{"as_of":"2026-08-10T05:29:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:742b67b8b0285499f7fe7f52963b1b15bf843b1540950a77fe5ddabbac6af500","coverage":[{"denominator":45,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":45,"source":"paper_references, paper_reference_links","source_observed_at":"2026-05-19T00:54:00.464780Z","state":"measured"},{"denominator":45,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":45,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2508.06153/citation-record","integrity":"/paper/2508.06153/integrity","json":"/paper/2508.06153/citation-record.json","paper":"/paper/2508.06153"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2303.18223","last_updated":"2026-03-18T05:34:39Z","snapshot_observed_at":"2026-08-06T23:27:24.356320Z","submitted_at":"2023-03-31T17:28:46Z","title":"A Survey of Large Language Models","version":19},"cited_work":{"arxiv_id":"2303.18223","doi":"10.18653/v1/d16-1080","metadata_source":"pith","pith_arxiv_id":"2303.18223","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"A Survey of Large Language Models","venue":"cs.CL","work_id":"de1b42b5-4a0a-4b1f-8c78-1f7fe21be6c9","year":2023},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-07-06T22:09:57.861336Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"cited_paper":"/paper/2303.18223","citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:bfc730b8402ffbcbe6ed3378f9d22aabf3bb5766646eaaea35879af4c8ca43a7","observation_id":"c66658e3-152d-4fcf-9ab2-0c7b7a0e34ac","resolution":{"observed_at":"2026-05-19T00:56:56.342271Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"A survey on evaluation of large language models.ACM transactions on intelligent systems and technology, 15(3):1–45","venue":null,"work_id":"a9075135-e1ef-4f62-89ff-20df37c58319","year":2024},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-07-06T22:09:57.861336Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:76987db85d6639b8ffada626eda39a4952309402659da9da24b9cf7e0b6ce404","observation_id":"801eb9fb-0502-43ba-aa55-3ec7b6b05ffe","resolution":{"observed_at":"2026-05-19T01:02:55.801758Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2305.14688","last_updated":"2025-03-05T02:28:39Z","snapshot_observed_at":"2026-07-06T15:32:10.481273Z","submitted_at":"2023-05-24T03:51:31Z","title":"ExpertPrompting: Instructing Large Language Models to be Distinguished Experts","version":2},"cited_work":{"arxiv_id":"2305.14688","doi":"10.48550/arxiv.2305.14688","metadata_source":"arxiv_reference","pith_arxiv_id":"2305.14688","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv:2305.14688 (2023)","venue":"arXiv (Cornell University)","work_id":"bee399c7-526d-4870-a5be-b19080306fdd","year":2023},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-07-06T22:09:57.861336Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"cited_paper":"/paper/2305.14688","citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:733187454dca6b8d6c88fbf1283bff37dd9abbade67f315e42b76e021a48dc64","observation_id":"6a0151d1-5578-4879-8c21-4cc38d70bb5b","resolution":{"observed_at":"2026-05-19T00:56:56.348748Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-05-25T06:23:13.952053+00:00","source":"crossref_status_cache"},{"observed_at":"2026-05-25T06:23:13.952053+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"fbdb73c8-a500-43c7-86f5-606fed98e6d4","year":2024},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-07-06T22:09:57.861336Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:c585e86834a0f7885448a75c3f82b4913df784556213693df3e583938a527dee","observation_id":"547fcee4-0566-4cd5-97dd-fa6f18efaa73","resolution":{"observed_at":"2026-05-19T01:02:55.891852Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2408.02416","last_updated":"2025-02-12T14:52:56Z","snapshot_observed_at":"2026-08-07T07:19:45.931364Z","submitted_at":"2024-08-05T12:20:39Z","title":"Why Are My Prompts Leaked? Unraveling Prompt Extraction Threats in Customized Large Language Models","version":2},"cited_work":{"arxiv_id":"2408.02416","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2408.02416","snapshot_observed_at":"2026-07-04T00:59:20.697040Z","title":"Why are my prompts leaked? unraveling prompt extraction threats in customized large language