{"as_of":"2026-08-09T20:55:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:5854203d7bbacb7782f69595addf82f53f1dbd35aae22de12fc5fe7727bc576e","coverage":[{"denominator":31,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":31,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-01T03:57:59.499913Z","state":"measured"},{"denominator":31,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":31,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2607.23015/citation-record","integrity":"/paper/2607.23015/integrity","json":"/paper/2607.23015/citation-record.json","paper":"/paper/2607.23015"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T03:57:55.174461Z","title":"{TwinBreak}: Jailbreaking {LLM}security alignments based on twin prompts,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.23015","last_updated":"2026-07-25T03:16:07Z","snapshot_observed_at":"2026-08-08T03:52:45.978856Z","submitted_at":"2026-07-25T03:16:07Z","title":"Mask2Shield: Strengthening LLM Safety against Neuron-Pruning Attacks","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-01T03:57:55.174461Z"},"links":{"citing_paper":"/paper/2607.23015"},"observation_digest":"sha256:7c0669403a9176fb35584756f4f2064422948b808b0855d025178f656a7a87bf","observation_id":"796cccb9-c854-4cd8-bcf7-b97beb564428","resolution":{"observed_at":"2026-08-01T03:57:55.174461Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T03:57:55.328738Z","title":"Neurostrike: Neuron-level attacks on aligned llms,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.23015","last_updated":"2026-07-25T03:16:07Z","snapshot_observed_at":"2026-08-08T03:52:45.978856Z","submitted_at":"2026-07-25T03:16:07Z","title":"Mask2Shield: Strengthening LLM Safety against Neuron-Pruning Attacks","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-01T03:57:55.328738Z"},"links":{"citing_paper":"/paper/2607.23015"},"observation_digest":"sha256:ae9852dda3098bd1728e609fe6cdcbbc5c3d975585762775132fb217ad730dcc","observation_id":"0542ac60-b3ad-4695-9223-02353c38621f","resolution":{"observed_at":"2026-08-01T03:57:55.328738Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T03:57:55.463492Z","title":"Safeneuron: Neuron-level safety alignment for large language models,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.23015","last_updated":"2026-07-25T03:16:07Z","snapshot_observed_at":"2026-08-08T03:52:45.978856Z","submitted_at":"2026-07-25T03:16:07Z","title":"Mask2Shield: Strengthening LLM Safety against Neuron-Pruning Attacks","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-01T03:57:55.463492Z"},"links":{"citing_paper":"/paper/2607.23015"},"observation_digest":"sha256:aadf1f5dee5858dd6038ec4eeb46143cefb0126f1fd91a3c26392d1293d130b4","observation_id":"83ed6338-5e31-4e91-b44b-98cfaf8cb0c8","resolution":{"observed_at":"2026-08-01T03:57:55.463492Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T03:57:55.725939Z","title":"Training language models to follow instructions with human feedback,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.23015","last_updated":"2026-07-25T03:16:07Z","snapshot_observed_at":"2026-08-08T03:52:45.978856Z","submitted_at":"2026-07-25T03:16:07Z","title":"Mask2Shield: Strengthening LLM Safety against Neuron-Pruning Attacks","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-01T03:57:55.725939Z"},"links":{"citing_paper":"/paper/2607.23015"},"observation_digest":"sha256:3121c8ce561c7b2f0e4f7d71ae1ea955ac138211d38cf96503c7fc9a1749dce4","observation_id":"0f10810c-19e5-4cbf-be1b-fcaf1ee41741","resolution":{"observed_at":"2026-08-01T03:57:55.725939Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2212.08073","last_updated":"2022-12-15T06:19:23Z","snapshot_observed_at":"2026-08-02T04:53:58.766070Z","submitted_at":"2022-12-15T06:19:23Z","title":"Constitutional AI: Harmlessness from AI Feedback","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2212.08073","snapshot_observed_at":"2026-08-01T03:57:55.883947Z","title":"Constitutional AI: Harmlessness from AI