{"as_of":"2026-08-08T15:00:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:04d8373401e57e84b200e2836d696b1f73fa7ccde9d0c0a4ef538d4309cf7cef","coverage":[{"denominator":13,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":13,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T19:48:56.552886Z","state":"measured"},{"denominator":13,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":13,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2507.04478/citation-record","integrity":"/paper/2507.04478/integrity","json":"/paper/2507.04478/citation-record.json","paper":"/paper/2507.04478"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2012.07805","last_updated":"2021-06-15T17:45:26Z","snapshot_observed_at":"2026-08-06T17:18:50.002621Z","submitted_at":"2020-12-14T18:39:09Z","title":"Extracting Training Data from Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2012.07805","snapshot_observed_at":"2026-08-06T19:48:55.141023Z","title":"Extracting Training Data from Large Language Models,","venue":null,"work_id":null,"year":2012},"citing_paper":{"arxiv_id":"2507.04478","last_updated":"2025-07-06T17:24:17Z","snapshot_observed_at":"2026-08-06T19:44:21.745673Z","submitted_at":"2025-07-06T17:24:17Z","title":"Model Inversion Attacks on Llama 3: Extracting PII from Large Language Models","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-06T19:48:55.141023Z"},"links":{"cited_paper":"/paper/2012.07805","citing_paper":"/paper/2507.04478"},"observation_digest":"sha256:0a692eb14e4c1aff2c777a91fa7f12439a676bfec3f9e84b77b40b448aaf292a","observation_id":"6ea55d67-c336-4e53-831c-47d55a3e9ae5","resolution":{"observed_at":"2026-08-06T19:48:55.141023Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:48:55.240869Z","title":"Model Inversion Attacks: A Survey of Approaches and Countermeasures,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.04478","last_updated":"2025-07-06T17:24:17Z","snapshot_observed_at":"2026-08-06T19:44:21.745673Z","submitted_at":"2025-07-06T17:24:17Z","title":"Model Inversion Attacks on Llama 3: Extracting PII from Large Language Models","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-06T19:48:55.240869Z"},"links":{"citing_paper":"/paper/2507.04478"},"observation_digest":"sha256:a7e6fc39bf002422166c42d6e3dcd304cce1dc7ab40ef57958e33810dfe852f2","observation_id":"597f18c2-56d7-4158-b92b-f09acb00c2c0","resolution":{"observed_at":"2026-08-06T19:48:55.240869Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.17035","last_updated":"2023-11-28T18:47:03Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-11-28T18:47:03Z","title":"Scalable Extraction of Training Data from (Production) Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.17035","snapshot_observed_at":"2026-08-06T19:48:55.363903Z","title":"Scalable Extraction of Training Data from (Production) Language Models,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.04478","last_updated":"2025-07-06T17:24:17Z","snapshot_observed_at":"2026-08-06T19:44:21.745673Z","submitted_at":"2025-07-06T17:24:17Z","title":"Model Inversion Attacks on Llama 3: Extracting PII from Large Language Models","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-06T19:48:55.363903Z"},"links":{"cited_paper":"/paper/2311.17035","citing_paper":"/paper/2507.04478"},"observation_digest":"sha256:9c1f0975daa6d94fd99dc5930171a85a8543c994ca72f1aa70acc16f1622fc76","observation_id":"c107f561-67d9-45fc-ad51-fb13159e08c6","resolution":{"observed_at":"2026-08-06T19:48:55.363903Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:48:58.424136Z","title":"Language Model Inver- sion,","venue":null,"work_id":"44d03d25-aae5-4ae6-bb04-5039369a61ed","year":2023},"citing_paper":{"arxiv_id":"2507.04478","last_updated":"2025-07-06T17:24:17Z","snapshot_observed_at":"2026-08-06T19:44:21.745673Z","submitted_at":"2025-07-06T17:24:17Z","title":"Model Inversion Attacks on Llama 3: Extracting PII from Large Language Models","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-06T19:48:55.464670Z"},"links":{"citing_paper":"/paper/2507.04478"},"observation_digest":"sha256:e8f337e4afdac4fd4ad898a8fdce84fa7ff012c5452356807c4aa381741fd11b","observation_id":"3b2d1147-c92b-41fe-acdd-c1a00d01c9a7","resolution":{"observed_at":"2026-08-06T19:48:58.584736Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:48:58.237054Z","title":"Llama 