{"as_of":"2026-08-09T16:42:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:ccd76550bc624216b88939144756b7b23512a9606e7457f09a3add390d240a85","coverage":[{"denominator":75,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":75,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T10:46:10.952285Z","state":"measured"},{"denominator":75,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":75,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2608.05045/citation-record","integrity":"/paper/2608.05045/integrity","json":"/paper/2608.05045/citation-record.json","paper":"/paper/2608.05045"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:46:13.037583Z","title":null,"venue":null,"work_id":"54e7b462-5d5f-44c6-9cb4-c41a25d033ad","year":2025},"citing_paper":{"arxiv_id":"2608.05045","last_updated":"2026-08-05T16:55:59Z","snapshot_observed_at":"2026-08-08T23:13:50.307997Z","submitted_at":"2026-08-05T16:55:59Z","title":"Gradient Immunity: Null-Space Resistance to Malicious Fine-Tuning","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-06T10:46:10.444222Z"},"links":{"citing_paper":"/paper/2608.05045"},"observation_digest":"sha256:92f44a2b597135c59ee4d9f38cadee56243d8f98f5d30aa354931e99bae068e1","observation_id":"5c3cf5b5-cb96-447e-9c8c-c17931e17a42","resolution":{"observed_at":"2026-08-06T10:46:13.042442Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:46:13.021419Z","title":null,"venue":null,"work_id":"39c99597-d4d4-44d4-9ab2-3d85d3bef382","year":2024},"citing_paper":{"arxiv_id":"2608.05045","last_updated":"2026-08-05T16:55:59Z","snapshot_observed_at":"2026-08-08T23:13:50.307997Z","submitted_at":"2026-08-05T16:55:59Z","title":"Gradient Immunity: Null-Space Resistance to Malicious Fine-Tuning","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-06T10:46:10.459686Z"},"links":{"citing_paper":"/paper/2608.05045"},"observation_digest":"sha256:bd0db2320b352487d23f9490821a3e6cf34fa53b8b6a198b697d6b152db8b567","observation_id":"b3c380bd-f48f-4407-9c2d-1c906c2b576e","resolution":{"observed_at":"2026-08-06T10:46:13.026658Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:46:12.999458Z","title":null,"venue":null,"work_id":"c3bfaedc-7dc4-4239-88f9-90131846b92a","year":2026},"citing_paper":{"arxiv_id":"2608.05045","last_updated":"2026-08-05T16:55:59Z","snapshot_observed_at":"2026-08-08T23:13:50.307997Z","submitted_at":"2026-08-05T16:55:59Z","title":"Gradient Immunity: Null-Space Resistance to Malicious Fine-Tuning","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-06T10:46:10.466525Z"},"links":{"citing_paper":"/paper/2608.05045"},"observation_digest":"sha256:673889c4edfc1c6b032a90097f6d4f5bca7e736c0028e84ed6625b555f2bd1c6","observation_id":"234d741f-9a19-4d8a-b8e5-b7d128fb5f48","resolution":{"observed_at":"2026-08-06T10:46:13.005624Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:46:12.971018Z","title":null,"venue":null,"work_id":"0e1ebe18-c239-4cb3-978a-f97fbfb326ca","year":2025},"citing_paper":{"arxiv_id":"2608.05045","last_updated":"2026-08-05T16:55:59Z","snapshot_observed_at":"2026-08-08T23:13:50.307997Z","submitted_at":"2026-08-05T16:55:59Z","title":"Gradient Immunity: Null-Space Resistance to Malicious Fine-Tuning","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-06T10:46:10.491997Z"},"links":{"citing_paper":"/paper/2608.05045"},"observation_digest":"sha256:56c92879733d9e1bcaae3bbcc86023a7cac4c641987df58ed6b0266028f42407","observation_id":"26d1b98c-d6c8-4267-9d40-c097b0a74620","resolution":{"observed_at":"2026-08-06T10:46:12.978251Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:46:12.949879Z","title":null,"venue":null,"work_id":"5ee10785-e85f-47f6-9aa5-a2448a85ef4e","year":2024},"citing_paper":{"arxiv_id":"2608.05045","last_updated":"2026-08-05T16:55:59Z","snapshot_observed_at":"2026-08-08T23:13:50.307997Z","submitted_at":"2026-08-05T16:55:59Z","title":"Gradient Immunity: Null-Space Resistance to Malicious Fine-Tuning","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-06T10:46:10.511585Z"},"links":{"citing_paper":"/paper/2608.05045"},"observation_digest":"sha256:8c281d926ca4c3cad9b55d9acabe7a772ee3d51ed577b4af917e6c0ff1ffd46b","observation_id":"4c22ae2f-37c6-4fd2-af09-dc1555e1c12d","resolution":{"observed_at":"2026-08-06T10:46:12.955651Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:46:10.515756Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.05045","last_updated":"2026-08-05T16:55:59Z","snapshot_observed_at":"2026-08-08T23:13:50.307997Z","submitted_at":"2026-08-05T16:55:59Z","title":"Gradient Immunity: Null-Space Resistance to Malicious Fine-Tuning","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-06T10:46:10.515756Z"},"links":{"citing_paper":"/paper/2608.05045"},"observation_digest":"sha256:9086e23b569fa30538c022e3f0d4e55cccef9164b1e72e0e503e1b931fc37165","observation_id":"30bfdf24-f8b0-4fd3-98e3-48ff5e5c724f","resolution":{"observed_at":"2026-08-06T10:46:10.515756Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:46:10.528203Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.05045","last_updated":"2026-08-05T16:55:59Z","snapshot_observed_at":"2026-08-08T23:13:50.307997Z","submitted_at":"2026-08-05T16:55:59Z","title":"Gradient Immunity: Null-Space Resistance to Malicious Fine-Tuning","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-06T10:46:10.528203Z"},"links":{"citing_paper":"/paper/2608.05045"},"observation_digest":"sha256:7aa481af23be16683bebb729a0370088bdc2f85e2c456c10ef8b6b70fa64a6f2","observation_id":"495aaa2c-3637-4200-9207-d9833090710a","resolution":{"observed_at":"2026-08-06T10:46:10.528203Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:46:12.895863Z","title":null,"venue":null,"work_id":"e7f22b04-f667-4f3f-84d6-f76c76556c27","year":2025},"citing_paper":{"arxiv_id":"2608.05045","last_updated":"2026-08-05T16:55:59Z","snapshot_observed_at":"2026-08-08T23:13:50.307997Z","submitted_at":"2026-08-05T16:55:59Z","title":"Gradient Immunity: Null-Space Resistance to Malicious Fine-Tuning","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-06T10:46:10.537403Z"},"links":{"citing_paper":"/paper/2608.05045"},"observation_digest":"sha256:31561df1bff2e3441ebaf0a03bb65214ffba314ad3467a916dd2c46647654bbd","observation_id":"51ff7ab9-2d24-4581-8a23-e1cb2532944a","resolution":{"observed_at":"2026-08-06T10:46:12.900265Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:46:12.877419Z","title":null,"venue":null,"work_id":"48283aa6-6907-4077-8c81-04edcfd79013","year":2024},"citing_paper":{"arxiv_id":"2608.05045","last_updated":"2026-08-05T16:55:59Z","snapshot_observed_at":"2026-08-08T23:13:50.307997Z","submitted_at":"2026-08-05T16:55:59Z","title":"Gradient Immunity: Null-Space Resistance to Malicious Fine-Tuning","version":1},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-06T10:46:10.550933Z"},"links":{"citing_paper":"/paper/2608.05045"},"observation_digest":"sha256:2a3f89b614cf6ac43ad0de4caeb44c8511a3c2b4e8c8866db1cf0b089aba4af1","observation_id":"c19b4faa-c8d7-4e26-88ff-d9f5058cff77","resolution":{"observed_at":"2026-08-06T10:46:12.882655Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:46:10.559856Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.05045","last_updated":"2026-08-05T16:55:59Z","snapshot_observed_at":"2026-08-08T23:13:50.307997Z","submitted_at":"2026-08-05T16:55:59Z","title":"Gradient Immunity: Null-Space Resistance to Malicious Fine-Tuning","version":1},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-08-06T10:46:10.559856Z"},"links":{"citing_paper":"/paper/2608.05045"},"observation_digest":"sha256:00182c692ee4d0358255ecc20727b156fc067cdf691d879729b5d0bbf563fce5","observation_id":"0ecce0aa-d2f4-43d7-b40f-046d8b5aff98","resolution":{"observed_at":"2026-08-06T10:46:10.559856Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:46:12.861147Z","title":null,"venue":null,"work_id":"bc5fb5c4-7729-4705-bc6d-07a5c65647ed","year":2025},"citing_paper":{"arxiv_id":"2608.05045","last_updated":"2026-08-05T16:55:59Z","snapshot_observed_at":"2026-08-08T23:13:50.307997Z","submitted_at":"2026-08-05T16:55:59Z","title":"Gradient Immunity: Null-Space Resistance to Malicious Fine-Tuning","version":1},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-08-06T10:46:10.564088Z"},"links":{"citing_paper":"/paper/2608.05045"},"observation_digest":"sha256:02434858c577f026064d8ffa8ecfccca24ed0bd2098e72b7d3a936b6dfae0744","observation_id":"93fdec38-2566-462a-9d24-7ea45d9eb06c","resolution":{"observed_at":"2026-08-06T10:46:12.865970Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:46:12.843193Z","title":null,"venue":null,"work_id":"587dd63d-40b7-4ce5-8f99-f4f138df4d53","year":2025},"citing_paper":{"arxiv_id":"2608.05045","last_updated":"2026-08-05T16:55:59Z","snapshot_observed_at":"2026-08-08T23:13:50.307997Z","submitted_at":"2026-08-05T16:55:59Z","title":"Gradient