"2026-08-07T00:46:10.104827Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.104827Z"},"links":{"cited_paper":"/paper/2406.18841","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:22ea9f2964fd3c7cad30580fb8322d8b95c745e7de817080b0f3191780383181","observation_id":"7b073924-3383-4525-b086-bc29fb75dc37","resolution":{"observed_at":"2026-08-07T00:46:10.104827Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.09266","last_updated":"2024-02-23T20:25:17Z","snapshot_observed_at":"2026-08-04T19:58:53.523613Z","submitted_at":"2023-10-13T17:24:52Z","title":"User Inference Attacks on Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.09266","snapshot_observed_at":"2026-08-07T00:46:10.108829Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.108829Z"},"links":{"cited_paper":"/paper/2310.09266","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:b9455e32783182c0008ff3258876596529213af51c5e4217cdc26f49a182972a","observation_id":"c5bb4366-601c-4bd6-806a-1f8d6329eff0","resolution":{"observed_at":"2026-08-07T00:46:10.108829Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:10.112774Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.112774Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:134b552b997ff58d259ab20bdcc974940a7548169c2fd656d559409c82959ff1","observation_id":"359b03c0-af9e-4f4e-bbd4-34ba76b3a984","resolution":{"observed_at":"2026-08-07T00:46:10.112774Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.13771","last_updated":"2023-10-20T19:14:59Z","snapshot_observed_at":"2026-08-09T23:44:32.051600Z","submitted_at":"2023-10-20T19:14:59Z","title":"Copyright Violations and Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.13771","snapshot_observed_at":"2026-08-07T00:46:10.117323Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.117323Z"},"links":{"cited_paper":"/paper/2310.13771","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:6a703fc69fd95f6821c241c087a9ba21d9a54bc1d68468fa49441f7b76cfc8f9","observation_id":"0bbaf945-3fbb-412b-888d-12b6e30a0c10","resolution":{"observed_at":"2026-08-07T00:46:10.117323Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:10.121598Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.121598Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:313831c48f8d700f65ca76b8dd3ff4f7476514e1a6ab8a4597847b9096aa97d7","observation_id":"01ff4e5f-a0c9-45fd-bf85-1e45f6c36d16","resolution":{"observed_at":"2026-08-07T00:46:10.121598Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2006.05336","last_updated":"2020-06-09T15:17:21Z","snapshot_observed_at":"2026-07-06T09:27:21.949573Z","submitted_at":"2020-06-09T15:17:21Z","title":"On the Effectiveness of Regularization Against Membership Inference Attacks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2006.05336","snapshot_observed_at":"2026-08-07T00:46:10.125502Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.125502Z"},"links":{"cited_paper":"/paper/2006.05336","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:0d0f127b56f6a281a2e532946ff0097eac25825791436410053b422d686e1abf","observation_id":"9fb467b9-f255-4526-bb6b-6127d1da313a","resolution":{"observed_at":"2026-08-07T00:46:10.125502Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.03123","last_updated":"2025-01-12T21:07:54Z","snapshot_observed_at":"2026-07-06T15:23:29.240615Z","submitted_at":"2023-04-13T16:01:28Z","title":"ChatGPT Needs SPADE (Sustainability, PrivAcy, Digital divide, and Ethics) Evaluation: A Review","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.03123","snapshot_observed_at":"2026-08-07T00:46:10.129541Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.129541Z"},"links":{"cited_paper":"/paper/2305.03123","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:82c8ad8476a4f22e6ff110cd85ebb5cd5d27f95e818ddb598075672c28778583","observation_id":"a97f31a1-4def-4b89-8899-916d2862bedc","resolution":{"observed_at":"2026-08-07T00:46:10.129541Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:10.133665Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.133665Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:bcb7a53c8d010b6dbb9365a5c3bfb6b54935abca43fecd9139d6e3ab2ea2a49c","observation_id":"247b37b0-886d-4a4c-9a03-60a0af906558","resolution":{"observed_at":"2026-08-07T00:46:10.133665Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:10.137660Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.137660Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:bf36d1e64f120b57d54f19abcf3086a617e46db7fb79b931c7f23a6241a26f0f","observation_id":"acc0b6f0-f2ec-44c1-888b-7e959ee06419","resolution":{"observed_at":"2026-08-07T00:46:10.137660Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.00363","last_updated":"2023-09-01T09:40:36Z","snapshot_observed_at":"2026-07-06T16:13:11.333980Z","submitted_at":"2023-09-01T09:40:36Z","title":"FederatedScope-LLM: A Comprehensive Package for Fine-tuning Large Language Models in Federated Learning","version":1},"cited_work":{"arxiv_id":"2309.00363","doi":null,"metadata_source":"pith","pith_arxiv_id":"2309.00363","snapshot_observed_at":"2026-08-07T00:46:11.517800Z","title":"FederatedScope-LLM: A Comprehensive Package for Fine-tuning Large Language Models in Federated Learning","venue":"cs.LG","work_id":"a6271cdd-fb70-474e-a16a-bfb358184d76","year":2023},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.141934Z"},"links":{"cited_paper":"/paper/2309.00363","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:9a43a40f50327be388a38b699ae7a767c963c0b9f511eece775c8716be1bc0e0","observation_id":"e2e5fb40-0910-41f1-bbb7-89f039cefb58","resolution":{"observed_at":"2026-08-07T00:46:11.522750Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.00267","last_updated":"2024-09-03T14:01:54Z","snapshot_observed_at":"2026-07-06T16:13:07.384791Z","submitted_at":"2023-09-01T05:53:33Z","title":"RLAIF vs. RLHF: Scaling Reinforcement Learning from Human Feedback with AI Feedback","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.00267","snapshot_observed_at":"2026-08-07T00:46:10.146710Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.146710Z"},"links":{"cited_paper":"/paper/2309.00267","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:13d512cec013192ad6caeff70b3818ee202de417f0339c9f58f79f2ead24e7b5","observation_id":"31ab7497-1980-49ab-92c8-af798d34ed55","resolution":{"observed_at":"2026-08-07T00:46:10.146710Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2107.06499","last_updated":"2022-03-24T19:29:45Z","snapshot_observed_at":"2026-08-05T18:30:13.997811Z","submitted_at":"2021-07-14T06:06:52Z","title":"Deduplicating Training Data Makes Language Models Better","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2107.06499","snapshot_observed_at":"2026-08-07T00:46:10.150709Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.150709Z"},"links":{"cited_paper":"/paper/2107.06499","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:5598a7496d29dcd23eabae580962edb4f0ba89de9374cf0e1cb0c5522cb8a726","observation_id":"86ba1150-60aa-4fa2-a57d-ae0a840b7a78","resolution":{"observed_at":"2026-08-07T00:46:10.150709Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:10.155582Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.155582Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:0960c4b7f5ccc7c1b3be9f6ba29f2e5b145e1f8c1c9a20181017573de96348ac","observation_id":"a3ee3a2d-0e4c-4f17-91d0-75218a3be1a9","resolution":{"observed_at":"2026-08-07T00:46:10.155582Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2304.05197","last_updated":"2023-11-01T05:14:01Z","snapshot_observed_at":"2026-08-11T03:08:48.234367Z","submitted_at":"2023-04-11T13:05:04Z","title":"Multi-step Jailbreaking Privacy Attacks on ChatGPT","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2304.05197","snapshot_observed_at":"2026-08-07T00:46:10.159449Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.159449Z"},"links":{"cited_paper":"/paper/2304.05197","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:7e6d686c676a6c0cfea7e72af7f4a78a7f28645c8abeed5654519cfc84aced87","observation_id":"8ee003a4-d249-40a4-8d2b-ffcf7a084972","resolution":{"observed_at":"2026-08-07T00:46:10.159449Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:10.164065Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.164065Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:51503a61ce289d4e5f8530e80e5a9112bc68f0dc66b2ae708e42105a27865864","observation_id":"acafedcd-9cae-4723-bedd-5d0ee111464a","resolution":{"observed_at":"2026-08-07T00:46:10.164065Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2203.14207","last_updated":"2023-05-03T09:09:22Z","snapshot_observed_at":"2026-08-08T01:33:00.927441Z","submitted_at":"2022-03-27T04:41:55Z","title":"Text Adversarial Purification as Defense against Adversarial Attacks","version":2},"cited_work":{"arxiv_id":"2203.14207","doi":null,"metadata_source":"pith","pith_arxiv_id":"2203.14207","snapshot_observed_at":"2026-08-07T00:46:11.443419Z","title":"Text Adversarial Purification as Defense against Adversarial Attacks","venue":"cs.CL","work_id":"b2ec8b4c-0b14-4b91-b0be-56147458a393","year":2022},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.168237Z"},"links":{"cited_paper":"/paper/2203.14207","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:1363d750fd2abebcb35f0c77899a1e1df4a4d99f29eae09c657b80fbd7d3fc03","observation_id":"32b8f661-b285-44c1-a1f0-328f22ee1280","resolution":{"observed_at":"2026-08-07T00:46:11.448154Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.01994","last_updated":"2024-02-03T02:32:45Z","snapshot_observed_at":"2026-08-06T06:57:02.890083Z","submitted_at":"2024-02-03T02:32:45Z","title":"Human-Centered