{"as_of":"2026-08-12T10:32:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:223d712932e91601565e103618e3d5e90b47481a7a5cc7538e8583a27b533206","coverage":[{"denominator":87,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":87,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-12T10:19:26.646902Z","state":"measured"},{"denominator":90,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":90,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-12T06:34:41.77262+00:00","state":"measured"},{"denominator":3,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":3,"source":"paper_references, paper_reference_links","source_observed_at":"2026-07-12T17:18:42.590627Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-06-30T16:04:52.569310Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"cited_work":{"arxiv_id":"2411.19335","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2411.19335","snapshot_observed_at":"2026-06-30T16:04:52.569310Z","title":"Peft-as-an-attack! jailbreaking language models during federated parameter-efficient fine-tuning","venue":null,"work_id":"a0cf3757-eadf-4bcb-ab25-29d9c5d2bfe9","year":2024},"citing_paper":{"arxiv_id":"2605.07961","last_updated":"2026-07-05T18:31:05Z","snapshot_observed_at":"2026-08-11T12:34:55.678492Z","submitted_at":"2026-05-08T16:24:54Z","title":"Graph Representation Learning Augmented Model Manipulation on Federated Fine-Tuning of LLMs","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-05-11T02:42:04.741382Z"},"links":{"cited_paper":"/paper/2411.19335","citing_paper":"/paper/2605.07961"},"observation_digest":"sha256:052fd5d9eeca0409301dff76cf0d1cc6d2e8ef3fb66c2dc7c3c22fdd8890eb56","observation_id":"4c7d7655-9ee7-4eb3-8640-93ff727330ff","resolution":{"observed_at":"2026-05-11T02:45:58.687527Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.19335","snapshot_observed_at":"2026-07-12T17:18:42.590627Z","title":"Peft-as-an-attack! jailbreaking language models during federated parameter-efficient fine-tuning,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2605.07961","last_updated":"2026-07-05T18:31:05Z","snapshot_observed_at":"2026-08-11T12:34:55.678492Z","submitted_at":"2026-05-08T16:24:54Z","title":"Graph Representation Learning Augmented Model Manipulation on Federated Fine-Tuning of LLMs","version":2},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-07-12T17:18:42.590627Z"},"links":{"cited_paper":"/paper/2411.19335","citing_paper":"/paper/2605.07961"},"observation_digest":"sha256:6d2ca3af075be8e8e4433798715e611259fe0f7ac4d4e37cdfb36d6cfecf71a7","observation_id":"769b2381-0a49-4c1a-a2e5-4cf20c741cbb","resolution":{"observed_at":"2026-07-12T17:18:42.590627Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"cited_work":{"arxiv_id":"2411.19335","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2411.19335","snapshot_observed_at":"2026-06-30T16:04:52.569310Z","title":"Peft-as-an-attack! jailbreaking language models during federated parameter-efficient fine-tuning","venue":null,"work_id":"a0cf3757-eadf-4bcb-ab25-29d9c5d2bfe9","year":2024},"citing_paper":{"arxiv_id":"2605.24154","last_updated":"2026-05-22T19:22:17Z","snapshot_observed_at":"2026-07-06T23:34:13.859813Z","submitted_at":"2026-05-22T19:22:17Z","title":"Palette: A Modular, Controllable, and Efficient Framework for On-demand Authorized Safety Alignment Relaxation in LLMs","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-06-30T16:03:12.728352Z"},"links":{"cited_paper":"/paper/2411.19335","citing_paper":"/paper/2605.24154"},"observation_digest":"sha256:6fbb7a86c23832be48a36b3c49d683b8cd8d44282c6449c6f0cd452ffabc43f1","observation_id":"87dafe9c-12ce-45bc-b04c-dfcf70cbce8e","resolution":{"observed_at":"2026-06-30T16:04:52.570823Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2411.19335/citation-record","integrity":"/paper/2411.19335/integrity","json":"/paper/2411.19335/citation-record.json","paper":"/paper/2411.19335"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:19:26.199337Z","title":"BERT: Pre-training of deep bidirectional transformers for language understanding,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.199337Z"},"links":{"citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:157a28f6a2e6fcb63efa03a0d267d3523d18fc7d240d41ecee5869b7d662be8b","observation_id":"63003b3d-2ba7-45a1-954a-e368f6134de5","resolution":{"observed_at":"2026-08-12T10:19:26.199337Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:19:26.205970Z","title":"Language models are few-shot learners,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.205970Z"},"links":{"citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:4b69402fe60eb1fd2f18e5c651c486871c3deafd61130b131bf22c1c4f073483","observation_id":"ff02d70e-b0da-4443-a7c1-5f65213ec4f2","resolution":{"observed_at":"2026-08-12T10:19:26.205970Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:19:26.211133Z","title":"Chatgpt,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.211133Z"},"links":{"citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:89d43538518f4627a0060755a5377c2974b5233eb8dd1c8b8bdf85af29c9e54d","observation_id":"5bf1a6fc-d8c4-4126-8a12-ca82ff57e098","resolution":{"observed_at":"2026-08-12T10:19:26.211133Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.09288","last_updated":"2023-07-19T17:08:59Z","snapshot_observed_at":"2026-08-07T12:56:43.323460Z","submitted_at":"2023-07-18T14:31:57Z","title":"Llama 2: Open Foundation and Fine-Tuned Chat Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.09288","snapshot_observed_at":"2026-08-12T10:19:26.236344Z","title":"Llama 2: Open foundation and fine-tuned chat models,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.236344Z"},"links":{"cited_paper":"/paper/2307.09288","citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:81b1692c97e9c80a0434ec9fe3ea14b74cdf62a4216ddc8f74c58af28f76a4da","observation_id":"89119f5b-dd39-4c1b-b346-536cc38da08d","resolution":{"observed_at":"2026-08-12T10:19:26.236344Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:19:26.247816Z","title":"Llama 3.2: Revolutionizing edge ai and vision with open, customizable models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.247816Z"},"links":{"citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:c812377e8c3405e236dd3de7748b2a2556540ea98445e43b4ad2057888f2db70","observation_id":"b7dc88a9-8684-4d25-af5d-9e35c02c2bc7","resolution":{"observed_at":"2026-08-12T10:19:26.247816Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:19:26.252920Z","title":"Qwen technical report,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.252920Z"},"links":{"citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:0f1d735275d0fd34df60ffa79f4e4ffff6d314cdb91a641ee8d832ebab1cf9c1","observation_id":"b470ad9c-3c28-4e10-8fa1-e843645a91ba","resolution":{"observed_at":"2026-08-12T10:19:26.252920Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.09288","last_updated":"2023-07-19T17:08:59Z","snapshot_observed_at":"2026-08-07T12:56:43.323460Z","submitted_at":"2023-07-18T14:31:57Z","title":"Llama 2: Open Foundation and Fine-Tuned Chat Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.09288","snapshot_observed_at":"2026-08-12T10:19:26.242139Z","title":"Available: