{"as_of":"2026-08-18T20:19:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:6a99c37527b13ebb67951f2d7605386664e53153f810c97a0c8a0dbf36205907","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":58,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":58,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-18T06:34:40.430872+00:00","state":"measured"},{"denominator":58,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":58,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-16T06:00:23.932513Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":1,"source":"pith","source_observed_at":"2026-08-05T02:28:24.338817Z","state":"measured"}],"external_citation_measurements":[{"count":7,"observed_at":"2026-08-05T02:28:24.338817Z","source":"pith"}],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2310.10501","last_updated":"2023-10-16T15:20:30Z","snapshot_observed_at":"2026-08-16T14:51:42.822750Z","submitted_at":"2023-10-16T15:20:30Z","title":"NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Rails","version":1},"cited_work":{"arxiv_id":"2310.10501","doi":"10.48550/arxiv.2310.10501","metadata_source":"pith","pith_arxiv_id":"2310.10501","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2310.10501 , year =","venue":"cs.CL","work_id":"fb7e97a0-6711-4581-8769-8f052c2b68b8","year":2023},"citing_paper":{"arxiv_id":"2410.20791","last_updated":"2026-04-06T19:29:25Z","snapshot_observed_at":"2026-08-13T18:51:59.515589Z","submitted_at":"2024-10-28T07:16:00Z","title":"From Cool Demos to Production-Ready FMware: Core Challenges and a Technology Roadmap","version":3},"reference_index":86,"source":"pdf_text","source_observed_at":"2026-05-23T19:07:21.016824Z"},"links":{"cited_paper":"/paper/2310.10501","citing_paper":"/paper/2410.20791"},"observation_digest":"sha256:290bcc5e505b9f4498064e6704647205d46b795354d16353b7a87a1ebd32bed1","observation_id":"b4993f56-dc1c-426a-9d62-f7b05c094576","resolution":{"observed_at":"2026-05-23T19:08:20.878799Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10501","last_updated":"2023-10-16T15:20:30Z","snapshot_observed_at":"2026-08-16T14:51:42.822750Z","submitted_at":"2023-10-16T15:20:30Z","title":"NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Rails","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.10501","snapshot_observed_at":"2026-08-12T21:54:43.998281Z","title":"Nemo guardrails: A toolkit for controllable and safe ll m applications with programmable rails,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2411.08181","last_updated":"2024-12-04T16:55:18Z","snapshot_observed_at":"2026-08-14T11:20:53.014041Z","submitted_at":"2024-11-12T20:57:12Z","title":"Challenges in Guardrailing Large Language Models for Science","version":2},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-12T21:54:43.998281Z"},"links":{"cited_paper":"/paper/2310.10501","citing_paper":"/paper/2411.08181"},"observation_digest":"sha256:d79c198beb386504f84863ec6f856e7b26e497e04501d8142f4522e43a8b431f","observation_id":"b2252999-c98c-4cff-a5d1-dca18bd0d6a4","resolution":{"observed_at":"2026-08-12T21:54:43.998281Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10501","last_updated":"2023-10-16T15:20:30Z","snapshot_observed_at":"2026-08-16T14:51:42.822750Z","submitted_at":"2023-10-16T15:20:30Z","title":"NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Rails","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.10501","snapshot_observed_at":"2026-08-12T17:05:25.263784Z","title":"Nemo guardrails: A toolkit for controllable and safe llm applications with programmable rails, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2411.12946","last_updated":"2025-04-09T08:59:26Z","snapshot_observed_at":"2026-08-15T13:35:40.325298Z","submitted_at":"2024-11-20T00:31:23Z","title":"A Flexible Large Language Models Guardrail Development Methodology Applied to Off-Topic Prompt Detection","version":2},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-12T17:05:25.263784Z"},"links":{"cited_paper":"/paper/2310.10501","citing_paper":"/paper/2411.12946"},"observation_digest":"sha256:29865c3e493072872397112b6d10fd5e4d4936b360a38749e8d22b5a76fdbe10","observation_id":"b0136c51-ff37-4ced-a9f4-4af54fc8a025","resolution":{"observed_at":"2026-08-12T17:05:25.263784Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10501","last_updated":"2023-10-16T15:20:30Z","snapshot_observed_at":"2026-08-16T14:51:42.822750Z","submitted_at":"2023-10-16T15:20:30Z","title":"NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Rails","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.10501","snapshot_observed_at":"2026-08-12T04:21:32.527774Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.01547","last_updated":"2024-12-02T14:35:43Z","snapshot_observed_at":"2026-08-18T02:30:33.868485Z","submitted_at":"2024-12-02T14:35:43Z","title":"Improved Large Language Model Jailbreak Detection via Pretrained Embeddings","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-12T04:21:32.527774Z"},"links":{"cited_paper":"/paper/2310.10501","citing_paper":"/paper/2412.01547"},"observation_digest":"sha256:9605f6027cd03d114dcea780b88ac1b5856007c5866a1ee6220464c631564a39","observation_id":"503cdfce-8364-4355-9654-d4fc75b6c598","resolution":{"observed_at":"2026-08-12T04:21:32.527774Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10501","last_updated":"2023-10-16T15:20:30Z","snapshot_observed_at":"2026-08-16T14:51:42.822750Z","submitted_at":"2023-10-16T15:20:30Z","title":"NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Rails","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.10501","snapshot_observed_at":"2026-08-11T13:38:04.460651Z","title":"Nemo guardrails: A toolkit for controllable and safe llm applications with programmable rails,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.13233","last_updated":"2024-12-21T21:08:29Z","snapshot_observed_at":"2026-08-14T08:38:10.862421Z","submitted_at":"2024-12-17T14:14:04Z","title":"Creating an LLM-based AI-agent: A high-level methodology towards enhancing LLMs with APIs","version":2},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-11T13:38:04.460651Z"},"links":{"cited_paper":"/paper/2310.10501","citing_paper":"/paper/2412.13233"},"observation_digest":"sha256:64fc6d1a18c03b4a355c3d4158a954780e231b17cb30f0a6018e800c291145de","observation_id":"ad328f1d-067e-4eda-bc03-901d4593ca5b","resolution":{"observed_at":"2026-08-11T13:38:04.460651Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10501","last_updated":"2023-10-16T15:20:30Z","snapshot_observed_at":"2026-08-16T14:51:42.822750Z","submitted_at":"2023-10-16T15:20:30Z","title":"NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Rails","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.10501","snapshot_observed_at":"2026-08-10T20:15:54.790811Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2501.09004","last_updated":"2025-01-15T18:37:08Z","snapshot_observed_at":"2026-08-17T11:41:23.010968Z","submitted_at":"2025-01-15T18:37:08Z","title":"Aegis2.0: A Diverse AI Safety Dataset and Risks Taxonomy for Alignment of LLM Guardrails","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-10T20:15:54.790811Z"},"links":{"cited_paper":"/paper/2310.10501","citing_paper":"/paper/2501.09004"},"observation_digest":"sha256:a16d1d48fd9c18fa839a14c43619c69f04b0980d2f4f616ed477932e7c68bca3","observation_id":"f807bdf1-b1f4-470c-b3ce-1cc8dc858f10","resolution":{"observed_at":"2026-08-10T20:15:54.790811Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10501","last_updated":"2023-10-16T15:20:30Z","snapshot_observed_at":"2026-08-16T14:51:42.822750Z","submitted_at":"2023-10-16T15:20:30Z","title":"NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Rails","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.10501","snapshot_observed_at":"2026-08-09T14:49:08.803069Z","title":"1 11 Adversarial Reasoning at Jailbreaking Time Rein, D., Hou, B","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2502.01633","last_updated":"2025-06-25T15:31:17Z","snapshot_observed_at":"2026-08-16T09:09:35.076144Z","submitted_at":"2025-02-03T18:59:01Z","title":"Adversarial Reasoning at Jailbreaking