{"as_of":"2026-08-07T08:18:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:0cb157b2031122b3ae5f411e3dc46da2fccb322a80b515cc0b64cfd00878b3b2","coverage":[{"denominator":28,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":28,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T14:45:42.918332Z","state":"measured"},{"denominator":31,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":31,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":3,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":3,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-03T18:19:22.704957Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-06-29T11:23:20.652907Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2507.18105","last_updated":"2025-07-24T05:30:54Z","snapshot_observed_at":"2026-08-06T14:36:17.225757Z","submitted_at":"2025-07-24T05:30:54Z","title":"Understanding the Supply Chain and Risks of Large Language Model Applications","version":1},"cited_work":{"arxiv_id":"2507.18105","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2507.18105","snapshot_observed_at":"2026-06-29T11:23:20.652907Z","title":"Understanding the Supply Chain and Risks of Large Language Model Applications","venue":null,"work_id":"032771e2-5af1-42c0-98bb-1a7e0424f344","year":2025},"citing_paper":{"arxiv_id":"2512.05929","last_updated":"2026-06-29T18:18:24Z","snapshot_observed_at":"2026-08-03T18:19:06.255338Z","submitted_at":"2025-12-05T18:12:21Z","title":"LLM Harms: A Taxonomy and Discussion","version":2},"reference_index":135,"source":"pdf_text","source_observed_at":"2026-05-17T00:29:07.951709Z"},"links":{"cited_paper":"/paper/2507.18105","citing_paper":"/paper/2512.05929"},"observation_digest":"sha256:8582288f74141de2d2b87c55289d670c26ead724f4bfa23ccf3c9c1dae0a2b09","observation_id":"1e4dfd33-50d3-43b1-b342-a838ca8a1474","resolution":{"observed_at":"2026-05-17T00:31:24.848266Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.18105","last_updated":"2025-07-24T05:30:54Z","snapshot_observed_at":"2026-08-06T14:36:17.225757Z","submitted_at":"2025-07-24T05:30:54Z","title":"Understanding the Supply Chain and Risks of Large Language Model Applications","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2507.18105","snapshot_observed_at":"2026-08-03T18:19:22.704957Z","title":"Understanding the Supply Chain and Risks of Large Language Model Applications,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2512.05929","last_updated":"2026-06-29T18:18:24Z","snapshot_observed_at":"2026-08-03T18:19:06.255338Z","submitted_at":"2025-12-05T18:12:21Z","title":"LLM Harms: A Taxonomy and Discussion","version":4},"reference_index":135,"source":"pdf_text","source_observed_at":"2026-08-03T18:19:22.704957Z"},"links":{"cited_paper":"/paper/2507.18105","citing_paper":"/paper/2512.05929"},"observation_digest":"sha256:71fba755da5a4b155351b2d88b7cb35bfca45df9e1e1b9a77c47863819171f1e","observation_id":"7a949494-50f9-474c-bd0a-0298e0d2d958","resolution":{"observed_at":"2026-08-03T18:19:22.704957Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2507.18105","last_updated":"2025-07-24T05:30:54Z","snapshot_observed_at":"2026-08-06T14:36:17.225757Z","submitted_at":"2025-07-24T05:30:54Z","title":"Understanding the Supply Chain and Risks of Large Language Model Applications","version":1},"cited_work":{"arxiv_id":"2507.18105","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2507.18105","snapshot_observed_at":"2026-06-29T11:23:20.652907Z","title":"Understanding the Supply Chain and Risks of Large Language Model Applications","venue":null,"work_id":"032771e2-5af1-42c0-98bb-1a7e0424f344","year":2025},"citing_paper":{"arxiv_id":"2605.28893","last_updated":"2026-07-03T07:41:40Z","snapshot_observed_at":"2026-08-02T07:12:40.296167Z","submitted_at":"2026-05-27T08:11:37Z","title":"Towards Demystifying and Repairing LLM-in-the-Loop Vulnerabilities","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-06-29T11:21:33.012202Z"},"links":{"cited_paper":"/paper/2507.18105","citing_paper":"/paper/2605.28893"},"observation_digest":"sha256:4c054809c0a712a73a1152c630f1e5b3609a2b8c1e26e6210c6c32ff9215b7d3","observation_id":"e801676c-16a2-4b64-b0e4-7877a013223a","resolution":{"observed_at":"2026-06-29T11:23:20.654722Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2507.18105/citation-record","integrity":"/paper/2507.18105/integrity","json":"/paper/2507.18105/citation-record.json","paper":"/paper/2507.18105"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2401.09075","last_updated":"2024-01-17T09:27:13Z","snapshot_observed_at":"2026-07-06T17:16:43.078022Z","submitted_at":"2024-01-17T09:27:13Z","title":"GPT