{"as_of":"2026-08-10T04:02:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:99a651b4974ad7a0bea374ff79577ee1833e297d6dc6e36060bfc6f68b2a0da3","coverage":[{"denominator":72,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":72,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T15:18:13.422527Z","state":"measured"},{"denominator":72,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":72,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2507.16372/citation-record","integrity":"/paper/2507.16372/integrity","json":"/paper/2507.16372/citation-record.json","paper":"/paper/2507.16372"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:16.888413Z","title":"X fact checks elon musk after he blasts apple-openai partnership as ‘creepy’ privacy nightmare","venue":null,"work_id":"df7c2b5b-8cf0-4aa9-816f-bde7fcd22be2","year":2024},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-08T20:51:05.150695Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:10.343021Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:7cf3864ae7fed93f9bb98c9782347c5be1bc258e87eaacd0686b39626e609154","observation_id":"ea37b436-ff53-42d1-8993-37710875278d","resolution":{"observed_at":"2026-08-06T15:18:16.903942Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2407.21783","last_updated":"2024-11-23T23:27:33Z","snapshot_observed_at":"2026-07-06T18:55:11.576666Z","submitted_at":"2024-07-31T17:54:27Z","title":"The Llama 3 Herd of Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.21783","snapshot_observed_at":"2026-08-06T15:18:10.414155Z","title":"The llama 3 herd of models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-08T20:51:05.150695Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:10.414155Z"},"links":{"cited_paper":"/paper/2407.21783","citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:24d0ac0dcf0cb746514542b72f3aac018a2a251a1a47b5b1f99b98743aa20153","observation_id":"46b6bffa-4e34-4913-910e-15ca5dd25884","resolution":{"observed_at":"2026-08-06T15:18:10.414155Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.00952","last_updated":"2024-07-01T04:13:25Z","snapshot_observed_at":"2026-08-09T00:00:59.056808Z","submitted_at":"2024-07-01T04:13:25Z","title":"SplitLoRA: A Split Parameter-Efficient Fine-Tuning Framework for Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.00952","snapshot_observed_at":"2026-08-06T15:18:10.535416Z","title":"Splitlora: A split parameter-efficient fine- tuning framework for large language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-08T20:51:05.150695Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:10.535416Z"},"links":{"cited_paper":"/paper/2407.00952","citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:e0f7cf8e3440a68370169dea712780e1378301b0778b8f9df53809bd581598e2","observation_id":"d01c5245-c947-403f-ac51-3e7da29c53fe","resolution":{"observed_at":"2026-08-06T15:18:10.535416Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:16.847494Z","title":"Helix: Dis- tributed serving of large language models via max-flow on heterogeneous gpus","venue":null,"work_id":"2b2cb10d-5c12-4f30-8522-a754f62e31a9","year":2025},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-08T20:51:05.150695Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:10.678742Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:8c11e28281363a57a2c3c034150988e47cb760749e8b40a17479f3909add905f","observation_id":"c9aced09-2ceb-4d4a-bd43-d744fa837bbb","resolution":{"observed_at":"2026-08-06T15:18:16.859918Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.14371","last_updated":"2024-05-23T09:46:22Z","snapshot_observed_at":"2026-07-06T18:18:30.066741Z","submitted_at":"2024-05-23T09:46:22Z","title":"EdgeShard: Efficient LLM Inference via Collaborative Edge Computing","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.14371","snapshot_observed_at":"2026-08-06T15:18:10.798785Z","title":"Edgeshard: Efficient llm inference via collaborative edge computing","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-08T20:51:05.150695Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:10.798785Z"},"links":{"cited_paper":"/paper/2405.14371","citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:2337737a06e92f7acf369b3a11506037c47361ec1cc64ecd097ea9ab4db65e61","observation_id":"e898c408-63b2-49da-88bb-a1d6336d847d","resolution":{"observed_at":"2026-08-06T15:18:10.798785Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:16.806307Z","title":null,"venue":null,"work_id":"eed4d498-0ce4-4642-a3c5-2ed5e7bbddd2","year":2023},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-08T20:51:05.150695Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:10.924346Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:afc5a4b57c75181b7a03f5d4e1ac766b2efe10a1fe8d9719730109a418bae0e5","observation_id":"3ba00045-3762-48fc-a70c-f63b3e7d0ec3","resolution":{"observed_at":"2026-08-06T15:18:16.817197Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:11.059923Z","title":"The internal state of an LLM knows when it‘s lying","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-08T20:51:05.150695Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:11.059923Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:2a91b40ad34e9ca71ec5aeb441d3c0bd256dbb2ee4cbe856cfb48576e09e1085","observation_id":"e311e620-8645-458c-9d3a-cc7b409fce0b","resolution":{"observed_at":"2026-08-06T15:18:11.059923Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:16.771350Z","title":"INSIDE: LLMs’ internal states retain the power of hallucination detection","venue":null,"work_id":"1790c379-c3a7-4778-9824-ed89222ce8a2","year":2024},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-08T20:51:05.150695Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:11.192611Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:4c20839d2b0546ef31f6aaa8a72152494902203092c7434a07b642cbb739a5a5","observation_id":"ec32b3cd-25df-46be-95d8-56000bbd1bf8","resolution":{"observed_at":"2026-08-06T15:18:16.786599Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:16.733243Z","title":"Unsupervised