{"as_of":"2026-08-07T07:10:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:527037432588d01e4f293c38af6482652f147f50f023cc5588e94cd1f7b9483f","coverage":[{"denominator":15,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":15,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T18:00:51.737979Z","state":"measured"},{"denominator":17,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":17,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":2,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":2,"source":"paper_references, paper_reference_links","source_observed_at":"2026-06-27T03:24:24.714121Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":1,"source":"arxiv_reference","source_observed_at":"2026-08-05T02:28:24.338817Z","state":"measured"}],"external_citation_measurements":[{"count":0,"observed_at":"2026-08-05T02:28:24.338817Z","source":"arxiv_reference"}],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2507.09406","last_updated":"2025-07-12T21:29:49Z","snapshot_observed_at":"2026-08-07T06:25:20.948241Z","submitted_at":"2025-07-12T21:29:49Z","title":"Adversarial Activation Patching: A Framework for Detecting and Mitigating Emergent Deception in Safety-Aligned Transformers","version":1},"cited_work":{"arxiv_id":"2507.09406","doi":"10.48550/arxiv.2507.09406","metadata_source":"arxiv_reference","pith_arxiv_id":"2507.09406","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Adversarial activation patching: A framework for detecting and mitigating emergent deception in safety-aligned transformers","venue":"ArXiv.org","work_id":"1c478453-ac4e-4d33-b5c8-5d4ac0990186","year":2025},"citing_paper":{"arxiv_id":"2601.14004","last_updated":"2026-04-14T03:49:06Z","snapshot_observed_at":"2026-07-31T09:24:49.481740Z","submitted_at":"2026-01-20T14:23:23Z","title":"Locate, Steer, and Improve: A Practical Survey of Actionable Mechanistic Interpretability in Large Language Models","version":4},"reference_index":257,"source":"pdf_text","source_observed_at":"2026-05-16T12:39:57.398423Z"},"links":{"cited_paper":"/paper/2507.09406","citing_paper":"/paper/2601.14004"},"observation_digest":"sha256:612d4a2ff5f59218c9112f0b817a3b40c4dbeafa54428bfefb341179b2304d62","observation_id":"98504e4f-8bf1-491c-9c42-e344c02384b3","resolution":{"observed_at":"2026-05-16T12:40:54.785630Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.09406","last_updated":"2025-07-12T21:29:49Z","snapshot_observed_at":"2026-08-07T06:25:20.948241Z","submitted_at":"2025-07-12T21:29:49Z","title":"Adversarial Activation Patching: A Framework for Detecting and Mitigating Emergent Deception in Safety-Aligned Transformers","version":1},"cited_work":{"arxiv_id":"2507.09406","doi":"10.48550/arxiv.2507.09406","metadata_source":"arxiv_reference","pith_arxiv_id":"2507.09406","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Adversarial activation patching: A framework for detecting and mitigating emergent deception in safety-aligned transformers","venue":"ArXiv.org","work_id":"1c478453-ac4e-4d33-b5c8-5d4ac0990186","year":2025},"citing_paper":{"arxiv_id":"2606.15980","last_updated":"2026-06-18T23:56:29Z","snapshot_observed_at":"2026-07-06T23:52:37.922109Z","submitted_at":"2026-06-14T19:07:22Z","title":"Do Activation Monitors Survive Model Updates? Benchmarking, Predicting, and Repairing Activation-Monitor Staleness","version":2},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-06-27T03:24:24.714121Z"},"links":{"cited_paper":"/paper/2507.09406","citing_paper":"/paper/2606.15980"},"observation_digest":"sha256:db9cffe19892be56214313310565f2de30e8f462538d105341a58c9faf9d278a","observation_id":"dd2e7047-a80d-4aca-bb02-c463207269ec","resolution":{"observed_at":"2026-06-27T03:30:26.976229Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2507.09406/citation-record","integrity":"/paper/2507.09406/integrity","json":"/paper/2507.09406/citation-record.json","paper":"/paper/2507.09406"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2311.04131","last_updated":"2024-10-04T20:34:02Z","snapshot_observed_at":"2026-07-06T16:44:19.336292Z","submitted_at":"2023-11-07T16:58:51Z","title":"Towards