{"as_of":"2026-08-07T16:45:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:ab15c7c6326179cd8a303e475314ba15982fcf0cc1e68d49a5d1bca1e4152400","coverage":[{"denominator":72,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":72,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T15:18:13.422527Z","state":"measured"},{"denominator":72,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":72,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2507.16372/citation-record","integrity":"/paper/2507.16372/integrity","json":"/paper/2507.16372/citation-record.json","paper":"/paper/2507.16372"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:16.888413Z","title":"X fact checks elon musk after he blasts apple-openai partnership as ‘creepy’ privacy nightmare","venue":null,"work_id":"df7c2b5b-8cf0-4aa9-816f-bde7fcd22be2","year":2024},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-06T15:09:00.559058Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:10.343021Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:ba17355b67767db3bf8f202b912094c24d8a7de6c455bfe67a5905d3dc2ba323","observation_id":"ea37b436-ff53-42d1-8993-37710875278d","resolution":{"observed_at":"2026-08-06T15:18:16.903942Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2407.21783","last_updated":"2024-11-23T23:27:33Z","snapshot_observed_at":"2026-07-06T18:55:11.576666Z","submitted_at":"2024-07-31T17:54:27Z","title":"The Llama 3 Herd of Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.21783","snapshot_observed_at":"2026-08-06T15:18:10.414155Z","title":"The llama 3 herd of models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-06T15:09:00.559058Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:10.414155Z"},"links":{"cited_paper":"/paper/2407.21783","citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:5549ed6320d9f0eb4f18e584047910b01988fc95cbaf1970252f7f088a3ff2e8","observation_id":"46b6bffa-4e34-4913-910e-15ca5dd25884","resolution":{"observed_at":"2026-08-06T15:18:10.414155Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.00952","last_updated":"2024-07-01T04:13:25Z","snapshot_observed_at":"2026-08-06T08:29:51.313033Z","submitted_at":"2024-07-01T04:13:25Z","title":"SplitLoRA: A Split Parameter-Efficient Fine-Tuning Framework for Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.00952","snapshot_observed_at":"2026-08-06T15:18:10.535416Z","title":"Splitlora: A split parameter-efficient fine- tuning framework for large language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-06T15:09:00.559058Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:10.535416Z"},"links":{"cited_paper":"/paper/2407.00952","citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:96e604268d62425c0204fdc5bd24f9a84faed905bc1db436cc60bc0a2633ec09","observation_id":"d01c5245-c947-403f-ac51-3e7da29c53fe","resolution":{"observed_at":"2026-08-06T15:18:10.535416Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:16.847494Z","title":"Helix: Dis- tributed serving of large language models via max-flow on heterogeneous gpus","venue":null,"work_id":"2b2cb10d-5c12-4f30-8522-a754f62e31a9","year":2025},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-06T15:09:00.559058Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:10.678742Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:f04670fb7e4fe390fc552599444ba825c0687e70cba08920494a326bbcf38a3c","observation_id":"c9aced09-2ceb-4d4a-bd43-d744fa837bbb","resolution":{"observed_at":"2026-08-06T15:18:16.859918Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.14371","last_updated":"2024-05-23T09:46:22Z","snapshot_observed_at":"2026-07-06T18:18:30.066741Z","submitted_at":"2024-05-23T09:46:22Z","title":"EdgeShard: Efficient LLM Inference via Collaborative Edge Computing","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.14371","snapshot_observed_at":"2026-08-06T15:18:10.798785Z","title":"Edgeshard: Efficient llm inference via collaborative edge computing","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-06T15:09:00.559058Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:10.798785Z"},"links":{"cited_paper":"/paper/2405.14371","citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:7972c25b1713751bdbcb176fa553a9f37264df0cc9dc09957e931a3e2e1e5fd6","observation_id":"e898c408-63b2-49da-88bb-a1d6336d847d","resolution":{"observed_at":"2026-08-06T15:18:10.798785Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:16.806307Z","title":null,"venue":null,"work_id":"eed4d498-0ce4-4642-a3c5-2ed5e7bbddd2","year":2023},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-06T15:09:00.559058Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:10.924346Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:0cf05bd6e249ac5f16a608aebb51c27a74e47aad534d291129f95a9c0ef49d80","observation_id":"3ba00045-3762-48fc-a70c-f63b3e7d0ec3","resolution":{"observed_at":"2026-08-06T15:18:16.817197Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:11.059923Z","title":"The internal state of an LLM knows when it‘s lying","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-06T15:09:00.559058Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:11.059923Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:3f001c8006e3890e93c7a15e7fc068f4822e41005019b2fb5a934deebb6ec60f","observation_id":"e311e620-8645-458c-9d3a-cc7b409fce0b","resolution":{"observed_at":"2026-08-06T15:18:11.059923Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:16.771350Z","title":"INSIDE: LLMs’ internal states retain the power of hallucination detection","venue":null,"work_id":"1790c379-c3a7-4778-9824-ed89222ce8a2","year":2024},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-06T15:09:00.559058Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:11.192611Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:e9b2a3c62e59d8e19d234b3eb0cdcc64636d65c20e925e49c635b7344c719e70","observation_id":"ec32b3cd-25df-46be-95d8-56000bbd1bf8","resolution":{"observed_at":"2026-08-06T15:18:16.786599Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:16.733243Z","title":"Unsupervised