Pith. sign in

Paper Citation Record · LEDGER

CTRAP: Embedding Collapse Trap to Safeguard Large Language Models from Harmful Fine-Tuning

As of 8 August 2026, this Paper Citation Record lists 24 of 24 outbound references and 3 inbound Pith citation observations for arXiv:2505.16559.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2505.16559 v1

Coverage vector

measured 24 of 24 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-07T15:02:35.374322Z

measured 27 of 27 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-08T06:32:00.761636+00:00

measured 3 of 3 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-08-01T07:46:24.901516Z

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: arxiv_reference, observed 2026-06-30T21:05:04.066789Z

Reference resolution

24 of 24 outbound references displayed

  • verified exact0
  • verified fuzzy15
  • unresolved8
  • parse uncertain0
  • malformed identifier1
  • metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation 47eac5f4-625d-49d8-a030-1554e5ee909a · outbound

This paper cites Guidelines: • The answer NA means that the abstract and introduction do not include the claims made in the paper.

CTRAP: Embedding Collapse Trap to Safeguard Large Language Models from Harmful Fine-Tuning Guidelines: • The answer NA means that the abstract and introduction do not include the claims made in the paper

Reference 1

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T15:02:37.960991Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-07T15:02:34.224927Z digest=sha256:4ce5f97022d3863b1022edf854fa00f59c3231adcca6e74404b93da0270822af

Observation fc8b35b5-a7d2-4b17-9f04-d051e690e0b7 · outbound

This paper cites Guidelines: • The answer NA means that the paper has no limitation while the answer No means that the paper has limitations, but those are not discussed in the paper.

CTRAP: Embedding Collapse Trap to Safeguard Large Language Models from Harmful Fine-Tuning Guidelines: • The answer NA means that the paper has no limitation while the answer No means that the paper has limitations, but those are not discussed in the paper

Reference 2

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T15:02:37.811234Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-07T15:02:34.282326Z digest=sha256:a26988cea4dd65f8628f03505ff097c0aae9532a21faf4a94c38b946ef62088b

Observation 8990bf3b-8501-47b8-8682-5589519135b9 · outbound

This paper cites Guidelines: • The answer NA means that the paper does not include theoretical results.

CTRAP: Embedding Collapse Trap to Safeguard Large Language Models from Harmful Fine-Tuning Guidelines: • The answer NA means that the paper does not include theoretical results

Reference 3

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T15:02:37.684058Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-07T15:02:34.333474Z digest=sha256:12f48e4b5452e87952eab0cc9bff746fddfe1c11ff9e0b872a58bd04ab2b32bf

Observation e7f5e475-6ba0-425f-a543-7848c54b26d0 · outbound

This paper cites LoRA: Low-Rank Adaptation of Large Language Models.

CTRAP: Embedding Collapse Trap to Safeguard Large Language Models from Harmful Fine-Tuning LoRA: Low-Rank Adaptation of Large Language Models

Reference 4

Resolution
unresolved
no resolver link, observed 2026-08-07T15:02:33.819765Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-07T15:02:33.819765Z digest=sha256:f16ab68f641d9c871d9d6f04e778c7ef92644acd2b8d18a8e2a283dba345bb5f

Observation bb4026ff-ba31-4594-bd31-a1b658802edc · outbound

This paper cites Open Problems in Technical AI Governance.

CTRAP: Embedding Collapse Trap to Safeguard Large Language Models from Harmful Fine-Tuning Open Problems in Technical AI Governance

Reference 5

Resolution
unresolved
no resolver link, observed 2026-08-07T15:02:33.948122Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-07T15:02:33.948122Z digest=sha256:9289cb6d25fd3993b3c6013b20d83a0781285a54bdf117abd03cd28b97588801

Observation e78ab843-a81a-4a19-b7b2-a8e195c0841d · outbound

This paper cites Evaluating Defences against Unsafe Feedback in RLHF.

CTRAP: Embedding Collapse Trap to Safeguard Large Language Models from Harmful Fine-Tuning Evaluating Defences against Unsafe Feedback in RLHF

Reference 6

Resolution
unresolved
no resolver link, observed 2026-08-07T15:02:33.988579Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-07T15:02:33.988579Z digest=sha256:55bee04c5662830354ed868c1475243649efc3868382415664202c114252358f

Observation 1cbd90fe-224d-45dd-bbd2-4e10f50e66a8 · outbound

This paper cites Gemma 2: Improving Open Language Models at a Practical Size.

