{"as_of":"2026-08-09T18:53:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:dd273f63c6128cf15b4a8ce5250e91775496c260cc0d8febcadbf2df8b5e432c","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":12,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":12,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":12,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":12,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-09T00:50:00.151000Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-04T19:50:11.061646Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2004.06660","last_updated":"2020-04-14T16:51:42Z","snapshot_observed_at":"2026-08-09T15:24:12.006566Z","submitted_at":"2020-04-14T16:51:42Z","title":"Weight Poisoning Attacks on Pre-trained Models","version":1},"cited_work":{"arxiv_id":"2004.06660","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2004.06660","snapshot_observed_at":"2026-07-04T19:50:11.061646Z","title":"arXiv preprint arXiv:2004.06660 , year=","venue":null,"work_id":"af19ed07-780c-48b3-8b15-87f2daadd346","year":2004},"citing_paper":{"arxiv_id":"2406.10162","last_updated":"2024-06-29T00:28:47Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-06-14T16:26:20Z","title":"Sycophancy to Subterfuge: Investigating Reward-Tampering in Large Language Models","version":3},"reference_index":150,"source":"arxiv_source","source_observed_at":"2026-05-17T14:43:29.496457Z"},"links":{"cited_paper":"/paper/2004.06660","citing_paper":"/paper/2406.10162"},"observation_digest":"sha256:676787cd02f2fed436819eaf841e14c1fc73749452bc87e51739605e171f63a8","observation_id":"6ba8a3e5-4073-4db9-b86a-b37652bb2915","resolution":{"observed_at":"2026-05-17T14:43:30.183744Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2004.06660","last_updated":"2020-04-14T16:51:42Z","snapshot_observed_at":"2026-08-09T15:24:12.006566Z","submitted_at":"2020-04-14T16:51:42Z","title":"Weight Poisoning Attacks on Pre-trained Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2004.06660","snapshot_observed_at":"2026-08-09T00:50:00.151000Z","title":"Weight poisoning attacks on pre-trained models,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2502.05224","last_updated":"2025-02-06T04:43:05Z","snapshot_observed_at":"2026-08-09T05:58:57.244749Z","submitted_at":"2025-02-06T04:43:05Z","title":"A Survey on Backdoor Threats in Large Language Models (LLMs): Attacks, Defenses, and Evaluations","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-09T00:50:00.151000Z"},"links":{"cited_paper":"/paper/2004.06660","citing_paper":"/paper/2502.05224"},"observation_digest":"sha256:d1cd661f5d389b30068edc23ff5c210ac75576ad9ebd71a92953b09d90960924","observation_id":"73974b64-3012-44fc-9c45-0b589fcdda11","resolution":{"observed_at":"2026-08-09T00:50:00.151000Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2004.06660","last_updated":"2020-04-14T16:51:42Z","snapshot_observed_at":"2026-08-09T15:24:12.006566Z","submitted_at":"2020-04-14T16:51:42Z","title":"Weight Poisoning Attacks on Pre-trained Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2004.06660","snapshot_observed_at":"2026-08-06T16:24:30.419753Z","title":"Weight poisoning attacks on pre-trained models,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2507.13629","last_updated":"2025-07-18T03:41:18Z","snapshot_observed_at":"2026-08-07T10:03:57.005879Z","submitted_at":"2025-07-18T03:41:18Z","title":"Large Language Models in Cybersecurity: Applications, Vulnerabilities, and Defense