{"as_of":"2026-08-14T13:13:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:5f2b75b0df63ba1157ca85db1ee168ad48b23e5975430dcc28ff56ba7a1f2e65","coverage":[{"denominator":45,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":45,"source":"paper_references, paper_reference_links","source_observed_at":"2026-05-19T00:54:00.464780Z","state":"measured"},{"denominator":45,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":45,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-14T06:32:32.682623+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2508.06153/citation-record","integrity":"/paper/2508.06153/integrity","json":"/paper/2508.06153/citation-record.json","paper":"/paper/2508.06153"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2303.18223","last_updated":"2026-03-18T05:34:39Z","snapshot_observed_at":"2026-08-14T10:40:26.323157Z","submitted_at":"2023-03-31T17:28:46Z","title":"A Survey of Large Language Models","version":19},"cited_work":{"arxiv_id":"2303.18223","doi":"10.18653/v1/d16-1080","metadata_source":"pith","pith_arxiv_id":"2303.18223","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"A Survey of Large Language Models","venue":"cs.CL","work_id":"de1b42b5-4a0a-4b1f-8c78-1f7fe21be6c9","year":2023},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-08-10T23:15:05.642248Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"cited_paper":"/paper/2303.18223","citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:c66f375ae2415e8041e10349928a0ca0929d8cef79e15f216997648ccbde33f1","observation_id":"c66658e3-152d-4fcf-9ab2-0c7b7a0e34ac","resolution":{"observed_at":"2026-05-19T00:56:56.342271Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"A survey on evaluation of large language models.ACM transactions on intelligent systems and technology, 15(3):1–45","venue":null,"work_id":"a9075135-e1ef-4f62-89ff-20df37c58319","year":2024},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-08-10T23:15:05.642248Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:b0563233744a434576e0a78b6a4d36ea81f000c25127eed59177e4965fa256c0","observation_id":"801eb9fb-0502-43ba-aa55-3ec7b6b05ffe","resolution":{"observed_at":"2026-05-19T01:02:55.801758Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2305.14688","last_updated":"2025-03-05T02:28:39Z","snapshot_observed_at":"2026-08-13T11:34:57.212392Z","submitted_at":"2023-05-24T03:51:31Z","title":"ExpertPrompting: Instructing Large Language Models to be Distinguished Experts","version":2},"cited_work":{"arxiv_id":"2305.14688","doi":"10.48550/arxiv.2305.14688","metadata_source":"arxiv_reference","pith_arxiv_id":"2305.14688","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv:2305.14688 (2023)","venue":"arXiv (Cornell University)","work_id":"bee399c7-526d-4870-a5be-b19080306fdd","year":2023},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-08-10T23:15:05.642248Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"cited_paper":"/paper/2305.14688","citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:650f1dbe8009768ad1d844461a388a840982caaa96c6c61b96bc1d551cf32771","observation_id":"6a0151d1-5578-4879-8c21-4cc38d70bb5b","resolution":{"observed_at":"2026-05-19T00:56:56.348748Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-05-25T06:23:13.952053+00:00","source":"crossref_status_cache"},{"observed_at":"2026-05-25T06:23:13.952053+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"fbdb73c8-a500-43c7-86f5-606fed98e6d4","year":2024},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-08-10T23:15:05.642248Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:512763cf77c507b679a0919ab89b3c123070ae39b61b1e65a80c66c7bf8132b1","observation_id":"547fcee4-0566-4cd5-97dd-fa6f18efaa73","resolution":{"observed_at":"2026-05-19T01:02:55.891852Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2408.02416","last_updated":"2025-02-12T14:52:56Z","snapshot_observed_at":"2026-08-12T23:08:32.572709Z","submitted_at":"2024-08-05T12:20:39Z","title":"Why Are My Prompts Leaked? Unraveling Prompt Extraction Threats in Customized Large Language Models","version":2},"cited_work":{"arxiv_id":"2408.02416","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2408.02416","snapshot_observed_at":"2026-07-04T00:59:20.697040Z","title":"Why are my