{"as_of":"2026-08-08T11:43:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:5c85ddfa4e4016654d26de3b977e4d65c254a2c116573d13c740a16c583efe14","coverage":[{"denominator":26,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":26,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T05:29:00.796527Z","state":"measured"},{"denominator":26,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":26,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2506.07948/citation-record","integrity":"/paper/2506.07948/integrity","json":"/paper/2506.07948/citation-record.json","paper":"/paper/2506.07948"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:07.401050Z","title":"Tricking llms into disobedience: Formalizing, analyzing, and detecting jailbreaks, 2024","venue":null,"work_id":"f8754257-be6f-4b06-99dd-58f338ff0d2d","year":2024},"citing_paper":{"arxiv_id":"2506.07948","last_updated":"2025-06-09T17:11:28Z","snapshot_observed_at":"2026-08-07T05:19:19.462143Z","submitted_at":"2025-06-09T17:11:28Z","title":"TokenBreak: Bypassing Text Classification Models Through Token Manipulation","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-07T05:28:57.962004Z"},"links":{"citing_paper":"/paper/2506.07948"},"observation_digest":"sha256:c2e85e3f109f24623ef37b528b60ea63816a7efdfb9965f1af42d17f8d036f04","observation_id":"ca9de89a-46ce-4d2b-82f8-376c2792af88","resolution":{"observed_at":"2026-08-07T05:29:07.574498Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:06.997539Z","title":"Black-box gener- ation of adversarial text sequences to evade deep learning classifiers, 2018","venue":null,"work_id":"46137700-7287-47ca-a207-892168ab057f","year":2018},"citing_paper":{"arxiv_id":"2506.07948","last_updated":"2025-06-09T17:11:28Z","snapshot_observed_at":"2026-08-07T05:19:19.462143Z","submitted_at":"2025-06-09T17:11:28Z","title":"TokenBreak: Bypassing Text Classification Models Through Token Manipulation","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-07T05:28:58.044336Z"},"links":{"citing_paper":"/paper/2506.07948"},"observation_digest":"sha256:a2ead5bf726f6df9d57e4c10e53cf01860adeefd7e5961a63e6f91f23ae73ee7","observation_id":"6853251d-7115-41ea-9d47-faf6c44fc293","resolution":{"observed_at":"2026-08-07T05:29:07.210868Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:06.704917Z","title":"Hotflip: White- box adversarial examples for text classification, 2018","venue":null,"work_id":"1a55b480-1487-432c-918c-c8dc6dde55cd","year":2018},"citing_paper":{"arxiv_id":"2506.07948","last_updated":"2025-06-09T17:11:28Z","snapshot_observed_at":"2026-08-07T05:19:19.462143Z","submitted_at":"2025-06-09T17:11:28Z","title":"TokenBreak: Bypassing Text Classification Models Through Token Manipulation","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T05:28:58.111007Z"},"links":{"citing_paper":"/paper/2506.07948"},"observation_digest":"sha256:60b1cb207088ea0204a1deef5083cb222c027b63fe3badac980b93d5c36eec58","observation_id":"9c00cd02-4ec5-4d53-871f-1bf2896c0fc8","resolution":{"observed_at":"2026-08-07T05:29:06.843115Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:06.475223Z","title":"Synthetic and natural noise both break neural machine translation, 2018","venue":null,"work_id":"b3a5e0ea-1437-474a-8118-3582c9e83559","year":2018},"citing_paper":{"arxiv_id":"2506.07948","last_updated":"2025-06-09T17:11:28Z","snapshot_observed_at":"2026-08-07T05:19:19.462143Z","submitted_at":"2025-06-09T17:11:28Z","title":"TokenBreak: Bypassing Text Classification Models Through Token