{"as_of":"2026-08-09T07:46:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:1e9b84c649eb0fee69402028d3c028a70afc7a3f1f8608ba279ff0a958f70bef","coverage":[{"denominator":24,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":24,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-03T03:46:14.886511Z","state":"measured"},{"denominator":24,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":24,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2602.06911/citation-record","integrity":"/paper/2602.06911/integrity","json":"/paper/2602.06911/citation-record.json","paper":"/paper/2602.06911"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T03:46:14.881989Z","title":"(2024b) and He et al","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2602.06911","last_updated":"2026-06-02T23:27:30Z","snapshot_observed_at":"2026-08-09T04:40:58.975635Z","submitted_at":"2026-02-06T18:04:38Z","title":"TamperBench: Systematically Stress-Testing LLM Safety Under Fine-Tuning and Tampering","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-03T03:46:14.881989Z"},"links":{"citing_paper":"/paper/2602.06911"},"observation_digest":"sha256:c04a92792ac105df6dfee05cf95607aec13239921e3595a7118eb74e8a6d75de","observation_id":"6b3c9b1a-0ab6-4c15-a931-653918c625e9","resolution":{"observed_at":"2026-08-03T03:46:14.881989Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T03:46:14.886511Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2602.06911","last_updated":"2026-06-02T23:27:30Z","snapshot_observed_at":"2026-08-09T04:40:58.975635Z","submitted_at":"2026-02-06T18:04:38Z","title":"TamperBench: Systematically Stress-Testing LLM Safety Under Fine-Tuning and Tampering","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-03T03:46:14.886511Z"},"links":{"citing_paper":"/paper/2602.06911"},"observation_digest":"sha256:7c929d7bc3c8d74e7e60db708910b2b4f7ee9e268ae549c5fab31688df033b89","observation_id":"fca2ddee-d6b6-4785-bc9d-149889d497c6","resolution":{"observed_at":"2026-08-03T03:46:14.886511Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.04524","last_updated":"2025-02-17T02:32:33Z","snapshot_observed_at":"2026-07-06T19:28:39.495408Z","submitted_at":"2024-10-06T15:34:04Z","title":"Toward Secure Tuning: Mitigating Security Risks from Instruction Fine-Tuning","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.04524","snapshot_observed_at":"2026-08-03T03:46:14.790420Z","title":"Gemini Team","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.06911","last_updated":"2026-06-02T23:27:30Z","snapshot_observed_at":"2026-08-09T04:40:58.975635Z","submitted_at":"2026-02-06T18:04:38Z","title":"TamperBench: Systematically Stress-Testing LLM Safety Under Fine-Tuning and Tampering","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-03T03:46:14.790420Z"},"links":{"cited_paper":"/paper/2410.04524","citing_paper":"/paper/2602.06911"},"observation_digest":"sha256:79e4c52d65e4d21565fe8591509e9de38846fade6e7300dd5973989823032b09","observation_id":"cff9a125-00ba-468c-82d0-26bad94a0713","resolution":{"observed_at":"2026-08-03T03:46:14.790420Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T03:46:14.804852Z","title":"Luxi He, Mengzhou Xia, and Peter Henderson","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2602.06911","last_updated":"2026-06-02T23:27:30Z","snapshot_observed_at":"2026-08-09T04:40:58.975635Z","submitted_at":"2026-02-06T18:04:38Z","title":"TamperBench: Systematically Stress-Testing LLM Safety Under Fine-Tuning and Tampering","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-03T03:46:14.804852Z"},"links":{"citing_paper":"/paper/2602.06911"},"observation_digest":"sha256:d0d700ffc16fe2d0751fbcc031b8a808d6522645f2b8bf4acf74a3b8a92fd9aa","observation_id":"4568aedc-7d58-427e-81da-1c1653284209","resolution":{"observed_at":"2026-08-03T03:46:14.804852Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T03:46:14.809451Z","title":"URL