{"as_of":"2026-08-07T18:37:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:d6b56451381a6e0b0d7b2737e5796553a33878eff58958eab82862628bd2caea","coverage":[{"denominator":32,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":32,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T23:12:12.735780Z","state":"measured"},{"denominator":32,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":32,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2506.19889/citation-record","integrity":"/paper/2506.19889/integrity","json":"/paper/2506.19889/citation-record.json","paper":"/paper/2506.19889"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T23:12:13.327575Z","title":null,"venue":null,"work_id":"f8ea089d-39b4-4a83-b205-4dcfdf0f481e","year":2023},"citing_paper":{"arxiv_id":"2506.19889","last_updated":"2025-06-24T07:28:29Z","snapshot_observed_at":"2026-08-06T23:04:26.764384Z","submitted_at":"2025-06-24T07:28:29Z","title":"Retrieval-Confused Generation is a Good Defender for Privacy Violation Attack of Large Language Models","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-06T23:12:11.654778Z"},"links":{"citing_paper":"/paper/2506.19889"},"observation_digest":"sha256:d7cabd000b8c1c03d8580ad24f826582f8c5e4759f04e2f29c628381d09f9900","observation_id":"24663766-8be4-4bed-be4a-82e922cc95a0","resolution":{"observed_at":"2026-08-06T23:12:13.331599Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.16609","last_updated":"2023-09-28T17:07:49Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-09-28T17:07:49Z","title":"Qwen Technical Report","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.16609","snapshot_observed_at":"2026-08-06T23:12:11.749966Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.19889","last_updated":"2025-06-24T07:28:29Z","snapshot_observed_at":"2026-08-06T23:04:26.764384Z","submitted_at":"2025-06-24T07:28:29Z","title":"Retrieval-Confused Generation is a Good Defender for Privacy Violation Attack of Large Language Models","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-06T23:12:11.749966Z"},"links":{"cited_paper":"/paper/2309.16609","citing_paper":"/paper/2506.19889"},"observation_digest":"sha256:edd2d057e4bafd9a6091af37bf9bd20278e61b2b63e4d4a1f5d1f20c8f312c94","observation_id":"fd46741d-4acb-4748-b36c-8aaf4914ab2d","resolution":{"observed_at":"2026-08-06T23:12:11.749966Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T23:12:13.314774Z","title":null,"venue":null,"work_id":"2d74348d-fec6-451d-9dd2-e97ab740e19d","year":2024},"citing_paper":{"arxiv_id":"2506.19889","last_updated":"2025-06-24T07:28:29Z","snapshot_observed_at":"2026-08-06T23:04:26.764384Z","submitted_at":"2025-06-24T07:28:29Z","title":"Retrieval-Confused Generation is a Good Defender for Privacy Violation Attack of Large Language Models","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-06T23:12:11.814217Z"},"links":{"citing_paper":"/paper/2506.19889"},"observation_digest":"sha256:fd1b91021c7b1e5ffab9bb9359d6ab19d2186ab267cc0d47f34570f01d140e1c","observation_id":"04038d43-9e8c-493e-a4d1-5022a68facc5","resolution":{"observed_at":"2026-08-06T23:12:13.319015Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T23:12:13.301854Z","title":null,"venue":null,"work_id":"4a746acb-2143-4553-96bf-9376873e82fa","year":2024},"citing_paper":{"arxiv_id":"2506.19889","last_updated":"2025-06-24T07:28:29Z","snapshot_observed_at":"2026-08-06T23:04:26.764384Z","submitted_at":"2025-06-24T07:28:29Z","title":"Retrieval-Confused Generation is a Good Defender for Privacy Violation Attack of Large Language Models","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-06T23:12:11.916594Z"},"links":{"citing_paper":"/paper/2506.19889"},"observation_digest":"sha256:2919ea6caa818509a6d6d177b0d3b6825b6447bd48312fcd01c941b9db019706","observation_id":"ab7a413c-35e9-4c8d-93bc-8f57f77a6ff8","resolution":{"observed_at":"2026-08-06T23:12:13.306110Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T23:12:12.053812Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.19889","last_updated":"2025-06-24T07:28:29Z","snapshot_observed_at":"2026-08-06T23:04:26.764384Z","submitted_at":"2025-06-24T07:28:29Z","title":"Retrieval-Confused