https://doi.org/10.48550/arXiv.2307.09288","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.242139Z"},"links":{"cited_paper":"/paper/2307.09288","citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:b2138dee314e5e52a1da8a259cad0cf95364cfd806639777c9da432f4cda9434","observation_id":"e0079f3c-bb3c-4a0c-80d4-756a829c9227","resolution":{"observed_at":"2026-08-12T10:19:26.242139Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:19:26.263851Z","title":"Qwen2.5: A party of foundation models,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.263851Z"},"links":{"citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:d161f8c3b239a5495b9e8673ffc6cf17d6f44954b78ce8860eddf58b43407b3d","observation_id":"d131a7bd-ed03-451d-90ac-78a29255d2ed","resolution":{"observed_at":"2026-08-12T10:19:26.263851Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.03038","last_updated":"2025-04-08T18:13:57Z","snapshot_observed_at":"2026-08-10T01:39:25.256196Z","submitted_at":"2024-07-03T12:02:24Z","title":"Towards Federated RLHF with Aggregated Client Preference for LLMs","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.03038","snapshot_observed_at":"2026-08-12T10:19:26.273132Z","title":"On the client preference of llm fine-tuning in federated learning,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.273132Z"},"links":{"cited_paper":"/paper/2407.03038","citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:5947c600a2aa7465c531a8a8d6465269d7c31757d96b808a133beabe8ab24cd2","observation_id":"d9108ae4-9fec-4143-815d-6495d1fe664a","resolution":{"observed_at":"2026-08-12T10:19:26.273132Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.10671","last_updated":"2024-09-10T13:25:53Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-07-15T12:35:42Z","title":"Qwen2 Technical Report","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.10671","snapshot_observed_at":"2026-08-12T10:19:26.257476Z","title":"Qwen2 technical report,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.257476Z"},"links":{"cited_paper":"/paper/2407.10671","citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:a2547984e19765a8b37a3e95a9c9165c9785ae0fc5a90be592dc1214b7e4e288","observation_id":"ea99a864-f2f7-4eb9-81db-d32bff8d3f14","resolution":{"observed_at":"2026-08-12T10:19:26.257476Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:19:58.113174Z","title":"The power of scale for parameter-efficient prompt tuning,","venue":null,"work_id":"f6ec4541-1604-459e-bf9c-33b084539b9c","year":2021},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.283877Z"},"links":{"citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:39ac0b6f66a6449c4ff1f8300680b9d0545b8563d328d13603aaa3d5ee51c574","observation_id":"76350828-42fd-4480-a7e8-91306e4c2758","resolution":{"observed_at":"2026-08-12T10:19:58.119233Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:19:26.268571Z","title":"Available: https://qwenlm.github.io/blog/qwen2.5/","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.268571Z"},"links":{"citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:7400664262dd56ec0b33eadee51a1883ced90a63aa4e17d9725504a510dc0ebc","observation_id":"32493a48-2323-4139-b60e-3a270ea5abf6","resolution":{"observed_at":"2026-08-12T10:19:26.268571Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.18865","last_updated":"2024-02-29T05:27:45Z","snapshot_observed_at":"2026-08-04T00:58:13.854277Z","submitted_at":"2024-02-29T05:27:45Z","title":"Analyzing and Reducing Catastrophic Forgetting in Parameter Efficient Tuning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.18865","snapshot_observed_at":"2026-08-12T10:19:26.295392Z","title":"Analyzing and reducing catastrophic forgetting in parameter efficient tuning,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.295392Z"},"links":{"cited_paper":"/paper/2402.18865","citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:a3b97c2abf2de5189a9d71fab63923d9d86f05ea12aaf59f481fa20b614fe3a0","observation_id":"7b52eb01-3dd2-4acc-b5c6-ecb2dbc2b3c0","resolution":{"observed_at":"2026-08-12T10:19:26.295392Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2303.18223","last_updated":"2026-03-18T05:34:39Z","snapshot_observed_at":"2026-08-06T23:27:24.356320Z","submitted_at":"2023-03-31T17:28:46Z","title":"A Survey of Large Language Models","version":19},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.18223","snapshot_observed_at":"2026-08-12T10:19:26.278213Z","title":"A survey of large language models,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.278213Z"},"links":{"cited_paper":"/paper/2303.18223","citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:6bb8483a6051c0a37c5b217e53756b3efe4c97dee614e1fa3de6f550c8927bb1","observation_id":"7bf80c82-ea95-4d6a-a517-029035909af1","resolution":{"observed_at":"2026-08-12T10:19:26.278213Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:19:58.067339Z","title":"Navigating text-to-image customization: From lyCORIS fine-tuning to model evaluation,","venue":null,"work_id":"740c25c7-043a-42c2-91f2-e81b37b4e544","year":2024},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.305335Z"},"links":{"citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:7553058e97b42a0b4528728baaf93b21ec0eb37897244aa260424e00280158e0","observation_id":"6cd85176-ba22-4a22-bde8-3d55f7147b67","resolution":{"observed_at":"2026-08-12T10:19:58.074565Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:19:26.289317Z","title":"LoRA: Low-rank adaptation of large language models,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.289317Z"},"links":{"citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:4a6aebb28e58eeb2670847398eb2faa21f618e713135fa3f269bc677f0527642","observation_id":"7b7a91a4-6ad2-41d7-8b72-44043dbe1bcd","resolution":{"observed_at":"2026-08-12T10:19:26.289317Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:19:58.050469Z","title":"Regulation (eu) 2016/679 of the european parliament and of the council,","venue":null,"work_id":"62b5ecd3-2df9-4bb8-8fed-cf79b87fb1a5","year":2016},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.315538Z"},"links":{"citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:6a15420707ac2c9791ee02ae60f41229f8d8e862dc800b9418cb58a5c2fcd4d0","observation_id":"60a16bcf-6825-4352-ace3-5820e420f6cd","resolution":{"observed_at":"2026-08-12T10:19:58.056363Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:19:58.086082Z","title":"VeRA: Vector- based random matrix adaptation,","venue":null,"work_id":"ff5245fb-efae-4a04-a039-25f5089c046b","year":2024},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.300359Z"},"links":{"citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:6258e305919fd7a17de0ac672a6c44234a37fe3622b4f0373c19dd14b7e287df","observation_id":"53c88c2f-4361-4fe4-a862-14a7ac33a9f0","resolution":{"observed_at":"2026-08-12T10:19:58.092350Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:19:26.326056Z","title":"Communication-Efficient Learning of Deep Networks from Decentralized Data,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.326056Z"},"links":{"citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:0dca14a6bde66aab98f08d535adea963ba52ca6a05ecaeba62abdde46e8f1ff4","observation_id":"76534c90-1e2d-4806-b764-c2a1d79a2b5c","resolution":{"observed_at":"2026-08-12T10:19:26.326056Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:19:26.311018Z","title":"Lessons