prompts leaked? unraveling prompt extraction threats in customized large language models","venue":null,"work_id":"f62c30e5-cb3a-4ddb-9276-4f22a7543008","year":2024},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-08-10T23:15:05.642248Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"cited_paper":"/paper/2408.02416","citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:d84922087512434f5a6ddfb4eb8e343778f560928f746153610960f4d2b1a040","observation_id":"8b8826cc-f58b-44a6-a5f9-b5353d3a9a5f","resolution":{"observed_at":"2026-05-19T00:56:56.354399Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Pleak: Prompt leaking attacks against large language model applications","venue":null,"work_id":"1751ec9c-37ae-4a06-b133-f8c7e19b8a89","year":2024},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-08-10T23:15:05.642248Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:e4f98e80ebb8590e7fdd2d33ec86283ba2029829d004361b2dc29e495a52f73e","observation_id":"dd30f6b5-82e6-4f1b-966a-902965e6673a","resolution":{"observed_at":"2026-05-19T01:02:55.843838Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Watch out for your agents! investigat- ing backdoor threats to llm-based agents.Advances in Neural Information Processing Systems, 37:100938–100964","venue":null,"work_id":"69aa7e88-21ee-4953-9f76-4b29b3480ba0","year":2024},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-08-10T23:15:05.642248Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:5551b1800b0683705baf9013e4c747efa73a269ba298937e093600cb72f42ef3","observation_id":"e1ea1d35-c63e-41b7-bf10-c8e8915c81bf","resolution":{"observed_at":"2026-05-19T01:02:55.834156Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"BadAgent: Inserting and activating backdoor attacks in LLM agents","venue":null,"work_id":"5d2f5344-f0ad-4760-8d8c-8ce28ce0ea2b","year":2024},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-08-10T23:15:05.642248Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:c46f550fe757750c4e83e61468890a61cf17027736e002b678a236db7ad11272","observation_id":"9572a3c2-f2fd-46b6-94ae-8f787393e5d8","resolution":{"observed_at":"2026-05-19T01:02:55.790224Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Badjudge: Backdoor vulnerabilities of llm-as-a-judge","venue":null,"work_id":"31602d60-cb11-45d1-b105-1484fcf731b8","year":2025},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-08-10T23:15:05.642248Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:7aa2cbd1aa53ee7680bf066a1f5777f9ebc47d926774a870bf8a357875d79a0c","observation_id":"a63a572d-e193-4a00-9e22-faa92b96aa55","resolution":{"observed_at":"2026-05-19T01:02:55.840915Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Backdoorllm: A comprehensive benchmark for backdoor attacks on large language models","venue":null,"work_id":"cdbcb156-d321-41c7-abe5-9f6db232f580","year":2024},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-08-10T23:15:05.642248Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:383ea69f2f1fca8d31d2b90caf11e4fba03901344127c656bd84457600a3778b","observation_id":"412be01e-10cf-49bb-90b9-f7380ada7816","resolution":{"observed_at":"2026-05-19T01:02:55.895089Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Backdoor attacks and countermeasures in natural language processing models: A comprehensive security review","venue":null,"work_id":"c747ad01-8ad3-48fa-8bb1-cbeaff66ac65","year":2025},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-08-10T23:15:05.642248Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:47a0adc3b614fb69ae59e769a57059e403121ead8d903438622d268d49fd248b","observation_id":"1d18c96c-628e-422b-9361-ecd32b633f1b","resolution":{"observed_at":"2026-05-19T01:02:55.888421Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"ELBA-bench: An efficient learning backdoor attacks benchmark for large language models","venue":null,"work_id":"64b773c7-641c-4eb8-9395-15dbe9746099","year":2025},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-08-10T23:15:05.642248Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:0523f89f8e07ff50aef4220a664e6f0366ef19ce82affd130e8be4c0ce8fd2dd","observation_id":"19e897b7-74c0-4b24-a40f-a3f708ad05e0","resolution":{"observed_at":"2026-05-19T01:02:55.870192Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"A