Generation is a Good Defender for Privacy Violation Attack of Large Language Models","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-06T23:12:12.053812Z"},"links":{"citing_paper":"/paper/2506.19889"},"observation_digest":"sha256:9ec1e058a383864d3921e5fdb4274199e959abafca637eda9169ea5bf9d69730","observation_id":"afdec6bb-d55b-4e50-8040-dfc0ada03854","resolution":{"observed_at":"2026-08-06T23:12:12.053812Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T23:12:13.280973Z","title":null,"venue":null,"work_id":"c251eb0b-068a-437f-bc7f-08d7c9ab2ac8","year":2024},"citing_paper":{"arxiv_id":"2506.19889","last_updated":"2025-06-24T07:28:29Z","snapshot_observed_at":"2026-08-06T23:04:26.764384Z","submitted_at":"2025-06-24T07:28:29Z","title":"Retrieval-Confused Generation is a Good Defender for Privacy Violation Attack of Large Language Models","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-06T23:12:12.193700Z"},"links":{"citing_paper":"/paper/2506.19889"},"observation_digest":"sha256:4ae47951efe820589450740b47c355d0801d6acf7a4c41b218ba1422957fac48","observation_id":"72009613-1328-496e-b718-32c2907f83f9","resolution":{"observed_at":"2026-08-06T23:12:13.285119Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T23:12:13.267835Z","title":null,"venue":null,"work_id":"2b2f0841-5843-484b-8ac1-9ee5f72cb6bc","year":2024},"citing_paper":{"arxiv_id":"2506.19889","last_updated":"2025-06-24T07:28:29Z","snapshot_observed_at":"2026-08-06T23:04:26.764384Z","submitted_at":"2025-06-24T07:28:29Z","title":"Retrieval-Confused Generation is a Good Defender for Privacy Violation Attack of Large Language Models","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-06T23:12:12.312452Z"},"links":{"citing_paper":"/paper/2506.19889"},"observation_digest":"sha256:194df0db20dc91e7420ea991a8cc2702a8ada14372aaff730c2aa5ec0137f8e2","observation_id":"170b73d2-2fbe-4eac-a46f-1f3f7505f014","resolution":{"observed_at":"2026-08-06T23:12:13.272459Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T23:12:12.398843Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2506.19889","last_updated":"2025-06-24T07:28:29Z","snapshot_observed_at":"2026-08-06T23:04:26.764384Z","submitted_at":"2025-06-24T07:28:29Z","title":"Retrieval-Confused Generation is a Good Defender for Privacy Violation Attack of Large Language Models","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-06T23:12:12.398843Z"},"links":{"citing_paper":"/paper/2506.19889"},"observation_digest":"sha256:9e67ee7d16556adfcd5f8b24f52a70923cb73152c65f3ca1a22a49e635b5df30","observation_id":"1beb4972-5e43-459c-97ab-8c8ca71f3f1e","resolution":{"observed_at":"2026-08-06T23:12:12.398843Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.19437","last_updated":"2025-02-18T17:26:38Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-12-27T04:03:16Z","title":"DeepSeek-V3 Technical Report","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.19437","snapshot_observed_at":"2026-08-06T23:12:12.501165Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.19889","last_updated":"2025-06-24T07:28:29Z","snapshot_observed_at":"2026-08-06T23:04:26.764384Z","submitted_at":"2025-06-24T07:28:29Z","title":"Retrieval-Confused Generation is a Good Defender for Privacy Violation Attack of Large Language Models","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-06T23:12:12.501165Z"},"links":{"cited_paper":"/paper/2412.19437","citing_paper":"/paper/2506.19889"},"observation_digest":"sha256:f101f8a6035626f1e4e2b00d129a2a785fb67dfce0fd189b7cdff89823d57140","observation_id":"b4e37e04-a58c-4f86-942e-9dfadcb4fea9","resolution":{"observed_at":"2026-08-06T23:12:12.501165Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.09785","last_updated":"2024-01-07T08:58:02Z","snapshot_observed_at":"2026-07-06T17:02:37.841641Z","submitted_at":"2023-12-15T13:40:25Z","title":"RJUA-QA: A Comprehensive QA Dataset for