Manipulation","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T05:28:58.185195Z"},"links":{"citing_paper":"/paper/2506.07948"},"observation_digest":"sha256:d1682e86070aa0c75f69ebb38b8b2f879ae7df1adb6e7ca640a4406505a94e97","observation_id":"e48134b9-ae5b-421a-ab01-dd79f35b3e6f","resolution":{"observed_at":"2026-08-07T05:29:06.587541Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:06.149917Z","title":null,"venue":null,"work_id":"43ee47b2-ad11-4dc9-835f-1b0a35bd72c2","year":2025},"citing_paper":{"arxiv_id":"2506.07948","last_updated":"2025-06-09T17:11:28Z","snapshot_observed_at":"2026-08-07T05:19:19.462143Z","submitted_at":"2025-06-09T17:11:28Z","title":"TokenBreak: Bypassing Text Classification Models Through Token Manipulation","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-07T05:28:58.244177Z"},"links":{"citing_paper":"/paper/2506.07948"},"observation_digest":"sha256:ddd6a29cfb253d2603d8cb1db144e7fd17eab18689670f964b0594019003c232","observation_id":"63f602bc-7990-4dc8-aeea-caa8049e437e","resolution":{"observed_at":"2026-08-07T05:29:06.316871Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2501.07927","last_updated":"2025-08-04T16:37:00Z","snapshot_observed_at":"2026-07-06T20:20:47.146343Z","submitted_at":"2025-01-14T08:30:49Z","title":"Gandalf the Red: Adaptive Security for LLMs","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.07927","snapshot_observed_at":"2026-08-07T05:28:58.317551Z","title":"Gandalf the red: Adaptive security for llms.arXiv preprint arXiv:2501.07927, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.07948","last_updated":"2025-06-09T17:11:28Z","snapshot_observed_at":"2026-08-07T05:19:19.462143Z","submitted_at":"2025-06-09T17:11:28Z","title":"TokenBreak: Bypassing Text Classification Models Through Token Manipulation","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T05:28:58.317551Z"},"links":{"cited_paper":"/paper/2501.07927","citing_paper":"/paper/2506.07948"},"observation_digest":"sha256:c10a1d299e62c1fd219d81bda868b3424a8dc5293d769c9f59bc2435eecf15d0","observation_id":"0043fc76-0373-4a62-bdac-05892586b01c","resolution":{"observed_at":"2026-08-07T05:28:58.317551Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:05.801995Z","title":null,"venue":null,"work_id":"2f423160-9759-4670-b5c8-24803da88493","year":null},"citing_paper":{"arxiv_id":"2506.07948","last_updated":"2025-06-09T17:11:28Z","snapshot_observed_at":"2026-08-07T05:19:19.462143Z","submitted_at":"2025-06-09T17:11:28Z","title":"TokenBreak: Bypassing Text Classification Models Through Token Manipulation","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T05:28:58.403663Z"},"links":{"citing_paper":"/paper/2506.07948"},"observation_digest":"sha256:6ccabcf8c8523600332b7eab3084a8be1d68add2f1290b159f957ccfb043486e","observation_id":"99697a9e-e7bf-4c19-9846-8e15a52346ef","resolution":{"observed_at":"2026-08-07T05:29:06.021010Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:05.638311Z","title":null,"venue":null,"work_id":"62be451b-8056-46fc-9bab-1eac560e0ec8","year":null},"citing_paper":{"arxiv_id":"2506.07948","last_updated":"2025-06-09T17:11:28Z","snapshot_observed_at":"2026-08-07T05:19:19.462143Z","submitted_at":"2025-06-09T17:11:28Z","title":"TokenBreak: Bypassing Text Classification Models Through Token