{"as_of":"2026-08-09T19:30:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:d0d8124b2b3ecaf6db2c7959c9c125804b43e3b6c85d8b37f5341e78e79233e2","coverage":[{"denominator":15,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":15,"source":"paper_references, paper_reference_links","source_observed_at":"2026-06-29T06:48:32.410420Z","state":"measured"},{"denominator":15,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":15,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2605.30189/citation-record","integrity":"/paper/2605.30189/integrity","json":"/paper/2605.30189/citation-record.json","paper":"/paper/2605.30189"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2110.02467","last_updated":"2021-10-06T02:48:58Z","snapshot_observed_at":"2026-08-03T22:36:07.737567Z","submitted_at":"2021-10-06T02:48:58Z","title":"BadPre: Task-agnostic Backdoor Attacks to Pre-trained NLP Foundation Models","version":1},"cited_work":{"arxiv_id":"2110.02467","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2110.02467","snapshot_observed_at":"2026-07-01T18:45:58.983223Z","title":"Badpre: Task-agnostic backdoor attacks to pre-trained nlp foundation models","venue":null,"work_id":"9996f757-84e7-49ed-add1-81e27e21b1db","year":2021},"citing_paper":{"arxiv_id":"2605.30189","last_updated":"2026-05-28T16:32:25Z","snapshot_observed_at":"2026-08-04T11:15:46.091378Z","submitted_at":"2026-05-28T16:32:25Z","title":"Token-Level Generalization in LoRA Adapter Backdoors: Attack Characterization and Behavioral Detection","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-06-29T06:48:32.410420Z"},"links":{"cited_paper":"/paper/2110.02467","citing_paper":"/paper/2605.30189"},"observation_digest":"sha256:236506dadb4970a157c8f61ae4bb8644f4c1443767c9f53f498829669131ce9c","observation_id":"e1f3151f-d9b5-463f-ad87-7f76cccfd997","resolution":{"observed_at":"2026-06-29T14:13:30.706958Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1712.05526","last_updated":"2017-12-15T04:26:26Z","snapshot_observed_at":"2026-07-06T06:14:30.795326Z","submitted_at":"2017-12-15T04:26:26Z","title":"Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning","version":1},"cited_work":{"arxiv_id":"1712.05526","doi":"10.48550/arxiv.1712.05526","metadata_source":"pith","pith_arxiv_id":"1712.05526","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning","venue":"cs.CR","work_id":"bb1fb326-f0f6-4c72-a4d2-eb7f0707b971","year":2017},"citing_paper":{"arxiv_id":"2605.30189","last_updated":"2026-05-28T16:32:25Z","snapshot_observed_at":"2026-08-04T11:15:46.091378Z","submitted_at":"2026-05-28T16:32:25Z","title":"Token-Level Generalization in LoRA Adapter Backdoors: Attack Characterization and Behavioral Detection","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-06-29T06:48:32.410420Z"},"links":{"cited_paper":"/paper/1712.05526","citing_paper":"/paper/2605.30189"},"observation_digest":"sha256:6257b3b4ef990f1e2aaef0b2c145c21b95c16f9fe6415dbd94fa969ccd9b2b88","observation_id":"00def149-58f4-4d01-9769-2f7fd450ebfe","resolution":{"observed_at":"2026-06-29T14:13:30.709963Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T06:48:32.410420Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2605.30189","last_updated":"2026-05-28T16:32:25Z","snapshot_observed_at":"2026-08-04T11:15:46.091378Z","submitted_at":"2026-05-28T16:32:25Z","title":"Token-Level Generalization in LoRA Adapter Backdoors: Attack Characterization and Behavioral Detection","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-06-29T06:48:32.410420Z"},"links":{"citing_paper":"/paper/2605.30189"},"observation_digest":"sha256:66937884192a16c0fe9c9fb9ff8af324e7485229b6655813737aff94ca24cf59","observation_id":"23d9f628-89ad-483d-86fb-a695a957251f","resolution":{"observed_at":"2026-06-29T06:48:32.410420Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T06:48:32.410420Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2605.30189","last_updated":"2026-05-28T16:32:25Z","snapshot_observed_at":"2026-08-04T11:15:46.091378Z","submitted_at":"2026-05-28T16:32:25Z","title":"Token-Level Generalization in LoRA Adapter Backdoors: Attack Characterization and Behavioral Detection","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-06-29T06:48:32.410420Z"},"links":{"citing_paper":"/paper/2605.30189"},"observation_digest":"sha256:12a98281172d67563b4265accf90d02d435ecc8b2e11bd1c38715e308851ce56","observation_id":"27691fc5-33d7-4526-bf3e-969e748ac8ae","resolution":{"observed_at":"2026-06-29T06:48:32.410420Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T06:48:32.410420Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2605.30189","last_updated":"2026-05-28T16:32:25Z","snapshot_observed_at":"2026-08-04T11:15:46.091378Z","submitted_at":"2026-05-28T16:32:25Z","title":"Token-Level