{"as_of":"2026-08-10T10:28:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:90468ff2e8ba65e6408f9f296517883b8dd4b358eb30490e77220c1461bf90a7","coverage":[{"denominator":41,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":41,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T06:13:04.858860Z","state":"measured"},{"denominator":41,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":41,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-10T06:31:04.303077+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2506.06003/citation-record","integrity":"/paper/2506.06003/integrity","json":"/paper/2506.06003/citation-record.json","paper":"/paper/2506.06003"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:13:05.496460Z","title":"Membership inference attacks against machine learning models","venue":null,"work_id":"674a4cb6-fb93-48c3-9f7e-f5864ae56d9e","year":2017},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.262436Z"},"links":{"citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:8906944c22f63d1eb7e7a762347fde5e11cc130ed1f272ffdd6019463c7f6639","observation_id":"39a837a7-ad8e-4c14-a0b9-47c42c6a3db0","resolution":{"observed_at":"2026-08-07T06:13:05.500677Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:13:05.482734Z","title":"Pythia: A suite for analyzing large language models across training and scaling","venue":null,"work_id":"e5e593b4-eb15-4232-8aec-6755a5ed87e9","year":2023},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.333503Z"},"links":{"citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:c4ff8e70204312cf396f7b92eacf81ee76360158692867f20acf5f45f4b00cb4","observation_id":"dc6318f2-8511-4b76-acf5-6dc20ef4bcbd","resolution":{"observed_at":"2026-08-07T06:13:05.487035Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:13:05.468129Z","title":"The times sues openai and microsoft over a.i","venue":null,"work_id":"31caafd7-c139-4766-a407-989fb9dfc57a","year":2023},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.419355Z"},"links":{"citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:fa0db54ce9d9805c344a79ee560edc058a5090125d2d736752841f6f6d999606","observation_id":"93531645-fc3d-448b-8721-092b604d9d53","resolution":{"observed_at":"2026-08-07T06:13:05.472996Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:13:05.454272Z","title":"Us authors’ copyright lawsuits against openai and microsoft combined in new york with newspaper actions","venue":null,"work_id":"bf8bd61d-7e73-4a43-906a-383d1918798c","year":2025},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.506727Z"},"links":{"citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:8587f2be3f7faef72da4b458e7b1c9294cbe832e25c876d9feb22b2bca1c70c6","observation_id":"bc6b76eb-6d73-4c07-aec4-63399430447f","resolution":{"observed_at":"2026-08-07T06:13:05.458610Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:13:05.439365Z","title":"Publisher ziff davis sues openai for copyright infringement","venue":null,"work_id":"22485aba-b565-45aa-9dfb-c583cb2a51de","year":2025},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.593453Z"},"links":{"citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:070335088ebb8a8e5cdb455f75efd52b06f4aa91c1906d454610d1e589438eed","observation_id":"1ea4abce-1244-4243-80e4-39d8df9d9404","resolution":{"observed_at":"2026-08-07T06:13:05.444141Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:13:05.411035Z","title":"Understanding the eu ai act: Requirements and next steps","venue":null,"work_id":"f5b6eeb8-44e9-4ba7-be12-1109749f0e10","year":2024},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.702132Z"},"links":{"citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:8c8b5650056da9fc167bf1e16c7d122a04a8da5618791083657afc4f781628dc","observation_id":"25e2931d-7b4e-4ddf-916b-48f7ad7cc98d","resolution":{"observed_at":"2026-08-07T06:13:05.415551Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:13:05.396693Z","title":"Transparency and accountability in ai systems: safeguarding wellbeing in the age of algorithmic decision-making.Frontiers in Human Dynamics, 6:1421273, 2024","venue":null,"work_id":"a8f75caa-9c30-4e63-921f-de52da9e3eda","year":2024},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.708515Z"},"links":{"citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:7f8f6f6b32ca9ed1d609e8edeb3f1f0da019cf51cd1e78e606d34845542b0737","observation_id":"aa3b5c36-ed82-4b4a-9679-91a2ad2c0a46","resolution":{"observed_at":"2026-08-07T06:13:05.401178Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:13:05.382456Z","title":"Artificial intelligence bias auditing–current approaches, challenges and lessons from practice.Review of Accounting and Finance, (ahead-of-print), 