real-time hallucination detection based on the internal states of large language models","venue":null,"work_id":"0ba91a8f-62a0-4a0e-8bf0-a532c85e3dd1","year":2024},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-06T15:09:00.559058Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:11.336929Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:f8ccb81430a1f1cda1e9cef008feb71e35145b40eb93acec0c1a16115bd79266","observation_id":"57c272ee-b7cf-441f-a1da-c1da8f264b33","resolution":{"observed_at":"2026-08-06T15:18:16.740533Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.15927","last_updated":"2024-06-22T19:46:06Z","snapshot_observed_at":"2026-07-30T04:59:24.269176Z","submitted_at":"2024-06-22T19:46:06Z","title":"Semantic Entropy Probes: Robust and Cheap Hallucination Detection in LLMs","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.15927","snapshot_observed_at":"2026-08-06T15:18:11.457417Z","title":"Malik, and Yarin Gal","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-06T15:09:00.559058Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:11.457417Z"},"links":{"cited_paper":"/paper/2406.15927","citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:4e7929866d50a9f6527ef262b045b37b6bca1a1151f435e3c9ad461d66b2d6ea","observation_id":"5457c67f-15e2-47b0-b867-cd6dcd06eb3d","resolution":{"observed_at":"2026-08-06T15:18:11.457417Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.20311","last_updated":"2024-07-29T17:52:40Z","snapshot_observed_at":"2026-07-06T18:53:35.627045Z","submitted_at":"2024-07-29T17:52:40Z","title":"Physics of Language Models: Part 2.1, Grade-School Math and the Hidden Reasoning Process","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.20311","snapshot_observed_at":"2026-08-06T15:18:11.562851Z","title":"Physics of language models: Part 2.1, grade-school math and the hidden reasoning process","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-06T15:09:00.559058Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:11.562851Z"},"links":{"cited_paper":"/paper/2407.20311","citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:139dd95f943d4024f3030b55f7acd66230e6a21d1cffb53d9351ff4fd9a56a82","observation_id":"0430b251-0c01-405d-aa74-f5d5405903f4","resolution":{"observed_at":"2026-08-06T15:18:11.562851Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.17003","last_updated":"2025-04-07T07:23:33Z","snapshot_observed_at":"2026-08-07T07:23:22.071348Z","submitted_at":"2024-08-30T04:35:59Z","title":"Safety Layers in Aligned Large Language Models: The Key to LLM Security","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.17003","snapshot_observed_at":"2026-08-06T15:18:11.656139Z","title":"Safety layers of aligned large language models: The key to llm security","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-06T15:09:00.559058Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:11.656139Z"},"links":{"cited_paper":"/paper/2408.17003","citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:0e9a5c3f488f5090c669189f5b8ff294ac6e606564dee22797b0661d348b2a90","observation_id":"24787934-f6cc-4630-b1bd-907232ad4328","resolution":{"observed_at":"2026-08-06T15:18:11.656139Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:16.703682Z","title":"Analyzing and editing inner mechanisms of backdoored language 353 models","venue":null,"work_id":"b8221a18-6312-4354-b308-618cb3c0e6d1","year":2024},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-06T15:09:00.559058Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:11.725954Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:986d853fd2805378007207fbe1d99712095e494b687cdcda7625b41dcd8901ae","observation_id":"1c1b7f17-19c6-43d3-be0f-362314390db6","resolution":{"observed_at":"2026-08-06T15:18:16.713723Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:16.671271Z","title":"The philosopher’s stone: Trojaning plugins of large language models","venue":null,"work_id":"e859bf87-4013-40ff-b481-8a78637bc327","year":2025},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-06T15:09:00.559058Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:11.823317Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:fcfe8e98840ba98c8b73dddbf9aec33fdb1fb51abfeaaed550ba6d7a7649e920","observation_id":"56852d66-f954-4ae3-ae65-89b2409bf478","resolution":{"observed_at":"2026-08-06T15:18:16.676773Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.01405","last_updated":"2025-03-03T06:14:14Z","snapshot_observed_at":"2026-07-06T16:26:38.284922Z","submitted_at":"2023-10-02T17:59:07Z","title":"Representation Engineering: A Top-Down Approach to AI Transparency","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.01405","snapshot_observed_at":"2026-08-06T15:18:11.985626Z","title":"Rep- resentation engineering: A top-down approach to ai transparency","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-06T15:09:00.559058Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:11.985626Z"},"links":{"cited_paper":"/paper/2310.01405","citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:7ff4c26ad1ad9637f83042cebc3f25b8cf9dadc1c8bf0df6c305b3163fe7314d","observation_id":"431b9a5c-b632-4067-80a3-e8f713e2a3ad","resolution":{"observed_at":"2026-08-06T15:18:11.985626Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:16.629125Z","title":"Discovering latent knowledge in language models without supervision","venue":null,"work_id":"318e2430-d23f-4272-ac1b-3c77cc99e4e3","year":2023},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-06T15:09:00.559058Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:12.087211Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:2bb1e20070449c72fff01dfd63571980852183b954fed6a283c14fcaeb0eb4fc","observation_id":"f917fc5b-144f-4fdf-a89b-bc3bf07112c4","resolution":{"observed_at":"2026-08-06T15:18:16.637735Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2407.11421","last_updated":"2026-08-04T07:49:28Z","snapshot_observed_at":"2026-08-07T16:10:34.721156Z","submitted_at":"2024-07-16T06:27:22Z","title":"States