{"as_of":"2026-08-08T14:39:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:02a7d8bccf3b1d98465cb87b10e03c2dd8ad0df32ea9ad350802c878ef50c4bb","coverage":[{"denominator":47,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":47,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-04T14:50:31.100765Z","state":"measured"},{"denominator":47,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":47,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2509.23381/citation-record","integrity":"/paper/2509.23381/integrity","json":"/paper/2509.23381/citation-record.json","paper":"/paper/2509.23381"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T14:50:30.938465Z","title":"Llm-jp toxicity dataset v2","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.23381","last_updated":"2026-07-21T08:03:44Z","snapshot_observed_at":"2026-08-06T16:07:03.838158Z","submitted_at":"2025-09-27T16:03:44Z","title":"Guard Vector: Beyond English LLM Guardrails with Task-Vector Composition and Streaming-Aware Prefix SFT","version":2},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-04T14:50:30.938465Z"},"links":{"citing_paper":"/paper/2509.23381"},"observation_digest":"sha256:7920741cf97c41235a7c85c32ffbc5483462810486dbffdf5cd3a150da083e31","observation_id":"202bb892-4046-4c0b-908d-5be0c01b09b9","resolution":{"observed_at":"2026-08-04T14:50:30.938465Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2212.08073","last_updated":"2022-12-15T06:19:23Z","snapshot_observed_at":"2026-08-02T04:53:58.766070Z","submitted_at":"2022-12-15T06:19:23Z","title":"Constitutional AI: Harmlessness from AI Feedback","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2212.08073","snapshot_observed_at":"2026-08-04T14:50:30.942099Z","title":"Constitutional ai: Harmlessness from ai feedback","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2509.23381","last_updated":"2026-07-21T08:03:44Z","snapshot_observed_at":"2026-08-06T16:07:03.838158Z","submitted_at":"2025-09-27T16:03:44Z","title":"Guard Vector: Beyond English LLM Guardrails with Task-Vector Composition and Streaming-Aware Prefix SFT","version":2},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-04T14:50:30.942099Z"},"links":{"cited_paper":"/paper/2212.08073","citing_paper":"/paper/2509.23381"},"observation_digest":"sha256:a445234d4ff05c70b21711a091217aa35ff200e5fd92282fce2c7ce08ea8fb8d","observation_id":"353c4e7b-4480-4596-8a00-3e4554d4d61d","resolution":{"observed_at":"2026-08-04T14:50:30.942099Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2207.04672","last_updated":"2022-08-25T17:10:53Z","snapshot_observed_at":"2026-07-06T13:29:47.927628Z","submitted_at":"2022-07-11T07:33:36Z","title":"No Language Left Behind: Scaling Human-Centered Machine Translation","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2207.04672","snapshot_observed_at":"2026-08-04T14:50:30.946190Z","title":"No language left behind: Scaling human-centered machine translation","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2509.23381","last_updated":"2026-07-21T08:03:44Z","snapshot_observed_at":"2026-08-06T16:07:03.838158Z","submitted_at":"2025-09-27T16:03:44Z","title":"Guard Vector: Beyond English LLM Guardrails with Task-Vector Composition and Streaming-Aware Prefix SFT","version":2},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-04T14:50:30.946190Z"},"links":{"cited_paper":"/paper/2207.04672","citing_paper":"/paper/2509.23381"},"observation_digest":"sha256:bdb87e8450b905ba3959501dc0bc619fd1e227722e137aaff0a59dfd31ccc72a","observation_id":"f45b1755-3e9d-445a-98b7-49a0a2569c51","resolution":{"observed_at":"2026-08-04T14:50:30.946190Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2210.17323","last_updated":"2023-03-22T13:10:47Z","snapshot_observed_at":"2026-08-07T08:38:54.025062Z","submitted_at":"2022-10-31T13:42:40Z","title":"GPTQ: Accurate Post-Training Quantization for Generative Pre-trained Transformers","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2210.17323","snapshot_observed_at":"2026-08-04T14:50:30.949543Z","title":"Gptq: Accurate post-training quantization for generative pre-trained transformers","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2509.23381","last_updated":"2026-07-21T08:03:44Z","snapshot_observed_at":"2026-08-06T16:07:03.838158Z","submitted_at":"2025-09-27T16:03:44Z","title":"Guard Vector: Beyond English LLM Guardrails with Task-Vector Composition and Streaming-Aware Prefix