{"as_of":"2026-08-08T01:10:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:a45679a6279ffba0b9f98239ebaf358b0e0cf1f4a878c77d33f35fa0379dff39","coverage":[{"denominator":14,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":14,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T23:21:55.922723Z","state":"measured"},{"denominator":14,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":14,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2506.19874/citation-record","integrity":"/paper/2506.19874/integrity","json":"/paper/2506.19874/citation-record.json","paper":"/paper/2506.19874"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2303.08774","last_updated":"2024-03-04T06:01:33Z","snapshot_observed_at":"2026-08-07T07:30:12.213965Z","submitted_at":"2023-03-15T17:15:04Z","title":"GPT-4 Technical Report","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.08774","snapshot_observed_at":"2026-08-06T23:21:53.525220Z","title":"L., Almeida, D., Altenschmidt, J., Altman, S., Anadkat, S., et al","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.19874","last_updated":"2025-06-26T08:45:10Z","snapshot_observed_at":"2026-08-06T23:13:44.374765Z","submitted_at":"2025-06-23T11:57:41Z","title":"Towards Provable (In)Secure Model Weight Release Schemes","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-06T23:21:53.525220Z"},"links":{"cited_paper":"/paper/2303.08774","citing_paper":"/paper/2506.19874"},"observation_digest":"sha256:2c1228f9bb3e06d4b3f889d9993f9fd3b991c599910903e2d45a7ef897043e43","observation_id":"f6535dde-385f-4678-9645-5a2efb382313","resolution":{"observed_at":"2026-08-06T23:21:53.525220Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.14883","last_updated":"2024-06-05T11:30:02Z","snapshot_observed_at":"2026-07-06T17:34:16.065501Z","submitted_at":"2024-02-22T04:55:14Z","title":"Double-I Watermark: Protecting Model Copyright for LLM Fine-tuning","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.14883","snapshot_observed_at":"2026-08-06T23:21:54.184770Z","title":"Double- i watermark: Protecting model copyright for llm fine- tuning.arXiv preprint arXiv:2402.14883,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.19874","last_updated":"2025-06-26T08:45:10Z","snapshot_observed_at":"2026-08-06T23:13:44.374765Z","submitted_at":"2025-06-23T11:57:41Z","title":"Towards Provable (In)Secure Model Weight Release Schemes","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-06T23:21:54.184770Z"},"links":{"cited_paper":"/paper/2402.14883","citing_paper":"/paper/2506.19874"},"observation_digest":"sha256:34697bd71c7e35bb85017e782258e3365a13f8f2a1b16ce3b4c972bd62ced342","observation_id":"0de97bd3-4ac0-439f-bb61-b32e38543dd1","resolution":{"observed_at":"2026-08-06T23:21:54.184770Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T23:21:54.540440Z","title":"Slip: Securing llms ip using weights decomposition.arXiv preprint arXiv:2407.10886,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.19874","last_updated":"2025-06-26T08:45:10Z","snapshot_observed_at":"2026-08-06T23:13:44.374765Z","submitted_at":"2025-06-23T11:57:41Z","title":"Towards Provable (In)Secure Model Weight Release Schemes","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-06T23:21:54.540440Z"},"links":{"citing_paper":"/paper/2506.19874"},"observation_digest":"sha256:9905fc89b84532faad49bf52a59fe51ecde243d8e375ae87d480c52f8f6d8f9d","observation_id":"ca8474ac-c7a1-42c9-afff-4e4aa32ec3e8","resolution":{"observed_at":"2026-08-06T23:21:54.540440Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.09288","last_updated":"2023-07-19T17:08:59Z","snapshot_observed_at":"2026-08-07T12:56:43.323460Z","submitted_at":"2023-07-18T14:31:57Z","title":"Llama 2: Open Foundation and Fine-Tuned