Interpretable Sequence Continuation: Analyzing Shared Circuits in Large Language Models","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.04131","snapshot_observed_at":"2026-08-06T18:00:51.639435Z","title":"Analyzing shared circuits in large language models","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.09406","last_updated":"2025-07-12T21:29:49Z","snapshot_observed_at":"2026-08-07T06:25:20.948241Z","submitted_at":"2025-07-12T21:29:49Z","title":"Adversarial Activation Patching: A Framework for Detecting and Mitigating Emergent Deception in Safety-Aligned Transformers","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-06T18:00:51.639435Z"},"links":{"cited_paper":"/paper/2311.04131","citing_paper":"/paper/2507.09406"},"observation_digest":"sha256:a40f27e3e2edf97ed08b1aeb99c884d05553c1bfd003e45bbeb9a9ca7bf995e2","observation_id":"12d5f8d8-3aa0-4fc5-80ad-1915e43d841c","resolution":{"observed_at":"2026-08-06T18:00:51.639435Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.14495","last_updated":"2024-08-10T14:22:59Z","snapshot_observed_at":"2026-07-06T17:20:37.280501Z","submitted_at":"2024-01-25T20:21:45Z","title":"Advances in Tabulating Carmichael Numbers","version":3},"cited_work":{"arxiv_id":"2401.14495","doi":null,"metadata_source":"pith","pith_arxiv_id":"2401.14495","snapshot_observed_at":"2026-08-06T18:00:52.047000Z","title":"Advances in Tabulating Carmichael Numbers","venue":"math.NT","work_id":"843611b8-0eca-4f50-8190-ae6256ac9662","year":2024},"citing_paper":{"arxiv_id":"2507.09406","last_updated":"2025-07-12T21:29:49Z","snapshot_observed_at":"2026-08-07T06:25:20.948241Z","submitted_at":"2025-07-12T21:29:49Z","title":"Adversarial Activation Patching: A Framework for Detecting and Mitigating Emergent Deception in Safety-Aligned Transformers","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-06T18:00:51.660510Z"},"links":{"cited_paper":"/paper/2401.14495","citing_paper":"/paper/2507.09406"},"observation_digest":"sha256:ccb1ca10ce03de0989c56f5741c3fe3ac5bb362bedde1a642f4191878cac536c","observation_id":"7ac2f7d0-f8ea-46b0-9f18-77c51008f7e5","resolution":{"observed_at":"2026-08-06T18:00:52.053060Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.04301","last_updated":"2026-08-04T12:52:48Z","snapshot_observed_at":"2026-08-07T06:16:38.835427Z","submitted_at":"2024-06-06T17:47:48Z","title":"Neural Surface Reconstruction from Sparse Views Using Epipolar Geometry","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.04301","snapshot_observed_at":"2026-08-06T18:00:51.667312Z","title":"Path patching: Efficiently finding circuits in language models","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.09406","last_updated":"2025-07-12T21:29:49Z","snapshot_observed_at":"2026-08-07T06:25:20.948241Z","submitted_at":"2025-07-12T21:29:49Z","title":"Adversarial Activation Patching: A Framework for Detecting and Mitigating Emergent Deception in Safety-Aligned Transformers","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-06T18:00:51.667312Z"},"links":{"cited_paper":"/paper/2406.04301","citing_paper":"/paper/2507.09406"},"observation_digest":"sha256:3d591192b96b8ad9adc981793222cfc25ed37bf767d258045004e4d92c227652","observation_id":"4e4a4539-e5c8-4b12-b1a2-387df5881be0","resolution":{"observed_at":"2026-08-06T18:00:51.667312Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2103.01209","last_updated":"2022-03-29T16:28:53Z","snapshot_observed_at":"2026-08-07T04:31:16.272419Z","submitted_at":"2021-03-01T18:54:04Z","title":"Generative