models","venue":null,"work_id":"f62c30e5-cb3a-4ddb-9276-4f22a7543008","year":2024},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-07-06T22:09:57.861336Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"cited_paper":"/paper/2408.02416","citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:9db301ddbb5dd5d28d2a6bbfa4965034c52dc0c2152e97ef8be93c6878aa4ea5","observation_id":"8b8826cc-f58b-44a6-a5f9-b5353d3a9a5f","resolution":{"observed_at":"2026-05-19T00:56:56.354399Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Pleak: Prompt leaking attacks against large language model applications","venue":null,"work_id":"1751ec9c-37ae-4a06-b133-f8c7e19b8a89","year":2024},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-07-06T22:09:57.861336Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:5c3cfd75f3bf010251215f2e657e040e52d03c0ad34c161a0775a496a18cf52f","observation_id":"dd30f6b5-82e6-4f1b-966a-902965e6673a","resolution":{"observed_at":"2026-05-19T01:02:55.843838Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Watch out for your agents! investigat- ing backdoor threats to llm-based agents.Advances in Neural Information Processing Systems, 37:100938–100964","venue":null,"work_id":"69aa7e88-21ee-4953-9f76-4b29b3480ba0","year":2024},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-07-06T22:09:57.861336Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:26bb07fc0b85836878f1d7e29f7d956f49e950d4c46df96cacf47697dd2cadee","observation_id":"e1ea1d35-c63e-41b7-bf10-c8e8915c81bf","resolution":{"observed_at":"2026-05-19T01:02:55.834156Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"BadAgent: Inserting and activating backdoor attacks in LLM agents","venue":null,"work_id":"5d2f5344-f0ad-4760-8d8c-8ce28ce0ea2b","year":2024},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-07-06T22:09:57.861336Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:8702bba9d4613a70df1284fc50c87947e6a0fc322fd7ea6318ddfef89df331c1","observation_id":"9572a3c2-f2fd-46b6-94ae-8f787393e5d8","resolution":{"observed_at":"2026-05-19T01:02:55.790224Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Badjudge: Backdoor vulnerabilities of llm-as-a-judge","venue":null,"work_id":"31602d60-cb11-45d1-b105-1484fcf731b8","year":2025},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-07-06T22:09:57.861336Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:a25cd8e20a25dc1b48a42131fe19ce38d9af628091d8a34494fb6d7771eece84","observation_id":"a63a572d-e193-4a00-9e22-faa92b96aa55","resolution":{"observed_at":"2026-05-19T01:02:55.840915Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Backdoorllm: A comprehensive benchmark for backdoor attacks on large language models","venue":null,"work_id":"cdbcb156-d321-41c7-abe5-9f6db232f580","year":2024},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-07-06T22:09:57.861336Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:f365a4f21ca5bd2798de0a33bede87ab9b818418eb875f8227be0eab7f2f28a0","observation_id":"412be01e-10cf-49bb-90b9-f7380ada7816","resolution":{"observed_at":"2026-05-19T01:02:55.895089Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Backdoor attacks and countermeasures in natural language processing models: A comprehensive security review","venue":null,"work_id":"c747ad01-8ad3-48fa-8bb1-cbeaff66ac65","year":2025},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-07-06T22:09:57.861336Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:f123629f9205c22c26a2611fa636944579c722b773e6d708b268290feadf2f78","observation_id":"1d18c96c-628e-422b-9361-ecd32b633f1b","resolution":{"observed_at":"2026-05-19T01:02:55.888421Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"ELBA-bench: An efficient learning backdoor attacks benchmark for large language models","venue":null,"work_id":"64b773c7-641c-4eb8-9395-15dbe9746099","year":2025},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-07-06T22:09:57.861336Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:fbe1e124403858aa2588eca63ea29fe13d417d3a828b4c5b736dba2ba9879f50","observation_id":"19e897b7-74c0-4b24-a40f-a3f708ad05e0","resolution":{"observed_at":"2026-05-19T01:02:55.870192Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"A backdoor attack against lstm-based text classification