Privacy Research in the Age of Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.01994","snapshot_observed_at":"2026-08-07T00:46:10.172818Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.172818Z"},"links":{"cited_paper":"/paper/2402.01994","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:564b34d2891180b9151ae51cc37b9692a4e225d1e0f10bdfc5918e913707227a","observation_id":"6c4fdef9-f070-4ea8-b739-1f8c21699090","resolution":{"observed_at":"2026-08-07T00:46:10.172818Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2110.05679","last_updated":"2022-11-10T18:42:34Z","snapshot_observed_at":"2026-08-08T11:17:29.711698Z","submitted_at":"2021-10-12T01:45:27Z","title":"Large Language Models Can Be Strong Differentially Private Learners","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2110.05679","snapshot_observed_at":"2026-08-07T00:46:10.178309Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.178309Z"},"links":{"cited_paper":"/paper/2110.05679","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:a2802f169c976655bf51bff1f1b83be91c4e9cd40d11988cc7a5719a5c872cd8","observation_id":"8013d41a-81b1-42a4-bcd2-a99e88ecf4d1","resolution":{"observed_at":"2026-08-07T00:46:10.178309Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.05459","last_updated":"2024-05-08T06:16:23Z","snapshot_observed_at":"2026-08-02T13:57:57.119489Z","submitted_at":"2024-01-10T09:25:45Z","title":"Personal LLM Agents: Insights and Survey about the Capability, Efficiency and Security","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.05459","snapshot_observed_at":"2026-08-07T00:46:10.182617Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.182617Z"},"links":{"cited_paper":"/paper/2401.05459","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:40da64a0cf3061fd12da89864c92e526897e4a98811e6915ca59a94ad0f5ba76","observation_id":"a7654b3e-b578-4150-8e2d-a553b2d2a7b5","resolution":{"observed_at":"2026-08-07T00:46:10.182617Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.05868","last_updated":"2025-03-20T20:15:22Z","snapshot_observed_at":"2026-07-06T17:27:33.275341Z","submitted_at":"2024-02-08T17:57:11Z","title":"EmojiPrompt: Generative Prompt Obfuscation for Privacy-Preserving Communication with Cloud-based LLMs","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.05868","snapshot_observed_at":"2026-08-07T00:46:10.186603Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.186603Z"},"links":{"cited_paper":"/paper/2402.05868","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:e0b6291fb4ce185ef6ac1d1764b58ea3daad70159d438b700ace9d9ee3945676","observation_id":"1410d7d2-f156-4ff8-9196-5e92fe386090","resolution":{"observed_at":"2026-08-07T00:46:10.186603Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:10.192023Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.192023Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:a086a6a842d9d0c614a31e3e6835aefc95ac461ca090f5ff24b6589e3334e55e","observation_id":"8641b70a-73f5-4610-a1ac-0a8bc454c018","resolution":{"observed_at":"2026-08-07T00:46:10.192023Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.13860","last_updated":"2024-03-10T13:58:08Z","snapshot_observed_at":"2026-07-06T15:31:18.144952Z","submitted_at":"2023-05-23T09:33:38Z","title":"Jailbreaking ChatGPT via Prompt Engineering: An Empirical Study","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.13860","snapshot_observed_at":"2026-08-07T00:46:10.201081Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.201081Z"},"links":{"cited_paper":"/paper/2305.13860","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:06e5d9e6aa1d707fe79961a42f429d417d9357ce04e56f25d7cc0fd540d90f6e","observation_id":"0bb72fd1-f74b-478f-929d-341da8fa7af3","resolution":{"observed_at":"2026-08-07T00:46:10.201081Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.14905","last_updated":"2024-06-27T03:53:46Z","snapshot_observed_at":"2026-08-07T05:13:11.135540Z","submitted_at":"2024-02-22T18:58:55Z","title":"MobileLLM: Optimizing Sub-billion Parameter Language Models for On-Device Use