Generalization in LoRA Adapter Backdoors: Attack Characterization and Behavioral Detection","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-06-29T06:48:32.410420Z"},"links":{"citing_paper":"/paper/2605.30189"},"observation_digest":"sha256:5eda991dae56a161463d306567c32425964d1c19e0af2f892f58b82650063302","observation_id":"51001079-d000-4fa5-b36a-60fa75272ba4","resolution":{"observed_at":"2026-06-29T06:48:32.410420Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T06:48:32.410420Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2605.30189","last_updated":"2026-05-28T16:32:25Z","snapshot_observed_at":"2026-08-04T11:15:46.091378Z","submitted_at":"2026-05-28T16:32:25Z","title":"Token-Level Generalization in LoRA Adapter Backdoors: Attack Characterization and Behavioral Detection","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-06-29T06:48:32.410420Z"},"links":{"citing_paper":"/paper/2605.30189"},"observation_digest":"sha256:bde5d8b6054708d771a4844a2c4282de0e5d05acc2ce82b50ce9a381a5eb20b0","observation_id":"bf048498-5180-483a-942a-7f72f11c0d68","resolution":{"observed_at":"2026-06-29T06:48:32.410420Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2106.09685","last_updated":"2021-10-16T18:40:34Z","snapshot_observed_at":"2026-08-07T07:43:16.294957Z","submitted_at":"2021-06-17T17:37:18Z","title":"LoRA: Low-Rank Adaptation of Large Language Models","version":2},"cited_work":{"arxiv_id":"2106.09685","doi":"10.4088/pcc.v03n0609","metadata_source":"pith","pith_arxiv_id":"2106.09685","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"LoRA: Low-Rank Adaptation of Large Language Models","venue":"cs.CL","work_id":"0426219a-789e-4964-adc8-a04538510818","year":2021},"citing_paper":{"arxiv_id":"2605.30189","last_updated":"2026-05-28T16:32:25Z","snapshot_observed_at":"2026-08-04T11:15:46.091378Z","submitted_at":"2026-05-28T16:32:25Z","title":"Token-Level Generalization in LoRA Adapter Backdoors: Attack Characterization and Behavioral Detection","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-06-29T06:48:32.410420Z"},"links":{"cited_paper":"/paper/2106.09685","citing_paper":"/paper/2605.30189"},"observation_digest":"sha256:c8458ac2e7be35203975a38c8ecc0a45e56d30415dc6adfbcc30474d3627b7b7","observation_id":"3db0a1c2-6cd4-461d-b02a-db4655c11edd","resolution":{"observed_at":"2026-06-29T14:13:30.699635Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T06:48:32.410420Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2605.30189","last_updated":"2026-05-28T16:32:25Z","snapshot_observed_at":"2026-08-04T11:15:46.091378Z","submitted_at":"2026-05-28T16:32:25Z","title":"Token-Level Generalization in LoRA Adapter Backdoors: Attack Characterization and Behavioral Detection","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-06-29T06:48:32.410420Z"},"links":{"citing_paper":"/paper/2605.30189"},"observation_digest":"sha256:fad1c848d7c553cae460e5b83e932cd0f64833f79612087dadc56719898310a5","observation_id":"edc9e754-bbfe-4210-a183-fa9356e3e7fd","resolution":{"observed_at":"2026-06-29T06:48:32.410420Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T06:48:32.410420Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2605.30189","last_updated":"2026-05-28T16:32:25Z","snapshot_observed_at":"2026-08-04T11:15:46.091378Z","submitted_at":"2026-05-28T16:32:25Z","title":"Token-Level Generalization in LoRA Adapter Backdoors: Attack Characterization and Behavioral Detection","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-06-29T06:48:32.410420Z"},"links":{"citing_paper":"/paper/2605.30189"},"observation_digest":"sha256:6be64a329f8ec5dc25f6f5b48441bc81a0e21f7e0079476baa87e9f671b1293f","observation_id":"17e2fadb-cb8f-4949-931b-a76f7c758e1c","resolution":{"observed_at":"2026-06-29T06:48:32.410420Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T06:48:32.410420Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2605.30189","last_updated":"2026-05-28T16:32:25Z","snapshot_observed_at":"2026-08-04T11:15:46.091378Z","submitted_at":"2026-05-28T16:32:25Z","title":"Token-Level Generalization in LoRA Adapter Backdoors: Attack Characterization and Behavioral Detection","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-06-29T06:48:32.410420Z"},"links":{"citing_paper":"/paper/2605.30189"},"observation_digest":"sha256:2a7e4b8d73b80571ea18195ec4186777baa93edcbbcb960355cbd6eedb2c73fb","observation_id":"2a01474b-0ace-4201-8ce3-fd7c15839ec8","resolution":{"observed_at":"2026-06-29T06:48:32.410420Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T06:48:32.410420Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2605.30189","last_updated":"2026-05-28T16:32:25Z","snapshot_observed_at":"2026-08-04T11:15:46.091378Z","submitted_at":"2026-05-28T16:32:25Z","title":"Token-Level