Hidden in Hidden States: Implicit Discrete State Representations Emerge in LLMs' Hidden States","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.11421","snapshot_observed_at":"2026-08-06T15:18:12.227492Z","title":"States hidden in hidden states: Llms emerge dis- crete state representations implicitly","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-06T15:09:00.559058Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:12.227492Z"},"links":{"cited_paper":"/paper/2407.11421","citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:ade2b9a7648eb0f2e4166f3cf91edc4982dc09d49a7e79a2e9d3bca99fa02dc1","observation_id":"954faefb-c6f3-4801-9887-964397d20c4f","resolution":{"observed_at":"2026-08-06T15:18:12.227492Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:16.599031Z","title":"Informa- tion leakage in embedding models","venue":null,"work_id":"5b031ed3-a62e-478a-bf79-30f988e6e140","year":2020},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-06T15:09:00.559058Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:12.365406Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:48f397b730690a982e701b7aec940d616aca9283488791f5bbf65c3da453f58b","observation_id":"2606ca8b-2a75-43e6-bc16-78a1cab6c900","resolution":{"observed_at":"2026-08-06T15:18:16.607671Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:16.568862Z","title":"Text embeddings reveal (almost) as much as text","venue":null,"work_id":"fcd64480-3d99-43c9-bec3-b72e1b069ffb","year":2023},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-06T15:09:00.559058Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:12.529047Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:6426dc1e379baaa9522d923f4781eb23d2e04c849be8f54439899865ea2dbaa0","observation_id":"f728d9fe-11ec-4134-a263-0ee489819bd9","resolution":{"observed_at":"2026-08-06T15:18:16.577797Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:16.538800Z","title":"Morris, and Vitaly Shmatikov","venue":null,"work_id":"75a1030e-5881-4ee7-a866-0f2fe7e9f5d2","year":2024},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-06T15:09:00.559058Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:12.743946Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:0c5f6f9194d81c649782749bd62c6aadabd268e0407f6a7b45d6957d8df6eeba","observation_id":"fac6124f-54e7-4c72-b5ec-51fe7b44ad70","resolution":{"observed_at":"2026-08-06T15:18:16.551489Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:12.851007Z","title":"Deep learning and the information bottleneck principle","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-06T15:09:00.559058Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:12.851007Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:d23618627d327db9301b1e874af98278632a921af58bc75f7109d75d4699e6a0","observation_id":"90da299d-d454-49ec-a478-e67960d1005f","resolution":{"observed_at":"2026-08-06T15:18:12.851007Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:12.888220Z","title":"Privacy risks of general-purpose language models","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-06T15:09:00.559058Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:12.888220Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:252221837d4ef4f49b77233c7cf439400ddea7598c05d9f2a59ccb3cac32803b","observation_id":"e49b102c-b45c-4d1c-8011-22c7df26c3bd","resolution":{"observed_at":"2026-08-06T15:18:12.888220Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.03010","last_updated":"2023-05-04T17:31:41Z","snapshot_observed_at":"2026-08-06T21:09:36.639494Z","submitted_at":"2023-05-04T17:31:41Z","title":"Sentence Embedding Leaks More Information than You Expect: Generative Embedding Inversion Attack to Recover the Whole Sentence","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.03010","snapshot_observed_at":"2026-08-06T15:18:12.894923Z","title":"Sentence embedding leaks more information than you expect: Generative embedding inversion attack to recover the whole sentence","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-06T15:09:00.559058Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:12.894923Z"},"links":{"cited_paper":"/paper/2305.03010","citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:d06903639d3c1140af4bc15ed158cc01113d50fea5e4d34526e5fe77bcc7f80c","observation_id":"967164c8-6488-436c-a749-dcaaa8905e19","resolution":{"observed_at":"2026-08-06T15:18:12.894923Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:16.502662Z","title":"Language model inversion","venue":null,"work_id":"a65485b5-1c37-4540-b5cc-86f2ab00ce8c","year":2024},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-06T15:09:00.559058Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:12.903985Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:1e30d311f3268b9b19e5c7c9eb9f6637db12d65fe9f1bfce1b5b1cdc9bda79e9","observation_id":"4791b59f-abac-47be-921e-bac97e85adb8","resolution":{"observed_at":"2026-08-06T15:18:16.518646Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:16.447357Z","title":"TAG: gradient attack on transformer-based lan- guage models","venue":null,"work_id":"9ff670c9-6b54-4573-8c5d-ee32acc7ae35","year":2021},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-06T15:09:00.559058Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:12.909947Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:edcdf3fd8d15b5346060bafd2dcabd1435a02f166431ff4861993b13fb055a6d","observation_id":"6a7aff0e-4229-4d2d-8a50-8608a06617c8","resolution":{"observed_at":"2026-08-06T15:18:16.460402Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:16.418148Z","title":"Uncovering