real-time hallucination detection based on the internal states of large language models","venue":null,"work_id":"0ba91a8f-62a0-4a0e-8bf0-a532c85e3dd1","year":2024},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-08T20:51:05.150695Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:11.336929Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:218b2b3f422c050f69de64ca737f9b2152d7f5b76ebf31606f73ede3e1d27bc3","observation_id":"57c272ee-b7cf-441f-a1da-c1da8f264b33","resolution":{"observed_at":"2026-08-06T15:18:16.740533Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.15927","last_updated":"2024-06-22T19:46:06Z","snapshot_observed_at":"2026-07-30T04:59:24.269176Z","submitted_at":"2024-06-22T19:46:06Z","title":"Semantic Entropy Probes: Robust and Cheap Hallucination Detection in LLMs","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.15927","snapshot_observed_at":"2026-08-06T15:18:11.457417Z","title":"Malik, and Yarin Gal","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-08T20:51:05.150695Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:11.457417Z"},"links":{"cited_paper":"/paper/2406.15927","citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:d90e0fa5c5b8ea82a7dc31eb3d674fff204c026a6cec8b095e147190f8836f4b","observation_id":"5457c67f-15e2-47b0-b867-cd6dcd06eb3d","resolution":{"observed_at":"2026-08-06T15:18:11.457417Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.20311","last_updated":"2024-07-29T17:52:40Z","snapshot_observed_at":"2026-07-06T18:53:35.627045Z","submitted_at":"2024-07-29T17:52:40Z","title":"Physics of Language Models: Part 2.1, Grade-School Math and the Hidden Reasoning Process","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.20311","snapshot_observed_at":"2026-08-06T15:18:11.562851Z","title":"Physics of language models: Part 2.1, grade-school math and the hidden reasoning process","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-08T20:51:05.150695Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:11.562851Z"},"links":{"cited_paper":"/paper/2407.20311","citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:713c9de2b2dd666d918726b99be40e5df1211899f503e8c06d629886b0c94e6f","observation_id":"0430b251-0c01-405d-aa74-f5d5405903f4","resolution":{"observed_at":"2026-08-06T15:18:11.562851Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.17003","last_updated":"2025-04-07T07:23:33Z","snapshot_observed_at":"2026-08-07T07:23:22.071348Z","submitted_at":"2024-08-30T04:35:59Z","title":"Safety Layers in Aligned Large Language Models: The Key to LLM Security","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.17003","snapshot_observed_at":"2026-08-06T15:18:11.656139Z","title":"Safety layers of aligned large language models: The key to llm security","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-08T20:51:05.150695Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:11.656139Z"},"links":{"cited_paper":"/paper/2408.17003","citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:0bfcc0e16d68155c5c7ce4935e49fd985a44945826c2b9c81d0c525d742db943","observation_id":"24787934-f6cc-4630-b1bd-907232ad4328","resolution":{"observed_at":"2026-08-06T15:18:11.656139Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:16.703682Z","title":"Analyzing and editing inner mechanisms of backdoored language 353 models","venue":null,"work_id":"b8221a18-6312-4354-b308-618cb3c0e6d1","year":2024},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-08T20:51:05.150695Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:11.725954Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:bbad6a88facd8250527bf76252e7cf5e66c1cb2caa63b7245fc29430790265f0","observation_id":"1c1b7f17-19c6-43d3-be0f-362314390db6","resolution":{"observed_at":"2026-08-06T15:18:16.713723Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:16.671271Z","title":"The philosopher’s stone: Trojaning plugins of large language models","venue":null,"work_id":"e859bf87-4013-40ff-b481-8a78637bc327","year":2025},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-08T20:51:05.150695Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:11.823317Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:054e9283242a45f3ed05e6b67d99d92607ea80d8b4c1faf403fc950c5fbf4715","observation_id":"56852d66-f954-4ae3-ae65-89b2409bf478","resolution":{"observed_at":"2026-08-06T15:18:16.676773Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.01405","last_updated":"2025-03-03T06:14:14Z","snapshot_observed_at":"2026-07-06T16:26:38.284922Z","submitted_at":"2023-10-02T17:59:07Z","title":"Representation Engineering: A Top-Down Approach to AI Transparency","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.01405","snapshot_observed_at":"2026-08-06T15:18:11.985626Z","title":"Rep- resentation engineering: A top-down approach to ai transparency","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-08T20:51:05.150695Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:11.985626Z"},"links":{"cited_paper":"/paper/2310.01405","citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:1df74b372c57fc3e4b085078059ad3b74e1fc86f9192a6125289123cd2587c75","observation_id":"431b9a5c-b632-4067-80a3-e8f713e2a3ad","resolution":{"observed_at":"2026-08-06T15:18:11.985626Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:16.629125Z","title":"Discovering latent knowledge in language models without