Urology","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.09785","snapshot_observed_at":"2026-08-06T23:12:12.626167Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.19889","last_updated":"2025-06-24T07:28:29Z","snapshot_observed_at":"2026-08-06T23:04:26.764384Z","submitted_at":"2025-06-24T07:28:29Z","title":"Retrieval-Confused Generation is a Good Defender for Privacy Violation Attack of Large Language Models","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-06T23:12:12.626167Z"},"links":{"cited_paper":"/paper/2312.09785","citing_paper":"/paper/2506.19889"},"observation_digest":"sha256:8b0a21e962cc4138228e2c69de857204cce095d6df48e2a02fb3e1e71e0cd234","observation_id":"3a8da68c-b058-45e3-a4c4-28b226492983","resolution":{"observed_at":"2026-08-06T23:12:12.626167Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T23:12:12.654002Z","title":"2010.Guide to protecting the confidentiality of personally identifiable information","venue":null,"work_id":null,"year":2010},"citing_paper":{"arxiv_id":"2506.19889","last_updated":"2025-06-24T07:28:29Z","snapshot_observed_at":"2026-08-06T23:04:26.764384Z","submitted_at":"2025-06-24T07:28:29Z","title":"Retrieval-Confused Generation is a Good Defender for Privacy Violation Attack of Large Language Models","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-06T23:12:12.654002Z"},"links":{"citing_paper":"/paper/2506.19889"},"observation_digest":"sha256:520eb469540513af48e98353b85d2a8c33e82edfbc1899e2e6cacf3f34767b89","observation_id":"b8d33209-3cfd-4db2-8676-75ede8f105a6","resolution":{"observed_at":"2026-08-06T23:12:12.654002Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"7480.2957","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T23:12:13.049556Z","title":null,"venue":null,"work_id":"03e9239d-3ebc-4dd6-8356-11b666bb766e","year":2023},"citing_paper":{"arxiv_id":"2506.19889","last_updated":"2025-06-24T07:28:29Z","snapshot_observed_at":"2026-08-06T23:04:26.764384Z","submitted_at":"2025-06-24T07:28:29Z","title":"Retrieval-Confused Generation is a Good Defender for Privacy Violation Attack of Large Language Models","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-06T23:12:12.657827Z"},"links":{"citing_paper":"/paper/2506.19889"},"observation_digest":"sha256:34e4bd58b9b211bd4dea4ff1b140760476413124c9c3fc909e7780afb0002dba","observation_id":"98f7f812-06b5-4f34-ad48-9b68a9b05def","resolution":{"observed_at":"2026-08-06T23:12:13.056641Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07927","last_updated":"2025-03-16T06:23:34Z","snapshot_observed_at":"2026-08-05T17:55:26.008016Z","submitted_at":"2024-02-05T19:49:13Z","title":"A Systematic Survey of Prompt Engineering in Large Language Models: Techniques and Applications","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.07927","snapshot_observed_at":"2026-08-06T23:12:12.661976Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.19889","last_updated":"2025-06-24T07:28:29Z","snapshot_observed_at":"2026-08-06T23:04:26.764384Z","submitted_at":"2025-06-24T07:28:29Z","title":"Retrieval-Confused Generation is a Good Defender for Privacy Violation Attack of Large Language Models","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-06T23:12:12.661976Z"},"links":{"cited_paper":"/paper/2402.07927","citing_paper":"/paper/2506.19889"},"observation_digest":"sha256:5378b391cc263a80360f4e1e489fb94508457e571519404e2d0ec86bb9804fd5","observation_id":"86a7e362-1855-4d06-8705-5f4e2e6719c6","resolution":{"observed_at":"2026-08-06T23:12:12.661976Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T23:12:12.666036Z","title":"do anything now","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.19889","last_updated":"2025-06-24T07:28:29Z","snapshot_observed_at":"2026-08-06T23:04:26.764384Z","submitted_at":"2025-06-24T07:28:29Z","title":"Retrieval-Confused Generation is a Good Defender for Privacy Violation Attack of Large Language