{"as_of":"2026-08-17T08:23:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:d1a9a4382a6fb93a7fa2d1079f144d7c099f5f3ced2e14b71834f42895d6ce47","coverage":[{"denominator":71,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":71,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-01T04:12:58.815158Z","state":"measured"},{"denominator":71,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":71,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-17T06:30:58.91139+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2607.22926/citation-record","integrity":"/paper/2607.22926/integrity","json":"/paper/2607.22926/citation-record.json","paper":"/paper/2607.22926"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.477630Z","title":"and Bates, Stephen and Fisch, Adam and Lei, Lihua and Schuster, Tal , title =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-15T14:40:33.728979Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.477630Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:2133444970b30bf59d38dcea9103acc686cfbd8d47c25f01ae9234562ccb1d90","observation_id":"e386d600-11db-4447-bbb0-3bdb46b0c2e6","resolution":{"observed_at":"2026-08-01T04:12:58.477630Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.482445Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-15T14:40:33.728979Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.482445Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:4d9703cef9d51b0aa2f058d76f44ea45aa154fe333041a323499a5db2019c2b3","observation_id":"21d0965f-d4e5-49b1-8cf8-68b917901aa1","resolution":{"observed_at":"2026-08-01T04:12:58.482445Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.488562Z","title":"225 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-15T14:40:33.728979Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.488562Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:4fb96a9b24cd6c8b277986125f04e88871cda7d01dd7a8e68d03fb61fd4c54f2","observation_id":"2240337a-c29d-4f24-abe9-8073c986602f","resolution":{"observed_at":"2026-08-01T04:12:58.488562Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.493457Z","title":"Proceedings of the 42nd International Conference on Machine Learning , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-15T14:40:33.728979Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.493457Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:37d75c709ea8beb8ff3f684c4eaeb9ad89088c6295ee545550f051249d9bdd96","observation_id":"6fbce0bd-8b3f-4142-83d2-04e419ad532a","resolution":{"observed_at":"2026-08-01T04:12:58.493457Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.498452Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-15T14:40:33.728979Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.498452Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:9bec7f5735778dc9a592f8a4236b9881dec1fde3183876c017d01c87feb37ffa","observation_id":"d91a120a-d822-4b24-8f99-537d6bc3322b","resolution":{"observed_at":"2026-08-01T04:12:58.498452Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.503342Z","title":"Official Journal of the European Union , url =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-15T14:40:33.728979Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.503342Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:d95543fcd8a729f49d5e505700a1263c3c9101a317966e10dbc9c4840e73a4c0","observation_id":"6fc1e2b1-9943-474c-9b93-735521a4edc9","resolution":{"observed_at":"2026-08-01T04:12:58.503342Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.508141Z","title":"Advances in Neural Information Processing Systems , volume =","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-15T14:40:33.728979Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.508141Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:326f0ab8b2982deb98ff1f3eb37616c3c0ac71235653d5edb94c50f4fec82722","observation_id":"ac01214c-91e6-44fb-82ec-d5947046d5ff","resolution":{"observed_at":"2026-08-01T04:12:58.508141Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.512702Z","title":"Computer Aided Verification , series =","venue":null,"work_id":null,"year":2011},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-15T14:40:33.728979Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.512702Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:867602a06e7c9725604df75531d603e39bb2e3e4cbe164eae3e8223bd5ef80ad","observation_id":"7f192b9d-e95c-4bdf-bb3b-21641cfa5905","resolution":{"observed_at":"2026-08-01T04:12:58.512702Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.517513Z","title":"Journal of Logic and Algebraic Programming , volume =","venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-15T14:40:33.728979Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.517513Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:91f6ef24d132abca7184e1876a41900adb2439e670f06d6eaeb4a19921bb032d","observation_id":"e7227c6f-5b58-41c3-abae-49fc78e7dac6","resolution":{"observed_at":"2026-08-01T04:12:58.517513Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.522153Z","title":"Proceedings of the 41st International Conference on Machine Learning , series =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-15T14:40:33.728979Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.522153Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:8235dcc98dde1c725339b37134950984875bc38024bf61e094564f9aa57796ea","observation_id":"4b1c7390-57a4-43a6-8556-803e189d5c89","resolution":{"observed_at":"2026-08-01T04:12:58.522153Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.527367Z","title":"2023 , doi =","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-15T14:40:33.728979Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.527367Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:5c8152311eb2100cf396215ec8a98a5804eeec84e69b59edc1c1a661b498b042","observation_id":"2f581593-88e8-4a40-a6b1-6ec21efb9731","resolution":{"observed_at":"2026-08-01T04:12:58.527367Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.532463Z","title":"2024 , doi =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-15T14:40:33.728979Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.532463Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:ed587d41dfb59e75ab45d4ce576e92e796755f62180c1b17a2298c34789fc9bb","observation_id":"75006494-161e-473a-8a78-eb8d15910679","resolution":{"observed_at":"2026-08-01T04:12:58.532463Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.536732Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-15T14:40:33.728979Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.536732Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:af29bee92e9a5628c4fa02a1cc8847bdcae88e164fd939b29c7ea4a05e69c8f3","observation_id":"e2d3c197-53ee-48ab-af77-2bdf6bd41595","resolution":{"observed_at":"2026-08-01T04:12:58.536732Z","resolver_source":null,"status":"parse_uncertain"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.541298Z","title":"Proceedings of the 2024 Conference of the North American Chapter of the Association for Computational Linguistics: Human Language Technologies , pages =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-15T14:40:33.728979Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.541298Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:e9f5b12afbcd98229876916ad5ac277b4a3311354f99bdbcd7c42e0e6a781900","observation_id":"2267c734-e9cf-4c28-8228-74fa2dfb08be","resolution":{"observed_at":"2026-08-01T04:12:58.541298Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.545844Z","title":"and Schroeder, Michael D","venue":null,"work_id":null,"year":1975},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-15T14:40:33.728979Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.545844Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:c0ca1a3392c20a7ab87e9037f7620e5cd0f693cf195086c603e720af509ac9b0","observation_id":"621d31ba-bd70-4d5e-9aa8-ded0b18d444b","resolution":{"observed_at":"2026-08-01T04:12:58.545844Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.550295Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-15T14:40:33.728979Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.550295Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:78955ef8ebc7f3b36b9c7b823eb72d5462c7a40809a0b29e79f2a226a6dc2fb3","observation_id":"45209cb0-d433-4458-be9a-e791f14313d8","resolution":{"observed_at":"2026-08-01T04:12:58.550295Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.554846Z","title":"Advances in Neural Information Processing Systems , volume =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-15T14:40:33.728979Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.554846Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:77437f8d3be9a074ad42d87891a2a53447a9bd3da8664671664342a7c50c53c0","observation_id":"c076d59f-544b-491e-97d1-10a78912dd96","resolution":{"observed_at":"2026-08-01T04:12:58.554846Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.559270Z","title":"International Conference on Learning Representations , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-15T14:40:33.728979Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.559270Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:70b23e376670baab1374a37353f85bdad7aa60127934b5ad1a00dd27db7f4839","observation_id":"2cf1a76e-3bd3-4abf-bd23-2923b991510d","resolution":{"observed_at":"2026-08-01T04:12:58.559270Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.565000Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-15T14:40:33.728979Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.565000Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:a67fcd6ac5105658dc28a53a468238e89e61eeed1c1c9c8fb0b5cb80dfe6818e","observation_id":"3fbdd567-3e93-477e-bb33-75531a62bb26","resolution":{"observed_at":"2026-08-01T04:12:58.565000Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.569384Z","title":"Advances in Neural Information Processing Systems , volume =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-15T14:40:33.728979Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.569384Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:8f94fb576fbfc2855132d83fbcc14c5a27def9f5b49a96bb21596cfab0569c09","observation_id":"85db97ed-5629-4e6c-a6e7-e1e92567facf","resolution":{"observed_at":"2026-08-01T04:12:58.569384Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.573507Z","title":"2024 , url =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-15T14:40:33.728979Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.573507Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:f0ab9614a231f12af29588323a5469de1073670618232f828c4972ab3cd9613f","observation_id":"47fe86a6-3dbc-4074-a1c2-cb4638f34dd0","resolution":{"observed_at":"2026-08-01T04:12:58.573507Z","resolver_source":null,"status":"parse_uncertain"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.577723Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-15T14:40:33.728979Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.577723Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:70bb519d61ae3f6dc758177168cdd43fb0c86d66aa26a2b2f2750b096d448213","observation_id":"30e7271c-0435-4f54-9b58-2065402017b9","resolution":{"observed_at":"2026-08-01T04:12:58.577723Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.582038Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-15T14:40:33.728979Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.582038Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:6e1eb36a7ae9dc5bd963254131a74757378b4fdbd4206793a360b33c59418512","observation_id":"3dd95b80-2175-45b6-9f8b-81b33e2b18d9","resolution":{"observed_at":"2026-08-01T04:12:58.582038Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.586329Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-15T14:40:33.728979Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.586329Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:c4d7b33def4123fc807ae27ee35275933b096ba4eed0e29428978700b48b90f9","observation_id":"f4f58328-2972-4a04-8678-e34b7b022542","resolution":{"observed_at":"2026-08-01T04:12:58.586329Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.590701Z","title":"2025 , url =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-15T14:40:33.728979Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.590701Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:546ed97f59c7d211b43a368a131c4adac2ff5d4f55f7b8b61610adf3a2e62603","observation_id":"7d9e6bb8-dbef-4421-94ef-a46a252cc254","resolution":{"observed_at":"2026-08-01T04:12:58.590701Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.594902Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-15T14:40:33.728979Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.594902Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:0b131331b6216f4d0acf2d3089aedd5e174c10bc623c52928f0728148c7baa58","observation_id":"b93cbb9c-790a-42b5-8ff5-3d6436ade7e0","resolution":{"observed_at":"2026-08-01T04:12:58.594902Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.599241Z","title":"2023 , howpublished =","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-15T14:40:33.728979Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.599241Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:64e592cee2d1666d29732361a6ec77b5d35e371114984868077150e8bc40a6e6","observation_id":"226d0859-17b0-4c84-a502-f081fbc3a68d","resolution":{"observed_at":"2026-08-01T04:12:58.599241Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.603454Z","title":"Proceedings of the 2023 Conference on Empirical Methods in Natural Language Processing: System Demonstrations , pages =","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-15T14:40:33.728979Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.603454Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:44f3c0c46f5fad664d556e57dcc3753d57d63b24749c38e98a756efbd96cf6b6","observation_id":"71107b49-84da-4093-8952-702e58766bcf","resolution":{"observed_at":"2026-08-01T04:12:58.603454Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.608447Z","title":"2024 , howpublished =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-15T14:40:33.728979Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.608447Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:672a1cc8ac1e4aac6eb358b992475a432dd06e1ab42f6937f4d9b967bc263466","observation_id":"6d9f5401-728b-4c1e-8d3f-d3ef8c809365","resolution":{"observed_at":"2026-08-01T04:12:58.608447Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.613101Z","title":"Proceedings of the AAAI Conference on Artificial Intelligence , volume =","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-15T14:40:33.728979Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.613101Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:c14afe406502eff172b5012a563be84c0f407bb53de67bf11b14334e7c90af42","observation_id":"7e3ed754-7fc3-481a-8c22-95dbf5f88121","resolution":{"observed_at":"2026-08-01T04:12:58.613101Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.617549Z","title":"2025 , howpublished =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-15T14:40:33.728979Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.617549Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:cdd88e75b2764fc9cb5d9f5ad1449379a06a2d28fc0f47f3ba6c417be62f2211","observation_id":"9a77f8e3-45a4-49fd-b284-1d24de734995","resolution":{"observed_at":"2026-08-01T04:12:58.617549Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.627019Z","title":"and Deshpande, Kaustubh and Sirdeshmukh, Ved and Mankikar, Meher and Scale Red Team and SEAL Research Team and Michael, Julian , journal =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-15T14:40:33.728979Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.627019Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:54312ee5297b209ba17504689102139755959f43affeac69e427f75462c0b491","observation_id":"6e6b469b-848e-4a1e-8355-1f37e39cdd63","resolution":{"observed_at":"2026-08-01T04:12:58.627019Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.637277Z","title":"Safer or Luckier?","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-15T14:40:33.728979Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.637277Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:696eb8f3210bc54468629cd1ad94131d12368884a87f68b72f18b3710092f3fa","observation_id":"be6220f4-e2c9-4150-aaad-03b1f6ad96ec","resolution":{"observed_at":"2026-08-01T04:12:58.637277Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.641609Z","title":"Investigating the Potential Use of Frontier","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-15T14:40:33.728979Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.641609Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:cb7c7980792988a86e8a492901a0bf81149ba7dcf08f52189c573db3d189a5c5","observation_id":"84a56c00-f822-4bc7-861b-37a0a505d926","resolution":{"observed_at":"2026-08-01T04:12:58.641609Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.646153Z","title":"2025 , howpublished =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-15T14:40:33.728979Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.646153Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:ed354ba4602d4592a1afd7919080cf03685c3532f80c95872b85513305daabf8","observation_id":"2d7b209b-9fda-49b4-8baa-f9b924952d54","resolution":{"observed_at":"2026-08-01T04:12:58.646153Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.650539Z","title":"Investigating the potential use of frontier AI models for offensive cyberattacks: A human uplift study","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-15T14:40:33.728979Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":38,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.650539Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:44208bca40cfd2894c1a817c43ced9b6e6ce5111ed0d4f24193ad969c4c00134","observation_id":"9ef102d9-e442-4745-9e8b-8810bc54f6fe","resolution":{"observed_at":"2026-08-01T04:12:58.650539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.655028Z","title":"Angelopoulos, Stephen Bates, Adam Fisch, Lihua Lei, and Tal Schuster","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-15T14:40:33.728979Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":39,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.655028Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:82bc9c298ed349fd636d463bcdbb89ce1351bc7d8c50e00abbd5066ea86c9c4d","observation_id":"d6aa0650-fda6-40c7-99de-26bc3c15f75c","resolution":{"observed_at":"2026-08-01T04:12:58.655028Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.659492Z","title":"Why do we take LLM s seriously as a potential source of biorisk? https://www.anthropic.com/research/biorisk, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-15T14:40:33.728979Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":40,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.659492Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:da595aaf786d8337e62d36ef7eeb0fc06dfe34e18008acebcc69b43d1dfd2f65","observation_id":"4788f1d8-9b6d-46dc-9544-a5eee0216bf6","resolution":{"observed_at":"2026-08-01T04:12:58.659492Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.663853Z","title":"Claude system cards, 2026","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-15T14:40:33.728979Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":41,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.663853Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:b255641f4d55a4085ecb18d35118a585daf9fade02d8c2a5529455745068631d","observation_id":"3b898e95-62b6-4618-9ad8-0e8d5f84822a","resolution":{"observed_at":"2026-08-01T04:12:58.663853Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.668103Z","title":"Safer or luckier? LLM s as safety evaluators are not robust to artifacts","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-15T14:40:33.728979Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":42,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.668103Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:96a1e0f14fd986c14ad7475c53f3332c9d1d657e8a31088ec1969cf51eacfbdb","observation_id":"456e7b70-c241-499a-863a-292c1bdbc7d2","resolution":{"observed_at":"2026-08-01T04:12:58.668103Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.673871Z","title":"Framework convention on artificial intelligence and human rights, democracy and the rule of law, cets no","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-15T14:40:33.728979Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":43,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.673871Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:21ebbea1a92050da4ec2f385168a86e262e883f8ed6a6a4021849e4b26c5690f","observation_id":"6e88b490-7ac7-42b8-bd01-a1006ace5936","resolution":{"observed_at":"2026-08-01T04:12:58.673871Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.678233Z","title":"OR-Bench : An over-refusal benchmark for large language models","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-15T14:40:33.728979Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":44,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.678233Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:963dae4987233453cccfecac97d05909637eb15ed8ac2c3f488e7cea4330ea01","observation_id":"78b1abef-d838-4919-bbf3-a414aa3b33fc","resolution":{"observed_at":"2026-08-01T04:12:58.678233Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.682749Z","title":"Secure by design, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-15T14:40:33.728979Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":45,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.682749Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:71549c4803aa9c28aa06fcc53238f2a28f8f1a0bce350dade91b66eba8492d5e","observation_id":"2094cad3-422a-4397-b57a-778c04e442ec","resolution":{"observed_at":"2026-08-01T04:12:58.682749Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.687182Z","title":"General-purpose AI code of practice, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-15T14:40:33.728979Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":46,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.687182Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:31b9505a20a8065c5aba9dda2d0ef0531a02a9d243a7f4605c8b250021e4da5a","observation_id":"55f12536-1212-4ce2-a381-30e86bbb1725","resolution":{"observed_at":"2026-08-01T04:12:58.687182Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.691929Z","title":"Regulation (eu) 2024/1689 laying down harmonised rules on artificial intelligence, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-15T14:40:33.728979Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":47,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.691929Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:e0a4eba48bbe784ff7e14de91371d5af245a12d4cd6886ebb0ed4b0aa4a5bc25","observation_id":"639cf979-8b12-4301-9b24-158e56520398","resolution":{"observed_at":"2026-08-01T04:12:58.691929Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.696545Z","title":"Selective