{"as_of":"2026-08-07T12:41:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:ed1f8ceb969440654567a2850b18798c8f43c182f97bf4beddf7bb3cc2471293","coverage":[{"denominator":160,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":100,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T00:46:10.329817Z","state":"measured"},{"denominator":100,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":100,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2506.12699/citation-record","integrity":"/paper/2506.12699/integrity","json":"/paper/2506.12699/citation-record.json","paper":"/paper/2506.12699"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:09.878266Z","title":null,"venue":null,"work_id":null,"year":1996},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:09.878266Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:002ceb6ea0a72548bd472812a63883aefd034bb86a13d960208764271a13c29a","observation_id":"8735cfe7-64ae-4124-9e6b-b31ef5905b16","resolution":{"observed_at":"2026-08-07T00:46:09.878266Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:09.882756Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:09.882756Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:cd3624b03f81a962bc4e95f0011f83fec89e7936479d9bd62cf73b287423b440","observation_id":"97f1ad6f-06ed-4038-9373-dda6f8f590f8","resolution":{"observed_at":"2026-08-07T00:46:09.882756Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:09.886708Z","title":"Kanwal, Tegan Maharaj, Asja Fischer, Aaron Courville, Yoshua Bengio, and Simon Lacoste-Julien","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:09.886708Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:ecca5d6b585571f1f7d528e7722d7ec2c40c021e3c8d8be90b724784bee46c61","observation_id":"ed641fd8-f759-4785-a020-0165e15301a5","resolution":{"observed_at":"2026-08-07T00:46:09.886708Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2501.12465","last_updated":"2025-01-21T19:22:45Z","snapshot_observed_at":"2026-07-31T03:16:52.037630Z","submitted_at":"2025-01-21T19:22:45Z","title":"Adaptive PII Mitigation Framework for Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.12465","snapshot_observed_at":"2026-08-07T00:46:09.890879Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:09.890879Z"},"links":{"cited_paper":"/paper/2501.12465","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:9582b7da860ede06597df141d7ac0052ef3d003a292432305ac0317b07233f65","observation_id":"e4a8f076-ba4e-45d7-90ee-90f9bfe1958c","resolution":{"observed_at":"2026-08-07T00:46:09.890879Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.05175","last_updated":"2024-09-18T20:53:06Z","snapshot_observed_at":"2026-07-06T18:11:38.755996Z","submitted_at":"2024-05-08T16:12:45Z","title":"AirGapAgent: Protecting Privacy-Conscious Conversational Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.05175","snapshot_observed_at":"2026-08-07T00:46:09.895706Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:09.895706Z"},"links":{"cited_paper":"/paper/2405.05175","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:b37399588b673b2989d2dbaecc0d8947ffad46ac7c66310c98dfbb184ec0f391","observation_id":"c9466f19-0998-4245-a98e-9eeb123531dc","resolution":{"observed_at":"2026-08-07T00:46:09.895706Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2212.08073","last_updated":"2022-12-15T06:19:23Z","snapshot_observed_at":"2026-08-02T04:53:58.766070Z","submitted_at":"2022-12-15T06:19:23Z","title":"Constitutional AI: Harmlessness from AI Feedback","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2212.08073","snapshot_observed_at":"2026-08-07T00:46:09.905469Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:09.905469Z"},"links":{"cited_paper":"/paper/2212.08073","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:d6da2890f53ecae27bfc00cb89a58a15fb692293d80fecf65f9860fce954264d","observation_id":"92c31aaa-8a7b-4a60-8743-dc4622023fc0","resolution":{"observed_at":"2026-08-07T00:46:09.905469Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:09.909846Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:09.909846Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:920da734ca87792b259eb29cd513c3c9393c6b59e5b3511518a8405cf47253de","observation_id":"4d9d7fde-3f5e-4d6e-af11-672f1ddcd2e2","resolution":{"observed_at":"2026-08-07T00:46:09.909846Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:09.913974Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:09.913974Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:8bbf29d18391f4694a055682cd86069812fd01bced36daadcb3868701e6c04e2","observation_id":"9c0db24c-0e49-493e-96c5-222354fbac67","resolution":{"observed_at":"2026-08-07T00:46:09.913974Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:09.917695Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:09.917695Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:70cb1cdc3a3890e9a0dd4a93f755d600b5eca5feb0a6c9f02cfaae48c3ae709b","observation_id":"e33709b9-3a99-46c5-b428-0d7c73201360","resolution":{"observed_at":"2026-08-07T00:46:09.917695Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:09.921414Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:09.921414Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:6e4477d21eaa09aae3244e7abaf575e2f41b2f3cc54782d8d3f1aa9747981a74","observation_id":"dc29043d-991c-447e-8cab-fc9bceb72dd4","resolution":{"observed_at":"2026-08-07T00:46:09.921414Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:09.925261Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:09.925261Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:e631af493e80155197fa9499af6e215b9846a9aa3ecbd0a5f9b32bd26ead1bdb","observation_id":"8ce678b5-8a24-433c-a68e-b2136c3e8165","resolution":{"observed_at":"2026-08-07T00:46:09.925261Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:09.929260Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:09.929260Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:6456650fbd972573a1a0ab1af082ff357d6f305a3227ad1bf7b7ca3894553b2b","observation_id":"64ba7733-0f44-4562-b418-08b9b2f7040a","resolution":{"observed_at":"2026-08-07T00:46:09.929260Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:09.932970Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:09.932970Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:731f3a532885f717b4299ea071796305c66eeec936ce52b05ccd76cc7a20a8b9","observation_id":"b314572b-9dee-47e7-9e89-1dee93bb8c79","resolution":{"observed_at":"2026-08-07T00:46:09.932970Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.09060","last_updated":"2024-04-02T06:32:40Z","snapshot_observed_at":"2026-07-06T16:48:01.451153Z","submitted_at":"2023-11-15T15:52:40Z","title":"Do Localization Methods Actually Localize Memorized Data in LLMs? A Tale of Two Benchmarks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.09060","snapshot_observed_at":"2026-08-07T00:46:09.936979Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:09.936979Z"},"links":{"cited_paper":"/paper/2311.09060","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:a7cfb1bae92a14d73d4110bce7e9533c9ef0019d2570ba9307359992f627d772","observation_id":"91abb483-006a-4da0-a612-a0d24d1a58da","resolution":{"observed_at":"2026-08-07T00:46:09.936979Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2206.00216","last_updated":"2022-06-02T01:06:12Z","snapshot_observed_at":"2026-07-06T13:16:13.214340Z","submitted_at":"2022-06-01T03:49:18Z","title":"THE-X: Privacy-Preserving Transformer Inference with Homomorphic