SFT","version":2},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-04T14:50:30.949543Z"},"links":{"cited_paper":"/paper/2210.17323","citing_paper":"/paper/2509.23381"},"observation_digest":"sha256:70f2ceedaeae9a12f622ff9d1e810cabf4488181a509fd8f883f5f90922cd5e4","observation_id":"014a138d-d8ed-4994-9d13-bf7bdb5a943e","resolution":{"observed_at":"2026-08-04T14:50:30.949543Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T14:50:30.952885Z","title":"Continual pre-training for cross-lingual llm adaptation: Enhancing japanese language capabilities","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.23381","last_updated":"2026-07-21T08:03:44Z","snapshot_observed_at":"2026-08-06T16:07:03.838158Z","submitted_at":"2025-09-27T16:03:44Z","title":"Guard Vector: Beyond English LLM Guardrails with Task-Vector Composition and Streaming-Aware Prefix SFT","version":2},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-04T14:50:30.952885Z"},"links":{"citing_paper":"/paper/2509.23381"},"observation_digest":"sha256:4b019f69b7606d5ee886133e5ba6524c174a53aa8d8e5d106759ed03284c2f1b","observation_id":"9620af36-9ec1-4310-ba64-0385615d9cb4","resolution":{"observed_at":"2026-08-04T14:50:30.952885Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T14:50:30.956154Z","title":"AEGIS 2.0: A diverse AI safety dataset and risks taxonomy for alignment of LLM guardrails","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2509.23381","last_updated":"2026-07-21T08:03:44Z","snapshot_observed_at":"2026-08-06T16:07:03.838158Z","submitted_at":"2025-09-27T16:03:44Z","title":"Guard Vector: Beyond English LLM Guardrails with Task-Vector Composition and Streaming-Aware Prefix SFT","version":2},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-04T14:50:30.956154Z"},"links":{"citing_paper":"/paper/2509.23381"},"observation_digest":"sha256:5935526da9aa2afbc30a05facd6cec9d911c50ce67f90c032ba1c19ea525510e","observation_id":"ff26142c-c0cd-4d8e-87a8-0add72fa0375","resolution":{"observed_at":"2026-08-04T14:50:30.956154Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2308.16137","last_updated":"2024-06-24T21:22:00Z","snapshot_observed_at":"2026-08-07T16:57:45.872655Z","submitted_at":"2023-08-30T16:47:51Z","title":"LM-Infinite: Zero-Shot Extreme Length Generalization for Large Language Models","version":7},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.16137","snapshot_observed_at":"2026-08-04T14:50:30.959453Z","title":"Lm-infinite: Zero-shot extreme length generalization for large language models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2509.23381","last_updated":"2026-07-21T08:03:44Z","snapshot_observed_at":"2026-08-06T16:07:03.838158Z","submitted_at":"2025-09-27T16:03:44Z","title":"Guard Vector: Beyond English LLM Guardrails with Task-Vector Composition and Streaming-Aware Prefix SFT","version":2},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-04T14:50:30.959453Z"},"links":{"cited_paper":"/paper/2308.16137","citing_paper":"/paper/2509.23381"},"observation_digest":"sha256:d040b74b24229f4ef04d9463a918d2c6438d16c01e33f3b662be008ec7d12247","observation_id":"aea2deaf-e721-4bce-ae6b-4597daea1ed6","resolution":{"observed_at":"2026-08-04T14:50:30.959453Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.18495","last_updated":"2024-12-09T20:21:56Z","snapshot_observed_at":"2026-08-06T04:32:59.039501Z","submitted_at":"2024-06-26T16:58:20Z","title":"WildGuard: Open One-Stop Moderation Tools for Safety Risks, Jailbreaks, and Refusals of LLMs","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.18495","snapshot_observed_at":"2026-08-04T14:50:30.962745Z","title":"Wildguard: Open one-stop moderation tools for safety risks, jailbreaks, and refusals of llms, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.23381","last_updated":"2026-07-21T08:03:44Z","snapshot_observed_at":"2026-08-06T16:07:03.838158Z","submitted_at":"2025-09-27T16:03:44Z","title":"Guard Vector: Beyond English LLM Guardrails with Task-Vector Composition and Streaming-Aware Prefix SFT","version":2},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-04T14:50:30.962745Z"},"links":{"cited_paper":"/paper/2406.18495","citing_paper":"/paper/2509.23381"},"observation_digest":"sha256:09ac0f0e4685a22b829eacb33d1b8ac577822daffb59181abe66942608e087f0","observation_id":"1e2d498e-0219-490a-815a-c3e32549f14a","resolution":{"observed_at":"2026-08-04T14:50:30.962745Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.04799","last_updated":"2024-06-07T06:28:05Z","snapshot_observed_at":"2026-08-06T08:33:44.603323Z","submitted_at":"2023-10-07T13:34:21Z","title":"Chat Vector: A