from archives: Strategies for collecting sociocultural data in machine learning,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.311018Z"},"links":{"citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:69d8504083b748e1038ff5b0525543771424c0861a27d823c2924ab227c5dd37","observation_id":"51b46a03-d1e1-4a4c-933c-345229262a4a","resolution":{"observed_at":"2026-08-12T10:19:26.311018Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:19:26.336785Z","title":"Synergizing foundation models and federated learning: A survey,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.336785Z"},"links":{"citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:5dfe8b7abfe8b435dc014d6ff52e329937bb4dea5bc48325b2ea1f3f7f725cb5","observation_id":"9bd37bb6-ea66-466f-82d3-fbb4c0167937","resolution":{"observed_at":"2026-08-12T10:19:26.336785Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:19:58.033735Z","title":"California consumer privacy act (ccpa),","venue":null,"work_id":"5c7839b0-2ae8-454a-a7b1-7e3acfc939d1","year":2023},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.321432Z"},"links":{"citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:b0b30b961d946e9b7126f5d451d6979c66eb47ea4bd8e1b477c75f9e48b6846b","observation_id":"10378a8f-2f39-4a05-95b5-3cbd83411abe","resolution":{"observed_at":"2026-08-12T10:19:58.039743Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:19:57.973440Z","title":"Training language models to follow instructions with human feedback,","venue":null,"work_id":"ce79a62f-daa1-44d6-8947-e8ae72a78a0e","year":2022},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.351843Z"},"links":{"citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:1faadccb011a534d6a2c3893e03a86e6b2c722a3ab1147a4347ceb10b8056546","observation_id":"458164d4-90d6-494e-b689-c1b06c0b695d","resolution":{"observed_at":"2026-08-12T10:19:57.979076Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2401.04472","last_updated":"2024-09-05T20:11:40Z","snapshot_observed_at":"2026-07-06T17:13:13.021399Z","submitted_at":"2024-01-09T10:22:23Z","title":"A Survey on Efficient Federated Learning Methods for Foundation Model Training","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.04472","snapshot_observed_at":"2026-08-12T10:19:26.330703Z","title":"A survey on efficient federated learning methods for foundation model training,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.330703Z"},"links":{"cited_paper":"/paper/2401.04472","citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:12c37dd06e3c0ffa5567a3c232d8e777896c8a008b0008f7d9bf5f9edbcbd51b","observation_id":"9bd0a40a-1630-4a48-bb7e-94f05ffd3fb4","resolution":{"observed_at":"2026-08-12T10:19:26.330703Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:19:57.956252Z","title":"RLAIF vs. RLHF: Scaling reinforcement learning from human feedback with AI feedback,","venue":null,"work_id":"9c2a1695-4027-4166-9e15-6ed6cf6ed0bb","year":2024},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.362524Z"},"links":{"citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:921d1f03baa63bebd5830df26cb18dd0a3009520252c648341c2f49af5fe9a9a","observation_id":"af288f24-ebf4-4773-be80-7b0a7c14d056","resolution":{"observed_at":"2026-08-12T10:19:57.962307Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:19:58.006502Z","title":"A comprehensive study of jailbreak attack versus defense for large language models,","venue":null,"work_id":"1bf0ff19-20fc-4ae3-8884-9675d6f3cb54","year":2024},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.341980Z"},"links":{"citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:118641c51e1e299be4bdf4544d5670aa1d8ce9504e385ce4ab1595ab59df7fff","observation_id":"09fe4b46-4f59-436a-8fb3-2419bf16ba82","resolution":{"observed_at":"2026-08-12T10:19:58.012585Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2408.09600","last_updated":"2025-09-05T04:54:29Z","snapshot_observed_at":"2026-08-10T06:33:53.106045Z","submitted_at":"2024-08-18T21:45:03Z","title":"Antidote: Post-fine-tuning Safety Alignment for Large Language Models against Harmful Fine-tuning","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.09600","snapshot_observed_at":"2026-08-12T10:19:26.371576Z","title":"Antidote: Post-fine-tuning safety alignment for large language models against harmful fine-tuning,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.371576Z"},"links":{"cited_paper":"/paper/2408.09600","citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:37bf5cd4c31bffd94a657b6e7d9e5439d9e8df6e8aaf88b186e31905874bad87","observation_id":"ee7f189d-ccef-4b59-bd2a-37a82be38a5f","resolution":{"observed_at":"2026-08-12T10:19:26.371576Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:19:57.922478Z","title":"An experimental study of byzantine- robust aggregation schemes in federated learning,","venue":null,"work_id":"48998d3e-077e-458c-9052-9ae16ac8c399","year":2024},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.376743Z"},"links":{"citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:b91f1d0905e310b92100aad148f64ea1052cdb28ba58801ce6532a8f797c08c0","observation_id":"de66a4f0-46f3-48b4-b6a0-b0f8874e097f","resolution":{"observed_at":"2026-08-12T10:19:57.928345Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2212.08073","last_updated":"2022-12-15T06:19:23Z","snapshot_observed_at":"2026-08-02T04:53:58.766070Z","submitted_at":"2022-12-15T06:19:23Z","title":"Constitutional AI: Harmlessness from AI Feedback","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2212.08073","snapshot_observed_at":"2026-08-12T10:19:26.357347Z","title":"Constitutional ai: Harmlessness from ai feedback,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.357347Z"},"links":{"cited_paper":"/paper/2212.08073","citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:5597441025ce3a30cb238c9f8d9df4897ee1c61970528170243776ccd6c83014","observation_id":"78ecb7c1-09fd-449d-bb2b-a4f668406a42","resolution":{"observed_at":"2026-08-12T10:19:26.357347Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:19:57.896434Z","title":"Few-shot parameter-efficient fine-tuning is better and cheaper than in-context learning,","venue":null,"work_id":"bfc50587-7683-4650-8025-d9176d635841","year":2022},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.385950Z"},"links":{"citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:e6ee9e48250db8e4aafecefcdc915ca8d88e808e3cf3853d599f424642c28982","observation_id":"095d43bb-3634-492b-9932-4efd5f6997c0","resolution":{"observed_at":"2026-08-12T10:19:57.902202Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:19:57.939534Z","title":"Fine-tuning aligned language models compromises safety, even when users do not intend to!","venue":null,"work_id":"827b5cc9-b1e8-4917-bd73-cf85279c6af5","year":2024},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.367325Z"},"links":{"citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:35590a1d60be87cf2e7d0f245bcc5c618b25dcff2a17d2575802311fae96ede6","observation_id":"43d88533-49bb-4340-b020-185f34b8b3fa","resolution":{"observed_at":"2026-08-12T10:19:57.945414Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"document/1056217","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:19:42.044851Z","title":"Blades: A unified benchmark suite for byzantine attacks and defenses in federated learning,","venue":null,"work_id":"83b18b25-71ab-4da3-86e6-4439e6f48018","year":2024},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.396248Z"},"links":{"citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:33690a18075338ec379fd2a594e4d832f5221dbb6ad2b1ee04f8605b4da5adbc","observation_id":"d99d07a2-5d8c-43ad-a150-3d69828f77ea","resolution":{"observed_at":"2026-08-12T10:19:42.053679Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1907.11692","last_updated":"2019-07-26T17:48:29Z","snapshot_observed_at":"2026-07-31T22:31:37.910868Z","submitted_at":"2019-07-26T17:48:29Z","title":"RoBERTa: A Robustly Optimized BERT Pretraining Approach","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1907.11692","snapshot_observed_at":"2026-08-12T10:19:26.400836Z","title":"Roberta: A robustly optimized bert pretraining approach,","venue":null,"work_id":null,"year":1907},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.400836Z"},"links":{"cited_paper":"/paper/1907.11692","citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:e4efd9b3d1dcd9bad15311d4d537b05c960f16a4978002f764a033965813c65f","observation_id":"39ca0ce2-7be0-4154-9cb6-37f54b2187b8","resolution":{"observed_at":"2026-08-12T10:19:26.400836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:19:26.381536Z","title":"Manipulating the byzantine: Opti- mizing model poisoning attacks and defenses for federated learning,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.381536Z"},"links":{"citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:717986c23bf6ae9b12dfd00ce21bae9d5eee78d101ffb3b1a0b90b0809882177","observation_id":"a4a1b5b9-b5c1-46b5-9c71-527d684d5a7e","resolution":{"observed_at":"2026-08-12T10:19:26.381536Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1607.06450","last_updated":"2016-07-21T19:57:52Z","snapshot_observed_at":"2026-08-12T08:59:05.030983Z","submitted_at":"2016-07-21T19:57:52Z","title":"Layer Normalization","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1607.06450","snapshot_observed_at":"2026-08-12T10:19:26.411121Z","title":"Layer normalization,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.411121Z"},"links":{"cited_paper":"/paper/1607.06450","citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:b867b9cce1a28fe216e83a71a40192ffae6cadb085dcb3d0bd5da8ead00f4dac","observation_id":"f07ec049-699e-49cc-b9d5-1ce8f17cb954","resolution":{"observed_at":"2026-08-12T10:19:26.411121Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:19:57.879556Z","title":"Tuning layernorm in attention: Towards efficient multi-modal LLM finetuning,","venue":null,"work_id":"313a176c-4bbc-4eff-9ae3-af900706e189","year":2024},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.391117Z"},"links":{"citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:7b22a33452483ce361650004e897e91f813ae8558348b6675b76ca139cfa0121","observation_id":"8ea6c67d-c282-4542-ab39-abc4360c806b","resolution":{"observed_at":"2026-08-12T10:19:57.885151Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:19:26.420973Z","title":"Stanford alpaca: An instruction-following llama model,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.420973Z"},"links":{"citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:c397511435d5eaecdb7eeef19b161047bfbe1203b3a5af2369044420208860cd","observation_id":"d536f7cb-38e8-482d-a777-0a9d9685321a","resolution":{"observed_at":"2026-08-12T10:19:26.420973Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.10630","last_updated":"2024-06-15T13:24:22Z","snapshot_observed_at":"2026-08-11T14:57:56.700538Z","submitted_at":"2024-06-15T13:24:22Z","title":"Emerging Safety Attack and Defense in Federated Instruction Tuning of Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.10630","snapshot_observed_at":"2026-08-12T10:19:26.426505Z","title":"Emerging safety attack and defense in federated instruction tuning of large language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.426505Z"},"links":{"cited_paper":"/paper/2406.10630","citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:e73c71cfe7ee5497f5d087e8344a450a456bc59922a6db761846c7b5d88839fe","observation_id":"8942d03f-de69-468c-8362-07b22d232d05","resolution":{"observed_at":"2026-08-12T10:19:26.426505Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:19:57.863566Z","title":"Attention is all you need,","venue":null,"work_id":"fc7eddc4-7dd6-4390-a91e-f84da5e23e4c","year":2017},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.406433Z"},"links":{"citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:098ac176e7991b1d8b65bf466644bdbde18330855c45b6743d9755b2c1075b46","observation_id":"c723dbe3-8ffa-4d43-bf3b-6dfeab5247bd","resolution":{"observed_at":"2026-08-12T10:19:57.868846Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:19:57.820322Z","title":"Local model poisoning attacks to byzantine-robust federated learning,","venue":null,"work_id":"4a4399cc-800c-401e-8c2d-72f5674ba9dc","year":2020},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.436104Z"},"links":{"citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:7f7b5e8b3d277970e0ad96764bb102b21e93edaafcb485a8d0e28d94165372c4","observation_id":"aa4a39a2-ccde-4601-a2bc-ee6298283802","resolution":{"observed_at":"2026-08-12T10:19:57.825987Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:19:57.847132Z","title":"Root mean square layer normalization,","venue":null,"work_id":"33333e2e-6895-455e-b2c5-8c1991db6e39","year":2019},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.416521Z"},"links":{"citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:8675ca9b8d764ddd082ddd7bf502a07e77e1f952eebee134442f9c5f6b53300a","observation_id":"a2670af2-17a5-400b-a539-bef74a1760b5","resolution":{"observed_at":"2026-08-12T10:19:57.852541Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:19:57.785976Z","title":"Vaccine: Perturbation-aware alignment for large language models against harmful fine-tuning attack,","venue":null,"work_id":"d657b5b4-98b2-4942-8ce3-c5436fde3ffb","year":null},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.445812Z"},"links":{"citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:48614967471ae04b646a432e174bb1f5ad1c51a10502de9ced6b5db0d1984be2","observation_id":"0a5740f4-aaf2-4184-8186-0054bf7a253b","resolution":{"observed_at":"2026-08-12T10:19:57.791659Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.14219","last_updated":"2024-08-30T21:17:17Z","snapshot_observed_at":"2026-08-10T14:07:02.234322Z","submitted_at":"2024-04-22T14:32:33Z","title":"Phi-3 Technical Report: A Highly Capable Language Model Locally on Your Phone","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.14219","snapshot_observed_at":"2026-08-12T10:19:26.456034Z","title":"Phi-3 technical report: A highly capable language model locally on your