classification for deep neural networks","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-15T14:40:33.728979Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":48,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.696545Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:d4068326b0ac29bdfc149dd7c5fa947f9e5464c79a0616c2b62a1f330b6897a7","observation_id":"00f30630-c510-4668-9650-8834e20cafac","resolution":{"observed_at":"2026-08-01T04:12:58.696545Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.701200Z","title":"Gemini 3 pro model card, 2026","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-15T14:40:33.728979Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":49,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.701200Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:7c6f3b329b654f79b6ce2d602d2eab0ee6ab7f87614291ba2ef424c743117e67","observation_id":"5d542346-135c-4686-9426-a8eb51539cfa","resolution":{"observed_at":"2026-08-01T04:12:58.701200Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2604.18775","last_updated":"2026-04-20T19:32:00Z","snapshot_observed_at":"2026-08-17T04:11:15.420534Z","submitted_at":"2026-04-20T19:32:00Z","title":"An Empirical Study of Multi-Generation Sampling for Jailbreak Detection in Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.18775","snapshot_observed_at":"2026-08-01T04:12:58.706286Z","title":"Gowda and Hanrui Luo","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-15T14:40:33.728979Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":50,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.706286Z"},"links":{"cited_paper":"/paper/2604.18775","citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:0d2c658199fd4f6cdd0b0319932280af966e2ba333cd9af9f0df7e799635471d","observation_id":"ae8f414f-5a20-4a1f-aecd-45874c484f85","resolution":{"observed_at":"2026-08-01T04:12:58.706286Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.06674","last_updated":"2023-12-07T19:40:50Z","snapshot_observed_at":"2026-08-14T15:42:19.849118Z","submitted_at":"2023-12-07T19:40:50Z","title":"Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversations","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.06674","snapshot_observed_at":"2026-08-01T04:12:58.712067Z","title":"Llama guard: LLM -based input-output safeguard for human- AI conversations","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-15T14:40:33.728979Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":51,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.712067Z"},"links":{"cited_paper":"/paper/2312.06674","citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:49b7a75ed1eadd44ed5a7d54bb363f3964db44df25909d15f87d581a23ae34f9","observation_id":"d921dd8d-c965-4623-97ef-556a87ee48b0","resolution":{"observed_at":"2026-08-01T04:12:58.712067Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.14922","snapshot_observed_at":"2026-08-01T04:12:58.717397Z","title":"Knight, Kaustubh Deshpande, Ved Sirdeshmukh, Meher Mankikar, Scale Red Team, SEAL Research Team, and Julian Michael","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-15T14:40:33.728979Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":52,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.717397Z"},"links":{"cited_paper":"/paper/2506.14922","citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:74045969b3ca526e508ca387248d03c54c208248242b1639864675b249ee3cd9","observation_id":"df0c230d-5c14-4555-a6b6-4dc5eb2ba4e8","resolution":{"observed_at":"2026-08-01T04:12:58.717397Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.722561Z","title":"PRISM 4.0: Verification of probabilistic real-time systems","venue":null,"work_id":null,"year":2011},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-15T14:40:33.728979Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":53,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.722561Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:fd21e971fa53465cd069f1ba87207e6f2ea8c03b92ed8053af1fef13ca82e182","observation_id":"a4d97111-8556-4ca6-bd93-bd6f91f79161","resolution":{"observed_at":"2026-08-01T04:12:58.722561Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.727315Z","title":"A brief account of runtime verification","venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-15T14:40:33.728979Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":54,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.727315Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:fba7916328d96ea3eef78cb1136245f4c5ac625a05ddafebc96f51c9e10753d2","observation_id":"6ba8f4bc-4d22-4f68-b311-29d6b731947c","resolution":{"observed_at":"2026-08-01T04:12:58.727315Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.732089Z","title":"A holistic approach to undesired content detection in the real world","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-15T14:40:33.728979Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":55,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.732089Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:d55febecb991ee3f990711f4e452689cbe82ea8aeb413ae51c53b92a546729e8","observation_id":"262a9b1d-6929-40ec-89e7-43119cc7b77d","resolution":{"observed_at":"2026-08-01T04:12:58.732089Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.736675Z","title":"HarmBench : A standardized evaluation framework for automated red teaming and robust