Chat Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.09288","snapshot_observed_at":"2026-08-06T23:21:54.943747Z","title":"Llama 2: Open foundation and fine- tuned chat models.arXiv preprint arXiv:2307.09288,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.19874","last_updated":"2025-06-26T08:45:10Z","snapshot_observed_at":"2026-08-06T23:13:44.374765Z","submitted_at":"2025-06-23T11:57:41Z","title":"Towards Provable (In)Secure Model Weight Release Schemes","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-06T23:21:54.943747Z"},"links":{"cited_paper":"/paper/2307.09288","citing_paper":"/paper/2506.19874"},"observation_digest":"sha256:ce9cd0c4062fce0ba493b462f83b1840507b4a0dcfd18f62223188c9c6a0c873","observation_id":"5ea814cf-172a-4d85-8745-65ddb47eca44","resolution":{"observed_at":"2026-08-06T23:21:54.943747Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T23:21:57.597379Z","title":"Taylor unswift: Secured weight release for large language models via Taylor expansion","venue":null,"work_id":"1530f3b8-f583-4a39-b620-4c57e2bcc2cf","year":2024},"citing_paper":{"arxiv_id":"2506.19874","last_updated":"2025-06-26T08:45:10Z","snapshot_observed_at":"2026-08-06T23:13:44.374765Z","submitted_at":"2025-06-23T11:57:41Z","title":"Towards Provable (In)Secure Model Weight Release Schemes","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-06T23:21:55.155034Z"},"links":{"citing_paper":"/paper/2506.19874"},"observation_digest":"sha256:808649f6dec8af06d5659e44f7b0619b9f7269d959f65c7dd3a8c89147a3a1bc","observation_id":"0d45da6a-e914-4f9e-9c6e-2e8eb214d4fe","resolution":{"observed_at":"2026-08-06T23:21:57.674755Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T23:21:55.425112Z","title":"doi: 10.18653/v1/2024.emnlp-main","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.19874","last_updated":"2025-06-26T08:45:10Z","snapshot_observed_at":"2026-08-06T23:13:44.374765Z","submitted_at":"2025-06-23T11:57:41Z","title":"Towards Provable (In)Secure Model Weight Release Schemes","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-06T23:21:55.425112Z"},"links":{"citing_paper":"/paper/2506.19874"},"observation_digest":"sha256:95daa3741779bab76bb76cdfdd9ed8f01b5ac7a1b12d2fee257e9bc43c6a065e","observation_id":"11037770-868f-446d-b210-9d7e2499008b","resolution":{"observed_at":"2026-08-06T23:21:55.425112Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.05156","last_updated":"2024-03-14T14:17:57Z","snapshot_observed_at":"2026-07-30T18:58:06.958154Z","submitted_at":"2024-03-08T08:47:48Z","title":"On Protecting the Data Privacy of Large Language Models (LLMs): A Survey","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.05156","snapshot_observed_at":"2026-08-06T23:21:55.922723Z","title":"On protecting the data privacy of large language models (llms): A survey.arXiv preprint arXiv:2403.05156,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.19874","last_updated":"2025-06-26T08:45:10Z","snapshot_observed_at":"2026-08-06T23:13:44.374765Z","submitted_at":"2025-06-23T11:57:41Z","title":"Towards Provable (In)Secure Model Weight Release Schemes","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-06T23:21:55.922723Z"},"links":{"cited_paper":"/paper/2403.05156","citing_paper":"/paper/2506.19874"},"observation_digest":"sha256:59054a1879aa8cc80a013dcc17865ba8709d95edeb16e457e7c20c3230aa878f","observation_id":"df172bc4-cad2-4e5f-9c72-38f1790e3b6c","resolution":{"observed_at":"2026-08-06T23:21:55.922723Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.19405","last_updated":"2025-05-26T01:42:37Z","snapshot_observed_at":"2026-08-07T14:12:40.563554Z","submitted_at":"2025-05-26T01:42:37Z","title":"CoTGuard: Using Chain-of-Thought Triggering for Copyright Protection in Multi-Agent LLM