supervision","venue":null,"work_id":"318e2430-d23f-4272-ac1b-3c77cc99e4e3","year":2023},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-08T20:51:05.150695Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:12.087211Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:afd61bafc2110d94d4cae76e2820146face2e4363f923c4f012ed7295fb4df1c","observation_id":"f917fc5b-144f-4fdf-a89b-bc3bf07112c4","resolution":{"observed_at":"2026-08-06T15:18:16.637735Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2407.11421","last_updated":"2026-08-04T07:49:28Z","snapshot_observed_at":"2026-08-07T23:08:58.418960Z","submitted_at":"2024-07-16T06:27:22Z","title":"States Hidden in Hidden States: Implicit Discrete State Representations Emerge in LLMs' Hidden States","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.11421","snapshot_observed_at":"2026-08-06T15:18:12.227492Z","title":"States hidden in hidden states: Llms emerge dis- crete state representations implicitly","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-08T20:51:05.150695Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:12.227492Z"},"links":{"cited_paper":"/paper/2407.11421","citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:1bbda2ce9cb83481626a73dcaf2a8561d8ebd5dd7cdfcba9adadb23c67ebef51","observation_id":"954faefb-c6f3-4801-9887-964397d20c4f","resolution":{"observed_at":"2026-08-06T15:18:12.227492Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:16.599031Z","title":"Informa- tion leakage in embedding models","venue":null,"work_id":"5b031ed3-a62e-478a-bf79-30f988e6e140","year":2020},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-08T20:51:05.150695Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:12.365406Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:7f7ddc0bb5949724a7d266ec1df274218ce93af31e3e3ab67660531cfe191b20","observation_id":"2606ca8b-2a75-43e6-bc16-78a1cab6c900","resolution":{"observed_at":"2026-08-06T15:18:16.607671Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:16.568862Z","title":"Text embeddings reveal (almost) as much as text","venue":null,"work_id":"fcd64480-3d99-43c9-bec3-b72e1b069ffb","year":2023},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-08T20:51:05.150695Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:12.529047Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:49752bae2adcb4db3f88c24601bc3fee10170f9f342b05b621e3a9a3edb5dd4c","observation_id":"f728d9fe-11ec-4134-a263-0ee489819bd9","resolution":{"observed_at":"2026-08-06T15:18:16.577797Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:16.538800Z","title":"Morris, and Vitaly Shmatikov","venue":null,"work_id":"75a1030e-5881-4ee7-a866-0f2fe7e9f5d2","year":2024},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-08T20:51:05.150695Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:12.743946Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:5072ea7476cb49f2f917243c8a0dea7eeca3a9ef8a2a286af89f18a465e5934e","observation_id":"fac6124f-54e7-4c72-b5ec-51fe7b44ad70","resolution":{"observed_at":"2026-08-06T15:18:16.551489Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:12.851007Z","title":"Deep learning and the information bottleneck principle","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-08T20:51:05.150695Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:12.851007Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:b5709817e6402f42ee06a0b4261395aef127d0a8e2674b1c7297af5504841d9b","observation_id":"90da299d-d454-49ec-a478-e67960d1005f","resolution":{"observed_at":"2026-08-06T15:18:12.851007Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:12.888220Z","title":"Privacy risks of general-purpose language models","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-08T20:51:05.150695Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:12.888220Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:8d3ffb7b4ad1dd3691cbb3a1182321b6094135a5ffe76d654ab1fb26109294ef","observation_id":"e49b102c-b45c-4d1c-8011-22c7df26c3bd","resolution":{"observed_at":"2026-08-06T15:18:12.888220Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.03010","last_updated":"2023-05-04T17:31:41Z","snapshot_observed_at":"2026-08-06T21:09:36.639494Z","submitted_at":"2023-05-04T17:31:41Z","title":"Sentence Embedding Leaks More Information than You Expect: Generative Embedding Inversion Attack to Recover the Whole Sentence","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.03010","snapshot_observed_at":"2026-08-06T15:18:12.894923Z","title":"Sentence embedding leaks more information than you expect: Generative embedding inversion attack to recover the whole sentence","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-08T20:51:05.150695Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:12.894923Z"},"links":{"cited_paper":"/paper/2305.03010","citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:d5bc5d5acddae65669b58798c107d75b787ef587a0d4ed5a8ee42e89309e9572","observation_id":"967164c8-6488-436c-a749-dcaaa8905e19","resolution":{"observed_at":"2026-08-06T15:18:12.894923Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:16.502662Z","title":"Language model inversion","venue":null,"work_id":"a65485b5-1c37-4540-b5cc-86f2ab00ce8c","year":2024},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-08T20:51:05.150695Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:12.903985Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:22525f24e45ca4678a42539813ac523114833423e0dd41148e41182d46c3d1e9","observation_id":"4791b59f-abac-47be-921e-bac97e85adb8","resolution":{"observed_at":"2026-08-06T15:18:16.518646Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:16.447357Z","title":"TAG: gradient attack on transformer-based lan- guage models","venue":null,"work_id":"9ff670c9-6b54-4573-8c5d-ee32acc7ae35","year":2021},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-08T20:51:05.150695Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:12.909947Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:f7521b7688149e8695bbc04c3db589b27a838142256f997bd4da8a7400344142","observation_id":"6a7aff0e-4229-4d2d-8a50-8608a06617c8","resolution":{"observed_at":"2026-08-06T15:18:16.460402Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:16.418148Z","title":"Uncovering