https://openreview.net/forum?id= dp24p8i8Cg","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2602.06911","last_updated":"2026-06-02T23:27:30Z","snapshot_observed_at":"2026-08-09T04:40:58.975635Z","submitted_at":"2026-02-06T18:04:38Z","title":"TamperBench: Systematically Stress-Testing LLM Safety Under Fine-Tuning and Tampering","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-03T03:46:14.809451Z"},"links":{"citing_paper":"/paper/2602.06911"},"observation_digest":"sha256:81c66ca98bb5a6a22265959d40d20397049d60d22f621f785e78d9582e4d6460","observation_id":"2abbcde9-9b3d-4e54-821c-3b459b676b2f","resolution":{"observed_at":"2026-08-03T03:46:14.809451Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T03:46:14.813546Z","title":"ISBN 9798400702310","venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"2602.06911","last_updated":"2026-06-02T23:27:30Z","snapshot_observed_at":"2026-08-09T04:40:58.975635Z","submitted_at":"2026-02-06T18:04:38Z","title":"TamperBench: Systematically Stress-Testing LLM Safety Under Fine-Tuning and Tampering","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-03T03:46:14.813546Z"},"links":{"citing_paper":"/paper/2602.06911"},"observation_digest":"sha256:3df76d03b591980d3cf5d08824c807a3bf40fcb4637b0edce787e8af2e2138b6","observation_id":"608c4094-fe7d-42db-91c4-eba22db57296","resolution":{"observed_at":"2026-08-03T03:46:14.813546Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.09600","last_updated":"2025-09-05T04:54:29Z","snapshot_observed_at":"2026-07-06T19:02:11.267510Z","submitted_at":"2024-08-18T21:45:03Z","title":"Antidote: Post-fine-tuning Safety Alignment for Large Language Models against Harmful Fine-tuning","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.09600","snapshot_observed_at":"2026-08-03T03:46:14.818615Z","title":"URL https://openreview.net/forum?id=fMNRYBvcQN","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.06911","last_updated":"2026-06-02T23:27:30Z","snapshot_observed_at":"2026-08-09T04:40:58.975635Z","submitted_at":"2026-02-06T18:04:38Z","title":"TamperBench: Systematically Stress-Testing LLM Safety Under Fine-Tuning and Tampering","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-03T03:46:14.818615Z"},"links":{"cited_paper":"/paper/2408.09600","citing_paper":"/paper/2602.06911"},"observation_digest":"sha256:82ebf336acbcefd4ee48ddcdfaf7c54ed5e66c97dd28627bc390c86f0af48cb8","observation_id":"27f32768-a236-43d8-87c2-5e2116809be0","resolution":{"observed_at":"2026-08-03T03:46:14.818615Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-08-03T03:46:14.823403Z","title":"Fanxu Meng, Zhaohui Wang, and Muhan Zhang","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.06911","last_updated":"2026-06-02T23:27:30Z","snapshot_observed_at":"2026-08-09T04:40:58.975635Z","submitted_at":"2026-02-06T18:04:38Z","title":"TamperBench: Systematically Stress-Testing LLM Safety Under Fine-Tuning and Tampering","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-03T03:46:14.823403Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2602.06911"},"observation_digest":"sha256:3265a5ac1e088802fc9ce2179beb2922106cf295f8b9143f13ddfb18a9e00832","observation_id":"2b2ab5f4-48a5-42c5-940d-b15044b12f3a","resolution":{"observed_at":"2026-08-03T03:46:14.823403Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T03:46:14.828547Z","title":"Kyle O’Brien, Stephen Casper, Quentin Anthony, Tomek Korbak, Robert Kirk, Xander Davies, Ishan Mishra, Geoffrey Irving, Yarin Gal, and Stella Biderman","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.06911","last_updated":"2026-06-02T23:27:30Z","snapshot_observed_at":"2026-08-09T04:40:58.975635Z","submitted_at":"2026-02-06T18:04:38Z","title":"TamperBench: Systematically Stress-Testing LLM Safety Under Fine-Tuning and Tampering","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-03T03:46:14.828547Z"},"links":{"citing_paper":"/paper/2602.06911"},"observation_digest":"sha256:78c7b6ae036d29bd6ccbc10d5ab29768d76aafffa968b22088ce2c27ba268f21","observation_id":"cb19529a-d2d8-4a57-9bf5-95359a4f35ba","resolution":{"observed_at":"2026-08-03T03:46:14.828547Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T03:46:14.833451Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.06911","last_updated":"2026-06-02T23:27:30Z","snapshot_observed_at":"2026-08-09T04:40:58.975635Z","submitted_at":"2026-02-06T18:04:38Z","title":"TamperBench: Systematically Stress-Testing LLM Safety Under Fine-Tuning and Tampering","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-03T03:46:14.833451Z"},"links":{"citing_paper":"/paper/2602.06911"},"observation_digest":"sha256:c01698b4adf15e8001c74a232ee1254a651765002b676fdf2b37fba5cd79844f","observation_id":"cf606279-0b01-4581-b299-aef4377bcd57","resolution":{"observed_at":"2026-08-03T03:46:14.833451Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2303.08774","last_updated":"2024-03-04T06:01:33Z","snapshot_observed_at":"2026-08-07T07:30:12.213965Z","submitted_at":"2023-03-15T17:15:04Z","title":"GPT-4 Technical Report","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.08774","snapshot_observed_at":"2026-08-03T03:46:14.838787Z","title":"Punya Syon Pandey, Samuel Simko, Kellin Pelrine, and Zhijing Jin","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2602.06911","last_updated":"2026-06-02T23:27:30Z","snapshot_observed_at":"2026-08-09T04:40:58.975635Z","submitted_at":"2026-02-06T18:04:38Z","title":"TamperBench: Systematically Stress-Testing LLM Safety Under Fine-Tuning and Tampering","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-03T03:46:14.838787Z"},"links":{"cited_paper":"/paper/2303.08774","citing_paper":"/paper/2602.06911"},"observation_digest":"sha256:dfb2a684dfdf66dc794232fd875b6d0065e8174894516f6cb9b5939ef92e6a22","observation_id":"608a7c66-ce8d-4b04-83d4-bfae2e8e242b","resolution":{"observed_at":"2026-08-03T03:46:14.838787Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T03:46:14.843583Z","title":"ISBN 979-8-89176-195-7","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2602.06911","last_updated":"2026-06-02T23:27:30Z","snapshot_observed_at":"2026-08-09T04:40:58.975635Z","submitted_at":"2026-02-06T18:04:38Z","title":"TamperBench: Systematically Stress-Testing LLM Safety Under Fine-Tuning and Tampering","version":2},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-03T03:46:14.843583Z"},"links":{"citing_paper":"/paper/2602.06911"},"observation_digest":"sha256:5e241ee04e6f816c80f2d7f235ea95ec6fb2ea898b5aa42ab1e9ac31ce9d32b7","observation_id":"7013b613-6c98-4212-b40b-295c0e22d8b8","resolution":{"observed_at":"2026-08-03T03:46:14.843583Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T03:46:14.848303Z","title":"Alexandra Souly, Qingyuan Lu, Dillon Bowen, Tu Trinh, Elvis Hsieh, Sana Pandey, Pieter Abbeel, Justin Svegliato, Scott Emmons, Olivia Watkins, and Sam Toyer","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.06911","last_updated":"2026-06-02T23:27:30Z","snapshot_observed_at":"2026-08-09T04:40:58.975635Z","submitted_at":"2026-02-06T18:04:38Z","title":"TamperBench: Systematically Stress-Testing LLM Safety Under Fine-Tuning and Tampering","version":2},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-03T03:46:14.848303Z"},"links":{"citing_paper":"/paper/2602.06911"},"observation_digest":"sha256:db7df75b504e614ffa6072c838dcf5380333169ecd2b553be86c7919aa82297c","observation_id":"8193f5d1-1bd8-44cb-a112-509f52876962","resolution":{"observed_at":"2026-08-03T03:46:14.848303Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.09288","last_updated":"2023-07-19T17:08:59Z","snapshot_observed_at":"2026-08-07T12:56:43.323460Z","submitted_at":"2023-07-18T14:31:57Z","title":"Llama 