{"as_of":"2026-08-14T13:17:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:53e2d565c067cfbadc1bbe9dbbe9542b7a5c74c8a4018fe44a393882d4080189","coverage":[{"denominator":14,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":14,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T23:21:55.922723Z","state":"measured"},{"denominator":14,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":14,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-14T06:32:32.682623+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2506.19874/citation-record","integrity":"/paper/2506.19874/integrity","json":"/paper/2506.19874/citation-record.json","paper":"/paper/2506.19874"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2303.08774","last_updated":"2024-03-04T06:01:33Z","snapshot_observed_at":"2026-08-07T07:30:12.213965Z","submitted_at":"2023-03-15T17:15:04Z","title":"GPT-4 Technical Report","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.08774","snapshot_observed_at":"2026-08-06T23:21:53.525220Z","title":"L., Almeida, D., Altenschmidt, J., Altman, S., Anadkat, S., et al","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.19874","last_updated":"2025-06-26T08:45:10Z","snapshot_observed_at":"2026-08-10T13:23:07.293661Z","submitted_at":"2025-06-23T11:57:41Z","title":"Towards Provable (In)Secure Model Weight Release Schemes","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-06T23:21:53.525220Z"},"links":{"cited_paper":"/paper/2303.08774","citing_paper":"/paper/2506.19874"},"observation_digest":"sha256:93b4b5542d0938109fd690c3cbc9988d7beb93e41a96df680119c9476e93029d","observation_id":"f6535dde-385f-4678-9645-5a2efb382313","resolution":{"observed_at":"2026-08-06T23:21:53.525220Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.14883","last_updated":"2024-06-05T11:30:02Z","snapshot_observed_at":"2026-08-13T04:13:11.788119Z","submitted_at":"2024-02-22T04:55:14Z","title":"Double-I Watermark: Protecting Model Copyright for LLM Fine-tuning","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.14883","snapshot_observed_at":"2026-08-06T23:21:54.184770Z","title":"Double- i watermark: Protecting model copyright for llm fine- tuning.arXiv preprint arXiv:2402.14883,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.19874","last_updated":"2025-06-26T08:45:10Z","snapshot_observed_at":"2026-08-10T13:23:07.293661Z","submitted_at":"2025-06-23T11:57:41Z","title":"Towards Provable (In)Secure Model Weight Release Schemes","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-06T23:21:54.184770Z"},"links":{"cited_paper":"/paper/2402.14883","citing_paper":"/paper/2506.19874"},"observation_digest":"sha256:e5f6aca34c9ac089efd2ee6f08ffc5895e67f60421f7208f1057a5cbd6080151","observation_id":"0de97bd3-4ac0-439f-bb61-b32e38543dd1","resolution":{"observed_at":"2026-08-06T23:21:54.184770Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T23:21:54.540440Z","title":"Slip: Securing llms ip using weights decomposition.arXiv preprint arXiv:2407.10886,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.19874","last_updated":"2025-06-26T08:45:10Z","snapshot_observed_at":"2026-08-10T13:23:07.293661Z","submitted_at":"2025-06-23T11:57:41Z","title":"Towards Provable (In)Secure Model Weight Release Schemes","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-06T23:21:54.540440Z"},"links":{"citing_paper":"/paper/2506.19874"},"observation_digest":"sha256:d3b48cafad71a83f385f9d879cca6a67b3bff30ed6285aaaf180f0b4f46c4c92","observation_id":"ca8474ac-c7a1-42c9-afff-4e4aa32ec3e8","resolution":{"observed_at":"2026-08-06T23:21:54.540440Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.09288","last_updated":"2023-07-19T17:08:59Z","snapshot_observed_at":"2026-08-07T12:56:43.323460Z","submitted_at":"2023-07-18T14:31:57Z","title":"Llama 2: Open Foundation and