gradient inversion risks in prac- tical language model training","venue":null,"work_id":"883afbd5-96f3-4314-8ebb-671fea393f3f","year":2024},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-08T20:51:05.150695Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:12.927584Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:73f6d87ebde5d92f5f4f2ed1178b6367ab916a5014440da0b598bc68082085e3","observation_id":"44fede27-adfc-4a43-933e-232ea587f7b4","resolution":{"observed_at":"2026-08-06T15:18:16.424279Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:12.945529Z","title":"Unveiling the vulnerability of private fine-tuning in split-based frameworks for large language models: A bidirectionally enhanced attack","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-08T20:51:05.150695Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:12.945529Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:dc6c0c59decd9bf66ab93d88e7612aaa84101d559e4d65c46f290667ed061e8e","observation_id":"01a82efd-e28b-4748-9121-3bdf592266ce","resolution":{"observed_at":"2026-08-06T15:18:12.945529Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:12.954668Z","title":"How alignment and jail- break work: Explain LLM safety through intermediate hidden states","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-08T20:51:05.150695Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:12.954668Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:8015f18fe7d7cfc3e5c348c3bce33cb7611d8f0a14a6ac0ff47bde0b7ca0ea8c","observation_id":"3347f4b6-adc8-46c2-8f9b-99334ca951b5","resolution":{"observed_at":"2026-08-06T15:18:12.954668Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:16.378136Z","title":"Enterprise privacy at openai - does ope- nai review my business data? https://openai.com/ enterprise-privacy/, 2024","venue":null,"work_id":"ee610a76-01f9-4961-8e00-a772bec82c7f","year":2024},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-08T20:51:05.150695Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:12.965424Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:2e40e56a2b5bde5069798b8d2fb7d5795ff00158a233484b00ee063b207072c9","observation_id":"9df434a8-eaa9-4b4c-80d8-2e3bb166f7a3","resolution":{"observed_at":"2026-08-06T15:18:16.386450Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.18653/v1/2023.acl-demo.54","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:13.556354Z","title":"Petals: Collaborative inference and fine-tuning of large mod- els","venue":null,"work_id":"02321003-8b6b-443d-b7c0-8b747967de0e","year":2023},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-08T20:51:05.150695Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:12.977449Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:2cd07885e233494b345ce7bf197432437dff8829fe99d9261d3c646ab7b8436e","observation_id":"3e31651f-662e-4707-a556-30b145009e71","resolution":{"observed_at":"2026-08-06T15:18:13.566641Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:12.985874Z","title":"Shad- ownet: A secure and efficient on-device model inference system for convolutional neural networks","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-08T20:51:05.150695Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:12.985874Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:8c357c7c73dace942d707dcf58bf5c70829619a63d8ae0b199c5045900cc942d","observation_id":"61381ed4-455c-41cc-9e64-99f392de3e76","resolution":{"observed_at":"2026-08-06T15:18:12.985874Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:16.343932Z","title":"Zhang, C","venue":null,"work_id":"0ffc4278-d188-400a-a860-52aba6d0158b","year":2024},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-08T20:51:05.150695Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:13.004676Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:9313a89432711c8f8bd4c5272d6d1624162b54e5360dc18a2e810671f271c231","observation_id":"0bfd5174-c108-4d3a-a493-d87c3ae3cec4","resolution":{"observed_at":"2026-08-06T15:18:16.357745Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2112.07899","last_updated":"2021-12-15T05:33:27Z","snapshot_observed_at":"2026-07-06T12:18:53.315820Z","submitted_at":"2021-12-15T05:33:27Z","title":"Large Dual Encoders Are Generalizable Retrievers","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2112.07899","snapshot_observed_at":"2026-08-06T15:18:13.013704Z","title":"Large dual encoders are generalizable retrievers","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-08T20:51:05.150695Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:13.013704Z"},"links":{"cited_paper":"/paper/2112.07899","citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:759c4d4c143b058021b9c58357940191d8dd58624ac215a150636707694e7278","observation_id":"27b1e83a-2e18-46da-ac61-f9f4464f1362","resolution":{"observed_at":"2026-08-06T15:18:13.013704Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:16.299492Z","title":null,"venue":null,"work_id":"bfd391ac-d2e7-4ea0-95b8-c4e7a53e4ad6","year":2025},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-08T20:51:05.150695Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:13.026104Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:051dc1ebe363960532ce726470792176b30066fa8f546b1b6d3e8620b76fbebd","observation_id":"0cbbfb8c-93c5-4775-966a-a27af48d13aa","resolution":{"observed_at":"2026-08-06T15:18:16.312554Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2408.08946","last_updated":"2026-05-26T01:00:46Z","snapshot_observed_at":"2026-07-06T19:01:41.274385Z","submitted_at":"2024-08-16T17:58:49Z","title":"Authorship Attribution in the Era of LLMs: Problems, Methodologies, and Challenges","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.08946","snapshot_observed_at":"2026-08-06T15:18:13.046655Z","title":"Authorship