Time","version":2},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-09T14:49:08.803069Z"},"links":{"cited_paper":"/paper/2310.10501","citing_paper":"/paper/2502.01633"},"observation_digest":"sha256:ed2f8f69da37d3898e49757316a3e3d70c61b23764ea786acf80089d0707ef31","observation_id":"68a9dd76-5e7d-42f1-9c5b-aaecabe4d199","resolution":{"observed_at":"2026-08-09T14:49:08.803069Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10501","last_updated":"2023-10-16T15:20:30Z","snapshot_observed_at":"2026-08-16T14:51:42.822750Z","submitted_at":"2023-10-16T15:20:30Z","title":"NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Rails","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.10501","snapshot_observed_at":"2026-08-08T10:23:06.230142Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.08142","last_updated":"2025-02-12T05:48:57Z","snapshot_observed_at":"2026-08-18T03:45:11.621403Z","submitted_at":"2025-02-12T05:48:57Z","title":"Bridging the Safety Gap: A Guardrail Pipeline for Trustworthy LLM Inferences","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-08T10:23:06.230142Z"},"links":{"cited_paper":"/paper/2310.10501","citing_paper":"/paper/2502.08142"},"observation_digest":"sha256:96041e81dbf72d7ff87df8cd2160222ff7c9094adaa7f035c92191591c6a2300","observation_id":"9467d2cd-2697-4dfd-9897-cb1cfa33f8ad","resolution":{"observed_at":"2026-08-08T10:23:06.230142Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10501","last_updated":"2023-10-16T15:20:30Z","snapshot_observed_at":"2026-08-16T14:51:42.822750Z","submitted_at":"2023-10-16T15:20:30Z","title":"NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Rails","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.10501","snapshot_observed_at":"2026-08-16T06:00:23.932513Z","title":"Nemo guardrails: A toolkit for controllable and safe llm applications with programmable rails","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2504.19333","last_updated":"2025-04-29T02:42:00Z","snapshot_observed_at":"2026-08-17T13:24:51.617681Z","submitted_at":"2025-04-27T19:07:58Z","title":"Unified Multi-Task Learning & Model Fusion for Efficient Language Model Guardrailing","version":2},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-16T06:00:23.932513Z"},"links":{"cited_paper":"/paper/2310.10501","citing_paper":"/paper/2504.19333"},"observation_digest":"sha256:4c7d6a96d1445d5d9ca32ba811840833503eecfc77ea86683a9ceed215441849","observation_id":"8b29e581-855c-4b23-8efc-cb5c7e31ec07","resolution":{"observed_at":"2026-08-16T06:00:23.932513Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10501","last_updated":"2023-10-16T15:20:30Z","snapshot_observed_at":"2026-08-16T14:51:42.822750Z","submitted_at":"2023-10-16T15:20:30Z","title":"NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Rails","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.10501","snapshot_observed_at":"2026-08-15T21:10:20.098151Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.10640","last_updated":"2025-06-02T20:08:34Z","snapshot_observed_at":"2026-08-18T09:36:23.346739Z","submitted_at":"2025-05-15T18:22:45Z","title":"The Hitchhikers Guide to Production-ready Trustworthy Foundation Model powered Software (FMware)","version":2},"reference_index":84,"source":"pdf_text","source_observed_at":"2026-08-15T21:10:20.098151Z"},"links":{"cited_paper":"/paper/2310.10501","citing_paper":"/paper/2505.10640"},"observation_digest":"sha256:52c660094f0c7612c8db4950c25d6559acb5f5728fa407e5771a571243cfc4aa","observation_id":"adb86806-5f38-4b35-8429-ba15cbab4ba8","resolution":{"observed_at":"2026-08-15T21:10:20.098151Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10501","last_updated":"2023-10-16T15:20:30Z","snapshot_observed_at":"2026-08-16T14:51:42.822750Z","submitted_at":"2023-10-16T15:20:30Z","title":"NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Rails","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.10501","snapshot_observed_at":"2026-08-07T15:12:23.329400Z","title":"Nemo guardrails: A toolkit for controllable and safe llm applications with programmable rails","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.17131","last_updated":"2025-05-22T01:59:54Z","snapshot_observed_at":"2026-08-16T01:50:50.437369Z","submitted_at":"2025-05-22T01:59:54Z","title":"Relative Bias: A Comparative Framework for Quantifying Bias in LLMs","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-07T15:12:23.329400Z"},"links":{"cited_paper":"/paper/2310.10501","citing_paper":"/paper/2505.17131"},"observation_digest":"sha256:580b13071a5078db0e20015d5df399dd65d237eff57a7d33b04185165dae730a","observation_id":"717f6f6f-6ed1-4ab2-8aac-de77b9e10e61","resolution":{"observed_at":"2026-08-07T15:12:23.329400Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10501","last_updated":"2023-10-16T15:20:30Z","snapshot_observed_at":"2026-08-16T14:51:42.822750Z","submitted_at":"2023-10-16T15:20:30Z","title":"NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Rails","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.10501","snapshot_observed_at":"2026-08-07T05:41:25.473951Z","title":"Nemo guardrails: A toolkit for controllable and safe llm applications with programmable rails, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.07330","last_updated":"2025-06-09T00:11:06Z","snapshot_observed_at":"2026-08-15T18:49:04.034202Z","submitted_at":"2025-06-09T00:11:06Z","title":"JavelinGuard: Low-Cost Transformer Architectures for LLM Security","version":1},"reference_index":41,"source":"arxiv_source","source_observed_at":"2026-08-07T05:41:25.473951Z"},"links":{"cited_paper":"/paper/2310.10501","citing_paper":"/paper/2506.07330"},"observation_digest":"sha256:522ea3aa8f38a666bb3645b5139533eb44ee261f7a729f3aebe7380b39ec0485","observation_id":"aaef1318-e025-4719-b3e6-875569d1de59","resolution":{"observed_at":"2026-08-07T05:41:25.473951Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10501","last_updated":"2023-10-16T15:20:30Z","snapshot_observed_at":"2026-08-16T14:51:42.822750Z","submitted_at":"2023-10-16T15:20:30Z","title":"NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Rails","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.10501","snapshot_observed_at":"2026-08-06T21:05:27.690079Z","title":"NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Rails","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2507.01081","last_updated":"2025-07-01T17:59:01Z","snapshot_observed_at":"2026-08-08T13:11:53.651874Z","submitted_at":"2025-07-01T17:59:01Z","title":"AI-guided digital intervention with physiological monitoring reduces intrusive memories after experimental trauma","version":1},"reference_index":2023,"source":"pdf_text","source_observed_at":"2026-08-06T21:05:27.690079Z"},"links":{"cited_paper":"/paper/2310.10501","citing_paper":"/paper/2507.01081"},"observation_digest":"sha256:b8ab872ed5648b4d9daf60733c96517e57f3986aeb9ec66b31458279d2e2ce2f","observation_id":"eb992438-948c-462a-8c22-a290396edb1c","resolution":{"observed_at":"2026-08-06T21:05:27.690079Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10501","last_updated":"2023-10-16T15:20:30Z","snapshot_observed_at":"2026-08-16T14:51:42.822750Z","submitted_at":"2023-10-16T15:20:30Z","title":"NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Rails","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.10501","snapshot_observed_at":"2026-08-06T18:28:44.912083Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.08898","last_updated":"2025-07-17T08:01:44Z","snapshot_observed_at":"2026-08-08T14:51:56.908190Z","submitted_at":"2025-07-11T05:15:35Z","title":"SEALGuard: Safeguarding the Multilingual Conversations in Southeast Asian Languages for LLM Software Systems","version":3},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-06T18:28:44.912083Z"},"links":{"cited_paper":"/paper/2310.10501","citing_paper":"/paper/2507.08898"},"observation_digest":"sha256:0b731c7a716d885ec1622eed24407fdbf74d72dd2aa0f8840e19522006628830","observation_id":"1fc1e1e5-5be1-4380-8dff-5ac28be4f39f","resolution":{"observed_at":"2026-08-06T18:28:44.912083Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10501","last_updated":"2023-10-16T15:20:30Z","snapshot_observed_at":"2026-08-16T14:51:42.822750Z","submitted_at":"2023-10-16T15:20:30Z","title":"NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Rails","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.10501","snapshot_observed_at":"2026-08-06T14:17:04.614238Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.21170","last_updated":"2025-07-31T18:07:13Z","snapshot_observed_at":"2026-08-15T15:34:44.958665Z","submitted_at":"2025-07-25T19:44:38Z","title":"OneShield -- the Next Generation of LLM