Fine-Tuned Chat Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.09288","snapshot_observed_at":"2026-08-06T23:21:54.943747Z","title":"Llama 2: Open foundation and fine- tuned chat models.arXiv preprint arXiv:2307.09288,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.19874","last_updated":"2025-06-26T08:45:10Z","snapshot_observed_at":"2026-08-10T13:23:07.293661Z","submitted_at":"2025-06-23T11:57:41Z","title":"Towards Provable (In)Secure Model Weight Release Schemes","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-06T23:21:54.943747Z"},"links":{"cited_paper":"/paper/2307.09288","citing_paper":"/paper/2506.19874"},"observation_digest":"sha256:dfb2ace9ee52787163caabeac4f399737e495ed07f7dc094919352f50a6d4d47","observation_id":"5ea814cf-172a-4d85-8745-65ddb47eca44","resolution":{"observed_at":"2026-08-06T23:21:54.943747Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T23:21:57.597379Z","title":"Taylor unswift: Secured weight release for large language models via Taylor expansion","venue":null,"work_id":"1530f3b8-f583-4a39-b620-4c57e2bcc2cf","year":2024},"citing_paper":{"arxiv_id":"2506.19874","last_updated":"2025-06-26T08:45:10Z","snapshot_observed_at":"2026-08-10T13:23:07.293661Z","submitted_at":"2025-06-23T11:57:41Z","title":"Towards Provable (In)Secure Model Weight Release Schemes","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-06T23:21:55.155034Z"},"links":{"citing_paper":"/paper/2506.19874"},"observation_digest":"sha256:3509aaf099755e0fdc5e049afce93836b7fce1744d1e1861e604cefaf5ad6e96","observation_id":"0d45da6a-e914-4f9e-9c6e-2e8eb214d4fe","resolution":{"observed_at":"2026-08-06T23:21:57.674755Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T23:21:55.425112Z","title":"doi: 10.18653/v1/2024.emnlp-main","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.19874","last_updated":"2025-06-26T08:45:10Z","snapshot_observed_at":"2026-08-10T13:23:07.293661Z","submitted_at":"2025-06-23T11:57:41Z","title":"Towards Provable (In)Secure Model Weight Release Schemes","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-06T23:21:55.425112Z"},"links":{"citing_paper":"/paper/2506.19874"},"observation_digest":"sha256:d9c8fc78084d7e7d14a490dc61b9712f39e480ed0e01381bac44782fa65b580e","observation_id":"11037770-868f-446d-b210-9d7e2499008b","resolution":{"observed_at":"2026-08-06T23:21:55.425112Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.05156","last_updated":"2024-03-14T14:17:57Z","snapshot_observed_at":"2026-08-13T00:59:28.434753Z","submitted_at":"2024-03-08T08:47:48Z","title":"On Protecting the Data Privacy of Large Language Models (LLMs): A Survey","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.05156","snapshot_observed_at":"2026-08-06T23:21:55.922723Z","title":"On protecting the data privacy of large language models (llms): A survey.arXiv preprint arXiv:2403.05156,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.19874","last_updated":"2025-06-26T08:45:10Z","snapshot_observed_at":"2026-08-10T13:23:07.293661Z","submitted_at":"2025-06-23T11:57:41Z","title":"Towards Provable (In)Secure Model Weight Release Schemes","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-06T23:21:55.922723Z"},"links":{"cited_paper":"/paper/2403.05156","citing_paper":"/paper/2506.19874"},"observation_digest":"sha256:1bfea937f465063a622fb5296f6551c6b8818989522c8336feb36e57a32caf2c","observation_id":"df172bc4-cad2-4e5f-9c72-38f1790e3b6c","resolution":{"observed_at":"2026-08-06T23:21:55.922723Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.19405","last_updated":"2025-05-26T01:42:37Z","snapshot_observed_at":"2026-08-14T02:12:45.223458Z","submitted_at":"2025-05-26T01:42:37Z","title":"CoTGuard: Using Chain-of-Thought Triggering for Copyright Protection in Multi-Agent LLM