in Sheep's Clothing: The Risk of Customized GPTs","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.09075","snapshot_observed_at":"2026-08-06T14:45:42.843682Z","title":"Gpt in sheep’s clothing: The risk of customized gpts.arXiv preprint arXiv:2401.09075,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.18105","last_updated":"2025-07-24T05:30:54Z","snapshot_observed_at":"2026-08-06T14:36:17.225757Z","submitted_at":"2025-07-24T05:30:54Z","title":"Understanding the Supply Chain and Risks of Large Language Model Applications","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-06T14:45:42.843682Z"},"links":{"cited_paper":"/paper/2401.09075","citing_paper":"/paper/2507.18105"},"observation_digest":"sha256:c7807b4d8f346391bea3c661d5dc18e596dc2d4241bf0b8c66e71b5c38302fc3","observation_id":"478c0260-db5f-4dfc-98f8-1b63e97a3c3e","resolution":{"observed_at":"2026-08-06T14:45:42.843682Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.05778","last_updated":"2024-01-11T09:29:56Z","snapshot_observed_at":"2026-08-05T00:16:01.594011Z","submitted_at":"2024-01-11T09:29:56Z","title":"Risk Taxonomy, Mitigation, and Assessment Benchmarks of Large Language Model Systems","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.05778","snapshot_observed_at":"2026-08-06T14:45:42.856490Z","title":"Risk taxonomy, mitigation, and assessment benchmarks of large language model systems","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.18105","last_updated":"2025-07-24T05:30:54Z","snapshot_observed_at":"2026-08-06T14:36:17.225757Z","submitted_at":"2025-07-24T05:30:54Z","title":"Understanding the Supply Chain and Risks of Large Language Model Applications","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-06T14:45:42.856490Z"},"links":{"cited_paper":"/paper/2401.05778","citing_paper":"/paper/2507.18105"},"observation_digest":"sha256:7cb20cb9494936e5741f8309094168a9e417fb1547757214c03e457714ec31c4","observation_id":"d3ba34f9-1c35-4e95-95e9-11a2a237e2f3","resolution":{"observed_at":"2026-08-06T14:45:42.856490Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07841","last_updated":"2024-09-16T13:18:23Z","snapshot_observed_at":"2026-08-07T03:58:21.441544Z","submitted_at":"2024-02-12T17:52:05Z","title":"Do Membership Inference Attacks Work on Large Language Models?","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.07841","snapshot_observed_at":"2026-08-06T14:45:42.859273Z","title":"Do membership inference attacks work on large language models?arXiv preprint arXiv:2402.07841,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.18105","last_updated":"2025-07-24T05:30:54Z","snapshot_observed_at":"2026-08-06T14:36:17.225757Z","submitted_at":"2025-07-24T05:30:54Z","title":"Understanding the Supply Chain and Risks of Large Language Model Applications","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-06T14:45:42.859273Z"},"links":{"cited_paper":"/paper/2402.07841","citing_paper":"/paper/2507.18105"},"observation_digest":"sha256:3d0a8ed141a2c6bf2df79807ff5e69173b5bef0cf8eb5872caa37774c338beec","observation_id":"c77d8cef-02d0-4b75-9aa2-e5755e690b87","resolution":{"observed_at":"2026-08-06T14:45:42.859273Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:45:43.346887Z","title":"Euronews","venue":null,"work_id":"35891822-a9a3-4e5c-89b1-c458585fa598","year":2025},"citing_paper":{"arxiv_id":"2507.18105","last_updated":"2025-07-24T05:30:54Z","snapshot_observed_at":"2026-08-06T14:36:17.225757Z","submitted_at":"2025-07-24T05:30:54Z","title":"Understanding the Supply Chain and Risks of Large Language Model Applications","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-06T14:45:42.862277Z"},"links":{"citing_paper":"/paper/2507.18105"},"observation_digest":"sha256:1f4519f56841a8f7d1d9d1c1502f937f2b9c682f9adb81b451024f53d7e6b2ae","observation_id":"f76eb40a-1cfc-4eb3-a032-1c0f60d1684f","resolution":{"observed_at":"2026-08-06T14:45:43.349486Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2009.11462","last_updated":"2020-09-25T20:22:26Z","snapshot_observed_at":"2026-07-06T09:58:19.547859Z","submitted_at":"2020-09-24T03:17:19Z","title":"RealToxicityPrompts: Evaluating Neural Toxic Degeneration in Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2009.11462","snapshot_observed_at":"2026-08-06T14:45:42.864839Z","title":"Realtoxicityprompts: Evaluating neural toxic degeneration in language models.arXiv preprint arXiv:2009.11462,","venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"2507.18105","last_updated":"2025-07-24T05:30:54Z","snapshot_observed_at":"2026-08-06T14:36:17.225757Z","submitted_at":"2025-07-24T05:30:54Z","title":"Understanding the Supply Chain and Risks of Large Language Model Applications","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-06T14:45:42.864839Z"},"links":{"cited_paper":"/paper/2009.11462","citing_paper":"/paper/2507.18105"},"observation_digest":"sha256:6998a0e89f3a28bdd3bb9fc5a993d2f55746c14ec97cf9160f4101176440d24c","observation_id":"68928b11-7ff6-4c42-83df-f32e15bfefe5","resolution":{"observed_at":"2026-08-06T14:45:42.864839Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-04T20:22:00.308928Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.18624","snapshot_observed_at":"2026-08-06T14:45:42.867566Z","title":"Large language model supply chain: Open problems from the security perspective","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.18105","last_updated":"2025-07-24T05:30:54Z","snapshot_observed_at":"2026-08-06T14:36:17.225757Z","submitted_at":"2025-07-24T05:30:54Z","title":"Understanding the Supply Chain and Risks of Large Language Model Applications","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-06T14:45:42.867566Z"},"links":{"cited_paper":"/paper/2501.18624","citing_paper":"/paper/2507.18105"},"observation_digest":"sha256:346d76710620b916974159bae4f7e1c0058e050fc4ffd4940be57216f48edfa6","observation_id":"2d33092b-5102-4e71-8f90-9b78061fb2d9","resolution":{"observed_at":"2026-08-06T14:45:42.867566Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:45:43.337780Z","title":"Pleak: Prompt leaking attacks against large language model applications","venue":null,"work_id":"bbd347c9-5012-485c-a66b-b2fb05cc228a","year":2024},"citing_paper":{"arxiv_id":"2507.18105","last_updated":"2025-07-24T05:30:54Z","snapshot_observed_at":"2026-08-06T14:36:17.225757Z","submitted_at":"2025-07-24T05:30:54Z","title":"Understanding the Supply Chain and Risks of Large Language Model Applications","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-06T14:45:42.870578Z"},"links":{"citing_paper":"/paper/2507.18105"},"observation_digest":"sha256:33898c0d74451dbd6d8eca6f93ab2c1e28cd894e223e62f1a104d2dd98a370c1","observation_id":"79abd22c-240f-4b88-9725-857d62440946","resolution":{"observed_at":"2026-08-06T14:45:43.341493Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04957","last_updated":"2024-03-07T23:46:20Z","snapshot_observed_at":"2026-07-06T17:41:19.171822Z","submitted_at":"2024-03-07T23:46:20Z","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.04957","snapshot_observed_at":"2026-08-06T14:45:42.873238Z","title":"Exploring the robustness of decision- level through adversarial attacks on llm-based embodied models","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.18105","last_updated":"2025-07-24T05:30:54Z","snapshot_observed_at":"2026-08-06T14:36:17.225757Z","submitted_at":"2025-07-24T05:30:54Z","title":"Understanding the Supply Chain and Risks of Large Language Model Applications","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-06T14:45:42.873238Z"},"links":{"cited_paper":"/paper/2403.04957","citing_paper":"/paper/2507.18105"},"observation_digest":"sha256:d98a60b40a718b55c8c7c8f13c1455db70a69e4550225bca2520f6fdfbe2d6f2","observation_id":"45f7d85a-76f8-497c-aeac-667ff1e2f1cb","resolution":{"observed_at":"2026-08-06T14:45:42.873238Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:45:42.875860Z","title":"Prompt injection attacks and defenses in llm-integrated applications","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.18105","last_updated":"2025-07-24T05:30:54Z","snapshot_observed_at":"2026-08-06T14:36:17.225757Z","submitted_at":"2025-07-24T05:30:54Z","title":"Understanding