Adversarial Transformers","version":4},"cited_work":{"arxiv_id":"2103.01209","doi":null,"metadata_source":"pith","pith_arxiv_id":"2103.01209","snapshot_observed_at":"2026-08-06T18:00:52.000818Z","title":"Generative Adversarial Transformers","venue":"cs.CV","work_id":"84fd3571-f686-436b-8b4b-611a43c9c155","year":2021},"citing_paper":{"arxiv_id":"2507.09406","last_updated":"2025-07-12T21:29:49Z","snapshot_observed_at":"2026-08-07T06:25:20.948241Z","submitted_at":"2025-07-12T21:29:49Z","title":"Adversarial Activation Patching: A Framework for Detecting and Mitigating Emergent Deception in Safety-Aligned Transformers","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-06T18:00:51.674334Z"},"links":{"cited_paper":"/paper/2103.01209","citing_paper":"/paper/2507.09406"},"observation_digest":"sha256:9d44bc9b3b88f78a7f4d9dd0b4686258f5a4b7a1a91795c66db26cb2e82f6aca","observation_id":"dd598a0e-193b-40c0-8e9c-e236ded13ec8","resolution":{"observed_at":"2026-08-06T18:00:52.006017Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.12832","last_updated":"2024-05-27T15:12:55Z","snapshot_observed_at":"2026-07-06T18:17:21.217971Z","submitted_at":"2024-05-21T14:36:16Z","title":"Wav-KAN: Wavelet Kolmogorov-Arnold Networks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.12832","snapshot_observed_at":"2026-08-06T18:00:51.691306Z","title":"A survey on large language model hallucination via a creativity perspective","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.09406","last_updated":"2025-07-12T21:29:49Z","snapshot_observed_at":"2026-08-07T06:25:20.948241Z","submitted_at":"2025-07-12T21:29:49Z","title":"Adversarial Activation Patching: A Framework for Detecting and Mitigating Emergent Deception in Safety-Aligned Transformers","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-06T18:00:51.691306Z"},"links":{"cited_paper":"/paper/2405.12832","citing_paper":"/paper/2507.09406"},"observation_digest":"sha256:e74ef9b41344b1141b105cc911ac1094113f3dd73033be8f477755e048db59da","observation_id":"fccdbb04-1984-4470-9093-8fde84001115","resolution":{"observed_at":"2026-08-06T18:00:51.691306Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.09603","last_updated":"2024-06-13T22:00:10Z","snapshot_observed_at":"2026-08-07T04:31:24.899047Z","submitted_at":"2024-06-13T22:00:10Z","title":"Workload Assessment of Human-Machine Interface: A Simulator Study with Psychophysiological Measures","version":1},"cited_work":{"arxiv_id":"2406.09603","doi":null,"metadata_source":"pith","pith_arxiv_id":"2406.09603","snapshot_observed_at":"2026-08-06T18:00:51.932093Z","title":"Workload Assessment of Human-Machine Interface: A Simulator Study with Psychophysiological Measures","venue":"cs.HC","work_id":"b1776303-e60a-459b-888d-b70d10533d0a","year":2024},"citing_paper":{"arxiv_id":"2507.09406","last_updated":"2025-07-12T21:29:49Z","snapshot_observed_at":"2026-08-07T06:25:20.948241Z","submitted_at":"2025-07-12T21:29:49Z","title":"Adversarial Activation Patching: A Framework for Detecting and Mitigating Emergent Deception in Safety-Aligned Transformers","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-06T18:00:51.699652Z"},"links":{"cited_paper":"/paper/2406.09603","citing_paper":"/paper/2507.09406"},"observation_digest":"sha256:8e84fb26d494b68c3645ffc02295282e9c6d0bd85fe3e92a7acef40770d8bd11","observation_id":"b03f4675-9e8a-470a-af2a-b3a9d1a67ef9","resolution":{"observed_at":"2026-08-06T18:00:51.937745Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.04909","last_updated":"2025-06-05T11:44:19Z","snapshot_observed_at":"2026-08-03T23:23:30.688572Z","submitted_at":"2025-06-05T11:44:19Z","title":"When Thinking LLMs Lie: Unveiling the Strategic Deception in