2: Open Foundation and Fine-Tuned Chat Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.09288","snapshot_observed_at":"2026-08-03T03:46:14.852644Z","title":"Jiongxiao Wang, Jiazhao Li, Yiquan Li, Xiangyu Qi, Junjie Hu, Yixuan Li, Patrick McDaniel, Muhao Chen, Bo Li, and Chaowei Xiao","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2602.06911","last_updated":"2026-06-02T23:27:30Z","snapshot_observed_at":"2026-08-09T04:40:58.975635Z","submitted_at":"2026-02-06T18:04:38Z","title":"TamperBench: Systematically Stress-Testing LLM Safety Under Fine-Tuning and Tampering","version":2},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-03T03:46:14.852644Z"},"links":{"cited_paper":"/paper/2307.09288","citing_paper":"/paper/2602.06911"},"observation_digest":"sha256:d6aa621a5afb0bf22549b90e922d94b4c54ef69300df614edcd6fdb6de749267","observation_id":"2fdc5205-36e5-4029-b521-a08d041a72e9","resolution":{"observed_at":"2026-08-03T03:46:14.852644Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.02483","last_updated":"2023-07-05T17:58:10Z","snapshot_observed_at":"2026-08-08T18:11:45.725753Z","submitted_at":"2023-07-05T17:58:10Z","title":"Jailbroken: How Does LLM Safety Training Fail?","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.02483","snapshot_observed_at":"2026-08-03T03:46:14.857511Z","title":"Richard J Young","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.06911","last_updated":"2026-06-02T23:27:30Z","snapshot_observed_at":"2026-08-09T04:40:58.975635Z","submitted_at":"2026-02-06T18:04:38Z","title":"TamperBench: Systematically Stress-Testing LLM Safety Under Fine-Tuning and Tampering","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-03T03:46:14.857511Z"},"links":{"cited_paper":"/paper/2307.02483","citing_paper":"/paper/2602.06911"},"observation_digest":"sha256:338fa9ff7b363059ca4a59011407774cf0450c6cee3e9056e281b2a7620ffc32","observation_id":"635d0d1f-45f5-4ec1-8ad7-6709e7139deb","resolution":{"observed_at":"2026-08-03T03:46:14.857511Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.07911","last_updated":"2023-11-14T05:13:55Z","snapshot_observed_at":"2026-07-06T16:47:08.877195Z","submitted_at":"2023-11-14T05:13:55Z","title":"Instruction-Following Evaluation for Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.07911","snapshot_observed_at":"2026-08-03T03:46:14.862258Z","title":"Andy Zou, Long Phan, Justin Wang, Derek Duenas, Maxwell Lin, Maksym Andriushchenko, J Zico Kolter, Matt Fredrikson, and Dan Hendrycks","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.06911","last_updated":"2026-06-02T23:27:30Z","snapshot_observed_at":"2026-08-09T04:40:58.975635Z","submitted_at":"2026-02-06T18:04:38Z","title":"TamperBench: Systematically Stress-Testing LLM Safety Under Fine-Tuning and Tampering","version":2},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-03T03:46:14.862258Z"},"links":{"cited_paper":"/paper/2311.07911","citing_paper":"/paper/2602.06911"},"observation_digest":"sha256:ce25e1629289b77f8721c4bee132317f99239c86e395873f0650bc25b71d1e11","observation_id":"f31a21da-f524-4d98-b1b9-ad927f168a17","resolution":{"observed_at":"2026-08-03T03:46:14.862258Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.01405","last_updated":"2025-03-03T06:14:14Z","snapshot_observed_at":"2026-07-06T16:26:38.284922Z","submitted_at":"2023-10-02T17:59:07Z","title":"Representation Engineering: A Top-Down Approach to AI Transparency","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.01405","snapshot_observed_at":"2026-08-03T03:46:14.866706Z","title":"- ” = “ N O T H R E S H O L