the Supply Chain and Risks of Large Language Model Applications","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-06T14:45:42.875860Z"},"links":{"citing_paper":"/paper/2507.18105"},"observation_digest":"sha256:ee9ff61bcb9b7eaa5a7419690222f59f2c84c39fe97288245125f8305e1965ff","observation_id":"fd7992d7-efc6-4419-a639-6b4406f9fa3b","resolution":{"observed_at":"2026-08-06T14:45:42.875860Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.08358","last_updated":"2024-01-16T13:36:07Z","snapshot_observed_at":"2026-08-02T18:11:15.350481Z","submitted_at":"2024-01-16T13:36:07Z","title":"Hallucination Detection and Hallucination Mitigation: An Investigation","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.08358","snapshot_observed_at":"2026-08-06T14:45:42.878521Z","title":"Hallucination detection and hallucination mitigation: An investigation.arXiv preprint arXiv:2401.08358,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.18105","last_updated":"2025-07-24T05:30:54Z","snapshot_observed_at":"2026-08-06T14:36:17.225757Z","submitted_at":"2025-07-24T05:30:54Z","title":"Understanding the Supply Chain and Risks of Large Language Model Applications","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-06T14:45:42.878521Z"},"links":{"cited_paper":"/paper/2401.08358","citing_paper":"/paper/2507.18105"},"observation_digest":"sha256:b82fca780c7d31f57bce48b84b0fa7d8545ea4b46d7660f9c422aebc854057e1","observation_id":"195e5e04-dd03-4d1e-954b-35f46fa17331","resolution":{"observed_at":"2026-08-06T14:45:42.878521Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:45:43.328958Z","title":"optimum habana","venue":null,"work_id":"dcf839ed-f390-4cc8-a246-903d0673e6b1","year":2025},"citing_paper":{"arxiv_id":"2507.18105","last_updated":"2025-07-24T05:30:54Z","snapshot_observed_at":"2026-08-06T14:36:17.225757Z","submitted_at":"2025-07-24T05:30:54Z","title":"Understanding the Supply Chain and Risks of Large Language Model Applications","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-06T14:45:42.881063Z"},"links":{"citing_paper":"/paper/2507.18105"},"observation_digest":"sha256:9c1b77136668bc77fb255a815d695c6701bb2015feee5e54fa0acf3685c83ab2","observation_id":"073fbee0-bcc0-4e77-b21a-12bce1fe1be1","resolution":{"observed_at":"2026-08-06T14:45:43.331799Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10844","last_updated":"2023-10-16T21:37:24Z","snapshot_observed_at":"2026-07-06T16:34:11.453458Z","submitted_at":"2023-10-16T21:37:24Z","title":"Survey of Vulnerabilities in Large Language Models Revealed by Adversarial Attacks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.10844","snapshot_observed_at":"2026-08-06T14:45:42.889327Z","title":"Survey of vulnerabilities in large language models revealed by adversarial attacks.arXiv preprint arXiv:2310.10844,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.18105","last_updated":"2025-07-24T05:30:54Z","snapshot_observed_at":"2026-08-06T14:36:17.225757Z","submitted_at":"2025-07-24T05:30:54Z","title":"Understanding the Supply Chain and Risks of Large Language Model Applications","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-06T14:45:42.889327Z"},"links":{"cited_paper":"/paper/2310.10844","citing_paper":"/paper/2507.18105"},"observation_digest":"sha256:44b1ccfa05b00d6b958ee229efad70eec74d876524ed2cdbde185f7fa263d810","observation_id":"6351fe2a-e6e3-4c08-a69a-59f01f6f8c61","resolution":{"observed_at":"2026-08-06T14:45:42.889327Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:45:42.892043Z","title":"do anything now","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.18105","last_updated":"2025-07-24T05:30:54Z","snapshot_observed_at":"2026-08-06T14:36:17.225757Z","submitted_at":"2025-07-24T05:30:54Z","title":"Understanding the Supply Chain and Risks of Large Language Model Applications","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-06T14:45:42.892043Z"},"links":{"citing_paper":"/paper/2507.18105"},"observation_digest":"sha256:c78dd1f792ebaeca0618c797ae69739e895da01b1fc2b34609b5ce7d2b261119","observation_id":"a8275d30-351c-4cbc-8bb0-b15b933d8848","resolution":{"observed_at":"2026-08-06T14:45:42.892043Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.12622","last_updated":"2026-05-05T05:31:40Z","snapshot_observed_at":"2026-07-06T19:04:47.884694Z","submitted_at":"2024-08-14T10:32:06Z","title":"The