Representations of Reasoning Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.04909","snapshot_observed_at":"2026-08-06T18:00:51.707342Z","title":"When thinking llms lie: Unveiling the strategic deception of large language models in reasoning tasks","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.09406","last_updated":"2025-07-12T21:29:49Z","snapshot_observed_at":"2026-08-07T06:25:20.948241Z","submitted_at":"2025-07-12T21:29:49Z","title":"Adversarial Activation Patching: A Framework for Detecting and Mitigating Emergent Deception in Safety-Aligned Transformers","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-06T18:00:51.707342Z"},"links":{"cited_paper":"/paper/2506.04909","citing_paper":"/paper/2507.09406"},"observation_digest":"sha256:41bd72f78faf04d3d8ca13f1b68d254948b171cf61f67cd4f9b51a16ba2f0bc2","observation_id":"d94b862f-9d0a-46a8-8e48-25a4526a7381","resolution":{"observed_at":"2026-08-06T18:00:51.707342Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.02430","last_updated":"2023-10-03T20:52:37Z","snapshot_observed_at":"2026-08-07T04:31:27.792748Z","submitted_at":"2023-10-03T20:52:37Z","title":"Episodic Memory Theory for the Mechanistic Interpretation of Recurrent Neural Networks","version":1},"cited_work":{"arxiv_id":"2310.02430","doi":null,"metadata_source":"pith","pith_arxiv_id":"2310.02430","snapshot_observed_at":"2026-08-06T18:00:51.862379Z","title":"Episodic Memory Theory for the Mechanistic Interpretation of Recurrent Neural Networks","venue":"cs.NE","work_id":"a0bc1c34-e3f2-4208-9f14-dc8d4ec2659e","year":2023},"citing_paper":{"arxiv_id":"2507.09406","last_updated":"2025-07-12T21:29:49Z","snapshot_observed_at":"2026-08-07T06:25:20.948241Z","submitted_at":"2025-07-12T21:29:49Z","title":"Adversarial Activation Patching: A Framework for Detecting and Mitigating Emergent Deception in Safety-Aligned Transformers","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-06T18:00:51.720004Z"},"links":{"cited_paper":"/paper/2310.02430","citing_paper":"/paper/2507.09406"},"observation_digest":"sha256:21b942ab5433f2c211f3f449d1fcbf4c5241b8945e8b2914336333b9d3751e1d","observation_id":"76678cc1-2453-42e8-9002-4947eb8d2b69","resolution":{"observed_at":"2026-08-06T18:00:51.868458Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2209.02403","last_updated":"2022-09-01T09:45:08Z","snapshot_observed_at":"2026-07-06T13:49:15.658043Z","submitted_at":"2022-09-01T09:45:08Z","title":"Guidelines to Develop Trustworthy Conversational Agents for Children","version":1},"cited_work":{"arxiv_id":"2209.02403","doi":null,"metadata_source":"pith","pith_arxiv_id":"2209.02403","snapshot_observed_at":"2026-08-06T18:00:51.789257Z","title":"Guidelines to Develop Trustworthy Conversational Agents for Children","venue":"cs.HC","work_id":"58b366ed-6754-4356-8c57-581f3e37e915","year":2022},"citing_paper":{"arxiv_id":"2507.09406","last_updated":"2025-07-12T21:29:49Z","snapshot_observed_at":"2026-08-07T06:25:20.948241Z","submitted_at":"2025-07-12T21:29:49Z","title":"Adversarial Activation Patching: A Framework for Detecting and Mitigating Emergent Deception in Safety-Aligned Transformers","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-06T18:00:51.737979Z"},"links":{"cited_paper":"/paper/2209.02403","citing_paper":"/paper/2507.09406"},"observation_digest":"sha256:90a73740b0ae3169f4aea814cea9984252bbba89b96de50e8742ea239bbe0ba1","observation_id":"44b6f56d-e98c-43a7-8ad2-cc33bdc55e65","resolution":{"observed_at":"2026-08-06T18:00:51.798306Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2211.00593","last_updated":"2022-11-01T17:08:44Z","snapshot_observed_at":"2026-08-05T06:04:21.031867Z","submitted_at":"2022-11-01T17:08:44Z","title":"Interpretability in the Wild: a Circuit for Indirect Object Identification in GPT-2 