Generalization in LoRA Adapter Backdoors: Attack Characterization and Behavioral Detection","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-06-29T06:48:32.410420Z"},"links":{"citing_paper":"/paper/2605.30189"},"observation_digest":"sha256:ed040c3dd31bf8fa0f03625804c2a80fd5a1836e1e69f3436d33d329a93592ff","observation_id":"a314b5ea-2311-4182-bab9-7fc5a2ea56cb","resolution":{"observed_at":"2026-06-29T06:48:32.410420Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T06:48:32.410420Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2605.30189","last_updated":"2026-05-28T16:32:25Z","snapshot_observed_at":"2026-08-04T11:15:46.091378Z","submitted_at":"2026-05-28T16:32:25Z","title":"Token-Level Generalization in LoRA Adapter Backdoors: Attack Characterization and Behavioral Detection","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-06-29T06:48:32.410420Z"},"links":{"citing_paper":"/paper/2605.30189"},"observation_digest":"sha256:9c871865aed00700314fd96d8750349dcd97fd43d7f0882297b66eb045b7b680","observation_id":"05b14d8b-b1c3-4309-8c08-eb157aa3f85b","resolution":{"observed_at":"2026-06-29T06:48:32.410420Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T06:48:32.410420Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2605.30189","last_updated":"2026-05-28T16:32:25Z","snapshot_observed_at":"2026-08-04T11:15:46.091378Z","submitted_at":"2026-05-28T16:32:25Z","title":"Token-Level Generalization in LoRA Adapter Backdoors: Attack Characterization and Behavioral Detection","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-06-29T06:48:32.410420Z"},"links":{"citing_paper":"/paper/2605.30189"},"observation_digest":"sha256:1a850b19371c38b46c6d6a971cd3e4838f05cb8849eb4753c7006364cdad04f4","observation_id":"5d40e673-390b-41c1-91f1-f85101be1d1c","resolution":{"observed_at":"2026-06-29T06:48:32.410420Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2602.15671","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T14:13:30.699451Z","title":"Revisiting backdoor threat in federated instruction tuning from a signal aggregation perspective","venue":null,"work_id":"89cc98b9-c2fc-4e51-bbbf-b9eb8e1a9827","year":2026},"citing_paper":{"arxiv_id":"2605.30189","last_updated":"2026-05-28T16:32:25Z","snapshot_observed_at":"2026-08-04T11:15:46.091378Z","submitted_at":"2026-05-28T16:32:25Z","title":"Token-Level Generalization in LoRA Adapter Backdoors: Attack Characterization and Behavioral Detection","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-06-29T06:48:32.410420Z"},"links":{"citing_paper":"/paper/2605.30189"},"observation_digest":"sha256:40030554264385beeaf9daaa6f2c0d196bfe318b57f2f0e49b64f88d52006957","observation_id":"e05c4a64-e0e6-43ed-a4a7-f74d6047ea59","resolution":{"observed_at":"2026-06-29T14:13:30.701353Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-07-06T15:59:23.019044Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":"2307.15043","doi":"10.48550/arxiv.2307.15043","metadata_source":"pith","pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","venue":"cs.CL","work_id":"3322fa86-1768-4677-8425-dd326b45e078","year":2023},"citing_paper":{"arxiv_id":"2605.30189","last_updated":"2026-05-28T16:32:25Z","snapshot_observed_at":"2026-08-04T11:15:46.091378Z","submitted_at":"2026-05-28T16:32:25Z","title":"Token-Level Generalization in LoRA Adapter Backdoors: Attack Characterization and Behavioral Detection","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-06-29T06:48:32.410420Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2605.30189"},"observation_digest":"sha256:6000060f17bf8d77c0dbd1013f48a37e369593f75c0df8333897a1be2c4378c1","observation_id":"871491a2-b124-46b6-8667-246a23e62c77","resolution":{"observed_at":"2026-06-29T14:13:30.704996Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-07-15T23:50:40.271168+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-15T23:50:40.271168+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2605.30189","last_updated":"2026-05-28T16:32:25Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-04T11:15:46.091378Z","submitted_at":"2026-05-28T16:32:25Z","title":"Token-Level Generalization in LoRA Adapter Backdoors: Attack Characterization and Behavioral Detection"},"reference_resolution":{"displayed":15,"state_counts":{"malformed_identifier":0,"metadata_mismatch":2,"parse_uncertain":0,"unresolved":10,"verified_exact":3,"verified_fuzzy":0},"total_outbound_references":15},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 15 of 15 outbound references and 0 inbound Pith citation observations for arXiv:2605.30189."}