backdoor attack against lstm-based text classification systems","venue":null,"work_id":"d0c7858e-a1a5-446b-9ad3-89c03ff71713","year":2019},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-08-10T23:15:05.642248Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:94153a742105e979bfb69e3eaf8bf33f5a4dec93acf6b7257fbedc57d118ba78","observation_id":"3e686572-76d0-409b-b7e0-d2a92a4c0506","resolution":{"observed_at":"2026-05-19T01:02:55.866684Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Badnl: Backdoor attacks against nlp models with semantic-preserving improvements","venue":null,"work_id":"da9bb959-ec1c-4923-837f-39827187871b","year":null},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-08-10T23:15:05.642248Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:c9c3395958a9923191831ae67630da05573f2421ec0d6005f2549602501f738d","observation_id":"6d2b331d-e60d-4132-8bdf-e00e13314489","resolution":{"observed_at":"2026-05-19T01:02:55.783829Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T02:15:55.937471Z","title":null,"venue":null,"work_id":"a3c6a1e4-c134-4ac7-9434-fb6e64d379e3","year":null},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-08-10T23:15:05.642248Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:baec97a0ffafa652512814526578fe7ec6615a872edd7eb2c081e6e84b40ff1d","observation_id":"d1ea7c69-5518-49ed-8053-7eb9caf27fe4","resolution":{"observed_at":"2026-05-19T01:02:55.816483Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Badchain: Backdoor chain-of-thought prompting for large language models","venue":null,"work_id":"6d9cdd70-02ef-471d-b3a1-a77926a25cd9","year":2024},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-08-10T23:15:05.642248Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:eaa4fc4c3bd4b76aff6f60de4de6ad0aa3507f2f021d04203d6e6f3c0501bbdd","observation_id":"489c051c-e2a0-4e0c-bd87-4335541a9c2e","resolution":{"observed_at":"2026-05-19T01:02:55.813312Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Instruction backdoor attacks against customized LLMs","venue":null,"work_id":"043edb37-252a-43ac-afb3-5b43588bd417","year":2024},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-08-10T23:15:05.642248Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:37f8a57d488b454f8e3fd7a92013e374a62a5497b6a0a9e633180c1e7181d57b","observation_id":"3f088405-88d0-4a88-a352-8cd433fe6771","resolution":{"observed_at":"2026-05-19T01:02:55.837697Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"RAP: Robustness-Aware Perturbations for defending against backdoor attacks on NLP models","venue":null,"work_id":"cffc3fa9-7070-4e24-b524-8d1d4ded2a72","year":2025},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-08-10T23:15:05.642248Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:1074f98f20e3ce9f5a994d40d6bc4d8389096fc110e4d065d4c5ed1adc6d0e0d","observation_id":"f1c78a3c-4c85-4baf-92dc-4d7e987d29ac","resolution":{"observed_at":"2026-05-19T01:02:55.822324Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Ranasinghe, and Hyoungshick Kim","venue":null,"work_id":"e4c57662-97f5-41cf-8e31-3a8e88a93252","year":2022},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-08-10T23:15:05.642248Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:67a68b197ce53d1ee55e92825a5a6c9d4594751bd0660b27efe8ec1d65c5375d","observation_id":"79be21e6-deaa-4de0-94ac-ec9a49197220","resolution":{"observed_at":"2026-05-19T01:02:55.830959Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"IMBERT: Making BERT immune to insertion- based backdoor attacks","venue":null,"work_id":"90c7995e-1bf8-40b3-bf26-cb96606bf007","year":2023},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-08-10T23:15:05.642248Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:bc7ae73a45d6024cdee5c9e69fae3c28f3b3b2da0644b9deb947cdca5d8bca85","observation_id":"df84b96a-63e7-4608-8be0-612c97013fc5","resolution":{"observed_at":"2026-05-19T01:02:55.856624Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Mitigating backdoor poisoning attacks through the lens of spurious