Encryption","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2206.00216","snapshot_observed_at":"2026-08-07T00:46:09.940867Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:09.940867Z"},"links":{"cited_paper":"/paper/2206.00216","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:146aa4ea91a5234d1e6ad29ee7831260a8d003eef21845c3ac44c8b373292fde","observation_id":"e7082d62-dd90-47f3-8eff-fc85e91221a6","resolution":{"observed_at":"2026-08-07T00:46:09.940867Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.03057","last_updated":"2023-09-06T14:54:11Z","snapshot_observed_at":"2026-07-06T16:15:16.517711Z","submitted_at":"2023-09-06T14:54:11Z","title":"Hide and Seek (HaS): A Lightweight Framework for Prompt Privacy Protection","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.03057","snapshot_observed_at":"2026-08-07T00:46:09.944887Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:09.944887Z"},"links":{"cited_paper":"/paper/2309.03057","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:71168301e62bc6e021b920539fcd10f2634300a2966b5d44dc117520c41ddadd","observation_id":"645ef227-c9e9-4a15-ab9f-76f8cd4e53ff","resolution":{"observed_at":"2026-08-07T00:46:09.944887Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.05998","last_updated":"2024-01-11T15:57:38Z","snapshot_observed_at":"2026-07-06T17:14:19.624035Z","submitted_at":"2024-01-11T15:57:38Z","title":"Combating Adversarial Attacks with Multi-Agent Debate","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.05998","snapshot_observed_at":"2026-08-07T00:46:09.949867Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:09.949867Z"},"links":{"cited_paper":"/paper/2401.05998","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:af24002644134e67db320f53b827d41b916de1aa6c6227f96ffde78b589d83f5","observation_id":"b3362316-18bd-46ef-8ac5-9d47d725bebf","resolution":{"observed_at":"2026-08-07T00:46:09.949867Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.02987","last_updated":"2024-10-07T12:11:58Z","snapshot_observed_at":"2026-07-06T17:25:26.813696Z","submitted_at":"2024-02-05T13:18:42Z","title":"Reconstruct Your Previous Conversations! Comprehensively Investigating Privacy Leakage Risks in Conversations with GPT Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.02987","snapshot_observed_at":"2026-08-07T00:46:09.954005Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:09.954005Z"},"links":{"cited_paper":"/paper/2402.02987","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:53d4e4c151c4b85db808bae29136b54c94074b3cda40b0f7b4f575e49bfef066","observation_id":"16591195-72d2-4e77-ac91-d8511aac42d6","resolution":{"observed_at":"2026-08-07T00:46:09.954005Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.00888","last_updated":"2024-11-14T22:20:49Z","snapshot_observed_at":"2026-07-06T17:23:55.166594Z","submitted_at":"2024-01-30T04:00:54Z","title":"Security and Privacy Challenges of Large Language Models: A Survey","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.00888","snapshot_observed_at":"2026-08-07T00:46:09.958080Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:09.958080Z"},"links":{"cited_paper":"/paper/2402.00888","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:c8a7a2ff587325a7e6a6f33151fa89186e5eea7a0ce1c96f9847197eb5223e67","observation_id":"8deb338c-8eb3-4bc8-a220-41ca7b86d17c","resolution":{"observed_at":"2026-08-07T00:46:09.958080Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:09.962197Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:09.962197Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:1b45895bd736f967bd18d70918af5d303d231cf5a9f8101dfcfb7c8f17ec8814","observation_id":"790ebb6d-4fad-4240-b81a-283de43f707d","resolution":{"observed_at":"2026-08-07T00:46:09.962197Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2103.06819","last_updated":"2021-09-21T17:58:26Z","snapshot_observed_at":"2026-08-06T13:02:33.256135Z","submitted_at":"2021-03-11T17:41:32Z","title":"TAG: Gradient Attack on Transformer-based Language Models","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2103.06819","snapshot_observed_at":"2026-08-07T00:46:09.966617Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:09.966617Z"},"links":{"cited_paper":"/paper/2103.06819","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:d5b0ddd0d3bc954ddbcf4418a34d1552daccb3bc3e6a39975d057d2b4a8c217b","observation_id":"1975bde0-5dad-4dab-af52-f76b304b7856","resolution":{"observed_at":"2026-08-07T00:46:09.966617Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:09.971434Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:09.971434Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:0673efe4e305a87272ff60efe877ae966c84195b546890b126d74437d1c6482b","observation_id":"8f514412-3aa2-4322-96af-dfdb8a54eddc","resolution":{"observed_at":"2026-08-07T00:46:09.971434Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1810.04805","last_updated":"2019-05-24T20:37:26Z","snapshot_observed_at":"2026-07-30T09:12:38.100527Z","submitted_at":"2018-10-11T00:50:01Z","title":"BERT: Pre-training of Deep Bidirectional Transformers for Language Understanding","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1810.04805","snapshot_observed_at":"2026-08-07T00:46:09.976324Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:09.976324Z"},"links":{"cited_paper":"/paper/1810.04805","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:0dd3e89a09245635deef2788e294df9e8186f3a5053edd472a73a8de27a5c421","observation_id":"1d0d08d2-307c-4374-a5f5-b789cf0a5ff4","resolution":{"observed_at":"2026-08-07T00:46:09.976324Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.08268","last_updated":"2024-04-07T03:04:10Z","snapshot_observed_at":"2026-07-06T16:47:24.765597Z","submitted_at":"2023-11-14T16:02:16Z","title":"A Wolf in Sheep's Clothing: Generalized Nested Jailbreak Prompts can Fool Large Language Models Easily","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.08268","snapshot_observed_at":"2026-08-07T00:46:09.980899Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:09.980899Z"},"links":{"cited_paper":"/paper/2311.08268","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:6deec47d220e3104d9ea9706b974b2ef1f3e4a088fd385cc7b52c2b0d5ae7b82","observation_id":"bf17fd12-7aa9-4309-8cac-193f9a35e3e4","resolution":{"observed_at":"2026-08-07T00:46:09.980899Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:09.985886Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:09.985886Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:4621d6634f753540800c1777d41067104283716ab86e4b598add0422f41e9ff6","observation_id":"5ccdb7a1-7a29-4bf2-a175-801fbf02547b","resolution":{"observed_at":"2026-08-07T00:46:09.985886Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.15319","last_updated":"2024-10-22T10:31:59Z","snapshot_observed_at":"2026-07-06T18:19:13.078606Z","submitted_at":"2024-05-24T08:00:00Z","title":"Stacking Your Transformers: A Closer Look at Model Growth for Efficient LLM Pre-Training","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.15319","snapshot_observed_at":"2026-08-07T00:46:09.994790Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:09.994790Z"},"links":{"cited_paper":"/paper/2405.15319","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:5813f4754b47f94eb6c474639fb8035403510356749f7373feb12400087b6ae2","observation_id":"277b88b9-20c0-49e4-b1eb-45e278e1b544","resolution":{"observed_at":"2026-08-07T00:46:09.994790Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:09.999539Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:09.999539Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:819ae82c147e14b7ae107a9e99c587408da6296095a98c3470c8577c21876ed5","observation_id":"a091b3c2-3e1f-4f11-ac4c-c4791576f909","resolution":{"observed_at":"2026-08-07T00:46:09.999539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07841","last_updated":"2024-09-16T13:18:23Z","snapshot_observed_at":"2026-08-07T03:58:21.441544Z","submitted_at":"2024-02-12T17:52:05Z","title":"Do