Systems","version":1},"cited_work":{"arxiv_id":"2505.19405","doi":null,"metadata_source":"pith","pith_arxiv_id":"2505.19405","snapshot_observed_at":"2026-08-06T23:21:56.325687Z","title":"CoTGuard: Using Chain-of-Thought Triggering for Copyright Protection in Multi-Agent LLM Systems","venue":"cs.CL","work_id":"dbd0523e-b162-4270-8bff-bcdc0f9a2f97","year":2025},"citing_paper":{"arxiv_id":"2506.19874","last_updated":"2025-06-26T08:45:10Z","snapshot_observed_at":"2026-08-06T23:13:44.374765Z","submitted_at":"2025-06-23T11:57:41Z","title":"Towards Provable (In)Secure Model Weight Release Schemes","version":2},"reference_index":393,"source":"pdf_text","source_observed_at":"2026-08-06T23:21:55.538307Z"},"links":{"cited_paper":"/paper/2505.19405","citing_paper":"/paper/2506.19874"},"observation_digest":"sha256:d9e62ccf778841d422e84234c5d275a268d12e9aad26ce0a90315a70b184f481","observation_id":"170a9545-e13f-4e6c-aca7-1f574d934aa3","resolution":{"observed_at":"2026-08-06T23:21:56.468416Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T23:21:53.906015Z","title":"doi: https://doi.org/10.1016/0022-0000(84)90070-9","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.19874","last_updated":"2025-06-26T08:45:10Z","snapshot_observed_at":"2026-08-06T23:13:44.374765Z","submitted_at":"2025-06-23T11:57:41Z","title":"Towards Provable (In)Secure Model Weight Release Schemes","version":2},"reference_index":1984,"source":"pdf_text","source_observed_at":"2026-08-06T23:21:53.906015Z"},"links":{"citing_paper":"/paper/2506.19874"},"observation_digest":"sha256:652dea1695a4defdbe0913b244c454b90a0480f26de95592b0ee05b8542f2076","observation_id":"00a0288a-a6e7-4ec9-b9a5-34e956cd6f99","resolution":{"observed_at":"2026-08-06T23:21:53.906015Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T23:21:53.794731Z","title":"Puma: Secure inference of llama-7b in five minutes.arXiv preprint arXiv:2307.12533,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.19874","last_updated":"2025-06-26T08:45:10Z","snapshot_observed_at":"2026-08-06T23:13:44.374765Z","submitted_at":"2025-06-23T11:57:41Z","title":"Towards Provable (In)Secure Model Weight Release Schemes","version":2},"reference_index":2004,"source":"pdf_text","source_observed_at":"2026-08-06T23:21:53.794731Z"},"links":{"citing_paper":"/paper/2506.19874"},"observation_digest":"sha256:e5e54bfe8122c4efe4f1f0a59f95f04e42e8e50bc4f115879f30112b6da33c04","observation_id":"e6bdcc5e-f044-49f3-acdc-99b5eba0ba56","resolution":{"observed_at":"2026-08-06T23:21:53.794731Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10383","last_updated":"2024-09-30T11:58:27Z","snapshot_observed_at":"2026-08-03T23:12:05.533433Z","submitted_at":"2023-10-16T13:23:54Z","title":"Privacy in Large Language Models: Attacks, Defenses and Future Directions","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.10383","snapshot_observed_at":"2026-08-06T23:21:54.035221Z","title":"Privacy in large language models: Attacks, defenses and future directions.arXiv preprint arXiv:2310.10383,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.19874","last_updated":"2025-06-26T08:45:10Z","snapshot_observed_at":"2026-08-06T23:13:44.374765Z","submitted_at":"2025-06-23T11:57:41Z","title":"Towards Provable (In)Secure Model Weight Release Schemes","version":2},"reference_index":2007,"source":"pdf_text","source_observed_at":"2026-08-06T23:21:54.035221Z"},"links":{"cited_paper":"/paper/2310.10383","citing_paper":"/paper/2506.19874"},"observation_digest":"sha256:895655f0d2d7a0a83c5ad38ecc01d5e341b2e000894026ec6734ccfd1bec9312","observation_id":"561bd4dc-13cc-4ab6-8b1f-3db001bc89ce","resolution":{"observed_at":"2026-08-06T23:21:54.035221Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.16609","last_updated":"2023-09-28T17:07:49Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-09-28T17:07:49Z","title":"Qwen