correlation","venue":null,"work_id":"4bf4e31b-0d49-44a5-9918-19e3c0160e52","year":2023},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-08-10T23:15:05.642248Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:33aee08de308f98c821a538a6ef919e08103057c122a4228fceb09bec7f6a2a6","observation_id":"4c576e84-07d4-4283-bd09-b5756835add2","resolution":{"observed_at":"2026-05-19T01:02:55.816903Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"WeDef: Weakly supervised backdoor defense for text classification","venue":null,"work_id":"93e74133-d979-469d-890a-e297b3e649af","year":2022},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-08-10T23:15:05.642248Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:357e91ebdaf96f49c8783505dcacee5ab36cfe120c6da29fc1827d42112e83bb","observation_id":"0b555090-68dc-45ad-bf7a-232bff3b39e3","resolution":{"observed_at":"2026-05-19T01:02:55.810323Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Textguard: Provable defense against backdoor attacks on text classification","venue":null,"work_id":"98ee278c-2f88-4cff-84ce-19614902e306","year":2023},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-08-10T23:15:05.642248Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:2b1055ef66ac077a880c48ba9543bd89a6afbded7c5ecfaeb517ffa66afff2c3","observation_id":"c4e2ceb5-5404-4d67-957b-48f75c9228a8","resolution":{"observed_at":"2026-05-19T01:02:55.780687Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Defense against backdoor attack on pre-trained language models via head pruning and attention normalization","venue":null,"work_id":"1a2e38f0-69a1-4486-af2b-0678b065953a","year":2024},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-08-10T23:15:05.642248Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:9a9ee49bc5baf95e94be5c7c8295d0083867e2abae9e57eaead79ad36b288083","observation_id":"a606bc3e-7c3f-42a0-aee3-bb254506727e","resolution":{"observed_at":"2026-05-19T01:02:55.853268Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"ONION: A simple and effective defense against textual backdoor attacks","venue":null,"work_id":"7a988a88-085b-484c-bc56-bbeea0b5d8fa","year":2021},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-08-10T23:15:05.642248Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:8fb5d516f92af381b72986fc23af62adfcdeaa04e3141c5057426420e6b7469c","observation_id":"fc653ee4-90d1-44e8-b4ec-c105c8aada67","resolution":{"observed_at":"2026-05-19T01:02:55.813010Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Mitigating backdoor attacks in lstm-based text classification systems by backdoor keyword identification","venue":null,"work_id":"a4dbd2b3-eb16-45be-8259-d07c5ae76b64","year":2021},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-08-10T23:15:05.642248Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:2466c20ec9e282d0b436c399b810c2683aa62c50dd18b9006511fe36abde3d47","observation_id":"c9de92a9-2def-414c-af0b-ecd6488b4c35","resolution":{"observed_at":"2026-05-19T01:02:55.797747Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Large language models are zero-shot reasoners","venue":null,"work_id":"a675a655-5dd0-48a5-a9c3-dc7533589a67","year":2022},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-08-10T23:15:05.642248Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:fb1b3ef99c3dfd3ff0ee3bc3b75b746fadc6ec95723cbc6f7ca2826c73e5ed2b","observation_id":"3ca415c3-e0f8-4338-bd53-55e601e806e1","resolution":{"observed_at":"2026-05-19T01:02:55.879502Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Chain-of-scrutiny: Detecting backdoor attacks for large language models","venue":null,"work_id":"8fa0d4db-1e4f-40aa-8738-224502617a37","year":2024},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-08-10T23:15:05.642248Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:4e2bf9c6b6a4815dd5dabf10591c8a6998d18b2a37d8532d5f2394ca28327023","observation_id":"97c90c4a-ff3d-4445-ad7a-2d1afaaa99d3","resolution":{"observed_at":"2026-05-19T01:02:55.828357Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Hidden killer: Invisible textual backdoor attacks with syntactic trigger","venue":null,"work_id":"f1a6c0c8-2e85-48ac-a684-e0eba17b910e","year":2021},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-08-10T23:15:05.642248Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:c74371933d2b81f9b6addb6f349b9e362ea66e2e69ca50528ad84ae29eb509f5","observation_id":"e93fb3a1-f68b-405e-9903-87263927a14c","resolution":{"observed_at":"2026-05-19T01:02:55.873285Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Hidden