Membership Inference Attacks Work on Large Language Models?","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.07841","snapshot_observed_at":"2026-08-07T00:46:10.006386Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.006386Z"},"links":{"cited_paper":"/paper/2402.07841","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:f895b7756421f093fb4df09a5e73b7435e4920187fa855127a20e66926882588","observation_id":"94f448c2-11f7-440a-85be-8cfe9e22b7a6","resolution":{"observed_at":"2026-08-07T00:46:10.006386Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:10.012840Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.012840Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:b0f155568aff1d0b8b713e73a4bc80d0d508749399837390c1656a27fbafa46d","observation_id":"e7ff6528-8423-466e-a994-bdaa52ece841","resolution":{"observed_at":"2026-08-07T00:46:10.012840Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.06001","last_updated":"2024-04-11T00:17:18Z","snapshot_observed_at":"2026-08-01T21:01:39.324631Z","submitted_at":"2024-04-09T04:11:25Z","title":"Privacy Preserving Prompt Engineering: A Survey","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.06001","snapshot_observed_at":"2026-08-07T00:46:10.018951Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.018951Z"},"links":{"cited_paper":"/paper/2404.06001","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:a559470d9cedb5a738c861ce304db9c1223f5d78ea7c484f117596571cada863","observation_id":"a247994c-b37f-4495-a224-64a4ea107083","resolution":{"observed_at":"2026-08-07T00:46:10.018951Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"status/1692602","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:11.974960Z","title":"Ekenstam","venue":null,"work_id":"9e76ab7c-94ab-47a4-a5c4-4a05000fda5b","year":2023},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.024871Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:00f95a31446ec11b9b087a630fc8bb84e0bb966f9f4559cb2bfe63baf035213a","observation_id":"2325caee-13cb-4a38-99b1-9f58f1dadf48","resolution":{"observed_at":"2026-08-07T00:46:11.985987Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.02238","last_updated":"2023-10-04T05:20:19Z","snapshot_observed_at":"2026-08-06T15:19:35.944642Z","submitted_at":"2023-10-03T17:48:14Z","title":"Who's Harry Potter? Approximate Unlearning in LLMs","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.02238","snapshot_observed_at":"2026-08-07T00:46:10.029882Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.029882Z"},"links":{"cited_paper":"/paper/2310.02238","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:e3c9bd35b618e1042d280ad56e6140e459a14f758525a6924c32e17988fcfd17","observation_id":"a625eacf-d782-4124-95f3-457d74ccc836","resolution":{"observed_at":"2026-08-07T00:46:10.029882Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10049","last_updated":"2023-10-16T04:17:13Z","snapshot_observed_at":"2026-07-06T16:33:30.170449Z","submitted_at":"2023-10-16T04:17:13Z","title":"FATE-LLM: A Industrial Grade Federated Learning Framework for Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.10049","snapshot_observed_at":"2026-08-07T00:46:10.034673Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.034673Z"},"links":{"cited_paper":"/paper/2310.10049","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:d9c7ea511f729e59ae3107c421148f477d31f8b284e5906346fd02fceed7703e","observation_id":"d1c70ac8-1979-448a-8e2a-216eac2e053b","resolution":{"observed_at":"2026-08-07T00:46:10.034673Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.08144","last_updated":"2024-04-17T04:34:39Z","snapshot_observed_at":"2026-08-02T04:29:28.130280Z","submitted_at":"2024-04-11T22:07:19Z","title":"LLM Agents can Autonomously Exploit One-day Vulnerabilities","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.08144","snapshot_observed_at":"2026-08-07T00:46:10.038821Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.038821Z"},"links":{"cited_paper":"/paper/2404.08144","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:5f8a56562e37362fbd3cb71b84c4acb65c98786c10f9c1540a037ad1323505b8","observation_id":"cc24ff99-3765-4f12-9322-603b44b23e2f","resolution":{"observed_at":"2026-08-07T00:46:10.038821Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:10.043264Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.043264Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:81d25f7f64496d7ab2a72588fd4767085888ebca103897eb4adf8f144bbdb895","observation_id":"2fac7435-6924-4d78-954e-cae7a218f97e","resolution":{"observed_at":"2026-08-07T00:46:10.043264Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:10.047102Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.047102Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:f450a602709dbc979abe99e0670977d6541cf2e9cd2ac1ab11d0ddbed417faae","observation_id":"2e01204b-f9ef-4045-94cc-20834627c045","resolution":{"observed_at":"2026-08-07T00:46:10.047102Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:10.056737Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.056737Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:5ca06e53dc7e0e7959333fce435690aefbab0e59e6b6790e20a68749d336d5ae","observation_id":"f329733a-b640-47c5-8354-6fe710c66177","resolution":{"observed_at":"2026-08-07T00:46:10.056737Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.08567","last_updated":"2024-06-03T14:15:03Z","snapshot_observed_at":"2026-07-06T17:29:34.813390Z","submitted_at":"2024-02-13T16:06:17Z","title":"Agent Smith: A Single Image Can Jailbreak One Million Multimodal LLM Agents Exponentially Fast","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.08567","snapshot_observed_at":"2026-08-07T00:46:10.061177Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.061177Z"},"links":{"cited_paper":"/paper/2402.08567","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:2c57ccbc7cf0de877b148d00e1675f6a17e94c771b0bc721fa6ba24b0b017e2e","observation_id":"a689e14e-1ca4-4d1d-aac2-5a708c41120a","resolution":{"observed_at":"2026-08-07T00:46:10.061177Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2004.10964","last_updated":"2020-05-05T22:00:44Z","snapshot_observed_at":"2026-08-02T02:53:18.136026Z","submitted_at":"2020-04-23T04:21:19Z","title":"Don't Stop Pretraining: Adapt Language Models to Domains and Tasks","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2004.10964","snapshot_observed_at":"2026-08-07T00:46:10.065736Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.065736Z"},"links":{"cited_paper":"/paper/2004.10964","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:657596fba392afac9c100defacbb0e23007564e307d05871201249cea30025b8","observation_id":"5b415b0a-5d0f-4d46-8bc5-110356366d79","resolution":{"observed_at":"2026-08-07T00:46:10.065736Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:10.070506Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.070506Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:69a0faf15f0e4f949622a8155c8da8f224520a0656e5a1b9dacd5a7cc9a15782","observation_id":"f5e745d2-5c9a-4234-8dbc-cebb5b63870a","resolution":{"observed_at":"2026-08-07T00:46:10.070506Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:10.074672Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.074672Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:f938ef04d685c28d3c9439373f56b9ded4b3e57ae216246075a8d9c05d935a2c","observation_id":"344cfbea-8d86-4ea1-8ec7-82c8d0c3605e","resolution":{"observed_at":"2026-08-07T00:46:10.074672Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.01041","last_updated":"2024-04-02T06:49:33Z","snapshot_observed_at":"2026-07-06T17:53:55.825572Z","submitted_at":"2024-04-01T10:54:49Z","title":"Can