{"as_of":"2026-08-09T09:24:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:26b18f016197449b724786bec5a8e226e4f06958013d10d4f1214831b6dd32e5","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":8,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":8,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":8,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":8,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-09T00:50:00.519996Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-01T10:15:44.404943Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2011.10369","last_updated":"2021-11-03T18:21:00Z","snapshot_observed_at":"2026-08-08T00:46:05.240737Z","submitted_at":"2020-11-20T12:17:21Z","title":"ONION: A Simple and Effective Defense Against Textual Backdoor Attacks","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2011.10369","snapshot_observed_at":"2026-08-09T00:50:00.519996Z","title":"Onion: A simple and effective defense against textual backdoor attacks,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2502.05224","last_updated":"2025-02-06T04:43:05Z","snapshot_observed_at":"2026-08-09T05:58:57.244749Z","submitted_at":"2025-02-06T04:43:05Z","title":"A Survey on Backdoor Threats in Large Language Models (LLMs): Attacks, Defenses, and Evaluations","version":1},"reference_index":121,"source":"pdf_text","source_observed_at":"2026-08-09T00:50:00.519996Z"},"links":{"cited_paper":"/paper/2011.10369","citing_paper":"/paper/2502.05224"},"observation_digest":"sha256:3bc731b1893d0aae99b741a2e89c14fd1336650f7e58e427f65014d6b219f4bc","observation_id":"abed6cae-3374-4af0-af39-36eaeb71edb4","resolution":{"observed_at":"2026-08-09T00:50:00.519996Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2011.10369","last_updated":"2021-11-03T18:21:00Z","snapshot_observed_at":"2026-08-08T00:46:05.240737Z","submitted_at":"2020-11-20T12:17:21Z","title":"ONION: A Simple and Effective Defense Against Textual Backdoor Attacks","version":3},"cited_work":{"arxiv_id":"2011.10369","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2011.10369","snapshot_observed_at":"2026-07-01T10:15:44.404943Z","title":"Onion: A simple and effective defense against textual backdoor attacks","venue":null,"work_id":"9975bccc-5919-4ebc-b1ab-be64db743200","year":2011},"citing_paper":{"arxiv_id":"2504.00446","last_updated":"2026-04-05T08:03:35Z","snapshot_observed_at":"2026-08-08T22:42:49.839017Z","submitted_at":"2025-04-01T05:58:14Z","title":"Exposing the Ghost in the Transformer: Abnormal Detection for Large Language Models via Hidden State Forensics","version":2},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-05-22T22:27:18.533162Z"},"links":{"cited_paper":"/paper/2011.10369","citing_paper":"/paper/2504.00446"},"observation_digest":"sha256:ecdf01552294c88ee4ac5f27333fe438678b6c2b8e1a71adae0932c62f3c8e72","observation_id":"c5797828-fa90-4d6e-a5db-14d43dae9fc0","resolution":{"observed_at":"2026-05-22T22:32:12.949362Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2011.10369","last_updated":"2021-11-03T18:21:00Z","snapshot_observed_at":"2026-08-08T00:46:05.240737Z","submitted_at":"2020-11-20T12:17:21Z","title":"ONION: A Simple and Effective Defense Against Textual Backdoor Attacks","version":3},"cited_work":{"arxiv_id":"2011.10369","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2011.10369","snapshot_observed_at":"2026-07-01T10:15:44.404943Z","title":"Onion: A simple and effective defense against textual backdoor attacks","venue":null,"work_id":"9975bccc-5919-4ebc-b1ab-be64db743200","year":2011},"citing_paper":{"arxiv_id":"2504.05605","last_updated":"2025-04-08T01:36:16Z","snapshot_observed_at":"2026-08-02T05:27:21.658804Z","submitted_at":"2025-04-08T01:36:16Z","title":"ShadowCoT: Cognitive Hijacking for Stealthy Reasoning Backdoors in LLMs","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-05-22T21:11:46.405944Z"},"links":{"cited_paper":"/paper/2011.10369","citing_paper":"/paper/2504.05605"},"observation_digest":"sha256:b5a0025688bf127189e8775db5b0153dc8df8ed0030ec4384e6ae0171f33e8d1","observation_id":"bfd9940a-1376-4c7e-a5ab-f21bb72c4f9d","resolution":{"observed_at":"2026-05-22T21:12:08.350228Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2011.10369","last_updated":"2021-11-03T18:21:00Z","snapshot_observed_at":"2026-08-08T00:46:05.240737Z","submitted_at":"2020-11-20T12:17:21Z","title":"ONION: A Simple and Effective Defense Against Textual Backdoor Attacks","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2011.10369","snapshot_observed_at":"2026-08-07T05:20:51.473274Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2506.08336","last_updated":"2025-06-11T01:39:01Z","snapshot_observed_at":"2026-08-09T06:29:12.771905Z","submitted_at":"2025-06-10T01:45:56Z","title":"Your Agent Can Defend Itself against Backdoor Attacks","version":2},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-07T05:20:51.473274Z"},"links":{"cited_paper":"/paper/2011.10369","citing_paper":"/paper/2506.08336"},"observation_digest":"sha256:1b0926f95fef9b5de79b4b3850259b14e1a25bd4c7b5890e7d30bce7bdb29888","observation_id":"fc910d12-2f81-468e-a5ae-a01dfd8992e4","resolution":{"observed_at":"2026-08-07T05:20:51.473274Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2011.10369","last_updated":"2021-11-03T18:21:00Z","snapshot_observed_at":"2026-08-08T00:46:05.240737Z","submitted_at":"2020-11-20T12:17:21Z","title":"ONION: A Simple and Effective Defense Against Textual Backdoor Attacks","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2011.10369","snapshot_observed_at":"2026-08-05T14:42:31.474159Z","title":"Onion: A simple and effective defense against textual backdoor attacks","venue":null,"work_id":null,"year":2011},"citing_paper":{"arxiv_id":"2508.21004","last_updated":"2025-08-28T17:05:18Z","snapshot_observed_at":"2026-08-07T06:34:15.037429Z","submitted_at":"2025-08-28T17:05:18Z","title":"Lethe: Purifying Backdoored Large Language Models with Knowledge Dilution","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-05T14:42:31.474159Z"},"links":{"cited_paper":"/paper/2011.10369","citing_paper":"/paper/2508.21004"},"observation_digest":"sha256:23a01c138df7b29ae85afa3eaa85bd22255fba63aede3002b1e77eba1dfc59f1","observation_id":"09a20dcf-c8e0-4d5e-ae3f-9c18fb8d2b01","resolution":{"observed_at":"2026-08-05T14:42:31.474159Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2011.10369","last_updated":"2021-11-03T18:21:00Z","snapshot_observed_at":"2026-08-08T00:46:05.240737Z","submitted_at":"2020-11-20T12:17:21Z","title":"ONION: A Simple and Effective Defense Against Textual Backdoor Attacks","version":3},"cited_work":{"arxiv_id":"2011.10369","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2011.10369","snapshot_observed_at":"2026-07-01T10:15:44.404943Z","title":"Onion: A simple and effective defense against textual backdoor attacks","venue":null,"work_id":"9975bccc-5919-4ebc-b1ab-be64db743200","year":2011},"citing_paper":{"arxiv_id":"2512.10998","last_updated":"2025-12-10T17:25:55Z","snapshot_observed_at":"2026-07-06T22:38:45.907386Z","submitted_at":"2025-12-10T17:25:55Z","title":"SCOUT: A Defense Against Data Poisoning Attacks in Fine-Tuned Language Models","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-05-16T23:26:48.405593Z"},"links":{"cited_paper":"/paper/2011.10369","citing_paper":"/paper/2512.10998"},"observation_digest":"sha256:cda4857a80e061d5cbc754c8dd376d27ce8e0cbde8cd824c919fa44b6525bceb","observation_id":"dd406e21-7223-45db-ba4d-60c56b06a04a","resolution":{"observed_at":"2026-05-16T23:28:40.726517Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2011.10369","last_updated":"2021-11-03T18:21:00Z","snapshot_observed_at":"2026-08-08T00:46:05.240737Z","submitted_at":"2020-11-20T12:17:21Z","title":"ONION: A Simple and Effective Defense Against Textual Backdoor Attacks","version":3},"cited_work":{"arxiv_id":"2011.10369","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2011.10369","snapshot_observed_at":"2026-07-01T10:15:44.404943Z","title":"Onion: A simple and effective defense against textual backdoor attacks","venue":null,"work_id":"9975bccc-5919-4ebc-b1ab-be64db743200","year":2011},"citing_paper":{"arxiv_id":"2606.31309","last_updated":"2026-06-30T08:19:00Z","snapshot_observed_at":"2026-08-01T23:50:29.049478Z","submitted_at":"2026-06-30T08:19:00Z","title":"CSO-LLM: Class Subspace Orthogonalization for Post-Training Backdoor Detection and Trigger Inversion in LLMs","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-07-01T05:42:10.497856Z"},"links":{"cited_paper":"/paper/2011.10369","citing_paper":"/paper/2606.31309"},"observation_digest":"sha256:bc0a2755e7793d16f8b7dfe7059730112cffbdc944e655105b43460e9f728de2","observation_id":"d9b1ed95-97b1-4656-987c-7e29d9b5ed99","resolution":{"observed_at":"2026-07-01T10:15:44.406550Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2011.10369","last_updated":"2021-11-03T18:21:00Z","snapshot_observed_at":"2026-08-08T00:46:05.240737Z","submitted_at":"2020-11-20T12:17:21Z","title":"ONION: A Simple and Effective Defense Against Textual Backdoor Attacks","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2011.10369","snapshot_observed_at":"2026-08-01T11:29:57.154055Z","title":"Conference’17, July 2017, Washington, DC, USA Yuxi Li, Zhibo Zhang, Kailong Wang, Xingshuo Han, Ling Shi, and Haoyu Wang arXiv preprint arXiv:2011.10369(2020)","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2607.19894","last_updated":"2026-07-22T08:29:06Z","snapshot_observed_at":"2026-08-09T03:37:23.420822Z","submitted_at":"2026-07-22T08:29:06Z","title":"Defense Against LLM Backdoors using Critical Neuron Isolation Pruning","version":1},"reference_index":2020,"source":"pdf_text","source_observed_at":"2026-08-01T11:29:57.154055Z"},"links":{"cited_paper":"/paper/2011.10369","citing_paper":"/paper/2607.19894"},"observation_digest":"sha256:51bb15e7beced4291b4540bde1ea09c355bad07425d611dc3b547c12b697363f","observation_id":"170cc7d5-db55-4035-b849-cf8fa8f07e85","resolution":{"observed_at":"2026-08-01T11:29:57.154055Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2011.10369/citation-record","integrity":"/paper/2011.10369/integrity","json":"/paper/2011.10369/citation-record.json","paper":"/paper/2011.10369"},"outbound":[],"paper":{"arxiv_id":"2011.10369","last_updated":"2021-11-03T18:21:00Z","latest_version":3,"primary_category":"cs.CL","snapshot_observed_at":"2026-08-08T00:46:05.240737Z","submitted_at":"2020-11-20T12:17:21Z","title":"ONION: A Simple and Effective Defense Against Textual Backdoor Attacks"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 8 inbound Pith citation observations for arXiv:2011.10369."}