Systems","version":1},"cited_work":{"arxiv_id":"2505.19405","doi":null,"metadata_source":"pith","pith_arxiv_id":"2505.19405","snapshot_observed_at":"2026-08-06T23:21:56.325687Z","title":"CoTGuard: Using Chain-of-Thought Triggering for Copyright Protection in Multi-Agent LLM Systems","venue":"cs.CL","work_id":"dbd0523e-b162-4270-8bff-bcdc0f9a2f97","year":2025},"citing_paper":{"arxiv_id":"2506.19874","last_updated":"2025-06-26T08:45:10Z","snapshot_observed_at":"2026-08-10T13:23:07.293661Z","submitted_at":"2025-06-23T11:57:41Z","title":"Towards Provable (In)Secure Model Weight Release Schemes","version":2},"reference_index":393,"source":"pdf_text","source_observed_at":"2026-08-06T23:21:55.538307Z"},"links":{"cited_paper":"/paper/2505.19405","citing_paper":"/paper/2506.19874"},"observation_digest":"sha256:879c9f7d938eba7a9f5d1eb18ba7424532ca4ad4e8b8ecbdfda1838faee3e534","observation_id":"170a9545-e13f-4e6c-aca7-1f574d934aa3","resolution":{"observed_at":"2026-08-06T23:21:56.468416Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T23:21:53.906015Z","title":"doi: https://doi.org/10.1016/0022-0000(84)90070-9","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.19874","last_updated":"2025-06-26T08:45:10Z","snapshot_observed_at":"2026-08-10T13:23:07.293661Z","submitted_at":"2025-06-23T11:57:41Z","title":"Towards Provable (In)Secure Model Weight Release Schemes","version":2},"reference_index":1984,"source":"pdf_text","source_observed_at":"2026-08-06T23:21:53.906015Z"},"links":{"citing_paper":"/paper/2506.19874"},"observation_digest":"sha256:c0cc58c9b97babf344239c79a6633489d1d220976caffcdb908ca22b67572836","observation_id":"00a0288a-a6e7-4ec9-b9a5-34e956cd6f99","resolution":{"observed_at":"2026-08-06T23:21:53.906015Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T23:21:53.794731Z","title":"Puma: Secure inference of llama-7b in five minutes.arXiv preprint arXiv:2307.12533,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.19874","last_updated":"2025-06-26T08:45:10Z","snapshot_observed_at":"2026-08-10T13:23:07.293661Z","submitted_at":"2025-06-23T11:57:41Z","title":"Towards Provable (In)Secure Model Weight Release Schemes","version":2},"reference_index":2004,"source":"pdf_text","source_observed_at":"2026-08-06T23:21:53.794731Z"},"links":{"citing_paper":"/paper/2506.19874"},"observation_digest":"sha256:a35bd48508269c0ce73fc7db8e59a9251d629ec96f64d02bb9d1124aa70f3aa2","observation_id":"e6bdcc5e-f044-49f3-acdc-99b5eba0ba56","resolution":{"observed_at":"2026-08-06T23:21:53.794731Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10383","last_updated":"2024-09-30T11:58:27Z","snapshot_observed_at":"2026-08-13T05:48:29.444954Z","submitted_at":"2023-10-16T13:23:54Z","title":"Privacy in Large Language Models: Attacks, Defenses and Future Directions","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.10383","snapshot_observed_at":"2026-08-06T23:21:54.035221Z","title":"Privacy in large language models: Attacks, defenses and future directions.arXiv preprint arXiv:2310.10383,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.19874","last_updated":"2025-06-26T08:45:10Z","snapshot_observed_at":"2026-08-10T13:23:07.293661Z","submitted_at":"2025-06-23T11:57:41Z","title":"Towards Provable (In)Secure Model Weight Release Schemes","version":2},"reference_index":2007,"source":"pdf_text","source_observed_at":"2026-08-06T23:21:54.035221Z"},"links":{"cited_paper":"/paper/2310.10383","citing_paper":"/paper/2506.19874"},"observation_digest":"sha256:f07fe57670f7274c9d9671adb2191ed7df39cc579a99c55612deb819905ecefc","observation_id":"561bd4dc-13cc-4ab6-8b1f-3db001bc89ce","resolution":{"observed_at":"2026-08-06T23:21:54.035221Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.16609","last_updated":"2023-09-28T17:07:49Z","snapshot_observed_at":"2026-08-09T21:25:20.369782Z","submitted_at":"2023-09-28T17:07:49Z","title":"Qwen