LLMs get help from other LLMs without revealing private information?","version":2},"cited_work":{"arxiv_id":"2404.01041","doi":null,"metadata_source":"pith","pith_arxiv_id":"2404.01041","snapshot_observed_at":"2026-08-07T00:46:11.705057Z","title":"Can LLMs get help from other LLMs without revealing private information?","venue":"cs.LG","work_id":"c53d7ddd-4cb8-405f-9aa9-f240a873fc9e","year":2024},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.078568Z"},"links":{"cited_paper":"/paper/2404.01041","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:fcff86f258861451c53ef55235cef8d653457ad3697f41fdb44a6b444205bad9","observation_id":"2672f80e-e0f6-4fb6-875e-1c7caee3d9c7","resolution":{"observed_at":"2026-08-07T00:46:11.709859Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.01586","last_updated":"2024-10-03T22:12:05Z","snapshot_observed_at":"2026-08-06T06:52:40.785580Z","submitted_at":"2024-02-02T17:26:23Z","title":"TrustAgent: Towards Safe and Trustworthy LLM-based Agents","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.01586","snapshot_observed_at":"2026-08-07T00:46:10.083811Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.083811Z"},"links":{"cited_paper":"/paper/2402.01586","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:2edba56a40fe783ff3f9a81a9c3c3a8146cf7eff447c4b8d0db94ab8e0342899","observation_id":"23eb3263-f1bc-4116-a9a2-6e8295eba6dd","resolution":{"observed_at":"2026-08-07T00:46:10.083811Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2210.17546","last_updated":"2023-09-11T16:58:48Z","snapshot_observed_at":"2026-08-04T04:34:05.607113Z","submitted_at":"2022-10-31T17:57:55Z","title":"Preventing Verbatim Memorization in Language Models Gives a False Sense of Privacy","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2210.17546","snapshot_observed_at":"2026-08-07T00:46:10.088056Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.088056Z"},"links":{"cited_paper":"/paper/2210.17546","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:b238c0197047f7db2dc1687bb5ebb2ad0f5c28e1186e30b0f21ae31f746cfe61","observation_id":"71830973-cea3-44c7-8ed1-89f95e9cf01e","resolution":{"observed_at":"2026-08-07T00:46:10.088056Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2104.08305","last_updated":"2021-04-16T18:29:58Z","snapshot_observed_at":"2026-07-06T11:00:28.950168Z","submitted_at":"2021-04-16T18:29:58Z","title":"Membership Inference Attack Susceptibility of Clinical Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2104.08305","snapshot_observed_at":"2026-08-07T00:46:10.092761Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.092761Z"},"links":{"cited_paper":"/paper/2104.08305","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:d3feee85229fba58dad55cbbaee08e973becfc2cb13038ce84c2df4bec0aa60f","observation_id":"3471d20b-b584-48ff-99ca-ce2e80c38b12","resolution":{"observed_at":"2026-08-07T00:46:10.092761Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2207.00099","last_updated":"2023-05-09T14:08:17Z","snapshot_observed_at":"2026-07-06T13:26:38.135401Z","submitted_at":"2022-06-30T20:48:26Z","title":"Measuring Forgetting of Memorized Training Examples","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2207.00099","snapshot_observed_at":"2026-08-07T00:46:10.097075Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.097075Z"},"links":{"cited_paper":"/paper/2207.00099","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:b7df980f236e2d019759ad5f375d029a3606568216cbd6f80132e1bf0fed5607","observation_id":"ce438300-d9a4-4d31-b98a-0eb2f309df2c","resolution":{"observed_at":"2026-08-07T00:46:10.097075Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:10.101255Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.101255Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:973540f307b886bc7c135ebab40cec32495374dffc34ecc78eb6e8af65ae1f42","observation_id":"c052bfc3-9b9d-4008-b4da-9f4b4c9012c3","resolution":{"observed_at":"2026-08-07T00:46:10.101255Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.18841","last_updated":"2025-06-15T16:22:13Z","snapshot_observed_at":"2026-07-06T18:37:43.309281Z","submitted_at":"2024-05-14T15:03:05Z","title":"Navigating LLM Ethics: Advancements, Challenges, and Future Directions","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.18841","snapshot_observed_at":"2026-08-07T00:46:10.104827Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.104827Z"},"links":{"cited_paper":"/paper/2406.18841","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:f430ecb3e6ea593e4eb4173e02e163135e2d21289fea741c2e9ed5a6e9cbe7fe","observation_id":"7b073924-3383-4525-b086-bc29fb75dc37","resolution":{"observed_at":"2026-08-07T00:46:10.104827Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.09266","last_updated":"2024-02-23T20:25:17Z","snapshot_observed_at":"2026-08-04T19:58:53.523613Z","submitted_at":"2023-10-13T17:24:52Z","title":"User Inference Attacks on Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.09266","snapshot_observed_at":"2026-08-07T00:46:10.108829Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.108829Z"},"links":{"cited_paper":"/paper/2310.09266","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:7808ba139d980a02c0baa727df2d06b0ed04daa8f5ac50405da70e8f8d8a261b","observation_id":"c5bb4366-601c-4bd6-806a-1f8d6329eff0","resolution":{"observed_at":"2026-08-07T00:46:10.108829Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:10.112774Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.112774Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:ba4570caeb708520e3ef7178b8765ff849eae2a37a5463788c8e22ffda6ce449","observation_id":"359b03c0-af9e-4f4e-bbd4-34ba76b3a984","resolution":{"observed_at":"2026-08-07T00:46:10.112774Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.13771","last_updated":"2023-10-20T19:14:59Z","snapshot_observed_at":"2026-07-06T16:36:23.513728Z","submitted_at":"2023-10-20T19:14:59Z","title":"Copyright Violations and Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.13771","snapshot_observed_at":"2026-08-07T00:46:10.117323Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.117323Z"},"links":{"cited_paper":"/paper/2310.13771","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:af13355cbabbd676d0423946eb2d8244f546500c2d03f68d744ee443db718c50","observation_id":"0bbaf945-3fbb-412b-888d-12b6e30a0c10","resolution":{"observed_at":"2026-08-07T00:46:10.117323Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:10.121598Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.121598Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:67bd3ae9589e0fe4e5cb08a627e2c1b03f343a8c2d5c399b57f0ff67969f040f","observation_id":"01ff4e5f-a0c9-45fd-bf85-1e45f6c36d16","resolution":{"observed_at":"2026-08-07T00:46:10.121598Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2006.05336","last_updated":"2020-06-09T15:17:21Z","snapshot_observed_at":"2026-07-06T09:27:21.949573Z","submitted_at":"2020-06-09T15:17:21Z","title":"On