gradient inversion risks in prac- tical language model training","venue":null,"work_id":"883afbd5-96f3-4314-8ebb-671fea393f3f","year":2024},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-06T15:09:00.559058Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:12.927584Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:5c1cfaade9d7467104673b9a71ab2f06c3694403e65a2b10c05570c476c4ee0a","observation_id":"44fede27-adfc-4a43-933e-232ea587f7b4","resolution":{"observed_at":"2026-08-06T15:18:16.424279Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:12.945529Z","title":"Unveiling the vulnerability of private fine-tuning in split-based frameworks for large language models: A bidirectionally enhanced attack","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-06T15:09:00.559058Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:12.945529Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:ec1ba46390776a6ad4e64918ad887decc7532ef84928ada90c7c5d2edc407fe6","observation_id":"01a82efd-e28b-4748-9121-3bdf592266ce","resolution":{"observed_at":"2026-08-06T15:18:12.945529Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:12.954668Z","title":"How alignment and jail- break work: Explain LLM safety through intermediate hidden states","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-06T15:09:00.559058Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:12.954668Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:c5142072d39cfb14b5ff85701d0d2c0366c17f203dbac659fbfb260656ca9787","observation_id":"3347f4b6-adc8-46c2-8f9b-99334ca951b5","resolution":{"observed_at":"2026-08-06T15:18:12.954668Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:16.378136Z","title":"Enterprise privacy at openai - does ope- nai review my business data? https://openai.com/ enterprise-privacy/, 2024","venue":null,"work_id":"ee610a76-01f9-4961-8e00-a772bec82c7f","year":2024},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-06T15:09:00.559058Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:12.965424Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:53e75e6fce5db270c75e468c835727f5e371aa3a25ae367c54668397e229b0ba","observation_id":"9df434a8-eaa9-4b4c-80d8-2e3bb166f7a3","resolution":{"observed_at":"2026-08-06T15:18:16.386450Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.18653/v1/2023.acl-demo.54","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:13.556354Z","title":"Petals: Collaborative inference and fine-tuning of large mod- els","venue":null,"work_id":"02321003-8b6b-443d-b7c0-8b747967de0e","year":2023},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-06T15:09:00.559058Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:12.977449Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:7d41d5ad62733a80e266bc117aa2c04e68fb2df9176bd652701d267789f8faff","observation_id":"3e31651f-662e-4707-a556-30b145009e71","resolution":{"observed_at":"2026-08-06T15:18:13.566641Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:12.985874Z","title":"Shad- ownet: A secure and efficient on-device model inference system for convolutional neural networks","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-06T15:09:00.559058Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:12.985874Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:e61db564c8381ad016f9e241d62b0661aa3f091a0fdd8d4417516a0d084f04e7","observation_id":"61381ed4-455c-41cc-9e64-99f392de3e76","resolution":{"observed_at":"2026-08-06T15:18:12.985874Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:16.343932Z","title":"Zhang, C","venue":null,"work_id":"0ffc4278-d188-400a-a860-52aba6d0158b","year":2024},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-06T15:09:00.559058Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:13.004676Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:a8cad21ce23152bae9989cfbb18d9c247b0e1e33943dd606c6946e7f9a394e62","observation_id":"0bfd5174-c108-4d3a-a493-d87c3ae3cec4","resolution":{"observed_at":"2026-08-06T15:18:16.357745Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2112.07899","last_updated":"2021-12-15T05:33:27Z","snapshot_observed_at":"2026-07-06T12:18:53.315820Z","submitted_at":"2021-12-15T05:33:27Z","title":"Large Dual Encoders Are Generalizable Retrievers","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2112.07899","snapshot_observed_at":"2026-08-06T15:18:13.013704Z","title":"Large dual encoders are generalizable retrievers","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-06T15:09:00.559058Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:13.013704Z"},"links":{"cited_paper":"/paper/2112.07899","citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:b96c74542d362b8892d5b600be7dd3c7166a22e1ce1c78b08eb6a56b67f75f53","observation_id":"27b1e83a-2e18-46da-ac61-f9f4464f1362","resolution":{"observed_at":"2026-08-06T15:18:13.013704Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:16.299492Z","title":null,"venue":null,"work_id":"bfd391ac-d2e7-4ea0-95b8-c4e7a53e4ad6","year":2025},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-06T15:09:00.559058Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:13.026104Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:5c2f652af7cb8f0ffec36d503c530ffc898a26ecf77d3f9046fae1441310f0a7","observation_id":"0cbbfb8c-93c5-4775-966a-a27af48d13aa","resolution":{"observed_at":"2026-08-06T15:18:16.312554Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2408.08946","last_updated":"2026-05-26T01:00:46Z","snapshot_observed_at":"2026-07-06T19:01:41.274385Z","submitted_at":"2024-08-16T17:58:49Z","title":"Authorship Attribution in the Era of LLMs: Problems, Methodologies, and Challenges","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.08946","snapshot_observed_at":"2026-08-06T15:18:13.046655Z","title":"Authorship attribution in the era of llms: Problems, methodologies, and