Manipulation","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-07T05:28:58.509973Z"},"links":{"citing_paper":"/paper/2506.07948"},"observation_digest":"sha256:6e46c15d77f3f0b726f3249454d57410bcdb2a38e0e6acc850e05789f75616cb","observation_id":"c94f5b82-b460-4960-addb-5a8fb3bb1959","resolution":{"observed_at":"2026-08-07T05:29:05.709951Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:05.444761Z","title":null,"venue":null,"work_id":"6e027e8f-cbd1-4f02-ae1d-122c80cc08be","year":null},"citing_paper":{"arxiv_id":"2506.07948","last_updated":"2025-06-09T17:11:28Z","snapshot_observed_at":"2026-08-07T05:19:19.462143Z","submitted_at":"2025-06-09T17:11:28Z","title":"TokenBreak: Bypassing Text Classification Models Through Token Manipulation","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T05:28:58.596628Z"},"links":{"citing_paper":"/paper/2506.07948"},"observation_digest":"sha256:51f5d9e849b4abe696a595ede84151676aa3bf17d6a279d9423f284719c3647e","observation_id":"471dd064-9197-43eb-9ef1-4516058f0d17","resolution":{"observed_at":"2026-08-07T05:29:05.523070Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:05.200846Z","title":null,"venue":null,"work_id":"5ff33e11-37f9-45ec-b1ec-aaeb5d2cac65","year":null},"citing_paper":{"arxiv_id":"2506.07948","last_updated":"2025-06-09T17:11:28Z","snapshot_observed_at":"2026-08-07T05:19:19.462143Z","submitted_at":"2025-06-09T17:11:28Z","title":"TokenBreak: Bypassing Text Classification Models Through Token Manipulation","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T05:28:58.653203Z"},"links":{"citing_paper":"/paper/2506.07948"},"observation_digest":"sha256:2b18be459f631ce8f24eb93540c5a7b9750208f9ff0bac09f2932f3784e54c94","observation_id":"c939612d-2d91-4705-ae14-50939e06d238","resolution":{"observed_at":"2026-08-07T05:29:05.351576Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:04.899928Z","title":null,"venue":null,"work_id":"c196bf8e-2bfb-4e60-92b7-def988455872","year":null},"citing_paper":{"arxiv_id":"2506.07948","last_updated":"2025-06-09T17:11:28Z","snapshot_observed_at":"2026-08-07T05:19:19.462143Z","submitted_at":"2025-06-09T17:11:28Z","title":"TokenBreak: Bypassing Text Classification Models Through Token Manipulation","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T05:28:58.765675Z"},"links":{"citing_paper":"/paper/2506.07948"},"observation_digest":"sha256:68ccc723f1f8b785d2b3c7e8368f363544120bc40d4b3619b813f2114d326e6b","observation_id":"1ac152b5-235c-497b-86b8-d19e6cc4127d","resolution":{"observed_at":"2026-08-07T05:29:05.003823Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:04.645290Z","title":null,"venue":null,"work_id":"bc10b6a9-6eb3-44f2-bf57-3d956b0851c1","year":null},"citing_paper":{"arxiv_id":"2506.07948","last_updated":"2025-06-09T17:11:28Z","snapshot_observed_at":"2026-08-07T05:19:19.462143Z","submitted_at":"2025-06-09T17:11:28Z","title":"TokenBreak: Bypassing Text Classification Models Through Token Manipulation","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T05:28:58.835159Z"},"links":{"citing_paper":"/paper/2506.07948"},"observation_digest":"sha256:eeea03bb7ce86d6b34c98079b8e35b3625597e61b2157da946f74cdedbe5220c","observation_id":"4a3618f2-3315-409a-965b-c3332a80bfd1","resolution":{"observed_at":"2026-08-07T05:29:04.746595Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:04.339515Z","title":"Shadowgenes: Leveraging recurring patterns within computational graphs for model genealogy, 2025","venue":null,"work_id":"d7bd3c16-8151-4773-911e-bc674d19386f","year":2025},"citing_paper":{"arxiv_id":"2506.07948","last_updated":"2025-06-09T17:11:28Z","snapshot_observed_at":"2026-08-07T05:19:19.462143Z","submitted_at":"2025-06-09T17:11:28Z","title":"TokenBreak: Bypassing Text Classification Models Through Token