refusal","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-15T14:40:33.728979Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":56,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.736675Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:48839e24e459ea0365946182f1d8ae2edf2c1d0e41f9b2b4543a271554412bc2","observation_id":"60a70377-0365-47ca-9a47-ab52212ae630","resolution":{"observed_at":"2026-08-01T04:12:58.736675Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.741851Z","title":"Artificial intelligence risk management framework ( AI RMF 1.0)","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-15T14:40:33.728979Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":57,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.741851Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:37d9141f42d17fdb4fd36f2fc32b56666f6fe5f64cf71985feb929159d9df520","observation_id":"81970eb8-bc0d-435c-8243-2ab1ff0a3267","resolution":{"observed_at":"2026-08-01T04:12:58.741851Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.746477Z","title":"Artificial intelligence risk management framework: Generative artificial intelligence profile","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-15T14:40:33.728979Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":58,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.746477Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:db859b3646cb011b18e8a2125edba5983c9289c70138a86edb719cc1a55c5392","observation_id":"f7875d81-c32f-4c5c-a375-8bb729e3450f","resolution":{"observed_at":"2026-08-01T04:12:58.746477Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.751486Z","title":"CAISI evaluation of DeepSeek ai models finds shortcomings and risks","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-15T14:40:33.728979Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":59,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.751486Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:91b2f5d1b038fce732817f340b100ad9e1c52d8a1db9148e04cc673556a79913","observation_id":"813e2c9f-0a7b-46e7-8ea0-5e5da20023c2","resolution":{"observed_at":"2026-08-01T04:12:58.751486Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.755866Z","title":"GPT-5 system card, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-15T14:40:33.728979Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":60,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.755866Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:ec1c54b3ab3c552ef4a56b42f861d0158e62f3e02e9b0368597d8a858317db4e","observation_id":"8c2266c6-4d8b-4abe-a70d-78fdef69d4ca","resolution":{"observed_at":"2026-08-01T04:12:58.755866Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.760363Z","title":"GPT-5.5 system card, 2026","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-15T14:40:33.728979Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":61,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.760363Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:775947459d4aeeb4b34dd7fa907bbff3437fc6ccbb4b8370d11b8c6b6d820fda","observation_id":"a44b9562-4e4e-4158-90da-effe1154a8df","resolution":{"observed_at":"2026-08-01T04:12:58.760363Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.13793","last_updated":"2024-04-05T12:26:11Z","snapshot_observed_at":"2026-08-16T14:07:56.490852Z","submitted_at":"2024-03-20T17:54:26Z","title":"Evaluating Frontier Models for Dangerous Capabilities","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.13793","snapshot_observed_at":"2026-08-01T04:12:58.764877Z","title":"Evaluating frontier models for dangerous capabilities","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-15T14:40:33.728979Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":62,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.764877Z"},"links":{"cited_paper":"/paper/2403.13793","citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:e212b09f8d96b8bd26576ced45bf7c589854a158a40f325b1662c4c6ce1a383a","observation_id":"1cc1b510-a081-4d37-a465-c8fa80c98ce4","resolution":{"observed_at":"2026-08-01T04:12:58.764877Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.769159Z","title":"NeMo guardrails: A toolkit for controllable and safe LLM applications with programmable rails","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-15T14:40:33.728979Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":63,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.769159Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:bf51f2c7eb494363f98312b8565398648ef9b10da1fe70971a94a4512bac992d","observation_id":"6c60f9e8-3e1f-4254-8244-8600bc86b4d8","resolution":{"observed_at":"2026-08-01T04:12:58.769159Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.773831Z","title":"XSTest : A test suite for identifying exaggerated safety behaviours in large language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-15T14:40:33.728979Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":64,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.773831Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:948b85c140391480dcf898fa821477b325340489ff137ff47bef93d65f27195f","observation_id":"76462850-05c8-4e54-a52a-3e78fa128dd6","resolution":{"observed_at":"2026-08-01T04:12:58.773831Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.778247Z","title":"Saltzer and Michael D","venue":null,"work_id":null,"year":1975},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-15T14:40:33.728979Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":65,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.778247Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:d6bd8e3a20873b4ce61fa09ebedcb334427ccd60101bbdd38dc3757880a217ac","observation_id":"3a7feac4-3d05-441e-ba13-57d03795735e","resolution":{"observed_at":"2026-08-01T04:12:58.778247Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2501.18837","last_updated":"2025-01-31T01:09:32Z","snapshot_observed_at":"2026-08-08T23:58:18.293467Z","submitted_at":"2025-01-31T01:09:32Z","title":"Constitutional