Immunity: Null-Space Resistance to Malicious Fine-Tuning","version":1},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-08-06T10:46:10.599096Z"},"links":{"citing_paper":"/paper/2608.05045"},"observation_digest":"sha256:0fdb40b72dfb661b2b00c4123477f5060f7eab89d0d7eaa4e4fc910d286a11f8","observation_id":"e2d7531a-98db-4bda-9df0-a676dc890f97","resolution":{"observed_at":"2026-08-06T10:46:12.848893Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:46:10.603254Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.05045","last_updated":"2026-08-05T16:55:59Z","snapshot_observed_at":"2026-08-08T23:13:50.307997Z","submitted_at":"2026-08-05T16:55:59Z","title":"Gradient Immunity: Null-Space Resistance to Malicious Fine-Tuning","version":1},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-08-06T10:46:10.603254Z"},"links":{"citing_paper":"/paper/2608.05045"},"observation_digest":"sha256:48812f1aaee5031bd927f3856f86ce6169863f48049b682f2f02ce3c0bff375c","observation_id":"36658e18-a41d-40a0-924a-f1c352b2ea1c","resolution":{"observed_at":"2026-08-06T10:46:10.603254Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:46:10.612506Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2608.05045","last_updated":"2026-08-05T16:55:59Z","snapshot_observed_at":"2026-08-08T23:13:50.307997Z","submitted_at":"2026-08-05T16:55:59Z","title":"Gradient Immunity: Null-Space Resistance to Malicious Fine-Tuning","version":1},"reference_index":38,"source":"arxiv_source","source_observed_at":"2026-08-06T10:46:10.612506Z"},"links":{"citing_paper":"/paper/2608.05045"},"observation_digest":"sha256:81288cb1b92430a99a3a6d44ab1695a940205681a66aecebc8e7bdea5678e0ee","observation_id":"b6254ff6-b343-4af5-be34-babcc2687151","resolution":{"observed_at":"2026-08-06T10:46:10.612506Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:46:12.792603Z","title":null,"venue":null,"work_id":"704ea332-dfbf-4005-bcf2-49e5fa09cd9b","year":2025},"citing_paper":{"arxiv_id":"2608.05045","last_updated":"2026-08-05T16:55:59Z","snapshot_observed_at":"2026-08-08T23:13:50.307997Z","submitted_at":"2026-08-05T16:55:59Z","title":"Gradient Immunity: Null-Space Resistance to Malicious Fine-Tuning","version":1},"reference_index":43,"source":"arxiv_source","source_observed_at":"2026-08-06T10:46:10.635004Z"},"links":{"citing_paper":"/paper/2608.05045"},"observation_digest":"sha256:f6b508f52a54e40ad77d836067be23118be4dbf79be338a01af957fc8ed49072","observation_id":"c2552b0a-90d4-45cb-a57b-a566b3a46d9c","resolution":{"observed_at":"2026-08-06T10:46:12.798496Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:46:12.772249Z","title":null,"venue":null,"work_id":"1566a662-a66c-4408-88bf-062a3ec5334f","year":2024},"citing_paper":{"arxiv_id":"2608.05045","last_updated":"2026-08-05T16:55:59Z","snapshot_observed_at":"2026-08-08T23:13:50.307997Z","submitted_at":"2026-08-05T16:55:59Z","title":"Gradient Immunity: Null-Space Resistance to Malicious Fine-Tuning","version":1},"reference_index":44,"source":"arxiv_source","source_observed_at":"2026-08-06T10:46:10.639568Z"},"links":{"citing_paper":"/paper/2608.05045"},"observation_digest":"sha256:752774f459f4b3dc45050a120106c122f77af279b1acc100e5bcaadccdfb0a19","observation_id":"32151cb2-76c5-4346-9468-908e37d4d003","resolution":{"observed_at":"2026-08-06T10:46:12.777694Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:46:10.671313Z","title":"Aho and Jeffrey D","venue":null,"work_id":null,"year":1972},"citing_paper":{"arxiv_id":"2608.05045","last_updated":"2026-08-05T16:55:59Z","snapshot_observed_at":"2026-08-08T23:13:50.307997Z","submitted_at":"2026-08-05T16:55:59Z","title":"Gradient Immunity: Null-Space Resistance to Malicious Fine-Tuning","version":1},"reference_index":51,"source":"arxiv_source","source_observed_at":"2026-08-06T10:46:10.671313Z"},"links":{"citing_paper":"/paper/2608.05045"},"observation_digest":"sha256:b50909c91b85ef27d673ab7c6e599da1a2fd48000059aef9373796a75cd47335","observation_id":"0c2e8ba9-4572-450d-a8ed-bf63f482ca3e","resolution":{"observed_at":"2026-08-06T10:46:10.671313Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:46:10.675254Z","title":null,"venue":null,"work_id":null,"year":1983},"citing_paper":{"arxiv_id":"2608.05045","last_updated":"2026-08-05T16:55:59Z","snapshot_observed_at":"2026-08-08T23:13:50.307997Z","submitted_at":"2026-08-05T16:55:59Z","title":"Gradient Immunity: Null-Space Resistance to Malicious Fine-Tuning","version":1},"reference_index":52,"source":"arxiv_source","source_observed_at":"2026-08-06T10:46:10.675254Z"},"links":{"citing_paper":"/paper/2608.05045"},"observation_digest":"sha256:1ef487ac05c688eed536d85deef298cda45227d16d6c849d5eeb365beffa4d5f","observation_id":"03b163a4-9963-43dd-9bcf-1154385a4338","resolution":{"observed_at":"2026-08-06T10:46:10.675254Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:46:10.679255Z","title":"Chandra and Dexter C","venue":null,"work_id":null,"year":1981},"citing_paper":{"arxiv_id":"2608.05045","last_updated":"2026-08-05T16:55:59Z","snapshot_observed_at":"2026-08-08T23:13:50.307997Z","submitted_at":"2026-08-05T16:55:59Z","title":"Gradient Immunity: Null-Space Resistance to Malicious Fine-Tuning","version":1},"reference_index":53,"source":"arxiv_source","source_observed_at":"2026-08-06T10:46:10.679255Z"},"links":{"citing_paper":"/paper/2608.05045"},"observation_digest":"sha256:e4682066a5e128d2911530aab48753258674f3cd79f2513c95498b778a064c4e","observation_id":"5cc1f613-ee65-4cc7-b553-ada8ba66a555","resolution":{"observed_at":"2026-08-06T10:46:10.679255Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:46:10.683998Z","title":"Scalable training of","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05045","last_updated":"2026-08-05T16:55:59Z","snapshot_observed_at":"2026-08-08T23:13:50.307997Z","submitted_at":"2026-08-05T16:55:59Z","title":"Gradient Immunity: Null-Space Resistance to Malicious Fine-Tuning","version":1},"reference_index":54,"source":"arxiv_source","source_observed_at":"2026-08-06T10:46:10.683998Z"},"links":{"citing_paper":"/paper/2608.05045"},"observation_digest":"sha256:f8b55674eed103b2ea1eafee6ec276d302a75c8c6ab0fed94860277d28e3867d","observation_id":"ec5faab3-84b3-4d26-8745-96987b418469","resolution":{"observed_at":"2026-08-06T10:46:10.683998Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:46:10.689390Z","title":null,"venue":null,"work_id":null,"year":1997},"citing_paper":{"arxiv_id":"2608.05045","last_updated":"2026-08-05T16:55:59Z","snapshot_observed_at":"2026-08-08T23:13:50.307997Z","submitted_at":"2026-08-05T16:55:59Z","title":"Gradient Immunity: Null-Space Resistance to Malicious Fine-Tuning","version":1},"reference_index":55,"source":"arxiv_source","source_observed_at":"2026-08-06T10:46:10.689390Z"},"links":{"citing_paper":"/paper/2608.05045"},"observation_digest":"sha256:c40aa2b1d96da3903223e4a6fab47ac6bc092613295bb131826a6774b8ff0102","observation_id":"9018e2fd-8064-4a57-b826-0e4d3eb90d71","resolution":{"observed_at":"2026-08-06T10:46:10.689390Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:46:10.694363Z","title":"Tetreault , title =","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2608.05045","last_updated":"2026-08-05T16:55:59Z","snapshot_observed_at":"2026-08-08T23:13:50.307997Z","submitted_at":"2026-08-05T16:55:59Z","title":"Gradient Immunity: Null-Space Resistance to Malicious Fine-Tuning","version":1},"reference_index":56,"source":"arxiv_source","source_observed_at":"2026-08-06T10:46:10.694363Z"},"links":{"citing_paper":"/paper/2608.05045"},"observation_digest":"sha256:317126037968e0a72253643706d246147abfbc7f72d5a4cd7cd5f8c1d5894e38","observation_id":"286e725d-6871-4146-a878-ab31c589f7ac","resolution":{"observed_at":"2026-08-06T10:46:10.694363Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:46:10.699556Z","title":"A Framework for Learning Predictive Structures from Multiple Tasks and Unlabeled Data , Volume =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05045","last_updated":"2026-08-05T16:55:59Z","snapshot_observed_at":"2026-08-08T23:13:50.307997Z","submitted_at":"2026-08-05T16:55:59Z","title":"Gradient Immunity: Null-Space Resistance to Malicious