challenges","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-06T15:09:00.559058Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:13.046655Z"},"links":{"cited_paper":"/paper/2408.08946","citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:b4b86759ab130ac358f406caa359cf681ca289390a8c290662dc7941260643c8","observation_id":"7aa5887c-b8cb-484a-be61-7b79921b2e47","resolution":{"observed_at":"2026-08-06T15:18:13.046655Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:16.256784Z","title":"LLM internal states reveal hallucination risk faced with a query","venue":null,"work_id":"5d2126e3-ef2d-4353-9f35-88e64e41a6ba","year":null},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-06T15:09:00.559058Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:13.056980Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:f17d8ad7b2409932a56d8e071e7ab52ad066f6e78c2a11c2a69471356c64eea2","observation_id":"376faf45-53e5-4be9-bd3a-dd3d5b8cc66c","resolution":{"observed_at":"2026-08-06T15:18:16.266871Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:16.208535Z","title":"Get my drift? catching llm task drift with activation deltas","venue":null,"work_id":"71c2aa25-e2d6-4e8d-a608-e0fcf053842a","year":2025},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-06T15:09:00.559058Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:13.087000Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:ab8cd8e2b63698e9c5a90080bd1faf6657f72328747b094a4321248194416537","observation_id":"d3a107a7-cf65-4209-9205-d1ce1f02b612","resolution":{"observed_at":"2026-08-06T15:18:16.221659Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:16.163031Z","title":null,"venue":null,"work_id":"c1ebd89e-2447-4e5d-9333-457d7629ea5f","year":2023},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-06T15:09:00.559058Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:13.098550Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:42482a52b61d9dfaf44243ca3d26edcc180f0eec5a37dd424cb5c58777f636f6","observation_id":"b7868292-8313-4b23-85c2-4579f3d45038","resolution":{"observed_at":"2026-08-06T15:18:16.179572Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:16.108057Z","title":"Dataset condensation with distribution matching","venue":null,"work_id":"e6fc583d-0de5-44b5-9443-53f922d7e8aa","year":2023},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-06T15:09:00.559058Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:13.109794Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:ee04be9295b3162e65a97563b41fd0bab4bd44d302a8cbc0c6e43d17fc1f5012","observation_id":"b6366e9f-6abb-43e2-8def-51aae006a329","resolution":{"observed_at":"2026-08-06T15:18:16.126402Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2409.12186","last_updated":"2024-11-12T13:24:25Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-09-18T17:57:57Z","title":"Qwen2.5-Coder Technical Report","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.12186","snapshot_observed_at":"2026-08-06T15:18:13.123343Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-06T15:09:00.559058Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:13.123343Z"},"links":{"cited_paper":"/paper/2409.12186","citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:7a4b4fc946e9309a1fccbf161fb5351462c28ab4b8698c17da9c275cb3d6c67e","observation_id":"71e414fb-89eb-4d52-a710-b6ff434af4a9","resolution":{"observed_at":"2026-08-06T15:18:13.123343Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:16.063073Z","title":"Bio-medical: A high- performance biomedical language model","venue":null,"work_id":"00af67c9-7510-46d1-89d8-588dc071584f","year":2024},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-06T15:09:00.559058Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:13.134347Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:7afb334244720ffea33f1a340579b47243138cfa173b8489b04283ad54d1b21d","observation_id":"2207f9f2-2a4d-4536-9dcb-a54c9af0e94b","resolution":{"observed_at":"2026-08-06T15:18:16.074939Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:16.025087Z","title":"Introducing llama 3.1: Our most capable mod- els to date","venue":null,"work_id":"fe97ca8d-2932-40b2-bb5a-e7d8cddfafbd","year":2024},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-06T15:09:00.559058Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:13.153734Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:6e2225be4fb55eec7ec5576782c74ca05617c83317eb206c2f4c2d024bc6ac99","observation_id":"b60ca049-91d1-4e14-81d1-0c7858af943c","resolution":{"observed_at":"2026-08-06T15:18:16.036630Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:13.165866Z","title":"C-pack: Packaged resources to advance general chinese embedding, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-06T15:09:00.559058Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:13.165866Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:8d117964c85bbdc4b77846f3891d0adf497fa4c8c41063663ddaec6443f497bf","observation_id":"9f4c58cf-41ad-4534-9156-3ef2e73dc072","resolution":{"observed_at":"2026-08-06T15:18:13.165866Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2210.07316","last_updated":"2023-03-19T13:37:01Z","snapshot_observed_at":"2026-07-06T14:04:58.943383Z","submitted_at":"2022-10-13T19:42:08Z","title":"MTEB: Massive Text Embedding Benchmark","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2210.07316","snapshot_observed_at":"2026-08-06T15:18:13.180242Z","title":"Mteb: Massive text embedding bench- mark","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-06T15:09:00.559058Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:13.180242Z"},"links":{"cited_paper":"/paper/2210.07316","citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:503372680a3a51ba64500050f49ea281e4768265165e53d80278a2f9a565cc83","observation_id":"e0ecbe91-0bd4-4ae6-aa68-b2aa61e9a5f2","resolution":{"observed_at":"2026-08-06T15:18:13.180242Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:15.951219Z","title":"Massive