AI risk repository: A meta-review, database, and taxonomy of risks from artificial intelligence","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.12622","snapshot_observed_at":"2026-08-06T14:45:42.894869Z","title":"The ai risk repository: A comprehensive meta-review, database, and taxonomy of risks from artificial intelligence.arXiv preprint arXiv:2408.12622,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.18105","last_updated":"2025-07-24T05:30:54Z","snapshot_observed_at":"2026-08-06T14:36:17.225757Z","submitted_at":"2025-07-24T05:30:54Z","title":"Understanding the Supply Chain and Risks of Large Language Model Applications","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-06T14:45:42.894869Z"},"links":{"cited_paper":"/paper/2408.12622","citing_paper":"/paper/2507.18105"},"observation_digest":"sha256:af3669367c7b19bdc4745183bd63f27f4ec9602836a5fd29d2d0f0a7b43dfe01","observation_id":"26be40f3-5415-425a-8219-250a4daee581","resolution":{"observed_at":"2026-08-06T14:45:42.894869Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.07298","last_updated":"2024-05-06T15:52:03Z","snapshot_observed_at":"2026-07-06T16:31:03.559653Z","submitted_at":"2023-10-11T08:32:46Z","title":"Beyond Memorization: Violating Privacy Via Inference with Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.07298","snapshot_observed_at":"2026-08-06T14:45:42.897645Z","title":"Beyond memorization: Violating privacy via inference with large language models.arXiv preprint arXiv:2310.07298,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.18105","last_updated":"2025-07-24T05:30:54Z","snapshot_observed_at":"2026-08-06T14:36:17.225757Z","submitted_at":"2025-07-24T05:30:54Z","title":"Understanding the Supply Chain and Risks of Large Language Model Applications","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-06T14:45:42.897645Z"},"links":{"cited_paper":"/paper/2310.07298","citing_paper":"/paper/2507.18105"},"observation_digest":"sha256:f612534f764a34068755d546a8eb513740557fb4bda49e41b97d4dc7e492f41e","observation_id":"13375ff6-15fa-4a4b-ba95-5de4e47f2642","resolution":{"observed_at":"2026-08-06T14:45:42.897645Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.10210","last_updated":"2024-05-16T16:00:35Z","snapshot_observed_at":"2026-07-06T18:15:20.397376Z","submitted_at":"2024-05-16T16:00:35Z","title":"GPT Store Mining and Analysis","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.10210","snapshot_observed_at":"2026-08-06T14:45:42.900068Z","title":"Gpt store mining and analysis.arXiv preprint arXiv:2405.10210,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.18105","last_updated":"2025-07-24T05:30:54Z","snapshot_observed_at":"2026-08-06T14:36:17.225757Z","submitted_at":"2025-07-24T05:30:54Z","title":"Understanding the Supply Chain and Risks of Large Language Model Applications","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-06T14:45:42.900068Z"},"links":{"cited_paper":"/paper/2405.10210","citing_paper":"/paper/2507.18105"},"observation_digest":"sha256:8cc3906d5f8e202f3af9f5cbf4ab4e48b9374cfa561abe5dbf61ac88f312eb8c","observation_id":"de40687f-37e7-4e1d-91f2-504f0ef50e1c","resolution":{"observed_at":"2026-08-06T14:45:42.900068Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.00905","last_updated":"2023-12-31T16:49:12Z","snapshot_observed_at":"2026-07-06T17:10:36.020497Z","submitted_at":"2023-12-31T16:49:12Z","title":"Opening A Pandora's Box: Things You Should Know in the Era of Custom GPTs","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.00905","snapshot_observed_at":"2026-08-06T14:45:42.902778Z","title":"Opening a pandora’s box: things you should know in the era of custom gpts.arXiv preprint arXiv:2401.00905,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.18105","last_updated":"2025-07-24T05:30:54Z","snapshot_observed_at":"2026-08-06T14:36:17.225757Z","submitted_at":"2025-07-24T05:30:54Z","title":"Understanding the Supply Chain and Risks of Large Language Model