{"as_of":"2026-08-21T10:04:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:531abb06819ced6d278938d0fc7cbee8d85dd7ae1205ba0a7e85910a2fdeaccf","coverage":[{"denominator":84,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":84,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-16T11:28:46.471620Z","state":"measured"},{"denominator":84,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":84,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-21T06:32:19.484+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2504.15499/citation-record","integrity":"/paper/2504.15499/integrity","json":"/paper/2504.15499/citation-record.json","paper":"/paper/2504.15499"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:28:45.193186Z","title":"Mach: A New Kernel Foundation For UNIX Development","venue":null,"work_id":null,"year":1986},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:45.193186Z"},"links":{"citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:5f4e5dd25ec0e748108e685a915ca8e6b3857b95daddd39bd7d2e82e0d471d56","observation_id":"4032d6ad-a68b-49e8-989f-433ab6b114d1","resolution":{"observed_at":"2026-08-16T11:28:45.193186Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:28:45.197390Z","title":"Y., van der Ploeg, F., and Dijkstra, H","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:45.197390Z"},"links":{"citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:9cdeffdc9f708d1a040a524c0b67504ddbd0818f8f8588b124657e1f19b9702d","observation_id":"26fa75ac-58c3-40b9-90b7-f77ac6b48bf6","resolution":{"observed_at":"2026-08-16T11:28:45.197390Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:28:45.201495Z","title":"vIC: Interrupt Coalesc- ing for Virtual Machine Storage Device IO","venue":null,"work_id":null,"year":2011},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:45.201495Z"},"links":{"citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:30bf2079343d420eee2288c530ed97d74c3a476ba7dc4bad71f8221a78f9adc8","observation_id":"83b043c6-d864-4003-b676-348ba28bb816","resolution":{"observed_at":"2026-08-16T11:28:45.201495Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:28:45.205600Z","title":"Apple Platform Security: Operating system integrity","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:45.205600Z"},"links":{"citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:0885c4e2741adb97b82ec2be9402845e6995fe961849fdffa1e90c2073ca0c47","observation_id":"9bb530e6-bd2c-4831-8cd3-1ec9aefe0fab","resolution":{"observed_at":"2026-08-16T11:28:45.205600Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:28:47.569994Z","title":"Accelerating Two-dimensional Page Walks for Virtualized Systems","venue":null,"work_id":"c8dcab04-8531-4a19-ba81-27ceb6643589","year":2008},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:45.210466Z"},"links":{"citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:cc15117aec656c4dd01e8c24cb36751ba8f006cbfebe803184321ef955aa98bb","observation_id":"84401b12-a62e-473a-a845-9914a86875a3","resolution":{"observed_at":"2026-08-16T11:28:47.574983Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:28:47.559249Z","title":"Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile","venue":null,"work_id":"a378f8e8-8a1b-433c-a26d-e8f72a1fbab4","year":2008},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:45.214577Z"},"links":{"citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:e7508769dcf25d7a41e3ca33002247dfb87f9df417c2ac7f63683ed9bbf10861","observation_id":"1f364f4d-b16a-40cc-a4a5-4250306b83ed","resolution":{"observed_at":"2026-08-16T11:28:47.563134Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:28:47.547366Z","title":null,"venue":null,"work_id":"a785dc1c-b03a-44a1-bf59-237a23defb94","year":2024},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:45.279246Z"},"links":{"citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:57c2808d7a4fd0c916db04d91fd6e7c2b220ec3961b733b2fb23af5464ec2d71","observation_id":"8cbf0d92-eaa9-44a6-9172-81e8e35dd4cb","resolution":{"observed_at":"2026-08-16T11:28:47.551591Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:28:47.536192Z","title":"Safe harbor","venue":null,"work_id":"bfdd37d0-966e-4152-8ce7-4da6c5d0dcec","year":2025},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:45.367920Z"},"links":{"citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:8736b5b9a5643324516fa93fe3477fa745f460b004b72e9b7de53a85bf65d4d7","observation_id":"1424b614-dcd4-4459-bfed-6c032dd3c59f","resolution":{"observed_at":"2026-08-16T11:28:47.539569Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:28:47.525556Z","title":"J., Gonzalez, J","venue":null,"work_id":"53a8233a-1a6c-4864-b303-318bfb9bf240","year":2017},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:45.400655Z"},"links":{"citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:eecf1748e02ac7119090bff7d54604d0932a04c83396e2de9e4f6601e90475b5","observation_id":"13503d67-ff66-4520-b0b9-31b7db9c4183","resolution":{"observed_at":"2026-08-16T11:28:47.529463Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:28:47.514894Z","title":"T., and Nieh, J","venue":null,"work_id":"e27c2e53-85f5-497f-acf9-81ec69eca4ac","year":2018},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:45.405341Z"},"links":{"citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:a88e21fd686686334a983be871e8c16abcec548103f4e3ed86b05e583645b357","observation_id":"1299cb9d-eb74-4f93-a53e-95c68a62be89","resolution":{"observed_at":"2026-08-16T11:28:47.518382Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:28:47.504228Z","title":"Artificial Intelligence Act (Regulation 2025/1689) - Annex XIII, June 13, 2024","venue":null,"work_id":"f26594e7-e78d-4328-9850-6f5795c6b906","year":2025},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:45.409241Z"},"links":{"citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:30c94a2a6f36e0662e4a02bb7457de0094210976d24d1f8cbcb1b3240c94c4ac","observation_id":"699509b2-6888-4d77-bb18-ed0466738921","resolution":{"observed_at":"2026-08-16T11:28:47.508085Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:28:47.493291Z","title":"Artificial