Technical Report","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.16609","snapshot_observed_at":"2026-08-06T23:21:53.644924Z","title":"Qwen technical report.arXiv preprint arXiv:2309.16609,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.19874","last_updated":"2025-06-26T08:45:10Z","snapshot_observed_at":"2026-08-10T13:23:07.293661Z","submitted_at":"2025-06-23T11:57:41Z","title":"Towards Provable (In)Secure Model Weight Release Schemes","version":2},"reference_index":2023,"source":"pdf_text","source_observed_at":"2026-08-06T23:21:53.644924Z"},"links":{"cited_paper":"/paper/2309.16609","citing_paper":"/paper/2506.19874"},"observation_digest":"sha256:058e416b24975a4c6d7c65da9a3de709112b964a7a6575fd5f85ea6e8b776a03","observation_id":"2c968fb8-6d17-4064-99b1-2ed745feaf17","resolution":{"observed_at":"2026-08-06T23:21:53.644924Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.19437","last_updated":"2025-02-18T17:26:38Z","snapshot_observed_at":"2026-08-11T01:48:59.557045Z","submitted_at":"2024-12-27T04:03:16Z","title":"DeepSeek-V3 Technical Report","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.19437","snapshot_observed_at":"2026-08-06T23:21:54.404745Z","title":"Deepseek-v3 technical report.arXiv preprint arXiv:2412.19437,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.19874","last_updated":"2025-06-26T08:45:10Z","snapshot_observed_at":"2026-08-10T13:23:07.293661Z","submitted_at":"2025-06-23T11:57:41Z","title":"Towards Provable (In)Secure Model Weight Release Schemes","version":2},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-06T23:21:54.404745Z"},"links":{"cited_paper":"/paper/2412.19437","citing_paper":"/paper/2506.19874"},"observation_digest":"sha256:bcefd0e454656096818804ab4360ade6b2d76b72fcd489c525745595f402468f","observation_id":"56db9333-b736-4194-b5f8-fd98ddda5ee7","resolution":{"observed_at":"2026-08-06T23:21:54.404745Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.04636","last_updated":"2025-03-15T20:03:47Z","snapshot_observed_at":"2026-08-07T17:24:05.497268Z","submitted_at":"2025-03-06T17:24:06Z","title":"Mark Your LLM: Detecting the Misuse of Open-Source Large Language Models via Watermarking","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.04636","snapshot_observed_at":"2026-08-06T23:21:55.794064Z","title":"Mark your llm: Detecting the misuse of open-source large language models via watermarking.arXiv preprint arXiv:2503.04636,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.19874","last_updated":"2025-06-26T08:45:10Z","snapshot_observed_at":"2026-08-10T13:23:07.293661Z","submitted_at":"2025-06-23T11:57:41Z","title":"Towards Provable (In)Secure Model Weight Release Schemes","version":2},"reference_index":2025,"source":"pdf_text","source_observed_at":"2026-08-06T23:21:55.794064Z"},"links":{"cited_paper":"/paper/2503.04636","citing_paper":"/paper/2506.19874"},"observation_digest":"sha256:3b4b0de2405d1904f530454a71a23b870d357d9374a5a015b2671de63692bede","observation_id":"de54523a-8a0d-4aa1-9c60-54cd653c7304","resolution":{"observed_at":"2026-08-06T23:21:55.794064Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2506.19874","last_updated":"2025-06-26T08:45:10Z","latest_version":2,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-10T13:23:07.293661Z","submitted_at":"2025-06-23T11:57:41Z","title":"Towards Provable (In)Secure Model Weight Release Schemes"},"reference_resolution":{"displayed":14,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":12,"verified_exact":1,"verified_fuzzy":1},"total_outbound_references":14},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"thesis":"As of 14 August 2026, this Paper Citation Record lists 14 of 14 outbound references and 0 inbound Pith citation observations for arXiv:2506.19874."}