Fine-Tuning","version":1},"reference_index":57,"source":"arxiv_source","source_observed_at":"2026-08-06T10:46:10.699556Z"},"links":{"citing_paper":"/paper/2608.05045"},"observation_digest":"sha256:c6a51489c1ec347948fa5ed9b64763a956ea22b945ae75a9832c4ff9dc94f88a","observation_id":"97b012f1-8182-44c6-9144-9cac22bcf023","resolution":{"observed_at":"2026-08-06T10:46:10.699556Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:46:10.704658Z","title":"Advances in neural information processing systems , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05045","last_updated":"2026-08-05T16:55:59Z","snapshot_observed_at":"2026-08-08T23:13:50.307997Z","submitted_at":"2026-08-05T16:55:59Z","title":"Gradient Immunity: Null-Space Resistance to Malicious Fine-Tuning","version":1},"reference_index":58,"source":"arxiv_source","source_observed_at":"2026-08-06T10:46:10.704658Z"},"links":{"citing_paper":"/paper/2608.05045"},"observation_digest":"sha256:ef0f3cb576b5f827f22a857b58465073c1f7ef5871d0611e33fa0c401a823d14","observation_id":"6e972439-2ce7-4e32-9ce5-fb7c6919140e","resolution":{"observed_at":"2026-08-06T10:46:10.704658Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.19437","last_updated":"2025-02-18T17:26:38Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-12-27T04:03:16Z","title":"DeepSeek-V3 Technical Report","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.19437","snapshot_observed_at":"2026-08-06T10:46:10.710027Z","title":"arXiv preprint arXiv:2412.19437 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05045","last_updated":"2026-08-05T16:55:59Z","snapshot_observed_at":"2026-08-08T23:13:50.307997Z","submitted_at":"2026-08-05T16:55:59Z","title":"Gradient Immunity: Null-Space Resistance to Malicious Fine-Tuning","version":1},"reference_index":59,"source":"arxiv_source","source_observed_at":"2026-08-06T10:46:10.710027Z"},"links":{"cited_paper":"/paper/2412.19437","citing_paper":"/paper/2608.05045"},"observation_digest":"sha256:7102a57beea7606c2bc6ec2809e3fafc3a817f55c8d0596d94fb377fb9fcb77d","observation_id":"ed734afb-9791-449b-810b-2097b1e1858f","resolution":{"observed_at":"2026-08-06T10:46:10.710027Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:46:10.714542Z","title":"Hashimoto , title =","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.05045","last_updated":"2026-08-05T16:55:59Z","snapshot_observed_at":"2026-08-08T23:13:50.307997Z","submitted_at":"2026-08-05T16:55:59Z","title":"Gradient Immunity: Null-Space Resistance to Malicious Fine-Tuning","version":1},"reference_index":60,"source":"arxiv_source","source_observed_at":"2026-08-06T10:46:10.714542Z"},"links":{"citing_paper":"/paper/2608.05045"},"observation_digest":"sha256:bec5d3416a2337541be34dd022412bc0141d9d170dd02982384715afb7976dfb","observation_id":"a03a8cf0-6872-42e2-b9b9-91284ffcb2f5","resolution":{"observed_at":"2026-08-06T10:46:10.714542Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:46:10.719033Z","title":"IEEE Transactions on Knowledge and Data Engineering , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05045","last_updated":"2026-08-05T16:55:59Z","snapshot_observed_at":"2026-08-08T23:13:50.307997Z","submitted_at":"2026-08-05T16:55:59Z","title":"Gradient Immunity: Null-Space Resistance to Malicious Fine-Tuning","version":1},"reference_index":61,"source":"arxiv_source","source_observed_at":"2026-08-06T10:46:10.719033Z"},"links":{"citing_paper":"/paper/2608.05045"},"observation_digest":"sha256:907595a7d86d012f370a29d6f0b92f46836fb47340120d8946f52711c2e18c5c","observation_id":"8bdd9043-9fed-41eb-b836-45a5938e22d3","resolution":{"observed_at":"2026-08-06T10:46:10.719033Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.23829","last_updated":"2025-04-01T14:48:02Z","snapshot_observed_at":"2026-08-07T21:53:39.516862Z","submitted_at":"2025-03-31T08:22:49Z","title":"Crossing the Reward Bridge: Expanding RL with Verifiable Rewards Across Diverse Domains","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.23829","snapshot_observed_at":"2026-08-06T10:46:10.723383Z","title":"arXiv preprint arXiv:2503.23829 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05045","last_updated":"2026-08-05T16:55:59Z","snapshot_observed_at":"2026-08-08T23:13:50.307997Z","submitted_at":"2026-08-05T16:55:59Z","title":"Gradient Immunity: Null-Space Resistance to Malicious Fine-Tuning","version":1},"reference_index":62,"source":"arxiv_source","source_observed_at":"2026-08-06T10:46:10.723383Z"},"links":{"cited_paper":"/paper/2503.23829","citing_paper":"/paper/2608.05045"},"observation_digest":"sha256:55a84c6feb8422fe39cdf74a53d6b6a5e07165c7afb626e1e317f4ba336b6e19","observation_id":"2707c228-3d18-4c3a-96b0-dd1d011bc224","resolution":{"observed_at":"2026-08-06T10:46:10.723383Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:46:10.728987Z","title":"arXiv preprint arXiv:2503.06639 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05045","last_updated":"2026-08-05T16:55:59Z","snapshot_observed_at":"2026-08-08T23:13:50.307997Z","submitted_at":"2026-08-05T16:55:59Z","title":"Gradient Immunity: Null-Space Resistance to Malicious Fine-Tuning","version":1},"reference_index":63,"source":"arxiv_source","source_observed_at":"2026-08-06T10:46:10.728987Z"},"links":{"citing_paper":"/paper/2608.05045"},"observation_digest":"sha256:550270cd0f0a55ebd86bb7cb89823891a3d49e7f20481f4442a6822fe75339fb","observation_id":"36d82fa7-057d-4f7f-9279-5bda7a013f6d","resolution":{"observed_at":"2026-08-06T10:46:10.728987Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.21783","last_updated":"2024-11-23T23:27:33Z","snapshot_observed_at":"2026-07-06T18:55:11.576666Z","submitted_at":"2024-07-31T17:54:27Z","title":"The Llama 3 Herd of Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.21783","snapshot_observed_at":"2026-08-06T10:46:10.737787Z","title":"arXiv preprint arXiv:2407.21783 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05045","last_updated":"2026-08-05T16:55:59Z","snapshot_observed_at":"2026-08-08T23:13:50.307997Z","submitted_at":"2026-08-05T16:55:59Z","title":"Gradient Immunity: Null-Space Resistance to Malicious Fine-Tuning","version":1},"reference_index":64,"source":"arxiv_source","source_observed_at":"2026-08-06T10:46:10.737787Z"},"links":{"cited_paper":"/paper/2407.21783","citing_paper":"/paper/2608.05045"},"observation_digest":"sha256:3db3b233eef951cffa2d133fd36a68b51bb38310030ba02643720e4affbf4edf","observation_id":"ff0c9602-4487-4572-8657-2fd1d4bdbf4d","resolution":{"observed_at":"2026-08-06T10:46:10.737787Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2303.08774","last_updated":"2024-03-04T06:01:33Z","snapshot_observed_at":"2026-08-07T07:30:12.213965Z","submitted_at":"2023-03-15T17:15:04Z","title":"GPT-4 Technical Report","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.08774","snapshot_observed_at":"2026-08-06T10:46:10.742741Z","title":"arXiv preprint arXiv:2303.08774 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05045","last_updated":"2026-08-05T16:55:59Z","snapshot_observed_at":"2026-08-08T23:13:50.307997Z","submitted_at":"2026-08-05T16:55:59Z","title":"Gradient Immunity: Null-Space Resistance to Malicious Fine-Tuning","version":1},"reference_index":65,"source":"arxiv_source","source_observed_at":"2026-08-06T10:46:10.742741Z"},"links":{"cited_paper":"/paper/2303.08774","citing_paper":"/paper/2608.05045"},"observation_digest":"sha256:a3f18b3022cb534faf172987d54716cd4be4fbc5195b0adf80281ebf98e8f2ce","observation_id":"e62c6a20-8b4f-458e-b4b2-8c9d3fc8fe52","resolution":{"observed_at":"2026-08-06T10:46:10.742741Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:46:12.625558Z","title":"Proceedings of the 5th Workshop on Trustworthy NLP (TrustNLP 2025) , pages=","venue":null,"work_id":"da00ce6f-f393-4efe-a329-66f39f78fdd6","year":2025},"citing_paper":{"arxiv_id":"2608.05045","last_updated":"2026-08-05T16:55:59Z","snapshot_observed_at":"2026-08-08T23:13:50.307997Z","submitted_at":"2026-08-05T16:55:59Z","title":"Gradient Immunity: Null-Space Resistance to Malicious Fine-Tuning","version":1},"reference_index":66,"source":"arxiv_source","source_observed_at":"2026-08-06T10:46:10.748114Z"},"links":{"citing_paper":"/paper/2608.05045"},"observation_digest":"sha256:1ec701b8f8b53aa59acbd68899e6d9efc2a17778726a834f7535c0ccf01f57fc","observation_id":"5c5acc68-7473-4bc0-9fcd-1f406d57bfcd","resolution":{"observed_at":"2026-08-06T10:46:12.631043Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.05946","last_updated":"2024-06-10T00:35:23Z","snapshot_observed_at":"2026-08-08T03:05:18.803803Z","submitted_at":"2024-06-10T00:35:23Z","title":"Safety Alignment Should Be Made More Than Just a