3.2: A Lightweight Multilingual Language Model,","venue":null,"work_id":"693e9df2-191b-433f-9c1e-4ee5268d12f0","year":2024},"citing_paper":{"arxiv_id":"2507.04478","last_updated":"2025-07-06T17:24:17Z","snapshot_observed_at":"2026-08-06T19:44:21.745673Z","submitted_at":"2025-07-06T17:24:17Z","title":"Model Inversion Attacks on Llama 3: Extracting PII from Large Language Models","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-06T19:48:55.621917Z"},"links":{"citing_paper":"/paper/2507.04478"},"observation_digest":"sha256:398cb2242797aa758c6c4280643c0f0d1ce4cd868e08ee5ad2386ccc6afa3ab0","observation_id":"002dffbf-7482-411f-8fe9-35d82240135b","resolution":{"observed_at":"2026-08-06T19:48:58.336090Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.12345","last_updated":"2025-08-11T22:32:41Z","snapshot_observed_at":"2026-07-06T17:32:24.161667Z","submitted_at":"2024-02-19T18:20:12Z","title":"Homoclinic Floer homology via direct limits","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.12345","snapshot_observed_at":"2026-08-06T19:48:55.756240Z","title":"Masking Sensitive Data in Language Model Training,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.04478","last_updated":"2025-07-06T17:24:17Z","snapshot_observed_at":"2026-08-06T19:44:21.745673Z","submitted_at":"2025-07-06T17:24:17Z","title":"Model Inversion Attacks on Llama 3: Extracting PII from Large Language Models","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-06T19:48:55.756240Z"},"links":{"cited_paper":"/paper/2402.12345","citing_paper":"/paper/2507.04478"},"observation_digest":"sha256:3abc8906077484226d38e3803761349241856bf7195d25c4ae5ce6600e6f1ab0","observation_id":"28bb905b-81d3-460b-961e-9c197511139a","resolution":{"observed_at":"2026-08-06T19:48:55.756240Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:48:58.022985Z","title":"OW ASP API Security Top 10,","venue":null,"work_id":"c8562ac1-2591-415c-8c28-e99c6decb0ea","year":2017},"citing_paper":{"arxiv_id":"2507.04478","last_updated":"2025-07-06T17:24:17Z","snapshot_observed_at":"2026-08-06T19:44:21.745673Z","submitted_at":"2025-07-06T17:24:17Z","title":"Model Inversion Attacks on Llama 3: Extracting PII from Large Language Models","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-06T19:48:55.848319Z"},"links":{"citing_paper":"/paper/2507.04478"},"observation_digest":"sha256:c0e4f4daa4f3667df7c56a85d84756b5b00c3939c1f7bd3c0f5ba4d2cebbaa25","observation_id":"e67ffde6-b981-4c1c-9454-084ffeb45128","resolution":{"observed_at":"2026-08-06T19:48:58.109715Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:48:57.794991Z","title":"Goodman, R","venue":null,"work_id":"4e480c01-72f3-4632-86c8-d861080be85e","year":2007},"citing_paper":{"arxiv_id":"2507.04478","last_updated":"2025-07-06T17:24:17Z","snapshot_observed_at":"2026-08-06T19:44:21.745673Z","submitted_at":"2025-07-06T17:24:17Z","title":"Model Inversion Attacks on Llama 3: Extracting PII from Large Language Models","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-06T19:48:55.923183Z"},"links":{"citing_paper":"/paper/2507.04478"},"observation_digest":"sha256:7efedacf5227b9b92e7c6416b087017e52ae75fb4d28d70fd3900f5c988cfe79","observation_id":"cd39f2be-256d-40e8-b09c-2ee1849a6fac","resolution":{"observed_at":"2026-08-06T19:48:57.912182Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:48:57.505284Z","title":"Auditing Data Provenance in Text-Generation Models","venue":null,"work_id":"d67a9c35-6f6d-4fbf-9e35-f2a5a011e6f1","year":2019},"citing_paper":{"arxiv_id":"2507.04478","last_updated":"2025-07-06T17:24:17Z","snapshot_observed_at":"2026-08-06T19:44:21.745673Z","submitted_at":"2025-07-06T17:24:17Z","title":"Model Inversion Attacks on Llama 3: Extracting PII from Large Language Models","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-06T19:48:56.040434Z"},"links":{"citing_paper":"/paper/2507.04478"},"observation_digest":"sha256:09db050799b71ec17aa8f32e5928e3f693f2e1d91c40d247f8a725c335dc0124","observation_id":"93dcc57f-5621-45ee-8ea4-182fae0f458f","resolution":{"observed_at":"2026-08-06T19:48:57.679292Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2005.14165","last_updated":"2020-07-22T19:47:17Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2020-05-28T17:29:03Z","title":"Language Models are Few-Shot