attribution in the era of llms: Problems, methodologies, and challenges","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-08T20:51:05.150695Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:13.046655Z"},"links":{"cited_paper":"/paper/2408.08946","citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:751b499ce50913012843e640480dd385fb40c2399f6421f6dea23e80c20df234","observation_id":"7aa5887c-b8cb-484a-be61-7b79921b2e47","resolution":{"observed_at":"2026-08-06T15:18:13.046655Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:16.256784Z","title":"LLM internal states reveal hallucination risk faced with a query","venue":null,"work_id":"5d2126e3-ef2d-4353-9f35-88e64e41a6ba","year":null},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-08T20:51:05.150695Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:13.056980Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:a22aaa68e3a90943cb71f44963ce9962eba20837b1d1d0707cccaa670f8d6956","observation_id":"376faf45-53e5-4be9-bd3a-dd3d5b8cc66c","resolution":{"observed_at":"2026-08-06T15:18:16.266871Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:16.208535Z","title":"Get my drift? catching llm task drift with activation deltas","venue":null,"work_id":"71c2aa25-e2d6-4e8d-a608-e0fcf053842a","year":2025},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-08T20:51:05.150695Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:13.087000Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:1563646b6eb6923dac2b8ed66c8197a246ed6715bf31a871543d92bc8226bedc","observation_id":"d3a107a7-cf65-4209-9205-d1ce1f02b612","resolution":{"observed_at":"2026-08-06T15:18:16.221659Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:16.163031Z","title":null,"venue":null,"work_id":"c1ebd89e-2447-4e5d-9333-457d7629ea5f","year":2023},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-08T20:51:05.150695Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:13.098550Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:eb528d91cc09dc17db56fb8eeb272a8c990d3d06adc53f9904ef2087628cfc1c","observation_id":"b7868292-8313-4b23-85c2-4579f3d45038","resolution":{"observed_at":"2026-08-06T15:18:16.179572Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:16.108057Z","title":"Dataset condensation with distribution matching","venue":null,"work_id":"e6fc583d-0de5-44b5-9443-53f922d7e8aa","year":2023},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-08T20:51:05.150695Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:13.109794Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:12d9bb45edff2465cd05b16cbe165b785682afc25f68a6499b665a048cf4d3ea","observation_id":"b6366e9f-6abb-43e2-8def-51aae006a329","resolution":{"observed_at":"2026-08-06T15:18:16.126402Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2409.12186","last_updated":"2024-11-12T13:24:25Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-09-18T17:57:57Z","title":"Qwen2.5-Coder Technical Report","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.12186","snapshot_observed_at":"2026-08-06T15:18:13.123343Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-08T20:51:05.150695Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:13.123343Z"},"links":{"cited_paper":"/paper/2409.12186","citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:cb4f97a506cfa527f4bf32deb079e37749803630a6a544d088c363ab5b7cf323","observation_id":"71e414fb-89eb-4d52-a710-b6ff434af4a9","resolution":{"observed_at":"2026-08-06T15:18:13.123343Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:16.063073Z","title":"Bio-medical: A high- performance biomedical language model","venue":null,"work_id":"00af67c9-7510-46d1-89d8-588dc071584f","year":2024},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-08T20:51:05.150695Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:13.134347Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:adcb03eb59e70b4232ff0531cb680e50be1ca599769976dc8b202c2b11986073","observation_id":"2207f9f2-2a4d-4536-9dcb-a54c9af0e94b","resolution":{"observed_at":"2026-08-06T15:18:16.074939Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:16.025087Z","title":"Introducing llama 3.1: Our most capable mod- els to date","venue":null,"work_id":"fe97ca8d-2932-40b2-bb5a-e7d8cddfafbd","year":2024},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-08T20:51:05.150695Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:13.153734Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:10ccb52a6860ee1bb01a5f15a987fef938af25e9d2bd372c7bbb45fdf24d239b","observation_id":"b60ca049-91d1-4e14-81d1-0c7858af943c","resolution":{"observed_at":"2026-08-06T15:18:16.036630Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:13.165866Z","title":"C-pack: Packaged resources to advance general chinese embedding, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-08T20:51:05.150695Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:13.165866Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:242bf02ba1127edfd829edad2762aac9744171e69524d98e1a5d111e9e9af874","observation_id":"9f4c58cf-41ad-4534-9156-3ef2e73dc072","resolution":{"observed_at":"2026-08-06T15:18:13.165866Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2210.07316","last_updated":"2023-03-19T13:37:01Z","snapshot_observed_at":"2026-07-06T14:04:58.943383Z","submitted_at":"2022-10-13T19:42:08Z","title":"MTEB: Massive Text Embedding Benchmark","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2210.07316","snapshot_observed_at":"2026-08-06T15:18:13.180242Z","title":"Mteb: Massive text embedding bench- mark","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-08T20:51:05.150695Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:13.180242Z"},"links":{"cited_paper":"/paper/2210.07316","citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:a1018714f05b813ca8e7d26c71d4136442f2306703e081fdaa06446b12cba04a","observation_id":"e0ecbe91-0bd4-4ae6-aa68-b2aa61e9a5f2","resolution":{"observed_at":"2026-08-06T15:18:13.180242Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:15.951219Z","title":"Massive