Manipulation","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T05:28:58.920651Z"},"links":{"citing_paper":"/paper/2506.07948"},"observation_digest":"sha256:b2ab7d61463d07c366500403c1a6a91f48a511500766f2a19a94d261b48d91b2","observation_id":"fbb1866b-e4d2-4887-9d71-ee0484c2cd92","resolution":{"observed_at":"2026-08-07T05:29:04.476308Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:04.058314Z","title":null,"venue":null,"work_id":"d318c3d8-a6c0-4747-a75d-74af39e08f47","year":null},"citing_paper":{"arxiv_id":"2506.07948","last_updated":"2025-06-09T17:11:28Z","snapshot_observed_at":"2026-08-07T05:19:19.462143Z","submitted_at":"2025-06-09T17:11:28Z","title":"TokenBreak: Bypassing Text Classification Models Through Token Manipulation","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-07T05:28:59.025269Z"},"links":{"citing_paper":"/paper/2506.07948"},"observation_digest":"sha256:6fec0f14db0a5fedaed302c6a5423eb8f74411b51c7dfab1802c3db17f534ffb","observation_id":"8643e7ac-0da2-4317-b8db-2b0deb90a405","resolution":{"observed_at":"2026-08-07T05:29:04.204897Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:03.810204Z","title":"Neural machine trans- lation of rare words with subword units, 2016","venue":null,"work_id":"7829f245-52c3-4a9d-ab6c-7e34a4f855af","year":2016},"citing_paper":{"arxiv_id":"2506.07948","last_updated":"2025-06-09T17:11:28Z","snapshot_observed_at":"2026-08-07T05:19:19.462143Z","submitted_at":"2025-06-09T17:11:28Z","title":"TokenBreak: Bypassing Text Classification Models Through Token Manipulation","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T05:28:59.109973Z"},"links":{"citing_paper":"/paper/2506.07948"},"observation_digest":"sha256:54ac626bf1828e8bc1980d8415e11b791388df161d137b4b04cfc06a285be454","observation_id":"982750fb-05e1-458c-9aec-730ef4a7e3bb","resolution":{"observed_at":"2026-08-07T05:29:03.957447Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:03.589026Z","title":null,"venue":null,"work_id":"d5eff620-9ed8-4631-a512-a7d99a99b217","year":null},"citing_paper":{"arxiv_id":"2506.07948","last_updated":"2025-06-09T17:11:28Z","snapshot_observed_at":"2026-08-07T05:19:19.462143Z","submitted_at":"2025-06-09T17:11:28Z","title":"TokenBreak: Bypassing Text Classification Models Through Token Manipulation","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T05:28:59.259044Z"},"links":{"citing_paper":"/paper/2506.07948"},"observation_digest":"sha256:7df92b2fcc4c5f2bc861dd91f802c30526322e9ef8c5dbe4913595464bc55c8e","observation_id":"e23f32ed-0f65-41bd-bfa5-975c1fdd38cb","resolution":{"observed_at":"2026-08-07T05:29:03.680025Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:03.367257Z","title":null,"venue":null,"work_id":"0b44470c-3526-40cc-8e36-c1747347b3c7","year":null},"citing_paper":{"arxiv_id":"2506.07948","last_updated":"2025-06-09T17:11:28Z","snapshot_observed_at":"2026-08-07T05:19:19.462143Z","submitted_at":"2025-06-09T17:11:28Z","title":"TokenBreak: Bypassing Text Classification Models Through Token Manipulation","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-07T05:28:59.378121Z"},"links":{"citing_paper":"/paper/2506.07948"},"observation_digest":"sha256:acdeb7fd5658e68f37f92b96f3486404501d5387b9771bc0607584d213b648b6","observation_id":"51e97546-0c6c-4082-8915-a65176290312","resolution":{"observed_at":"2026-08-07T05:29:03.483751Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:03.090791Z","title":"Subword regularization: Improving neural network translation models with multiple subword candidates, 2018","venue":null,"work_id":"e7231ff5-f989-41d5-99c8-7a4db548b41a","year":2018},"citing_paper":{"arxiv_id":"2506.07948","last_updated":"2025-06-09T17:11:28Z","snapshot_observed_at":"2026-08-07T05:19:19.462143Z","submitted_at":"2025-06-09T17:11:28Z","title":"TokenBreak: Bypassing Text Classification Models Through Token Manipulation","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T05:28:59.508122Z"},"links":{"citing_paper":"/paper/2506.07948"},"observation_digest":"sha256:3728071c95f3a32908c1926ede953f96c383cc3904bbc5a94e3ecb5ed693ebd0","observation_id":"6168debd-6ed7-4dbd-8964-7d69b676bce3","resolution":{"observed_at":"2026-08-07T05:29:03.204075Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:02.823755Z","title":null,"venue":null,"work_id":"4e0a85c9-24c4-4c98-b8ec-d02619526b98","year":null},"citing_paper":{"arxiv_id":"2506.07948","last_updated":"2025-06-09T17:11:28Z","snapshot_observed_at":"2026-08-07T05:19:19.462143Z","submitted_at":"2025-06-09T17:11:28Z","title":"TokenBreak: Bypassing Text Classification Models Through Token Manipulation","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-07T05:28:59.685509Z"},"links":{"citing_paper":"/paper/2506.07948"},"observation_digest":"sha256:3f71a2fa6547a74cc7912b06b29367e648fcc0ff370fafbd286a4016e49b806c","observation_id":"73dc6528-f885-4d43-86ed-7ec73311e15a","resolution":{"observed_at":"2026-08-07T05:29:02.946025Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:02.495142Z","title":null,"venue":null,"work_id":"8238316a-f709-4cef-bf5f-c1ebcc1628d7","year":null},"citing_paper":{"arxiv_id":"2506.07948","last_updated":"2025-06-09T17:11:28Z","snapshot_observed_at":"2026-08-07T05:19:19.462143Z","submitted_at":"2025-06-09T17:11:28Z","title":"TokenBreak: Bypassing Text Classification Models Through Token Manipulation","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-07T05:28:59.832596Z"},"links":{"citing_paper":"/paper/2506.07948"},"observation_digest":"sha256:c7cb9f14c84ba7d0ad7e25d674f28b4a23b5d67285d018ab69097cbe3f901719","observation_id":"65683321-413c-4cb5-bfca-af47fc86b048","resolution":{"observed_at":"2026-08-07T05:29:02.620820Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:28:59.963084Z","title":"Roberta: A robustly optimized bert pretraining approach, 2019","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2506.07948","last_updated":"2025-06-09T17:11:28Z","snapshot_observed_at":"2026-08-07T05:19:19.462143Z","submitted_at":"2025-06-09T17:11:28Z","title":"TokenBreak: Bypassing Text Classification Models Through Token Manipulation","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T05:28:59.963084Z"},"links":{"citing_paper":"/paper/2506.07948"},"observation_digest":"sha256:3509e052ccd36488c7627010080b5c700607e839827af9166e00e24c3f42de8a","observation_id":"7f5a6dae-faa4-42b8-b7b5-1262f2131db5","resolution":{"observed_at":"2026-08-07T05:28:59.963084Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:02.212904Z","title":null,"venue":null,"work_id":"b670825d-b426-45b8-b203-4aaaa97b8d43","year":null},"citing_paper":{"arxiv_id":"2506.07948","last_updated":"2025-06-09T17:11:28Z","snapshot_observed_at":"2026-08-07T05:19:19.462143Z","submitted_at":"2025-06-09T17:11:28Z","title":"TokenBreak: Bypassing Text Classification Models Through Token Manipulation","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:00.133634Z"},"links":{"citing_paper":"/paper/2506.07948"},"observation_digest":"sha256:e02bef1fde24593ef3c62d38af31375d0e2e2f3761baece3d9cec08fbad77c1f","observation_id":"a9afcedd-342e-49c6-ba39-005d6c717d8b","resolution":{"observed_at":"2026-08-07T05:29:02.323118Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:01.881138Z","title":null,"venue":null,"work_id":"075da95d-841b-4883-98da-efead3605032","year":null},"citing_paper":{"arxiv_id":"2506.07948","last_updated":"2025-06-09T17:11:28Z","snapshot_observed_at":"2026-08-07T05:19:19.462143Z","submitted_at":"2025-06-09T17:11:28Z","title":"TokenBreak: Bypassing Text Classification Models Through Token Manipulation","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:00.305390Z"},"links":{"citing_paper":"/paper/2506.07948"},"observation_digest":"sha256:7f8ce680a0670ae55bda6e69e46c06de6d52c2edcad2b9729e1287983c91f2d2","observation_id":"bbde3725-0139-44b7-b4b1-fb9fe8c549dc","resolution":{"observed_at":"2026-08-07T05:29:02.022902Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:01.574364Z","title":"co/docs/transformers/en/model_doc/xlm-roberta","venue":null,"work_id":"dc6d33dd-d45a-4736-b4f7-2dfcd9be911b","year":null},"citing_paper":{"arxiv_id":"2506.07948","last_updated":"2025-06-09T17:11:28Z","snapshot_observed_at":"2026-08-07T05:19:19.462143Z","submitted_at":"2025-06-09T17:11:28Z","title":"TokenBreak: Bypassing Text Classification Models Through Token Manipulation","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:00.495295Z"},"links":{"citing_paper":"/paper/2506.07948"},"observation_digest":"sha256:233098c474691e44483cfe9e9738c9a644f4704b9f8f6463a9d35c538fb6df5e","observation_id":"ac5edff7-0488-4f11-9fd6-68a769c5cfee","resolution":{"observed_at":"2026-08-07T05:29:01.719440Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:01.314001Z","title":"Unsupervised cross-lingual representa- tion learning at scale, 2020","venue":null,"work_id":"5783e404-2f3e-4425-9546-a9deb6850c42","year":2020},"citing_paper":{"arxiv_id":"2506.07948","last_updated":"2025-06-09T17:11:28Z","snapshot_observed_at":"2026-08-07T05:19:19.462143Z","submitted_at":"2025-06-09T17:11:28Z","title":"TokenBreak: Bypassing Text Classification Models Through Token Manipulation","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:00.616470Z"},"links":{"citing_paper":"/paper/2506.07948"},"observation_digest":"sha256:456a74fc349b6bede0430095f51c1386fcc30354aec88e9657a63ca24104f80b","observation_id":"5dfa53ed-af8b-49c9-b906-59865bb4f8f8","resolution":{"observed_at":"2026-08-07T05:29:01.404833Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"blob/2734490","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:01.031996Z","title":null,"venue":null,"work_id":"ca614384-b62c-4e70-84a1-d1135955a6de","year":null},"citing_paper":{"arxiv_id":"2506.07948","last_updated":"2025-06-09T17:11:28Z","snapshot_observed_at":"2026-08-07T05:19:19.462143Z","submitted_at":"2025-06-09T17:11:28Z","title":"TokenBreak: Bypassing Text Classification Models Through Token Manipulation","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:00.796527Z"},"links":{"citing_paper":"/paper/2506.07948"},"observation_digest":"sha256:fefb493f99bb4d46689ffe403e066917b840afbd0feab62505a05a75239b8a11","observation_id":"ec1f1195-4ba3-45be-a9ac-4fb3d91afed6","resolution":{"observed_at":"2026-08-07T05:29:01.105077Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2506.07948","last_updated":"2025-06-09T17:11:28Z","latest_version":1,"primary_category":"cs.LG","snapshot_observed_at":"2026-08-07T05:19:19.462143Z","submitted_at":"2025-06-09T17:11:28Z","title":"TokenBreak: Bypassing Text Classification Models Through Token Manipulation"},"reference_resolution":{"displayed":26,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":16,"verified_exact":1,"verified_fuzzy":9},"total_outbound_references":26},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 26 of 26 outbound references and 0 inbound Pith citation observations for arXiv:2506.07948."}