Intelligence Act (Regulation 2025/1689) - Article 92, June 13, 2024","venue":null,"work_id":"0593d77e-b5d3-423a-88e5-a5c326e3e870","year":2025},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:45.413977Z"},"links":{"citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:e4fb0902df629a88c9f066f0c30f1974958e49def22462794cdff43a35822dd2","observation_id":"da6c0be4-fb0a-4b5e-a792-c7cb80490477","resolution":{"observed_at":"2026-08-16T11:28:47.497307Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:28:47.481913Z","title":"Artificial Intelligence Act (Regulation 2025/1689) - Preamble, Paragraph 110, June 13, 2024","venue":null,"work_id":"265abd72-d158-4e56-add4-8fe0cea8f618","year":2025},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:45.418352Z"},"links":{"citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:a6058577de695a4de7a8740dc099672f23f752dea6809ee39b2b4ef830e9c18c","observation_id":"e229de7f-fecc-4e21-b3da-bea3db0bee70","resolution":{"observed_at":"2026-08-16T11:28:47.486205Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:28:47.470682Z","title":"Artificial Intelligence Act (Regulation 2025/1689) - Recital 52, June 13, 2024","venue":null,"work_id":"58419a6c-b4f3-45bc-876a-8894aa3804f6","year":2025},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:45.422449Z"},"links":{"citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:07d3b63ad31d430b84cd3eb3e4747f5212ae2318ea47de471514ea00c1202f84","observation_id":"323df31a-cde7-441d-90bd-7a8548986134","resolution":{"observed_at":"2026-08-16T11:28:47.474517Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:28:47.459287Z","title":"Cypress: A Scheduling Infrastructure for a Many-Core Hypervisor","venue":null,"work_id":"9799c129-4de7-4082-abfc-5c242c58f720","year":2008},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:45.426364Z"},"links":{"citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:63ef9526ac26e9489621720f01b3994160d00648254d1a5333d3084a5316bc02","observation_id":"69aeab59-da16-4639-8b17-aff3f7c00983","resolution":{"observed_at":"2026-08-16T11:28:47.462995Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2409.15268","last_updated":"2025-01-27T11:35:04Z","snapshot_observed_at":"2026-08-18T16:54:14.818747Z","submitted_at":"2024-09-23T17:58:07Z","title":"Style Outweighs Substance: Failure Modes of LLM Judges in Alignment Benchmarking","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.15268","snapshot_observed_at":"2026-08-16T11:28:45.431092Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:45.431092Z"},"links":{"cited_paper":"/paper/2409.15268","citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:87013d61268256948bb187c1fc638f3d9b9af506e2daf7d7e18bf2f3f84061b6","observation_id":"81afd1b5-4835-49fc-b1d7-f747130c89b4","resolution":{"observed_at":"2026-08-16T11:28:45.431092Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:28:47.447882Z","title":"Y., Yu, Z., and Zuo, P","venue":null,"work_id":"21de7b36-201b-4bfb-be9e-6e59aa071be0","year":2024},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:45.435606Z"},"links":{"citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:c24e38d4e1802215fd8ded3a7dca6eb20bd21ad3f9bc9210ba63579b8d22ce07","observation_id":"527aa848-f71f-4b81-bbea-7a8cdcc02bf6","resolution":{"observed_at":"2026-08-16T11:28:47.451479Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.10997","last_updated":"2024-03-27T09:16:57Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-12-18T07:47:33Z","title":"Retrieval-Augmented Generation for Large Language Models: A Survey","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.10997","snapshot_observed_at":"2026-08-16T11:28:45.462009Z","title":"arXiv:2312.10997","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:45.462009Z"},"links":{"cited_paper":"/paper/2312.10997","citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:498cad638f080ddf14659557d2fed759cf676a0c789d787b4b67f12cb06f2df1","observation_id":"6c7ccbd7-1973-4153-8c40-c17b7adbed6d","resolution":{"observed_at":"2026-08-16T11:28:45.462009Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:28:47.438015Z","title":null,"venue":null,"work_id":"44f34e5d-7f9f-4972-b4a7-4932b2e6ff95","year":1966},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:45.465653Z"},"links":{"citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:fb3bfa2f0786a63b7c239acd50072d2921dd1489a5b81ba5436bb2415ed5e4d6","observation_id":"946adab0-56ec-4f71-b0f6-af34d613a4c7","resolution":{"observed_at":"2026-08-16T11:28:47.441430Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:28:47.427654Z","title":"Chrome Root Program Policy, Version 1.5","venue":null,"work_id":"a23ca69c-7fed-42a8-9d8e-08be8f64ce9d","year":2024},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:45.469773Z"},"links":{"citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:a734eac2c7f8fb9007e83df38c38bc02d8100a3dd7c1342770456715480f7b18","observation_id":"70205063-75dd-4f45-9b86-8c1f4472525b","resolution":{"observed_at":"2026-08-16T11:28:47.431031Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2412.14093","last_updated":"2024-12-20T02:22:19Z","snapshot_observed_at":"2026-08-13T11:12:58.507759Z","submitted_at":"2024-12-18T17:41:24Z","title":"Alignment faking in large language models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.14093","snapshot_observed_at":"2026-08-16T11:28:45.474769Z","title":"R., and Hubinger, E","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:45.474769Z"},"links":{"cited_paper":"/paper/2412.14093","citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:15248c3703c9eef3b9a2cb66a2f8ea97a7145beae1254cbcbcada5b482eb1aa7","observation_id":"f6c9d7fd-135e-4977-b147-f2e0615c9bd8","resolution":{"observed_at":"2026-08-16T11:28:45.474769Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:28:47.416875Z","title":"Managing Catastrophic Misuse Without Robust