CTRAP: Embedding Collapse Trap to Safeguard Large Language Models from Harmful Fine-Tuning Gemma 2: Improving Open Language Models at a Practical Size

Reference 7

Resolution
unresolved
no resolver link, observed 2026-08-07T15:02:34.058916Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-07T15:02:34.058916Z digest=sha256:00f70143c2f826fb761c7f2aa67b886a45d3bb2c511f00f6f94cb4a483057a7a

Observation 84298f1d-7dff-4100-973e-0df839cc5d04 · outbound

This paper cites Qwen2 Technical Report.

CTRAP: Embedding Collapse Trap to Safeguard Large Language Models from Harmful Fine-Tuning Qwen2 Technical Report

Reference 8

Resolution
malformed identifier
no resolver link, observed 2026-08-07T15:02:34.151266Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-07T15:02:34.151266Z digest=sha256:b96ec60fcca19ae1acc3c08809dc5846df9fc5515682d1d6b0b5db2373dc69b0

Observation 1b62cd71-aa38-417c-8a8f-534c1df27f3b · outbound

This paper cites Guidelines: • The answer NA means that the authors have not reviewed the NeurIPS Code of Ethics.

CTRAP: Embedding Collapse Trap to Safeguard Large Language Models from Harmful Fine-Tuning Guidelines: • The answer NA means that the authors have not reviewed the NeurIPS Code of Ethics

Reference 9

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T15:02:36.772259Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-07T15:02:34.816773Z digest=sha256:b20b6ab4e67a2a9e809157bbdc8395f0a0f3b020e3cdb96d708bd73a0f44b99b

Observation 3c4dc9c7-5a88-4f59-94e4-b5ca76daa4e4 · outbound

This paper cites Guidelines: • The answer NA means that there is no societal impact of the work performed.

CTRAP: Embedding Collapse Trap to Safeguard Large Language Models from Harmful Fine-Tuning Guidelines: • The answer NA means that there is no societal impact of the work performed

Reference 10

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T15:02:36.563700Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-07T15:02:34.916038Z digest=sha256:773bb0ea263befa52170de7073705385cf72bdc8e282158a159ffd28f2b488d9

Observation f2a6db98-d21d-4027-8f4c-7070736d2c28 · outbound

This paper cites Guidelines: • The answer NA means that the paper poses no such risks.

CTRAP: Embedding Collapse Trap to Safeguard Large Language Models from Harmful Fine-Tuning Guidelines: • The answer NA means that the paper poses no such risks

Reference 11

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T15:02:36.459060Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-07T15:02:35.000232Z digest=sha256:175522cfe6d6c6384491d439b325142c4201ddc7e40a7cc8d335c5b972324d52

Observation 12932260-186e-4354-b366-3a7235807a36 · outbound

This paper cites A more detailed version is in Appendix A.

CTRAP: Embedding Collapse Trap to Safeguard Large Language Models from Harmful Fine-Tuning A more detailed version is in Appendix A

Reference 12

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T15:02:37.599162Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-07T15:02:34.418173Z digest=sha256:1a2d81d306ea5e24ae4865c6a7cbdaba4d459fd44e8267d58558ab5d63d4e063

Observation 14673d80-893b-4d0a-be1e-be9012348322 · outbound

This paper cites Guidelines: • The answer NA means that paper does not include experiments requiring code.

CTRAP: Embedding Collapse Trap to Safeguard Large Language Models from Harmful Fine-Tuning Guidelines: • The answer NA means that paper does not include experiments requiring code

Reference 13

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T15:02:37.397411Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-07T15:02:34.559039Z digest=sha256:eb10a708626962fed4aecfd56eed5824380a3e2f2ead25282b97a1ef0a1b12d7

Observation 8e63675a-aed4-41c8-b6a4-b4e44a93cbdd · outbound

This paper cites A more detailed version is in Appendix A.