Few Tokens Deep","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.05946","snapshot_observed_at":"2026-08-06T10:46:10.753746Z","title":"arXiv preprint arXiv:2406.05946 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05045","last_updated":"2026-08-05T16:55:59Z","snapshot_observed_at":"2026-08-08T23:13:50.307997Z","submitted_at":"2026-08-05T16:55:59Z","title":"Gradient Immunity: Null-Space Resistance to Malicious Fine-Tuning","version":1},"reference_index":67,"source":"arxiv_source","source_observed_at":"2026-08-06T10:46:10.753746Z"},"links":{"cited_paper":"/paper/2406.05946","citing_paper":"/paper/2608.05045"},"observation_digest":"sha256:26936df02b0a8c15daef2902d58e79a67b83911f8d792d1211254ab3973ba463","observation_id":"3f8ab28d-1a8c-44a7-b8ce-684b4d2bc84d","resolution":{"observed_at":"2026-08-06T10:46:10.753746Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:46:12.607843Z","title":"Journal of Artificial Intelligence Research , volume=","venue":null,"work_id":"3327ddb4-54c2-4e1b-9db5-cefd2d1df9e0","year":null},"citing_paper":{"arxiv_id":"2608.05045","last_updated":"2026-08-05T16:55:59Z","snapshot_observed_at":"2026-08-08T23:13:50.307997Z","submitted_at":"2026-08-05T16:55:59Z","title":"Gradient Immunity: Null-Space Resistance to Malicious Fine-Tuning","version":1},"reference_index":68,"source":"arxiv_source","source_observed_at":"2026-08-06T10:46:10.758367Z"},"links":{"citing_paper":"/paper/2608.05045"},"observation_digest":"sha256:3c674600e74bab0bc092faffee09b81e8f8c361fe482f5910e1f46c37efb775c","observation_id":"d542465b-fdfa-4ccf-99d6-ffe5ee3f6090","resolution":{"observed_at":"2026-08-06T10:46:12.613083Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:46:12.585021Z","title":"Proceedings of the 2024 Conference on Empirical Methods in Natural Language Processing , pages=","venue":null,"work_id":"985fa2b1-cd8c-40db-8865-f3d4239e6acb","year":2024},"citing_paper":{"arxiv_id":"2608.05045","last_updated":"2026-08-05T16:55:59Z","snapshot_observed_at":"2026-08-08T23:13:50.307997Z","submitted_at":"2026-08-05T16:55:59Z","title":"Gradient Immunity: Null-Space Resistance to Malicious Fine-Tuning","version":1},"reference_index":69,"source":"arxiv_source","source_observed_at":"2026-08-06T10:46:10.763845Z"},"links":{"citing_paper":"/paper/2608.05045"},"observation_digest":"sha256:c47757e874950dfd90f48753e6a5ab698cc824a117ac1de682bee800622fb082","observation_id":"3d2159e0-9a4d-4990-ab08-8a4e9d25e6c4","resolution":{"observed_at":"2026-08-06T10:46:12.591204Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2409.18169","last_updated":"2026-04-23T18:48:49Z","snapshot_observed_at":"2026-07-06T19:22:58.341345Z","submitted_at":"2024-09-26T17:55:22Z","title":"Harmful Fine-tuning Attacks and Defenses for Large Language Models: A Survey","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.18169","snapshot_observed_at":"2026-08-06T10:46:10.768894Z","title":"arXiv preprint arXiv:2409.18169 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05045","last_updated":"2026-08-05T16:55:59Z","snapshot_observed_at":"2026-08-08T23:13:50.307997Z","submitted_at":"2026-08-05T16:55:59Z","title":"Gradient Immunity: Null-Space Resistance to Malicious Fine-Tuning","version":1},"reference_index":70,"source":"arxiv_source","source_observed_at":"2026-08-06T10:46:10.768894Z"},"links":{"cited_paper":"/paper/2409.18169","citing_paper":"/paper/2608.05045"},"observation_digest":"sha256:e123f9f8bcc0fc2a016aef96886e59499ca398ec1fc06b54d0c2f6e93bbde91c","observation_id":"0e2b956e-8f79-4c80-8f50-9a5642772462","resolution":{"observed_at":"2026-08-06T10:46:10.768894Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.05162","last_updated":"2024-10-24T19:21:52Z","snapshot_observed_at":"2026-08-02T21:32:36.729604Z","submitted_at":"2024-02-07T18:34:38Z","title":"Assessing the Brittleness of Safety Alignment via Pruning and Low-Rank Modifications","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.05162","snapshot_observed_at":"2026-08-06T10:46:10.773439Z","title":"arXiv preprint arXiv:2402.05162 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05045","last_updated":"2026-08-05T16:55:59Z","snapshot_observed_at":"2026-08-08T23:13:50.307997Z","submitted_at":"2026-08-05T16:55:59Z","title":"Gradient Immunity: Null-Space Resistance to Malicious Fine-Tuning","version":1},"reference_index":71,"source":"arxiv_source","source_observed_at":"2026-08-06T10:46:10.773439Z"},"links":{"cited_paper":"/paper/2402.05162","citing_paper":"/paper/2608.05045"},"observation_digest":"sha256:68c10044d822642ab400d9858ee6221f0d61ca0d7980af3dc242dda3d6b58099","observation_id":"b4088ce3-657f-4ac1-a4de-4894f73b47d5","resolution":{"observed_at":"2026-08-06T10:46:10.773439Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.07097","last_updated":"2024-12-10T01:30:32Z","snapshot_observed_at":"2026-08-07T16:36:45.547070Z","submitted_at":"2024-12-10T01:30:32Z","title":"On Evaluating the Durability of Safeguards for Open-Weight LLMs","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.07097","snapshot_observed_at":"2026-08-06T10:46:10.778458Z","title":"arXiv preprint arXiv:2412.07097 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05045","last_updated":"2026-08-05T16:55:59Z","snapshot_observed_at":"2026-08-08T23:13:50.307997Z","submitted_at":"2026-08-05T16:55:59Z","title":"Gradient Immunity: Null-Space Resistance to Malicious Fine-Tuning","version":1},"reference_index":72,"source":"arxiv_source","source_observed_at":"2026-08-06T10:46:10.778458Z"},"links":{"cited_paper":"/paper/2412.07097","citing_paper":"/paper/2608.05045"},"observation_digest":"sha256:470138b5aacdc43e5ea6c976550fb6320c9f470e40eb05d8acd7268bb0ce158a","observation_id":"ed83a59d-6dab-4734-840b-5f433016f900","resolution":{"observed_at":"2026-08-06T10:46:10.778458Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:46:12.566003Z","title":"2024 , organization=","venue":null,"work_id":"2d2679d6-5939-4a69-a27b-58f79025ab48","year":2024},"citing_paper":{"arxiv_id":"2608.05045","last_updated":"2026-08-05T16:55:59Z","snapshot_observed_at":"2026-08-08T23:13:50.307997Z","submitted_at":"2026-08-05T16:55:59Z","title":"Gradient Immunity: Null-Space Resistance to Malicious Fine-Tuning","version":1},"reference_index":73,"source":"arxiv_source","source_observed_at":"2026-08-06T10:46:10.783205Z"},"links":{"citing_paper":"/paper/2608.05045"},"observation_digest":"sha256:182d0456704426fcd85e7b156e08b398a4b51f589888ccbf2e04cb066df2c6e4","observation_id":"144359ed-ca38-4442-8464-54f121ffaf25","resolution":{"observed_at":"2026-08-06T10:46:12.570438Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.07875","last_updated":"2024-03-19T16:50:50Z","snapshot_observed_at":"2026-08-06T23:45:57.910675Z","submitted_at":"2023-09-14T17:23:37Z","title":"Safety-Tuned LLaMAs: Lessons From Improving the Safety of Large Language Models that Follow Instructions","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.07875","snapshot_observed_at":"2026-08-06T10:46:10.788244Z","title":"arXiv preprint arXiv:2309.07875 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05045","last_updated":"2026-08-05T16:55:59Z","snapshot_observed_at":"2026-08-08T23:13:50.307997Z","submitted_at":"2026-08-05T16:55:59Z","title":"Gradient Immunity: Null-Space Resistance to Malicious Fine-Tuning","version":1},"reference_index":74,"source":"arxiv_source","source_observed_at":"2026-08-06T10:46:10.788244Z"},"links":{"cited_paper":"/paper/2309.07875","citing_paper":"/paper/2608.05045"},"observation_digest":"sha256:7c4d0c14e9af8f742e1f8bfd3d4d925b580418f8cf9f9585b9a847aa30a30949","observation_id":"667e553b-e158-4630-803d-263c22a110fd","resolution":{"observed_at":"2026-08-06T10:46:10.788244Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.14577","last_updated":"2024-10-30T22:58:40Z","snapshot_observed_at":"2026-07-06T18:18:39.093732Z","submitted_at":"2024-05-23T13:51:55Z","title":"Representation Noising: A Defence Mechanism Against Harmful Finetuning","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.14577","snapshot_observed_at":"2026-08-06T10:46:10.792708Z","title":"arXiv preprint arXiv:2405.14577 , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05045","last_updated":"2026-08-05T16:55:59Z","snapshot_observed_at":"2026-08-08T23:13:50.307997Z","submitted_at":"2026-08-05T16:55:59Z","title":"Gradient Immunity: Null-Space Resistance to Malicious