{"as_of":"2026-08-09T00:39:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:881d0e2c0186f72dca487908710acbdd6f633e34b1bf5157972ade3fc5564626","coverage":[{"denominator":9,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":9,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-02T23:52:40.912038Z","state":"measured"},{"denominator":10,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":10,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-07-30T20:47:40.813521Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2602.12418","last_updated":"2026-06-27T01:07:47Z","snapshot_observed_at":"2026-08-08T16:14:40.434091Z","submitted_at":"2026-02-12T21:17:32Z","title":"Sparse Autoencoders are Capable LLM Jailbreak Mitigators","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2602.12418","snapshot_observed_at":"2026-07-30T20:47:40.813521Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.23496","last_updated":"2026-07-26T06:54:28Z","snapshot_observed_at":"2026-08-06T06:12:40.435094Z","submitted_at":"2026-07-26T06:54:28Z","title":"Do LLMs Know Their Vulnerable Scenarios?","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-07-30T20:47:40.813521Z"},"links":{"cited_paper":"/paper/2602.12418","citing_paper":"/paper/2607.23496"},"observation_digest":"sha256:38561e2e35bbb171edc01392c07eb569e8695402726cf8b685e0a6808abdf617","observation_id":"f51b1d39-94d5-439d-874f-899be739798d","resolution":{"observed_at":"2026-07-30T20:47:40.813521Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2602.12418/citation-record","integrity":"/paper/2602.12418/integrity","json":"/paper/2602.12418/citation-record.json","paper":"/paper/2602.12418"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:52:40.846642Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.12418","last_updated":"2026-06-27T01:07:47Z","snapshot_observed_at":"2026-08-08T16:14:40.434091Z","submitted_at":"2026-02-12T21:17:32Z","title":"Sparse Autoencoders are Capable LLM Jailbreak Mitigators","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-02T23:52:40.846642Z"},"links":{"citing_paper":"/paper/2602.12418"},"observation_digest":"sha256:65f080e3655cd4b202f9eba6461e3d8bc29d9ce4f58e99212167964725c896ee","observation_id":"582e6c86-985f-4869-aa50-b70660a12d98","resolution":{"observed_at":"2026-08-02T23:52:40.846642Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:52:40.912038Z","title":"rights around free speech and freedom of assembly","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2602.12418","last_updated":"2026-06-27T01:07:47Z","snapshot_observed_at":"2026-08-08T16:14:40.434091Z","submitted_at":"2026-02-12T21:17:32Z","title":"Sparse Autoencoders are Capable LLM Jailbreak Mitigators","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-02T23:52:40.912038Z"},"links":{"citing_paper":"/paper/2602.12418"},"observation_digest":"sha256:c3cceb1c3c8df394f9f382b4051732df7c357be7a486e0b98ef108704e3a5a5a","observation_id":"acfae772-0729-4c05-a39e-eeaf0f77960c","resolution":{"observed_at":"2026-08-02T23:52:40.912038Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1312.6199","last_updated":"2014-02-19T16:33:14Z","snapshot_observed_at":"2026-07-06T03:31:33.797310Z","submitted_at":"2013-12-21T03:36:08Z","title":"Intriguing properties of neural networks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1312.6199","snapshot_observed_at":"2026-08-02T23:52:40.515937Z","title":"cc/paper_files/paper/2024/file/ e2e06adf560b0706d3b1ddfca9f29756-Paper-Datasets_ and_Benchmarks_Track.pdf","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2602.12418","last_updated":"2026-06-27T01:07:47Z","snapshot_observed_at":"2026-08-08T16:14:40.434091Z","submitted_at":"2026-02-12T21:17:32Z","title":"Sparse Autoencoders are Capable LLM Jailbreak Mitigators","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-02T23:52:40.515937Z"},"links":{"cited_paper":"/paper/1312.6199","citing_paper":"/paper/2602.12418"},"observation_digest":"sha256:d6141e14b762ce1a0f1a380f2b8123d45ba3836c56b5b23f20b08a138bd58332","observation_id":"1aaf292f-8844-46e5-8042-bc758f4b19ea","resolution":{"observed_at":"2026-08-02T23:52:40.515937Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:52:40.697575Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2602.12418","last_updated":"2026-06-27T01:07:47Z","snapshot_observed_at":"2026-08-08T16:14:40.434091Z","submitted_at":"2026-02-12T21:17:32Z","title":"Sparse Autoencoders are Capable LLM Jailbreak Mitigators","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-02T23:52:40.697575Z"},"links":{"citing_paper":"/paper/2602.12418"},"observation_digest":"sha256:476b71d4b1d7375341e1f87810d0f8d2caa4643154386a5d680f3ff1a786beba","observation_id":"7df0063e-b2b4-458e-96d4-16550bff531e","resolution":{"observed_at":"2026-08-02T23:52:40.697575Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:52:40.790204Z","title":"— \"You should be a responsible Language Model and should not generate harmful or misleading content! Please answer the following user query in a responsible way. {}","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2602.12418","last_updated":"2026-06-27T01:07:47Z","snapshot_observed_at":"2026-08-08T16:14:40.434091Z","submitted_at":"2026-02-12T21:17:32Z","title":"Sparse Autoencoders are Capable LLM Jailbreak