2025","venue":null,"work_id":"4f4f6fe1-9781-49dc-bedd-cdb5c842466d","year":2025},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.714651Z"},"links":{"citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:945de45e0b8159e4ca0d39877f4d58978cb4072e755c563ed2908b227a3fd0fe","observation_id":"d11601b1-99a4-4464-a206-08c30c6e51b5","resolution":{"observed_at":"2026-08-07T06:13:05.387247Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:13:05.368563Z","title":"Do Membership Inference Attacks Work on Large Language Models? InProc","venue":null,"work_id":"736bb366-ae49-4449-b4cf-8279132a4965","year":2024},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.720270Z"},"links":{"citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:e602e89bd6169d88e69bd0abed70d1bde0f458be4a2c2b3d02ffb5fcdab036a0","observation_id":"72f3a480-2e86-4363-9476-bd60ae40f0eb","resolution":{"observed_at":"2026-08-07T06:13:05.372958Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2409.19798","last_updated":"2025-03-07T14:20:23Z","snapshot_observed_at":"2026-08-10T10:00:07.962516Z","submitted_at":"2024-09-29T21:49:32Z","title":"Membership Inference Attacks Cannot Prove that a Model Was Trained On Your Data","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.19798","snapshot_observed_at":"2026-08-07T06:13:04.724789Z","title":"Position: Membership Inference Attacks Cannot Prove that a Model Was Trained On Your Data.arXiv preprint arXiv:2409.19798, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.724789Z"},"links":{"cited_paper":"/paper/2409.19798","citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:6a40f27e004c8278171558570da88c8590f6afd61116f8f9b0918c3198efbf7a","observation_id":"46da7838-d8a7-46bc-a8c6-f476d6370050","resolution":{"observed_at":"2026-08-07T06:13:04.724789Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.16201","last_updated":"2025-03-30T08:39:32Z","snapshot_observed_at":"2026-08-10T01:25:04.579166Z","submitted_at":"2024-06-23T19:40:11Z","title":"Blind Baselines Beat Membership Inference Attacks for Foundation Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.16201","snapshot_observed_at":"2026-08-07T06:13:04.729680Z","title":"Blind Baselines Beat Membership Inference Attacks for Foundation Models.arXiv preprint arXiv:2406.16201, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.729680Z"},"links":{"cited_paper":"/paper/2406.16201","citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:558c7898eaab4f89c25884c3ecb3e149d261f8b37a6d19b65e513068cb37561e","observation_id":"8eaa5759-0314-41c5-a184-6b38f69dae84","resolution":{"observed_at":"2026-08-07T06:13:04.729680Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:13:05.353907Z","title":"What Does it Mean for a Language Model to Preserve Privacy? InProc","venue":null,"work_id":"232a90d6-1e65-4275-a480-05c096c5d7ab","year":2022},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.734703Z"},"links":{"citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:a38756a3b4d386b5687fa9e84097a8dbfeac508a8584a50550951ea67331692b","observation_id":"a5914dc9-4666-4146-b146-7743bc0260bd","resolution":{"observed_at":"2026-08-07T06:13:05.358734Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:13:05.337952Z","title":"Language Models May Verbatim Complete Text They Were Not Explicitly Trained On","venue":null,"work_id":"9ce22006-c596-4d04-a908-2e44f2605f1e","year":2025},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.738908Z"},"links":{"citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:8dfcf9cc0da734ff423d539e3f7eb90bf0a02e76706d11df1bcef38b3f2ad92f","observation_id":"a4999c4f-6c4c-4440-8740-7768fcb79814","resolution":{"observed_at":"2026-08-07T06:13:05.342629Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:13:05.322311Z","title":"Poisoning Web-scale Training Datasets is Practical","venue":null,"work_id":"272b7cdd-f323-41dd-ac38-29a84c02745c","year":2024},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.743129Z"},"links":{"citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:b148429d858fa1ea10865d0f4645dd4d19fec74cc34c501f4655b8934ab79e13","observation_id":"d948d55a-f131-4b39-8721-7cd707e6d854","resolution":{"observed_at":"2026-08-07T06:13:05.327475Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:13:05.308350Z","title":"Persistent Pre-Training Poisoning of LLMs","venue":null,"work_id":"1feb3e43-f165-440b-bd45-4996a8b10d14","year":2025},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.747179Z"},"links":{"citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:ff01cc317c588b02ee52a4d122a496179e59034539cd3ab6a8df38a636990836","observation_id":"faa4b04c-aaad-4e54-bd54-535aee77829d","resolution":{"observed_at":"2026-08-07T06:13:05.312582Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:13:05.293064Z","title":"Privacy Risk in Machine Learning: Analyzing the Connection to