Models","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-06T23:12:12.666036Z"},"links":{"citing_paper":"/paper/2506.19889"},"observation_digest":"sha256:4f56e53bb5c74bccc86c9faacf95f76bea0cddf5ce8b4c7b0291c28f8e126d0e","observation_id":"5cd32d41-c582-4d5c-9840-733a7adf3444","resolution":{"observed_at":"2026-08-06T23:12:12.666036Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.03085","last_updated":"2024-05-06T00:18:43Z","snapshot_observed_at":"2026-07-06T18:10:08.416524Z","submitted_at":"2024-05-06T00:18:43Z","title":"Compressing Long Context for Enhancing RAG with AMR-based Concept Distillation","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.03085","snapshot_observed_at":"2026-08-06T23:12:12.669606Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.19889","last_updated":"2025-06-24T07:28:29Z","snapshot_observed_at":"2026-08-06T23:04:26.764384Z","submitted_at":"2025-06-24T07:28:29Z","title":"Retrieval-Confused Generation is a Good Defender for Privacy Violation Attack of Large Language Models","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-06T23:12:12.669606Z"},"links":{"cited_paper":"/paper/2405.03085","citing_paper":"/paper/2506.19889"},"observation_digest":"sha256:0802c6a103d1c6632c1c8f687ada8a1b2924219df4b226d4ee40238f132befb0","observation_id":"aa0a5f4c-caa4-49bf-a852-b9da05e50ed3","resolution":{"observed_at":"2026-08-06T23:12:12.669606Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T23:12:13.230381Z","title":null,"venue":null,"work_id":"f74fd883-100c-44e6-8625-1c6be1bad57c","year":2021},"citing_paper":{"arxiv_id":"2506.19889","last_updated":"2025-06-24T07:28:29Z","snapshot_observed_at":"2026-08-06T23:04:26.764384Z","submitted_at":"2025-06-24T07:28:29Z","title":"Retrieval-Confused Generation is a Good Defender for Privacy Violation Attack of Large Language Models","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-06T23:12:12.673735Z"},"links":{"citing_paper":"/paper/2506.19889"},"observation_digest":"sha256:ff85b359b89755a036090eefb57b9c837a9a6f9c802279330e03990649af46ec","observation_id":"b3f8152d-c4c5-4545-bdc6-26e8a3bc3886","resolution":{"observed_at":"2026-08-06T23:12:13.234283Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T23:12:12.677714Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.19889","last_updated":"2025-06-24T07:28:29Z","snapshot_observed_at":"2026-08-06T23:04:26.764384Z","submitted_at":"2025-06-24T07:28:29Z","title":"Retrieval-Confused Generation is a Good Defender for Privacy Violation Attack of Large Language Models","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-06T23:12:12.677714Z"},"links":{"citing_paper":"/paper/2506.19889"},"observation_digest":"sha256:724b26698454062a833831c298f661e558003636b7ae7f0159676c8bb5e49233","observation_id":"f9828c00-6ad5-43cb-9003-125bf1eb02cf","resolution":{"observed_at":"2026-08-06T23:12:12.677714Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T23:12:13.207775Z","title":null,"venue":null,"work_id":"b09d2e40-21c4-4022-8ea7-6a01f5ef60dd","year":2024},"citing_paper":{"arxiv_id":"2506.19889","last_updated":"2025-06-24T07:28:29Z","snapshot_observed_at":"2026-08-06T23:04:26.764384Z","submitted_at":"2025-06-24T07:28:29Z","title":"Retrieval-Confused Generation is a Good Defender for Privacy Violation Attack of Large Language Models","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-06T23:12:12.685885Z"},"links":{"citing_paper":"/paper/2506.19889"},"observation_digest":"sha256:fbe1aa8e5606fac8f3dbe21f23504920bd7521e8974fa33fb806c53fe7b496cd","observation_id":"85f4b016-d47c-466d-843b-f3184eb90594","resolution":{"observed_at":"2026-08-06T23:12:13.211792Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.13846","last_updated":"2025-02-03T16:03:13Z","snapshot_observed_at":"2026-07-31T03:48:14.328064Z","submitted_at":"2024-02-21T14:44:00Z","title":"Large Language Models are Advanced Anonymizers","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.13846","snapshot_observed_at":"2026-08-06T23:12:12.689457Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.19889","last_updated":"2025-06-24T07:28:29Z","snapshot_observed_at":"2026-08-06T23:04:26.764384Z","submitted_at":"2025-06-24T07:28:29Z","title":"Retrieval-Confused