Applications","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-06T14:45:42.902778Z"},"links":{"cited_paper":"/paper/2401.00905","citing_paper":"/paper/2507.18105"},"observation_digest":"sha256:c51ab130cae2e8d56ba8264b3bcafa17033b534c195e1c85b5408f59acce8132","observation_id":"6de75f07-8ecc-469b-a13f-f5682673574a","resolution":{"observed_at":"2026-08-06T14:45:42.902778Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.12497","last_updated":"2026-07-09T13:05:41Z","snapshot_observed_at":"2026-07-12T23:18:37.267136Z","submitted_at":"2025-02-18T03:22:38Z","title":"Demystifying LLM Supply Chain Vulnerabilities in the Wild: Distribution, Root Cause, and Real-World Impact","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.12497","snapshot_observed_at":"2026-08-06T14:45:42.905342Z","title":"Large language model supply chain: A research agenda","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.18105","last_updated":"2025-07-24T05:30:54Z","snapshot_observed_at":"2026-08-06T14:36:17.225757Z","submitted_at":"2025-07-24T05:30:54Z","title":"Understanding the Supply Chain and Risks of Large Language Model Applications","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-06T14:45:42.905342Z"},"links":{"cited_paper":"/paper/2502.12497","citing_paper":"/paper/2507.18105"},"observation_digest":"sha256:579541db39d0afcd2542c26946a3b6661dc7eeb2f92759446ab0d0d73b234735","observation_id":"11cb1854-b4d5-43b9-a785-e7a5328efa16","resolution":{"observed_at":"2026-08-06T14:45:42.905342Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.18649","last_updated":"2024-02-28T19:00:12Z","snapshot_observed_at":"2026-07-06T17:37:05.339368Z","submitted_at":"2024-02-28T19:00:12Z","title":"A New Era in LLM Security: Exploring Security Concerns in Real-World LLM-based Systems","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.18649","snapshot_observed_at":"2026-08-06T14:45:42.907822Z","title":"A new era in llm security: Exploring security concerns in real-world llm-based systems.arXiv preprint arXiv:2402.18649,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.18105","last_updated":"2025-07-24T05:30:54Z","snapshot_observed_at":"2026-08-06T14:36:17.225757Z","submitted_at":"2025-07-24T05:30:54Z","title":"Understanding the Supply Chain and Risks of Large Language Model Applications","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-06T14:45:42.907822Z"},"links":{"cited_paper":"/paper/2402.18649","citing_paper":"/paper/2507.18105"},"observation_digest":"sha256:5c66bd85465a8902aa54a2d58cb9c0022cc83e29aae06da6d0e3c7250f618b40","observation_id":"59a94714-65be-4576-ba57-7918469c847a","resolution":{"observed_at":"2026-08-06T14:45:42.907822Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.07518","last_updated":"2024-11-12T03:32:30Z","snapshot_observed_at":"2026-07-06T19:48:49.553384Z","submitted_at":"2024-11-12T03:32:30Z","title":"LLM App Squatting and Cloning","version":1},"cited_work":{"arxiv_id":"2411.07518","doi":null,"metadata_source":"pith","pith_arxiv_id":"2411.07518","snapshot_observed_at":"2026-08-06T14:45:42.969956Z","title":"LLM App Squatting and Cloning","venue":"cs.AI","work_id":"a614a12b-53c2-45d2-b23f-6a7b3884e2e6","year":2024},"citing_paper":{"arxiv_id":"2507.18105","last_updated":"2025-07-24T05:30:54Z","snapshot_observed_at":"2026-08-06T14:36:17.225757Z","submitted_at":"2025-07-24T05:30:54Z","title":"Understanding the Supply Chain and Risks of Large Language Model Applications","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-06T14:45:42.910316Z"},"links":{"cited_paper":"/paper/2411.07518","citing_paper":"/paper/2507.18105"},"observation_digest":"sha256:094da8fa64e210641497a59adadf3c95ae8f773b6334315572a2573279e148ce","observation_id":"28a72206-9954-4a91-87e2-f7ae87ed7169","resolution":{"observed_at":"2026-08-06T14:45:42.973877Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.13457","last_updated":"2024-05-17T05:00:24Z","snapshot_observed_at":"2026-07-06T17:33:08.817655Z","submitted_at":"2024-02-21T01:26:39Z","title":"A Comprehensive Study of Jailbreak Attack versus Defense for Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.13457","snapshot_observed_at":"2026-08-06T14:45:42.912963Z","title":"A comprehensive study of jailbreak attack versus defense for large language models.arXiv preprint arXiv:2402.13457,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.18105","last_updated":"2025-07-24T05:30:54Z","snapshot_observed_at":"2026-08-06T14:36:17.225757Z","submitted_at":"2025-07-24T05:30:54Z","title":"Understanding