systems","venue":null,"work_id":"d0c7858e-a1a5-446b-9ad3-89c03ff71713","year":2019},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-07-06T22:09:57.861336Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:26e012bb8c659de83916161019c7a3044ac4a8a19e783915bb2c0862caa95bfe","observation_id":"3e686572-76d0-409b-b7e0-d2a92a4c0506","resolution":{"observed_at":"2026-05-19T01:02:55.866684Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Badnl: Backdoor attacks against nlp models with semantic-preserving improvements","venue":null,"work_id":"da9bb959-ec1c-4923-837f-39827187871b","year":null},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-07-06T22:09:57.861336Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:4a38e97b7129011ef982d8310e657fb7c3c2ac4c9201457219d86e38f3a06894","observation_id":"6d2b331d-e60d-4132-8bdf-e00e13314489","resolution":{"observed_at":"2026-05-19T01:02:55.783829Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T02:15:55.937471Z","title":null,"venue":null,"work_id":"a3c6a1e4-c134-4ac7-9434-fb6e64d379e3","year":null},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-07-06T22:09:57.861336Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:25c74715d83647274d6f61a2351d6a9613bab3ea5a91f1d10e9e18b345b2bbf8","observation_id":"d1ea7c69-5518-49ed-8053-7eb9caf27fe4","resolution":{"observed_at":"2026-05-19T01:02:55.816483Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Badchain: Backdoor chain-of-thought prompting for large language models","venue":null,"work_id":"6d9cdd70-02ef-471d-b3a1-a77926a25cd9","year":2024},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-07-06T22:09:57.861336Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:7a70e18014953e994a0356a67fedb22f6d9e8d232457cb9a7be2bf93a8219a85","observation_id":"489c051c-e2a0-4e0c-bd87-4335541a9c2e","resolution":{"observed_at":"2026-05-19T01:02:55.813312Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Instruction backdoor attacks against customized LLMs","venue":null,"work_id":"043edb37-252a-43ac-afb3-5b43588bd417","year":2024},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-07-06T22:09:57.861336Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:f713b777026b64a683ab215ffda338110e05d9da38fa4fbaf533d0166ad4743b","observation_id":"3f088405-88d0-4a88-a352-8cd433fe6771","resolution":{"observed_at":"2026-05-19T01:02:55.837697Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"RAP: Robustness-Aware Perturbations for defending against backdoor attacks on NLP models","venue":null,"work_id":"cffc3fa9-7070-4e24-b524-8d1d4ded2a72","year":2025},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-07-06T22:09:57.861336Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:929625a1aa9426e4593a2ea6b9c1e300cdf0af83f0414d297a73f77c475a45d7","observation_id":"f1c78a3c-4c85-4baf-92dc-4d7e987d29ac","resolution":{"observed_at":"2026-05-19T01:02:55.822324Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Ranasinghe, and Hyoungshick Kim","venue":null,"work_id":"e4c57662-97f5-41cf-8e31-3a8e88a93252","year":2022},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-07-06T22:09:57.861336Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:4b53ec616674cf235ebb5ea1f3fe9bcb36c5b4bec0373639ea2e1516d5f42187","observation_id":"79be21e6-deaa-4de0-94ac-ec9a49197220","resolution":{"observed_at":"2026-05-19T01:02:55.830959Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"IMBERT: Making BERT immune to insertion- based backdoor attacks","venue":null,"work_id":"90c7995e-1bf8-40b3-bf26-cb96606bf007","year":2023},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-07-06T22:09:57.861336Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:3492c8eb9fbd9d188c304f0515ad13e9b45875719d04f2c222b0f64429b59a14","observation_id":"df84b96a-63e7-4608-8be0-612c97013fc5","resolution":{"observed_at":"2026-05-19T01:02:55.856624Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Mitigating backdoor poisoning attacks through the lens of spurious correlation","venue":null,"work_id":"4bf4e31b-0d49-44a5-9918-19e3c0160e52","year":2023},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-07-06T22:09:57.861336Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:25d049209bdc34b4a6476b3db50cc01ea1f0d47bdd1b47da07161509f14952bb","observation_id":"4c576e84-07d4-4283-bd09-b5756835add2","resolution":{"observed_at":"2026-05-19T01:02:55.816903Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"WeDef: Weakly supervised backdoor defense for text classification","venue":null,"work_id":"93e74133-d979-469d-890a-e297b3e649af","year":2022},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-07-06T22:09:57.861336Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:224636da14616f74c5ea2dbae7ac7fc63c87135b08ecfcc881dd0c3676e8962b","observation_id":"0b555090-68dc-45ad-bf7a-232bff3b39e3","resolution":{"observed_at":"2026-05-19T01:02:55.810323Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Textguard: Provable defense against backdoor attacks on text classification","venue":null,"work_id":"98ee278c-2f88-4cff-84ce-19614902e306","year":2023},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-07-06T22:09:57.861336Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:0eac895286b2bcee3557a7ed32315c89d6025f354ba7d4ef6cf741f8bf716ffd","observation_id":"c4e2ceb5-5404-4d67-957b-48f75c9228a8","resolution":{"observed_at":"2026-05-19T01:02:55.780687Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Defense against backdoor attack on pre-trained language models via head pruning and attention normalization","venue":null,"work_id":"1a2e38f0-69a1-4486-af2b-0678b065953a","year":2024},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-07-06T22:09:57.861336Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:e2878636a37c87df4912fc1da8394bb11a44ff7b99363e1b047162472278afd0","observation_id":"a606bc3e-7c3f-42a0-aee3-bb254506727e","resolution":{"observed_at":"2026-05-19T01:02:55.853268Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"ONION: A simple and effective defense against textual backdoor attacks","venue":null,"work_id":"7a988a88-085b-484c-bc56-bbeea0b5d8fa","year":2021},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-07-06T22:09:57.861336Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:d9d4b810cd115a76c6fc0c07b1fb4c39c8a0ecce539d6491cdf6015ffa373862","observation_id":"fc653ee4-90d1-44e8-b4ec-c105c8aada67","resolution":{"observed_at":"2026-05-19T01:02:55.813010Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Mitigating backdoor attacks in lstm-based text classification systems by backdoor keyword identification","venue":null,"work_id":"a4dbd2b3-eb16-45be-8259-d07c5ae76b64","year":2021},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-07-06T22:09:57.861336Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:5d370ee9312a1a9e5dc4db14c7afd52cfbb0bd26b64c3050405731ef36675181","observation_id":"c9de92a9-2def-414c-af0b-ecd6488b4c35","resolution":{"observed_at":"2026-05-19T01:02:55.797747Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Large language models are zero-shot reasoners","venue":null,"work_id":"a675a655-5dd0-48a5-a9c3-dc7533589a67","year":2022},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-07-06T22:09:57.861336Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:bd5b0f273f9205ec7fb1d7dad58fdaeb94677b7ad733887e948713eac3ce0323","observation_id":"3ca415c3-e0f8-4338-bd53-55e601e806e1","resolution":{"observed_at":"2026-05-19T01:02:55.879502Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Chain-of-scrutiny: Detecting backdoor attacks for large language models","venue":null,"work_id":"8fa0d4db-1e4f-40aa-8738-224502617a37","year":2024},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-07-06T22:09:57.861336Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:a81128678e6eb421d11a4b3265608e3abf932db9d42d1d8a07c9de6919a01a43","observation_id":"97c90c4a-ff3d-4445-ad7a-2d1afaaa99d3","resolution":{"observed_at":"2026-05-19T01:02:55.828357Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Hidden killer: Invisible textual backdoor attacks with syntactic trigger","venue":null,"work_id":"f1a6c0c8-2e85-48ac-a684-e0eba17b910e","year":2021},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-07-06T22:09:57.861336Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:b214c18d0ebfbcb4de04adc92267c691e56e035b8d5684b0f8af31cb620f11c3","observation_id":"e93fb3a1-f68b-405e-9903-87263927a14c","resolution":{"observed_at":"2026-05-19T01:02:55.873285Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Hidden trigger backdoor attack on NLP models via linguistic style