feedback,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.23015","last_updated":"2026-07-25T03:16:07Z","snapshot_observed_at":"2026-08-08T03:52:45.978856Z","submitted_at":"2026-07-25T03:16:07Z","title":"Mask2Shield: Strengthening LLM Safety against Neuron-Pruning Attacks","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-01T03:57:55.883947Z"},"links":{"cited_paper":"/paper/2212.08073","citing_paper":"/paper/2607.23015"},"observation_digest":"sha256:c525f9e6c71d9255aa2ae6202b19548af010264768caf923e2ce7fd6121c2dc5","observation_id":"763ab5f8-1725-4eb3-9057-b09882cd4d27","resolution":{"observed_at":"2026-08-01T03:57:55.883947Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T03:57:56.021659Z","title":"Direct preference optimization: Your language model is secretly a reward model,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.23015","last_updated":"2026-07-25T03:16:07Z","snapshot_observed_at":"2026-08-08T03:52:45.978856Z","submitted_at":"2026-07-25T03:16:07Z","title":"Mask2Shield: Strengthening LLM Safety against Neuron-Pruning Attacks","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-01T03:57:56.021659Z"},"links":{"citing_paper":"/paper/2607.23015"},"observation_digest":"sha256:872644958e57b7aec7a68d43c786316a565ccb3ca6315142cbb91da31ef5ba29","observation_id":"ed44964b-fd73-48ec-9382-ab4d85dfd91a","resolution":{"observed_at":"2026-08-01T03:57:56.021659Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-07-06T15:59:23.019044Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-08-01T03:57:56.099899Z","title":"Universal and transferable adversarial attacks on aligned language models. arxiv,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.23015","last_updated":"2026-07-25T03:16:07Z","snapshot_observed_at":"2026-08-08T03:52:45.978856Z","submitted_at":"2026-07-25T03:16:07Z","title":"Mask2Shield: Strengthening LLM Safety against Neuron-Pruning Attacks","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-01T03:57:56.099899Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2607.23015"},"observation_digest":"sha256:a002d5d30d446e0e18eda9d055b341f30c886fa163897fef8f229e10939cdcb5","observation_id":"a2aad0b3-f51e-4ade-82c0-3d31167e7837","resolution":{"observed_at":"2026-08-01T03:57:56.099899Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.08419","last_updated":"2024-07-18T18:24:57Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-10-12T15:38:28Z","title":"Jailbreaking Black Box Large Language Models in Twenty Queries","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.08419","snapshot_observed_at":"2026-08-01T03:57:56.216801Z","title":"Jailbreaking black box large language models in twenty queries,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.23015","last_updated":"2026-07-25T03:16:07Z","snapshot_observed_at":"2026-08-08T03:52:45.978856Z","submitted_at":"2026-07-25T03:16:07Z","title":"Mask2Shield: Strengthening LLM Safety against Neuron-Pruning Attacks","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-01T03:57:56.216801Z"},"links":{"cited_paper":"/paper/2310.08419","citing_paper":"/paper/2607.23015"},"observation_digest":"sha256:007de681f90fb0c187453fc7fce20591de90643c5957f2b763065f991fd08f56","observation_id":"d757a4c6-6f55-4f11-a82f-ecdbd1b29937","resolution":{"observed_at":"2026-08-01T03:57:56.216801Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T03:57:56.314487Z","title":"Autodan: Generating stealthy jailbreak prompts on aligned large language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.23015","last_updated":"2026-07-25T03:16:07Z","snapshot_observed_at":"2026-08-08T03:52:45.978856Z","submitted_at":"2026-07-25T03:16:07Z","title":"Mask2Shield: Strengthening LLM Safety against Neuron-Pruning Attacks","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-01T03:57:56.314487Z"},"links":{"citing_paper":"/paper/2607.23015"},"observation_digest":"sha256:6e52184977ce55d16daa095973a89af302cba3480ed1d064aa38afa348e1e644","observation_id":"1e74c8c1-5d5b-4f6b-9a27-599da978a466","resolution":{"observed_at":"2026-08-01T03:57:56.314487Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T03:57:56.376108Z","title":"Fine-tuning