Fine-Tuning","version":1},"reference_index":75,"source":"arxiv_source","source_observed_at":"2026-08-06T10:46:10.792708Z"},"links":{"cited_paper":"/paper/2405.14577","citing_paper":"/paper/2608.05045"},"observation_digest":"sha256:36accd58cdb70e93fb88a80d07bde96c6d43c2923d92d08b4cd8d433d14d8974","observation_id":"54a12f0b-55c1-45d7-a659-426c261aec60","resolution":{"observed_at":"2026-08-06T10:46:10.792708Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.02207","last_updated":"2024-06-17T22:26:32Z","snapshot_observed_at":"2026-08-09T09:35:21.862266Z","submitted_at":"2024-02-03T16:43:42Z","title":"Safety Fine-Tuning at (Almost) No Cost: A Baseline for Vision Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.02207","snapshot_observed_at":"2026-08-06T10:46:10.797684Z","title":"arXiv preprint arXiv:2402.02207 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05045","last_updated":"2026-08-05T16:55:59Z","snapshot_observed_at":"2026-08-08T23:13:50.307997Z","submitted_at":"2026-08-05T16:55:59Z","title":"Gradient Immunity: Null-Space Resistance to Malicious Fine-Tuning","version":1},"reference_index":76,"source":"arxiv_source","source_observed_at":"2026-08-06T10:46:10.797684Z"},"links":{"cited_paper":"/paper/2402.02207","citing_paper":"/paper/2608.05045"},"observation_digest":"sha256:44a790763860651c899ae46332352bbe8976b1ca729d71a6d6f264695982411d","observation_id":"a2b8fe25-7ebe-41b8-95d7-33b9b1ea1b7a","resolution":{"observed_at":"2026-08-06T10:46:10.797684Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.05030","last_updated":"2025-07-29T09:44:14Z","snapshot_observed_at":"2026-08-07T17:43:00.958834Z","submitted_at":"2024-03-08T04:22:48Z","title":"Defending Against Unforeseen Failure Modes with Latent Adversarial Training","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.05030","snapshot_observed_at":"2026-08-06T10:46:10.802920Z","title":"arXiv preprint arXiv:2403.05030 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05045","last_updated":"2026-08-05T16:55:59Z","snapshot_observed_at":"2026-08-08T23:13:50.307997Z","submitted_at":"2026-08-05T16:55:59Z","title":"Gradient Immunity: Null-Space Resistance to Malicious Fine-Tuning","version":1},"reference_index":77,"source":"arxiv_source","source_observed_at":"2026-08-06T10:46:10.802920Z"},"links":{"cited_paper":"/paper/2403.05030","citing_paper":"/paper/2608.05045"},"observation_digest":"sha256:0d53a53eb01ddba53b849039665504ae7479fc1ec727f5f39181bd7423fb6896","observation_id":"754b9962-04f1-4710-aa62-72290b56d0eb","resolution":{"observed_at":"2026-08-06T10:46:10.802920Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:46:12.548686Z","title":"Knowledge-Based Systems , volume=","venue":null,"work_id":"58b19156-16ba-411f-8ce5-eb014dfcb46e","year":2024},"citing_paper":{"arxiv_id":"2608.05045","last_updated":"2026-08-05T16:55:59Z","snapshot_observed_at":"2026-08-08T23:13:50.307997Z","submitted_at":"2026-08-05T16:55:59Z","title":"Gradient Immunity: Null-Space Resistance to Malicious Fine-Tuning","version":1},"reference_index":78,"source":"arxiv_source","source_observed_at":"2026-08-06T10:46:10.807797Z"},"links":{"citing_paper":"/paper/2608.05045"},"observation_digest":"sha256:0f3b4e4fed2eb0f8680c703d24d8f25e5dc1013bf3130859095acc3877c80b15","observation_id":"e55d55a3-0d7d-443b-81b0-90da507fb213","resolution":{"observed_at":"2026-08-06T10:46:12.553732Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.10343","last_updated":"2024-10-14T09:58:29Z","snapshot_observed_at":"2026-08-09T07:11:49.358584Z","submitted_at":"2024-10-14T09:58:29Z","title":"Locking Down the Finetuned LLMs Safety","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.10343","snapshot_observed_at":"2026-08-06T10:46:10.812407Z","title":"arXiv preprint arXiv:2410.10343 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05045","last_updated":"2026-08-05T16:55:59Z","snapshot_observed_at":"2026-08-08T23:13:50.307997Z","submitted_at":"2026-08-05T16:55:59Z","title":"Gradient Immunity: Null-Space Resistance to Malicious Fine-Tuning","version":1},"reference_index":79,"source":"arxiv_source","source_observed_at":"2026-08-06T10:46:10.812407Z"},"links":{"cited_paper":"/paper/2410.10343","citing_paper":"/paper/2608.05045"},"observation_digest":"sha256:5d7f3688e00826800737ebc8cc28b35a84090049e705ae3a124ddda233f2d5e6","observation_id":"aa91c421-1b2d-46fe-97c1-347a8187fa22","resolution":{"observed_at":"2026-08-06T10:46:10.812407Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.02355","last_updated":"2025-04-22T16:15:47Z","snapshot_observed_at":"2026-08-08T23:26:11.950951Z","submitted_at":"2024-10-03T10:06:27Z","title":"AlphaEdit: Null-Space Constrained Knowledge Editing for Language Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.02355","snapshot_observed_at":"2026-08-06T10:46:10.816736Z","title":"arXiv preprint arXiv:2410.02355 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05045","last_updated":"2026-08-05T16:55:59Z","snapshot_observed_at":"2026-08-08T23:13:50.307997Z","submitted_at":"2026-08-05T16:55:59Z","title":"Gradient Immunity: Null-Space Resistance to Malicious Fine-Tuning","version":1},"reference_index":80,"source":"arxiv_source","source_observed_at":"2026-08-06T10:46:10.816736Z"},"links":{"cited_paper":"/paper/2410.02355","citing_paper":"/paper/2608.05045"},"observation_digest":"sha256:3d0a064d227dd254ee1b0a933ef1fc28f080776b814d20b051efadb423985e89","observation_id":"3ef31edf-ad26-40af-8639-be2480aa4c1d","resolution":{"observed_at":"2026-08-06T10:46:10.816736Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:46:12.532031Z","title":"Findings of the Association for Computational Linguistics: ACL 2025 , pages=","venue":null,"work_id":"75516f20-81f0-45e5-bd9b-ccad8d79703c","year":2025},"citing_paper":{"arxiv_id":"2608.05045","last_updated":"2026-08-05T16:55:59Z","snapshot_observed_at":"2026-08-08T23:13:50.307997Z","submitted_at":"2026-08-05T16:55:59Z","title":"Gradient Immunity: Null-Space Resistance to Malicious Fine-Tuning","version":1},"reference_index":81,"source":"arxiv_source","source_observed_at":"2026-08-06T10:46:10.821059Z"},"links":{"citing_paper":"/paper/2608.05045"},"observation_digest":"sha256:2f36f019a05eb98aa415e570633171e4fdec70440052de3adcae7bc2357bd145","observation_id":"6ee7685b-c06b-4203-a7f9-40d4fe04df36","resolution":{"observed_at":"2026-08-06T10:46:12.537442Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:46:12.513069Z","title":"Proceedings of the Computer Vision and Pattern Recognition Conference , pages=","venue":null,"work_id":"96588bb6-10ee-4c21-881c-944320d9a584","year":null},"citing_paper":{"arxiv_id":"2608.05045","last_updated":"2026-08-05T16:55:59Z","snapshot_observed_at":"2026-08-08T23:13:50.307997Z","submitted_at":"2026-08-05T16:55:59Z","title":"Gradient Immunity: Null-Space Resistance to Malicious Fine-Tuning","version":1},"reference_index":82,"source":"arxiv_source","source_observed_at":"2026-08-06T10:46:10.825441Z"},"links":{"citing_paper":"/paper/2608.05045"},"observation_digest":"sha256:30379acfbcf4ee839d4c6a683d2437ac044d16c4221732c70bdaf3dd2e2937c9","observation_id":"e078d705-3691-4967-ace3-4692cb289ae5","resolution":{"observed_at":"2026-08-06T10:46:12.517966Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:46:10.829576Z","title":"Proceedings of the 48th International ACM SIGIR Conference on Research and Development in Information Retrieval , pages=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05045","last_updated":"2026-08-05T16:55:59Z","snapshot_observed_at":"2026-08-08T23:13:50.307997Z","submitted_at":"2026-08-05T16:55:59Z","title":"Gradient Immunity: Null-Space Resistance to Malicious Fine-Tuning","version":1},"reference_index":83,"source":"arxiv_source","source_observed_at":"2026-08-06T10:46:10.829576Z"},"links":{"citing_paper":"/paper/2608.05045"},"observation_digest":"sha256:c8fd2c500453a6b7c997c66469dab17726a4c4973f48ada3b76fc70e2cfedc37","observation_id":"07deb17d-5356-4580-b093-6d3c1b3616b2","resolution":{"observed_at":"2026-08-06T10:46:10.829576Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:46:10.834339Z","title":"arXiv preprint arXiv:2510.27172 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05045","last_updated":"2026-08-05T16:55:59Z","snapshot_observed_at":"2026-08-08T23:13:50.307997Z","submitted_at":"2026-08-05T16:55:59Z","title":"Gradient Immunity: Null-Space Resistance to Malicious Fine-Tuning","version":1},"reference_index":84,"source":"arxiv_source","source_observed_at":"2026-08-06T10:46:10.834339Z"},"links":{"citing_paper":"/paper/2608.05045"},"observation_digest":"sha256:078c6f737d55afb059a01ff82ec33cd0ae0cbba6935b90273ce0e25cf1abd75e","observation_id":"dcf92b02-44e3-4ccf-b658-ea941b7e4b2b","resolution":{"observed_at":"2026-08-06T10:46:10.834339Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2510.07835","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:46:12.017416Z","title":"arXiv