Guardrails","version":2},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-06T14:17:04.614238Z"},"links":{"cited_paper":"/paper/2310.10501","citing_paper":"/paper/2507.21170"},"observation_digest":"sha256:53bf56e94e28d1f1d3405f5a491b23d46f925b47dddcb702a31e9aea907d686f","observation_id":"ab2732f1-4829-4662-9929-4c3f03441927","resolution":{"observed_at":"2026-08-06T14:17:04.614238Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10501","last_updated":"2023-10-16T15:20:30Z","snapshot_observed_at":"2026-08-16T14:51:42.822750Z","submitted_at":"2023-10-16T15:20:30Z","title":"NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Rails","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.10501","snapshot_observed_at":"2026-08-05T15:53:53.817232Z","title":"Rebedea, R","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.19461","last_updated":"2025-08-26T22:29:31Z","snapshot_observed_at":"2026-08-13T22:40:03.202069Z","submitted_at":"2025-08-26T22:29:31Z","title":"Reliable Weak-to-Strong Monitoring of LLM Agents","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-05T15:53:53.817232Z"},"links":{"cited_paper":"/paper/2310.10501","citing_paper":"/paper/2508.19461"},"observation_digest":"sha256:1486fdba1af4fb5845ef0bdb433b05e4a3cc4264ade2e346d9ecd5c3d0694aa2","observation_id":"8253f1c1-1306-4637-a14e-3b88ed3655ac","resolution":{"observed_at":"2026-08-05T15:53:53.817232Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10501","last_updated":"2023-10-16T15:20:30Z","snapshot_observed_at":"2026-08-16T14:51:42.822750Z","submitted_at":"2023-10-16T15:20:30Z","title":"NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Rails","version":1},"cited_work":{"arxiv_id":"2310.10501","doi":"10.48550/arxiv.2310.10501","metadata_source":"pith","pith_arxiv_id":"2310.10501","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2310.10501 , year =","venue":"cs.CL","work_id":"fb7e97a0-6711-4581-8769-8f052c2b68b8","year":2023},"citing_paper":{"arxiv_id":"2510.13727","last_updated":"2026-05-19T04:39:26Z","snapshot_observed_at":"2026-08-14T16:36:16.543226Z","submitted_at":"2025-10-15T16:30:57Z","title":"From Refusal to Recovery: A Control-Theoretic Approach to Generative AI Guardrails","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-05-21T20:42:40.823721Z"},"links":{"cited_paper":"/paper/2310.10501","citing_paper":"/paper/2510.13727"},"observation_digest":"sha256:7d26f29f7f9b31aad29213a76ad5acaacb6c3782b90fd6ec3951efa7612fe956","observation_id":"fa9f974a-e3f0-42b6-b902-93d37e52069c","resolution":{"observed_at":"2026-05-21T20:44:22.072683Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10501","last_updated":"2023-10-16T15:20:30Z","snapshot_observed_at":"2026-08-16T14:51:42.822750Z","submitted_at":"2023-10-16T15:20:30Z","title":"NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Rails","version":1},"cited_work":{"arxiv_id":"2310.10501","doi":"10.48550/arxiv.2310.10501","metadata_source":"pith","pith_arxiv_id":"2310.10501","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2310.10501 , year =","venue":"cs.CL","work_id":"fb7e97a0-6711-4581-8769-8f052c2b68b8","year":2023},"citing_paper":{"arxiv_id":"2604.01444","last_updated":"2026-04-03T15:46:12Z","snapshot_observed_at":"2026-08-11T14:17:09.777521Z","submitted_at":"2026-04-01T22:38:38Z","title":"Cooking Up Risks: Benchmarking and Reducing Food Safety Risks in Large Language Models","version":2},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-05-13T22:02:12.555644Z"},"links":{"cited_paper":"/paper/2310.10501","citing_paper":"/paper/2604.01444"},"observation_digest":"sha256:d60bdb3465f99dcaacc72d1bc49ec2e30fdc679fbcdb5aad554b839e4f99b065","observation_id":"55fc4bc5-a864-42b6-9a51-354b937030f3","resolution":{"observed_at":"2026-05-13T22:03:20.358831Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10501","last_updated":"2023-10-16T15:20:30Z","snapshot_observed_at":"2026-08-16T14:51:42.822750Z","submitted_at":"2023-10-16T15:20:30Z","title":"NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Rails","version":1},"cited_work":{"arxiv_id":"2310.10501","doi":"10.48550/arxiv.2310.10501","metadata_source":"pith","pith_arxiv_id":"2310.10501","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2310.10501 , year =","venue":"cs.CL","work_id":"fb7e97a0-6711-4581-8769-8f052c2b68b8","year":2023},"citing_paper":{"arxiv_id":"2604.08059","last_updated":"2026-05-26T04:45:19Z","snapshot_observed_at":"2026-08-12T14:40:14.034666Z","submitted_at":"2026-04-09T10:18:51Z","title":"Governed Capability Evolution: Lifecycle-Time Compatibility Checking and Rollback for AI-Component-Based Systems, with Embodied Agents as Case Study","version":3},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-05-10T17:22:10.367439Z"},"links":{"cited_paper":"/paper/2310.10501","citing_paper":"/paper/2604.08059"},"observation_digest":"sha256:d3410edb9c58af7b96dc493b7dc7f807afbdeecd04cf7a8de77ad4102084a1a5","observation_id":"988f07a9-3c60-4928-ae7f-6ae459f5497b","resolution":{"observed_at":"2026-05-11T06:56:03.810738Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10501","last_updated":"2023-10-16T15:20:30Z","snapshot_observed_at":"2026-08-16T14:51:42.822750Z","submitted_at":"2023-10-16T15:20:30Z","title":"NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Rails","version":1},"cited_work":{"arxiv_id":"2310.10501","doi":"10.48550/arxiv.2310.10501","metadata_source":"pith","pith_arxiv_id":"2310.10501","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2310.10501 , year =","venue":"cs.CL","work_id":"fb7e97a0-6711-4581-8769-8f052c2b68b8","year":2023},"citing_paper":{"arxiv_id":"2604.08059","last_updated":"2026-05-26T04:45:19Z","snapshot_observed_at":"2026-08-12T14:40:14.034666Z","submitted_at":"2026-04-09T10:18:51Z","title":"Governed Capability Evolution: Lifecycle-Time Compatibility Checking and Rollback for AI-Component-Based Systems, with Embodied Agents as Case Study","version":4},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-05-11T00:47:07.042535Z"},"links":{"cited_paper":"/paper/2310.10501","citing_paper":"/paper/2604.08059"},"observation_digest":"sha256:83a0e3e3834c752e3da36e34da47aef747788e1f94c99c3a01d3a03746007368","observation_id":"fa2f3eff-e0f2-4d8b-b9d7-92215802a7bd","resolution":{"observed_at":"2026-05-11T00:50:50.209977Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10501","last_updated":"2023-10-16T15:20:30Z","snapshot_observed_at":"2026-08-16T14:51:42.822750Z","submitted_at":"2023-10-16T15:20:30Z","title":"NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Rails","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.10501","snapshot_observed_at":"2026-07-13T00:06:54.167921Z","title":"Rebedea, R","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2604.08059","last_updated":"2026-05-26T04:45:19Z","snapshot_observed_at":"2026-08-12T14:40:14.034666Z","submitted_at":"2026-04-09T10:18:51Z","title":"Governed Capability Evolution: Lifecycle-Time Compatibility Checking and Rollback for AI-Component-Based Systems, with Embodied Agents as Case Study","version":5},"reference_index":42,"source":"arxiv_source","source_observed_at":"2026-07-13T00:06:54.167921Z"},"links":{"cited_paper":"/paper/2310.10501","citing_paper":"/paper/2604.08059"},"observation_digest":"sha256:cf0e92c7fdf2a9515258ec9cd898337292e384144739d8bd0466dda39916d398","observation_id":"45353e24-1575-4907-b7d2-15fb1a924d7f","resolution":{"observed_at":"2026-07-13T00:06:54.167921Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10501","last_updated":"2023-10-16T15:20:30Z","snapshot_observed_at":"2026-08-16T14:51:42.822750Z","submitted_at":"2023-10-16T15:20:30Z","title":"NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Rails","version":1},"cited_work":{"arxiv_id":"2310.10501","doi":"10.48550/arxiv.2310.10501","metadata_source":"pith","pith_arxiv_id":"2310.10501","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2310.10501 , year =","venue":"cs.CL","work_id":"fb7e97a0-6711-4581-8769-8f052c2b68b8","year":2023},"citing_paper":{"arxiv_id":"2604.11943","last_updated":"2026-07-06T04:35:13Z","snapshot_observed_at":"2026-08-15T03:03:23.214610Z","submitted_at":"2026-04-13T18:32:02Z","title":"ProbeLogits: Kernel-Level LLM Inference Primitives for AI-Native Operating Systems","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-05-10T16:27:18.594869Z"},"links":{"cited_paper":"/paper/2310.10501","citing_paper":"/paper/2604.11943"},"observation_digest":"sha256:844356899b874919c0f5c430007272faf19f869db8702a55ff837ad6a189eba4","observation_id":"b8d0b09d-1a80-46ea-b8ec-75ec66fd4f17","resolution":{"observed_at":"2026-05-11T08:50:59.116572Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10501","last_updated":"2023-10-16T15:20:30Z","snapshot_observed_at":"2026-08-16T14:51:42.822750Z","submitted_at":"2023-10-16T15:20:30Z","title":"NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Rails","version":1},"cited_work":{"arxiv_id":"2310.10501","doi":"10.48550/arxiv.2310.10501","metadata_source":"pith","pith_arxiv_id":"2310.10501","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2310.10501 , year =","venue":"cs.CL","work_id":"fb7e97a0-6711-4581-8769-8f052c2b68b8","year":2023},"citing_paper":{"arxiv_id":"2604.13061","last_updated":"2026-04-17T15:43:33Z","snapshot_observed_at":"2026-08-08T23:35:08.157593Z","submitted_at":"2026-03-18T18:10:37Z","title":"Token Statistics Reveal Conversational Drift in Multi-turn LLM Interaction","version":2},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-05-15T09:20:21.372218Z"},"links":{"cited_paper":"/paper/2310.10501","citing_paper":"/paper/2604.13061"},"observation_digest":"sha256:b1595bc8c7770e32038dc93c4a092ca8aaeb66f432620b5cae16d90ebfa182c7","observation_id":"44161601-9ef9-4630-a92c-881f44f7945d","resolution":{"observed_at":"2026-05-15T09:25:22.303119Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10501","last_updated":"2023-10-16T15:20:30Z","snapshot_observed_at":"2026-08-16T14:51:42.822750Z","submitted_at":"2023-10-16T15:20:30Z","title":"NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Rails","version":1},"cited_work":{"arxiv_id":"2310.10501","doi":"10.48550/arxiv.2310.10501","metadata_source":"pith","pith_arxiv_id":"2310.10501","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2310.10501 , year =","venue":"cs.CL","work_id":"fb7e97a0-6711-4581-8769-8f052c2b68b8","year":2023},"citing_paper":{"arxiv_id":"2604.16838","last_updated":"2026-05-10T16:22:59Z","snapshot_observed_at":"2026-08-03T04:41:01.774350Z","submitted_at":"2026-04-18T05:10:11Z","title":"enclawed: A Configurable, Sector-Neutral Hardening Framework for Single-User AI Assistant Gateways","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-05-10T07:11:06.389107Z"},"links":{"cited_paper":"/paper/2310.10501","citing_paper":"/paper/2604.16838"},"observation_digest":"sha256:8d6ed9616a324453cbeac4fcfd7dd52985a40b9355a6d2a2e11ef325164556f9","observation_id":"3512136d-4cf7-450d-83f8-3436c305e087","resolution":{"observed_at":"2026-05-10T07:11:53.138595Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10501","last_updated":"2023-10-16T15:20:30Z","snapshot_observed_at":"2026-08-16T14:51:42.822750Z","submitted_at":"2023-10-16T15:20:30Z","title":"NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Rails","version":1},"cited_work":{"arxiv_id":"2310.10501","doi":"10.48550/arxiv.2310.10501","metadata_source":"pith","pith_arxiv_id":"2310.10501","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2310.10501 , year =","venue":"cs.CL","work_id":"fb7e97a0-6711-4581-8769-8f052c2b68b8","year":2023},"citing_paper":{"arxiv_id":"2604.16838","last_updated":"2026-05-10T16:22:59Z","snapshot_observed_at":"2026-08-03T04:41:01.774350Z","submitted_at":"2026-04-18T05:10:11Z","title":"enclawed: A Configurable, Sector-Neutral Hardening Framework for Single-User AI Assistant Gateways","version":2},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-05-12T01:50:36.175721Z"},"links":{"cited_paper":"/paper/2310.10501","citing_paper":"/paper/2604.16838"},"observation_digest":"sha256:482f35a6a07d5f743ed9fd984e654ddf297b1ecd835f32bb531b246a42833c4d","observation_id":"ea408a28-2620-4558-a0a3-f6ff393382d6","resolution":{"observed_at":"2026-05-12T01:51:14.463121Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10501","last_updated":"2023-10-16T15:20:30Z","snapshot_observed_at":"2026-08-16T14:51:42.822750Z","submitted_at":"2023-10-16T15:20:30Z","title":"NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Rails","version":1},"cited_work":{"arxiv_id":"2310.10501","doi":"10.48550/arxiv.2310.10501","metadata_source":"pith","pith_arxiv_id":"2310.10501","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2310.10501 , year =","venue":"cs.CL","work_id":"fb7e97a0-6711-4581-8769-8f052c2b68b8","year":2023},"citing_paper":{"arxiv_id":"2604.16870","last_updated":"2026-07-06T04:39:46Z","snapshot_observed_at":"2026-08-14T12:09:40.285033Z","submitted_at":"2026-04-18T06:40:20Z","title":"Governed MCP: Kernel-Level Tool Governance for AI Agents via Logit-Based Safety Primitives","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-05-10T06:55:24.385051Z"},"links":{"cited_paper":"/paper/2310.10501","citing_paper":"/paper/2604.16870"},"observation_digest":"sha256:d399827d6c12563aa135feed0e1fb4c87b11450dcbba9182fd4effddff8bf00e","observation_id":"c5498d4a-8f06-4a5d-ab2b-2fac2ac13b24","resolution":{"observed_at":"2026-05-10T06:56:47.437364Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10501","last_updated":"2023-10-16T15:20:30Z","snapshot_observed_at":"2026-08-16T14:51:42.822750Z","submitted_at":"2023-10-16T15:20:30Z","title":"NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Rails","version":1},"cited_work":{"arxiv_id":"2310.10501","doi":"10.48550/arxiv.2310.10501","metadata_source":"pith","pith_arxiv_id":"2310.10501","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2310.10501 , year =","venue":"cs.CL","work_id":"fb7e97a0-6711-4581-8769-8f052c2b68b8","year":2023},"citing_paper":{"arxiv_id":"2604.17562","last_updated":"2026-04-19T18:02:21Z","snapshot_observed_at":"2026-08-11T13:57:18.489866Z","submitted_at":"2026-04-19T18:02:21Z","title":"SafeAgent: A Runtime Protection Architecture for Agentic Systems","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-05-10T06:06:49.717091Z"},"links":{"cited_paper":"/paper/2310.10501","citing_paper":"/paper/2604.17562"},"observation_digest":"sha256:0719c80ec977a1114df7d747578a9a5801c9b42906fe8f7bc26f1e7aa8361c9f","observation_id":"9767e920-dd6f-4c74-8c10-00761c8e6ed4","resolution":{"observed_at":"2026-05-10T06:11:20.536143Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10501","last_updated":"2023-10-16T15:20:30Z","snapshot_observed_at":"2026-08-16T14:51:42.822750Z","submitted_at":"2023-10-16T15:20:30Z","title":"NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Rails","version":1},"cited_work":{"arxiv_id":"2310.10501","doi":"10.48550/arxiv.2310.10501","metadata_source":"pith","pith_arxiv_id":"2310.10501","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2310.10501 , year =","venue":"cs.CL","work_id":"fb7e97a0-6711-4581-8769-8f052c2b68b8","year":2023},"citing_paper":{"arxiv_id":"2605.02187","last_updated":"2026-07-22T08:25:06Z","snapshot_observed_at":"2026-08-11T08:50:00.509790Z","submitted_at":"2026-05-04T03:35:17Z","title":"Rewriting the Response Path: Silent Tampering and Provider-Signed Defense in BYOK LLM Agents","version":1},"reference_index":97,"source":"pdf_text","source_observed_at":"2026-05-08T18:42:06.418583Z"},"links":{"cited_paper":"/paper/2310.10501","citing_paper":"/paper/2605.02187"},"observation_digest":"sha256:9f7e0789b82c3777647de54b470712d501f445d9216b22bd04edc8b1d9ed3984","observation_id":"842eb825-ac2d-4dbc-a84b-4272b1721cdb","resolution":{"observed_at":"2026-05-09T06:15:38.448247Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10501","last_updated":"2023-10-16T15:20:30Z","snapshot_observed_at":"2026-08-16T14:51:42.822750Z","submitted_at":"2023-10-16T15:20:30Z","title":"NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Rails","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.10501","snapshot_observed_at":"2026-08-02T15:04:29.364361Z","title":"Nemo guardrails: A toolkit for controllable and safe llm applications with programmable rails.arXiv preprint arXiv:2310.10501, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2605.02187","last_updated":"2026-07-22T08:25:06Z","snapshot_observed_at":"2026-08-11T08:50:00.509790Z","submitted_at":"2026-05-04T03:35:17Z","title":"Rewriting the Response Path: Silent Tampering and Provider-Signed Defense in BYOK LLM Agents","version":2},"reference_index":97,"source":"pdf_text","source_observed_at":"2026-08-02T15:04:29.364361Z"},"links":{"cited_paper":"/paper/2310.10501","citing_paper":"/paper/2605.02187"},"observation_digest":"sha256:671a4bc1145f12dc455b47199b5018edf4692fb10f77321ce876bc0eeeba02b0","observation_id":"05fe93da-c7e5-4a2f-a65f-4a2df78ad0f7","resolution":{"observed_at":"2026-08-02T15:04:29.364361Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10501","last_updated":"2023-10-16T15:20:30Z","snapshot_observed_at":"2026-08-16T14:51:42.822750Z","submitted_at":"2023-10-16T15:20:30Z","title":"NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Rails","version":1},"cited_work":{"arxiv_id":"2310.10501","doi":"10.48550/arxiv.2310.10501","metadata_source":"pith","pith_arxiv_id":"2310.10501","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2310.10501 , year =","venue":"cs.CL","work_id":"fb7e97a0-6711-4581-8769-8f052c2b68b8","year":2023},"citing_paper":{"arxiv_id":"2605.05248","last_updated":"2026-05-26T12:37:10Z","snapshot_observed_at":"2026-08-12T23:05:55.955365Z","submitted_at":"2026-05-05T02:56:43Z","title":"Governed Metaprogramming for Intelligent Systems: Reclassifying Eval as a Governed Effect","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-05-08T18:35:57.667344Z"},"links":{"cited_paper":"/paper/2310.10501","citing_paper":"/paper/2605.05248"},"observation_digest":"sha256:fe3b82b872c47037309f15d351d8374a69b8ad05c2938e77aa8830b92472a69b","observation_id":"c594745d-e64d-479b-b9df-e064eb66b46e","resolution":{"observed_at":"2026-05-09T06:20:41.124157Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10501","last_updated":"2023-10-16T15:20:30Z","snapshot_observed_at":"2026-08-16T14:51:42.822750Z","submitted_at":"2023-10-16T15:20:30Z","title":"NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Rails","version":1},"cited_work":{"arxiv_id":"2310.10501","doi":"10.48550/arxiv.2310.10501","metadata_source":"pith","pith_arxiv_id":"2310.10501","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2310.10501 , year =","venue":"cs.CL","work_id":"fb7e97a0-6711-4581-8769-8f052c2b68b8","year":2023},"citing_paper":{"arxiv_id":"2605.05248","last_updated":"2026-05-26T12:37:10Z","snapshot_observed_at":"2026-08-12T23:05:55.955365Z","submitted_at":"2026-05-05T02:56:43Z","title":"Governed Metaprogramming for Intelligent Systems: Reclassifying Eval as a Governed Effect","version":2},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-05-12T03:18:11.272461Z"},"links":{"cited_paper":"/paper/2310.10501","citing_paper":"/paper/2605.05248"},"observation_digest":"sha256:e7a6e257b101a1a9af8ece369cd0d9b355fa0165a123b94982194acff6c88013","observation_id":"6458de43-be5f-43c3-ae1f-88b56568d8ef","resolution":{"observed_at":"2026-05-12T03:21:18.994749Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10501","last_updated":"2023-10-16T15:20:30Z","snapshot_observed_at":"2026-08-16T14:51:42.822750Z","submitted_at":"2023-10-16T15:20:30Z","title":"NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Rails","version":1},"cited_work":{"arxiv_id":"2310.10501","doi":"10.48550/arxiv.2310.10501","metadata_source":"pith","pith_arxiv_id":"2310.10501","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2310.10501 , year =","venue":"cs.CL","work_id":"fb7e97a0-6711-4581-8769-8f052c2b68b8","year":2023},"citing_paper":{"arxiv_id":"2605.05248","last_updated":"2026-05-26T12:37:10Z","snapshot_observed_at":"2026-08-12T23:05:55.955365Z","submitted_at":"2026-05-05T02:56:43Z","title":"Governed Metaprogramming for Intelligent Systems: Reclassifying Eval as a Governed Effect","version":3},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-05-22T10:48:23.196532Z"},"links":{"cited_paper":"/paper/2310.10501","citing_paper":"/paper/2605.05248"},"observation_digest":"sha256:8449dae5efdfbf63ac37066f8bd0b75a30433bd36210feaf8a9a6a4670e39f45","observation_id":"88fbaac3-cf8d-48cd-9c56-87af5c978ed3","resolution":{"observed_at":"2026-05-22T10:51:26.602424Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10501","last_updated":"2023-10-16T15:20:30Z","snapshot_observed_at":"2026-08-16T14:51:42.822750Z","submitted_at":"2023-10-16T15:20:30Z","title":"NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Rails","version":1},"cited_work":{"arxiv_id":"2310.10501","doi":"10.48550/arxiv.2310.10501","metadata_source":"pith","pith_arxiv_id":"2310.10501","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2310.10501 , year =","venue":"cs.CL","work_id":"fb7e97a0-6711-4581-8769-8f052c2b68b8","year":2023},"citing_paper":{"arxiv_id":"2605.05248","last_updated":"2026-05-26T12:37:10Z","snapshot_observed_at":"2026-08-12T23:05:55.955365Z","submitted_at":"2026-05-05T02:56:43Z","title":"Governed Metaprogramming for Intelligent Systems: Reclassifying Eval as a Governed Effect","version":4},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-07-01T00:32:26.957903Z"},"links":{"cited_paper":"/paper/2310.10501","citing_paper":"/paper/2605.05248"},"observation_digest":"sha256:cbc3aed4bd1ec0279d0b88b6d01c634a96a022c07e62a052aaf2525af5febf34","observation_id":"dd641b6e-3266-4379-92e1-c2813c446a19","resolution":{"observed_at":"2026-07-01T00:35:10.184561Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10501","last_updated":"2023-10-16T15:20:30Z","snapshot_observed_at":"2026-08-16T14:51:42.822750Z","submitted_at":"2023-10-16T15:20:30Z","title":"NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Rails","version":1},"cited_work":{"arxiv_id":"2310.10501","doi":"10.48550/arxiv.2310.10501","metadata_source":"pith","pith_arxiv_id":"2310.10501","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2310.10501 , year =","venue":"cs.CL","work_id":"fb7e97a0-6711-4581-8769-8f052c2b68b8","year":2023},"citing_paper":{"arxiv_id":"2605.16265","last_updated":"2026-03-24T11:39:35Z","snapshot_observed_at":"2026-08-16T18:39:38.207665Z","submitted_at":"2026-03-24T11:39:35Z","title":"AgentWall: A Runtime Safety Layer for Local AI Agents","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-05-21T10:05:57.807585Z"},"links":{"cited_paper":"/paper/2310.10501","citing_paper":"/paper/2605.16265"},"observation_digest":"sha256:e8f5cc5e31e9fe2586d91d634f9dcccfa7f632baf45bf47eec3494defb50c8cc","observation_id":"6657d26d-f5c1-4cf2-90d5-c885605e0ce9","resolution":{"observed_at":"2026-05-21T10:09:59.455736Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10501","last_updated":"2023-10-16T15:20:30Z","snapshot_observed_at":"2026-08-16T14:51:42.822750Z","submitted_at":"2023-10-16T15:20:30Z","title":"NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Rails","version":1},"cited_work":{"arxiv_id":"2310.10501","doi":"10.48550/arxiv.2310.10501","metadata_source":"pith","pith_arxiv_id":"2310.10501","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2310.10501 , year =","venue":"cs.CL","work_id":"fb7e97a0-6711-4581-8769-8f052c2b68b8","year":2023},"citing_paper":{"arxiv_id":"2605.17413","last_updated":"2026-05-17T12:18:20Z","snapshot_observed_at":"2026-08-16T19:57:10.274787Z","submitted_at":"2026-05-17T12:18:20Z","title":"Ablating Safety: Mechanisms for Removing Alignment in Language Models for Security Applications","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-05-19T23:30:43.364230Z"},"links":{"cited_paper":"/paper/2310.10501","citing_paper":"/paper/2605.17413"},"observation_digest":"sha256:82b22a2d6d45d690636360efda1bb23b7dbf2f2284ef14c658435e604114f5c7","observation_id":"2c6813e8-b676-45f0-ab46-e1eb6fe5266f","resolution":{"observed_at":"2026-05-19T23:32:52.681567Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10501","last_updated":"2023-10-16T15:20:30Z","snapshot_observed_at":"2026-08-16T14:51:42.822750Z","submitted_at":"2023-10-16T15:20:30Z","title":"NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Rails","version":1},"cited_work":{"arxiv_id":"2310.10501","doi":"10.48550/arxiv.2310.10501","metadata_source":"pith","pith_arxiv_id":"2310.10501","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2310.10501 , year =","venue":"cs.CL","work_id":"fb7e97a0-6711-4581-8769-8f052c2b68b8","year":2023},"citing_paper":{"arxiv_id":"2605.18764","last_updated":"2026-04-10T17:00:10Z","snapshot_observed_at":"2026-08-15T13:40:05.356747Z","submitted_at":"2026-04-10T17:00:10Z","title":"From Intent to AI Pipelines: A Controlled Agentic Framework for Non-AI Expert Scientists","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-05-21T09:27:05.332950Z"},"links":{"cited_paper":"/paper/2310.10501","citing_paper":"/paper/2605.18764"},"observation_digest":"sha256:539eeb2c16ffb77d97344b77e47499117defe6003aeb946ff23c22746b048811","observation_id":"41dacb91-b90a-4f5d-ae2f-1d443ef85b3f","resolution":{"observed_at":"2026-05-21T09:29:56.997423Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10501","last_updated":"2023-10-16T15:20:30Z","snapshot_observed_at":"2026-08-16T14:51:42.822750Z","submitted_at":"2023-10-16T15:20:30Z","title":"NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Rails","version":1},"cited_work":{"arxiv_id":"2310.10501","doi":"10.48550/arxiv.2310.10501","metadata_source":"pith","pith_arxiv_id":"2310.10501","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2310.10501 , year =","venue":"cs.CL","work_id":"fb7e97a0-6711-4581-8769-8f052c2b68b8","year":2023},"citing_paper":{"arxiv_id":"2605.20173","last_updated":"2026-08-11T16:46:29Z","snapshot_observed_at":"2026-08-15T11:08:55.862055Z","submitted_at":"2026-05-19T17:54:21Z","title":"A Methodology for Selecting and Composing Runtime Architecture Patterns for Production LLM Agents","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-05-20T04:52:24.576085Z"},"links":{"cited_paper":"/paper/2310.10501","citing_paper":"/paper/2605.20173"},"observation_digest":"sha256:b99ef57e2231b8318cf51a1b1055a36c8c386a9af121e6ba1dc8b40a827f32e2","observation_id":"48b1c8b6-6de2-4abc-a885-27a725373c23","resolution":{"observed_at":"2026-05-20T04:53:04.166580Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10501","last_updated":"2023-10-16T15:20:30Z","snapshot_observed_at":"2026-08-16T14:51:42.822750Z","submitted_at":"2023-10-16T15:20:30Z","title":"NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Rails","version":1},"cited_work":{"arxiv_id":"2310.10501","doi":"10.48550/arxiv.2310.10501","metadata_source":"pith","pith_arxiv_id":"2310.10501","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2310.10501 , year =","venue":"cs.CL","work_id":"fb7e97a0-6711-4581-8769-8f052c2b68b8","year":2023},"citing_paper":{"arxiv_id":"2605.24036","last_updated":"2026-05-21T09:54:52Z","snapshot_observed_at":"2026-08-14T09:50:21.122295Z","submitted_at":"2026-05-21T09:54:52Z","title":"Intent-Driven Computing: A Computational Model for Governed Autonomous Systems","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-06-30T16:28:13.296908Z"},"links":{"cited_paper":"/paper/2310.10501","citing_paper":"/paper/2605.24036"},"observation_digest":"sha256:3c5bb6ad706d0556f2c81a98c84f989b50899cc76469bd15bc115079aed89bdc","observation_id":"365ed299-cd65-4513-a992-54e18e730590","resolution":{"observed_at":"2026-06-30T16:35:12.725508Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10501","last_updated":"2023-10-16T15:20:30Z","snapshot_observed_at":"2026-08-16T14:51:42.822750Z","submitted_at":"2023-10-16T15:20:30Z","title":"NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Rails","version":1},"cited_work":{"arxiv_id":"2310.10501","doi":"10.48550/arxiv.2310.10501","metadata_source":"pith","pith_arxiv_id":"2310.10501","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2310.10501 , year =","venue":"cs.CL","work_id":"fb7e97a0-6711-4581-8769-8f052c2b68b8","year":2023},"citing_paper":{"arxiv_id":"2605.29068","last_updated":"2026-05-27T20:15:22Z","snapshot_observed_at":"2026-08-12T23:04:58.335023Z","submitted_at":"2026-05-27T20:15:22Z","title":"Robust and Efficient Guardrails with Latent Reasoning","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-06-29T12:07:16.574111Z"},"links":{"cited_paper":"/paper/2310.10501","citing_paper":"/paper/2605.29068"},"observation_digest":"sha256:7602cc7dfdc224d34ec22a4901d5e24dfc1fc77276a8218c2a7f2b9fdd53eb27","observation_id":"4c4d7398-2c81-4c14-87bc-811767aa1c6f","resolution":{"observed_at":"2026-06-29T12:13:26.923418Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10501","last_updated":"2023-10-16T15:20:30Z","snapshot_observed_at":"2026-08-16T14:51:42.822750Z","submitted_at":"2023-10-16T15:20:30Z","title":"NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Rails","version":1},"cited_work":{"arxiv_id":"2310.10501","doi":"10.48550/arxiv.2310.10501","metadata_source":"pith","pith_arxiv_id":"2310.10501","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2310.10501 , year =","venue":"cs.CL","work_id":"fb7e97a0-6711-4581-8769-8f052c2b68b8","year":2023},"citing_paper":{"arxiv_id":"2606.01513","last_updated":"2026-06-01T00:24:30Z","snapshot_observed_at":"2026-08-07T00:02:03.501606Z","submitted_at":"2026-06-01T00:24:30Z","title":"Compliance-Scored Best-of-N Guardrail Orchestration for Multimodal Document Generation in Payments Dispute Defense","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-06-28T13:13:05.210457Z"},"links":{"cited_paper":"/paper/2310.10501","citing_paper":"/paper/2606.01513"},"observation_digest":"sha256:cb84dd46949585a4e5ae207c6fd351e8ea7c17ddca1a602b62b2814ac837c957","observation_id":"3d199a52-b23a-4569-8195-23a36656cf25","resolution":{"observed_at":"2026-07-02T00:56:24.443083Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10501","last_updated":"2023-10-16T15:20:30Z","snapshot_observed_at":"2026-08-16T14:51:42.822750Z","submitted_at":"2023-10-16T15:20:30Z","title":"NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Rails","version":1},"cited_work":{"arxiv_id":"2310.10501","doi":"10.48550/arxiv.2310.10501","metadata_source":"pith","pith_arxiv_id":"2310.10501","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2310.10501 , year =","venue":"cs.CL","work_id":"fb7e97a0-6711-4581-8769-8f052c2b68b8","year":2023},"citing_paper":{"arxiv_id":"2606.08021","last_updated":"2026-06-06T07:31:04Z","snapshot_observed_at":"2026-08-13T18:48:25.838137Z","submitted_at":"2026-06-06T07:31:04Z","title":"Semantic Quorum Assurance: Collective Certification for Non-Deterministic AI Infrastructure","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-06-27T20:15:56.875933Z"},"links":{"cited_paper":"/paper/2310.10501","citing_paper":"/paper/2606.08021"},"observation_digest":"sha256:298cddb39f28164342e6c2e423f4045697565ecccca766e72e982ee6f59f580a","observation_id":"2d03a2f7-10df-4b36-9b84-aa58e98b3c6d","resolution":{"observed_at":"2026-07-02T20:47:22.539818Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10501","last_updated":"2023-10-16T15:20:30Z","snapshot_observed_at":"2026-08-16T14:51:42.822750Z","submitted_at":"2023-10-16T15:20:30Z","title":"NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Rails","version":1},"cited_work":{"arxiv_id":"2310.10501","doi":"10.48550/arxiv.2310.10501","metadata_source":"pith","pith_arxiv_id":"2310.10501","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2310.10501 , year =","venue":"cs.CL","work_id":"fb7e97a0-6711-4581-8769-8f052c2b68b8","year":2023},"citing_paper":{"arxiv_id":"2606.09255","last_updated":"2026-06-08T09:27:55Z","snapshot_observed_at":"2026-08-17T09:24:03.981668Z","submitted_at":"2026-06-08T09:27:55Z","title":"RPO-PDT: Demonstrating Role-Play-Based Knowledge Adaptation for Student Support Dialogue (Demonstration System)","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-06-27T16:45:27.352655Z"},"links":{"cited_paper":"/paper/2310.10501","citing_paper":"/paper/2606.09255"},"observation_digest":"sha256:5739175bb82f40c50f6e52d768107cf4b12fda1821aac1a656e8dc1a056915de","observation_id":"86e031ba-5c01-40d3-a975-8aac0e595e64","resolution":{"observed_at":"2026-07-03T01:17:30.415492Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10501","last_updated":"2023-10-16T15:20:30Z","snapshot_observed_at":"2026-08-16T14:51:42.822750Z","submitted_at":"2023-10-16T15:20:30Z","title":"NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Rails","version":1},"cited_work":{"arxiv_id":"2310.10501","doi":"10.48550/arxiv.2310.10501","metadata_source":"pith","pith_arxiv_id":"2310.10501","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2310.10501 , year =","venue":"cs.CL","work_id":"fb7e97a0-6711-4581-8769-8f052c2b68b8","year":2023},"citing_paper":{"arxiv_id":"2606.10106","last_updated":"2026-06-08T19:35:37Z","snapshot_observed_at":"2026-08-10T20:10:13.432654Z","submitted_at":"2026-06-08T19:35:37Z","title":"What makes a harness a harness: necessary and sufficient conditions for an agent harness","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-06-27T15:15:57.372858Z"},"links":{"cited_paper":"/paper/2310.10501","citing_paper":"/paper/2606.10106"},"observation_digest":"sha256:41e55a4b41e3752fdb6c3d7723abef8acfbcfd731057c45aa7de405d1bdbb85f","observation_id":"97b474be-3258-4ec3-b20b-c5645f002d70","resolution":{"observed_at":"2026-06-27T19:31:10.809501Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10501","last_updated":"2023-10-16T15:20:30Z","snapshot_observed_at":"2026-08-16T14:51:42.822750Z","submitted_at":"2023-10-16T15:20:30Z","title":"NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Rails","version":1},"cited_work":{"arxiv_id":"2310.10501","doi":"10.48550/arxiv.2310.10501","metadata_source":"pith","pith_arxiv_id":"2310.10501","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2310.10501 , year =","venue":"cs.CL","work_id":"fb7e97a0-6711-4581-8769-8f052c2b68b8","year":2023},"citing_paper":{"arxiv_id":"2606.14517","last_updated":"2026-06-16T09:28:39Z","snapshot_observed_at":"2026-07-06T23:52:28.557859Z","submitted_at":"2026-06-12T14:49:00Z","title":"From Shield to Target: Denial-of-Service Attacks on LLM-Based Agent Guardrails","version":2},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-06-27T04:42:05.886984Z"},"links":{"cited_paper":"/paper/2310.10501","citing_paper":"/paper/2606.14517"},"observation_digest":"sha256:5a135b0b76c7dd5ccfdeca6aa04476886459d83d4fb05d8249434606cc67fe13","observation_id":"778f1ca3-9fbb-42df-ab7e-4f35d4926acb","resolution":{"observed_at":"2026-07-03T16:58:43.540802Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10501","last_updated":"2023-10-16T15:20:30Z","snapshot_observed_at":"2026-08-16T14:51:42.822750Z","submitted_at":"2023-10-16T15:20:30Z","title":"NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Rails","version":1},"cited_work":{"arxiv_id":"2310.10501","doi":"10.48550/arxiv.2310.10501","metadata_source":"pith","pith_arxiv_id":"2310.10501","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2310.10501 , year =","venue":"cs.CL","work_id":"fb7e97a0-6711-4581-8769-8f052c2b68b8","year":2023},"citing_paper":{"arxiv_id":"2606.19242","last_updated":"2026-06-17T16:22:34Z","snapshot_observed_at":"2026-08-14T16:07:17.535626Z","submitted_at":"2026-06-17T16:22:34Z","title":"Runtime Compliance Verification for AI Agents","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-06-26T20:08:39.045215Z"},"links":{"cited_paper":"/paper/2310.10501","citing_paper":"/paper/2606.19242"},"observation_digest":"sha256:34f80855c29c8e8834400384de349e6e6cff05b9b94e914dcc61b2a99f1785a3","observation_id":"5e3a5182-67d8-41bd-90f2-cf986d1d806f","resolution":{"observed_at":"2026-07-04T01:59:25.314105Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10501","last_updated":"2023-10-16T15:20:30Z","snapshot_observed_at":"2026-08-16T14:51:42.822750Z","submitted_at":"2023-10-16T15:20:30Z","title":"NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Rails","version":1},"cited_work":{"arxiv_id":"2310.10501","doi":"10.48550/arxiv.2310.10501","metadata_source":"pith","pith_arxiv_id":"2310.10501","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2310.10501 , year =","venue":"cs.CL","work_id":"fb7e97a0-6711-4581-8769-8f052c2b68b8","year":2023},"citing_paper":{"arxiv_id":"2606.19660","last_updated":"2026-06-17T23:59:57Z","snapshot_observed_at":"2026-08-12T20:24:27.583819Z","submitted_at":"2026-06-17T23:59:57Z","title":"A Layered Security Framework Against Prompt Injection in RAG-Based Chatbots","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-06-26T20:00:14.036515Z"},"links":{"cited_paper":"/paper/2310.10501","citing_paper":"/paper/2606.19660"},"observation_digest":"sha256:bb238cc767347e37d6b7818319fe1db4728da97b924cde63e8b415dac659dd81","observation_id":"6c7e2c5e-bd24-4221-9959-e5e9967ea8d0","resolution":{"observed_at":"2026-07-04T02:09:22.531156Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10501","last_updated":"2023-10-16T15:20:30Z","snapshot_observed_at":"2026-08-16T14:51:42.822750Z","submitted_at":"2023-10-16T15:20:30Z","title":"NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Rails","version":1},"cited_work":{"arxiv_id":"2310.10501","doi":"10.48550/arxiv.2310.10501","metadata_source":"pith","pith_arxiv_id":"2310.10501","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2310.10501 , year =","venue":"cs.CL","work_id":"fb7e97a0-6711-4581-8769-8f052c2b68b8","year":2023},"citing_paper":{"arxiv_id":"2606.21565","last_updated":"2026-06-19T16:03:53Z","snapshot_observed_at":"2026-08-14T16:24:02.272969Z","submitted_at":"2026-06-19T16:03:53Z","title":"Composing Verifiable Conceptual Models via Building Blocks: Towards Design-Time Verification of Agentic AI Workflows","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-06-26T14:10:22.581443Z"},"links":{"cited_paper":"/paper/2310.10501","citing_paper":"/paper/2606.21565"},"observation_digest":"sha256:4480eeb2909c83a3f5d138a73dbb3b2338df3629c8a012da4eeb1170fc9fad71","observation_id":"db21d6a0-6185-4b3d-9489-9949c562c0b8","resolution":{"observed_at":"2026-07-04T06:49:37.956496Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10501","last_updated":"2023-10-16T15:20:30Z","snapshot_observed_at":"2026-08-16T14:51:42.822750Z","submitted_at":"2023-10-16T15:20:30Z","title":"NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Rails","version":1},"cited_work":{"arxiv_id":"2310.10501","doi":"10.48550/arxiv.2310.10501","metadata_source":"pith","pith_arxiv_id":"2310.10501","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2310.10501 , year =","venue":"cs.CL","work_id":"fb7e97a0-6711-4581-8769-8f052c2b68b8","year":2023},"citing_paper":{"arxiv_id":"2606.26057","last_updated":"2026-06-24T17:32:27Z","snapshot_observed_at":"2026-08-15T09:18:36.291737Z","submitted_at":"2026-06-24T17:32:27Z","title":"The Unfireable Safety Kernel: Execution-Time AI Alignment for AI Agents and Other Escapable AI Systems","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-06-25T19:01:27.048159Z"},"links":{"cited_paper":"/paper/2310.10501","citing_paper":"/paper/2606.26057"},"observation_digest":"sha256:88fbdc61d52d9783144fe95eac07ec466456ff630f05c4eb94284804e30c86b0","observation_id":"2c2787e0-3e7f-4a85-89af-1910e596926f","resolution":{"observed_at":"2026-07-04T21:10:09.305147Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10501","last_updated":"2023-10-16T15:20:30Z","snapshot_observed_at":"2026-08-16T14:51:42.822750Z","submitted_at":"2023-10-16T15:20:30Z","title":"NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Rails","version":1},"cited_work":{"arxiv_id":"2310.10501","doi":"10.48550/arxiv.2310.10501","metadata_source":"pith","pith_arxiv_id":"2310.10501","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2310.10501 , year =","venue":"cs.CL","work_id":"fb7e97a0-6711-4581-8769-8f052c2b68b8","year":2023},"citing_paper":{"arxiv_id":"2607.07405","last_updated":"2026-07-11T04:16:22Z","snapshot_observed_at":"2026-08-13T03:04:17.349151Z","submitted_at":"2026-07-08T13:38:54Z","title":"Reason Less, Verify More: Deterministic Gates Recover a Silent Policy-Violation Failure Mode in Tool-Using LLM Agents","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-07-09T12:05:56.683347Z"},"links":{"cited_paper":"/paper/2310.10501","citing_paper":"/paper/2607.07405"},"observation_digest":"sha256:e9eb9bc56bbf738465f779bb108f8240a4e2b1d87ab97687649ebff678591c35","observation_id":"24aa95bf-f94d-4712-9e57-9b40a398d100","resolution":{"observed_at":"2026-07-09T12:06:13.575458Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10501","last_updated":"2023-10-16T15:20:30Z","snapshot_observed_at":"2026-08-16T14:51:42.822750Z","submitted_at":"2023-10-16T15:20:30Z","title":"NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Rails","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.10501","snapshot_observed_at":"2026-07-14T15:46:54.344384Z","title":"Rebedea, R","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.07405","last_updated":"2026-07-11T04:16:22Z","snapshot_observed_at":"2026-08-13T03:04:17.349151Z","submitted_at":"2026-07-08T13:38:54Z","title":"Reason Less, Verify More: Deterministic Gates Recover a Silent Policy-Violation Failure Mode in Tool-Using LLM Agents","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-07-14T15:46:54.344384Z"},"links":{"cited_paper":"/paper/2310.10501","citing_paper":"/paper/2607.07405"},"observation_digest":"sha256:44289013e5ed5fb564508b366631fde79347e9fafd8007e2835a777a044dc21b","observation_id":"f8ff12fd-8897-46f6-bdb9-ce73fa234feb","resolution":{"observed_at":"2026-07-14T15:46:54.344384Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10501","last_updated":"2023-10-16T15:20:30Z","snapshot_observed_at":"2026-08-16T14:51:42.822750Z","submitted_at":"2023-10-16T15:20:30Z","title":"NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Rails","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.10501","snapshot_observed_at":"2026-08-02T12:50:38.340398Z","title":"Rebedea, R","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.16215","last_updated":"2026-05-28T21:23:49Z","snapshot_observed_at":"2026-08-15T03:01:58.407245Z","submitted_at":"2026-05-28T21:23:49Z","title":"RAIL Guard: Closing the Evaluation-to-Remediation Gap in Responsible AI for LLM