{"as_of":"2026-08-07T12:51:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:1cfd52934da71c63c89080b5127ec78a2990e99ad6a8b80a002884be584fa2c7","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":9,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":9,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":9,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":9,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T10:27:29.099807Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-04T16:49:57.323922Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2409.19798","last_updated":"2025-03-07T14:20:23Z","snapshot_observed_at":"2026-07-06T19:24:12.811792Z","submitted_at":"2024-09-29T21:49:32Z","title":"Membership Inference Attacks Cannot Prove that a Model Was Trained On Your Data","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.19798","snapshot_observed_at":"2026-08-07T10:27:29.099807Z","title":"Membership inference attacks cannot prove that a model was trained on your data,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.05126","last_updated":"2025-06-05T15:13:57Z","snapshot_observed_at":"2026-08-07T10:21:25.484374Z","submitted_at":"2025-06-05T15:13:57Z","title":"Membership Inference Attacks on Sequence Models","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T10:27:29.099807Z"},"links":{"cited_paper":"/paper/2409.19798","citing_paper":"/paper/2506.05126"},"observation_digest":"sha256:2462c733638a9e89ff9ccaf5fa41d23bcb8a82821e1386fa7cf2c029cad469fe","observation_id":"c3918873-35cc-415c-bd61-7447db2bab9b","resolution":{"observed_at":"2026-08-07T10:27:29.099807Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2409.19798","last_updated":"2025-03-07T14:20:23Z","snapshot_observed_at":"2026-07-06T19:24:12.811792Z","submitted_at":"2024-09-29T21:49:32Z","title":"Membership Inference Attacks Cannot Prove that a Model Was Trained On Your Data","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.19798","snapshot_observed_at":"2026-08-07T06:13:04.724789Z","title":"Position: Membership Inference Attacks Cannot Prove that a Model Was Trained On Your Data.arXiv preprint arXiv:2409.19798, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-07T05:59:53.348599Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.724789Z"},"links":{"cited_paper":"/paper/2409.19798","citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:707f2499bfe026ee559ec71243340dc21e9764b213a980d4b3c82c5d6955709a","observation_id":"46da7838-d8a7-46bc-a8c6-f476d6370050","resolution":{"observed_at":"2026-08-07T06:13:04.724789Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2409.19798","last_updated":"2025-03-07T14:20:23Z","snapshot_observed_at":"2026-07-06T19:24:12.811792Z","submitted_at":"2024-09-29T21:49:32Z","title":"Membership Inference Attacks Cannot Prove that a Model Was Trained On Your Data","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.19798","snapshot_observed_at":"2026-08-07T06:04:25.061599Z","title":"Membership inference attacks cannot prove that a model was trained on your data.arXiv preprint arXiv:2409.19798, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.06488","last_updated":"2026-07-22T01:30:58Z","snapshot_observed_at":"2026-08-07T05:53:18.689790Z","submitted_at":"2025-06-06T19:27:52Z","title":"Membership Inference Attacks for Unseen Classes","version":3},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-07T06:04:25.061599Z"},"links":{"cited_paper":"/paper/2409.19798","citing_paper":"/paper/2506.06488"},"observation_digest":"sha256:0a8784c1d4a4f92af677acea4ab42090a23f403b5e3923bc6832cc56332526ab","observation_id":"d7d1ba9e-f3ba-4b3b-81e3-47f987ded3f4","resolution":{"observed_at":"2026-08-07T06:04:25.061599Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2409.19798","last_updated":"2025-03-07T14:20:23Z","snapshot_observed_at":"2026-07-06T19:24:12.811792Z","submitted_at":"2024-09-29T21:49:32Z","title":"Membership Inference Attacks Cannot Prove that a Model Was Trained On Your Data","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.19798","snapshot_observed_at":"2026-08-07T04:33:17.059579Z","title":"Membership inference attacks cannot prove that a model was trained on your data","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.10424","last_updated":"2025-06-12T07:23:56Z","snapshot_observed_at":"2026-08-07T04:24:32.582994Z","submitted_at":"2025-06-12T07:23:56Z","title":"SOFT: Selective Data Obfuscation for Protecting LLM Fine-tuning against Membership Inference Attacks","version":1},"reference_index":97,"source":"pdf_text","source_observed_at":"2026-08-07T04:33:17.059579Z"},"links":{"cited_paper":"/paper/2409.19798","citing_paper":"/paper/2506.10424"},"observation_digest":"sha256:c3ef8be1929cdbf8186b6c48d1c9c3cc8ada62c5645f933be6272119531debbc","observation_id":"06486087-dd1c-4781-ba8e-977b5d196c03","resolution":{"observed_at":"2026-08-07T04:33:17.059579Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2409.19798","last_updated":"2025-03-07T14:20:23Z","snapshot_observed_at":"2026-07-06T19:24:12.811792Z","submitted_at":"2024-09-29T21:49:32Z","title":"Membership Inference Attacks Cannot Prove that a Model Was Trained On Your Data","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.19798","snapshot_observed_at":"2026-08-07T00:30:35.313912Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.13972","last_updated":"2025-07-03T17:45:38Z","snapshot_observed_at":"2026-08-07T00:23:11.631978Z","submitted_at":"2025-06-16T20:22:07Z","title":"Membership Inference Attacks as Privacy Tools: Reliability, Disparity and