preprint arXiv:2510.07835 , year=","venue":null,"work_id":"cda842bd-e997-472f-8fb7-ecc3222c98a9","year":null},"citing_paper":{"arxiv_id":"2608.05045","last_updated":"2026-08-05T16:55:59Z","snapshot_observed_at":"2026-08-08T23:13:50.307997Z","submitted_at":"2026-08-05T16:55:59Z","title":"Gradient Immunity: Null-Space Resistance to Malicious Fine-Tuning","version":1},"reference_index":85,"source":"arxiv_source","source_observed_at":"2026-08-06T10:46:10.838393Z"},"links":{"citing_paper":"/paper/2608.05045"},"observation_digest":"sha256:c1bf6c8f8d81aad840fb2e0a270887068503f0aeab779d9498348168c777c11e","observation_id":"f41c8dda-9544-40e5-ab41-24b669b4cf4b","resolution":{"observed_at":"2026-08-06T10:46:12.026497Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:46:12.483160Z","title":"Proceedings of the 63rd Annual Meeting of the Association for Computational Linguistics (Volume 1: Long Papers) , pages=","venue":null,"work_id":"d585055d-4cf5-47c7-bb53-b972125f0b58","year":null},"citing_paper":{"arxiv_id":"2608.05045","last_updated":"2026-08-05T16:55:59Z","snapshot_observed_at":"2026-08-08T23:13:50.307997Z","submitted_at":"2026-08-05T16:55:59Z","title":"Gradient Immunity: Null-Space Resistance to Malicious Fine-Tuning","version":1},"reference_index":86,"source":"arxiv_source","source_observed_at":"2026-08-06T10:46:10.842741Z"},"links":{"citing_paper":"/paper/2608.05045"},"observation_digest":"sha256:c209488bdde0dc88531eff62fefa8430e43754c89da5e75bcccefcac0f21672e","observation_id":"11a10437-6833-475c-b166-07cf69f36266","resolution":{"observed_at":"2026-08-06T10:46:12.487964Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2601.22752","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:46:12.346802Z","title":"arXiv preprint arXiv:2601.22752 , year=","venue":null,"work_id":"d66136be-2675-4a32-b915-fac5d89eb557","year":null},"citing_paper":{"arxiv_id":"2608.05045","last_updated":"2026-08-05T16:55:59Z","snapshot_observed_at":"2026-08-08T23:13:50.307997Z","submitted_at":"2026-08-05T16:55:59Z","title":"Gradient Immunity: Null-Space Resistance to Malicious Fine-Tuning","version":1},"reference_index":87,"source":"arxiv_source","source_observed_at":"2026-08-06T10:46:10.847265Z"},"links":{"citing_paper":"/paper/2608.05045"},"observation_digest":"sha256:d98b54ba9b693dac2c28a4afbe7d35461e4ca31d5800ac83b3e7a4862ef5e156","observation_id":"30c8eaf2-b4c0-455d-a804-7eefa1987c50","resolution":{"observed_at":"2026-08-06T10:46:12.354691Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2409.01586","last_updated":"2025-03-17T17:17:16Z","snapshot_observed_at":"2026-08-05T01:27:27.177475Z","submitted_at":"2024-09-03T03:59:22Z","title":"Booster: Tackling Harmful Fine-tuning for Large Language Models via Attenuating Harmful Perturbation","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.01586","snapshot_observed_at":"2026-08-06T10:46:10.851158Z","title":"arXiv preprint arXiv:2409.01586 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05045","last_updated":"2026-08-05T16:55:59Z","snapshot_observed_at":"2026-08-08T23:13:50.307997Z","submitted_at":"2026-08-05T16:55:59Z","title":"Gradient Immunity: Null-Space Resistance to Malicious Fine-Tuning","version":1},"reference_index":88,"source":"arxiv_source","source_observed_at":"2026-08-06T10:46:10.851158Z"},"links":{"cited_paper":"/paper/2409.01586","citing_paper":"/paper/2608.05045"},"observation_digest":"sha256:4700c6380f7d58855087f6b286a0c60b9d28c7bbab39c82d10443731f77fa85f","observation_id":"b9582b11-b73f-412c-8a81-e4eb05b95bef","resolution":{"observed_at":"2026-08-06T10:46:10.851158Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.09388","last_updated":"2025-05-14T13:41:34Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-05-14T13:41:34Z","title":"Qwen3 Technical Report","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.09388","snapshot_observed_at":"2026-08-06T10:46:10.854926Z","title":"arXiv preprint arXiv:2505.09388 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05045","last_updated":"2026-08-05T16:55:59Z","snapshot_observed_at":"2026-08-08T23:13:50.307997Z","submitted_at":"2026-08-05T16:55:59Z","title":"Gradient Immunity: Null-Space Resistance to Malicious Fine-Tuning","version":1},"reference_index":89,"source":"arxiv_source","source_observed_at":"2026-08-06T10:46:10.854926Z"},"links":{"cited_paper":"/paper/2505.09388","citing_paper":"/paper/2608.05045"},"observation_digest":"sha256:aaf8bab0c3a65f03416c60877e238944018ba083c4eb292b198948404bcb9d81","observation_id":"90002f9a-7918-4ecc-af1d-b3070b749aef","resolution":{"observed_at":"2026-08-06T10:46:10.854926Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:46:10.859079Z","title":"2023 , publisher=","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.05045","last_updated":"2026-08-05T16:55:59Z","snapshot_observed_at":"2026-08-08T23:13:50.307997Z","submitted_at":"2026-08-05T16:55:59Z","title":"Gradient Immunity: Null-Space Resistance to Malicious Fine-Tuning","version":1},"reference_index":90,"source":"arxiv_source","source_observed_at":"2026-08-06T10:46:10.859079Z"},"links":{"citing_paper":"/paper/2608.05045"},"observation_digest":"sha256:94c874e9b8ce3022871b0f7275ce6bb51f8e0f92c43dba76f067a7547c792a44","observation_id":"59c0e28c-132e-41e5-9f76-fe85ab3f4b16","resolution":{"observed_at":"2026-08-06T10:46:10.859079Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:46:10.864090Z","title":"Advances in Neural Information Processing Systems , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05045","last_updated":"2026-08-05T16:55:59Z","snapshot_observed_at":"2026-08-08T23:13:50.307997Z","submitted_at":"2026-08-05T16:55:59Z","title":"Gradient Immunity: Null-Space Resistance to Malicious Fine-Tuning","version":1},"reference_index":91,"source":"arxiv_source","source_observed_at":"2026-08-06T10:46:10.864090Z"},"links":{"citing_paper":"/paper/2608.05045"},"observation_digest":"sha256:bb5703b5f345675e6ce786098f1c4ca6d51510ac06c811a88e7cf83d05c470cc","observation_id":"9e019078-6b94-47fa-9d2f-739a76b0c468","resolution":{"observed_at":"2026-08-06T10:46:10.864090Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:46:10.868451Z","title":"Advances in Neural Information Processing Systems , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05045","last_updated":"2026-08-05T16:55:59Z","snapshot_observed_at":"2026-08-08T23:13:50.307997Z","submitted_at":"2026-08-05T16:55:59Z","title":"Gradient Immunity: Null-Space Resistance to Malicious Fine-Tuning","version":1},"reference_index":92,"source":"arxiv_source","source_observed_at":"2026-08-06T10:46:10.868451Z"},"links":{"citing_paper":"/paper/2608.05045"},"observation_digest":"sha256:620062d5e7a5380b09e4e464fbafa66d18c0b72444b79294e65e02a356069c8c","observation_id":"3d0c838e-005c-4f4a-85b0-60a0031d28d8","resolution":{"observed_at":"2026-08-06T10:46:10.868451Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-08-06T10:46:10.872851Z","title":"arXiv preprint arXiv:2402.04249 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05045","last_updated":"2026-08-05T16:55:59Z","snapshot_observed_at":"2026-08-08T23:13:50.307997Z","submitted_at":"2026-08-05T16:55:59Z","title":"Gradient Immunity: Null-Space Resistance to Malicious Fine-Tuning","version":1},"reference_index":93,"source":"arxiv_source","source_observed_at":"2026-08-06T10:46:10.872851Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2608.05045"},"observation_digest":"sha256:9b3d02ea8354d0792d12e941e84b80b681e69146a0017399087f55057c868060","observation_id":"295617e8-e2ae-416e-8d73-bd51ab226cab","resolution":{"observed_at":"2026-08-06T10:46:10.872851Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:46:10.877412Z","title":"Proceedings of the 62nd annual meeting of the association for computational linguistics (volume 3: system demonstrations) , pages=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05045","last_updated":"2026-08-05T16:55:59Z","snapshot_observed_at":"2026-08-08T23:13:50.307997Z","submitted_at":"2026-08-05T16:55:59Z","title":"Gradient Immunity: Null-Space Resistance to Malicious Fine-Tuning","version":1},"reference_index":94,"source":"arxiv_source","source_observed_at":"2026-08-06T10:46:10.877412Z"},"links":{"citing_paper":"/paper/2608.05045"},"observation_digest":"sha256:5dd21a0fd907bfe80b181380595ea9d0e549cc259e1f7d2bd02027e39a9773dc","observation_id":"7c455c9e-bd2b-4f87-91cf-ead34da9efed","resolution":{"observed_at":"2026-08-06T10:46:10.877412Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:46:12.420826Z","title":"International