trigger backdoor attack on NLP models via linguistic style manipulation","venue":null,"work_id":"5bbf883d-fca0-49a7-a789-69382ece3ce8","year":2022},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-08-10T23:15:05.642248Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:7b8e0bddaa6ad0d273f919f6670633a7d8f762ace10dda0690b37f43a18a8fcb","observation_id":"35e8cf6c-bef7-4e24-91f7-14663d827020","resolution":{"observed_at":"2026-05-19T01:02:55.804182Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"BITE: Textual backdoor attacks with iterative trigger injection","venue":null,"work_id":"a948a4d2-d1ae-49e7-803b-c67f715e3484","year":null},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-08-10T23:15:05.642248Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:596df7da914ed6fd4f266cc7ccc196bc1044ec8bf9c8e6a3712b83a4b0dc724c","observation_id":"90e195c7-00ca-4647-976e-caab0e3a6399","resolution":{"observed_at":"2026-05-19T01:02:55.863159Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T14:26:21.198691Z","title":null,"venue":null,"work_id":"c69dcc4d-85af-4249-accc-cbae1a0e230c","year":null},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-08-10T23:15:05.642248Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:7002630224942247e5e88e0f7b93caacd40b91da47738543385bbb7c3892f2b9","observation_id":"99378d66-824d-41f1-bd8a-be0318667c0a","resolution":{"observed_at":"2026-05-19T01:02:55.787066Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Backdoor NLP models via AI-generated text","venue":null,"work_id":"3e89a107-5ecf-4cb0-80e7-30d76ba770df","year":2024},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-08-10T23:15:05.642248Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:e9f27127757939e2db16c0b7fb173a11479b4df451c71ac844b8a6e94b598213","observation_id":"6873d519-30a9-4719-b3a6-246f10211395","resolution":{"observed_at":"2026-05-19T01:02:55.882063Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"ChatGPT as an attack tool: Stealthy textual backdoor attack via blackbox generative model trigger","venue":null,"work_id":"6f027425-ea82-412e-a8ba-e057ce8be122","year":2024},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-08-10T23:15:05.642248Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:b89929082ad80d03d67e27f7079e892490b2266c110ed1ab5561bb86dc6b1e3b","observation_id":"f4ae16f6-1df9-47d9-923f-46119302b37b","resolution":{"observed_at":"2026-05-19T01:02:55.784612Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Badapex: Backdoor attack based on adaptive optimization mechanism of black-box large language models","venue":null,"work_id":"b8d37bc8-d59a-438a-a8de-f8332ea5ea5c","year":2025},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-08-10T23:15:05.642248Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:f6bd2c779e02cc718fedf020340444f2470ee126a5a1c411ff9f93d0fe669fac","observation_id":"b2d744af-6240-47e5-8b09-e1dbdc736855","resolution":{"observed_at":"2026-05-19T01:02:55.876381Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Bait: Large language model backdoor scanning by inverting attack target","venue":null,"work_id":"0057ab6e-fb44-4a5b-9014-7a525433576f","year":2025},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-08-10T23:15:05.642248Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:c6bd84be4f7fe452664885c7d29a8c9c291fddca1e456700c83ce16883442197","observation_id":"ec04944a-a257-437d-bc17-0dd1df1c43af","resolution":{"observed_at":"2026-05-19T01:02:55.885345Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Text classification via large language models","venue":null,"work_id":"f55492d2-60e9-4473-9315-0710b31d0fb2","year":2023},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-08-10T23:15:05.642248Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:4ea1f098c6176aba91360144f9ea97aaabb57e317f5561eb09ac51ef0f6f27e2","observation_id":"d85766bc-f7bd-45c0-9a69-fd93a7856083","resolution":{"observed_at":"2026-05-19T01:02:55.859459Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"When backdoors speak: Understanding LLM backdoor attacks through model-generated