AIs","venue":null,"work_id":"d09ae4d4-49a4-4d61-9023-a4423b032bf7","year":2024},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:45.478400Z"},"links":{"citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:36d06a5b6307fb7f9290e4664c5b0a465cfe31b2fa6ca5dd83eca05f59e8befd","observation_id":"1d6c75ad-1905-4b1c-a3e0-fb16d72bbf35","resolution":{"observed_at":"2026-08-16T11:28:47.420682Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:28:47.406345Z","title":"CertiKOS: An Extensible Architecture for Building Certified Concur- rent OS Kernels","venue":null,"work_id":"1021f730-c440-4676-982d-26f583512863","year":2016},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:45.481969Z"},"links":{"citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:4a38a2aeee23cc97676e6513d19784d7a49a1d42b570bedb56bd2dd6fb51f48b","observation_id":"312d0075-1732-480c-b912-f7e925934f5e","resolution":{"observed_at":"2026-08-16T11:28:47.410349Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:28:47.396101Z","title":"Serving DNNs Like Clockwork: Performance Predictability from the Bottom Up","venue":null,"work_id":"7f47b74c-b7c7-4b0f-9812-b112f2369812","year":2020},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:45.486127Z"},"links":{"citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:3f81d27be2e9875b5d7a86ee696b512a63127e358c34f93b7e16e66f62e973e3","observation_id":"50eca880-1733-4ae6-90b2-259fd36d0cad","resolution":{"observed_at":"2026-08-16T11:28:47.399721Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:28:47.386190Z","title":null,"venue":null,"work_id":"7a21280f-741f-465d-a38a-403200ede735","year":2010},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:45.490435Z"},"links":{"citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:e2b9804be83ebe1b80a197c9e5c6b4e03f1ddebfe999a2ceb59c62ce877354fd","observation_id":"5b5c58d7-8203-4020-b3cf-ccff6742a650","resolution":{"observed_at":"2026-08-16T11:28:47.389536Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:28:47.375727Z","title":"The seL4 Microkernel: An Introduction","venue":null,"work_id":"589b0c8a-8478-4b7f-95d2-bba226934eaf","year":2024},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:45.494119Z"},"links":{"citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:6271007089d8dc2439842953ae1bc6d6452fcbaf6915ccf48b5355ab056eb7d5","observation_id":"012b71ae-95ec-49c5-bd6e-8622910f3d5f","resolution":{"observed_at":"2026-08-16T11:28:47.379289Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:28:47.365570Z","title":"Introducing The World’s Largest Open Multilingual Language Model: BLOOM","venue":null,"work_id":"b6e7bea4-7920-41fc-9bfa-e9b873adb0b7","year":2024},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:45.498460Z"},"links":{"citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:0dfa37e24713ebcb28c60900badb681c0b7c19e6d08059420bd92a1100f5d384","observation_id":"a40ad737-b0f3-40d8-ab7f-3cca55048594","resolution":{"observed_at":"2026-08-16T11:28:47.369333Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:28:47.355261Z","title":"K., Ke, F","venue":null,"work_id":"6ec5d367-9d22-4046-9f12-5631fcaa0644","year":2019},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:45.502813Z"},"links":{"citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:59f9e674915e274cc159a406cbe541e142f81ce725e544c7ae81845083575577","observation_id":"497665ce-e647-41c5-bb5b-9f44e303170f","resolution":{"observed_at":"2026-08-16T11:28:47.358900Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.12457","last_updated":"2024-04-25T06:47:57Z","snapshot_observed_at":"2026-08-19T19:49:59.264961Z","submitted_at":"2024-04-18T18:32:30Z","title":"RAGCache: Efficient Knowledge Caching for Retrieval-Augmented Generation","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.12457","snapshot_observed_at":"2026-08-16T11:28:45.603902Z","title":"Ragcache: Efficient knowledge caching for retrieval-augmented gen- eration, April 25, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:45.603902Z"},"links":{"cited_paper":"/paper/2404.12457","citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:f1c6958f76d05915419857a385d235437b3229cc862f05937039905634959143","observation_id":"88f09e4f-68dd-4cde-8f10-9b84a4b814b7","resolution":{"observed_at":"2026-08-16T11:28:45.603902Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:28:47.344423Z","title":"seL4: Formal Verification of an OS Kernel","venue":null,"work_id":"c1043d80-bc54-4824-81c1-728afe29c1ca","year":2009},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:45.617528Z"},"links":{"citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:4afc6283afaa1a63060d6d89f5dc593eb8cb9f8bb19ca8be54be39c9778a0f99","observation_id":"1fbe96e2-b61f-49c9-89a4-6af632e3e5ef","resolution":{"observed_at":"2026-08-16T11:28:47.348151Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:28:47.333461Z","title":"In Proceedings of the IEEE Symposium on Security and Privacy (May 2019), pp","venue":null,"work_id":"f026bd05-e302-49b0-8968-3f6867c6aa56","year":2019},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:45.621691Z"},"links":{"citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:0a6697f91029569a295025870f2d59aa8342239a7a2cb262818d86ba456f9517","observation_id":"7f4bafd3-c1fe-4954-8ee7-a5b67c119d6e","resolution":{"observed_at":"2026-08-16T11:28:47.337267Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:28:47.322495Z","title":"H., Gonza- lez, J., Zhang, H., and Stoica, I","venue":null,"work_id":"66d36980-05d4-4ead-b76d-01cf568fe45b","year":2023},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:45.625894Z"},"links":{"citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:837e4a6c7a93191b38645ff945fcd840f4f6eaf8da53c4498eac3d5f3d4d063f","observation_id":"5996a17a-379c-484f-a086-1a538e5bfd03","resolution":{"observed_at":"2026-08-16T11:28:47.326131Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:28:47.311535Z","title":"Allies and Artificial Intelligence: Obstacles to Operations and