small","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2211.00593","snapshot_observed_at":"2026-08-06T18:00:51.725380Z","title":"Interpretability in the wild: a circuit for indirect object identification in gpt-2 small","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.09406","last_updated":"2025-07-12T21:29:49Z","snapshot_observed_at":"2026-08-07T06:25:20.948241Z","submitted_at":"2025-07-12T21:29:49Z","title":"Adversarial Activation Patching: A Framework for Detecting and Mitigating Emergent Deception in Safety-Aligned Transformers","version":1},"reference_index":2017,"source":"pdf_text","source_observed_at":"2026-08-06T18:00:51.725380Z"},"links":{"cited_paper":"/paper/2211.00593","citing_paper":"/paper/2507.09406"},"observation_digest":"sha256:999ffb8e80f286ba9ccae05110931e8094d327fbe236e410586865bfc9393883","observation_id":"82a0b61e-b35f-4d95-a5da-5a758d3c941d","resolution":{"observed_at":"2026-08-06T18:00:51.725380Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.03693","last_updated":"2023-10-05T17:12:17Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-10-05T17:12:17Z","title":"Fine-tuning Aligned Language Models Compromises Safety, Even When Users Do Not Intend To!","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.03693","snapshot_observed_at":"2026-08-06T18:00:51.683998Z","title":"Fine-tuning aligned language models compromises safety, unless llms know they are being aligned","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.09406","last_updated":"2025-07-12T21:29:49Z","snapshot_observed_at":"2026-08-07T06:25:20.948241Z","submitted_at":"2025-07-12T21:29:49Z","title":"Adversarial Activation Patching: A Framework for Detecting and Mitigating Emergent Deception in Safety-Aligned Transformers","version":1},"reference_index":2021,"source":"pdf_text","source_observed_at":"2026-08-06T18:00:51.683998Z"},"links":{"cited_paper":"/paper/2310.03693","citing_paper":"/paper/2507.09406"},"observation_digest":"sha256:d32d2063eaf622b46862b139081cbcfd5bb1244d46b463486988f08ec15c3a22","observation_id":"77779af3-9269-45de-8d9f-813008f96dae","resolution":{"observed_at":"2026-08-06T18:00:51.683998Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.05206","last_updated":"2026-04-14T16:10:41Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-02-02T05:14:22Z","title":"Safety at Scale: A Comprehensive Survey of Large Model and Agent Safety","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.05206","snapshot_observed_at":"2026-08-06T18:00:51.731106Z","title":"Biology inspired interpretability analysis of large language models","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.09406","last_updated":"2025-07-12T21:29:49Z","snapshot_observed_at":"2026-08-07T06:25:20.948241Z","submitted_at":"2025-07-12T21:29:49Z","title":"Adversarial Activation Patching: A Framework for Detecting and Mitigating Emergent Deception in Safety-Aligned Transformers","version":1},"reference_index":2022,"source":"pdf_text","source_observed_at":"2026-08-06T18:00:51.731106Z"},"links":{"cited_paper":"/paper/2502.05206","citing_paper":"/paper/2507.09406"},"observation_digest":"sha256:b8993f9f9336bd494b9fc9e47f1ad8be7a18cae9c0b324ee867538ecfd6f7740","observation_id":"db60480d-bbfd-433e-994d-e15860c42690","resolution":{"observed_at":"2026-08-06T18:00:51.731106Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.14082","last_updated":"2024-08-23T23:02:28Z","snapshot_observed_at":"2026-07-06T18:03:38.397804Z","submitted_at":"2024-04-22T11:01:51Z","title":"Mechanistic Interpretability for AI Safety -- A Review","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.14082","snapshot_observed_at":"2026-08-06T18:00:51.646078Z","title":"Mechanistic interpretability for ai safety – a