aligned language models compromises safety, even when users do not intend to!","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.23015","last_updated":"2026-07-25T03:16:07Z","snapshot_observed_at":"2026-08-08T03:52:45.978856Z","submitted_at":"2026-07-25T03:16:07Z","title":"Mask2Shield: Strengthening LLM Safety against Neuron-Pruning Attacks","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-01T03:57:56.376108Z"},"links":{"citing_paper":"/paper/2607.23015"},"observation_digest":"sha256:4c957cb8b65160acc963228b2f7fee8c8c570113ee73963ffc736926b555f617","observation_id":"001c2a94-53fd-4dac-8ff8-bae64a4ebc47","resolution":{"observed_at":"2026-08-01T03:57:56.376108Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T03:57:56.418135Z","title":"Shortgpt: Layers in large language models are more redundant than you expect,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.23015","last_updated":"2026-07-25T03:16:07Z","snapshot_observed_at":"2026-08-08T03:52:45.978856Z","submitted_at":"2026-07-25T03:16:07Z","title":"Mask2Shield: Strengthening LLM Safety against Neuron-Pruning Attacks","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-01T03:57:56.418135Z"},"links":{"citing_paper":"/paper/2607.23015"},"observation_digest":"sha256:75e0d0417984ac3fd1edf3b98e5757f3043f7269fee979702905d024510a8af9","observation_id":"2aae0de6-c913-4bdc-bca5-5a1b869515cd","resolution":{"observed_at":"2026-08-01T03:57:56.418135Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T03:57:56.556177Z","title":"Blockpruner: Fine-grained pruning for large language models,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.23015","last_updated":"2026-07-25T03:16:07Z","snapshot_observed_at":"2026-08-08T03:52:45.978856Z","submitted_at":"2026-07-25T03:16:07Z","title":"Mask2Shield: Strengthening LLM Safety against Neuron-Pruning Attacks","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-01T03:57:56.556177Z"},"links":{"citing_paper":"/paper/2607.23015"},"observation_digest":"sha256:aeedf703123c233c1dace446d9d99c1af7202642955c95092749cef9942f77f7","observation_id":"712b6511-5db3-410d-8381-a8908ea86194","resolution":{"observed_at":"2026-08-01T03:57:56.556177Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T03:57:56.718260Z","title":"Finding safety neurons in large language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.23015","last_updated":"2026-07-25T03:16:07Z","snapshot_observed_at":"2026-08-08T03:52:45.978856Z","submitted_at":"2026-07-25T03:16:07Z","title":"Mask2Shield: Strengthening LLM Safety against Neuron-Pruning Attacks","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-01T03:57:56.718260Z"},"links":{"citing_paper":"/paper/2607.23015"},"observation_digest":"sha256:5729d4d17bc796c564e5f58e952028edbca2b738abb0115bb9ed6521cb42dd75","observation_id":"0d755635-e9c2-414d-94b3-92b174d6c9ea","resolution":{"observed_at":"2026-08-01T03:57:56.718260Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2508.09473","last_updated":"2025-08-13T04:05:28Z","snapshot_observed_at":"2026-08-08T12:54:38.707142Z","submitted_at":"2025-08-13T04:05:28Z","title":"NeuronTune: Fine-Grained Neuron Modulation for Balanced Safety-Utility Alignment in LLMs","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2508.09473","snapshot_observed_at":"2026-08-01T03:57:56.952079Z","title":"Neurontune: Fine-grained neuron modulation for balanced safety-utility alignment in llms,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.23015","last_updated":"2026-07-25T03:16:07Z","snapshot_observed_at":"2026-08-08T03:52:45.978856Z","submitted_at":"2026-07-25T03:16:07Z","title":"Mask2Shield: Strengthening LLM Safety against Neuron-Pruning Attacks","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-01T03:57:56.952079Z"},"links":{"cited_paper":"/paper/2508.09473","citing_paper":"/paper/2607.23015"},"observation_digest":"sha256:30a5c22e5ae005a0046b2df28afb4e4ffa8b3e08853ef41b848d8623a2909353","observation_id":"a7ba6b8d-cf8f-4b51-bde4-6bf2cda23d72","resolution":{"observed_at":"2026-08-01T03:57:56.952079Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.21053","last_updated":"2025-04-29T05:49:35Z","snapshot_observed_at":"2026-08-07T15:58:21.745796Z","submitted_at":"2025-04-29T05:49:35Z","title":"NeuRel-Attack: Neuron Relearning for Safety Disalignment in Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.21053","snapshot_observed_at":"2026-08-01T03:57:57.052252Z","title":"Neurel-attack: Neuron relearning for safety disalignment in large language models,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.23015","last_updated":"2026-07-25T03:16:07Z","snapshot_observed_at":"2026-08-08T03:52:45.978856Z","submitted_at":"2026-07-25T03:16:07Z","title":"Mask2Shield: Strengthening LLM Safety against Neuron-Pruning Attacks","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-01T03:57:57.052252Z"},"links":{"cited_paper":"/paper/2504.21053","citing_paper":"/paper/2607.23015"},"observation_digest":"sha256:1be3b199877d584aad78198ad1391f46d568b01bd7773164f04cb5d389f70650","observation_id":"c1e420db-5126-429d-bbdc-2a73b18457bd","resolution":{"observed_at":"2026-08-01T03:57:57.052252Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T03:57:57.136280Z","title":"Fine- grained safety neurons with training-free continual projection to reduce llm fine tuning risks,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.23015","last_updated":"2026-07-25T03:16:07Z","snapshot_observed_at":"2026-08-08T03:52:45.978856Z","submitted_at":"2026-07-25T03:16:07Z","title":"Mask2Shield: Strengthening LLM Safety against Neuron-Pruning Attacks","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-01T03:57:57.136280Z"},"links":{"citing_paper":"/paper/2607.23015"},"observation_digest":"sha256:5ec15a959995c61b0a1d30ab3fa435d31ed800caebb0b1f16cfecf6f25c5f0ef","observation_id":"8d68b254-17c6-462e-8a8a-36d6ab56ad30","resolution":{"observed_at":"2026-08-01T03:57:57.136280Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.11717","last_updated":"2024-10-30T18:57:07Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-06-17T16:36:12Z","title":"Refusal in Language Models Is Mediated by a Single Direction","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.11717","snapshot_observed_at":"2026-08-01T03:57:57.180833Z","title":"Refusal in language models is mediated by a single direction,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.23015","last_updated":"2026-07-25T03:16:07Z","snapshot_observed_at":"2026-08-08T03:52:45.978856Z","submitted_at":"2026-07-25T03:16:07Z","title":"Mask2Shield: Strengthening LLM Safety against Neuron-Pruning Attacks","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-01T03:57:57.180833Z"},"links":{"cited_paper":"/paper/2406.11717","citing_paper":"/paper/2607.23015"},"observation_digest":"sha256:4efd26c236f8381d9d71a7a5f94bd3daf5399fa84ffbebfd6a60220c29360385","observation_id":"4ab34325-0e0d-46ee-8b72-53f9ccbb073a","resolution":{"observed_at":"2026-08-01T03:57:57.180833Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T03:57:57.344949Z","title":"Beyond surface alignment: Rebuilding llms safety mechanism via probabilistically ablating refusal direction,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.23015","last_updated":"2026-07-25T03:16:07Z","snapshot_observed_at":"2026-08-08T03:52:45.978856Z","submitted_at":"2026-07-25T03:16:07Z","title":"Mask2Shield: Strengthening LLM Safety against Neuron-Pruning Attacks","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-01T03:57:57.344949Z"},"links":{"citing_paper":"/paper/2607.23015"},"observation_digest":"sha256:9180cf389068e5417fb45cc5caea011d96c036bc64593efdb37a840959ab42a3","observation_id":"1cc20ce3-f571-4e38-baf4-da20d7705a6c","resolution":{"observed_at":"2026-08-01T03:57:57.344949Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T03:57:57.470050Z","title":"Homotopic language reorganization in the right hemisphere after early left hemisphere injury,","venue":null,"work_id":null,"year":2012},"citing_paper":{"arxiv_id":"2607.23015","last_updated":"2026-07-25T03:16:07Z","snapshot_observed_at":"2026-08-08T03:52:45.978856Z","submitted_at":"2026-07-25T03:16:07Z","title":"Mask2Shield: Strengthening LLM Safety against Neuron-Pruning Attacks","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-01T03:57:57.470050Z"},"links":{"citing_paper":"/paper/2607.23015"},"observation_digest":"sha256:4026194eeb5ebe5bbf4135cbddac8071729eed220ca7b3ebbbc985395c3527fe","observation_id":"49d682ec-adb4-400a-8506-dad91974dee9","resolution":{"observed_at":"2026-08-01T03:57:57.470050Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T03:57:57.605873Z","title":"Speak- ing with a single cerebral hemisphere: fmri language organization after hemispherectomy in childhood,","venue":null,"work_id":null,"year":2008},"citing_paper":{"arxiv_id":"2607.23015","last_updated":"2026-07-25T03:16:07Z","snapshot_observed_at":"2026-08-08T03:52:45.978856Z","submitted_at":"2026-07-25T03:16:07Z","title":"Mask2Shield: Strengthening LLM Safety against Neuron-Pruning Attacks","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-01T03:57:57.605873Z"},"links":{"citing_paper":"/paper/2607.23015"},"observation_digest":"sha256:0fd0f53b1e7193d04fdde9eae1ab053ca2fc6215b7d450ca757aede7a1706475","observation_id":"4f09300d-11b9-4e25-b073-12ccf9f44107","resolution":{"observed_at":"2026-08-01T03:57:57.605873Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.15115","last_updated":"2025-01-03T02:18:21Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-12-19T17:56:09Z","title":"Qwen2.5 Technical Report","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.15115","snapshot_observed_at":"2026-08-01T03:57:57.763420Z","title":"Qwen2.5 technical report,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.23015","last_updated":"2026-07-25T03:16:07Z","snapshot_observed_at":"2026-08-08T03:52:45.978856Z","submitted_at":"2026-07-25T03:16:07Z","title":"Mask2Shield: Strengthening LLM Safety against Neuron-Pruning Attacks","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-01T03:57:57.763420Z"},"links":{"cited_paper":"/paper/2412.15115","citing_paper":"/paper/2607.23015"},"observation_digest":"sha256:8a8464d786afbc4c03a837281ca5bfbeafb5ef4d1eabf372486f189c43ecea3d","observation_id":"1e2a5483-bada-415e-b776-1842bf376991","resolution":{"observed_at":"2026-08-01T03:57:57.763420Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.21783","last_updated":"2024-11-23T23:27:33Z","snapshot_observed_at":"2026-07-06T18:55:11.576666Z","submitted_at":"2024-07-31T17:54:27Z","title":"The Llama 3 Herd of Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.21783","snapshot_observed_at":"2026-08-01T03:57:57.999000Z","title":"The llama 3 herd of models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.23015","last_updated":"2026-07-25T03:16:07Z","snapshot_observed_at":"2026-08-08T03:52:45.978856Z","submitted_at":"2026-07-25T03:16:07Z","title":"Mask2Shield: Strengthening LLM Safety against Neuron-Pruning Attacks","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-01T03:57:57.999000Z"},"links":{"cited_paper":"/paper/2407.21783","citing_paper":"/paper/2607.23015"},"observation_digest":"sha256:423c813e7e13c0f17f9ddc86419a77dee80e557dde5c6476336234a1dd41f877","observation_id":"f8c18103-c801-421f-907d-cd234a279709","resolution":{"observed_at":"2026-08-01T03:57:57.999000Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2501.12948","last_updated":"2026-01-04T03:57:36Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-01-22T15:19:35Z","title":"DeepSeek-R1: Incentivizing Reasoning Capability in LLMs via Reinforcement Learning","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.12948","snapshot_observed_at":"2026-08-01T03:57:58.210781Z","title":"Deepseek-r1: Incentivizing reasoning capability in llms via reinforcement learning,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.23015","last_updated":"2026-07-25T03:16:07Z","snapshot_observed_at":"2026-08-08T03:52:45.978856Z","submitted_at":"2026-07-25T03:16:07Z","title":"Mask2Shield: Strengthening LLM Safety against Neuron-Pruning