text em- bedding benchmark (mteb) leaderboard","venue":null,"work_id":"d9b1509f-f295-424c-8a7a-a2e012a7f5d5","year":2024},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-08T20:51:05.150695Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:13.191714Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:190cacba20c8c1046825ed5fbe853b9215e1fbf7e82455e5b8397e1e58b97ad9","observation_id":"eada05d3-ab42-4c59-ad2c-a69ad79ce667","resolution":{"observed_at":"2026-08-06T15:18:15.964164Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:13.205759Z","title":"Decoupled weight decay regularization","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-08T20:51:05.150695Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:13.205759Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:f5b637a94beef646a560b798762d196601253121fce0058f0229171e9bc3e0c8","observation_id":"4816f1d6-6ad5-4b26-9b07-41042e20fa1d","resolution":{"observed_at":"2026-08-06T15:18:13.205759Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:13.218201Z","title":"Oliphant, Matt Haberland, Tyler Reddy, David Cournapeau, Evgeni Burovski, Pearu Peterson, Warren Weckesser, Jonathan Bright, Stéfan J","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-08T20:51:05.150695Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:13.218201Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:2bb082156e9b347e05680867d2ab55e69a8d14ca6f67c656b8b7ddb66feb44f3","observation_id":"82516d1b-3e31-4bd7-86b6-3684fb3c4b56","resolution":{"observed_at":"2026-08-06T15:18:13.218201Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:15.864575Z","title":"Ai medical dataset,","venue":null,"work_id":"f700bff2-15cf-41e1-9ec9-f4de3380a0ec","year":null},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-08T20:51:05.150695Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:13.233897Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:c47f07455077190e7bc2c214a51bebfbd931c10d61da5ce33c94bbaef8a33d0b","observation_id":"a42e5683-dc8d-4084-b57c-9e4415b4f083","resolution":{"observed_at":"2026-08-06T15:18:15.875387Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:15.568319Z","title":"mental_health_counseling_conversations (revision 9015341), 2024","venue":null,"work_id":"399495c3-c7ed-449b-883a-598d3fbf0300","year":2024},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-08T20:51:05.150695Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:13.249833Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:837a91255e24cbfeb1e54b289a8c57c5c54dc440729671cd258a11347784c879","observation_id":"c47542ea-44fd-41ec-9265-3ccdcbb8a263","resolution":{"observed_at":"2026-08-06T15:18:15.803098Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:13.258810Z","title":"Wizardcoder: Empowering code large language models with evol-instruct, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-08T20:51:05.150695Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:13.258810Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:cd7fa5694ef75bc6531faf0ec7b2c6d85c2e5808e758b596c4f4667fb1dd6a8d","observation_id":"77fb41d9-0453-4b03-bc44-3c9379c72421","resolution":{"observed_at":"2026-08-06T15:18:13.258810Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:15.493365Z","title":"Measuring coding challenge competence with apps","venue":null,"work_id":"cfdada1f-c421-4551-a74a-9825f7e91cd9","year":2021},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-08T20:51:05.150695Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:13.267306Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:7b1ff6871a3d7181189a69ba29cd6ccc5621dbddb0a4fdbdca5345136767636e","observation_id":"05b12bb2-8694-46b7-b70a-e7fcdf2df938","resolution":{"observed_at":"2026-08-06T15:18:15.499831Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:15.831229Z","title":null,"venue":null,"work_id":"cfdfe708-2388-48ed-8539-00082cad5e03","year":null},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-08T20:51:05.150695Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:13.240176Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:32a919bfb30288c28b837d51f04c51aed0cf4ba9b59646c9e5c41e5a88e8f1be","observation_id":"15d58311-d5bb-4fbf-ae28-2271bf6b054e","resolution":{"observed_at":"2026-08-06T15:18:15.841795Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:15.393659Z","title":"The magical effect of the bias term: Rope + bias = better length extrapolation","venue":null,"work_id":"e4442bbf-f8c3-4dae-9449-5316b6f6cf85","year":2023},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-08T20:51:05.150695Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:13.292275Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:c46c4c35e3724bfc6b339b3e0798a15e09c1659d410d84e5086ab47c8232a933","observation_id":"42f018a3-bed0-423f-9fa7-008ef425bf5a","resolution":{"observed_at":"2026-08-06T15:18:15.409207Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:15.363603Z","title":"Rush, and Thomas Wolf","venue":null,"work_id":"0bac6cdb-e2aa-488f-80ba-f39b6a43547b","year":2023},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-08T20:51:05.150695Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:13.301344Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:7ecc0542f9f886298193d506fec61e018886eeca6427804faa76b82b27ec969b","observation_id":"9cb62f25-d901-4f70-82f7-2c4ad1693ed3","resolution":{"observed_at":"2026-08-06T15:18:15.370746Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:15.335027Z","title":"QLoRA: Efficient finetuning of quan- tized