Generation is a Good Defender for Privacy Violation Attack of Large Language Models","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-06T23:12:12.689457Z"},"links":{"cited_paper":"/paper/2402.13846","citing_paper":"/paper/2506.19889"},"observation_digest":"sha256:690a3bf80594d2b6813f7ca3e1bb18b013807bcb93421059afcb11a4b3ee2de5","observation_id":"c741d240-fb29-4721-8383-269f607198eb","resolution":{"observed_at":"2026-08-06T23:12:12.689457Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2302.13971","last_updated":"2023-02-27T17:11:15Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-02-27T17:11:15Z","title":"LLaMA: Open and Efficient Foundation Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2302.13971","snapshot_observed_at":"2026-08-06T23:12:12.693384Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.19889","last_updated":"2025-06-24T07:28:29Z","snapshot_observed_at":"2026-08-06T23:04:26.764384Z","submitted_at":"2025-06-24T07:28:29Z","title":"Retrieval-Confused Generation is a Good Defender for Privacy Violation Attack of Large Language Models","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-06T23:12:12.693384Z"},"links":{"cited_paper":"/paper/2302.13971","citing_paper":"/paper/2506.19889"},"observation_digest":"sha256:935c0ca256394d94e0ec61efd873d607b8aeb9812233c9e4bb0aedde5e54b8cc","observation_id":"a0b0f97f-86a6-4c63-b505-89757ad001a4","resolution":{"observed_at":"2026-08-06T23:12:12.693384Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T23:12:12.697024Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.19889","last_updated":"2025-06-24T07:28:29Z","snapshot_observed_at":"2026-08-06T23:04:26.764384Z","submitted_at":"2025-06-24T07:28:29Z","title":"Retrieval-Confused Generation is a Good Defender for Privacy Violation Attack of Large Language Models","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-06T23:12:12.697024Z"},"links":{"citing_paper":"/paper/2506.19889"},"observation_digest":"sha256:eed806bee8003c4fa85e58951b1351575e54406bdd0882b9ad40303736b06ccb","observation_id":"f889206f-fd54-4e79-b10c-7bbb6ae6fe78","resolution":{"observed_at":"2026-08-06T23:12:12.697024Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T23:12:13.166518Z","title":null,"venue":null,"work_id":"c0321738-a37c-4389-9fdb-be1eb6f44bf2","year":2024},"citing_paper":{"arxiv_id":"2506.19889","last_updated":"2025-06-24T07:28:29Z","snapshot_observed_at":"2026-08-06T23:04:26.764384Z","submitted_at":"2025-06-24T07:28:29Z","title":"Retrieval-Confused Generation is a Good Defender for Privacy Violation Attack of Large Language Models","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-06T23:12:12.704631Z"},"links":{"citing_paper":"/paper/2506.19889"},"observation_digest":"sha256:9d2dad81aa139da340601eb5fa86dd45251633f134b4063c58aa5033ac8a1ae9","observation_id":"0b0f11c0-eedd-4bdf-9597-9e35506a7c3b","resolution":{"observed_at":"2026-08-06T23:12:13.170702Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T23:12:12.708435Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.19889","last_updated":"2025-06-24T07:28:29Z","snapshot_observed_at":"2026-08-06T23:04:26.764384Z","submitted_at":"2025-06-24T07:28:29Z","title":"Retrieval-Confused Generation is a Good Defender for Privacy Violation Attack of Large Language Models","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-06T23:12:12.708435Z"},"links":{"citing_paper":"/paper/2506.19889"},"observation_digest":"sha256:f21e7547a4f09e5e92c5d6844f37f58750131932f010c1fed459a3d263bf2efc","observation_id":"d266ad2f-12f2-4f75-9060-6075805d585e","resolution":{"observed_at":"2026-08-06T23:12:12.708435Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T23:12:13.144254Z","title":null,"venue":null,"work_id":"14370adb-eb6f-49db-ad60-cc52be61fc21","year":2024},"citing_paper":{"arxiv_id":"2506.19889","last_updated":"2025-06-24T07:28:29Z","snapshot_observed_at":"2026-08-06T23:04:26.764384Z","submitted_at":"2025-06-24T07:28:29Z","title":"Retrieval-Confused