Techniques","version":1},"reference_index":160,"source":"pdf_text","source_observed_at":"2026-08-06T16:24:30.419753Z"},"links":{"cited_paper":"/paper/2004.06660","citing_paper":"/paper/2507.13629"},"observation_digest":"sha256:664ae25c2034875a5aa9bbb4ad61d67d5d7e3c0f9c5e1f5fcfd2dad453fd19cf","observation_id":"c90c598b-7aab-4022-900f-9d8a214daf62","resolution":{"observed_at":"2026-08-06T16:24:30.419753Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2004.06660","last_updated":"2020-04-14T16:51:42Z","snapshot_observed_at":"2026-08-09T15:24:12.006566Z","submitted_at":"2020-04-14T16:51:42Z","title":"Weight Poisoning Attacks on Pre-trained Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2004.06660","snapshot_observed_at":"2026-08-06T14:17:34.028517Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2507.19598","last_updated":"2025-07-25T18:11:10Z","snapshot_observed_at":"2026-08-08T09:36:36.194652Z","submitted_at":"2025-07-25T18:11:10Z","title":"MOCHA: Are Code Language Models Robust Against Multi-Turn Malicious Coding Prompts?","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-06T14:17:34.028517Z"},"links":{"cited_paper":"/paper/2004.06660","citing_paper":"/paper/2507.19598"},"observation_digest":"sha256:99998e5b68b074176339193916269c0da390f47aecc273f817523095fde91e60","observation_id":"204a80ca-88e5-49b0-8b27-aad8b3a8087c","resolution":{"observed_at":"2026-08-06T14:17:34.028517Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2004.06660","last_updated":"2020-04-14T16:51:42Z","snapshot_observed_at":"2026-08-09T15:24:12.006566Z","submitted_at":"2020-04-14T16:51:42Z","title":"Weight Poisoning Attacks on Pre-trained Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2004.06660","snapshot_observed_at":"2026-08-06T05:05:02.298693Z","title":"Weight poisoning attacks on pre-trained models","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.02312","last_updated":"2025-08-04T11:28:34Z","snapshot_observed_at":"2026-08-07T17:54:58.202973Z","submitted_at":"2025-08-04T11:28:34Z","title":"A Survey on Data Security in Large Language Models","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-06T05:05:02.298693Z"},"links":{"cited_paper":"/paper/2004.06660","citing_paper":"/paper/2508.02312"},"observation_digest":"sha256:1e02032ce6c52acff0d1211fac0413663f40e9a96d2160117b6b003226c74f05","observation_id":"d8591055-0a00-4a95-9bed-03007b7941cb","resolution":{"observed_at":"2026-08-06T05:05:02.298693Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2004.06660","last_updated":"2020-04-14T16:51:42Z","snapshot_observed_at":"2026-08-09T15:24:12.006566Z","submitted_at":"2020-04-14T16:51:42Z","title":"Weight Poisoning Attacks on Pre-trained Models","version":1},"cited_work":{"arxiv_id":"2004.06660","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2004.06660","snapshot_observed_at":"2026-07-04T19:50:11.061646Z","title":"arXiv preprint arXiv:2004.06660 , year=","venue":null,"work_id":"af19ed07-780c-48b3-8b15-87f2daadd346","year":2004},"citing_paper":{"arxiv_id":"2512.10998","last_updated":"2025-12-10T17:25:55Z","snapshot_observed_at":"2026-07-06T22:38:45.907386Z","submitted_at":"2025-12-10T17:25:55Z","title":"SCOUT: A Defense Against Data Poisoning Attacks in Fine-Tuned Language Models","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-05-16T23:26:48.405593Z"},"links":{"cited_paper":"/paper/2004.06660","citing_paper":"/paper/2512.10998"},"observation_digest":"sha256:b759dbc22f90dc82cf7d0c98d777ea2481b4dcd126d341fc2843201d61727831","observation_id":"50c8f818-a136-43e6-941d-e832e78c06fb","resolution":{"observed_at":"2026-05-16T23:28:40.705090Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2004.06660","last_updated":"2020-04-14T16:51:42Z","snapshot_observed_at":"2026-08-09T15:24:12.006566Z","submitted_at":"2020-04-14T16:51:42Z","title":"Weight Poisoning Attacks