Decision-Making","venue":null,"work_id":"54ae49ea-9338-45df-9f9d-7be423edebe7","year":2020},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:45.629847Z"},"links":{"citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:3aa1f69ed6683309933911e80c77772d4807a8791fc695c84b05d5b4abfb50a1","observation_id":"f28a38d1-16e3-49bf-8ef4-262090bef892","resolution":{"observed_at":"2026-08-16T11:28:47.315441Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:28:47.300214Z","title":"Unikernels: Library Operating Systems for the Cloud","venue":null,"work_id":"71aab62e-9623-49e4-ba16-86eaef22f6a1","year":2013},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:45.634583Z"},"links":{"citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:81dd8d6df08685ca078d7e72c737a76667da30a227756f7cf270ac2c1d25a327","observation_id":"073d84f4-f2d9-4d15-9eba-f31a9cfbbfdb","resolution":{"observed_at":"2026-08-16T11:28:47.304564Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:28:47.178489Z","title":"InProceedings of ASPLOS (March 2015), pp","venue":null,"work_id":"fd9209b2-850f-4217-889a-e1f20f9f93a0","year":2015},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:45.638110Z"},"links":{"citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:9559ee1343cd624e8da1e7bfcb61cff04f3a86dfab8352d22f6fd173b2496d82","observation_id":"dc517f7e-faa2-4dce-bf4e-b4638bd415c4","resolution":{"observed_at":"2026-08-16T11:28:47.182404Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:28:47.166868Z","title":"DAMN: Overhead-Free IOMMU Protection for Networking","venue":null,"work_id":"521447d0-a95c-4c56-8b6c-6a6ae1fd06c4","year":2018},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:45.642702Z"},"links":{"citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:f85eebf63c1c020a5bf6d3909eaf5d1d19f9ca4a16c947c4ca371b74c89093ff","observation_id":"73bc7bcf-f4e7-4609-9945-df2a398cb62b","resolution":{"observed_at":"2026-08-16T11:28:47.170908Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:28:47.154443Z","title":"Exxon disputed climate findings for years","venue":null,"work_id":"82690798-21bd-4191-a37d-bc55fe43c5e9","year":2023},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:45.646095Z"},"links":{"citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:e825a5afc61acde49b3c10035ce72be7576b908e4c91873e537bf661903782cd","observation_id":"ead1dc4f-6f1b-4bca-a0b0-c5b22f3e2800","resolution":{"observed_at":"2026-08-16T11:28:47.159214Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:28:47.142969Z","title":"Introducing Llama 3.1: Our most capable models to date","venue":null,"work_id":"14ced95b-c037-4017-9ed6-d2dee3622c4e","year":2024},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:45.722560Z"},"links":{"citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:20e49c16f8e3bf4b61afe879981bdcba18933212700357314ae824720995c275","observation_id":"59c9e831-e6d8-4c8a-a2d0-14307a5b6d68","resolution":{"observed_at":"2026-08-16T11:28:47.146897Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:28:47.130860Z","title":"FlexCore: Dynamic Virtual Machine Sched- uling using VCPU Ballooning","venue":null,"work_id":"818e169e-92b7-4b61-982d-1827d517947b","year":2015},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:45.796108Z"},"links":{"citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:b94215a44cf5f7e6e7eba17ca272d038e968f79028584a0d3285943a54921d35","observation_id":"cc602316-d68d-4d33-828e-ce4e1a1b6166","resolution":{"observed_at":"2026-08-16T11:28:47.134902Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:28:47.118265Z","title":"Prompt Shields","venue":null,"work_id":"5a2b48a1-4bb5-42c3-b642-b42e5f3e0f5d","year":2024},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:45.800032Z"},"links":{"citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:b0a28ac9731f1878d1c618af97b5d77812dd5a6fa4b1df71549a1f7f2257d563","observation_id":"7002e2b1-0ebd-4cc5-b0ca-c80b692b4bf4","resolution":{"observed_at":"2026-08-16T11:28:47.122463Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:28:47.107854Z","title":"H., and Borch, C","venue":null,"work_id":"22f6fe97-2a0c-46d8-a518-ec2405c08988","year":2022},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:45.803953Z"},"links":{"citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:e9ea73ca7267b052d87501d92a277bdc58a23b54224d847f88b688a838b7c153","observation_id":"726626fa-9c41-4285-97bd-f28fbe9b21ec","resolution":{"observed_at":"2026-08-16T11:28:47.111376Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:28:47.097179Z","title":"E., Boudreaux, B., Lohn, A","venue":null,"work_id":"e4d0ff1e-2f6e-4bef-9d72-dd7d871e552e","year":2020},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:45.808918Z"},"links":{"citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:c5c24f0ff11b1c04fdf6acaf1fd29546a463f8971522ecb1303c56bdc08d344a","observation_id":"bd87202e-eda1-49a6-a93a-5368287ae8e1","resolution":{"observed_at":"2026-08-16T11:28:47.100542Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:28:47.086150Z","title":"ImpedanceVerif: On- Chip Impedance Sensing for System-Level Tampering Detection.IACR Transactions on Cryptographic Hardware and Embedded Systems 2023 , 1 (November 2022), 301–325","venue":null,"work_id":"206716f3-7b42-44db-b63b-2f1dba6fa31b","year":2023},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:45.812993Z"},"links":{"citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:b50c3cbce2f6eb1c42c23eb9b6abed98c669fa2b22abf9adfccb226d70cf4bd4","observation_id":"5e75143f-a46a-467f-97e9-81b6840d759e","resolution":{"observed_at":"2026-08-16T11:28:47.090083Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:28:47.075658Z","title":"BackMon: IC Backside Tamper Detection using On-Chip Impedance Monitoring","venue":null,"work_id":"374f9180-bc0d-4a4b-9bb1-b078287e7f13","year":2024},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:45.817019Z"},"links":{"citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:1ae1a91dc9db6f63684f33f1f83386cc457ed0a84bd0f76fd9136aff2f4c257a","observation_id":"1f2ac85f-9c0c-4cf3-8c72-4022f0a29529","resolution":{"observed_at":"2026-08-16T11:28:47.079349Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:28:47.065496Z","title":"Mozilla’s