Learners","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2005.14165","snapshot_observed_at":"2026-08-06T19:48:56.143000Z","title":"Brown et al","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2507.04478","last_updated":"2025-07-06T17:24:17Z","snapshot_observed_at":"2026-08-06T19:44:21.745673Z","submitted_at":"2025-07-06T17:24:17Z","title":"Model Inversion Attacks on Llama 3: Extracting PII from Large Language Models","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-06T19:48:56.143000Z"},"links":{"cited_paper":"/paper/2005.14165","citing_paper":"/paper/2507.04478"},"observation_digest":"sha256:3e109cbe57f75ea52f96eaae920bc5cbc25f1b59d34264fe40dc8209dbf0217f","observation_id":"82ceff5e-168d-42f9-b42a-906337200a5d","resolution":{"observed_at":"2026-08-06T19:48:56.143000Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:48:57.227096Z","title":"Learning Differentially Private Language Models Without Losing Accu- racy","venue":null,"work_id":"8391d0d8-149e-4f88-a4a9-6b320eb88b23","year":2018},"citing_paper":{"arxiv_id":"2507.04478","last_updated":"2025-07-06T17:24:17Z","snapshot_observed_at":"2026-08-06T19:44:21.745673Z","submitted_at":"2025-07-06T17:24:17Z","title":"Model Inversion Attacks on Llama 3: Extracting PII from Large Language Models","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-06T19:48:56.292931Z"},"links":{"citing_paper":"/paper/2507.04478"},"observation_digest":"sha256:4fc9e9e5d4132eed80cb2cad9427fe5cea1d52fe6c5a74d03b6335a16ed80785","observation_id":"efe9dfe5-30c3-43ad-975d-aa59bf493f29","resolution":{"observed_at":"2026-08-06T19:48:57.346043Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:48:57.015150Z","title":"Does Learning Require Memorization? A Short Tale About a Long Tail","venue":null,"work_id":"c6b97636-8911-4637-9abc-3d0d7b311b4f","year":2020},"citing_paper":{"arxiv_id":"2507.04478","last_updated":"2025-07-06T17:24:17Z","snapshot_observed_at":"2026-08-06T19:44:21.745673Z","submitted_at":"2025-07-06T17:24:17Z","title":"Model Inversion Attacks on Llama 3: Extracting PII from Large Language Models","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-06T19:48:56.404545Z"},"links":{"citing_paper":"/paper/2507.04478"},"observation_digest":"sha256:6f7bf8fe69b925d7d4eeff1fb8f800419380068437866e2a413c2d18943c7a66","observation_id":"98d9bda3-8bc3-4567-9ae9-f593a17a2bc2","resolution":{"observed_at":"2026-08-06T19:48:57.070915Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.11692","last_updated":"2023-06-20T17:11:55Z","snapshot_observed_at":"2026-07-06T15:44:42.776459Z","submitted_at":"2023-06-20T17:11:55Z","title":"Statistics of noninteracting many-body fermionic states: The question of a many-body mobility edge","version":1},"cited_work":{"arxiv_id":"2306.11692","doi":null,"metadata_source":"pith","pith_arxiv_id":"2306.11692","snapshot_observed_at":"2026-08-06T19:48:56.717603Z","title":"Statistics of noninteracting many-body fermionic states: The question of a many-body mobility edge","venue":"cond-mat.dis-nn","work_id":"2336fb87-f02a-46cf-8046-26a771c08e68","year":2023},"citing_paper":{"arxiv_id":"2507.04478","last_updated":"2025-07-06T17:24:17Z","snapshot_observed_at":"2026-08-06T19:44:21.745673Z","submitted_at":"2025-07-06T17:24:17Z","title":"Model Inversion Attacks on Llama 3: Extracting PII from Large Language Models","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-06T19:48:56.552886Z"},"links":{"cited_paper":"/paper/2306.11692","citing_paper":"/paper/2507.04478"},"observation_digest":"sha256:ceb52a07658b1d7e3d52e88517d1effde61f6605b385599ffbd4b0ecaefc5a8e","observation_id":"f154be44-4557-4e28-b309-886948e62838","resolution":{"observed_at":"2026-08-06T19:48:56.771644Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2507.04478","last_updated":"2025-07-06T17:24:17Z","latest_version":1,"primary_category":"cs.LG","snapshot_observed_at":"2026-08-06T19:44:21.745673Z","submitted_at":"2025-07-06T17:24:17Z","title":"Model Inversion Attacks on Llama 3: Extracting PII from Large Language Models"},"reference_resolution":{"displayed":13,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":5,"verified_exact":1,"verified_fuzzy":7},"total_outbound_references":13},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 13 of 13 outbound references and 0 inbound Pith citation observations for arXiv:2507.04478."}