CTRAP: Embedding Collapse Trap to Safeguard Large Language Models from Harmful Fine-Tuning A more detailed version is in Appendix A

Reference 14

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T15:02:37.273431Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-07T15:02:34.614013Z digest=sha256:f10eccddbd14c52838054cbf08f1030f8d2e1a6c027996684c5938e2cbaeb555

Observation ac28eb24-915c-4f3d-a34d-208d71f0f903 · outbound

This paper cites Guidelines: • The answer NA means that the paper does not include experiments.

CTRAP: Embedding Collapse Trap to Safeguard Large Language Models from Harmful Fine-Tuning Guidelines: • The answer NA means that the paper does not include experiments

Reference 15

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T15:02:37.096302Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-07T15:02:34.665241Z digest=sha256:768f4201acdad4d00d42062dcd42c73dbbaf438fb6d88cb11ce2f15133ebf185

Observation 5e9f117b-10e3-4ac0-90f9-5e76ebbce63e · outbound

This paper cites Guidelines: • The answer NA means that the paper does not include experiments.

CTRAP: Embedding Collapse Trap to Safeguard Large Language Models from Harmful Fine-Tuning Guidelines: • The answer NA means that the paper does not include experiments

Reference 16

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T15:02:36.899419Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-07T15:02:34.740558Z digest=sha256:38229e951e1818e1bbbab4d14087bbf4ba2f8fb66ed5284a201fc863403be484

Observation c513294f-8e28-4519-9b52-c30b3e4d6cf9 · outbound

This paper cites Guidelines: • The answer NA means that the paper does not use existing assets.

CTRAP: Embedding Collapse Trap to Safeguard Large Language Models from Harmful Fine-Tuning Guidelines: • The answer NA means that the paper does not use existing assets

Reference 20

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T15:02:36.359686Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-07T15:02:35.079947Z digest=sha256:de9e51f9cc45c07e7817b07f626524c22431c2810cb640a73074f525aacfe240

Observation c9633bff-69c2-4211-836d-22008d98502b · outbound

This paper cites Guidelines: • The answer NA means that the paper does not release new assets.

CTRAP: Embedding Collapse Trap to Safeguard Large Language Models from Harmful Fine-Tuning Guidelines: • The answer NA means that the paper does not release new assets

Reference 21

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T15:02:36.094759Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-07T15:02:35.163894Z digest=sha256:d6cb79d147bd8b88decbcdc6a9f0b5f61e219a22e66a6c4b8a6529af76bd29f5

Observation 8f2e6eff-983e-453b-9d64-b5766ce70ee3 · outbound

This paper cites Guidelines: • The answer NA means that the paper does not involve crowdsourcing nor research with human subjects.

CTRAP: Embedding Collapse Trap to Safeguard Large Language Models from Harmful Fine-Tuning Guidelines: • The answer NA means that the paper does not involve crowdsourcing nor research with human subjects

Reference 22

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T15:02:35.901466Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-07T15:02:35.239698Z digest=sha256:49e1ce529e00a2f558e86216c7cc6b836b24ba3b9197d67489bcab614e362929

Observation 46dec3ee-c89c-461d-82a1-3ee33660ee97 · outbound

This paper cites Guidelines: • The answer NA means that the paper does not involve crowdsourcing nor research with human subjects.

CTRAP: Embedding Collapse Trap to Safeguard Large Language Models from Harmful Fine-Tuning Guidelines: • The answer NA means that the paper does not involve crowdsourcing nor research with human subjects

Reference 23

Resolution
unresolved
no resolver link, observed 2026-08-07T15:02:35.319220Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-07T15:02:35.319220Z digest=sha256:b434cb679cf7285ddcd86411bb56e04310ea6ba23424c02a5314717a04d2e213

Observation b1210ffd-39ff-49eb-86d1-571cc18f6a94 · outbound

This paper cites Answer: [NA] Justification: This research does not incorporate LLMs as any important, original, or non- standard components in its core methodology development.