CA Certificate Program","venue":null,"work_id":"ac699aa8-c0bd-49a9-a14f-980908401ef3","year":2024},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:45.822201Z"},"links":{"citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:841aa8d0147ce5c0db13cb189c055224038f305e03c19b347c1a9a6520e47c3e","observation_id":"6506ec74-8883-46e1-8587-f4e5a986d23b","resolution":{"observed_at":"2026-08-16T11:28:47.069272Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:28:47.054626Z","title":"A., and Alstott, J","venue":null,"work_id":"07200bfa-3bc2-4dfe-820f-59e1e9a79a64","year":2024},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:45.880520Z"},"links":{"citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:871c6826cc433cdf4eb3b2cf83bbf9a4b51669f72bfa57d4104e66a623cf47f8","observation_id":"0986f5e4-a08d-4aa9-bd9d-88545c7b69fc","resolution":{"observed_at":"2026-08-16T11:28:47.058224Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:28:47.043715Z","title":"40 years ago, scientists predicted climate change","venue":null,"work_id":"0445ff58-ba08-49a4-8a3e-1cd94995b69d","year":2019},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:45.996097Z"},"links":{"citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:c69128685b6372744a31dce7c8e9182f1ee12e22a095301ab61191c7b16a5e05","observation_id":"a0f01f58-f4f0-49d3-b68c-feaa06c042f5","resolution":{"observed_at":"2026-08-16T11:28:47.047506Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2411.19379","last_updated":"2025-04-10T05:06:29Z","snapshot_observed_at":"2026-08-16T06:11:44.384590Z","submitted_at":"2024-11-28T21:10:20Z","title":"Marconi: Prefix Caching for the Era of Hybrid LLMs","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.19379","snapshot_observed_at":"2026-08-16T11:28:46.075997Z","title":"Marconi: Prefix Caching for the Era of Hybrid LLMs, December 4, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:46.075997Z"},"links":{"cited_paper":"/paper/2411.19379","citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:ee1db6cc07f64c49de2b3eea267b1685400bd5fb0069cf2e638c38cd4c0e9c7d","observation_id":"b9f163a0-d531-4887-bf2b-81447549908a","resolution":{"observed_at":"2026-08-16T11:28:46.075997Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.06681","last_updated":"2024-07-05T15:30:45Z","snapshot_observed_at":"2026-08-15T08:04:06.283165Z","submitted_at":"2023-12-09T04:40:46Z","title":"Steering Llama 2 via Contrastive Activation Addition","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.06681","snapshot_observed_at":"2026-08-16T11:28:46.082252Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:46.082252Z"},"links":{"cited_paper":"/paper/2312.06681","citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:ca20d14b0cba2f2ce0eb65a56e489a9187f60074f4d063a0d726abe0bf706894","observation_id":"25720e79-b488-4f23-8e5f-be1c0628aa88","resolution":{"observed_at":"2026-08-16T11:28:46.082252Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:28:47.031823Z","title":"M., and Perrig, A","venue":null,"work_id":"6ca70fc7-5045-4f8c-ba0d-8a2b38c9d803","year":2011},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:46.086674Z"},"links":{"citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:8eee4cb2aa0c6861cb9dcb795cd25887348a56509b9a05fc328c83b5bdf8152e","observation_id":"4cbc7be5-cb46-4ad4-9d1b-eff04cfe80bd","resolution":{"observed_at":"2026-08-16T11:28:47.035522Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2308.07308","last_updated":"2024-05-02T14:28:39Z","snapshot_observed_at":"2026-08-20T05:22:16.665208Z","submitted_at":"2023-08-14T17:54:10Z","title":"LLM Self Defense: By Self Examination, LLMs Know They Are Being Tricked","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.07308","snapshot_observed_at":"2026-08-16T11:28:46.090161Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:46.090161Z"},"links":{"cited_paper":"/paper/2308.07308","citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:cc2bc5e0690a2e227887d64086f7783e82a12e4da5b9127bcb93f2502e9321d2","observation_id":"c427ec76-8a70-4a50-9285-9fe233a0e2a2","resolution":{"observed_at":"2026-08-16T11:28:46.090161Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:28:47.019998Z","title":"J., and Goldberg, R","venue":null,"work_id":"dd0b787f-de5f-425c-ab48-590e37a25fb5","year":1974},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:46.095234Z"},"links":{"citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:f025c14dbd33eea30b386f75caabc6f8c4f6361d3e768af0d1757560c6a723ff","observation_id":"e9066d02-b8ad-4c90-8265-6d39c9345602","resolution":{"observed_at":"2026-08-16T11:28:47.024234Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:28:46.201215Z","title":"RAGServe: Fast Quality-Aware RAG Systems with Configuration Adaptation, December 13, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:46.201215Z"},"links":{"citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:289da4938c962ec6793324b878dd9a83d1d141b50c927eeaaca2ae904e994097","observation_id":"d00fe2d7-086b-4f98-94cb-e54fbfe1dff7","resolution":{"observed_at":"2026-08-16T11:28:46.201215Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:28:47.008455Z","title":"The Transport Layer Security (TLS) Protocol Version 1.3","venue":null,"work_id":"8e60561b-8603-499b-8206-73e0e280a730","year":2018},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:46.313493Z"},"links":{"citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:05468829c3a1b52069eb3e41c1ef74afaa403ace76443099436594c4def12b7f","observation_id":"9ec05fa4-4d60-4e53-b328-1b87d5a20769","resolution":{"observed_at":"2026-08-16T11:28:47.012548Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:28:46.996433Z","title":"The RISC-V Instruction Set Manual: Volume II (Privileged