Conference on Learning Representations (ICLR) , year=","venue":null,"work_id":"3beb410a-c53f-4b6d-846e-ee7fcbbba92c","year":null},"citing_paper":{"arxiv_id":"2608.05045","last_updated":"2026-08-05T16:55:59Z","snapshot_observed_at":"2026-08-08T23:13:50.307997Z","submitted_at":"2026-08-05T16:55:59Z","title":"Gradient Immunity: Null-Space Resistance to Malicious Fine-Tuning","version":1},"reference_index":95,"source":"arxiv_source","source_observed_at":"2026-08-06T10:46:10.882907Z"},"links":{"citing_paper":"/paper/2608.05045"},"observation_digest":"sha256:06cac225ef267de9eafd6dc4924667f0f7575a23611b178a3b0e2a36326d49a2","observation_id":"376787f2-cb30-4d3b-979e-51a615fa1f0b","resolution":{"observed_at":"2026-08-06T10:46:12.425447Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1711.05101","last_updated":"2019-01-04T21:01:49Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2017-11-14T14:24:06Z","title":"Decoupled Weight Decay Regularization","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1711.05101","snapshot_observed_at":"2026-08-06T10:46:10.888254Z","title":"arXiv preprint arXiv:1711.05101 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05045","last_updated":"2026-08-05T16:55:59Z","snapshot_observed_at":"2026-08-08T23:13:50.307997Z","submitted_at":"2026-08-05T16:55:59Z","title":"Gradient Immunity: Null-Space Resistance to Malicious Fine-Tuning","version":1},"reference_index":96,"source":"arxiv_source","source_observed_at":"2026-08-06T10:46:10.888254Z"},"links":{"cited_paper":"/paper/1711.05101","citing_paper":"/paper/2608.05045"},"observation_digest":"sha256:81d257d90e3ca20fa1f9b4439057a07072e582bc018af704d1195a233d2e2e44","observation_id":"5ff545dc-0f55-4fa7-8bd5-eee77023b691","resolution":{"observed_at":"2026-08-06T10:46:10.888254Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2607.19829","last_updated":"2026-07-22T07:08:59Z","snapshot_observed_at":"2026-08-06T19:43:18.323440Z","submitted_at":"2026-07-22T07:08:59Z","title":"DARWIN: Evolving Jailbreak Adversary and Guardrail for LLM Safety Evaluation and Protection","version":1},"cited_work":{"arxiv_id":"2607.19829","doi":null,"metadata_source":"pith","pith_arxiv_id":"2607.19829","snapshot_observed_at":"2026-08-06T10:46:11.686159Z","title":"DARWIN: Evolving Jailbreak Adversary and Guardrail for LLM Safety Evaluation and Protection","venue":"cs.CR","work_id":"89725139-467b-46c3-ae89-51df01ff6dfc","year":2026},"citing_paper":{"arxiv_id":"2608.05045","last_updated":"2026-08-05T16:55:59Z","snapshot_observed_at":"2026-08-08T23:13:50.307997Z","submitted_at":"2026-08-05T16:55:59Z","title":"Gradient Immunity: Null-Space Resistance to Malicious Fine-Tuning","version":1},"reference_index":97,"source":"arxiv_source","source_observed_at":"2026-08-06T10:46:10.892459Z"},"links":{"cited_paper":"/paper/2607.19829","citing_paper":"/paper/2608.05045"},"observation_digest":"sha256:f00c532d5a2dfb1937db0ee0a44abc4ed0265343be7cdd713d7529c68f844f62","observation_id":"afe0bdc5-8d00-441b-b918-89d842d108e4","resolution":{"observed_at":"2026-08-06T10:46:11.691488Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2605.08930","last_updated":"2026-05-09T13:05:00Z","snapshot_observed_at":"2026-07-06T23:21:06.773761Z","submitted_at":"2026-05-09T13:05:00Z","title":"Internalizing Safety Understanding in Large Reasoning Models via Verification","version":1},"cited_work":{"arxiv_id":"2605.08930","doi":null,"metadata_source":"pith","pith_arxiv_id":"2605.08930","snapshot_observed_at":"2026-08-06T10:46:11.265415Z","title":"Internalizing Safety Understanding in Large Reasoning Models via Verification","venue":"cs.AI","work_id":"70cbd29d-f2e8-4722-af70-e68863f5e756","year":2026},"citing_paper":{"arxiv_id":"2608.05045","last_updated":"2026-08-05T16:55:59Z","snapshot_observed_at":"2026-08-08T23:13:50.307997Z","submitted_at":"2026-08-05T16:55:59Z","title":"Gradient Immunity: Null-Space Resistance to Malicious Fine-Tuning","version":1},"reference_index":98,"source":"arxiv_source","source_observed_at":"2026-08-06T10:46:10.897207Z"},"links":{"cited_paper":"/paper/2605.08930","citing_paper":"/paper/2608.05045"},"observation_digest":"sha256:1219ca0f34188f5123b2292bd6ad788053d0be1019b6f2bcc72ac3a4f709aa34","observation_id":"4f2d6530-dbdc-4f91-9bb9-35b3ee06577b","resolution":{"observed_at":"2026-08-06T10:46:11.271786Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2607.15081","last_updated":"2026-07-16T14:51:42Z","snapshot_observed_at":"2026-08-07T16:31:59.632844Z","submitted_at":"2026-07-16T14:51:42Z","title":"DataShield: Uncovering Risky Fine-Tuning Data Across LLMs Through Consensus Subspace Alignment","version":1},"cited_work":{"arxiv_id":"2607.15081","doi":null,"metadata_source":"pith","pith_arxiv_id":"2607.15081","snapshot_observed_at":"2026-08-06T10:46:11.363672Z","title":"DataShield: Uncovering Risky Fine-Tuning Data Across LLMs Through Consensus Subspace Alignment","venue":"cs.CR","work_id":"08697bb9-8c93-4b43-ad6a-287540817d3a","year":2026},"citing_paper":{"arxiv_id":"2608.05045","last_updated":"2026-08-05T16:55:59Z","snapshot_observed_at":"2026-08-08T23:13:50.307997Z","submitted_at":"2026-08-05T16:55:59Z","title":"Gradient Immunity: Null-Space Resistance to Malicious Fine-Tuning","version":1},"reference_index":99,"source":"arxiv_source","source_observed_at":"2026-08-06T10:46:10.902246Z"},"links":{"cited_paper":"/paper/2607.15081","citing_paper":"/paper/2608.05045"},"observation_digest":"sha256:a28efea1302023dd57ff19bb34fd0352c46d2f5e1b46ff018c77e7fdbf29a9e9","observation_id":"34075f38-2895-4a95-8544-2dbbfdd085ee","resolution":{"observed_at":"2026-08-06T10:46:11.369152Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2605.31140","last_updated":"2026-05-29T10:49:44Z","snapshot_observed_at":"2026-07-06T23:40:22.583302Z","submitted_at":"2026-05-29T10:49:44Z","title":"EvoDefense: Co-Evolving Black-Box Defense with Large Language Models","version":1},"cited_work":{"arxiv_id":"2605.31140","doi":null,"metadata_source":"pith","pith_arxiv_id":"2605.31140","snapshot_observed_at":"2026-08-06T10:46:11.925152Z","title":"EvoDefense: Co-Evolving Black-Box Defense with Large Language Models","venue":"cs.CR","work_id":"9ecfd18b-140e-4c09-978f-84e7c531cf89","year":2026},"citing_paper":{"arxiv_id":"2608.05045","last_updated":"2026-08-05T16:55:59Z","snapshot_observed_at":"2026-08-08T23:13:50.307997Z","submitted_at":"2026-08-05T16:55:59Z","title":"Gradient Immunity: Null-Space Resistance to Malicious Fine-Tuning","version":1},"reference_index":100,"source":"arxiv_source","source_observed_at":"2026-08-06T10:46:10.907152Z"},"links":{"cited_paper":"/paper/2605.31140","citing_paper":"/paper/2608.05045"},"observation_digest":"sha256:ac2ae6dc9aad7cd715dd18455d51117cd33b861ec49a8cbf364af5afa4f9d00f","observation_id":"04c45db4-ab27-4e59-8f9c-76a1395a10bb","resolution":{"observed_at":"2026-08-06T10:46:11.933999Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2605.30883","last_updated":"2026-05-29T06:13:58Z","snapshot_observed_at":"2026-08-08T21:46:24.656483Z","submitted_at":"2026-05-29T06:13:58Z","title":"TRACE: Task-Aware Adaptive Self-Evolving Agentic Jailbreaking","version":1},"cited_work":{"arxiv_id":"2605.30883","doi":null,"metadata_source":"pith","pith_arxiv_id":"2605.30883","snapshot_observed_at":"2026-08-06T10:46:11.315709Z","title":"TRACE: Task-Aware Adaptive Self-Evolving Agentic Jailbreaking","venue":"cs.CR","work_id":"bb9bb232-1797-4c23-a126-9a3693462d1d","year":2026},"citing_paper":{"arxiv_id":"2608.05045","last_updated":"2026-08-05T16:55:59Z","snapshot_observed_at":"2026-08-08T23:13:50.307997Z","submitted_at":"2026-08-05T16:55:59Z","title":"Gradient Immunity: Null-Space Resistance to Malicious Fine-Tuning","version":1},"reference_index":101,"source":"arxiv_source","source_observed_at":"2026-08-06T10:46:10.912025Z"},"links":{"cited_paper":"/paper/2605.30883","citing_paper":"/paper/2608.05045"},"observation_digest":"sha256:8c7eaad408d9594b0df68044d07177110799167dc791bee104a65b69192e7521","observation_id":"b74efc08-bfdd-4180-9a07-b300649870e1","resolution":{"observed_at":"2026-08-06T10:46:11.321412Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2605.08778","last_updated":"2026-05-09T08:07:30Z","snapshot_observed_at":"2026-07-06T23:20:57.084438Z","submitted_at":"2026-05-09T08:07:30Z","title":"Not All Turns Matter: Credit Assignment for