on Pre-trained Models","version":1},"cited_work":{"arxiv_id":"2004.06660","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2004.06660","snapshot_observed_at":"2026-07-04T19:50:11.061646Z","title":"arXiv preprint arXiv:2004.06660 , year=","venue":null,"work_id":"af19ed07-780c-48b3-8b15-87f2daadd346","year":2004},"citing_paper":{"arxiv_id":"2604.08766","last_updated":"2026-07-01T23:16:19Z","snapshot_observed_at":"2026-08-02T17:12:53.113042Z","submitted_at":"2026-04-09T21:06:19Z","title":"Follow My Eyes: Backdoor Attacks on Goal-Directed Scanpath Prediction","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-05-10T16:59:11.347052Z"},"links":{"cited_paper":"/paper/2004.06660","citing_paper":"/paper/2604.08766"},"observation_digest":"sha256:7ceaac207844311d2451049be5cc68961bf21ecc2805ed66fed9cdb7197d0e06","observation_id":"868621a2-cd07-4e0a-a4d2-f025a4895770","resolution":{"observed_at":"2026-05-11T07:45:58.607550Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2004.06660","last_updated":"2020-04-14T16:51:42Z","snapshot_observed_at":"2026-08-09T15:24:12.006566Z","submitted_at":"2020-04-14T16:51:42Z","title":"Weight Poisoning Attacks on Pre-trained Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2004.06660","snapshot_observed_at":"2026-07-12T23:44:14.956966Z","title":"Weight poisoning attacks on pre-trained models.arXiv preprint arXiv:2004.06660, 2020","venue":null,"work_id":null,"year":2004},"citing_paper":{"arxiv_id":"2604.08766","last_updated":"2026-07-01T23:16:19Z","snapshot_observed_at":"2026-08-02T17:12:53.113042Z","submitted_at":"2026-04-09T21:06:19Z","title":"Follow My Eyes: Backdoor Attacks on Goal-Directed Scanpath Prediction","version":2},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-07-12T23:44:14.956966Z"},"links":{"cited_paper":"/paper/2004.06660","citing_paper":"/paper/2604.08766"},"observation_digest":"sha256:033dbab0e084d52f082b37f0e3a8e237c73bb0b70df735eb43978360b7639b67","observation_id":"a64fc9ff-bfd9-4bfb-9cdd-c9fe29a931fc","resolution":{"observed_at":"2026-07-12T23:44:14.956966Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2004.06660","last_updated":"2020-04-14T16:51:42Z","snapshot_observed_at":"2026-08-09T15:24:12.006566Z","submitted_at":"2020-04-14T16:51:42Z","title":"Weight Poisoning Attacks on Pre-trained Models","version":1},"cited_work":{"arxiv_id":"2004.06660","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2004.06660","snapshot_observed_at":"2026-07-04T19:50:11.061646Z","title":"arXiv preprint arXiv:2004.06660 , year=","venue":null,"work_id":"af19ed07-780c-48b3-8b15-87f2daadd346","year":2004},"citing_paper":{"arxiv_id":"2604.24350","last_updated":"2026-04-27T11:44:42Z","snapshot_observed_at":"2026-07-06T23:10:24.992210Z","submitted_at":"2026-04-27T11:44:42Z","title":"Unveiling the Backdoor Mechanism Hidden Behind Catastrophic Overfitting in Fast Adversarial Training","version":1},"reference_index":99,"source":"pdf_text","source_observed_at":"2026-05-08T04:29:11.570861Z"},"links":{"cited_paper":"/paper/2004.06660","citing_paper":"/paper/2604.24350"},"observation_digest":"sha256:3712ebb8e99be9076f83d3117c73348dcba28d32bc8eebd1d17c50394d508d73","observation_id":"3ea8a53c-a01d-482a-8a91-9f36d326e222","resolution":{"observed_at":"2026-05-11T21:46:35.182780Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2004.06660","last_updated":"2020-04-14T16:51:42Z","snapshot_observed_at":"2026-08-09T15:24:12.006566Z","submitted_at":"2020-04-14T16:51:42Z","title":"Weight Poisoning Attacks on Pre-trained Models","version":1},"cited_work":{"arxiv_id":"2004.06660","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2004.06660","snapshot_observed_at":"2026-07-04T19:50:11.061646Z","title":"arXiv