Architecture)","venue":null,"work_id":"e5e27554-1ff8-4bb0-93fa-ba7661f7e7f1","year":2025},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:46.317526Z"},"links":{"citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:b499175e0933c8bd50de50650b5d09439cc1c74ca2cd206c23d27685cdb4353b","observation_id":"d684f66b-0f49-4117-ab99-230b695d09ea","resolution":{"observed_at":"2026-08-16T11:28:47.000460Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2401.03729","last_updated":"2024-04-01T20:56:11Z","snapshot_observed_at":"2026-08-20T05:18:39.545724Z","submitted_at":"2024-01-08T08:28:08Z","title":"The Butterfly Effect of Altering Prompts: How Small Changes and Jailbreaks Affect Large Language Model Performance","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.03729","snapshot_observed_at":"2026-08-16T11:28:46.321815Z","title":"The Butterfly Effect of Altering Prompts: How Small Changes and Jailbreaks Affect Large Language Model Performance, January 9, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:46.321815Z"},"links":{"cited_paper":"/paper/2401.03729","citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:9091b39250d55b7894fce68c5e71fdbaa39156d24c02e89d699c5c52b961bf42","observation_id":"31484b16-63e3-4747-82a6-b11e12f9c682","resolution":{"observed_at":"2026-08-16T11:28:46.321815Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:28:46.984550Z","title":"R., Shome, P., Nayak, N., Trippel, C., Morrison, A., Kohlbrenner, D., and Fletcher, C","venue":null,"work_id":"72350f08-32a7-4827-8fcf-c804b6d46caf","year":2021},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:46.326090Z"},"links":{"citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:2e596e39943f51d80af1596a336b412003e5c1f330038b01d7c0719fcf4dda23","observation_id":"09053d5f-6904-4e7f-89da-152c198a970e","resolution":{"observed_at":"2026-08-16T11:28:46.988663Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:28:46.973193Z","title":"GPT-4 architecture, datasets, costs and more leaked","venue":null,"work_id":"8935189a-ca95-45f4-aba8-f11d42dbbca7","year":2023},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:46.330106Z"},"links":{"citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:848c34134cdc29d9c7569fdbe4f8b6b74c0ddd2b2ed22d77b9ef825d0cdcda09","observation_id":"2be88e2c-3448-46f0-b22f-a044ef8a35dd","resolution":{"observed_at":"2026-08-16T11:28:46.977080Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:28:46.962394Z","title":"Nexus: A GPU Cluster Engine for Accelerating DNN-based Video Analysis","venue":null,"work_id":"562b7cb7-5a39-4214-bb0c-37e40a908b5a","year":2019},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:46.333695Z"},"links":{"citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:76225528137646e509b3f5787c7fc7762124fd27bddb12f92ed07923ada915b0","observation_id":"4caf3b4f-f7dc-47ae-971a-74e95e26524b","resolution":{"observed_at":"2026-08-16T11:28:46.966318Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:28:46.951048Z","title":"P., Galley, M., Caruana, R., and Gao, J","venue":null,"work_id":"e9cd044a-5730-4a00-8b70-902a0aa21a80","year":null},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:46.337152Z"},"links":{"citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:b783e45327eed34255f067c208c6b8cc475b775726dda953c94adb4928a52722","observation_id":"20aab3b9-b84b-408b-9534-a529abca3545","resolution":{"observed_at":"2026-08-16T11:28:46.955037Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:28:46.939298Z","title":"CVA6 RISC-V Virtualization: Architecture, Microarchitecture, and Design Space Exploration","venue":null,"work_id":"20f14140-c18c-4876-87b2-85a13a6e8710","year":2023},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:46.342351Z"},"links":{"citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:8318065e5ff3f2e4d773cc74cc5988642be28e40e9d76da26021aa5deccd74f1","observation_id":"9ac6df85-4b6a-4406-8533-517727ecdff1","resolution":{"observed_at":"2026-08-16T11:28:46.943192Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:28:46.926733Z","title":"Demystify- ing the Secure Enclave Processor","venue":null,"work_id":"3f333625-ab66-45ed-9a90-556e1868e211","year":2015},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:46.352358Z"},"links":{"citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:f6c58aa6c362c45153928df0a99c152a2727bd3c02c8fdb5ad029ec33b96c05d","observation_id":"1922ab76-cc57-46fc-befe-55299bc12350","resolution":{"observed_at":"2026-08-16T11:28:46.930732Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:28:46.914391Z","title":"Luna USB HSM Documentation: Multifactor Quorum Au- thentication","venue":null,"work_id":"54e0fafd-c034-42d0-834d-3a965974d70c","year":2024},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:46.379071Z"},"links":{"citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:793f87af5c0fd6319fcf3bb2b94a5a345f630f7f875fee1b49b4c13ba005ae97","observation_id":"1d7aa34e-26f1-44fd-9773-4f616fd560cf","resolution":{"observed_at":"2026-08-16T11:28:46.918824Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2401.01313","last_updated":"2024-01-08T16:19:17Z","snapshot_observed_at":"2026-08-15T22:25:16.598230Z","submitted_at":"2024-01-02T17:56:30Z","title":"A Comprehensive Survey of Hallucination Mitigation Techniques in Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.01313","snapshot_observed_at":"2026-08-16T11:28:46.391565Z","title":"A comprehensive survey of hallucination mitiga- tion tech- niques in large language models, January 8, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:46.391565Z"},"links":{"cited_paper":"/paper/2401.01313","citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:3a2dfb129ebae499c8b14a5874aad0fd32e315e4f996d1befe59a2212495515d","observation_id":"f4c9582b-4535-40f2-9aa7-d2183aa6d4c8","resolution":{"observed_at":"2026-08-16T11:28:46.391565Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:28:46.902327Z","title":"A Comprehen- sive Implementation and Evaluation of Direct Interrupt