{"as_of":"2026-08-08T22:39:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:7ad6b3273931183a27912d7ce813a81c54b059c16edcd666ec8903f998959d77","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":8,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":8,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":8,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":8,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T11:11:40.474093Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-03T10:48:02.313626Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2405.19550","last_updated":"2024-05-29T22:26:26Z","snapshot_observed_at":"2026-07-06T18:22:18.644161Z","submitted_at":"2024-05-29T22:26:26Z","title":"Stress-Testing Capability Elicitation With Password-Locked Models","version":1},"cited_work":{"arxiv_id":"2405.19550","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2405.19550","snapshot_observed_at":"2026-07-03T10:48:02.313626Z","title":"2024 , journal =","venue":null,"work_id":"9c5c03f8-06ff-4c95-a48f-db5277dc59d0","year":2024},"citing_paper":{"arxiv_id":"2412.04984","last_updated":"2025-01-14T20:16:01Z","snapshot_observed_at":"2026-07-29T23:20:20.918596Z","submitted_at":"2024-12-06T12:09:50Z","title":"Frontier Models are Capable of In-context Scheming","version":2},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-05-16T14:22:01.616448Z"},"links":{"cited_paper":"/paper/2405.19550","citing_paper":"/paper/2412.04984"},"observation_digest":"sha256:d70240d0de6740fd442921d84a48b2efb9acf36f816e9fd097e8910c5f2fb983","observation_id":"5d8cadfb-b360-4778-8a7e-28404a85ddb1","resolution":{"observed_at":"2026-05-16T14:22:01.639206Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.19550","last_updated":"2024-05-29T22:26:26Z","snapshot_observed_at":"2026-07-06T18:22:18.644161Z","submitted_at":"2024-05-29T22:26:26Z","title":"Stress-Testing Capability Elicitation With Password-Locked Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.19550","snapshot_observed_at":"2026-08-07T11:11:40.474093Z","title":"Stress-testing capability elicitation with password-locked models.arXiv preprint arXiv:2405.19550, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T13:32:09.488526Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.474093Z"},"links":{"cited_paper":"/paper/2405.19550","citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:7e3918985daa9ee3fb70005b9304b68d844580838f1e4242d95e7d13f7e15f38","observation_id":"81792aed-f23f-4c4b-b15f-3b7ae48bef03","resolution":{"observed_at":"2026-08-07T11:11:40.474093Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.19550","last_updated":"2024-05-29T22:26:26Z","snapshot_observed_at":"2026-07-06T18:22:18.644161Z","submitted_at":"2024-05-29T22:26:26Z","title":"Stress-Testing Capability Elicitation With Password-Locked Models","version":1},"cited_work":{"arxiv_id":"2405.19550","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2405.19550","snapshot_observed_at":"2026-07-03T10:48:02.313626Z","title":"2024 , journal =","venue":null,"work_id":"9c5c03f8-06ff-4c95-a48f-db5277dc59d0","year":2024},"citing_paper":{"arxiv_id":"2605.15377","last_updated":"2026-05-18T07:58:13Z","snapshot_observed_at":"2026-07-06T23:26:41.848219Z","submitted_at":"2026-05-14T20:06:52Z","title":"Ensemble Monitoring for AI Control: Diverse Signals Outweigh More Compute","version":2},"reference_index":44,"source":"arxiv_source","source_observed_at":"2026-05-20T20:12:03.715605Z"},"links":{"cited_paper":"/paper/2405.19550","citing_paper":"/paper/2605.15377"},"observation_digest":"sha256:20ecd1fcc25a0c34571f618e9eaecea4edec346dd669dcdfbed013cbd523302b","observation_id":"e4d114e6-ce53-4126-a1ab-e3887415032e","resolution":{"observed_at":"2026-05-20T20:13:43.427596Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.19550","last_updated":"2024-05-29T22:26:26Z","snapshot_observed_at":"2026-07-06T18:22:18.644161Z","submitted_at":"2024-05-29T22:26:26Z","title":"Stress-Testing Capability Elicitation With Password-Locked Models","version":1},"cited_work":{"arxiv_id":"2405.19550","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2405.19550","snapshot_observed_at":"2026-07-03T10:48:02.313626Z","title":"2024 , journal =","venue":null,"work_id":"9c5c03f8-06ff-4c95-a48f-db5277dc59d0","year":2024},"citing_paper":{"arxiv_id":"2606.09809","last_updated":"2026-06-08T17:55:02Z","snapshot_observed_at":"2026-08-02T08:53:32.385821Z","submitted_at":"2026-06-08T17:55:02Z","title":"Evaluation Cards: An Interpretive Layer for AI Evaluation Reporting","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-06-27T16:11:36.483820Z"},"links":{"cited_paper":"/paper/2405.19550","citing_paper":"/paper/2606.09809"},"observation_digest":"sha256:23cf810a35667a2124d6e96e649aa00ab268345422c6357611c01305980fae34","observation_id":"5247466e-5473-45ad-8301-eddc3cce436b","resolution":{"observed_at":"2026-07-03T02:07:33.261481Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.19550","last_updated":"2024-05-29T22:26:26Z","snapshot_observed_at":"2026-07-06T18:22:18.644161Z","submitted_at":"2024-05-29T22:26:26Z","title":"Stress-Testing