Mitigators","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-02T23:52:40.790204Z"},"links":{"citing_paper":"/paper/2602.12418"},"observation_digest":"sha256:d9edd771b61e50bcf02d05c4b74aa890b70ace06515e3590b2fc270c65ea0a74","observation_id":"27cefc0c-5eb9-40a4-90cb-8cacecfa42e3","resolution":{"observed_at":"2026-08-02T23:52:40.790204Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04783","last_updated":"2024-11-14T18:14:00Z","snapshot_observed_at":"2026-08-07T06:17:52.920196Z","submitted_at":"2024-03-02T16:52:22Z","title":"AutoDefense: Multi-Agent LLM Defense against Jailbreak Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.04783","snapshot_observed_at":"2026-08-02T23:52:40.608795Z","title":"naacl-long.92/","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2602.12418","last_updated":"2026-06-27T01:07:47Z","snapshot_observed_at":"2026-08-08T16:14:40.434091Z","submitted_at":"2026-02-12T21:17:32Z","title":"Sparse Autoencoders are Capable LLM Jailbreak Mitigators","version":2},"reference_index":92,"source":"pdf_text","source_observed_at":"2026-08-02T23:52:40.608795Z"},"links":{"cited_paper":"/paper/2403.04783","citing_paper":"/paper/2602.12418"},"observation_digest":"sha256:1eb089f2d989a52f1e7dd5fcc62a141f47ad894d2cf9b52d5fab9d585c617945","observation_id":"191d38ee-d039-4b79-aec7-4800c10e19da","resolution":{"observed_at":"2026-08-02T23:52:40.608795Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2010.09670","last_updated":"2021-10-31T20:03:39Z","snapshot_observed_at":"2026-07-06T10:05:50.314212Z","submitted_at":"2020-10-19T17:06:18Z","title":"RobustBench: a standardized adversarial robustness benchmark","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2010.09670","snapshot_observed_at":"2026-08-02T23:52:40.329981Z","title":"emnlp-main.844/","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2602.12418","last_updated":"2026-06-27T01:07:47Z","snapshot_observed_at":"2026-08-08T16:14:40.434091Z","submitted_at":"2026-02-12T21:17:32Z","title":"Sparse Autoencoders are Capable LLM Jailbreak Mitigators","version":2},"reference_index":844,"source":"pdf_text","source_observed_at":"2026-08-02T23:52:40.329981Z"},"links":{"cited_paper":"/paper/2010.09670","citing_paper":"/paper/2602.12418"},"observation_digest":"sha256:0281d9023b3cf189a293204cb50db96b19dc2a651ba50e2383429b8dbb9ac897","observation_id":"8c76d597-7b76-4d26-ae18-5bad78f5d46c","resolution":{"observed_at":"2026-08-02T23:52:40.329981Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.06674","last_updated":"2023-12-07T19:40:50Z","snapshot_observed_at":"2026-07-06T17:00:00.321552Z","submitted_at":"2023-12-07T19:40:50Z","title":"Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversations","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.06674","snapshot_observed_at":"2026-08-02T23:52:40.420881Z","title":"Inan, H., Upasani, K., Chi, J., Rungta, R., Iyer, K., Mao, Y ., Tontchev, M., Hu, Q., Fuller, B., Testug- gine, D., et al","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2602.12418","last_updated":"2026-06-27T01:07:47Z","snapshot_observed_at":"2026-08-08T16:14:40.434091Z","submitted_at":"2026-02-12T21:17:32Z","title":"Sparse Autoencoders are Capable LLM Jailbreak Mitigators","version":2},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-02T23:52:40.420881Z"},"links":{"cited_paper":"/paper/2312.06674","citing_paper":"/paper/2602.12418"},"observation_digest":"sha256:88400aa887f87eb1735dfa69f78f7ff9982dc59ce66689b67999f0a029569263","observation_id":"51025924-d1e2-4e81-bb09-9efbfae16cef","resolution":{"observed_at":"2026-08-02T23:52:40.420881Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.00177","last_updated":"2025-02-28T20:43:45Z","snapshot_observed_at":"2026-08-07T17:38:20.897232Z","submitted_at":"2025-02-28T20:43:45Z","title":"Steering Large Language Model Activations in Sparse Spaces","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.00177","snapshot_observed_at":"2026-08-02T23:52:40.237099Z","title":"misaligned persona","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2602.12418","last_updated":"2026-06-27T01:07:47Z","snapshot_observed_at":"2026-08-08T16:14:40.434091Z","submitted_at":"2026-02-12T21:17:32Z","title":"Sparse Autoencoders are Capable LLM Jailbreak Mitigators","version":2},"reference_index":2025,"source":"pdf_text","source_observed_at":"2026-08-02T23:52:40.237099Z"},"links":{"cited_paper":"/paper/2503.00177","citing_paper":"/paper/2602.12418"},"observation_digest":"sha256:80bd8dc38eb98afddd6e5aef1e852d69d51a659048f87062e4a41ce96ff1bb1d","observation_id":"1a677b74-7079-44f6-a909-3ad05bc53d35","resolution":{"observed_at":"2026-08-02T23:52:40.237099Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2602.12418","last_updated":"2026-06-27T01:07:47Z","latest_version":2,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-08T16:14:40.434091Z","submitted_at":"2026-02-12T21:17:32Z","title":"Sparse Autoencoders are Capable LLM Jailbreak Mitigators"},"reference_resolution":{"displayed":9,"state_counts":{"malformed_identifier":1,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":8,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":9},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 9 of 9 outbound references and 1 inbound Pith citation observation for arXiv:2602.12418."}