Attacks","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-01T03:57:58.210781Z"},"links":{"cited_paper":"/paper/2501.12948","citing_paper":"/paper/2607.23015"},"observation_digest":"sha256:5936f2baba03a79c632709d4989ccd7961a0099e4d557a56a88a05d759a10846","observation_id":"75ede269-a074-48c7-ac30-923e19625928","resolution":{"observed_at":"2026-08-01T03:57:58.210781Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.08295","last_updated":"2024-04-16T12:52:47Z","snapshot_observed_at":"2026-08-03T03:29:01.959523Z","submitted_at":"2024-03-13T06:59:16Z","title":"Gemma: Open Models Based on Gemini Research and Technology","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.08295","snapshot_observed_at":"2026-08-01T03:57:58.396900Z","title":"Gemma: Open models based on gemini research and technology,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.23015","last_updated":"2026-07-25T03:16:07Z","snapshot_observed_at":"2026-08-08T03:52:45.978856Z","submitted_at":"2026-07-25T03:16:07Z","title":"Mask2Shield: Strengthening LLM Safety against Neuron-Pruning Attacks","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-01T03:57:58.396900Z"},"links":{"cited_paper":"/paper/2403.08295","citing_paper":"/paper/2607.23015"},"observation_digest":"sha256:0e85f1820800d85db8dfeba18df623afc45af7ea4fff6549b86376c45948d6cd","observation_id":"c869549f-6e94-440a-98ca-4b640c0689ff","resolution":{"observed_at":"2026-08-01T03:57:58.396900Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.08905","last_updated":"2024-12-12T03:37:41Z","snapshot_observed_at":"2026-08-05T04:04:21.846023Z","submitted_at":"2024-12-12T03:37:41Z","title":"Phi-4 Technical Report","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.08905","snapshot_observed_at":"2026-08-01T03:57:58.568949Z","title":"Phi- 4 technical report,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.23015","last_updated":"2026-07-25T03:16:07Z","snapshot_observed_at":"2026-08-08T03:52:45.978856Z","submitted_at":"2026-07-25T03:16:07Z","title":"Mask2Shield: Strengthening LLM Safety against Neuron-Pruning Attacks","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-01T03:57:58.568949Z"},"links":{"cited_paper":"/paper/2412.08905","citing_paper":"/paper/2607.23015"},"observation_digest":"sha256:cadd8ec2cb67b9ee39ebeaf2c58eafc0f05829b3bf1131189c673a4734e3f81f","observation_id":"a9530001-e977-441a-8566-efbdeee74f12","resolution":{"observed_at":"2026-08-01T03:57:58.568949Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T03:57:58.664584Z","title":"A strongreject for empty jailbreaks,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.23015","last_updated":"2026-07-25T03:16:07Z","snapshot_observed_at":"2026-08-08T03:52:45.978856Z","submitted_at":"2026-07-25T03:16:07Z","title":"Mask2Shield: Strengthening LLM Safety against Neuron-Pruning Attacks","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-01T03:57:58.664584Z"},"links":{"citing_paper":"/paper/2607.23015"},"observation_digest":"sha256:a2030ace42c8c690e2d78833b619144edea0014782bd5b117b8cded0f47b9737","observation_id":"fdd8d583-5c33-46ba-bdc9-e3042292e405","resolution":{"observed_at":"2026-08-01T03:57:58.664584Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2110.14168","last_updated":"2021-11-18T00:23:45Z","snapshot_observed_at":"2026-08-07T01:45:38.840969Z","submitted_at":"2021-10-27T04:49:45Z","title":"Training Verifiers to Solve Math Word Problems","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2110.14168","snapshot_observed_at":"2026-08-01T03:57:58.789019Z","title":"Training verifiers to solve math word problems,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.23015","last_updated":"2026-07-25T03:16:07Z","snapshot_observed_at":"2026-08-08T03:52:45.978856Z","submitted_at":"2026-07-25T03:16:07Z","title":"Mask2Shield: Strengthening LLM Safety against Neuron-Pruning Attacks","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-01T03:57:58.789019Z"},"links":{"cited_paper":"/paper/2110.14168","citing_paper":"/paper/2607.23015"},"observation_digest":"sha256:37f9909841ae1503d225fee89da577fab2d6cdfbb0b3703eb9204c04cea91c22","observation_id":"cc742037-5b64-4fba-8eab-13828deb9e35","resolution":{"observed_at":"2026-08-01T03:57:58.789019Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-08-01T03:57:58.902932Z","title":"Harmbench: A standardized evaluation framework for automated red teaming and robust refusal,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.23015","last_updated":"2026-07-25T03:16:07Z","snapshot_observed_at":"2026-08-08T03:52:45.978856Z","submitted_at":"2026-07-25T03:16:07Z","title":"Mask2Shield: Strengthening LLM Safety against Neuron-Pruning Attacks","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-01T03:57:58.902932Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2607.23015"},"observation_digest":"sha256:94be8cafa0fd82d633c9727966ca0b30dcdc3b439ab2f2c8f9d094f31a278051","observation_id":"d92abd44-59b5-4ed1-8ab5-9f98cb132053","resolution":{"observed_at":"2026-08-01T03:57:58.902932Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T03:57:59.143074Z","title":"Jailbreakbench: An open robustness benchmark for jailbreaking large language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.23015","last_updated":"2026-07-25T03:16:07Z","snapshot_observed_at":"2026-08-08T03:52:45.978856Z","submitted_at":"2026-07-25T03:16:07Z","title":"Mask2Shield: Strengthening LLM Safety against Neuron-Pruning Attacks","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-01T03:57:59.143074Z"},"links":{"citing_paper":"/paper/2607.23015"},"observation_digest":"sha256:bd8c2be8f6d7cad08289fae94ffa3e3b1fd579e6caceb847c58cfca96fdfc0ee","observation_id":"97fa6519-e9d4-45ee-be84-5a35048870f5","resolution":{"observed_at":"2026-08-01T03:57:59.143074Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1803.05457","last_updated":"2018-03-14T18:04:21Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2018-03-14T18:04:21Z","title":"Think you have Solved Question Answering? Try ARC, the AI2 Reasoning Challenge","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1803.05457","snapshot_observed_at":"2026-08-01T03:57:59.326603Z","title":"Think you have solved question answering? try arc, the ai2 reasoning challenge,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2607.23015","last_updated":"2026-07-25T03:16:07Z","snapshot_observed_at":"2026-08-08T03:52:45.978856Z","submitted_at":"2026-07-25T03:16:07Z","title":"Mask2Shield: Strengthening LLM Safety against Neuron-Pruning Attacks","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-01T03:57:59.326603Z"},"links":{"cited_paper":"/paper/1803.05457","citing_paper":"/paper/2607.23015"},"observation_digest":"sha256:e07b39747a00b7dba3e3092342dce7d4db6d544e334897d72d8c1e05f6585ece","observation_id":"29940718-1331-43fe-b547-cc1e9e3f0ff3","resolution":{"observed_at":"2026-08-01T03:57:59.326603Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T03:57:59.499913Z","title":"Truthfulqa: Measuring how models mimic human falsehoods,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.23015","last_updated":"2026-07-25T03:16:07Z","snapshot_observed_at":"2026-08-08T03:52:45.978856Z","submitted_at":"2026-07-25T03:16:07Z","title":"Mask2Shield: Strengthening LLM Safety against Neuron-Pruning Attacks","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-01T03:57:59.499913Z"},"links":{"citing_paper":"/paper/2607.23015"},"observation_digest":"sha256:5206ad8de29986d832de62574f376485aaa0b3ce3017f46ca00d71ffd17b9520","observation_id":"efebfdfd-f71f-4ec9-9b91-c0c93cb989e4","resolution":{"observed_at":"2026-08-01T03:57:59.499913Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2607.23015","last_updated":"2026-07-25T03:16:07Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-08T03:52:45.978856Z","submitted_at":"2026-07-25T03:16:07Z","title":"Mask2Shield: Strengthening LLM Safety against Neuron-Pruning Attacks"},"reference_resolution":{"displayed":31,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":31,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":31},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 31 of 31 outbound references and 0 inbound Pith citation observations for arXiv:2607.23015."}