D","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2602.06911","last_updated":"2026-06-02T23:27:30Z","snapshot_observed_at":"2026-08-09T04:40:58.975635Z","submitted_at":"2026-02-06T18:04:38Z","title":"TamperBench: Systematically Stress-Testing LLM Safety Under Fine-Tuning and Tampering","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-03T03:46:14.866706Z"},"links":{"cited_paper":"/paper/2310.01405","citing_paper":"/paper/2602.06911"},"observation_digest":"sha256:0bb8fa654bd44f741c6ad3e37ea9e78a9e35858878f548a9828538a3ab470f1c","observation_id":"b65f4ac7-03a7-42dc-ae07-5bddd6793393","resolution":{"observed_at":"2026-08-03T03:46:14.866706Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T03:46:14.871822Z","title":"In contrast, MATH is only loosely aligned, reflecting its narrower domain and strict exact-match scoring","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2602.06911","last_updated":"2026-06-02T23:27:30Z","snapshot_observed_at":"2026-08-09T04:40:58.975635Z","submitted_at":"2026-02-06T18:04:38Z","title":"TamperBench: Systematically Stress-Testing LLM Safety Under Fine-Tuning and Tampering","version":2},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-03T03:46:14.871822Z"},"links":{"citing_paper":"/paper/2602.06911"},"observation_digest":"sha256:857228ce10273a386c4c36421206d2b0b804026c201afe124d7ece19f7763a6b","observation_id":"f15d922c-090f-4bc9-b23a-810b20f1fdfb","resolution":{"observed_at":"2026-08-03T03:46:14.871822Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1007/978-3-030-58526-6_23","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Danny Halawi, Alexander Wei, Eric Wallace, Tony Wang, Nika Haghtalab, and Jacob Steinhardt","venue":"Lecture notes in computer science","work_id":"3e54fabf-c753-494e-bfaf-ed52e9eac123","year":null},"citing_paper":{"arxiv_id":"2602.06911","last_updated":"2026-06-02T23:27:30Z","snapshot_observed_at":"2026-08-09T04:40:58.975635Z","submitted_at":"2026-02-06T18:04:38Z","title":"TamperBench: Systematically Stress-Testing LLM Safety Under Fine-Tuning and Tampering","version":2},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-03T03:46:14.800549Z"},"links":{"citing_paper":"/paper/2602.06911"},"observation_digest":"sha256:bcd6bfe9e1ac4aec55f4204a9f5b4cab764641d5fec5a07d8a10b6185287bddc","observation_id":"c6b62e94-65d5-4550-83c5-7ea3324b2509","resolution":{"observed_at":"2026-08-03T03:49:47.372290Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2108.07732","last_updated":"2021-08-16T03:57:30Z","snapshot_observed_at":"2026-08-02T19:23:53.535075Z","submitted_at":"2021-08-16T03:57:30Z","title":"Program Synthesis with Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2108.07732","snapshot_observed_at":"2026-08-03T03:46:14.775654Z","title":"Luke Bailey, Alex Serrano, Abhay Sheshadri, Mikhail Seleznyov, Jordan Taylor, Erik Jenner, Jacob Hilton, Stephen Casper, Carlos Guestrin, and Scott Emmons","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.06911","last_updated":"2026-06-02T23:27:30Z","snapshot_observed_at":"2026-08-09T04:40:58.975635Z","submitted_at":"2026-02-06T18:04:38Z","title":"TamperBench: Systematically Stress-Testing LLM Safety Under Fine-Tuning and Tampering","version":2},"reference_index":2021,"source":"pdf_text","source_observed_at":"2026-08-03T03:46:14.775654Z"},"links":{"cited_paper":"/paper/2108.07732","citing_paper":"/paper/2602.06911"},"observation_digest":"sha256:a36453b04d1527dd8f1621c2bc6c31cdaec0c4bf470eb6c1e05a9d23c15625bc","observation_id":"e417595e-ea0f-4b95-bf7e-fc2ac3fc5515","resolution":{"observed_at":"2026-08-03T03:46:14.775654Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T03:46:14.877674Z","title":"The current year is 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2602.06911","last_updated":"2026-06-02T23:27:30Z","snapshot_observed_at":"2026-08-09T04:40:58.975635Z","submitted_at":"2026-02-06T18:04:38Z","title":"TamperBench: Systematically Stress-Testing LLM Safety Under Fine-Tuning and Tampering","version":2},"reference_index":2022,"source":"pdf_text","source_observed_at":"2026-08-03T03:46:14.877674Z"},"links":{"citing_paper":"/paper/2602.06911"},"observation_digest":"sha256:42722996d8249b34592431ab31e93b6a1c508c5b1dc4f78c3d62788f67856db7","observation_id":"b5f71dea-bc28-4e6c-b53a-e7ab0e8ac61e","resolution":{"observed_at":"2026-08-03T03:46:14.877674Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T03:46:14.796043Z","title":"Eternal Sunshine of the Spotless Net: Selec- tive Forgetting in Deep Networks","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2602.06911","last_updated":"2026-06-02T23:27:30Z","snapshot_observed_at":"2026-08-09T04:40:58.975635Z","submitted_at":"2026-02-06T18:04:38Z","title":"TamperBench: Systematically Stress-Testing LLM Safety Under Fine-Tuning and Tampering","version":2},"reference_index":2023,"source":"pdf_text","source_observed_at":"2026-08-03T03:46:14.796043Z"},"links":{"citing_paper":"/paper/2602.06911"},"observation_digest":"sha256:04454d15adba9967f12f218bb76d056c3edf04c5dfd8b729e748add375f30fb9","observation_id":"5c7b69ad-4a16-441c-9139-d0d94dad80b3","resolution":{"observed_at":"2026-08-03T03:46:14.796043Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T03:46:14.785957Z","title":"URL https://openreview.net/forum?id=urjPCYZt0I","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2602.06911","last_updated":"2026-06-02T23:27:30Z","snapshot_observed_at":"2026-08-09T04:40:58.975635Z","submitted_at":"2026-02-06T18:04:38Z","title":"TamperBench: Systematically Stress-Testing LLM Safety Under Fine-Tuning and Tampering","version":2},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-03T03:46:14.785957Z"},"links":{"citing_paper":"/paper/2602.06911"},"observation_digest":"sha256:991ae866e489e6e06fa35245db45b13e363cf804ad398947d386b36a4afcb917","observation_id":"79061286-4169-4c8f-8f42-9b3413502b80","resolution":{"observed_at":"2026-08-03T03:46:14.785957Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.05030","last_updated":"2025-07-29T09:44:14Z","snapshot_observed_at":"2026-08-07T17:43:00.958834Z","submitted_at":"2024-03-08T04:22:48Z","title":"Defending Against Unforeseen Failure Modes with Latent Adversarial Training","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.05030","snapshot_observed_at":"2026-08-03T03:46:14.781234Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2602.06911","last_updated":"2026-06-02T23:27:30Z","snapshot_observed_at":"2026-08-09T04:40:58.975635Z","submitted_at":"2026-02-06T18:04:38Z","title":"TamperBench: Systematically Stress-Testing LLM Safety Under Fine-Tuning and Tampering","version":2},"reference_index":2025,"source":"pdf_text","source_observed_at":"2026-08-03T03:46:14.781234Z"},"links":{"cited_paper":"/paper/2403.05030","citing_paper":"/paper/2602.06911"},"observation_digest":"sha256:32abb43ef954c325bc901b66fc0679da3757b5826365847bdbac123f9a9fbb76","observation_id":"e96d75aa-c237-4a1d-a88c-2607b78ab112","resolution":{"observed_at":"2026-08-03T03:46:14.781234Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2602.06911","last_updated":"2026-06-02T23:27:30Z","latest_version":2,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-09T04:40:58.975635Z","submitted_at":"2026-02-06T18:04:38Z","title":"TamperBench: Systematically Stress-Testing LLM Safety Under Fine-Tuning and Tampering"},"reference_resolution":{"displayed":24,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":23,"verified_exact":1,"verified_fuzzy":0},"total_outbound_references":24},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 24 of 24 outbound references and 0 inbound Pith citation observations for arXiv:2602.06911."}