Classifiers: Defending against Universal Jailbreaks across Thousands of Hours of Red Teaming","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.18837","snapshot_observed_at":"2026-08-01T04:12:58.782750Z","title":"Constitutional classifiers: Defending against universal jailbreaks across thousands of hours of red teaming","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-15T14:40:33.728979Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":66,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.782750Z"},"links":{"cited_paper":"/paper/2501.18837","citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:6f8f881fcfc65bbbf7c00272f7282689c2706b8af250ad2ce26c1bb8d126d500","observation_id":"b4b4bc95-6f10-4c78-bee9-f8301d54e997","resolution":{"observed_at":"2026-08-01T04:12:58.782750Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.787855Z","title":"Judging the judges: A systematic study of position bias in LLM -as-a-judge","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-15T14:40:33.728979Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":67,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.787855Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:b37316812035d20a0e4c8f781bf92d2be8159bad95dda8144dd56741adf6ef7d","observation_id":"71c8b7a1-6495-44bc-a25b-fd2cd0dc4005","resolution":{"observed_at":"2026-08-01T04:12:58.787855Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.792585Z","title":"A StrongREJECT for empty jailbreaks","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-15T14:40:33.728979Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":68,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.792585Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:1b1c9cd1152172cbc98c5674c2156edd8a81cc2303fe0d0fcdb822e7c6e6a755","observation_id":"5df24c37-9aa2-4d7b-ba37-12d9d6864e5f","resolution":{"observed_at":"2026-08-01T04:12:58.792585Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.797189Z","title":"Frontier AI safety commitments, AI seoul summit 2024, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-15T14:40:33.728979Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":69,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.797189Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:09d8f3a3cb84362c2095152754e346f808f859ccbaf1900714e598c463c94727","observation_id":"90034dc1-7a10-4e5c-bbaa-aca42dac7f46","resolution":{"observed_at":"2026-08-01T04:12:58.797189Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.802025Z","title":"Grok 4.1 model card, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-15T14:40:33.728979Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":70,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.802025Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:8fa7ecf8039ec3c091885d7be95925d029e8a3a6d605df335c565355e6f9959d","observation_id":"5fa189bb-86f1-4bba-aff1-8d6c721b71fd","resolution":{"observed_at":"2026-08-01T04:12:58.802025Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.806410Z","title":"SORRY-Bench : Systematically evaluating large language model safety refusal","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-15T14:40:33.728979Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":71,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.806410Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:477cef24bfb89f1ce5628bfa206384f16127cdcf224d261195b6d3338106043a","observation_id":"ccf80d18-6a88-4ddf-bc67-ab897124dd4b","resolution":{"observed_at":"2026-08-01T04:12:58.806410Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.21772","last_updated":"2024-08-04T22:13:39Z","snapshot_observed_at":"2026-08-15T05:00:37.014348Z","submitted_at":"2024-07-31T17:48:14Z","title":"ShieldGemma: Generative AI Content Moderation Based on Gemma","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.21772","snapshot_observed_at":"2026-08-01T04:12:58.810542Z","title":"ShieldGemma : Generative AI content moderation based on Gemma","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-15T14:40:33.728979Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":72,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.810542Z"},"links":{"cited_paper":"/paper/2407.21772","citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:d69547cbb2af96c38bca5123d251c9b4337e737b96000cdafcaf9b9e04871732","observation_id":"679131dd-d80e-44e7-9fc4-fcbb10eb3d2a","resolution":{"observed_at":"2026-08-01T04:12:58.810542Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.815158Z","title":"Judging LLM -as-a-judge with MT-Bench and chatbot arena","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-15T14:40:33.728979Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":73,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.815158Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:a71e5fd8308323b0a7cadbe949fb605cea37c09427591a6fc4b392e51bd3ed97","observation_id":"20ab5d61-2eaa-4375-92a1-14c712e8dede","resolution":{"observed_at":"2026-08-01T04:12:58.815158Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","latest_version":1,"primary_category":"cs.AI","snapshot_observed_at":"2026-08-15T14:40:33.728979Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI"},"reference_resolution":{"displayed":71,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":2,"unresolved":69,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":71},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"thesis":"As of 17 August 2026, this Paper Citation Record lists 71 of 71 outbound references and 0 inbound Pith citation observations for arXiv:2607.22926."}