Simple Approach to Equip LLMs with Instruction Following and Model Alignment in New Languages","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.04799","snapshot_observed_at":"2026-08-04T14:50:30.966421Z","title":"Chat vector: A simple approach to equip llms with instruction following and model alignment in new languages","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2509.23381","last_updated":"2026-07-21T08:03:44Z","snapshot_observed_at":"2026-08-06T16:07:03.838158Z","submitted_at":"2025-09-27T16:03:44Z","title":"Guard Vector: Beyond English LLM Guardrails with Task-Vector Composition and Streaming-Aware Prefix SFT","version":2},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-04T14:50:30.966421Z"},"links":{"cited_paper":"/paper/2310.04799","citing_paper":"/paper/2509.23381"},"observation_digest":"sha256:0bda143a421e99ea133769fd6018578002d5beef7556a47ce934f5dcc88f68c5","observation_id":"91f748cc-25cf-4579-8b24-217300e4883f","resolution":{"observed_at":"2026-08-04T14:50:30.966421Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.21276","last_updated":"2024-10-25T17:43:01Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-10-25T17:43:01Z","title":"GPT-4o System Card","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.21276","snapshot_observed_at":"2026-08-04T14:50:30.969946Z","title":"Gpt-4o system card","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.23381","last_updated":"2026-07-21T08:03:44Z","snapshot_observed_at":"2026-08-06T16:07:03.838158Z","submitted_at":"2025-09-27T16:03:44Z","title":"Guard Vector: Beyond English LLM Guardrails with Task-Vector Composition and Streaming-Aware Prefix SFT","version":2},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-04T14:50:30.969946Z"},"links":{"cited_paper":"/paper/2410.21276","citing_paper":"/paper/2509.23381"},"observation_digest":"sha256:b4add1cd6fd4239108f3ac251d64e2b3ae2017056439a9cb993c47bdd9100605","observation_id":"c23e73fc-4789-457f-a297-f84903085429","resolution":{"observed_at":"2026-08-04T14:50:30.969946Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T14:50:30.973764Z","title":"Wildguardmix-test-ko dataset","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.23381","last_updated":"2026-07-21T08:03:44Z","snapshot_observed_at":"2026-08-06T16:07:03.838158Z","submitted_at":"2025-09-27T16:03:44Z","title":"Guard Vector: Beyond English LLM Guardrails with Task-Vector Composition and Streaming-Aware Prefix SFT","version":2},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-04T14:50:30.973764Z"},"links":{"citing_paper":"/paper/2509.23381"},"observation_digest":"sha256:d597389fc6a11daf20916b85e338271e36e3fccda970e0c8c75c43e1a0b165c6","observation_id":"916ddd2a-198d-4800-bcdd-26e01ddbc66f","resolution":{"observed_at":"2026-08-04T14:50:30.973764Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2212.04089","last_updated":"2023-03-31T15:27:01Z","snapshot_observed_at":"2026-08-03T22:12:27.993418Z","submitted_at":"2022-12-08T05:50:53Z","title":"Editing Models with Task Arithmetic","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2212.04089","snapshot_observed_at":"2026-08-04T14:50:30.976797Z","title":"Editing models with task arithmetic","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2509.23381","last_updated":"2026-07-21T08:03:44Z","snapshot_observed_at":"2026-08-06T16:07:03.838158Z","submitted_at":"2025-09-27T16:03:44Z","title":"Guard Vector: Beyond English LLM Guardrails with Task-Vector Composition and Streaming-Aware Prefix SFT","version":2},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-04T14:50:30.976797Z"},"links":{"cited_paper":"/paper/2212.04089","citing_paper":"/paper/2509.23381"},"observation_digest":"sha256:acd34724a783c5ba79f2dea494c58b141d280f98bd55298f95e264d4c7f3d46a","observation_id":"88938e90-a2d8-40a1-9b1c-986a5efcb3b9","resolution":{"observed_at":"2026-08-04T14:50:30.976797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.16720","last_updated":"2026-04-30T02:46:40Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-12-21T18:04:31Z","title":"OpenAI o1 System Card","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.16720","snapshot_observed_at":"2026-08-04T14:50:30.980248Z","title":"Openai o1 system card","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.23381","last_updated":"2026-07-21T08:03:44Z","snapshot_observed_at":"2026-08-06T16:07:03.838158Z","submitted_at":"2025-09-27T16:03:44Z","title":"Guard Vector: Beyond English LLM Guardrails with Task-Vector Composition and Streaming-Aware Prefix