text em- bedding benchmark (mteb) leaderboard","venue":null,"work_id":"d9b1509f-f295-424c-8a7a-a2e012a7f5d5","year":2024},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-06T15:09:00.559058Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:13.191714Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:77901d6474911d6881142caa3c9fbb8c87aaa22d958c51b587b762e237d16fdb","observation_id":"eada05d3-ab42-4c59-ad2c-a69ad79ce667","resolution":{"observed_at":"2026-08-06T15:18:15.964164Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:13.205759Z","title":"Decoupled weight decay regularization","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-06T15:09:00.559058Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:13.205759Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:528ef5e9991a9c24301d8f23a44809aaeca5f6bc40cfd53f0865bd3c5a1a12ad","observation_id":"4816f1d6-6ad5-4b26-9b07-41042e20fa1d","resolution":{"observed_at":"2026-08-06T15:18:13.205759Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:13.218201Z","title":"Oliphant, Matt Haberland, Tyler Reddy, David Cournapeau, Evgeni Burovski, Pearu Peterson, Warren Weckesser, Jonathan Bright, Stéfan J","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-06T15:09:00.559058Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:13.218201Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:eeefce8d6ae1726fe0e4f4cb862859f3824ce70c5f58d41138b939307da9612d","observation_id":"82516d1b-3e31-4bd7-86b6-3684fb3c4b56","resolution":{"observed_at":"2026-08-06T15:18:13.218201Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:15.864575Z","title":"Ai medical dataset,","venue":null,"work_id":"f700bff2-15cf-41e1-9ec9-f4de3380a0ec","year":null},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-06T15:09:00.559058Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:13.233897Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:80758d21902c511bbc78e219b88e4617a4d0c32f013dd890ea4919a9222cbf94","observation_id":"a42e5683-dc8d-4084-b57c-9e4415b4f083","resolution":{"observed_at":"2026-08-06T15:18:15.875387Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:15.568319Z","title":"mental_health_counseling_conversations (revision 9015341), 2024","venue":null,"work_id":"399495c3-c7ed-449b-883a-598d3fbf0300","year":2024},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-06T15:09:00.559058Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:13.249833Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:7128fa1555052eabe0292fcb9838a27477b70add5503f9019a605bdacf403de1","observation_id":"c47542ea-44fd-41ec-9265-3ccdcbb8a263","resolution":{"observed_at":"2026-08-06T15:18:15.803098Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:13.258810Z","title":"Wizardcoder: Empowering code large language models with evol-instruct, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-06T15:09:00.559058Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:13.258810Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:c9c7812a4fdf04180f1a412adb40239afca29538ac581479497a352af7bd5da0","observation_id":"77fb41d9-0453-4b03-bc44-3c9379c72421","resolution":{"observed_at":"2026-08-06T15:18:13.258810Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:15.493365Z","title":"Measuring coding challenge competence with apps","venue":null,"work_id":"cfdada1f-c421-4551-a74a-9825f7e91cd9","year":2021},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-06T15:09:00.559058Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:13.267306Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:be136745e467a7ebb7f15aa08b5a1655c382499f1d9c81e2d009e1b0faf1f6e4","observation_id":"05b12bb2-8694-46b7-b70a-e7fcdf2df938","resolution":{"observed_at":"2026-08-06T15:18:15.499831Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:15.831229Z","title":null,"venue":null,"work_id":"cfdfe708-2388-48ed-8539-00082cad5e03","year":null},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-06T15:09:00.559058Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:13.240176Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:5ff9afebaa707bed3ae29f3befb837af517b61edcf7583cb71b69afc3a53228e","observation_id":"15d58311-d5bb-4fbf-ae28-2271bf6b054e","resolution":{"observed_at":"2026-08-06T15:18:15.841795Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:15.393659Z","title":"The magical effect of the bias term: Rope + bias = better length extrapolation","venue":null,"work_id":"e4442bbf-f8c3-4dae-9449-5316b6f6cf85","year":2023},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-06T15:09:00.559058Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:13.292275Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:1b63e95df1e99355225ea7160865bc91791eaec460c8801f971f23224584702f","observation_id":"42f018a3-bed0-423f-9fa7-008ef425bf5a","resolution":{"observed_at":"2026-08-06T15:18:15.409207Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:15.363603Z","title":"Rush, and Thomas Wolf","venue":null,"work_id":"0bac6cdb-e2aa-488f-80ba-f39b6a43547b","year":2023},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-06T15:09:00.559058Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:13.301344Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:73e168c35778576ceefee1c02923662d2acbee43b895bd469940d403670d7528","observation_id":"9cb62f25-d901-4f70-82f7-2c4ad1693ed3","resolution":{"observed_at":"2026-08-06T15:18:15.370746Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:15.335027Z","title":"QLoRA: Efficient finetuning of quan- tized LLMs","venue":null,"work_id":"707a70df-1901-4f25-ab07-28d976054996","year":2023},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-06T15:09:00.559058Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:13.307945Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:c63dd92b3f57776e3b44588f1f6d3d7a96bf031d82495d63877906db46b57c58","observation_id":"0d235904-3e23-4900-916b-6ccc4126d7c8","resolution":{"observed_at":"2026-08-06T15:18:15.342891Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:15.440733Z","title":"Big