the Effectiveness of Regularization Against Membership Inference Attacks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2006.05336","snapshot_observed_at":"2026-08-07T00:46:10.125502Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.125502Z"},"links":{"cited_paper":"/paper/2006.05336","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:aa3c5d612082af0c5ae441c1144257f1d28ee17949f941fc32c1aefc63e4ad46","observation_id":"9fb467b9-f255-4526-bb6b-6127d1da313a","resolution":{"observed_at":"2026-08-07T00:46:10.125502Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.03123","last_updated":"2025-01-12T21:07:54Z","snapshot_observed_at":"2026-07-06T15:23:29.240615Z","submitted_at":"2023-04-13T16:01:28Z","title":"ChatGPT Needs SPADE (Sustainability, PrivAcy, Digital divide, and Ethics) Evaluation: A Review","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.03123","snapshot_observed_at":"2026-08-07T00:46:10.129541Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.129541Z"},"links":{"cited_paper":"/paper/2305.03123","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:9441a7b7a321fb790004d9be0c28a5f4f13e004ff6d1b64ddcac71061d09d2a3","observation_id":"a97f31a1-4def-4b89-8899-916d2862bedc","resolution":{"observed_at":"2026-08-07T00:46:10.129541Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:10.133665Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.133665Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:4cfb9c2d9e5aa49893a667550584d69b5fbd67158af74a2cae98fda5cc9d63ae","observation_id":"247b37b0-886d-4a4c-9a03-60a0af906558","resolution":{"observed_at":"2026-08-07T00:46:10.133665Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:10.137660Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.137660Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:e6016879ae231c9e22d544d92a67e1161efde5ecbd22c5d3b9a0cde1938e551f","observation_id":"acc0b6f0-f2ec-44c1-888b-7e959ee06419","resolution":{"observed_at":"2026-08-07T00:46:10.137660Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.00363","last_updated":"2023-09-01T09:40:36Z","snapshot_observed_at":"2026-07-06T16:13:11.333980Z","submitted_at":"2023-09-01T09:40:36Z","title":"FederatedScope-LLM: A Comprehensive Package for Fine-tuning Large Language Models in Federated Learning","version":1},"cited_work":{"arxiv_id":"2309.00363","doi":null,"metadata_source":"pith","pith_arxiv_id":"2309.00363","snapshot_observed_at":"2026-08-07T00:46:11.517800Z","title":"FederatedScope-LLM: A Comprehensive Package for Fine-tuning Large Language Models in Federated Learning","venue":"cs.LG","work_id":"a6271cdd-fb70-474e-a16a-bfb358184d76","year":2023},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.141934Z"},"links":{"cited_paper":"/paper/2309.00363","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:fd62a9f09b21500aff10c33257134adfad6ee5239fe8d520f216e6d8038884e5","observation_id":"e2e5fb40-0910-41f1-bbb7-89f039cefb58","resolution":{"observed_at":"2026-08-07T00:46:11.522750Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.00267","last_updated":"2024-09-03T14:01:54Z","snapshot_observed_at":"2026-07-06T16:13:07.384791Z","submitted_at":"2023-09-01T05:53:33Z","title":"RLAIF vs. RLHF: Scaling Reinforcement Learning from Human Feedback with AI Feedback","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.00267","snapshot_observed_at":"2026-08-07T00:46:10.146710Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.146710Z"},"links":{"cited_paper":"/paper/2309.00267","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:d930b1244f4f728e230512959adf2a4e212151d2a1591853a6d4dbb180dbb7e8","observation_id":"31ab7497-1980-49ab-92c8-af798d34ed55","resolution":{"observed_at":"2026-08-07T00:46:10.146710Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2107.06499","last_updated":"2022-03-24T19:29:45Z","snapshot_observed_at":"2026-08-05T18:30:13.997811Z","submitted_at":"2021-07-14T06:06:52Z","title":"Deduplicating Training Data Makes Language Models Better","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2107.06499","snapshot_observed_at":"2026-08-07T00:46:10.150709Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.150709Z"},"links":{"cited_paper":"/paper/2107.06499","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:9baff6a3b50a1cfe57d905ae8407c9367074d7700a943abf613fc7208ee77833","observation_id":"86ba1150-60aa-4fa2-a57d-ae0a840b7a78","resolution":{"observed_at":"2026-08-07T00:46:10.150709Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:10.155582Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.155582Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:e0008fe79dfaa084aa41faee8b759a5686402011d604aa2ba3aff4ad5c239c17","observation_id":"a3ee3a2d-0e4c-4f17-91d0-75218a3be1a9","resolution":{"observed_at":"2026-08-07T00:46:10.155582Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2304.05197","last_updated":"2023-11-01T05:14:01Z","snapshot_observed_at":"2026-07-06T15:14:24.794122Z","submitted_at":"2023-04-11T13:05:04Z","title":"Multi-step Jailbreaking Privacy Attacks on ChatGPT","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2304.05197","snapshot_observed_at":"2026-08-07T00:46:10.159449Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.159449Z"},"links":{"cited_paper":"/paper/2304.05197","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:b0d6c3cf8018490b87ef58849dc61f6cff699ee97d186412407c418a1975685f","observation_id":"8ee003a4-d249-40a4-8d2b-ffcf7a084972","resolution":{"observed_at":"2026-08-07T00:46:10.159449Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:10.164065Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.164065Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:632a6780ef84025bec59dd3ad83ce8d55147938834ef5a626e44730fc53744d5","observation_id":"acafedcd-9cae-4723-bedd-5d0ee111464a","resolution":{"observed_at":"2026-08-07T00:46:10.164065Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2203.14207","last_updated":"2023-05-03T09:09:22Z","snapshot_observed_at":"2026-08-06T09:21:29.388487Z","submitted_at":"2022-03-27T04:41:55Z","title":"Text Adversarial Purification as Defense against Adversarial Attacks","version":2},"cited_work":{"arxiv_id":"2203.14207","doi":null,"metadata_source":"pith","pith_arxiv_id":"2203.14207","snapshot_observed_at":"2026-08-07T00:46:11.443419Z","title":"Text Adversarial Purification as Defense against Adversarial Attacks","venue":"cs.CL","work_id":"b2ec8b4c-0b14-4b91-b0be-56147458a393","year":2022},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.168237Z"},"links":{"cited_paper":"/paper/2203.14207","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:8129c053bb96025cb8fc6e20e2bc2eb68b4828f32c89b9269e84a52e03c633cc","observation_id":"32b8f661-b285-44c1-a1f0-328f22ee1280","resolution":{"observed_at":"2026-08-07T00:46:11.448154Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.01994","last_updated":"2024-02-03T02:32:45Z","snapshot_observed_at":"2026-08-06T06:57:02.890083Z","submitted_at":"2024-02-03T02:32:45Z","title":"Human-Centered Privacy Research in the Age of Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.01994","snapshot_observed_at":"2026-08-07T00:46:10.172818Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.172818Z"},"links":{"cited_paper":"/paper/2402.01994","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:f55011e095be5a26c327b65d708c6e7372082318218af34dc7ec3082d059db81","observation_id":"6c4fdef9-f070-4ea8-b739-1f8c21699090","resolution":{"observed_at":"2026-08-07T00:46:10.172818Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2110.05679","last_updated":"2022-11-10T18:42:34Z","snapshot_observed_at":"2026-07-06T11:56:47.302637Z","submitted_at":"2021-10-12T01:45:27Z","title":"Large