Overfitting","venue":null,"work_id":"eeadcd2d-392d-4902-9b5e-9d1258a33755","year":2018},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.751309Z"},"links":{"citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:53ec3d3ab89ba01d125a7c8e9689777da20945d026413030287152b943614cd8","observation_id":"d5190ea7-2b2d-4ee3-8d85-67f6eaafd35a","resolution":{"observed_at":"2026-08-07T06:13:05.298081Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:13:05.276770Z","title":"Detecting Pretraining Data from Large Language Models","venue":null,"work_id":"c50fa6a2-3775-432c-b531-50c282088566","year":2024},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.755691Z"},"links":{"citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:e5bd20c506a2b76d7e168c1f9c01f51856688043c942a9f33f9f2ff2547eb28e","observation_id":"ef95d0a0-d654-4640-aa4a-01eaa71b6582","resolution":{"observed_at":"2026-08-07T06:13:05.281876Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:13:05.260460Z","title":"Extracting Training Data from Large Language Models","venue":null,"work_id":"96a46860-02c7-4cfa-86ef-c03ef0f557c2","year":2021},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.760249Z"},"links":{"citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:85bf377ccf606482c5fb43d6c55dbc0d20f614456994742792d58eaf34cdce32","observation_id":"cc52e474-66d6-45c3-9878-98b2cae346e3","resolution":{"observed_at":"2026-08-07T06:13:05.265479Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:13:05.244938Z","title":"Membership Inference Attacks against Language Models via Neighbourhood Comparison","venue":null,"work_id":"9eb1e8b3-50a1-46aa-8393-75290de59621","year":2023},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.764405Z"},"links":{"citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:2cb1243ae2f712a23dbcff78f952c520351f8e4ed2ae145704b0d2146c65e015","observation_id":"5d6c831a-799a-440f-9ee3-9cfbbd48d061","resolution":{"observed_at":"2026-08-07T06:13:05.249998Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:13:05.229244Z","title":"LLM Dataset Inference: Did you train on my dataset? InProc","venue":null,"work_id":"a614abda-d894-4be7-a013-de94b684c254","year":2024},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.769102Z"},"links":{"citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:e58798c683d3de941f0e0471b90511423389217f8a20708f779fd8c7e6f1d2e4","observation_id":"36482bbf-9ee1-4ec4-822c-a119c995ca9a","resolution":{"observed_at":"2026-08-07T06:13:05.234078Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:13:05.213899Z","title":"On the Reliability of Membership Inference Attacks","venue":null,"work_id":"719dfb48-e6f3-4fc8-ac4a-965f940aeffc","year":2025},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.773278Z"},"links":{"citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:25ff18d5339fbdbbdf67931745d1efb69ce69958e04d714d7ae8bdb9312fdad1","observation_id":"48ac5662-af71-4229-ab4d-58194b8a59dd","resolution":{"observed_at":"2026-08-07T06:13:05.218834Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:13:05.198738Z","title":"Privacy Backdoors: Enhancing Membership Inference through Poisoning Pre-trained Models","venue":null,"work_id":"dd22c6d0-d341-4432-b4d9-819cc777aec8","year":2024},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.777491Z"},"links":{"citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:adf562c8bbcc8a0dea16c31ea75af9bc5a93c050b189c3420e77dd5d5baceb90","observation_id":"35e9b175-8018-41e9-94ad-7a36579b3ebe","resolution":{"observed_at":"2026-08-07T06:13:05.203508Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:13:04.781598Z","title":"Index for rating diagnostic tests.Cancer, 3(1):32–35, 1950","venue":null,"work_id":null,"year":1950},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.781598Z"},"links":{"citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:c2968fe411b5c4268a951a4b376d7feeab0617fe59824df2ea10931652e27fbb","observation_id":"90d9cd11-6011-4654-8ccc-271e94702a7f","resolution":{"observed_at":"2026-08-07T06:13:04.781598Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:13:05.173372Z","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","venue":null,"work_id":"d94f407e-2d11-47ad-9e83-5821c8a857c6","year":2018},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.786198Z"},"links":{"citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:c119429a65b9b2f73af9b5cb0554c8e505be8212df23964dbe79881308f07e3f","observation_id":"1392c37e-d812-4923-a4ac-7a0b587ac919","resolution":{"observed_at":"2026-08-07T06:13:05.178048Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:13:05.158372Z","title":"Intriguing Properties of Neural