phone,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.456034Z"},"links":{"cited_paper":"/paper/2404.14219","citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:f331b812580e0d1b22cdf7cd78423c6130589bbd5b8a74ff0a3aadd69148e00c","observation_id":"73833070-85f8-47e2-9a0f-71ae74107377","resolution":{"observed_at":"2026-08-12T10:19:26.456034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1912.13445","last_updated":"2022-01-17T05:25:59Z","snapshot_observed_at":"2026-07-06T08:47:53.346676Z","submitted_at":"2019-12-31T17:24:41Z","title":"Robust Aggregation for Federated Learning","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1912.13445","snapshot_observed_at":"2026-08-12T10:19:26.431285Z","title":"Robust aggregation for federated learning,","venue":null,"work_id":null,"year":1912},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.431285Z"},"links":{"cited_paper":"/paper/1912.13445","citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:39f9f47d78a262fcc674b7a677eeec3a21f78e4c18b51537da58a57429170f47","observation_id":"4cffbf6d-c121-4d53-94d5-90079ae2d180","resolution":{"observed_at":"2026-08-12T10:19:26.431285Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:19:57.743217Z","title":"Metamath: Bootstrap your own mathematical questions for large language models,","venue":null,"work_id":"0368809e-8c0a-4430-92e6-11e4706fa48f","year":2024},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.465707Z"},"links":{"citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:2ebea8a8304908e501172527eb659f770236b16d8c6386b52559a211c129b3a3","observation_id":"fb704a9c-7d79-45d3-9ee8-7e7d0e511cb9","resolution":{"observed_at":"2026-08-12T10:19:57.748599Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:19:57.803073Z","title":"Byzantine-robust aggregation in federated learning empowered industrial iot,","venue":null,"work_id":"950a51f1-e1bf-45a4-870f-187eba314d3f","year":2023},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.440617Z"},"links":{"citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:fb506cde9350a98070192ed2619ee2711d697b3442ddcb4db7209080679b026f","observation_id":"22032d4b-9af2-4c2b-bba1-7e09a7bdb7ac","resolution":{"observed_at":"2026-08-12T10:19:57.809117Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:19:57.717251Z","title":"Measuring mathematical problem solving with the MATH dataset,","venue":null,"work_id":"a4f24d86-752c-45ab-95f5-ca20519c7f77","year":2021},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.475015Z"},"links":{"citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:1e2910d6942ef3789df7e7b589b563675ec3c5507f9f3d84c933fdc01bc79234","observation_id":"590d86d2-ddc0-431b-847b-868156950c7a","resolution":{"observed_at":"2026-08-12T10:19:57.722389Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:19:57.769221Z","title":"Available: https://openreview.net/forum?id=lpXDZKiAnt","venue":null,"work_id":"ea5f2c80-4f63-463d-ab1e-559d9c862bed","year":null},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.451221Z"},"links":{"citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:a6280693f1d537b382b0dc825f2ec57def0612f2404e89b10d5148f43fe58f7d","observation_id":"b39d6e43-8c1f-47fc-ae9d-31ff9964e1e3","resolution":{"observed_at":"2026-08-12T10:19:57.774808Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:19:57.665174Z","title":"Beavertails: Towards improved safety alignment of llm via a human-preference dataset,","venue":null,"work_id":"3eb3262e-8c5a-4169-9ab3-e11cfdef39a8","year":2023},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.490359Z"},"links":{"citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:96a7020948ec429506be16e1f14f76161fc31133cb3c9acb1223e72a36efc483","observation_id":"13f21d3a-a7e2-485f-b54e-d9d36bd41ec2","resolution":{"observed_at":"2026-08-12T10:19:57.670765Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:19:26.461112Z","title":"Parameter-efficient fine-tuning of large-scale pre-trained language models,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.461112Z"},"links":{"citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:975482d557f74a28efc0f7de17f4f6987ef8e9b797ae488dd145e5ce0a30b37f","observation_id":"39c67f86-7407-4ded-b73f-2ad03d06bd17","resolution":{"observed_at":"2026-08-12T10:19:26.461112Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:19:57.632433Z","title":"Distributed statistical machine learning in adversarial settings: Byzantine gradient descent,","venue":null,"work_id":"3246fa44-bce4-40fe-acb6-30d05865e0d8","year":2017},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.500566Z"},"links":{"citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:f68753a3a59a6aa9b05a7a4581619bebe832d2e81b6e7350b4ee2ad991d88ee8","observation_id":"d6f704f6-7e1e-4743-8b5a-ec72fc1b6592","resolution":{"observed_at":"2026-08-12T10:19:57.638230Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:19:26.470437Z","title":"Training verifiers to solve math word problems,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.470437Z"},"links":{"citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:c32124b6104cee1067d885505337eaf04fac84770d03b9db91e347772f201db6","observation_id":"b464fc27-7ce4-4b60-aa06-d41e935cf487","resolution":{"observed_at":"2026-08-12T10:19:26.470437Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:19:26.515997Z","title":"Decoupled weight decay regularization,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.515997Z"},"links":{"citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:ce6c08eff79e9a5da9c69d3bf4b83f8829192d18c1e85187b448e14e155f599e","observation_id":"6c3ce575-b0ba-4946-9a18-0b0370e8d42b","resolution":{"observed_at":"2026-08-12T10:19:26.515997Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:19:57.700590Z","title":"What disease does this patient have? a large-scale open domain question answering dataset from medical exams,","venue":null,"work_id":"36fb1d06-347c-41d4-9b41-6355032fd0ff","year":null},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.480437Z"},"links":{"citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:5015555f14aaa54ee115c653ee53241b63e6c08ec2063d2847eb13fd2b048a76","observation_id":"21e1a157-6aa7-49fd-98e8-bd81bf1187a4","resolution":{"observed_at":"2026-08-12T10:19:57.706582Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:19:26.526133Z","title":"Universal and transferable adversarial attacks on aligned language models,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.526133Z"},"links":{"citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:7757a6a3300dd42895ad0fd209103fec8faa1c2fc887e5688fbe59af73d7f22b","observation_id":"31252e6a-4a39-4a24-be10-4f2407ccb573","resolution":{"observed_at":"2026-08-12T10:19:26.526133Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:19:57.553762Z","title":"Jailbreakbench: An open robustness bench- mark for jailbreaking large language models,","venue":null,"work_id":"c0e8417c-49ab-413b-8ca7-8d30b8fd58a8","year":2024},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.530784Z"},"links":{"citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:fd3405243b4d8084b69eb372c53bdf1566ee7b3441076962dda0f58a3a0cef3d","observation_id":"6bdfe3f8-b790-4449-b6c3-0070a9abb236","resolution":{"observed_at":"2026-08-12T10:19:57.559536Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:19:57.649103Z","title":"Byzantine-robust distributed learning: Towards optimal statistical rates,","venue":null,"work_id":"f16f7b37-ecff-4e99-a0e6-e20c1bd4486d","year":2018},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.495856Z"},"links":{"citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:016e060537e57c92ad7a50b14f036cc074062f4010dba03691de5c0dbd5600a7","observation_id":"135fa57e-20d9-4ffd-af1f-f4c2417b1d28","resolution":{"observed_at":"2026-08-12T10:19:57.654911Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:19:57.521333Z","title":"Mitigating the alignment tax of RLHF,","venue":null,"work_id":"43ab937d-3032-4fe3-9242-b3f8204cd986","year":2024},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.540904Z"},"links":{"citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:350f43164331c8f4d8d05b615024a7095640205055b84d2df4cf0cb67611510a","observation_id":"85efd2ed-9442-4b70-9233-a288a5aec3fc","resolution":{"observed_at":"2026-08-12T10:19:57.526731Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:19:57.616605Z","title":"Constitutional ai recipe,","venue":null,"work_id":"63182fa7-fe08-40fd-9efc-e1c292023698","year":null},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.505864Z"},"links":{"citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:8f4bf986742a75afcb100445ce33c1423a1fd89d973eeff9bcb6ea3e4c708555","observation_id":"1e1829d9-8d20-4bf8-b692-5cdd558ce23f","resolution":{"observed_at":"2026-08-12T10:19:57.621985Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:19:57.598199Z","title":"Available: https://huggingface.co/blog/constitutional_ai","venue":null,"work_id":"4ebac5d2-1158-4d39-b6f5-bb43dfd29887","year":null},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.511448Z"},"links":{"citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:224235f7249b8455e5c17edd691c0da6951d41ec88845abadcc19b18a44efc0b","observation_id":"4069067f-598c-42f9-9834-af6999bcab98","resolution":{"observed_at":"2026-08-12T10:19:57.605528Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.11536","last_updated":"2024-04-28T11:11:16Z","snapshot_observed_at":"2026-08-10T12:11:32.340075Z","submitted_at":"2024-04-17T16:30:06Z","title":"FedPFT: Federated Proxy Fine-Tuning of Foundation Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.11536","snapshot_observed_at":"2026-08-12T10:19:26.555632Z","title":"Federated adaptation for foundation model-based recommendations,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.555632Z"},"links":{"cited_paper":"/paper/2404.11536","citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:ce6a3f0e59b75ee117f76753bd00862216f527d629f1e47e2453321bffe1884c","observation_id":"97718d1c-228e-4859-82b6-ebd20672d34e","resolution":{"observed_at":"2026-08-12T10:19:26.555632Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:19:26.521428Z","title":"Efficient memory management for large language model serving with pagedattention,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.521428Z"},"links":{"citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:ea47a183d76060028cc03d5e9c518899b818f8f5d495350d0b2e0563c77f0a20","observation_id":"14620947-3c48-46d7-88e1-a9e1be09b0ed","resolution":{"observed_at":"2026-08-12T10:19:26.521428Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:19:57.470249Z","title":"Personalized federated learning for text classification with gradient-free prompt tuning,","venue":null,"work_id":"2abc30bd-f141-42bc-a37f-5f61d8ba5c0f","year":2024},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.566277Z"},"links":{"citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:844b67fd7b9655a8c2c4dd873c3e78eb7e4beeba7c22ab910c7d3b1789344236","observation_id":"f58fbfc7-4725-447c-b993-ff851fa00434","resolution":{"observed_at":"2026-08-12T10:19:57.476691Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2311.11227","last_updated":"2024-03-12T05:26:45Z","snapshot_observed_at":"2026-08-07T12:04:06.495702Z","submitted_at":"2023-11-19T04:43:16Z","title":"FedRA: A Random Allocation Strategy for Federated Tuning to Unleash the Power of Heterogeneous Clients","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.11227","snapshot_observed_at":"2026-08-12T10:19:26.572242Z","title":"Fedra: A random allocation strategy for federated tuning to unleash the power of heterogeneous clients,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.572242Z"},"links":{"cited_paper":"/paper/2311.11227","citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:682bfe62603aa413922b1986a185c86d2b4cba3a35e0cf4d820cbdcd3245f301","observation_id":"2239a8da-c40a-42c8-9524-cfb79785125c","resolution":{"observed_at":"2026-08-12T10:19:26.572242Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:19:57.537414Z","title":"What is in your safe data? identifying benign data that breaks safety,","venue":null,"work_id":"bb6b7d36-d742-4eba-849f-7b78e016a492","year":2024},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.535413Z"},"links":{"citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:49f7ce2d13e0c830ca38a74ca7f0f1c9a77e9320a17a3e73a2484be10173a36a","observation_id":"240b2034-84fd-4356-b888-f577be26c047","resolution":{"observed_at":"2026-08-12T10:19:57.543382Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:19:57.453855Z","title":"Backdoor threats from compromised foundation models to federated learning,","venue":null,"work_id":"6a42e416-b72c-41d1-be30-d2dce7ee7b79","year":2023},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.582215Z"},"links":{"citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:c46f4df4a9eee1dec676c305b8a98f70c706a5e1bf1d5a00043f28fbec174fa8","observation_id":"ca9f1ccd-583f-42ec-87ab-e2aca73ddc10","resolution":{"observed_at":"2026-08-12T10:19:57.459605Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:19:57.504400Z","title":"Reducing communication overhead in federated learning for pre-trained language models using parameter-efficient finetuning,","venue":null,"work_id":"cbebd581-fc6a-4c80-90c1-85d676345cbf","year":2023},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.546105Z"},"links":{"citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:21c8db14abbef6e7cae723bea689c6e1c641f9aaf39134067c26e0779ca6f055","observation_id":"ad88f77f-c54f-4624-b968-5edf8da2fa82","resolution":{"observed_at":"2026-08-12T10:19:57.510370Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:19:57.487499Z","title":"Federated learning of large language models with parameter-efficient prompt tuning and adaptive optimization,","venue":null,"work_id":"42db1fe1-52b4-48f2-b9db-5ba432f68bd7","year":2023},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.551124Z"},"links":{"citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:540075447aa18d17b2c3d69df07f516aa14fb4c69b4dfbb9db5deaa03167ba61","observation_id":"4c76117d-33d0-491f-869a-b51c5e832763","resolution":{"observed_at":"2026-08-12T10:19:57.493883Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:19:57.418665Z","title":"Removing RLHF protections in GPT-4 via