Cases","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.14905","snapshot_observed_at":"2026-08-07T00:46:10.205737Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.205737Z"},"links":{"cited_paper":"/paper/2402.14905","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:d179d90759a48071ff86c7b1b0b2dcc2532e48e4ace09d346a0c13ce0c1143a4","observation_id":"e1d4d83b-176d-40f0-bc97-3eaa9acbc41c","resolution":{"observed_at":"2026-08-07T00:46:10.205737Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:10.210424Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.210424Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:dde12e4904bc592d33f8930611998372f842bca77d0e4c5c75af004dca62b160","observation_id":"8978e9ff-5f35-413f-ab36-4d4ce4d500a3","resolution":{"observed_at":"2026-08-07T00:46:10.210424Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:10.214450Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.214450Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:c245a2ca29890e8c3f1c083235fd84d26906f4187bb4514352e9d39b450a7775","observation_id":"6c4d199a-318c-48a2-ac4b-8c03d7244387","resolution":{"observed_at":"2026-08-07T00:46:10.214450Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:10.218245Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":74,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.218245Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:6f51fb771ef6b62484a1f5ef497bc844ebf3b5d6f10cd67dc93f93ddcb1428ff","observation_id":"60fe569a-c628-4c1b-8025-7d9c25363c47","resolution":{"observed_at":"2026-08-07T00:46:10.218245Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:10.222754Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":75,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.222754Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:10b4b4d72ed1bfbd00abe7f4711739fecfef1b15c16a2ac1122886c3d9c735fb","observation_id":"a493dc94-f6f9-45e4-8c84-4424dd39b06f","resolution":{"observed_at":"2026-08-07T00:46:10.222754Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07510","last_updated":"2025-07-25T12:28:15Z","snapshot_observed_at":"2026-08-07T06:30:15.183572Z","submitted_at":"2024-02-12T09:31:21Z","title":"Secret Collusion among AI Agents: Multi-Agent Deception via Steganography","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.07510","snapshot_observed_at":"2026-08-07T00:46:10.227961Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":76,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.227961Z"},"links":{"cited_paper":"/paper/2402.07510","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:fac0ca7ce4cd3274f14da6800d8755ce910e701123397b18a5416f85c5bb21b3","observation_id":"a394d109-ef5c-4b68-a2b1-739b6f3181b4","resolution":{"observed_at":"2026-08-07T00:46:10.227961Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.10538","last_updated":"2023-12-03T13:18:09Z","snapshot_observed_at":"2026-07-06T16:49:04.651019Z","submitted_at":"2023-11-17T14:06:05Z","title":"Testing Language Model Agents Safely in the Wild","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.10538","snapshot_observed_at":"2026-08-07T00:46:10.232093Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":77,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.232093Z"},"links":{"cited_paper":"/paper/2311.10538","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:1c1e5f8cbf4e6fb11cd0cb05047f15a29853eb0c3084ee998f5f6cf6a424e130","observation_id":"017bb9fe-4dc4-4907-b71d-a138c567956d","resolution":{"observed_at":"2026-08-07T00:46:10.232093Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2112.09332","last_updated":"2022-06-01T19:08:11Z","snapshot_observed_at":"2026-08-07T17:14:39.278754Z","submitted_at":"2021-12-17T05:43:43Z","title":"WebGPT: Browser-assisted question-answering with human feedback","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2112.09332","snapshot_observed_at":"2026-08-07T00:46:10.236136Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":78,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.236136Z"},"links":{"cited_paper":"/paper/2112.09332","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:85c9d3752781083dc6d376c8dd8898263cbc79d73145f33fc43a54f1e33dc548","observation_id":"7c9ee1e7-6215-405f-a051-886c5e951a5d","resolution":{"observed_at":"2026-08-07T00:46:10.236136Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.17035","last_updated":"2023-11-28T18:47:03Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-11-28T18:47:03Z","title":"Scalable Extraction of Training Data from (Production) Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.17035","snapshot_observed_at":"2026-08-07T00:46:10.240817Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":79,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.240817Z"},"links":{"cited_paper":"/paper/2311.17035","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:488675e7ebab38db0863e66412e2501d4bf9045fc50cc99eb9e7680c5c9b33b1","observation_id":"4ee2237d-86bb-4c83-956a-2719877f4c06","resolution":{"observed_at":"2026-08-07T00:46:10.240817Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.06717","last_updated":"2024-05-30T19:26:05Z","snapshot_observed_at":"2026-07-06T17:00:04.276081Z","submitted_at":"2023-12-11T01:26:53Z","title":"Privacy