Generation is a Good Defender for Privacy Violation Attack of Large Language Models","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-06T23:12:12.712165Z"},"links":{"citing_paper":"/paper/2506.19889"},"observation_digest":"sha256:7e9fd91d817424dded4d2afcfd551363044e2213575033be137f99e104e37e54","observation_id":"528c88d0-a24d-44d1-95fb-8c2459e98e56","resolution":{"observed_at":"2026-08-06T23:12:13.148473Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T23:12:12.716012Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.19889","last_updated":"2025-06-24T07:28:29Z","snapshot_observed_at":"2026-08-06T23:04:26.764384Z","submitted_at":"2025-06-24T07:28:29Z","title":"Retrieval-Confused Generation is a Good Defender for Privacy Violation Attack of Large Language Models","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-06T23:12:12.716012Z"},"links":{"citing_paper":"/paper/2506.19889"},"observation_digest":"sha256:998d57c9414c00b9b53a7d073aad0a0c5d4a97701c27758661628b1e1967e076","observation_id":"ba69b8e0-0d16-498d-b20d-3fa31d6c1d48","resolution":{"observed_at":"2026-08-06T23:12:12.716012Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.04295","last_updated":"2024-08-30T11:57:47Z","snapshot_observed_at":"2026-08-04T23:34:13.332065Z","submitted_at":"2024-07-05T06:57:30Z","title":"Jailbreak Attacks and Defenses Against Large Language Models: A Survey","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.04295","snapshot_observed_at":"2026-08-06T23:12:12.719919Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.19889","last_updated":"2025-06-24T07:28:29Z","snapshot_observed_at":"2026-08-06T23:04:26.764384Z","submitted_at":"2025-06-24T07:28:29Z","title":"Retrieval-Confused Generation is a Good Defender for Privacy Violation Attack of Large Language Models","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-06T23:12:12.719919Z"},"links":{"cited_paper":"/paper/2407.04295","citing_paper":"/paper/2506.19889"},"observation_digest":"sha256:d5d3012a77b097b80fc89f539d7d0e01e3668a813dda5263b0eb9c627d39c791","observation_id":"a3795b6c-597d-47ae-8759-7ebf2bbeb715","resolution":{"observed_at":"2026-08-06T23:12:12.719919Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T23:12:12.724614Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.19889","last_updated":"2025-06-24T07:28:29Z","snapshot_observed_at":"2026-08-06T23:04:26.764384Z","submitted_at":"2025-06-24T07:28:29Z","title":"Retrieval-Confused Generation is a Good Defender for Privacy Violation Attack of Large Language Models","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-06T23:12:12.724614Z"},"links":{"citing_paper":"/paper/2506.19889"},"observation_digest":"sha256:c5d7a5a740c7ea394565163339f23b36373e723e23741ec6b1596cc8824c29b2","observation_id":"3e953e8d-40a4-43a3-9a55-67474aa716b8","resolution":{"observed_at":"2026-08-06T23:12:12.724614Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T23:12:13.114974Z","title":null,"venue":null,"work_id":"386dfcaf-1001-4989-a92f-94fd869e32f8","year":2024},"citing_paper":{"arxiv_id":"2506.19889","last_updated":"2025-06-24T07:28:29Z","snapshot_observed_at":"2026-08-06T23:04:26.764384Z","submitted_at":"2025-06-24T07:28:29Z","title":"Retrieval-Confused Generation is a Good Defender for Privacy Violation Attack of Large Language Models","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-06T23:12:12.732182Z"},"links":{"citing_paper":"/paper/2506.19889"},"observation_digest":"sha256:ee937d6b445d75f94bf3c70eb60316b52b65c00a64d0b8e47c293d330659a73b","observation_id":"cf343f92-b8e1-4c5b-80de-d7e38f804007","resolution":{"observed_at":"2026-08-06T23:12:13.119150Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T23:12:12.735780Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.19889","last_updated":"2025-06-24T07:28:29Z","snapshot_observed_at":"2026-08-06T23:04:26.764384Z","submitted_at":"2025-06-24T07:28:29Z","title":"Retrieval-Confused Generation is a Good Defender for Privacy Violation Attack of Large Language