Language Models Can Be Strong Differentially Private Learners","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2110.05679","snapshot_observed_at":"2026-08-07T00:46:10.178309Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.178309Z"},"links":{"cited_paper":"/paper/2110.05679","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:5172d1716a578b21a523f2ab01551b0adb18853a0b76fdefc3aa9810e67a96fc","observation_id":"8013d41a-81b1-42a4-bcd2-a99e88ecf4d1","resolution":{"observed_at":"2026-08-07T00:46:10.178309Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.05459","last_updated":"2024-05-08T06:16:23Z","snapshot_observed_at":"2026-08-02T13:57:57.119489Z","submitted_at":"2024-01-10T09:25:45Z","title":"Personal LLM Agents: Insights and Survey about the Capability, Efficiency and Security","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.05459","snapshot_observed_at":"2026-08-07T00:46:10.182617Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.182617Z"},"links":{"cited_paper":"/paper/2401.05459","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:b83ca1571dbd6ec78bfdd5c7a477bcfed42bec4a534d07b90ddc4027ed78d010","observation_id":"a7654b3e-b578-4150-8e2d-a553b2d2a7b5","resolution":{"observed_at":"2026-08-07T00:46:10.182617Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.05868","last_updated":"2025-03-20T20:15:22Z","snapshot_observed_at":"2026-07-06T17:27:33.275341Z","submitted_at":"2024-02-08T17:57:11Z","title":"EmojiPrompt: Generative Prompt Obfuscation for Privacy-Preserving Communication with Cloud-based LLMs","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.05868","snapshot_observed_at":"2026-08-07T00:46:10.186603Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.186603Z"},"links":{"cited_paper":"/paper/2402.05868","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:9f19b92302e89256b4301d69ed731e5eb4bbfab66fd8e6045344694472bdc829","observation_id":"1410d7d2-f156-4ff8-9196-5e92fe386090","resolution":{"observed_at":"2026-08-07T00:46:10.186603Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:10.192023Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.192023Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:5a7ea6617205bc7eea0236a9ddf1fb87251a6f4f547c58a34af4575ae28a9a3d","observation_id":"8641b70a-73f5-4610-a1ac-0a8bc454c018","resolution":{"observed_at":"2026-08-07T00:46:10.192023Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.13860","last_updated":"2024-03-10T13:58:08Z","snapshot_observed_at":"2026-07-06T15:31:18.144952Z","submitted_at":"2023-05-23T09:33:38Z","title":"Jailbreaking ChatGPT via Prompt Engineering: An Empirical Study","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.13860","snapshot_observed_at":"2026-08-07T00:46:10.201081Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.201081Z"},"links":{"cited_paper":"/paper/2305.13860","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:27a488f0f3aa91e85ff9db47d654a3b3c165effe7370c71f582a648b621f2c49","observation_id":"0bb72fd1-f74b-478f-929d-341da8fa7af3","resolution":{"observed_at":"2026-08-07T00:46:10.201081Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.14905","last_updated":"2024-06-27T03:53:46Z","snapshot_observed_at":"2026-08-07T05:13:11.135540Z","submitted_at":"2024-02-22T18:58:55Z","title":"MobileLLM: Optimizing Sub-billion Parameter Language Models for On-Device Use Cases","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.14905","snapshot_observed_at":"2026-08-07T00:46:10.205737Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.205737Z"},"links":{"cited_paper":"/paper/2402.14905","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:1b138aa6291d180262bc6c584541142bf0a0fd48938413845d6726e0a0deeea0","observation_id":"e1d4d83b-176d-40f0-bc97-3eaa9acbc41c","resolution":{"observed_at":"2026-08-07T00:46:10.205737Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:10.210424Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.210424Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:c804605c1ced17eb5f7cba856d1fa74e64706eb5425c9d61581073b097646fe2","observation_id":"8978e9ff-5f35-413f-ab36-4d4ce4d500a3","resolution":{"observed_at":"2026-08-07T00:46:10.210424Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:10.214450Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.214450Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:b659b9cd029683aab512bf50810bde354509a8d75fcea5ed2f3e7b13c6a21e57","observation_id":"6c4d199a-318c-48a2-ac4b-8c03d7244387","resolution":{"observed_at":"2026-08-07T00:46:10.214450Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:10.218245Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":74,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.218245Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:f261f8a03b7fc138c279b9b96d0092d567b1f81ee561f12482c463845d6bf80a","observation_id":"60fe569a-c628-4c1b-8025-7d9c25363c47","resolution":{"observed_at":"2026-08-07T00:46:10.218245Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:10.222754Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":75,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.222754Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:71916b9c30f72c6df7b7b756c2475fccd1a039c65aa0e7b4645194a78de029bc","observation_id":"a493dc94-f6f9-45e4-8c84-4424dd39b06f","resolution":{"observed_at":"2026-08-07T00:46:10.222754Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07510","last_updated":"2025-07-25T12:28:15Z","snapshot_observed_at":"2026-08-07T06:30:15.183572Z","submitted_at":"2024-02-12T09:31:21Z","title":"Secret Collusion among AI Agents: Multi-Agent Deception via Steganography","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.07510","snapshot_observed_at":"2026-08-07T00:46:10.227961Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":76,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.227961Z"},"links":{"cited_paper":"/paper/2402.07510","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:2c186cf70d3ac19b426fa368f461bce60de557d960409aaebb14c6c7305eb62b","observation_id":"a394d109-ef5c-4b68-a2b1-739b6f3181b4","resolution":{"observed_at":"2026-08-07T00:46:10.227961Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.10538","last_updated":"2023-12-03T13:18:09Z","snapshot_observed_at":"2026-07-06T16:49:04.651019Z","submitted_at":"2023-11-17T14:06:05Z","title":"Testing Language Model Agents Safely in the Wild","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.10538","snapshot_observed_at":"2026-08-07T00:46:10.232093Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":77,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.232093Z"},"links":{"cited_paper":"/paper/2311.10538","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:f0536de7385db39e94f4abac20a937c07808a28fbbcceea2a761100ea335693e","observation_id":"017bb9fe-4dc4-4907-b71d-a138c567956d","resolution":{"observed_at":"2026-08-07T00:46:10.232093Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2112.09332","last_updated":"2022-06-01T19:08:11Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2021-12-17T05:43:43Z","title":"WebGPT: Browser-assisted question-answering with human