Delivery","venue":null,"work_id":"469b8304-32ac-43b8-8ba3-865ae743c284","year":2015},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:46.395010Z"},"links":{"citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:c582daa2e4004f8a896c2d5630ebc9ecd4133c897d0395c7757a8cec2ed9611b","observation_id":"50f85695-9f74-4c62-8f3c-f481d19811ef","resolution":{"observed_at":"2026-08-16T11:28:46.906309Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:28:46.890539Z","title":"Simultaneous multithreading: Maximizing On-chip Parallelism","venue":null,"work_id":"290d860e-d9b8-40ac-b759-53df787d1ba8","year":1995},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:46.398110Z"},"links":{"citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:14a35f62b8a60fea97d46f205066c9105fc5de09f3b047d39802ec24710a3c8d","observation_id":"fc753b45-edee-42b6-a797-a7a15883731e","resolution":{"observed_at":"2026-08-16T11:28:46.894548Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:28:46.878464Z","title":"Levels of AI Self-Improvement","venue":null,"work_id":"6449a370-892a-4763-8837-8d98ee8e9d7f","year":2018},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:46.402198Z"},"links":{"citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:2653df416df96ad4695b0a6c6acf0a966e705dee76b1a6c2cec9ebe33091ee89","observation_id":"a2f59140-62cc-4e08-874e-9a7aacc17ba3","resolution":{"observed_at":"2026-08-16T11:28:46.882893Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2305.04388","last_updated":"2023-12-09T21:25:02Z","snapshot_observed_at":"2026-08-12T21:03:44.597326Z","submitted_at":"2023-05-07T22:44:25Z","title":"Language Models Don't Always Say What They Think: Unfaithful Explanations in Chain-of-Thought Prompting","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.04388","snapshot_observed_at":"2026-08-16T11:28:46.406165Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:46.406165Z"},"links":{"cited_paper":"/paper/2305.04388","citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:5a23ebbb3d84c70c5a510be5b3bf811147b0bd07578755c4c1f2c1ec82f1e991","observation_id":"87b1db68-70bc-4682-878b-f945b7acb84c","resolution":{"observed_at":"2026-08-16T11:28:46.406165Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:28:46.866966Z","title":"Intel virtualization technology","venue":null,"work_id":"98703b24-d542-4579-90bb-4153899483cb","year":2005},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:46.411003Z"},"links":{"citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:6be54b6f6961c5f31aa26cf079188b51c2d3c7c944e487a23c3dac31fd082131","observation_id":"23dfcdd1-1cd9-4208-82aa-7d0211f793c2","resolution":{"observed_at":"2026-08-16T11:28:46.870869Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:28:46.850085Z","title":"International AI Safety Report: The Inter- national Scientific Report on the Safety of Advanced AI, February 18","venue":null,"work_id":"237596dc-33b7-4105-b4ce-2ee1444a79f5","year":null},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:46.416512Z"},"links":{"citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:31851a6219a685ae4346c0d81696d1e80b174b4721efdadb9474729d2fba0727","observation_id":"557af589-7793-4a95-abc8-6dba37cba9d9","resolution":{"observed_at":"2026-08-16T11:28:46.855493Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:28:46.826256Z","title":"NUCLEAR ARMS CONTROL: U.S","venue":null,"work_id":"f0066fd9-6c7b-41de-9eb3-d6e081bb19a7","year":2023},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:46.424673Z"},"links":{"citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:16971b7aaab364f6f5a350e1f65957b585c1d7d42b2763dc96be1d4dbad23205","observation_id":"19ef6b28-2c28-43f1-a5eb-bae3aaac562c","resolution":{"observed_at":"2026-08-16T11:28:46.830300Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:28:46.814220Z","title":"Graviton: Trusted Execution Environments on GPUs","venue":null,"work_id":"0e1eea61-7f7e-4f52-a0c6-094febd34d4d","year":2018},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:46.428514Z"},"links":{"citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:3841fb03c9f563bf3c599bc90f239c2cad9ca6a791f473af5fe4ba6530bfddb3","observation_id":"3feae6fe-96f7-4262-8902-ce548cc0108a","resolution":{"observed_at":"2026-08-16T11:28:46.818334Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:28:46.800129Z","title":"In Proceedings of the IEEE Symposium on Security and Privacy (May 2010), pp","venue":null,"work_id":"28c60ca6-a6cc-4a51-b54a-14dcf2b90ba0","year":2010},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:46.432223Z"},"links":{"citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:e5f472cfb66b05943888238c4cf382c29de224597cbf2883a7602f2ca6f77168","observation_id":"b1405117-b773-4c7b-9748-9ae60f93e92b","resolution":{"observed_at":"2026-08-16T11:28:46.805549Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:28:46.788033Z","title":"The Facebook Files, January 12, 2022","venue":null,"work_id":"eb781c8e-abb1-40c3-baa8-af316ea395df","year":2022},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":74,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:46.435933Z"},"links":{"citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:509f02e1cabfd74018133c3c77703913466f32b9786803034775414371b0983a","observation_id":"db6bbd8c-b71b-479d-b366-150437aa56aa","resolution":{"observed_at":"2026-08-16T11:28:46.792219Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:28:46.774325Z","title":"F., and Y arom, Y","venue":null,"work_id":"10b180cd-4b11-4897-849d-b9f75e551cb6","year":2018},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":75,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:46.439894Z"},"links":{"citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:b8e56d350d4216586eb8e0887e081a3352e235127bc96b5f3968e8e0b77d4ca1","observation_id":"e9b18133-a716-4daf-af1e-a417b9ded3de","resolution":{"observed_at":"2026-08-16T11:28:46.779835Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:28:46.761818Z","title":"K., Benini, L., and Guillotine: Hypervisors for Isolating Malicious AIs