CTRAP: Embedding Collapse Trap to Safeguard Large Language Models from Harmful Fine-Tuning Answer: [NA] Justification: This research does not incorporate LLMs as any important, original, or non- standard components in its core methodology development

Reference 24

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T15:02:35.722553Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-07T15:02:35.374322Z digest=sha256:3b642b7c3df624678077ee8d4334b61ce5425ad4f3de7fc3e1c7f3f48d7e4a5f

Observation 945327e5-42c1-4dcd-9ef0-14fb7d36d7b5 · outbound

This paper cites Toward Secure Tuning: Mitigating Security Risks from Instruction Fine-Tuning.

CTRAP: Embedding Collapse Trap to Safeguard Large Language Models from Harmful Fine-Tuning Toward Secure Tuning: Mitigating Security Risks from Instruction Fine-Tuning

Reference 2023

Resolution
unresolved
no resolver link, observed 2026-08-07T15:02:33.690065Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-07T15:02:33.690065Z digest=sha256:9f92ab387ada293cb01ce0874f8051fc12910466dd2627ffa5e80de0b44d8e58

Observation a033fe85-b3d2-477b-b4a3-7b9377c2a16a · outbound

This paper cites Do as I do (Safely): Mitigating Task-Specific Fine-tuning Risks in Large Language Models.

CTRAP: Embedding Collapse Trap to Safeguard Large Language Models from Harmful Fine-Tuning Do as I do (Safely): Mitigating Task-Specific Fine-tuning Risks in Large Language Models

Reference 2024

Resolution
unresolved
no resolver link, observed 2026-08-07T15:02:33.756311Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-07T15:02:33.756311Z digest=sha256:88b08c1d474120b8f42ca0f674a14b6792b8fe2aec3c68ce4ce7bb59a2ea5a76

Observation 4257c855-f99b-4d55-ae36-2d0b4c91a86b · outbound

This paper cites Safety-Tuned LLaMAs: Lessons From Improving the Safety of Large Language Models that Follow Instructions.

CTRAP: Embedding Collapse Trap to Safeguard Large Language Models from Harmful Fine-Tuning Safety-Tuned LLaMAs: Lessons From Improving the Safety of Large Language Models that Follow Instructions

Reference 2025

Resolution
unresolved
no resolver link, observed 2026-08-07T15:02:33.672549Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-07T15:02:33.672549Z digest=sha256:56102ea9f4d47eb95737730d94670064830f661e01db56ed92e6734c55a79da6

Pith citing papers

Observation 117067a0-9e10-4a3a-90b8-f3425c596817 · inbound

Token Buncher: Shielding LLMs from Harmful Reinforcement Learning Fine-Tuning cites this paper.

Token Buncher: Shielding LLMs from Harmful Reinforcement Learning Fine-Tuning CTRAP: Embedding Collapse Trap to Safeguard Large Language Models from Harmful Fine-Tuning

Reference 61

Resolution
verified exact
arxiv_id, observed 2026-05-18T20:41:50.461365Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-05-18T20:40:44.496392Z digest=sha256:ca82e57889fc2a94abf3a338de42bebe7de14798d4e56821f2b0ddaf639b655e

Observation 8367f1ff-3e44-4ffa-85af-482337dac97c · inbound

One Step to the Side: Why Defenses Against Malicious Finetuning Fail Under Adaptive Adversaries cites this paper.

One Step to the Side: Why Defenses Against Malicious Finetuning Fail Under Adaptive Adversaries CTRAP: Embedding Collapse Trap to Safeguard Large Language Models from Harmful Fine-Tuning

Reference 46

Resolution
verified exact
arxiv_id, observed 2026-06-30T21:05:04.068421Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-06-30T21:01:25.549340Z digest=sha256:e1e4c2181ca50b2a0885bc212289f7c81b1b9081b463257e45fb38937f97a6b5

Observation 39c89248-31c4-49ef-b10c-8831b14fef65 · inbound

Emergent Misalignment Recruits a Pre-existing Persona Subspace cites this paper.

Emergent Misalignment Recruits a Pre-existing Persona Subspace CTRAP: Embedding Collapse Trap to Safeguard Large Language Models from Harmful Fine-Tuning

Reference 236

Resolution
unresolved
no resolver link, observed 2026-08-01T07:46:24.901516Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-01T07:46:24.901516Z digest=sha256:dcaca6cd6c5e7416299f6f5a4496043c318232d3cac4593b590e263566f964af