fine-tuning,","venue":null,"work_id":"34d2d272-f30f-4413-9872-166486daa3f9","year":2024},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.597413Z"},"links":{"citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:6c15b95ce9fedee968b27cb4fa9f8161a605a98b2d20b3efa25f64f4c805f936","observation_id":"4ea1e862-6398-4efe-be3d-e7ed684d76b6","resolution":{"observed_at":"2026-08-12T10:19:57.424589Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.01467","last_updated":"2023-10-02T16:43:14Z","snapshot_observed_at":"2026-08-11T21:12:03.445934Z","submitted_at":"2023-10-02T16:43:14Z","title":"FedBPT: Efficient Federated Black-box Prompt Tuning for Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.01467","snapshot_observed_at":"2026-08-12T10:19:26.561397Z","title":"Fedbpt: Efficient federated black-box prompt tuning for large language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.561397Z"},"links":{"cited_paper":"/paper/2310.01467","citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:45cb370ef9ecd0ff2b19901cdc86d0426ac4a02b528fdc960732bc8c0362dc27","observation_id":"3c02a7da-aef8-4201-8824-e67ac094554c","resolution":{"observed_at":"2026-08-12T10:19:26.561397Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:19:57.403313Z","title":"Assessing the brittleness of safety alignment via pruning and low-rank modifications,","venue":null,"work_id":"cf079802-54c3-4aae-b9c9-9216b4c62aa5","year":null},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.607085Z"},"links":{"citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:ee93b2f0e8023c22663efe7fefd74224cd40294ebed1ce187f3556a69c1ab760","observation_id":"a949a40f-811a-496a-835a-68ec4e226add","resolution":{"observed_at":"2026-08-12T10:19:57.408304Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.17374","last_updated":"2024-10-30T22:35:59Z","snapshot_observed_at":"2026-07-06T18:20:44.070255Z","submitted_at":"2024-05-27T17:31:56Z","title":"Navigating the Safety Landscape: Measuring Risks in Finetuning Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.17374","snapshot_observed_at":"2026-08-12T10:19:26.611571Z","title":"Navigating the safety landscape: Measuring risks in finetuning large language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":74,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.611571Z"},"links":{"cited_paper":"/paper/2405.17374","citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:14afde42a19b0615476a1404ee7ffea8c2637a584b518a312c5c485871357aae","observation_id":"0227a199-1c1a-432c-825f-a7991df2a5c5","resolution":{"observed_at":"2026-08-12T10:19:26.611571Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.11505","last_updated":"2024-05-30T15:46:10Z","snapshot_observed_at":"2026-08-09T09:49:22.649476Z","submitted_at":"2024-02-18T08:32:59Z","title":"Federated Fine-tuning of Large Language Models under Heterogeneous Tasks and Client Resources","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.11505","snapshot_observed_at":"2026-08-12T10:19:26.577049Z","title":"Federated fine-tuning of large language models under heterogeneous language tasks and client resources,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":75,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.577049Z"},"links":{"cited_paper":"/paper/2402.11505","citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:a880e950ec63154c4e10079eb5d07ad519bc9a794402d26dc10fd79748c6fa08","observation_id":"f61da980-6c44-4f1a-bb94-933e6d785423","resolution":{"observed_at":"2026-08-12T10:19:26.577049Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:19:57.387423Z","title":"Fine-tuning can cripple your foundation model; preserving features may be the solution,","venue":null,"work_id":"1a460164-0381-48e9-87fd-c0cdb8eff5a1","year":null},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":76,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.622430Z"},"links":{"citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:3613525a296e7fed90973ae9a9839c4399eea78aaeb48e1a348e51ec79bfe0cf","observation_id":"e24b6591-7c38-4691-8b74-8a8271b95e8e","resolution":{"observed_at":"2026-08-12T10:19:57.392244Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.17573","last_updated":"2025-05-27T16:10:45Z","snapshot_observed_at":"2026-08-06T23:15:31.170184Z","submitted_at":"2024-10-23T05:54:41Z","title":"Securing Federated Learning against Backdoor Threats with Foundation Model Integration","version":3},"cited_work":{"arxiv_id":"2410.17573","doi":null,"metadata_source":"pith","pith_arxiv_id":"2410.17573","snapshot_observed_at":"2026-08-12T10:19:26.882005Z","title":"Securing Federated Learning against Backdoor Threats with Foundation Model Integration","venue":"cs.LG","work_id":"9d83e512-271e-4c43-b84d-557205c36e47","year":2024},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":77,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.587549Z"},"links":{"cited_paper":"/paper/2410.17573","citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:9a3cd47ee5adf32eee4110be5308fe1ee8df603021e2fb20ad6f5fcd0b8bb9fc","observation_id":"c2fdfc5e-d91b-4144-9618-9d95e908c9ba","resolution":{"observed_at":"2026-08-12T10:19:26.890167Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:19:57.436336Z","title":"Shadow alignment: The ease of subverting safely-aligned language models,","venue":null,"work_id":"5804e963-b42d-4c18-b9d3-919e3a5b99e7","year":2024},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":78,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.592555Z"},"links":{"citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:58551c37fa08e1d161adb51f806304117706a0d09ae7861fb760c5062780bffe","observation_id":"963519a5-2dc9-4db6-9ca6-71d7af53e587","resolution":{"observed_at":"2026-08-12T10:19:57.442085Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.09055","last_updated":"2024-05-15T03:04:05Z","snapshot_observed_at":"2026-08-11T16:52:01.705224Z","submitted_at":"2024-05-15T03:04:05Z","title":"A safety realignment framework via subspace-oriented model fusion for large language models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.09055","snapshot_observed_at":"2026-08-12T10:19:26.646902Z","title":"A safety realignment framework via subspace-oriented model fusion for large language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":79,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.646902Z"},"links":{"cited_paper":"/paper/2405.09055","citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:2bb2e07dd19e657b280dc7c14ce9139179b34ae1cb93926456448d44f2b466ec","observation_id":"8d31e729-d484-4dfe-a94e-9c5f6125e188","resolution":{"observed_at":"2026-08-12T10:19:26.646902Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.16229","last_updated":"2024-05-25T13:38:40Z","snapshot_observed_at":"2026-07-06T18:19:52.121906Z","submitted_at":"2024-05-25T13:38:40Z","title":"No Two Devils Alike: Unveiling Distinct Mechanisms of Fine-tuning Attacks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.16229","snapshot_observed_at":"2026-08-12T10:19:26.602057Z","title":"No two devils alike: Unveiling distinct mechanisms of fine-tuning attacks,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":80,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.602057Z"},"links":{"cited_paper":"/paper/2405.16229","citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:0df65e11cd8dbe6d7d2e10e40025d44ab2e275866e0d5cea1374f067e2652ea4","observation_id":"e4f0cca7-427e-4881-b85f-b8c956b65629","resolution":{"observed_at":"2026-08-12T10:19:26.602057Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.10264","last_updated":"2024-08-21T15:12:37Z","snapshot_observed_at":"2026-08-12T07:54:13.218077Z","submitted_at":"2024-07-14T16:12:57Z","title":"What