feedback","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2112.09332","snapshot_observed_at":"2026-08-07T00:46:10.236136Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":78,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.236136Z"},"links":{"cited_paper":"/paper/2112.09332","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:e9919c53aaa46f07b876e6ce13f059022b4ad6d93852a7ebafc212c8e0365197","observation_id":"7c9ee1e7-6215-405f-a051-886c5e951a5d","resolution":{"observed_at":"2026-08-07T00:46:10.236136Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.17035","last_updated":"2023-11-28T18:47:03Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-11-28T18:47:03Z","title":"Scalable Extraction of Training Data from (Production) Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.17035","snapshot_observed_at":"2026-08-07T00:46:10.240817Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":79,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.240817Z"},"links":{"cited_paper":"/paper/2311.17035","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:077e9161dc56e63d95a735282dd15fcf184aa3c96d6a1817dfabbbb3cec5af77","observation_id":"4ee2237d-86bb-4c83-956a-2719877f4c06","resolution":{"observed_at":"2026-08-07T00:46:10.240817Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.06717","last_updated":"2024-05-30T19:26:05Z","snapshot_observed_at":"2026-07-06T17:00:04.276081Z","submitted_at":"2023-12-11T01:26:53Z","title":"Privacy Issues in Large Language Models: A Survey","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.06717","snapshot_observed_at":"2026-08-07T00:46:10.244584Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":80,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.244584Z"},"links":{"cited_paper":"/paper/2312.06717","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:698824c949c0fb5e693931691f9fb2dfce4b0de77e6eda6aa339e68af5d67118","observation_id":"f0c379e6-3b3d-40ec-a69f-de096a767e22","resolution":{"observed_at":"2026-08-07T00:46:10.244584Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:10.248312Z","title":null,"venue":null,"work_id":null,"year":2004},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":81,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.248312Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:3962547e012e7e480e63307f603b29105f29b8ecde3a42e04b4367a20c80d479","observation_id":"fc4fff79-bed4-4235-81bd-f181eadbcb5e","resolution":{"observed_at":"2026-08-07T00:46:10.248312Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:10.251921Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":82,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.251921Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:1d89574b0effc8ef84d0e7b8b5511404c36a8549f5985cd5dd70cd51cd3dc9e3","observation_id":"163e0db5-a564-437b-ae9d-c92bdf8a90d1","resolution":{"observed_at":"2026-08-07T00:46:10.251921Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:10.256229Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":83,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.256229Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:09124aff42a5e0ab5728b80a32c19423158190f20856db6823b9e05cc142ae9b","observation_id":"0e549ca7-cca5-48c6-85c5-477be4655943","resolution":{"observed_at":"2026-08-07T00:46:10.256229Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.05699","last_updated":"2024-06-08T06:13:55Z","snapshot_observed_at":"2026-08-04T06:32:55.126254Z","submitted_at":"2024-02-08T14:21:03Z","title":"Self-Alignment of Large Language Models via Monopolylogue-based Social Scene Simulation","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.05699","snapshot_observed_at":"2026-08-07T00:46:10.260774Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":84,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.260774Z"},"links":{"cited_paper":"/paper/2402.05699","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:f1ca4211cd17272f92c67233e9f705636a08273853fe259ca380417b9a9c27cc","observation_id":"2e7469bc-7198-4777-b1b2-bce72bb4f9f5","resolution":{"observed_at":"2026-08-07T00:46:10.260774Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:10.264840Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":85,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.264840Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:0d72f6a926e10f25ed1191c7eeea8ec892c19d599f00bde63bfd691663bcceaf","observation_id":"0303c728-8883-4864-9225-339e3630f5ab","resolution":{"observed_at":"2026-08-07T00:46:10.264840Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.15008","last_updated":"2023-05-24T10:48:05Z","snapshot_observed_at":"2026-07-06T15:32:25.931739Z","submitted_at":"2023-05-24T10:48:05Z","title":"Are Chatbots Ready for Privacy-Sensitive Applications? An Investigation into Input Regurgitation and Prompt-Induced Sanitization","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.15008","snapshot_observed_at":"2026-08-07T00:46:10.268928Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":86,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.268928Z"},"links":{"cited_paper":"/paper/2305.15008","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:a81d8d624814fc29d649f0fae42a5ab46b0acc435634e6772e28a212da80bd86","observation_id":"60e94ea9-6060-4362-a0a3-d66b67897787","resolution":{"observed_at":"2026-08-07T00:46:10.268928Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:10.272761Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":87,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.272761Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:26006962f328b150774cf9adbbcb772917d97eee3ce8400a961afa0d71198e8a","observation_id":"927d5938-730c-4533-b171-657972d434e5","resolution":{"observed_at":"2026-08-07T00:46:10.272761Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.14965","last_updated":"2024-03-27T04:38:44Z","snapshot_observed_at":"2026-08-07T01:32:47.981682Z","submitted_at":"2023-05-24T09:57:37Z","title":"Tricking LLMs into Disobedience: Formalizing, Analyzing, and Detecting Jailbreaks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.14965","snapshot_observed_at":"2026-08-07T00:46:10.276577Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":88,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.276577Z"},"links":{"cited_paper":"/paper/2305.14965","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:2563cbd74145c6a6444eea89d6db0c5fc9906d4cb86a0f4d073e29ef28ee6485","observation_id":"53501d80-3eda-4740-bb0c-5dd8c415a90c","resolution":{"observed_at":"2026-08-07T00:46:10.276577Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:10.280592Z","title":null,"venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":89,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.280592Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:0636f377a49d612514a63d5da452cecfdff0d1e0393c50a8121c80701c7ee398","observation_id":"bb06e0d8-eefc-478b-8e23-50ed228698a8","resolution":{"observed_at":"2026-08-07T00:46:10.280592Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:10.284843Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":90,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.284843Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:df18f552c85d0fac93c7b27376131691b4467b5768d24be84a175b285e69ed61","observation_id":"76cd9b02-c281-4e6e-ad6a-3aa547aa7b5e","resolution":{"observed_at":"2026-08-07T00:46:10.284843Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:10.288651Z","title":null,"venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":91,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.288651Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:051d7712e4f18b619ed5621d47452b47e092918cc0db24a77394375a0a2bf39b","observation_id":"6880f691-d74b-4467-8de1-68a6884905d1","resolution":{"observed_at":"2026-08-07T00:46:10.288651Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.02486","last_updated":"2025-02-21T01:13:08Z","snapshot_observed_at":"2026-08-05T09:53:25.030382Z","submitted_at":"2024-10-03T13:48:35Z","title":"Encryption-Friendly