Models","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-06T23:12:12.735780Z"},"links":{"citing_paper":"/paper/2506.19889"},"observation_digest":"sha256:f35878935d11e2149777e71eaa43d9e2bfcd4a05944bc293060435d7f9c4ad6c","observation_id":"e2d84075-7ea2-4c75-9aa8-2f4340935a40","resolution":{"observed_at":"2026-08-06T23:12:12.735780Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.14002","last_updated":"2023-05-23T12:29:44Z","snapshot_observed_at":"2026-07-06T15:31:23.076745Z","submitted_at":"2023-05-23T12:29:44Z","title":"Improving Language Models via Plug-and-Play Retrieval Feedback","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.14002","snapshot_observed_at":"2026-08-06T23:12:12.728374Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.19889","last_updated":"2025-06-24T07:28:29Z","snapshot_observed_at":"2026-08-06T23:04:26.764384Z","submitted_at":"2025-06-24T07:28:29Z","title":"Retrieval-Confused Generation is a Good Defender for Privacy Violation Attack of Large Language Models","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-06T23:12:12.728374Z"},"links":{"cited_paper":"/paper/2305.14002","citing_paper":"/paper/2506.19889"},"observation_digest":"sha256:0938a61ef77677a093e70786c6ca9b5fe0677db5f71c96eb536b7262c833e804","observation_id":"c1bfb84a-a9fa-49c7-84d0-016289f7dd1b","resolution":{"observed_at":"2026-08-06T23:12:12.728374Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T23:12:13.182044Z","title":"InProceedings of the 61st Annual Meeting of the Association for Computational Linguistics (Volume 1: Long Papers)","venue":null,"work_id":"8fc070cc-75ce-4306-9f7b-c5b0e949ddb0","year":null},"citing_paper":{"arxiv_id":"2506.19889","last_updated":"2025-06-24T07:28:29Z","snapshot_observed_at":"2026-08-06T23:04:26.764384Z","submitted_at":"2025-06-24T07:28:29Z","title":"Retrieval-Confused Generation is a Good Defender for Privacy Violation Attack of Large Language Models","version":1},"reference_index":2023,"source":"pdf_text","source_observed_at":"2026-08-06T23:12:12.700758Z"},"links":{"citing_paper":"/paper/2506.19889"},"observation_digest":"sha256:487e38ecdb3b3343159f64dcc3df8f35dafb35274a45402f6ad34e500385a4dd","observation_id":"6e150e27-b097-400b-b789-9725f07c17fc","resolution":{"observed_at":"2026-08-06T23:12:13.188270Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2409.12183","last_updated":"2025-05-07T18:00:45Z","snapshot_observed_at":"2026-08-01T16:38:42.947080Z","submitted_at":"2024-09-18T17:55:00Z","title":"To CoT or not to CoT? Chain-of-thought helps mainly on math and symbolic reasoning","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.12183","snapshot_observed_at":"2026-08-06T23:12:12.681489Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.19889","last_updated":"2025-06-24T07:28:29Z","snapshot_observed_at":"2026-08-06T23:04:26.764384Z","submitted_at":"2025-06-24T07:28:29Z","title":"Retrieval-Confused Generation is a Good Defender for Privacy Violation Attack of Large Language Models","version":1},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-06T23:12:12.681489Z"},"links":{"cited_paper":"/paper/2409.12183","citing_paper":"/paper/2506.19889"},"observation_digest":"sha256:ab57c7e4509899c4e32954e299e0705b37e0eeedc3e4a0424bc0add0b2c79a4e","observation_id":"2e94c334-c65a-407e-8165-81a2d5cc3e25","resolution":{"observed_at":"2026-08-06T23:12:12.681489Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2506.19889","last_updated":"2025-06-24T07:28:29Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-06T23:04:26.764384Z","submitted_at":"2025-06-24T07:28:29Z","title":"Retrieval-Confused Generation is a Good Defender for Privacy Violation Attack of Large Language Models"},"reference_resolution":{"displayed":32,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":30,"verified_exact":1,"verified_fuzzy":1},"total_outbound_references":32},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 7 August 2026, this Paper Citation Record lists 32 of 32 outbound references and 0 inbound Pith citation observations for arXiv:2506.19889."}