Agents","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-02T12:50:38.340398Z"},"links":{"cited_paper":"/paper/2310.10501","citing_paper":"/paper/2607.16215"},"observation_digest":"sha256:206b4926d92323cb239b95f7d10a59f56f115420a1a4072eb49c641de13e67b9","observation_id":"d477a756-8a67-4c21-b528-fbf58b0ebc99","resolution":{"observed_at":"2026-08-02T12:50:38.340398Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10501","last_updated":"2023-10-16T15:20:30Z","snapshot_observed_at":"2026-08-16T14:51:42.822750Z","submitted_at":"2023-10-16T15:20:30Z","title":"NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Rails","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.10501","snapshot_observed_at":"2026-08-02T14:57:50.710796Z","title":"Rebedea et al., ”NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Rails,”arXiv preprint arXiv:2310.10501, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.18246","last_updated":"2026-05-04T18:35:31Z","snapshot_observed_at":"2026-08-17T07:17:52.028398Z","submitted_at":"2026-05-04T18:35:31Z","title":"Phionyx: A Deterministic AI Runtime Architecture with Structured State Management and Pre-Response Governance","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-02T14:57:50.710796Z"},"links":{"cited_paper":"/paper/2310.10501","citing_paper":"/paper/2607.18246"},"observation_digest":"sha256:1fa6516dffe6d353976234e3ba05101f8e8f7fbce3110bffbf6f7f682dc826cc","observation_id":"470426f0-0ca4-4936-b8df-386cf7d2daef","resolution":{"observed_at":"2026-08-02T14:57:50.710796Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10501","last_updated":"2023-10-16T15:20:30Z","snapshot_observed_at":"2026-08-16T14:51:42.822750Z","submitted_at":"2023-10-16T15:20:30Z","title":"NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Rails","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.10501","snapshot_observed_at":"2026-08-02T13:21:54.750728Z","title":"Ilia Shumailov, Zakhar Shumaylov, Yiren Zhao, Yarin Gal, Nicolas Papernot, and Ross Anderson","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.18268","last_updated":"2026-05-22T16:05:50Z","snapshot_observed_at":"2026-08-13T10:06:23.598812Z","submitted_at":"2026-05-22T16:05:50Z","title":"Fence: Specialized SLM Guardrails for LLM Applications","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-02T13:21:54.750728Z"},"links":{"cited_paper":"/paper/2310.10501","citing_paper":"/paper/2607.18268"},"observation_digest":"sha256:feed8167434247cb155e60b7ec15695c5c70db1efcb0d07662a8db4c3238201f","observation_id":"8c5b927b-6d3a-430c-b983-60fc85ff7e5b","resolution":{"observed_at":"2026-08-02T13:21:54.750728Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10501","last_updated":"2023-10-16T15:20:30Z","snapshot_observed_at":"2026-08-16T14:51:42.822750Z","submitted_at":"2023-10-16T15:20:30Z","title":"NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Rails","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.10501","snapshot_observed_at":"2026-08-02T11:57:53.165247Z","title":"NeMo Guardrails: A toolkit for controllable and safe LLM applications with pro- grammable rails.arXiv preprint arXiv:2310.10501, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.19366","last_updated":"2026-06-09T08:47:00Z","snapshot_observed_at":"2026-08-09T02:55:14.511048Z","submitted_at":"2026-06-09T08:47:00Z","title":"Geometry-Guided Constraint Learning for LLM Safety Classification","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-02T11:57:53.165247Z"},"links":{"cited_paper":"/paper/2310.10501","citing_paper":"/paper/2607.19366"},"observation_digest":"sha256:fb0c2e4c20d52cb7eaa026dd51a7cdd9cbdf02405b804525022143446292bf40","observation_id":"ab4c7147-9760-4409-b01c-cb4f85453004","resolution":{"observed_at":"2026-08-02T11:57:53.165247Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10501","last_updated":"2023-10-16T15:20:30Z","snapshot_observed_at":"2026-08-16T14:51:42.822750Z","submitted_at":"2023-10-16T15:20:30Z","title":"NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Rails","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.10501","snapshot_observed_at":"2026-08-02T12:21:06.182208Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.20488","last_updated":"2026-06-04T11:38:06Z","snapshot_observed_at":"2026-08-14T01:04:51.965077Z","submitted_at":"2026-06-04T11:38:06Z","title":"Autonomous Topology Mutation: Safe Runtime Restructuring for Multi-Agent LLM Systems with Capability, State, and Shadow Invariants","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-02T12:21:06.182208Z"},"links":{"cited_paper":"/paper/2310.10501","citing_paper":"/paper/2607.20488"},"observation_digest":"sha256:b9c2dfb383f4f49a0528c0325440e0f5ecec0e00dcda2f6275fa30cecd7b3bb0","observation_id":"616d183b-a3da-46c9-94fa-5be37d20b910","resolution":{"observed_at":"2026-08-02T12:21:06.182208Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10501","last_updated":"2023-10-16T15:20:30Z","snapshot_observed_at":"2026-08-16T14:51:42.822750Z","submitted_at":"2023-10-16T15:20:30Z","title":"NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Rails","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.10501","snapshot_observed_at":"2026-08-01T04:47:41.367804Z","title":"Proceedings of the 2023 Conference on Empirical Methods in Natural Language Processing: System Demonstrations , pages=","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.22445","last_updated":"2026-07-24T16:08:03Z","snapshot_observed_at":"2026-08-13T22:49:01.808624Z","submitted_at":"2026-07-24T16:08:03Z","title":"Dynamic Capability Scoping for Enterprise AI Agents: A Synthetic Dataset and Three-Source Permission Architecture","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-01T04:47:41.367804Z"},"links":{"cited_paper":"/paper/2310.10501","citing_paper":"/paper/2607.22445"},"observation_digest":"sha256:2fbc1d7a0aa4edd459f28ee788f97040b7a2fe4f11e805c3f21610f82b965596","observation_id":"21e85290-584a-4a6a-b209-a0dad0a58778","resolution":{"observed_at":"2026-08-01T04:47:41.367804Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10501","last_updated":"2023-10-16T15:20:30Z","snapshot_observed_at":"2026-08-16T14:51:42.822750Z","submitted_at":"2023-10-16T15:20:30Z","title":"NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Rails","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.10501","snapshot_observed_at":"2026-08-10T13:45:44.087700Z","title":"NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Rails,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.07167","last_updated":"2026-08-07T12:36:52Z","snapshot_observed_at":"2026-08-18T11:43:52.512746Z","submitted_at":"2026-08-07T12:36:52Z","title":"NiyamAI - An Intent-Bound AI Agent with Cryptographically Verifiable Guardrails using Zero-Knowledge Proofs","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-10T13:45:44.087700Z"},"links":{"cited_paper":"/paper/2310.10501","citing_paper":"/paper/2608.07167"},"observation_digest":"sha256:e406c910bfd42f02b07347acd4a17b449cfb198072cfb90034c8f215f7464740","observation_id":"2477af0b-ae23-4c91-ab29-a8fa42624673","resolution":{"observed_at":"2026-08-10T13:45:44.087700Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10501","last_updated":"2023-10-16T15:20:30Z","snapshot_observed_at":"2026-08-16T14:51:42.822750Z","submitted_at":"2023-10-16T15:20:30Z","title":"NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Rails","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.10501","snapshot_observed_at":"2026-08-15T14:19:13.829661Z","title":"Rebedea, R","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-18T15:53:35.480040Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":75,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.829661Z"},"links":{"cited_paper":"/paper/2310.10501","citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:04dadc6063726a7ed93d4134903aada42e966114597b14d8d0fc366bbf12836a","observation_id":"03571801-fe91-4608-948f-f982897c8e80","resolution":{"observed_at":"2026-08-15T14:19:13.829661Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2310.10501/citation-record","integrity":"/paper/2310.10501/integrity","json":"/paper/2310.10501/citation-record.json","paper":"/paper/2310.10501"},"outbound":[],"paper":{"arxiv_id":"2310.10501","last_updated":"2023-10-16T15:20:30Z","latest_version":1,"primary_category":"cs.CL","snapshot_observed_at":"2026-08-16T14:51:42.822750Z","submitted_at":"2023-10-16T15:20:30Z","title":"NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Rails"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"thesis":"As of 18 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 58 inbound Pith citation observations for arXiv:2310.10501."}