LLM Architecture","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.02486","snapshot_observed_at":"2026-08-07T00:46:10.292901Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":92,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.292901Z"},"links":{"cited_paper":"/paper/2410.02486","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:73af26f4640f64562dbee0c7b447aecb8def45bdfe2ba3f24a7e17b63726bcd1","observation_id":"2a224452-8a38-4d6c-b6c7-37353f505476","resolution":{"observed_at":"2026-08-07T00:46:10.292901Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:10.297534Z","title":"Why should i trust you?","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":93,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.297534Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:5cda9c05ba2af774e598017f349e7c3396ac150dd49d15a0a432383fadc2c937","observation_id":"08925f9b-1a7a-473e-9014-f3f1a03a45e0","resolution":{"observed_at":"2026-08-07T00:46:10.297534Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:10.301358Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":94,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.301358Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:f2641fa8cd00df652ff913b1b3117c6b7be6dc88c2fbaf4578cb42c1803dc011","observation_id":"e09991f1-1dfc-4010-9c00-cafb84c15078","resolution":{"observed_at":"2026-08-07T00:46:10.301358Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.08100","last_updated":"2024-03-12T22:21:48Z","snapshot_observed_at":"2026-08-07T00:32:59.670456Z","submitted_at":"2024-03-12T22:21:48Z","title":"Efficient Language Model Architectures for Differentially Private Federated Learning","version":1},"cited_work":{"arxiv_id":"2403.08100","doi":null,"metadata_source":"pith","pith_arxiv_id":"2403.08100","snapshot_observed_at":"2026-08-07T00:46:11.178328Z","title":"Efficient Language Model Architectures for Differentially Private Federated Learning","venue":"cs.LG","work_id":"78e4884f-9042-4a43-9ff4-05c9493c6114","year":2024},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":95,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.305019Z"},"links":{"cited_paper":"/paper/2403.08100","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:3289dcd48a112d208ef102b6555d081158a86b6738f8d46e842ca4a89d189024","observation_id":"41daa235-5a1b-45cd-8916-3802127887f3","resolution":{"observed_at":"2026-08-07T00:46:11.183127Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.03684","last_updated":"2024-06-11T19:02:52Z","snapshot_observed_at":"2026-07-06T16:28:22.350574Z","submitted_at":"2023-10-05T17:01:53Z","title":"SmoothLLM: Defending Large Language Models Against Jailbreaking Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.03684","snapshot_observed_at":"2026-08-07T00:46:10.309375Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":96,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.309375Z"},"links":{"cited_paper":"/paper/2310.03684","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:458a1be1a8d5c5f8fed23b00f5fddbadf106d7230cea8a885d11355ea29d83f0","observation_id":"96176b6e-3c80-4a61-91da-fac799253e24","resolution":{"observed_at":"2026-08-07T00:46:10.309375Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:10.313298Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":97,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.313298Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:2ce59b4629b16040818ce52e71343e8d0658e860cf079b4384dcb4c9a5496a9b","observation_id":"5b0574ca-86df-4f12-aebe-90ea31d23274","resolution":{"observed_at":"2026-08-07T00:46:10.313298Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:46:10.317499Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":98,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.317499Z"},"links":{"citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:46b6a685c5f8ebd8efb0d5a0985a1d1fed169964aadbdc7af61747a603d508e4","observation_id":"127a966c-bc96-43aa-9665-d323b3f154df","resolution":{"observed_at":"2026-08-07T00:46:10.317499Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.15817","last_updated":"2024-05-17T17:17:45Z","snapshot_observed_at":"2026-07-06T16:24:30.545494Z","submitted_at":"2023-09-25T17:08:02Z","title":"Identifying the Risks of LM Agents with an LM-Emulated Sandbox","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.15817","snapshot_observed_at":"2026-08-07T00:46:10.321672Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":99,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.321672Z"},"links":{"cited_paper":"/paper/2309.15817","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:e6fe7cbe617b9e9535e364fe64f264b3a5f821d029628836b7f5d5bd401735df","observation_id":"a791b14b-7418-45a6-8c58-e0a7c4a5349a","resolution":{"observed_at":"2026-08-07T00:46:10.321672Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2501.01672","last_updated":"2025-01-07T05:36:41Z","snapshot_observed_at":"2026-07-06T20:16:03.707754Z","submitted_at":"2025-01-03T07:19:23Z","title":"Practical Secure Inference Algorithm for Fine-tuned Large Language Model Based on Fully Homomorphic Encryption","version":2},"cited_work":{"arxiv_id":"2501.01672","doi":null,"metadata_source":"pith","pith_arxiv_id":"2501.01672","snapshot_observed_at":"2026-08-07T00:46:11.125292Z","title":"Practical Secure Inference Algorithm for Fine-tuned Large Language Model Based on Fully Homomorphic Encryption","venue":"cs.CR","work_id":"6f753819-dc63-4084-b7cf-39c27c0b6a66","year":2025},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":100,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.325905Z"},"links":{"cited_paper":"/paper/2501.01672","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:053331ac19aeab2faf6661a32e41ff7ab623d78d8b43780bda832e4476e088f2","observation_id":"af657e7c-3178-47ce-89b3-c961e5cc741b","resolution":{"observed_at":"2026-08-07T00:46:11.130238Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1910.01108","last_updated":"2020-03-01T02:57:50Z","snapshot_observed_at":"2026-08-03T03:32:02.223426Z","submitted_at":"2019-10-02T17:56:28Z","title":"DistilBERT, a distilled version of BERT: smaller, faster, cheaper and lighter","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1910.01108","snapshot_observed_at":"2026-08-07T00:46:10.329817Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":101,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.329817Z"},"links":{"cited_paper":"/paper/1910.01108","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:ac9e0f3bb1bffcab3a2c9e6b0d669ddeb7c48b85f1ab66324d9a7cd612f28a3f","observation_id":"e99fef94-2a25-4944-8583-5bc2ceab55cf","resolution":{"observed_at":"2026-08-07T00:46:10.329817Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","latest_version":2,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation"},"reference_resolution":{"displayed":100,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":94,"verified_exact":6,"verified_fuzzy":0},"total_outbound_references":160},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 7 August 2026, this Paper Citation Record lists 100 of 160 outbound references and 0 inbound Pith citation observations for arXiv:2506.12699."}