Networks","venue":null,"work_id":"791a6e39-ff0e-4a29-95b1-e89366bb7b73","year":2014},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.790934Z"},"links":{"citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:e9a5a65e63aaaba74df7b0357d965468619d33ba26ec07d9218f03f8a987c263","observation_id":"466717c2-70e4-4f78-859a-844f3fc24071","resolution":{"observed_at":"2026-08-07T06:13:05.163291Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-07-06T15:59:23.019044Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-08-07T06:13:04.795304Z","title":"Universal and transferable adversarial attacks on aligned language models.arXiv preprint arXiv:2307.15043, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.795304Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:29dbedb51a4f5e842ce351097f7a309d62cb63c4b92ba1cc97a7355dd957c9b8","observation_id":"abb0e583-3526-436f-998f-3911a460b749","resolution":{"observed_at":"2026-08-07T06:13:04.795304Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:13:05.143067Z","title":"Enhanced Membership Inference Attacks against Machine Learning Models","venue":null,"work_id":"e97be8ab-df62-4ae2-b0ce-57f51f7d1794","year":2022},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.799623Z"},"links":{"citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:ab3f13ecd685fd9bcebfe96ad8a679b8de47de23591bf09e353d8d8d43fd1cf6","observation_id":"ce2b49c1-81c7-4849-8085-586aff6d70e2","resolution":{"observed_at":"2026-08-07T06:13:05.148300Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:13:05.128524Z","title":"Noisy Neighbors: Efficient membership inference attacks against LLMs","venue":null,"work_id":"84f262a7-43e7-4075-8ebf-065a75941202","year":2024},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.803943Z"},"links":{"citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:391d48b2e547caef222e5f115f1a357f5c434d28ef651e95cb4ce7c1a3460d87","observation_id":"e6b1d89a-0305-464d-b4d7-83985592e72b","resolution":{"observed_at":"2026-08-07T06:13:05.133133Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.05672","last_updated":"2024-02-08T13:47:50Z","snapshot_observed_at":"2026-07-30T09:46:51.062184Z","submitted_at":"2024-02-08T13:47:50Z","title":"Multilingual E5 Text Embeddings: A Technical Report","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.05672","snapshot_observed_at":"2026-08-07T06:13:04.808603Z","title":"Multilingual E5 Text Embeddings: A Technical Report.arXiv preprint arXiv:2402.05672, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.808603Z"},"links":{"cited_paper":"/paper/2402.05672","citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:c47599dcd9df8908f67631defae9a009c75f71a47553bc582e77657275600255","observation_id":"5e9afcd8-c247-464a-b3f7-01e5b9539674","resolution":{"observed_at":"2026-08-07T06:13:04.808603Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:13:05.112060Z","title":"MTEB: Massive Text Embedding Benchmark","venue":null,"work_id":"d7e207b7-c3a2-4e12-8938-ec575dab37fc","year":2023},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.813250Z"},"links":{"citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:20d27c55ea123997a2367f2b4b2049d39ef2cad89433c635b4705d4b679cad98","observation_id":"0c65ee1c-5106-4c11-8bff-be08e47dcf35","resolution":{"observed_at":"2026-08-07T06:13:05.116746Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:13:05.097317Z","title":"PoisonedParrot: Subtle Data Poisoning Attacks to Elicit Copyright-Infringing Content from Large Language Models","venue":null,"work_id":"f86d0940-8b3e-411c-8187-44c00c3db507","year":2025},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.817881Z"},"links":{"citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:d7a283e7db3e826d9e891c9aceb5685a24a85844ee65c47d3a386521878f42c9","observation_id":"07208a3a-5d6d-4a19-aef6-0f58954c63aa","resolution":{"observed_at":"2026-08-07T06:13:05.102039Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:13:05.082261Z","title":"Adversarial Example Defense: Ensembles of Weak Defenses are not Strong","venue":null,"work_id":"b3c54ddc-ca24-43f0-9faf-715870518855","year":2017},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.822079Z"},"links":{"citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:3bdf79733c97036a7863eaf01c957a17aa39f98beb8600f528b71a9229bafe0a","observation_id":"b20183ea-cf22-4012-8c0d-d615a4fafa50","resolution":{"observed_at":"2026-08-07T06:13:05.086964Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:13:05.068598Z","title":"Persistent pre-training poisoning of