the Supply Chain and Risks of Large Language Model Applications","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-06T14:45:42.912963Z"},"links":{"cited_paper":"/paper/2402.13457","citing_paper":"/paper/2507.18105"},"observation_digest":"sha256:04da23f6f53bb73789535429be76117abc6552143df9a6eafae71332bd75885a","observation_id":"c3576dbb-ce6f-4b77-ad91-e23a35fc89f5","resolution":{"observed_at":"2026-08-06T14:45:42.912963Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.10547","last_updated":"2024-05-17T05:19:34Z","snapshot_observed_at":"2026-08-03T21:10:23.835102Z","submitted_at":"2024-05-17T05:19:34Z","title":"GPTs Window Shopping: An analysis of the Landscape of Custom ChatGPT Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.10547","snapshot_observed_at":"2026-08-06T14:45:42.915704Z","title":"Gpts window shopping: An analysis of the landscape of custom chatgpt models.arXiv preprint arXiv:2405.10547, 2024a","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.18105","last_updated":"2025-07-24T05:30:54Z","snapshot_observed_at":"2026-08-06T14:36:17.225757Z","submitted_at":"2025-07-24T05:30:54Z","title":"Understanding the Supply Chain and Risks of Large Language Model Applications","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-06T14:45:42.915704Z"},"links":{"cited_paper":"/paper/2405.10547","citing_paper":"/paper/2507.18105"},"observation_digest":"sha256:a5bc67b0b9d30bef7c27a25ef133c90c28589fda135f8ac5e27388777fce82c4","observation_id":"f9cfa140-0e73-4539-a549-803c09b61a3a","resolution":{"observed_at":"2026-08-06T14:45:42.915704Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-07-06T15:59:23.019044Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-08-06T14:45:42.918332Z","title":"Universal and transferable adversarial attacks on aligned language models.arXiv preprint arXiv:2307.15043,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.18105","last_updated":"2025-07-24T05:30:54Z","snapshot_observed_at":"2026-08-06T14:36:17.225757Z","submitted_at":"2025-07-24T05:30:54Z","title":"Understanding the Supply Chain and Risks of Large Language Model Applications","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-06T14:45:42.918332Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2507.18105"},"observation_digest":"sha256:9a9935b7406e9f71257a96f2942c5f2fb0772846d489d4389c8e3fc1e1b1ea5c","observation_id":"44dd8d47-a542-4d88-b2d7-e04cd9399c11","resolution":{"observed_at":"2026-08-06T14:45:42.918332Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:45:42.883615Z","title":"Rodrigo Pedro, Daniel Castro, Paulo Carreira, and Nuno Santos","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2507.18105","last_updated":"2025-07-24T05:30:54Z","snapshot_observed_at":"2026-08-06T14:36:17.225757Z","submitted_at":"2025-07-24T05:30:54Z","title":"Understanding the Supply Chain and Risks of Large Language Model Applications","version":1},"reference_index":2020,"source":"pdf_text","source_observed_at":"2026-08-06T14:45:42.883615Z"},"links":{"citing_paper":"/paper/2507.18105"},"observation_digest":"sha256:72c135804a3d518a55ee9b3efddfa2ceb996dbca25b989612688c306bc64f666","observation_id":"6a03dbd6-25ed-4eb4-aa92-813f9b93dba8","resolution":{"observed_at":"2026-08-06T14:45:42.883615Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.05138","last_updated":"2025-02-08T08:57:00Z","snapshot_observed_at":"2026-07-30T20:33:14.999895Z","submitted_at":"2024-07-06T17:25:11Z","title":"Are LLMs Correctly Integrated into Software Systems?","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.05138","snapshot_observed_at":"2026-08-06T14:45:42.886374Z","title":"Are llms correctly integrated into software systems?arXiv preprint arXiv:2407.05138,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.18105","last_updated":"2025-07-24T05:30:54Z","snapshot_observed_at":"2026-08-06T14:36:17.225757Z","submitted_at":"2025-07-24T05:30:54Z","title":"Understanding the Supply Chain and Risks of Large Language Model