explanations","venue":null,"work_id":"f1f0ac37-87d8-4fdf-968b-39806f6ff197","year":2025},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-08-10T23:15:05.642248Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:a137abb5a0f463b473b43f840e369a7218f396b1c5f0872ee07d5479a8d174fd","observation_id":"51d9f6df-e1d8-4c4b-b1e1-51b21fa90742","resolution":{"observed_at":"2026-05-19T01:02:55.777125Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Manning, Andrew Ng, and Christopher Potts","venue":null,"work_id":"589a5bd1-8c32-43de-bfb4-dd1ab6be35a2","year":2013},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-08-10T23:15:05.642248Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:b32dbf726f5219aec710b58c1c3aa12e2b8744f3061399069dc476239a4f08cb","observation_id":"70ef969f-2d0e-4a02-a9ab-ab20f6c704f0","resolution":{"observed_at":"2026-05-19T01:02:55.846786Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Character-level convolutional networks for text classification","venue":null,"work_id":"375887b1-b220-489a-92db-b378b077347b","year":2015},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-08-10T23:15:05.642248Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:3f0325a9163e1867174157807802ed09755eca97bedf4f5ab4169b83e53cbdb8","observation_id":"43098378-51e9-4d34-a49a-40e569248c33","resolution":{"observed_at":"2026-05-19T01:02:55.850259Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Justifying recommendations using distantly-labeled reviews and fine-grained aspects","venue":null,"work_id":"262b9860-1e1f-4a49-8a7e-3c648ba29942","year":2019},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-08-10T23:15:05.642248Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:c7955dbaaa43277458e678312e3a12d0089e461e2ad9810aea6843f8e4b33eb8","observation_id":"84e11cb9-62e1-477c-97cb-5226056cdc99","resolution":{"observed_at":"2026-05-19T01:02:55.807003Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"CommonsenseQA: A question answering challenge targeting commonsense knowledge","venue":null,"work_id":"f695ccde-7494-4607-9cc7-6c0ba9788a6b","year":2019},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-08-10T23:15:05.642248Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:c0b51d9a142628d5efa09045d5126f3a1d5ed1951df5c1c4f81f773477ded56e","observation_id":"9a94b541-4674-4e52-aa96-8a7dfe7797ec","resolution":{"observed_at":"2026-05-19T01:02:55.767075Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Negative","venue":null,"work_id":"016393d2-d704-4ac6-b002-31e60c3a1bf2","year":2021},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-08-10T23:15:05.642248Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:1607ea9611e97139a00f043a6c4c76ce6802fca2a8a993ea566b06f54eb864ce","observation_id":"13f0dc42-07ab-4995-8b7c-9d73c16203fb","resolution":{"observed_at":"2026-05-19T01:02:55.837286Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"S\" and \"US","venue":null,"work_id":"4288908b-c40c-45f3-8e74-aa775358bf1f","year":null},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-08-10T23:15:05.642248Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:26999f49858993475be2ca72f3f293de618fdd66eff520c67d1350fa01f24691","observation_id":"6d59581e-8e7b-4228-a60e-ac2fddb1b5f5","resolution":{"observed_at":"2026-05-19T01:02:55.810037Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"S\" and \"US","venue":null,"work_id":"7f61c685-ab8c-44cf-8fe0-522e1a72835c","year":2025},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-08-10T23:15:05.642248Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:253aa34f465720162596be5ef6f4067af1c2c0af5fa802f47d8532a622feedc8","observation_id":"d1de05d7-7e21-4cd0-800e-e416efd1ea0b","resolution":{"observed_at":"2026-05-19T01:02:55.825356Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","latest_version":3,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-10T23:15:05.642248Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs"},"reference_resolution":{"displayed":45,"state_counts":{"malformed_identifier":0,"metadata_mismatch":1,"parse_uncertain":0,"unresolved":3,"verified_exact":2,"verified_fuzzy":39},"total_outbound_references":45},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"thesis":"As of 14 August 2026, this Paper Citation Record lists 45 of 45 outbound references and 0 inbound Pith citation observations for arXiv:2508.06153."}