Capability Elicitation With Password-Locked Models","version":1},"cited_work":{"arxiv_id":"2405.19550","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2405.19550","snapshot_observed_at":"2026-07-03T10:48:02.313626Z","title":"2024 , journal =","venue":null,"work_id":"9c5c03f8-06ff-4c95-a48f-db5277dc59d0","year":2024},"citing_paper":{"arxiv_id":"2606.10304","last_updated":"2026-06-09T01:45:19Z","snapshot_observed_at":"2026-07-06T23:49:32.647742Z","submitted_at":"2026-06-09T01:45:19Z","title":"MIRAGE: A Polarity-Flipping Encoding Subspace in LLM Agents","version":1},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-06-27T13:33:24.087333Z"},"links":{"cited_paper":"/paper/2405.19550","citing_paper":"/paper/2606.10304"},"observation_digest":"sha256:76ba97fbcbab6dbbef4466af823d635eb1fb2d75b17e9b49e27b045debf3e917","observation_id":"730a255e-3e40-4597-a585-32246e01e0fa","resolution":{"observed_at":"2026-07-03T04:57:38.144361Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.19550","last_updated":"2024-05-29T22:26:26Z","snapshot_observed_at":"2026-07-06T18:22:18.644161Z","submitted_at":"2024-05-29T22:26:26Z","title":"Stress-Testing Capability Elicitation With Password-Locked Models","version":1},"cited_work":{"arxiv_id":"2405.19550","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2405.19550","snapshot_observed_at":"2026-07-03T10:48:02.313626Z","title":"2024 , journal =","venue":null,"work_id":"9c5c03f8-06ff-4c95-a48f-db5277dc59d0","year":2024},"citing_paper":{"arxiv_id":"2606.12016","last_updated":"2026-06-10T12:43:31Z","snapshot_observed_at":"2026-08-08T21:35:10.311571Z","submitted_at":"2026-06-10T12:43:31Z","title":"Generalization Hacking: Models Can Game Reinforcement Learning by Preventing Behavioral Generalization","version":1},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-06-27T10:59:09.372559Z"},"links":{"cited_paper":"/paper/2405.19550","citing_paper":"/paper/2606.12016"},"observation_digest":"sha256:ec79dfdeab7333674cd2019b9b1c2a255e74f3875c01cb9ef18bf4c6cbfb734c","observation_id":"74230aa1-49cf-4dc3-a9e6-40dda6aa6a55","resolution":{"observed_at":"2026-07-03T08:17:44.951229Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.19550","last_updated":"2024-05-29T22:26:26Z","snapshot_observed_at":"2026-07-06T18:22:18.644161Z","submitted_at":"2024-05-29T22:26:26Z","title":"Stress-Testing Capability Elicitation With Password-Locked Models","version":1},"cited_work":{"arxiv_id":"2405.19550","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2405.19550","snapshot_observed_at":"2026-07-03T10:48:02.313626Z","title":"2024 , journal =","venue":null,"work_id":"9c5c03f8-06ff-4c95-a48f-db5277dc59d0","year":2024},"citing_paper":{"arxiv_id":"2606.12618","last_updated":"2026-06-17T16:15:20Z","snapshot_observed_at":"2026-07-06T23:51:31.502574Z","submitted_at":"2026-06-10T19:21:12Z","title":"\"Did you lie?\" Evaluating Lie Detectors across Model Scale and Belief-Verified Model Organisms","version":2},"reference_index":73,"source":"arxiv_source","source_observed_at":"2026-06-27T09:51:16.969884Z"},"links":{"cited_paper":"/paper/2405.19550","citing_paper":"/paper/2606.12618"},"observation_digest":"sha256:4c146a170914e74cd14ddf6635ca2b152df45b05be6a9aca1601058cf13973bb","observation_id":"0ee6cac9-8b12-4d12-b68a-c3d048d1f5b7","resolution":{"observed_at":"2026-07-03T10:48:02.315041Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.19550","last_updated":"2024-05-29T22:26:26Z","snapshot_observed_at":"2026-07-06T18:22:18.644161Z","submitted_at":"2024-05-29T22:26:26Z","title":"Stress-Testing Capability Elicitation With Password-Locked Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.19550","snapshot_observed_at":"2026-08-02T14:26:47.323505Z","title":"Stress-testing capability elicitation with password-locked models.arXiv preprint arXiv:2405.19550, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.20436","last_updated":"2026-05-11T13:44:35Z","snapshot_observed_at":"2026-08-07T15:21:11.046444Z","submitted_at":"2026-05-11T13:44:35Z","title":"Routing Subspaces: Auditing Evaluation-to-Deployment Mismatch in Fine-Tuned Language Models","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-02T14:26:47.323505Z"},"links":{"cited_paper":"/paper/2405.19550","citing_paper":"/paper/2607.20436"},"observation_digest":"sha256:2d0622edf76babc43feb94ee59c4fda4d6b9307429d7905ba8c8d0141f962acd","observation_id":"2bd3a690-3ff5-4390-98c4-ce098f4f5997","resolution":{"observed_at":"2026-08-02T14:26:47.323505Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2405.19550/citation-record","integrity":"/paper/2405.19550/integrity","json":"/paper/2405.19550/citation-record.json","paper":"/paper/2405.19550"},"outbound":[],"paper":{"arxiv_id":"2405.19550","last_updated":"2024-05-29T22:26:26Z","latest_version":1,"primary_category":"cs.LG","snapshot_observed_at":"2026-07-06T18:22:18.644161Z","submitted_at":"2024-05-29T22:26:26Z","title":"Stress-Testing Capability Elicitation With Password-Locked Models"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 8 inbound Pith citation observations for arXiv:2405.19550."}