manipulation","venue":null,"work_id":"5bbf883d-fca0-49a7-a789-69382ece3ce8","year":2022},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-07-06T22:09:57.861336Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:fbbf2268b7619c7072d127cf949c0b58b38f0ffead3de10eb657ef27a6b0d59c","observation_id":"35e8cf6c-bef7-4e24-91f7-14663d827020","resolution":{"observed_at":"2026-05-19T01:02:55.804182Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"BITE: Textual backdoor attacks with iterative trigger injection","venue":null,"work_id":"a948a4d2-d1ae-49e7-803b-c67f715e3484","year":null},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-07-06T22:09:57.861336Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:d8c25f52a48265f5b27c5daf9f6150410b2602e26c3ecd4ba25ba157cfae6f47","observation_id":"90e195c7-00ca-4647-976e-caab0e3a6399","resolution":{"observed_at":"2026-05-19T01:02:55.863159Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T14:26:21.198691Z","title":null,"venue":null,"work_id":"c69dcc4d-85af-4249-accc-cbae1a0e230c","year":null},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-07-06T22:09:57.861336Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:e7fd7c5d2f20750431e02b4eed10b716d6e33aa153614d107eb256b1dc7894c0","observation_id":"99378d66-824d-41f1-bd8a-be0318667c0a","resolution":{"observed_at":"2026-05-19T01:02:55.787066Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Backdoor NLP models via AI-generated text","venue":null,"work_id":"3e89a107-5ecf-4cb0-80e7-30d76ba770df","year":2024},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-07-06T22:09:57.861336Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:3e8318b57fde82e63cbeb2a1f99032433aaa8abe2369a9cbf1b35723b5ce5c34","observation_id":"6873d519-30a9-4719-b3a6-246f10211395","resolution":{"observed_at":"2026-05-19T01:02:55.882063Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"ChatGPT as an attack tool: Stealthy textual backdoor attack via blackbox generative model trigger","venue":null,"work_id":"6f027425-ea82-412e-a8ba-e057ce8be122","year":2024},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-07-06T22:09:57.861336Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:08036e0c4f8d1f97c3654d78e2afbb6725fa2cfba8d391e79078127f093da4b3","observation_id":"f4ae16f6-1df9-47d9-923f-46119302b37b","resolution":{"observed_at":"2026-05-19T01:02:55.784612Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Badapex: Backdoor attack based on adaptive optimization mechanism of black-box large language models","venue":null,"work_id":"b8d37bc8-d59a-438a-a8de-f8332ea5ea5c","year":2025},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-07-06T22:09:57.861336Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:56835ed9aa900598fc7f585c93882a9acae83cca70024b0b211a09ae52cf5d59","observation_id":"b2d744af-6240-47e5-8b09-e1dbdc736855","resolution":{"observed_at":"2026-05-19T01:02:55.876381Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Bait: Large language model backdoor scanning by inverting attack target","venue":null,"work_id":"0057ab6e-fb44-4a5b-9014-7a525433576f","year":2025},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-07-06T22:09:57.861336Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:40188c68e559c8fb80b58dfbe83316cbfbc67d5fdcee0aa2ef1ae87b0b1aec1a","observation_id":"ec04944a-a257-437d-bc17-0dd1df1c43af","resolution":{"observed_at":"2026-05-19T01:02:55.885345Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Text classification via large language models","venue":null,"work_id":"f55492d2-60e9-4473-9315-0710b31d0fb2","year":2023},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-07-06T22:09:57.861336Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:121a0e29e1fbcbc462dc8c6bc83687657720e78af2d97541ef1511d25981a4b4","observation_id":"d85766bc-f7bd-45c0-9a69-fd93a7856083","resolution":{"observed_at":"2026-05-19T01:02:55.859459Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"When backdoors speak: Understanding LLM backdoor attacks through model-generated explanations","venue":null,"work_id":"f1f0ac37-87d8-4fdf-968b-39806f6ff197","year":2025},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-07-06T22:09:57.861336Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:1b6588cbcca8f879def194a2add6f17888728ce0a5c480e2520d4ddc671a32e1","observation_id":"51d9f6df-e1d8-4c4b-b1e1-51b21fa90742","resolution":{"observed_at":"2026-05-19T01:02:55.777125Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Manning, Andrew