Issues in Large Language Models: A Survey","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.06717","snapshot_observed_at":"2026-08-07T00:46:10.244584Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":80,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.244584Z"},"links":{"cited_paper":"/paper/2312.06717","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:00fe145b25f37254e1aee8c750cbe95cb62d494df9fcf118bb15c8cf951f432b","observation_id":"f0c379e6-3b3d-40ec-a69f-de096a767e22","resolution":{"observed_at":"2026-08-07T00:46:10.244584Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:10.248312Z","title":null,"venue":null,"work_id":null,"year":2004},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":81,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.248312Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:a594f359a23aaeebc5e64f76970291a86ba774b9245025c6921447b6bbc64fd7","observation_id":"fc4fff79-bed4-4235-81bd-f181eadbcb5e","resolution":{"observed_at":"2026-08-07T00:46:10.248312Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:10.251921Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":82,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.251921Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:6a02e7574ffe83e90d34450f5e888c90d889cda4532ad2e9257e8e9610d51a41","observation_id":"163e0db5-a564-437b-ae9d-c92bdf8a90d1","resolution":{"observed_at":"2026-08-07T00:46:10.251921Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:10.256229Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":83,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.256229Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:f665f74971054f24a7be04197fbe9d2983fd12592feaf47bb4e8938c16e4bea8","observation_id":"0e549ca7-cca5-48c6-85c5-477be4655943","resolution":{"observed_at":"2026-08-07T00:46:10.256229Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.05699","last_updated":"2024-06-08T06:13:55Z","snapshot_observed_at":"2026-08-04T06:32:55.126254Z","submitted_at":"2024-02-08T14:21:03Z","title":"Self-Alignment of Large Language Models via Monopolylogue-based Social Scene Simulation","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.05699","snapshot_observed_at":"2026-08-07T00:46:10.260774Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":84,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.260774Z"},"links":{"cited_paper":"/paper/2402.05699","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:fcfd38d70d1f365d7cfe0334191e145e791695576563ba1393c7711ae66f6d0d","observation_id":"2e7469bc-7198-4777-b1b2-bce72bb4f9f5","resolution":{"observed_at":"2026-08-07T00:46:10.260774Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:10.264840Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":85,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.264840Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:deceb7123d4b42eb9eabbbbbfd45892f55370077993623e3d463502d087b83ae","observation_id":"0303c728-8883-4864-9225-339e3630f5ab","resolution":{"observed_at":"2026-08-07T00:46:10.264840Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.15008","last_updated":"2023-05-24T10:48:05Z","snapshot_observed_at":"2026-07-06T15:32:25.931739Z","submitted_at":"2023-05-24T10:48:05Z","title":"Are Chatbots Ready for Privacy-Sensitive Applications? An Investigation into Input Regurgitation and Prompt-Induced Sanitization","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.15008","snapshot_observed_at":"2026-08-07T00:46:10.268928Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":86,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.268928Z"},"links":{"cited_paper":"/paper/2305.15008","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:89b23f9d6e7f65e8343ca3d384b73573bf9d6174a50aabec2a0e0ce5a56680b4","observation_id":"60e94ea9-6060-4362-a0a3-d66b67897787","resolution":{"observed_at":"2026-08-07T00:46:10.268928Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:10.272761Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":87,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.272761Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:4d3f56034d8080ef6389fbaeed31c79edf72adbf67b369cef5cd04df6f05e65e","observation_id":"927d5938-730c-4533-b171-657972d434e5","resolution":{"observed_at":"2026-08-07T00:46:10.272761Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.14965","last_updated":"2024-03-27T04:38:44Z","snapshot_observed_at":"2026-08-07T01:32:47.981682Z","submitted_at":"2023-05-24T09:57:37Z","title":"Tricking