LLMs","venue":null,"work_id":"707a70df-1901-4f25-ab07-28d976054996","year":2023},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-08T20:51:05.150695Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:13.307945Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:5e4a7b526ecc652af2af666ea49688dbe6225f64148ebab4024b426e9a8e458a","observation_id":"0d235904-3e23-4900-916b-6ccc4126d7c8","resolution":{"observed_at":"2026-08-06T15:18:15.342891Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:15.440733Z","title":"Big code models leaderboard","venue":null,"work_id":"52169465-eb58-4cb5-9ab6-d873e317329e","year":2025},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-08T20:51:05.150695Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:13.276386Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:f8904bb24051b81f30ab57dcc8ab688de188f7981146f6a1a0801b8acaf7e6bc","observation_id":"2362bd7d-6d5d-4af4-b7a7-33693d3efe68","resolution":{"observed_at":"2026-08-06T15:18:15.454181Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:13.327844Z","title":"Measuring massive multitask language understanding","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-08T20:51:05.150695Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:13.327844Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:16e4a105a1b955a616a50af048f11da662e630bbb7793b0161f65920612813c9","observation_id":"5a11c775-6f0f-49cf-9517-65e4f9e0adab","resolution":{"observed_at":"2026-08-06T15:18:13.327844Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:15.241074Z","title":"GAN you see me? enhanced data reconstruction attacks against split infer- ence","venue":null,"work_id":"69dcd7e9-f888-419d-83fb-87948a972c35","year":2023},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-08T20:51:05.150695Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:13.335767Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:bab6f068362e7d36b51b0f685c0571243b52cd2d02f1769675695956c6866a55","observation_id":"ef28114c-8527-4a71-a472-214e6b95498e","resolution":{"observed_at":"2026-08-06T15:18:15.249652Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:15.210617Z","title":"Unveiling the vulnerability of private fine-tuning in split-based frameworks for large language models: A bidirection- ally enhanced attack","venue":null,"work_id":"f5ca72a3-80d5-465e-8074-2e2f561bc5cd","year":2024},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-08T20:51:05.150695Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:13.341093Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:72657ff75a007bda7f86039ba08166264c5c72c1e13a8e9e8f545f6af61b55cb","observation_id":"007ca4be-51d9-48a7-becc-81e3e4946c92","resolution":{"observed_at":"2026-08-06T15:18:15.225632Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:13.320143Z","title":"Exploring the limits of transfer learning with a unified text-to-text transformer","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-08T20:51:05.150695Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:13.320143Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:aeb45b9a6248a3dc2f3616a87c70eb6e58e3ff7b418aa9e5beccb4934dfa5df3","observation_id":"c398fff8-78c2-4120-b45d-481af1ae8102","resolution":{"observed_at":"2026-08-06T15:18:13.320143Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.07585","last_updated":"2023-11-24T07:46:23Z","snapshot_observed_at":"2026-08-10T01:00:01.361549Z","submitted_at":"2023-11-07T09:39:22Z","title":"Input Reconstruction Attack against Vertical Federated Large Language Models","version":2},"cited_work":{"arxiv_id":"2311.07585","doi":null,"metadata_source":"pith","pith_arxiv_id":"2311.07585","snapshot_observed_at":"2026-08-06T15:18:14.029874Z","title":"Input Reconstruction Attack against Vertical Federated Large Language Models","venue":"cs.CL","work_id":"ca6ca7f4-d1c6-48ff-a1f2-0073a4aaac38","year":2023},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-08T20:51:05.150695Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:13.361777Z"},"links":{"cited_paper":"/paper/2311.07585","citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:b379ba8263d88f679a4fa361ed54a2d5c01d6deb6385f5e9f9d52c4276ea2522","observation_id":"22172b8d-a74f-4943-8a7c-0061febce836","resolution":{"observed_at":"2026-08-06T15:18:14.045437Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:15.167120Z","title":"A first look at efficient and secure on-device llm inference against kv leakage, 2024","venue":null,"work_id":"7e0290aa-5984-494b-81ee-b93320bc5756","year":2024},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-08T20:51:05.150695Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:13.368395Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:da3dfd6742c82378905795c0552a46b61fdd35111e431393d44bfff600d7bb5d","observation_id":"78a86351-427b-4420-9dd1-00079048df00","resolution":{"observed_at":"2026-08-06T15:18:15.178852Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:15.129942Z","title":"I know what you asked: Prompt leakage via kv-cache sharing in multi- tenant llm serving","venue":null,"work_id":"9912cc99-01e0-4ae1-b1a0-3f7295e14fce","year":2025},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-08T20:51:05.150695Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:13.378531Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:74200abdb5544ada555662b8a5261d34534ed76ed1d22b726399fcbbc4f54e1c","observation_id":"e19bcb69-35eb-481b-8a9f-fed084f44616","resolution":{"observed_at":"2026-08-06T15:18:15.141589Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:13.351062Z","title":"Learn what you want to unlearn: Unlearning inver- sion attacks against machine unlearning","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-08T20:51:05.150695Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:13.351062Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:71da59d0a647502bbaeb682da83911ad3c8940c0a2e2147553ddd87f9caa775b","observation_id":"f31256db-70de-40af-bcb7-d7a64a86190e","resolution":{"observed_at":"2026-08-06T15:18:13.351062Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.09291","last_updated":"2025-05-23T07:37:50Z","snapshot_observed_at":"2026-08-07T17:10:21.501300Z","submitted_at":"2025-03-12T11:36:29Z","title":"Prompt