Heiser, G","venue":null,"work_id":"b92a614a-b329-4a6d-9a84-fd1c61d75281","year":2021},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":76,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:46.443952Z"},"links":{"citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:546143be6c3bb12e382c16bcb664ed769d9a5f2882cbf2a9a3ce6dfc047ec082","observation_id":"69b684a7-962c-4514-96ca-d1c9f2086870","resolution":{"observed_at":"2026-08-16T11:28:46.766249Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:28:46.748798Z","title":"Funda- mental Limitations of Alignment in Large Language Models, June 3,","venue":null,"work_id":"9089308e-2bc9-4045-b1e7-62222d468e35","year":null},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":77,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:46.447725Z"},"links":{"citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:fae0392f442d3827f5f870cdd400000b051eaa063486fa746abd53cf8260dbfb","observation_id":"ba487c7a-9ff8-4c9d-84cd-2ea65b10294a","resolution":{"observed_at":"2026-08-16T11:28:46.752918Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:28:46.735607Z","title":"A Word is Worth A Thousand Dollars: Adversarial Attack on Tweets Fools Stock Prediction","venue":null,"work_id":"d9ff8275-e78a-4ffb-a359-c6373ada7535","year":2022},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":78,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:46.451551Z"},"links":{"citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:3e7d38c7f6222e1540e09f386214a7d81006c183640d841729a2dc3400a1f6f3","observation_id":"9b5b28ed-a36a-4a2f-8baa-a32e886dbb04","resolution":{"observed_at":"2026-08-16T11:28:46.740223Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:28:46.723789Z","title":"Journal of Consciousness Studies 19 , 1-2 (2012), 194–214","venue":null,"work_id":"7695f69c-a879-4fe8-99db-c4eccaad5daf","year":2012},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":79,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:46.455233Z"},"links":{"citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:e4eaac3dc6bae7a2ee00c67b2269ecd9fede1b74916014b7e303a106392e72e6","observation_id":"251ec236-c531-4c38-b816-f5b16ccb0700","resolution":{"observed_at":"2026-08-16T11:28:46.727467Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:28:46.711007Z","title":"The unreliability of explanations in few-shot prompting for textual reasoning","venue":null,"work_id":"fb38e357-4646-49a2-8a30-4ec4e5db0d5b","year":2022},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":80,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:46.459214Z"},"links":{"citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:eed0d5ef77e11925189fe36cff6fc80cb030da52556c5b467d790457e0225bb5","observation_id":"cb6d3128-799d-4e57-b45a-f5b98d9d47eb","resolution":{"observed_at":"2026-08-16T11:28:46.715192Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:28:46.696827Z","title":"SHEPHERD: Serving DNNs in the Wild","venue":null,"work_id":"e06a27b3-8a2d-458f-a74a-b77d346802e8","year":2023},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":81,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:46.463326Z"},"links":{"citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:dfd3006210325a30dab13088f4c4a388210cf97f24d5c28dca3de6a7a5143220","observation_id":"2e26b0d8-7efb-4ed6-b47a-94805e6f5735","resolution":{"observed_at":"2026-08-16T11:28:46.701240Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.01405","last_updated":"2025-03-03T06:14:14Z","snapshot_observed_at":"2026-07-06T16:26:38.284922Z","submitted_at":"2023-10-02T17:59:07Z","title":"Representation Engineering: A Top-Down Approach to AI Transparency","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.01405","snapshot_observed_at":"2026-08-16T11:28:46.467263Z","title":"J., W ang, Z., Mallen, A., Basart, S., Koyejo, S., Song, D., Fredrik- son, M., Kolter, J","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":82,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:46.467263Z"},"links":{"cited_paper":"/paper/2310.01405","citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:9b60fe2420130c96cc22d3f8e2d75da788dad069181ee5b022a3b19b3adc7de3","observation_id":"3b663548-22d5-4752-8630-437329788087","resolution":{"observed_at":"2026-08-16T11:28:46.467263Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:28:46.682216Z","title":"Im- proving Alignment and Robustness with Circuit Breakers, July 12,","venue":null,"work_id":"7ef92a17-c58c-47ef-bd74-03e464a8d812","year":null},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":83,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:46.471620Z"},"links":{"citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:28a7015a143126147c9365380291a2cbac7da2d37552d7aa338cbcc85a7d32be","observation_id":"10518f21-5e0f-435c-a11f-1b9a438d65b8","resolution":{"observed_at":"2026-08-16T11:28:46.687839Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:28:46.838659Z","title":null,"venue":null,"work_id":"40b6cb48-874d-48b3-a695-96bf070bcbee","year":2025},"citing_paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs","version":1},"reference_index":2025,"source":"pdf_text","source_observed_at":"2026-08-16T11:28:46.420661Z"},"links":{"citing_paper":"/paper/2504.15499"},"observation_digest":"sha256:a705fbe4e8e12d55090a5af19916bfd0b967f754aab8c7b056367769a58fa2b9","observation_id":"a4338d4e-fe4b-4c2c-90ef-60ebc5d8ad5d","resolution":{"observed_at":"2026-08-16T11:28:46.842541Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2504.15499","last_updated":"2025-04-22T00:29:18Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-20T16:45:37.285794Z","submitted_at":"2025-04-22T00:29:18Z","title":"Guillotine: Hypervisors for Isolating Malicious AIs"},"reference_resolution":{"displayed":84,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":20,"verified_exact":0,"verified_fuzzy":64},"total_outbound_references":84},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"thesis":"As of 21 August 2026, this Paper Citation Record lists 84 of 84 outbound references and 0 inbound Pith citation observations for arXiv:2504.15499."}