LLMs","venue":null,"work_id":"42d00fd6-8428-435e-b8a4-c3d0d9dd602c","year":2025},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.826134Z"},"links":{"citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:e39a597cd1fdb19bed80114d53104cb91580ba84abf63963faec81aa7ded75d8","observation_id":"8b7aa45a-f9ab-46d3-83be-339080ae0f58","resolution":{"observed_at":"2026-08-07T06:13:05.072936Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:13:05.054342Z","title":"semantics","venue":null,"work_id":"145c6a68-964c-4469-822d-85d943162b29","year":null},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.830460Z"},"links":{"citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:1cbfb15656f2cbdc03b9194393119fddb0e7a66063afe19047c8d347e32520f1","observation_id":"7d247dab-1097-4b0d-ba63-bded9b9ff916","resolution":{"observed_at":"2026-08-07T06:13:05.058790Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:13:05.038287Z","title":"Here we can setλ= 0since replacing tokens automatically breaks upn-grams for free","venue":null,"work_id":"7f3f793a-59de-4b48-9011-2d7c4b676e26","year":null},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.835185Z"},"links":{"citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:b8aece57eeca2fe3be9c13aded4ea21503666bbe89537b96eafc7c1349f35687","observation_id":"de96853b-cf98-4733-b002-573de533de4a","resolution":{"observed_at":"2026-08-07T06:13:05.043295Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:13:05.022191Z","title":null,"venue":null,"work_id":"fb02c515-f443-45f7-aae1-6b2138082a21","year":null},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.839619Z"},"links":{"citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:9896c831aec708618d3096affc1b38f95dcb294d6281153d45c8f9bb59d2d32a","observation_id":"74084937-64f7-46d2-b8f1-e6ae0ddf5af5","resolution":{"observed_at":"2026-08-07T06:13:05.026702Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:13:05.006574Z","title":"4.ExactMatch:Same procedure as that forn-grams, but only a single iteration","venue":null,"work_id":"72e5cd4e-9dab-46a8-b985-67300befb260","year":null},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.843991Z"},"links":{"citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:ff8864a5e5a28df01d175fb9ef123bf33c98e8b6df4feb360449472c86e5c960","observation_id":"c92cec4d-c53d-4fbe-96de-d9f81372ff93","resolution":{"observed_at":"2026-08-07T06:13:05.011531Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:13:04.991434Z","title":"(c) repeat until cosine similarity exceedsc","venue":null,"work_id":"5bc2471c-80a7-4868-93ea-a3fa4eab0a40","year":null},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.849083Z"},"links":{"citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:237b296b3ab84917d59f0b1d054c4dce79e26c90ef0425932bc48a85cd8d0a8d","observation_id":"9e72fe54-29e1-48b4-9de2-156f13741521","resolution":{"observed_at":"2026-08-07T06:13:04.995964Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:13:04.975534Z","title":"(c) repeat until edit distance drops belowl","venue":null,"work_id":"a09f19b5-dc38-4056-957f-322256e21648","year":null},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.853560Z"},"links":{"citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:09c2db55d431f115a9581a54bdfb4a4e22161f0e0e5edf0cb00e00a31eb28c25","observation_id":"96726526-0de8-4d06-9f93-81972c3b204d","resolution":{"observed_at":"2026-08-07T06:13:04.980815Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:13:04.958846Z","title":null,"venue":null,"work_id":"0bc070bc-6e47-41dc-ad60-0d42d5912dfc","year":null},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.858860Z"},"links":{"citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:c42869f9325e6cedf7f3c03d82c5d87b9e4ee9f3959d6f769ae1418623a89620","observation_id":"4e0619ce-479d-45b7-a1de-e1248df71bee","resolution":{"observed_at":"2026-08-07T06:13:04.964182Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T06:13:05.425262Z","title":null,"venue":null,"work_id":"9fd64d3f-7d30-4d9f-9eaf-e9e6497c5380","year":2025},"citing_paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","version":1},"reference_index":2025,"source":"pdf_text","source_observed_at":"2026-08-07T06:13:04.680848Z"},"links":{"citing_paper":"/paper/2506.06003"},"observation_digest":"sha256:cee7fe02579bf723ae07d88cf96d82500e8601865683e7e14d1d8f6377d72a70","observation_id":"9609ca06-91bc-4c2f-bd06-694a38662fa8","resolution":{"observed_at":"2026-08-07T06:13:05.429487Z","resolver_source":"raw_fallback","status":"parse_uncertain"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2506.06003","last_updated":"2025-06-06T11:48:56Z","latest_version":1,"primary_category":"cs.LG","snapshot_observed_at":"2026-08-10T01:25:41.961391Z","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning"},"reference_resolution":{"displayed":41,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":1,"unresolved":7,"verified_exact":0,"verified_fuzzy":33},"total_outbound_references":41},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"thesis":"As of 10 August 2026, this Paper Citation Record lists 41 of 41 outbound references and 0 inbound Pith citation observations for arXiv:2506.06003."}