review","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.09406","last_updated":"2025-07-12T21:29:49Z","snapshot_observed_at":"2026-08-07T06:25:20.948241Z","submitted_at":"2025-07-12T21:29:49Z","title":"Adversarial Activation Patching: A Framework for Detecting and Mitigating Emergent Deception in Safety-Aligned Transformers","version":1},"reference_index":2023,"source":"pdf_text","source_observed_at":"2026-08-06T18:00:51.646078Z"},"links":{"cited_paper":"/paper/2404.14082","citing_paper":"/paper/2507.09406"},"observation_digest":"sha256:f92be5393dc22c9c133c172647ece2f8c3d46c62ee28842c4a3355375c853e9e","observation_id":"524799c9-cfad-4af9-8e34-35d4c6851b49","resolution":{"observed_at":"2026-08-06T18:00:51.646078Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.12288","last_updated":"2024-05-26T17:45:21Z","snapshot_observed_at":"2026-07-06T16:21:57.649550Z","submitted_at":"2023-09-21T17:52:19Z","title":"The Reversal Curse: LLMs trained on \"A is B\" fail to learn \"B is A\"","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.12288","snapshot_observed_at":"2026-08-06T18:00:51.654377Z","title":"The reversal curse: Llms trained on ”a is b” fail to learn ”b is a”","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.09406","last_updated":"2025-07-12T21:29:49Z","snapshot_observed_at":"2026-08-07T06:25:20.948241Z","submitted_at":"2025-07-12T21:29:49Z","title":"Adversarial Activation Patching: A Framework for Detecting and Mitigating Emergent Deception in Safety-Aligned Transformers","version":1},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-06T18:00:51.654377Z"},"links":{"cited_paper":"/paper/2309.12288","citing_paper":"/paper/2507.09406"},"observation_digest":"sha256:a20465f0092ca99219a664b864db9e163821969bc861211882b309230f9898bd","observation_id":"cff18f5d-3676-41d1-9e20-d22d8d0d5311","resolution":{"observed_at":"2026-08-06T18:00:51.654377Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10348","last_updated":"2023-11-20T11:31:16Z","snapshot_observed_at":"2026-08-05T12:23:04.102477Z","submitted_at":"2023-10-16T12:34:43Z","title":"Attribution Patching Outperforms Automated Circuit Discovery","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.10348","snapshot_observed_at":"2026-08-06T18:00:51.713937Z","title":"Attribution patching outperforms automated circuit discovery","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.09406","last_updated":"2025-07-12T21:29:49Z","snapshot_observed_at":"2026-08-07T06:25:20.948241Z","submitted_at":"2025-07-12T21:29:49Z","title":"Adversarial Activation Patching: A Framework for Detecting and Mitigating Emergent Deception in Safety-Aligned Transformers","version":1},"reference_index":2025,"source":"pdf_text","source_observed_at":"2026-08-06T18:00:51.713937Z"},"links":{"cited_paper":"/paper/2310.10348","citing_paper":"/paper/2507.09406"},"observation_digest":"sha256:10d77af0eb5115788aef42be6a86c7a6fa4aeeb1e72aa979d4e237820502f6e5","observation_id":"b23b4ea6-c812-4b64-8cbd-3fec2f95ea8b","resolution":{"observed_at":"2026-08-06T18:00:51.713937Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2507.09406","last_updated":"2025-07-12T21:29:49Z","latest_version":1,"primary_category":"cs.LG","snapshot_observed_at":"2026-08-07T06:25:20.948241Z","submitted_at":"2025-07-12T21:29:49Z","title":"Adversarial Activation Patching: A Framework for Detecting and Mitigating Emergent Deception in Safety-Aligned Transformers"},"reference_resolution":{"displayed":15,"state_counts":{"malformed_identifier":0,"metadata_mismatch":4,"parse_uncertain":0,"unresolved":10,"verified_exact":1,"verified_fuzzy":0},"total_outbound_references":15},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 7 August 2026, this Paper Citation Record lists 15 of 15 outbound references and 2 inbound Pith citation observations for arXiv:2507.09406."}