Ensemble","version":2},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-07T00:30:35.313912Z"},"links":{"cited_paper":"/paper/2409.19798","citing_paper":"/paper/2506.13972"},"observation_digest":"sha256:541751239f13ecb678991f3597fddd16ef51012fedf39dceb2895c00c72d84ff","observation_id":"031ef1be-6e45-46b2-b94c-9973d3bad810","resolution":{"observed_at":"2026-08-07T00:30:35.313912Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2409.19798","last_updated":"2025-03-07T14:20:23Z","snapshot_observed_at":"2026-07-06T19:24:12.811792Z","submitted_at":"2024-09-29T21:49:32Z","title":"Membership Inference Attacks Cannot Prove that a Model Was Trained On Your Data","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.19798","snapshot_observed_at":"2026-08-07T00:16:19.795049Z","title":"Membership inference attacks cannot prove that a model was trained on your data.arXiv preprint arXiv:2409.19798, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.14913","last_updated":"2025-06-17T18:46:45Z","snapshot_observed_at":"2026-08-07T00:57:37.582190Z","submitted_at":"2025-06-17T18:46:45Z","title":"Winter Soldier: Backdooring Language Models at Pre-Training with Indirect Data Poisoning","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-07T00:16:19.795049Z"},"links":{"cited_paper":"/paper/2409.19798","citing_paper":"/paper/2506.14913"},"observation_digest":"sha256:b45bf99c6c059c18b714c792db691691557c789bcaa794ffa82c83f1fd9cb89c","observation_id":"ee29afb1-f6d5-4e8c-a1cc-88f9d6a9fd20","resolution":{"observed_at":"2026-08-07T00:16:19.795049Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2409.19798","last_updated":"2025-03-07T14:20:23Z","snapshot_observed_at":"2026-07-06T19:24:12.811792Z","submitted_at":"2024-09-29T21:49:32Z","title":"Membership Inference Attacks Cannot Prove that a Model Was Trained On Your Data","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.19798","snapshot_observed_at":"2026-08-06T15:15:21.422233Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.16414","last_updated":"2025-07-22T10:05:30Z","snapshot_observed_at":"2026-08-06T15:07:39.822622Z","submitted_at":"2025-07-22T10:05:30Z","title":"Identifying Pre-training Data in LLMs: A Neuron Activation-Based Detection Framework","version":1},"reference_index":57,"source":"arxiv_source","source_observed_at":"2026-08-06T15:15:21.422233Z"},"links":{"cited_paper":"/paper/2409.19798","citing_paper":"/paper/2507.16414"},"observation_digest":"sha256:92049cf719fed52b5cb04abfd72e412292e63f012662c4560a66606767d367e6","observation_id":"21032e1b-e41d-4d7a-bfb3-785fb5e58b9e","resolution":{"observed_at":"2026-08-06T15:15:21.422233Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2409.19798","last_updated":"2025-03-07T14:20:23Z","snapshot_observed_at":"2026-07-06T19:24:12.811792Z","submitted_at":"2024-09-29T21:49:32Z","title":"Membership Inference Attacks Cannot Prove that a Model Was Trained On Your Data","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.19798","snapshot_observed_at":"2026-08-03T05:23:05.159658Z","title":"Zhang, J., Das, D., Kamath, G., and Tram`er, F","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2602.02819","last_updated":"2026-06-05T09:47:39Z","snapshot_observed_at":"2026-08-03T05:23:03.335622Z","submitted_at":"2026-02-02T21:17:28Z","title":"Causal Evaluation of Membership Inference Attacks","version":5},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-03T05:23:05.159658Z"},"links":{"cited_paper":"/paper/2409.19798","citing_paper":"/paper/2602.02819"},"observation_digest":"sha256:d8bd2a713dce908f5b37f395e3c8119495eb246254bfbdf501a21b0d1e330f9b","observation_id":"9e649d56-6673-4c36-ad51-d58c94c904bc","resolution":{"observed_at":"2026-08-03T05:23:05.159658Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2409.19798","last_updated":"2025-03-07T14:20:23Z","snapshot_observed_at":"2026-07-06T19:24:12.811792Z","submitted_at":"2024-09-29T21:49:32Z","title":"Membership Inference Attacks Cannot Prove that a Model Was Trained On Your Data","version":2},"cited_work":{"arxiv_id":"2409.19798","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2409.19798","snapshot_observed_at":"2026-07-04T16:49:57.323922Z","title":"Membership inference attacks cannot prove that a model was trained on your data.arXiv preprint arXiv:2409.19798, 2024a","venue":null,"work_id":"7fd6d93a-735f-4840-8f63-82c3ad185c68","year":null},"citing_paper":{"arxiv_id":"2606.24408","last_updated":"2026-06-23T10:45:11Z","snapshot_observed_at":"2026-07-06T23:58:58.854077Z","submitted_at":"2026-06-23T10:45:11Z","title":"Natural Identifiers for Privacy and Data Audits in Large Language Models","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-06-26T00:16:34.961376Z"},"links":{"cited_paper":"/paper/2409.19798","citing_paper":"/paper/2606.24408"},"observation_digest":"sha256:269c1ef9d6f44791cd9f8785b979b7e43042df678064f9777bce1d4b97c49fb3","observation_id":"4a897c75-5e11-4b8a-b097-6872d97a307e","resolution":{"observed_at":"2026-07-04T16:49:57.325646Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2409.19798/citation-record","integrity":"/paper/2409.19798/integrity","json":"/paper/2409.19798/citation-record.json","paper":"/paper/2409.19798"},"outbound":[],"paper":{"arxiv_id":"2409.19798","last_updated":"2025-03-07T14:20:23Z","latest_version":2,"primary_category":"cs.LG","snapshot_observed_at":"2026-07-06T19:24:12.811792Z","submitted_at":"2024-09-29T21:49:32Z","title":"Membership Inference Attacks Cannot Prove that a Model Was Trained On Your Data"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 7 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 9 inbound Pith citation observations for arXiv:2409.19798."}