preprint arXiv:2004.06660 , year=","venue":null,"work_id":"af19ed07-780c-48b3-8b15-87f2daadd346","year":2004},"citing_paper":{"arxiv_id":"2606.00654","last_updated":"2026-05-30T09:57:42Z","snapshot_observed_at":"2026-08-07T23:35:33.862372Z","submitted_at":"2026-05-30T09:57:42Z","title":"The Invitation Trap: Proactive Availability Backdoor in LLMs via Conversational Induction","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-06-28T18:43:43.210136Z"},"links":{"cited_paper":"/paper/2004.06660","citing_paper":"/paper/2606.00654"},"observation_digest":"sha256:e37b29c4da03b05ed0c459beadb6afcec3a660682fc370ee4c198afcecf878d6","observation_id":"df8d92c3-d496-4e11-9278-3978feda422c","resolution":{"observed_at":"2026-06-28T20:22:37.842877Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2004.06660","last_updated":"2020-04-14T16:51:42Z","snapshot_observed_at":"2026-08-09T15:24:12.006566Z","submitted_at":"2020-04-14T16:51:42Z","title":"Weight Poisoning Attacks on Pre-trained Models","version":1},"cited_work":{"arxiv_id":"2004.06660","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2004.06660","snapshot_observed_at":"2026-07-04T19:50:11.061646Z","title":"arXiv preprint arXiv:2004.06660 , year=","venue":null,"work_id":"af19ed07-780c-48b3-8b15-87f2daadd346","year":2004},"citing_paper":{"arxiv_id":"2606.25476","last_updated":"2026-07-21T11:09:35Z","snapshot_observed_at":"2026-08-06T23:05:07.064301Z","submitted_at":"2026-06-24T07:00:53Z","title":"A Red Teaming Framework for Large Language Models: A Case Study on Faithfulness Evaluation","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-06-25T20:58:53.119386Z"},"links":{"cited_paper":"/paper/2004.06660","citing_paper":"/paper/2606.25476"},"observation_digest":"sha256:ef9bac6332146cf6c03789def196fc59b5919989702b3d8a42769614293ddda1","observation_id":"e9956566-8cb4-43ad-9d49-4d6567db9874","resolution":{"observed_at":"2026-07-04T19:50:11.063148Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2004.06660","last_updated":"2020-04-14T16:51:42Z","snapshot_observed_at":"2026-08-09T15:24:12.006566Z","submitted_at":"2020-04-14T16:51:42Z","title":"Weight Poisoning Attacks on Pre-trained Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2004.06660","snapshot_observed_at":"2026-08-02T10:16:38.047621Z","title":"arXiv preprint arXiv:2004.06660 (2020)","venue":null,"work_id":null,"year":2004},"citing_paper":{"arxiv_id":"2606.25476","last_updated":"2026-07-21T11:09:35Z","snapshot_observed_at":"2026-08-06T23:05:07.064301Z","submitted_at":"2026-06-24T07:00:53Z","title":"A Red Teaming Framework for Large Language Models: A Case Study on Faithfulness Evaluation","version":2},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-02T10:16:38.047621Z"},"links":{"cited_paper":"/paper/2004.06660","citing_paper":"/paper/2606.25476"},"observation_digest":"sha256:25d81bbab0199ebc59dc619bd313ab426a6fb85860e296b1cba74bc091b26e32","observation_id":"50668df4-5f0e-47c3-af87-7a030b3e9d48","resolution":{"observed_at":"2026-08-02T10:16:38.047621Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2004.06660/citation-record","integrity":"/paper/2004.06660/integrity","json":"/paper/2004.06660/citation-record.json","paper":"/paper/2004.06660"},"outbound":[],"paper":{"arxiv_id":"2004.06660","last_updated":"2020-04-14T16:51:42Z","latest_version":1,"primary_category":"cs.LG","snapshot_observed_at":"2026-08-09T15:24:12.006566Z","submitted_at":"2020-04-14T16:51:42Z","title":"Weight Poisoning Attacks on Pre-trained Models"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 12 inbound Pith citation observations for arXiv:2004.06660."}