code models leaderboard","venue":null,"work_id":"52169465-eb58-4cb5-9ab6-d873e317329e","year":2025},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-06T15:09:00.559058Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:13.276386Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:0cf455ac5488a506de10c163b378b6a8edf246278d3cdb5fe760be0ae54ea0bd","observation_id":"2362bd7d-6d5d-4af4-b7a7-33693d3efe68","resolution":{"observed_at":"2026-08-06T15:18:15.454181Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:13.327844Z","title":"Measuring massive multitask language understanding","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-06T15:09:00.559058Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:13.327844Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:257572d4536d33b354dd5258b7b38383b1a1eadad771f9f1a984fceff8192363","observation_id":"5a11c775-6f0f-49cf-9517-65e4f9e0adab","resolution":{"observed_at":"2026-08-06T15:18:13.327844Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:15.241074Z","title":"GAN you see me? enhanced data reconstruction attacks against split infer- ence","venue":null,"work_id":"69dcd7e9-f888-419d-83fb-87948a972c35","year":2023},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-06T15:09:00.559058Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:13.335767Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:0c109f3755124555fec5484237b7caa1e0f2e5b48941b27926571c2eb18a779b","observation_id":"ef28114c-8527-4a71-a472-214e6b95498e","resolution":{"observed_at":"2026-08-06T15:18:15.249652Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:15.210617Z","title":"Unveiling the vulnerability of private fine-tuning in split-based frameworks for large language models: A bidirection- ally enhanced attack","venue":null,"work_id":"f5ca72a3-80d5-465e-8074-2e2f561bc5cd","year":2024},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-06T15:09:00.559058Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:13.341093Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:06fd98ba0dfc3fb72c65e6b8dd4c96bcd8db9c114d394efdccfa22e679e5a12a","observation_id":"007ca4be-51d9-48a7-becc-81e3e4946c92","resolution":{"observed_at":"2026-08-06T15:18:15.225632Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:13.320143Z","title":"Exploring the limits of transfer learning with a unified text-to-text transformer","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-06T15:09:00.559058Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:13.320143Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:eb8100cba70f8f8eba2ce498ad61b2f6eb7161782cab61528e38d8fb3a6a9819","observation_id":"c398fff8-78c2-4120-b45d-481af1ae8102","resolution":{"observed_at":"2026-08-06T15:18:13.320143Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.07585","last_updated":"2023-11-24T07:46:23Z","snapshot_observed_at":"2026-07-06T16:46:57.403995Z","submitted_at":"2023-11-07T09:39:22Z","title":"Input Reconstruction Attack against Vertical Federated Large Language Models","version":2},"cited_work":{"arxiv_id":"2311.07585","doi":null,"metadata_source":"pith","pith_arxiv_id":"2311.07585","snapshot_observed_at":"2026-08-06T15:18:14.029874Z","title":"Input Reconstruction Attack against Vertical Federated Large Language Models","venue":"cs.CL","work_id":"ca6ca7f4-d1c6-48ff-a1f2-0073a4aaac38","year":2023},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-06T15:09:00.559058Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:13.361777Z"},"links":{"cited_paper":"/paper/2311.07585","citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:772af76075f70bb4198176b801ed86a496898bb9cb34d2c37b33faab29ac77a3","observation_id":"22172b8d-a74f-4943-8a7c-0061febce836","resolution":{"observed_at":"2026-08-06T15:18:14.045437Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:15.167120Z","title":"A first look at efficient and secure on-device llm inference against kv leakage, 2024","venue":null,"work_id":"7e0290aa-5984-494b-81ee-b93320bc5756","year":2024},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-06T15:09:00.559058Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:13.368395Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:3b268b8a06dc9f33036750a71df4c3ae5a3d275fbb47c32d7468e1f0876b57ba","observation_id":"78a86351-427b-4420-9dd1-00079048df00","resolution":{"observed_at":"2026-08-06T15:18:15.178852Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:15.129942Z","title":"I know what you asked: Prompt leakage via kv-cache sharing in multi- tenant llm serving","venue":null,"work_id":"9912cc99-01e0-4ae1-b1a0-3f7295e14fce","year":2025},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-06T15:09:00.559058Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:13.378531Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:5c7e17b3cd30710dc5d781e09f5de0c96641b73ea566c8680772fb92ab094a7e","observation_id":"e19bcb69-35eb-481b-8a9f-fed084f44616","resolution":{"observed_at":"2026-08-06T15:18:15.141589Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:13.351062Z","title":"Learn what you want to unlearn: Unlearning inver- sion attacks against machine unlearning","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-06T15:09:00.559058Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:13.351062Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:e9e5039101e17dcb9da965d2612dc453a2fb78c1e8231d10626e41e45b1b3e5a","observation_id":"f31256db-70de-40af-bcb7-d7a64a86190e","resolution":{"observed_at":"2026-08-06T15:18:13.351062Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.09291","last_updated":"2025-05-23T07:37:50Z","snapshot_observed_at":"2026-07-06T20:51:18.251710Z","submitted_at":"2025-03-12T11:36:29Z","title":"Prompt