Inference Attack on Distributed Large Language Model Inference Frameworks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.09291","snapshot_observed_at":"2026-08-06T15:18:13.401749Z","title":"Prompt in- ference attack on distributed large language model in- ference frameworks","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-08T20:51:05.150695Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:13.401749Z"},"links":{"cited_paper":"/paper/2503.09291","citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:e44d009b6316481a69f673955e638400db177c3e833cf1694bc22c2dd7a7a848","observation_id":"75819577-18b7-4a2a-ae80-c09aebbe2827","resolution":{"observed_at":"2026-08-06T15:18:13.401749Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:15.083712Z","title":"Strengthening vm isolation with in- tegrity protection and more","venue":null,"work_id":"5421d788-c83b-45cd-ac43-f61b56b9250e","year":2020},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-08T20:51:05.150695Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:13.408595Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:0409189b582149c886df2cd2424d36ed7dc80c562641659fba22036337ed339c","observation_id":"cae81fb2-160f-4f15-93bd-aceba23fc9ca","resolution":{"observed_at":"2026-08-06T15:18:15.105085Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:15.041252Z","title":"Confidential Compute on NVIDIA Hopper H100","venue":null,"work_id":"53c4d6cd-60f5-42ee-b620-8c1f3283473e","year":2023},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-08T20:51:05.150695Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:13.417202Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:c17a21eb2fffa6c2504db870373bc1ed0c7fae6de07df3eb004bf2ae10131609","observation_id":"82d06373-da11-488c-84d9-31bccb24cc2d","resolution":{"observed_at":"2026-08-06T15:18:15.049885Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2025.00160","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:13.969224Z","title":"Prompt Inversion Attack against Collaborative Inference of Large Language Models","venue":null,"work_id":"fbd9ce96-7595-4270-bbce-5a3b87d6f7de","year":2025},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-08T20:51:05.150695Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:13.391146Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:19be2fa1f94384aa488b2ed2d70ff90cd68045b6dd5ca9877cddd901779a6fa0","observation_id":"d9b29448-37b0-4d41-91c4-f6961f66f055","resolution":{"observed_at":"2026-08-06T15:18:13.992964Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.02095","last_updated":"2024-12-10T13:54:18Z","snapshot_observed_at":"2026-08-09T16:34:46.005661Z","submitted_at":"2024-02-03T09:22:07Z","title":"Contrasting Adversarial Perturbations: The Space of Harmless Perturbations","version":3},"cited_work":{"arxiv_id":"2402.02095","doi":null,"metadata_source":"pith","pith_arxiv_id":"2402.02095","snapshot_observed_at":"2026-08-06T15:18:13.734435Z","title":"Contrasting Adversarial Perturbations: The Space of Harmless Perturbations","venue":"cs.LG","work_id":"99954ef8-a369-4ad8-bdd5-3c84ca46b5be","year":2024},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-08T20:51:05.150695Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:13.422527Z"},"links":{"cited_paper":"/paper/2402.02095","citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:ed3752cb376d5485974f1c5fd2b1ef1b247b93b50c832ccb3ffa6c24d95ac438","observation_id":"805db670-a3e7-4673-afc7-824a63ae0361","resolution":{"observed_at":"2026-08-06T15:18:13.740633Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:12.916947Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-08T20:51:05.150695Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":2021,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:12.916947Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:f681afd9f8a1e2bfca95ac917e01f5e13419ef6e863c353f2cdf68ecc02c012c","observation_id":"3631b4a7-ef11-4577-a1a9-c930e95ac110","resolution":{"observed_at":"2026-08-06T15:18:12.916947Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:12.624266Z","title":"doi: 10.18653/v1/2023.emnlp-main.765","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-08T20:51:05.150695Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":2023,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:12.624266Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:4de9ffd212dc9a9c01134c8170a4da4c94925b90715220123fc77edfaab576d1","observation_id":"db8f0af6-b897-4bb5-90cf-b9ce095dec5d","resolution":{"observed_at":"2026-08-06T15:18:12.624266Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:13.071579Z","title":"doi: 10.18653/v1/2024.blackboxnlp-1.6","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-08T20:51:05.150695Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:13.071579Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:9ef70de0af89a633bcbb9003a0f9a344aa034300e0b1695ab4a35f7fdcb57556","observation_id":"a4f1c573-a3f2-408f-a771-7b4d1639a46e","resolution":{"observed_at":"2026-08-06T15:18:13.071579Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-08T20:51:05.150695Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion"},"reference_resolution":{"displayed":72,"state_counts":{"malformed_identifier":1,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":33,"verified_exact":4,"verified_fuzzy":34},"total_outbound_references":72},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 10 August 2026, this Paper Citation Record lists 72 of 72 outbound references and 0 inbound Pith citation observations for arXiv:2507.16372."}