{"as_of":"2026-08-11T13:51:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:ca663b3930bcb05905f32360914e00d908c120aacbff750e8513986834ff4c4c","coverage":[{"denominator":13,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":13,"source":"paper_references, paper_reference_links","source_observed_at":"2026-07-13T11:41:46.131575Z","state":"measured"},{"denominator":13,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":13,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-11T06:34:44.6726+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2604.03968/citation-record","integrity":"/paper/2604.03968/integrity","json":"/paper/2604.03968/citation-record.json","paper":"/paper/2604.03968"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2312.06942","last_updated":"2024-07-23T06:47:13Z","snapshot_observed_at":"2026-08-09T00:10:06.167600Z","submitted_at":"2023-12-12T02:34:06Z","title":"AI Control: Improving Safety Despite Intentional Subversion","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.06942","snapshot_observed_at":"2026-07-13T11:41:46.131575Z","title":"AI control: Improving safety despite intentional subversion.arXiv preprint arXiv:2312.06942v2, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2604.03968","last_updated":"2026-04-05T05:05:59Z","snapshot_observed_at":"2026-08-09T01:59:29.112185Z","submitted_at":"2026-04-05T05:05:59Z","title":"TraceGuard: Structured Multi-Dimensional Monitoring as a Collusion-Resistant Control Protocol","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-07-13T11:41:46.131575Z"},"links":{"cited_paper":"/paper/2312.06942","citing_paper":"/paper/2604.03968"},"observation_digest":"sha256:a51fbd86023774c332db7d6fa5c749b9ecf50e7426f5855529f1dd4ae4b910b5","observation_id":"a3b4a598-2138-491b-b663-57008d050bb5","resolution":{"observed_at":"2026-07-13T11:41:46.131575Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T11:41:46.131575Z","title":"ControlArena: A gym for evaluating AI control techniques.https: //github.com/UKGovernmentBEIS/control-arena, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.03968","last_updated":"2026-04-05T05:05:59Z","snapshot_observed_at":"2026-08-09T01:59:29.112185Z","submitted_at":"2026-04-05T05:05:59Z","title":"TraceGuard: Structured Multi-Dimensional Monitoring as a Collusion-Resistant Control Protocol","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-07-13T11:41:46.131575Z"},"links":{"citing_paper":"/paper/2604.03968"},"observation_digest":"sha256:680044bbcb04bc5537af7aa32c6892ef44d357e44b5c2e14a74f8b1b430bed93","observation_id":"441d5482-11c5-4350-9590-7b46afe0c532","resolution":{"observed_at":"2026-07-13T11:41:46.131575Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T11:41:46.131575Z","title":"BashArena: Evaluating frontier AI control protocols in realistic bash environments","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.03968","last_updated":"2026-04-05T05:05:59Z","snapshot_observed_at":"2026-08-09T01:59:29.112185Z","submitted_at":"2026-04-05T05:05:59Z","title":"TraceGuard: Structured Multi-Dimensional Monitoring as a Collusion-Resistant Control Protocol","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-07-13T11:41:46.131575Z"},"links":{"citing_paper":"/paper/2604.03968"},"observation_digest":"sha256:596978c4d0e7b40bcb6183169788bd6a45ddf6ba6c80074ee97557b268de50d9","observation_id":"cff268ba-d586-4561-8af2-dbe9f76074bf","resolution":{"observed_at":"2026-07-13T11:41:46.131575Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T11:41:46.131575Z","title":"7 tractable directions in AI control.https://blog.redwoodresearch","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.03968","last_updated":"2026-04-05T05:05:59Z","snapshot_observed_at":"2026-08-09T01:59:29.112185Z","submitted_at":"2026-04-05T05:05:59Z","title":"TraceGuard: Structured Multi-Dimensional Monitoring as a Collusion-Resistant Control Protocol","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-07-13T11:41:46.131575Z"},"links":{"citing_paper":"/paper/2604.03968"},"observation_digest":"sha256:ad8f0f21d3e515cdd71e7ce459fcdd904d2cf878243b0e8375b48b05f7b87a62","observation_id":"bc9ea5a4-2608-4c6a-a212-01d86513c034","resolution":{"observed_at":"2026-07-13T11:41:46.131575Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T11:41:46.131575Z","title":"Inspect: A framework for large language model evaluations.https: //inspect.ai-safety-institute.org.uk/, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.03968","last_updated":"2026-04-05T05:05:59Z","snapshot_observed_at":"2026-08-09T01:59:29.112185Z","submitted_at":"2026-04-05T05:05:59Z","title":"TraceGuard: Structured Multi-Dimensional Monitoring as a Collusion-Resistant Control Protocol","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-07-13T11:41:46.131575Z"},"links":{"citing_paper":"/paper/2604.03968"},"observation_digest":"sha256:d877f8cb05cab1cae0ac252fddde33f709b21735f8c1486148730120c2ced650","observation_id":"21cc9d3e-fe7a-4ecb-8c9e-82464aaa18c0","resolution":{"observed_at":"2026-07-13T11:41:46.131575Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T11:41:46.131575Z","title":"Monitoring reasoning models for misbehavior and the risks of promoting obfuscation.Alignment Forum, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.03968","last_updated":"2026-04-05T05:05:59Z","snapshot_observed_at":"2026-08-09T01:59:29.112185Z","submitted_at":"2026-04-05T05:05:59Z","title":"TraceGuard: Structured Multi-Dimensional Monitoring as a Collusion-Resistant Control Protocol","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-07-13T11:41:46.131575Z"},"links":{"citing_paper":"/paper/2604.03968"},"observation_digest":"sha256:3facf78f41fc7f74632660dcec01d95fc80430931452ac1ce96cc2dcaeef31c5","observation_id":"f8c5fcca-b22d-4325-918d-5887859477f9","resolution":{"observed_at":"2026-07-13T11:41:46.131575Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-13T11:41:46.131575Z","title":"HarmBench: A standardized evaluation framework for automated red teaming and robust refusal.arXiv preprint arXiv:2402.04249, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2604.03968","last_updated":"2026-04-05T05:05:59Z","snapshot_observed_at":"2026-08-09T01:59:29.112185Z","submitted_at":"2026-04-05T05:05:59Z","title":"TraceGuard: Structured Multi-Dimensional Monitoring as a Collusion-Resistant Control Protocol","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-07-13T11:41:46.131575Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2604.03968"},"observation_digest":"sha256:d6f19436ec1327c534680557dff69d9ec38766edba4076ad6e7b99e55bd7db0d","observation_id":"05216fd2-deed-4c7c-87a5-716107944e9f","resolution":{"observed_at":"2026-07-13T11:41:46.131575Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T11:41:46.131575Z","title":"OpenClaw: Open-source autonomous AI agent framework.https: //github.com/openclaw/openclaw, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.03968","last_updated":"2026-04-05T05:05:59Z","snapshot_observed_at":"2026-08-09T01:59:29.112185Z","submitted_at":"2026-04-05T05:05:59Z","title":"TraceGuard: Structured Multi-Dimensional Monitoring as a Collusion-Resistant Control Protocol","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-07-13T11:41:46.131575Z"},"links":{"citing_paper":"/paper/2604.03968"},"observation_digest":"sha256:2d4f21f2b273f7ed15494a05e4cfbf5de2f49d5dbb1fed4144aeb3c63faa4a40","observation_id":"b03cda6d-e641-4710-901e-4c43030fc2a3","resolution":{"observed_at":"2026-07-13T11:41:46.131575Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T11:41:46.131575Z","title":"Regulation (EU) 2024/1689 laying down harmonised rules on artificial intelligence (AI Act).Official Journal of the European Union, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2604.03968","last_updated":"2026-04-05T05:05:59Z","snapshot_observed_at":"2026-08-09T01:59:29.112185Z","submitted_at":"2026-04-05T05:05:59Z","title":"TraceGuard: Structured Multi-Dimensional Monitoring as a Collusion-Resistant Control Protocol","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-07-13T11:41:46.131575Z"},"links":{"citing_paper":"/paper/2604.03968"},"observation_digest":"sha256:0320346dfd41081fbcf95e5afef08439862c424c75a02638fc97734dce7cc1c8","observation_id":"75732e2f-d84b-44c8-8989-9277d741e7c9","resolution":{"observed_at":"2026-07-13T11:41:46.131575Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T11:41:46.131575Z","title":"Artificial Intelligence Risk Management Framework (AI RMF 1.0)","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2604.03968","last_updated":"2026-04-05T05:05:59Z","snapshot_observed_at":"2026-08-09T01:59:29.112185Z","submitted_at":"2026-04-05T05:05:59Z","title":"TraceGuard: Structured Multi-Dimensional Monitoring as a Collusion-Resistant Control Protocol","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-07-13T11:41:46.131575Z"},"links":{"citing_paper":"/paper/2604.03968"},"observation_digest":"sha256:4c3f83b4b59b477515de2373a731a91cdc2f1e8f013f64664b2735333ea24318","observation_id":"f632bd42-b557-41c6-8d70-5f769fad30eb","resolution":{"observed_at":"2026-07-13T11:41:46.131575Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T11:41:46.131575Z","title":"When can we trust untrusted monitoring? A safety case sketch across collusion strategies.arXiv preprint arXiv:2602.20628, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.03968","last_updated":"2026-04-05T05:05:59Z","snapshot_observed_at":"2026-08-09T01:59:29.112185Z","submitted_at":"2026-04-05T05:05:59Z","title":"TraceGuard: Structured Multi-Dimensional Monitoring as a Collusion-Resistant Control Protocol","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-07-13T11:41:46.131575Z"},"links":{"citing_paper":"/paper/2604.03968"},"observation_digest":"sha256:867b9b6c9d2705de901e91ba6ef3b5d4a959cd1210fe72401029f425951524e2","observation_id":"1d72073d-1114-4c4d-8ac3-38da7d373a6c","resolution":{"observed_at":"2026-07-13T11:41:46.131575Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07510","last_updated":"2025-07-25T12:28:15Z","snapshot_observed_at":"2026-08-07T06:30:15.183572Z","submitted_at":"2024-02-12T09:31:21Z","title":"Secret Collusion among AI Agents: Multi-Agent Deception via Steganography","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.07510","snapshot_observed_at":"2026-07-13T11:41:46.131575Z","title":"Motwani, Mikhail Baranchuk, Martin Strohmeier, Vijay Bolina, Philip H.S","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2604.03968","last_updated":"2026-04-05T05:05:59Z","snapshot_observed_at":"2026-08-09T01:59:29.112185Z","submitted_at":"2026-04-05T05:05:59Z","title":"TraceGuard: Structured Multi-Dimensional Monitoring as a Collusion-Resistant Control Protocol","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-07-13T11:41:46.131575Z"},"links":{"cited_paper":"/paper/2402.07510","citing_paper":"/paper/2604.03968"},"observation_digest":"sha256:c8dfd6f2d8b91ff11ed630c9fe223f2243c0f4d02bb80a8d5001d265c434066c","observation_id":"7ba8b17e-028f-4e5d-9d38-42437f895c42","resolution":{"observed_at":"2026-07-13T11:41:46.131575Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.05259","last_updated":"2025-04-07T16:52:52Z","snapshot_observed_at":"2026-08-09T00:24:35.214638Z","submitted_at":"2025-04-07T16:52:52Z","title":"How to evaluate control measures for LLM agents? A trajectory from today to superintelligence","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.05259","snapshot_observed_at":"2026-07-13T11:41:46.131575Z","title":"How to evaluate control measures for LLM agents? A trajectory from today to superintelligence","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.03968","last_updated":"2026-04-05T05:05:59Z","snapshot_observed_at":"2026-08-09T01:59:29.112185Z","submitted_at":"2026-04-05T05:05:59Z","title":"TraceGuard: Structured Multi-Dimensional Monitoring as a Collusion-Resistant Control Protocol","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-07-13T11:41:46.131575Z"},"links":{"cited_paper":"/paper/2504.05259","citing_paper":"/paper/2604.03968"},"observation_digest":"sha256:2934583a5e3607299a9f023e8dc984094debf2956d083a37c348709b2da90367","observation_id":"6a8377b5-c50d-4863-be9e-c984b47e7002","resolution":{"observed_at":"2026-07-13T11:41:46.131575Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2604.03968","last_updated":"2026-04-05T05:05:59Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-09T01:59:29.112185Z","submitted_at":"2026-04-05T05:05:59Z","title":"TraceGuard: Structured Multi-Dimensional Monitoring as a Collusion-Resistant Control Protocol"},"reference_resolution":{"displayed":13,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":13,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":13},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"thesis":"As of 11 August 2026, this Paper Citation Record lists 13 of 13 outbound references and 0 inbound Pith citation observations for arXiv:2604.03968."}