Inference Attack on Distributed Large Language Model Inference Frameworks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.09291","snapshot_observed_at":"2026-08-06T15:18:13.401749Z","title":"Prompt in- ference attack on distributed large language model in- ference frameworks","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-06T15:09:00.559058Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:13.401749Z"},"links":{"cited_paper":"/paper/2503.09291","citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:f5214708ba2fc5092666eb8d5f87060dd376e56af725d28161cbf1c44bd0ac0b","observation_id":"75819577-18b7-4a2a-ae80-c09aebbe2827","resolution":{"observed_at":"2026-08-06T15:18:13.401749Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:15.083712Z","title":"Strengthening vm isolation with in- tegrity protection and more","venue":null,"work_id":"5421d788-c83b-45cd-ac43-f61b56b9250e","year":2020},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-06T15:09:00.559058Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:13.408595Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:c7d062ab5605b7426fc1e9cf09121d82cdc614be8894a0434f53c384bd6a83dd","observation_id":"cae81fb2-160f-4f15-93bd-aceba23fc9ca","resolution":{"observed_at":"2026-08-06T15:18:15.105085Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:15.041252Z","title":"Confidential Compute on NVIDIA Hopper H100","venue":null,"work_id":"53c4d6cd-60f5-42ee-b620-8c1f3283473e","year":2023},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-06T15:09:00.559058Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:13.417202Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:e45364e765bd342cc3d5cb313089de6d1d32d92129ae985f1007e14c5324fd25","observation_id":"82d06373-da11-488c-84d9-31bccb24cc2d","resolution":{"observed_at":"2026-08-06T15:18:15.049885Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2025.00160","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:13.969224Z","title":"Prompt Inversion Attack against Collaborative Inference of Large Language Models","venue":null,"work_id":"fbd9ce96-7595-4270-bbce-5a3b87d6f7de","year":2025},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-06T15:09:00.559058Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:13.391146Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:885d379bc60b5627be6dde69c7db7c457fa33474d172681f554a608749d85b5c","observation_id":"d9b29448-37b0-4d41-91c4-f6961f66f055","resolution":{"observed_at":"2026-08-06T15:18:13.992964Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.02095","last_updated":"2024-12-10T13:54:18Z","snapshot_observed_at":"2026-07-06T17:24:49.522453Z","submitted_at":"2024-02-03T09:22:07Z","title":"Contrasting Adversarial Perturbations: The Space of Harmless Perturbations","version":3},"cited_work":{"arxiv_id":"2402.02095","doi":null,"metadata_source":"pith","pith_arxiv_id":"2402.02095","snapshot_observed_at":"2026-08-06T15:18:13.734435Z","title":"Contrasting Adversarial Perturbations: The Space of Harmless Perturbations","venue":"cs.LG","work_id":"99954ef8-a369-4ad8-bdd5-3c84ca46b5be","year":2024},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-06T15:09:00.559058Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:13.422527Z"},"links":{"cited_paper":"/paper/2402.02095","citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:f53df8c2d85be7fac94d2d30af147cc86cd4b7f4e8d5cde61d0c540d3a61f0ba","observation_id":"805db670-a3e7-4673-afc7-824a63ae0361","resolution":{"observed_at":"2026-08-06T15:18:13.740633Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:12.916947Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-06T15:09:00.559058Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":2021,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:12.916947Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:c62d7170518e6e5173136d9f62ee105670bef74fcbe2d5e704f93952b344aa27","observation_id":"3631b4a7-ef11-4577-a1a9-c930e95ac110","resolution":{"observed_at":"2026-08-06T15:18:12.916947Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:12.624266Z","title":"doi: 10.18653/v1/2023.emnlp-main.765","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-06T15:09:00.559058Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":2023,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:12.624266Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:3100dbf9d11f33dc6baac3081f24cd0448909b6418390ab0217e514b321d9738","observation_id":"db8f0af6-b897-4bb5-90cf-b9ce095dec5d","resolution":{"observed_at":"2026-08-06T15:18:12.624266Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:18:13.071579Z","title":"doi: 10.18653/v1/2024.blackboxnlp-1.6","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","snapshot_observed_at":"2026-08-06T15:09:00.559058Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","version":1},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-06T15:18:13.071579Z"},"links":{"citing_paper":"/paper/2507.16372"},"observation_digest":"sha256:d69f0b86f9d2de338579952b75d8ac091f66fa922c3debb877a8d69f3de9e656","observation_id":"a4f1c573-a3f2-408f-a771-7b4d1639a46e","resolution":{"observed_at":"2026-08-06T15:18:13.071579Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2507.16372","last_updated":"2025-07-22T09:15:11Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-06T15:09:00.559058Z","submitted_at":"2025-07-22T09:15:11Z","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion"},"reference_resolution":{"displayed":72,"state_counts":{"malformed_identifier":1,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":33,"verified_exact":4,"verified_fuzzy":34},"total_outbound_references":72},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 7 August 2026, this Paper Citation Record lists 72 of 72 outbound references and 0 inbound Pith citation observations for arXiv:2507.16372."}