Ng, and Christopher Potts","venue":null,"work_id":"589a5bd1-8c32-43de-bfb4-dd1ab6be35a2","year":2013},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-07-06T22:09:57.861336Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:fafb7fd3bbbd98f98420515372088617497de9d0112f38f106c9af77625694cd","observation_id":"70ef969f-2d0e-4a02-a9ab-ab20f6c704f0","resolution":{"observed_at":"2026-05-19T01:02:55.846786Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Character-level convolutional networks for text classification","venue":null,"work_id":"375887b1-b220-489a-92db-b378b077347b","year":2015},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-07-06T22:09:57.861336Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:62cd0bbd9936766eaf925706c70b1502f91104980cfac6d9e4e3d974ec782022","observation_id":"43098378-51e9-4d34-a49a-40e569248c33","resolution":{"observed_at":"2026-05-19T01:02:55.850259Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Justifying recommendations using distantly-labeled reviews and fine-grained aspects","venue":null,"work_id":"262b9860-1e1f-4a49-8a7e-3c648ba29942","year":2019},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-07-06T22:09:57.861336Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:cc698290145438798d511f7522ac886a0002b8dd4bc85fbac23be99070299264","observation_id":"84e11cb9-62e1-477c-97cb-5226056cdc99","resolution":{"observed_at":"2026-05-19T01:02:55.807003Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"CommonsenseQA: A question answering challenge targeting commonsense knowledge","venue":null,"work_id":"f695ccde-7494-4607-9cc7-6c0ba9788a6b","year":2019},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-07-06T22:09:57.861336Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:3200524a8191525163687b8165afd00152f19f3a9e5fbd73c153e84adc9c788f","observation_id":"9a94b541-4674-4e52-aa96-8a7dfe7797ec","resolution":{"observed_at":"2026-05-19T01:02:55.767075Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Negative","venue":null,"work_id":"016393d2-d704-4ac6-b002-31e60c3a1bf2","year":2021},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-07-06T22:09:57.861336Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:fc1177a708b66e990f4f95b45d016e32705a3e21f896d43e6e27acf9ee56ba5f","observation_id":"13f0dc42-07ab-4995-8b7c-9d73c16203fb","resolution":{"observed_at":"2026-05-19T01:02:55.837286Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"S\" and \"US","venue":null,"work_id":"4288908b-c40c-45f3-8e74-aa775358bf1f","year":null},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-07-06T22:09:57.861336Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:230ed6d3c1836f757a2bc9c495b12528963aad7236006a100ec01587cd28f1ac","observation_id":"6d59581e-8e7b-4228-a60e-ac2fddb1b5f5","resolution":{"observed_at":"2026-05-19T01:02:55.810037Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"S\" and \"US","venue":null,"work_id":"7f61c685-ab8c-44cf-8fe0-522e1a72835c","year":2025},"citing_paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","snapshot_observed_at":"2026-07-06T22:09:57.861336Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","version":3},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-05-19T00:54:00.464780Z"},"links":{"citing_paper":"/paper/2508.06153"},"observation_digest":"sha256:d2a46932f30a660459f47bbac579e1abe3c347568541888b393a7852017992ed","observation_id":"d1de05d7-7e21-4cd0-800e-e416efd1ea0b","resolution":{"observed_at":"2026-05-19T01:02:55.825356Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2508.06153","last_updated":"2026-04-16T09:49:06Z","latest_version":3,"primary_category":"cs.CR","snapshot_observed_at":"2026-07-06T22:09:57.861336Z","submitted_at":"2025-08-08T09:17:33Z","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs"},"reference_resolution":{"displayed":45,"state_counts":{"malformed_identifier":0,"metadata_mismatch":1,"parse_uncertain":0,"unresolved":3,"verified_exact":2,"verified_fuzzy":39},"total_outbound_references":45},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 10 August 2026, this Paper Citation Record lists 45 of 45 outbound references and 0 inbound Pith citation observations for arXiv:2508.06153."}