Applications","version":1},"reference_index":2022,"source":"pdf_text","source_observed_at":"2026-08-06T14:45:42.886374Z"},"links":{"cited_paper":"/paper/2407.05138","citing_paper":"/paper/2507.18105"},"observation_digest":"sha256:bd13ce0a8dc14484acebb6f27e13bde0161793587c3c076051de2dca78e1a1a6","observation_id":"0c92356b-90be-4aa5-9449-ebcfa0883c74","resolution":{"observed_at":"2026-08-06T14:45:42.886374Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2108.07258","last_updated":"2022-07-12T23:45:14Z","snapshot_observed_at":"2026-08-02T09:20:40.804790Z","submitted_at":"2021-08-16T17:50:08Z","title":"On the Opportunities and Risks of Foundation Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2108.07258","snapshot_observed_at":"2026-08-06T14:45:42.850187Z","title":"On the opportunities and risks of foundation models.arXiv preprint arXiv:2108.07258,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.18105","last_updated":"2025-07-24T05:30:54Z","snapshot_observed_at":"2026-08-06T14:36:17.225757Z","submitted_at":"2025-07-24T05:30:54Z","title":"Understanding the Supply Chain and Risks of Large Language Model Applications","version":1},"reference_index":2023,"source":"pdf_text","source_observed_at":"2026-08-06T14:45:42.850187Z"},"links":{"cited_paper":"/paper/2108.07258","citing_paper":"/paper/2507.18105"},"observation_digest":"sha256:bca447f5235a4ff4bf77ebc5330a0badf8311533c61943005cce979b59150879","observation_id":"d774bde4-04ad-4642-a39d-027538703ada","resolution":{"observed_at":"2026-08-06T14:45:42.850187Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.04724","last_updated":"2023-12-07T22:07:54Z","snapshot_observed_at":"2026-08-06T10:04:24.134088Z","submitted_at":"2023-12-07T22:07:54Z","title":"Purple Llama CyberSecEval: A Secure Coding Benchmark for Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.04724","snapshot_observed_at":"2026-08-06T14:45:42.847281Z","title":"Purple llama cyberseceval: A secure coding benchmark for language models.arXiv preprint arXiv:2312.04724,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.18105","last_updated":"2025-07-24T05:30:54Z","snapshot_observed_at":"2026-08-06T14:36:17.225757Z","submitted_at":"2025-07-24T05:30:54Z","title":"Understanding the Supply Chain and Risks of Large Language Model Applications","version":1},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-06T14:45:42.847281Z"},"links":{"cited_paper":"/paper/2312.04724","citing_paper":"/paper/2507.18105"},"observation_digest":"sha256:bd5f3efcafde70d5a6b7d3979bae6b9ac8f854cd7d461cdf8fff57c3c2e65ef1","observation_id":"97794215-ada6-49f4-9f3e-40a02bb0b665","resolution":{"observed_at":"2026-08-06T14:45:42.847281Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2306.15447","last_updated":"2024-05-06T06:36:24Z","snapshot_observed_at":"2026-08-03T21:29:11.660688Z","submitted_at":"2023-06-26T17:18:44Z","title":"Are aligned neural networks adversarially aligned?","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.15447","snapshot_observed_at":"2026-08-06T14:45:42.853648Z","title":"Are aligned neural networks adversarially aligned?, 2023.URL https://arxiv","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.18105","last_updated":"2025-07-24T05:30:54Z","snapshot_observed_at":"2026-08-06T14:36:17.225757Z","submitted_at":"2025-07-24T05:30:54Z","title":"Understanding the Supply Chain and Risks of Large Language Model Applications","version":1},"reference_index":2025,"source":"pdf_text","source_observed_at":"2026-08-06T14:45:42.853648Z"},"links":{"cited_paper":"/paper/2306.15447","citing_paper":"/paper/2507.18105"},"observation_digest":"sha256:980c3216f060e190f2b9db91e738c5dc77738bf84e605c60c62c284678b8aea6","observation_id":"f9454b0b-8c8d-44ad-898e-cd51dce5e8ea","resolution":{"observed_at":"2026-08-06T14:45:42.853648Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2507.18105","last_updated":"2025-07-24T05:30:54Z","latest_version":1,"primary_category":"cs.SE","snapshot_observed_at":"2026-08-06T14:36:17.225757Z","submitted_at":"2025-07-24T05:30:54Z","title":"Understanding the Supply Chain and Risks of Large Language Model Applications"},"reference_resolution":{"displayed":28,"state_counts":{"malformed_identifier":1,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":23,"verified_exact":1,"verified_fuzzy":3},"total_outbound_references":28},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 7 August 2026, this Paper Citation Record lists 28 of 28 outbound references and 3 inbound Pith citation observations for arXiv:2507.18105."}