Multi-Turn Jailbreaking","version":1},"cited_work":{"arxiv_id":"2605.08778","doi":null,"metadata_source":"pith","pith_arxiv_id":"2605.08778","snapshot_observed_at":"2026-08-06T10:46:12.165576Z","title":"Not All Turns Matter: Credit Assignment for Multi-Turn Jailbreaking","venue":"cs.AI","work_id":"d637b855-973b-45f7-9f3a-03655eb8dd3f","year":2026},"citing_paper":{"arxiv_id":"2608.05045","last_updated":"2026-08-05T16:55:59Z","snapshot_observed_at":"2026-08-08T23:13:50.307997Z","submitted_at":"2026-08-05T16:55:59Z","title":"Gradient Immunity: Null-Space Resistance to Malicious Fine-Tuning","version":1},"reference_index":102,"source":"arxiv_source","source_observed_at":"2026-08-06T10:46:10.917078Z"},"links":{"cited_paper":"/paper/2605.08778","citing_paper":"/paper/2608.05045"},"observation_digest":"sha256:3d55166cc76922cf65c27e70dbc2090003f63be6c53b55715dd2ae88100ae798","observation_id":"5e26f723-54ec-461e-979e-d33612ce14c7","resolution":{"observed_at":"2026-08-06T10:46:12.170745Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2605.08936","last_updated":"2026-05-09T13:14:31Z","snapshot_observed_at":"2026-07-06T23:21:06.773761Z","submitted_at":"2026-05-09T13:14:31Z","title":"Self-ReSET: Learning to Self-Recover from Unsafe Reasoning Trajectories","version":1},"cited_work":{"arxiv_id":"2605.08936","doi":null,"metadata_source":"pith","pith_arxiv_id":"2605.08936","snapshot_observed_at":"2026-08-06T10:46:11.289074Z","title":"Self-ReSET: Learning to Self-Recover from Unsafe Reasoning Trajectories","venue":"cs.AI","work_id":"a599ffea-64bf-421f-8336-02bd334961ba","year":2026},"citing_paper":{"arxiv_id":"2608.05045","last_updated":"2026-08-05T16:55:59Z","snapshot_observed_at":"2026-08-08T23:13:50.307997Z","submitted_at":"2026-08-05T16:55:59Z","title":"Gradient Immunity: Null-Space Resistance to Malicious Fine-Tuning","version":1},"reference_index":103,"source":"arxiv_source","source_observed_at":"2026-08-06T10:46:10.922115Z"},"links":{"cited_paper":"/paper/2605.08936","citing_paper":"/paper/2608.05045"},"observation_digest":"sha256:8e2380de9527a5d0358c2fc8a8e12003abf0f89289f6acb95af436088cde8094","observation_id":"1b76495a-0b25-4bf8-805b-7420fdb9cc9d","resolution":{"observed_at":"2026-08-06T10:46:11.294324Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.18576","last_updated":"2025-08-07T08:02:42Z","snapshot_observed_at":"2026-08-08T02:00:15.105327Z","submitted_at":"2025-07-24T16:49:19Z","title":"SafeWork-R1: Coevolving Safety and Intelligence under the AI-45$^{\\circ}$ Law","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2507.18576","snapshot_observed_at":"2026-08-06T10:46:10.926476Z","title":"arXiv preprint arXiv:2507.18576 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05045","last_updated":"2026-08-05T16:55:59Z","snapshot_observed_at":"2026-08-08T23:13:50.307997Z","submitted_at":"2026-08-05T16:55:59Z","title":"Gradient Immunity: Null-Space Resistance to Malicious Fine-Tuning","version":1},"reference_index":104,"source":"arxiv_source","source_observed_at":"2026-08-06T10:46:10.926476Z"},"links":{"cited_paper":"/paper/2507.18576","citing_paper":"/paper/2608.05045"},"observation_digest":"sha256:585d0df73034bf44e92d478c157c1555a2fc59b8d30e67de0307f3f4613c0128","observation_id":"ca17c6d0-acac-4bae-81d0-3f8c83fd01ac","resolution":{"observed_at":"2026-08-06T10:46:10.926476Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2512.07141","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:46:11.452701Z","title":"arXiv preprint arXiv:2512.07141 , year=","venue":null,"work_id":"62acc60e-c100-45f7-8bf5-df87da8ed16a","year":null},"citing_paper":{"arxiv_id":"2608.05045","last_updated":"2026-08-05T16:55:59Z","snapshot_observed_at":"2026-08-08T23:13:50.307997Z","submitted_at":"2026-08-05T16:55:59Z","title":"Gradient Immunity: Null-Space Resistance to Malicious Fine-Tuning","version":1},"reference_index":105,"source":"arxiv_source","source_observed_at":"2026-08-06T10:46:10.931432Z"},"links":{"citing_paper":"/paper/2608.05045"},"observation_digest":"sha256:ef0df88df1c68cea46af5a54aa4525bb52b248cb58d0679d168fce0a132d759b","observation_id":"65fb755d-933e-45c5-8caa-9b9938f0266c","resolution":{"observed_at":"2026-08-06T10:46:11.460803Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:46:10.936008Z","title":"arXiv preprint arXiv:2602.01539 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05045","last_updated":"2026-08-05T16:55:59Z","snapshot_observed_at":"2026-08-08T23:13:50.307997Z","submitted_at":"2026-08-05T16:55:59Z","title":"Gradient Immunity: Null-Space Resistance to Malicious Fine-Tuning","version":1},"reference_index":106,"source":"arxiv_source","source_observed_at":"2026-08-06T10:46:10.936008Z"},"links":{"citing_paper":"/paper/2608.05045"},"observation_digest":"sha256:c8a21ca41fdeef1c857dec86fe9c462c5984d76c786e92cf029b996b64c28641","observation_id":"02b2e893-062f-43d5-9a6a-06b801e869c1","resolution":{"observed_at":"2026-08-06T10:46:10.936008Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2607.18056","last_updated":"2026-08-06T06:39:11Z","snapshot_observed_at":"2026-08-09T16:09:49.265099Z","submitted_at":"2026-07-20T15:26:23Z","title":"An Early Warning of Emerging Biosecurity Risks in Frontier LLMs","version":2},"cited_work":{"arxiv_id":"2607.18056","doi":null,"metadata_source":"pith","pith_arxiv_id":"2607.18056","snapshot_observed_at":"2026-08-06T10:46:12.190317Z","title":"An Early Warning of Emerging Biosecurity Risks in Frontier LLMs","venue":"cs.CL","work_id":"6df31728-c272-498b-9e6b-83493e90aec8","year":2026},"citing_paper":{"arxiv_id":"2608.05045","last_updated":"2026-08-05T16:55:59Z","snapshot_observed_at":"2026-08-08T23:13:50.307997Z","submitted_at":"2026-08-05T16:55:59Z","title":"Gradient Immunity: Null-Space Resistance to Malicious Fine-Tuning","version":1},"reference_index":107,"source":"arxiv_source","source_observed_at":"2026-08-06T10:46:10.940268Z"},"links":{"cited_paper":"/paper/2607.18056","citing_paper":"/paper/2608.05045"},"observation_digest":"sha256:686f86c60b63289e3726fca49e331b4dc53410fde6cc73428f7d8e266ca30888","observation_id":"cf403f48-9069-457a-a375-1f67e40e996b","resolution":{"observed_at":"2026-08-06T10:46:12.195610Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2512.01827","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:46:11.233619Z","title":"arXiv preprint arXiv:2512.01827 , year=","venue":null,"work_id":"0973a2b4-2cf3-4ff8-9f38-cf741d5f40ef","year":null},"citing_paper":{"arxiv_id":"2608.05045","last_updated":"2026-08-05T16:55:59Z","snapshot_observed_at":"2026-08-08T23:13:50.307997Z","submitted_at":"2026-08-05T16:55:59Z","title":"Gradient Immunity: Null-Space Resistance to Malicious Fine-Tuning","version":1},"reference_index":108,"source":"arxiv_source","source_observed_at":"2026-08-06T10:46:10.944665Z"},"links":{"citing_paper":"/paper/2608.05045"},"observation_digest":"sha256:0a40f732f231df156dd2fe54c0fca0be2bb3be27599665d09a62e692118cf2c4","observation_id":"1f561fea-1fb2-465b-8cfa-52dac66ef30c","resolution":{"observed_at":"2026-08-06T10:46:11.243296Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:46:12.404168Z","title":"Findings of the Association for Computational Linguistics: ACL 2026 , pages=","venue":null,"work_id":"80daee2d-3fe5-460e-961a-b8f9a9750f30","year":2026},"citing_paper":{"arxiv_id":"2608.05045","last_updated":"2026-08-05T16:55:59Z","snapshot_observed_at":"2026-08-08T23:13:50.307997Z","submitted_at":"2026-08-05T16:55:59Z","title":"Gradient Immunity: Null-Space Resistance to Malicious Fine-Tuning","version":1},"reference_index":109,"source":"arxiv_source","source_observed_at":"2026-08-06T10:46:10.952285Z"},"links":{"citing_paper":"/paper/2608.05045"},"observation_digest":"sha256:b7889abc6a1a43223b15b439ca95490069afc4dce0597d0eb08146ba9974b356","observation_id":"0c44fd78-aa92-4953-84f8-3ce98b2ba59f","resolution":{"observed_at":"2026-08-06T10:46:12.409466Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2608.05045","last_updated":"2026-08-05T16:55:59Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-08T23:13:50.307997Z","submitted_at":"2026-08-05T16:55:59Z","title":"Gradient Immunity: Null-Space Resistance to Malicious Fine-Tuning"},"reference_resolution":{"displayed":75,"state_counts":{"malformed_identifier":0,"metadata_mismatch":8,"parse_uncertain":0,"unresolved":53,"verified_exact":4,"verified_fuzzy":10},"total_outbound_references":75},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 75 of 75 outbound references and 0 inbound Pith citation observations for arXiv:2608.05045."}