LLMs into Disobedience: Formalizing, Analyzing, and Detecting Jailbreaks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.14965","snapshot_observed_at":"2026-08-07T00:46:10.276577Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":88,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.276577Z"},"links":{"cited_paper":"/paper/2305.14965","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:4dc796e42e70b51ee70247fc414487439ffc904ed56be68556c3cc1f5e99d5ed","observation_id":"53501d80-3eda-4740-bb0c-5dd8c415a90c","resolution":{"observed_at":"2026-08-07T00:46:10.276577Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:10.280592Z","title":null,"venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":89,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.280592Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:4a70bf81cc88d288596c897ea5ba002d135271ca1cc0f9df623c697d786abb37","observation_id":"bb06e0d8-eefc-478b-8e23-50ed228698a8","resolution":{"observed_at":"2026-08-07T00:46:10.280592Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:10.284843Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":90,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.284843Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:ca530ef616d3045f548ff183ac6eccfee719670cce916893cf369c01cd3e5e97","observation_id":"76cd9b02-c281-4e6e-ad6a-3aa547aa7b5e","resolution":{"observed_at":"2026-08-07T00:46:10.284843Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:10.288651Z","title":null,"venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":91,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.288651Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:2b313d8a07a78e8fe54bf5d3a8bd872081653bff9d38feb491be3827dc6d80b3","observation_id":"6880f691-d74b-4467-8de1-68a6884905d1","resolution":{"observed_at":"2026-08-07T00:46:10.288651Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.02486","last_updated":"2025-02-21T01:13:08Z","snapshot_observed_at":"2026-08-05T09:53:25.030382Z","submitted_at":"2024-10-03T13:48:35Z","title":"Encryption-Friendly LLM Architecture","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.02486","snapshot_observed_at":"2026-08-07T00:46:10.292901Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":92,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.292901Z"},"links":{"cited_paper":"/paper/2410.02486","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:467c8f78c9e8055826a52d52b7439cf1800f0d5c5a4301598c309468340d0689","observation_id":"2a224452-8a38-4d6c-b6c7-37353f505476","resolution":{"observed_at":"2026-08-07T00:46:10.292901Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:10.297534Z","title":"Why should i trust you?","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":93,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.297534Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:2331cc0585218c5233f89d8871e3ed7e4eda1bfb8bbd70c26734d76bde1fe2cf","observation_id":"08925f9b-1a7a-473e-9014-f3f1a03a45e0","resolution":{"observed_at":"2026-08-07T00:46:10.297534Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:10.301358Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":94,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.301358Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:731e328313a6b0848050e38d8d3765e37e4b5da004220cd2ed22e79cb5b4a0a4","observation_id":"e09991f1-1dfc-4010-9c00-cafb84c15078","resolution":{"observed_at":"2026-08-07T00:46:10.301358Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.08100","last_updated":"2024-03-12T22:21:48Z","snapshot_observed_at":"2026-08-10T07:30:11.238502Z","submitted_at":"2024-03-12T22:21:48Z","title":"Efficient Language Model Architectures for Differentially Private Federated Learning","version":1},"cited_work":{"arxiv_id":"2403.08100","doi":null,"metadata_source":"pith","pith_arxiv_id":"2403.08100","snapshot_observed_at":"2026-08-07T00:46:11.178328Z","title":"Efficient Language Model Architectures for Differentially Private Federated Learning","venue":"cs.LG","work_id":"78e4884f-9042-4a43-9ff4-05c9493c6114","year":2024},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":95,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.305019Z"},"links":{"cited_paper":"/paper/2403.08100","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:122b26b0343cc42c565b0278a29f18d09ea749f7888f99a11023140c6d0eccc9","observation_id":"41daa235-5a1b-45cd-8916-3802127887f3","resolution":{"observed_at":"2026-08-07T00:46:11.183127Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.03684","last_updated":"2024-06-11T19:02:52Z","snapshot_observed_at":"2026-07-06T16:28:22.350574Z","submitted_at":"2023-10-05T17:01:53Z","title":"SmoothLLM: Defending Large Language Models Against Jailbreaking Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.03684","snapshot_observed_at":"2026-08-07T00:46:10.309375Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":96,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.309375Z"},"links":{"cited_paper":"/paper/2310.03684","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:56f8b90461941365d9494d0e483b1510829749a88020388dcb960e1a7bcb19d6","observation_id":"96176b6e-3c80-4a61-91da-fac799253e24","resolution":{"observed_at":"2026-08-07T00:46:10.309375Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:10.313298Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":97,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.313298Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:46a59100a9ab41815e894cb845a7abfe700b4f3501891de527ce91100e5b9f87","observation_id":"5b0574ca-86df-4f12-aebe-90ea31d23274","resolution":{"observed_at":"2026-08-07T00:46:10.313298Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:10.317499Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":98,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.317499Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:e9dc151071ad1cd252220a1d77adbe34a9b167a4d60f7159addccf8515066613","observation_id":"127a966c-bc96-43aa-9665-d323b3f154df","resolution":{"observed_at":"2026-08-07T00:46:10.317499Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.15817","last_updated":"2024-05-17T17:17:45Z","snapshot_observed_at":"2026-07-06T16:24:30.545494Z","submitted_at":"2023-09-25T17:08:02Z","title":"Identifying the Risks of LM Agents with an LM-Emulated Sandbox","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.15817","snapshot_observed_at":"2026-08-07T00:46:10.321672Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":99,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.321672Z"},"links":{"cited_paper":"/paper/2309.15817","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:05b136ddffa2663621c5931689f71ce79ef028187a24989b698c8ed9866566bf","observation_id":"a791b14b-7418-45a6-8c58-e0a7c4a5349a","resolution":{"observed_at":"2026-08-07T00:46:10.321672Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2501.01672","last_updated":"2025-01-07T05:36:41Z","snapshot_observed_at":"2026-08-10T22:20:23.618854Z","submitted_at":"2025-01-03T07:19:23Z","title":"Practical Secure Inference Algorithm for Fine-tuned Large Language Model Based on Fully Homomorphic Encryption","version":2},"cited_work":{"arxiv_id":"2501.01672","doi":null,"metadata_source":"pith","pith_arxiv_id":"2501.01672","snapshot_observed_at":"2026-08-07T00:46:11.125292Z","title":"Practical Secure Inference Algorithm for Fine-tuned Large Language Model Based on Fully Homomorphic Encryption","venue":"cs.CR","work_id":"6f753819-dc63-4084-b7cf-39c27c0b6a66","year":2025},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":100,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.325905Z"},"links":{"cited_paper":"/paper/2501.01672","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:e047f4391304d30a84d215797fdf2ba9569d9f0b8afb8fdfa11503afe12f6d55","observation_id":"af657e7c-3178-47ce-89b3-c961e5cc741b","resolution":{"observed_at":"2026-08-07T00:46:11.130238Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1910.01108","last_updated":"2020-03-01T02:57:50Z","snapshot_observed_at":"2026-08-07T19:07:36.327251Z","submitted_at":"2019-10-02T17:56:28Z","title":"DistilBERT, a distilled version of BERT: smaller, faster, cheaper and lighter","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1910.01108","snapshot_observed_at":"2026-08-07T00:46:10.329817Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":101,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.329817Z"},"links":{"cited_paper":"/paper/1910.01108","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:ffc90e3ef9e36c21e65c0f8ff418470165b412668f19ccb52cecf8ab7b892d3e","observation_id":"e99fef94-2a25-4944-8583-5bc2ceab55cf","resolution":{"observed_at":"2026-08-07T00:46:10.329817Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","latest_version":2,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-09T16:34:09.224078Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation"},"reference_resolution":{"displayed":100,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":94,"verified_exact":6,"verified_fuzzy":0},"total_outbound_references":160},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"thesis":"As of 11 August 2026, this Paper Citation Record lists 100 of 160 outbound references and 0 inbound Pith citation observations for arXiv:2506.12699."}