Technical Report","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.16609","snapshot_observed_at":"2026-08-06T23:21:53.644924Z","title":"Qwen technical report.arXiv preprint arXiv:2309.16609,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.19874","last_updated":"2025-06-26T08:45:10Z","snapshot_observed_at":"2026-08-06T23:13:44.374765Z","submitted_at":"2025-06-23T11:57:41Z","title":"Towards Provable (In)Secure Model Weight Release Schemes","version":2},"reference_index":2023,"source":"pdf_text","source_observed_at":"2026-08-06T23:21:53.644924Z"},"links":{"cited_paper":"/paper/2309.16609","citing_paper":"/paper/2506.19874"},"observation_digest":"sha256:2709d69f4e1c49f74196b586c387ebae4e88d24d275b9a108a84ca5300af7015","observation_id":"2c968fb8-6d17-4064-99b1-2ed745feaf17","resolution":{"observed_at":"2026-08-06T23:21:53.644924Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.19437","last_updated":"2025-02-18T17:26:38Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-12-27T04:03:16Z","title":"DeepSeek-V3 Technical Report","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.19437","snapshot_observed_at":"2026-08-06T23:21:54.404745Z","title":"Deepseek-v3 technical report.arXiv preprint arXiv:2412.19437,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.19874","last_updated":"2025-06-26T08:45:10Z","snapshot_observed_at":"2026-08-06T23:13:44.374765Z","submitted_at":"2025-06-23T11:57:41Z","title":"Towards Provable (In)Secure Model Weight Release Schemes","version":2},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-06T23:21:54.404745Z"},"links":{"cited_paper":"/paper/2412.19437","citing_paper":"/paper/2506.19874"},"observation_digest":"sha256:147e58455076a34eec8a76ef0a892fa22dccc32a543395deb231c6e54b8ac745","observation_id":"56db9333-b736-4194-b5f8-fd98ddda5ee7","resolution":{"observed_at":"2026-08-06T23:21:54.404745Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.04636","last_updated":"2025-03-15T20:03:47Z","snapshot_observed_at":"2026-08-07T17:24:05.497268Z","submitted_at":"2025-03-06T17:24:06Z","title":"Mark Your LLM: Detecting the Misuse of Open-Source Large Language Models via Watermarking","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.04636","snapshot_observed_at":"2026-08-06T23:21:55.794064Z","title":"Mark your llm: Detecting the misuse of open-source large language models via watermarking.arXiv preprint arXiv:2503.04636,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.19874","last_updated":"2025-06-26T08:45:10Z","snapshot_observed_at":"2026-08-06T23:13:44.374765Z","submitted_at":"2025-06-23T11:57:41Z","title":"Towards Provable (In)Secure Model Weight Release Schemes","version":2},"reference_index":2025,"source":"pdf_text","source_observed_at":"2026-08-06T23:21:55.794064Z"},"links":{"cited_paper":"/paper/2503.04636","citing_paper":"/paper/2506.19874"},"observation_digest":"sha256:eabffd0f8fbbb326755611e5986a692f9ade01e860d569f1827a38f38935286c","observation_id":"de54523a-8a0d-4aa1-9c60-54cd653c7304","resolution":{"observed_at":"2026-08-06T23:21:55.794064Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2506.19874","last_updated":"2025-06-26T08:45:10Z","latest_version":2,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-06T23:13:44.374765Z","submitted_at":"2025-06-23T11:57:41Z","title":"Towards Provable (In)Secure Model Weight Release Schemes"},"reference_resolution":{"displayed":14,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":12,"verified_exact":1,"verified_fuzzy":1},"total_outbound_references":14},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 14 of 14 outbound references and 0 inbound Pith citation observations for arXiv:2506.19874."}