Makes and Breaks Safety Fine-tuning? A Mechanistic Study","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.10264","snapshot_observed_at":"2026-08-12T10:19:26.617429Z","title":"What makes and breaks safety fine-tuning? a mechanistic study,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":83,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.617429Z"},"links":{"cited_paper":"/paper/2407.10264","citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:15da84d0d813f7096744f3cd1ffc3983005f7cc274d74604ff1a268bd423397d","observation_id":"2668cb19-a0eb-4783-b1ad-4cc1f96dd804","resolution":{"observed_at":"2026-08-12T10:19:26.617429Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2308.13320","last_updated":"2024-07-01T17:14:27Z","snapshot_observed_at":"2026-07-06T16:10:23.328130Z","submitted_at":"2023-08-25T11:49:51Z","title":"Fine-tuning can cripple your foundation model; preserving features may be the solution","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.13320","snapshot_observed_at":"2026-08-12T10:19:26.627671Z","title":"Available: https://arxiv.org/abs/2308.13320","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":85,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.627671Z"},"links":{"cited_paper":"/paper/2308.13320","citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:76be089acfb2565d2d4ddb5c26191268ba323ef33df474947792c4834588c27e","observation_id":"ee12b98f-8c8f-43b1-8e04-317d6875f42a","resolution":{"observed_at":"2026-08-12T10:19:26.627671Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:19:57.371920Z","title":"Safety fine- tuning at (almost) no cost: A baseline for vision large language models,","venue":null,"work_id":"b090edfc-ad94-4f63-89bc-68bc7299a247","year":2024},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":86,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.632744Z"},"links":{"citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:d86ed6586a74bda1f44a3befb1cecc9a895b82e76ed227dc618a4ed1f610f183","observation_id":"24d3c840-1d75-4f06-a066-320a6d6a0362","resolution":{"observed_at":"2026-08-12T10:19:57.376947Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:19:57.356235Z","title":"Lisa: Lazy safety alignment for large language models against harmful fine-tuning attack,","venue":null,"work_id":"0bb93901-7384-4eb4-b5f5-0e59f043ce13","year":null},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":87,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.637533Z"},"links":{"citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:4970a22991734c2adf5a305f29ebadecba578104639bdd84661c25096c3e108c","observation_id":"ea9d50b3-4f36-43b1-afac-f930082ee3d6","resolution":{"observed_at":"2026-08-12T10:19:57.361649Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.18641","last_updated":"2024-10-29T05:46:55Z","snapshot_observed_at":"2026-08-10T16:29:06.176661Z","submitted_at":"2024-05-28T22:53:43Z","title":"Lisa: Lazy Safety Alignment for Large Language Models against Harmful Fine-tuning Attack","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.18641","snapshot_observed_at":"2026-08-12T10:19:26.642041Z","title":"Available: https://arxiv.org/abs/2405.18641","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":88,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.642041Z"},"links":{"cited_paper":"/paper/2405.18641","citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:086a2109a07e2a66544ff06287f867972887dc5ec7ba92cbf4330abfc8659328","observation_id":"fa48e4a9-710e-4e4a-86e0-508231c6e819","resolution":{"observed_at":"2026-08-12T10:19:26.642041Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:19:57.682740Z","title":"Available: https://www.mdpi.com/2076-3417/11/14/6421","venue":null,"work_id":"2c89a28b-0636-4504-bc34-0012d1169f62","year":null},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":2021,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.485806Z"},"links":{"citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:ab8745525a7805fa779ed0f404cfb6472100c7bc52a8bf377ec41e3c627b8fe3","observation_id":"066b63a1-b168-46a1-b570-c1283cdd5680","resolution":{"observed_at":"2026-08-12T10:19:57.688670Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2302.13971","last_updated":"2023-02-27T17:11:15Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-02-27T17:11:15Z","title":"LLaMA: Open and Efficient Foundation Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2302.13971","snapshot_observed_at":"2026-08-12T10:19:26.231870Z","title":"Available: https://arxiv.org/abs/2302.13971","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":2023,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.231870Z"},"links":{"cited_paper":"/paper/2302.13971","citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:587653c4d459be43adc0b59d34664a725db4dd7683c6e14dc35d0150242b18a2","observation_id":"4ec82cbc-42d9-48ec-ab37-0ab75d788955","resolution":{"observed_at":"2026-08-12T10:19:26.231870Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2303.08774","last_updated":"2024-03-04T06:01:33Z","snapshot_observed_at":"2026-08-07T07:30:12.213965Z","submitted_at":"2023-03-15T17:15:04Z","title":"GPT-4 Technical Report","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.08774","snapshot_observed_at":"2026-08-12T10:19:26.222381Z","title":"Available: https://arxiv.org/abs/2303.08774","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.222381Z"},"links":{"cited_paper":"/paper/2303.08774","citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:7c9aa7fb953757db7d81e73ea7670ab2d4b870b3f712823b4c25e3c6d58f29a6","observation_id":"614c8ff2-f5f5-46c3-bed3-12fb20589644","resolution":{"observed_at":"2026-08-12T10:19:26.222381Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:19:57.989580Z","title":"Available: https://aclanthology.org/2024.findings-acl.443","venue":null,"work_id":"49e0d905-e6a5-4a56-91e8-bd5b4e7a784b","year":2024},"citing_paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","version":2},"reference_index":7449,"source":"pdf_text","source_observed_at":"2026-08-12T10:19:26.346670Z"},"links":{"citing_paper":"/paper/2411.19335"},"observation_digest":"sha256:fe58b43cf113166e77c3b2677e156fb83bbd5b5b7b63f514e720be5febc1d567","observation_id":"9c79d84b-4528-416f-b352-b99412f358eb","resolution":{"observed_at":"2026-08-12T10:19:57.995033Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2411.19335","last_updated":"2024-12-19T14:30:23Z","latest_version":2,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-12T10:14:46.758445Z","submitted_at":"2024-11-28T19:05:01Z","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning"},"reference_resolution":{"displayed":87,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":44,"verified_exact":2,"verified_fuzzy":41},"total_outbound_references":87},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"thesis":"As of 12 August 2026, this Paper Citation Record lists 87 of 87 outbound references and 3 inbound Pith citation observations for arXiv:2411.19335."}