SFT","version":2},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-04T14:50:30.980248Z"},"links":{"cited_paper":"/paper/2412.16720","citing_paper":"/paper/2509.23381"},"observation_digest":"sha256:56b15e43c1c9942de27fe186aa0c12d66a24b2fddef723a51f179bdceb817489","observation_id":"2c624e4e-7ccd-4518-9cb7-062546c6eb6a","resolution":{"observed_at":"2026-08-04T14:50:30.980248Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.21783","last_updated":"2024-11-23T23:27:33Z","snapshot_observed_at":"2026-07-06T18:55:11.576666Z","submitted_at":"2024-07-31T17:54:27Z","title":"The Llama 3 Herd of Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.21783","snapshot_observed_at":"2026-08-04T14:50:30.983316Z","title":"The llama 3 herd of models, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.23381","last_updated":"2026-07-21T08:03:44Z","snapshot_observed_at":"2026-08-06T16:07:03.838158Z","submitted_at":"2025-09-27T16:03:44Z","title":"Guard Vector: Beyond English LLM Guardrails with Task-Vector Composition and Streaming-Aware Prefix SFT","version":2},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-04T14:50:30.983316Z"},"links":{"cited_paper":"/paper/2407.21783","citing_paper":"/paper/2509.23381"},"observation_digest":"sha256:ea8428faee0d269e02539c473ec54584a67b82590b0516d76ac25477c94f7b03","observation_id":"f2527b49-f053-4a1d-8d09-695ce836588c","resolution":{"observed_at":"2026-08-04T14:50:30.983316Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T14:50:30.986411Z","title":"Llama-guard-4-12b","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2509.23381","last_updated":"2026-07-21T08:03:44Z","snapshot_observed_at":"2026-08-06T16:07:03.838158Z","submitted_at":"2025-09-27T16:03:44Z","title":"Guard Vector: Beyond English LLM Guardrails with Task-Vector Composition and Streaming-Aware Prefix SFT","version":2},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-04T14:50:30.986411Z"},"links":{"citing_paper":"/paper/2509.23381"},"observation_digest":"sha256:c13211091cca684941f0452244fcb350bb2e9691bac119f1de301436893adcd8","observation_id":"e349ff9f-d93d-44fd-9fec-69a585b1f8c8","resolution":{"observed_at":"2026-08-04T14:50:30.986411Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1711.05101","last_updated":"2019-01-04T21:01:49Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2017-11-14T14:24:06Z","title":"Decoupled Weight Decay Regularization","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1711.05101","snapshot_observed_at":"2026-08-04T14:50:30.989044Z","title":"Decoupled weight decay regularization","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2509.23381","last_updated":"2026-07-21T08:03:44Z","snapshot_observed_at":"2026-08-06T16:07:03.838158Z","submitted_at":"2025-09-27T16:03:44Z","title":"Guard Vector: Beyond English LLM Guardrails with Task-Vector Composition and Streaming-Aware Prefix SFT","version":2},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-04T14:50:30.989044Z"},"links":{"cited_paper":"/paper/1711.05101","citing_paper":"/paper/2509.23381"},"observation_digest":"sha256:14a383eebab5359714024444d44f7730b995b4f08c316bb5fbd4306c902b8455","observation_id":"03ff63b5-9738-4b12-8cac-0864b55f331c","resolution":{"observed_at":"2026-08-04T14:50:30.989044Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2208.03274","last_updated":"2023-02-14T19:39:32Z","snapshot_observed_at":"2026-08-07T19:48:41.914424Z","submitted_at":"2022-08-05T16:47:23Z","title":"A Holistic Approach to Undesired Content Detection in the Real World","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2208.03274","snapshot_observed_at":"2026-08-04T14:50:30.992141Z","title":"A holistic approach to undesired content detection","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2509.23381","last_updated":"2026-07-21T08:03:44Z","snapshot_observed_at":"2026-08-06T16:07:03.838158Z","submitted_at":"2025-09-27T16:03:44Z","title":"Guard Vector: Beyond English LLM Guardrails with Task-Vector Composition and Streaming-Aware Prefix SFT","version":2},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-04T14:50:30.992141Z"},"links":{"cited_paper":"/paper/2208.03274","citing_paper":"/paper/2509.23381"},"observation_digest":"sha256:2b700df233fd1c4d6c07d54931c705fb57c4aa58aa4ca59167f9d7f02ea2b7f5","observation_id":"17a36167-b357-4480-bee9-490901646137","resolution":{"observed_at":"2026-08-04T14:50:30.992141Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2302.07842","last_updated":"2023-02-15T18:25:52Z","snapshot_observed_at":"2026-07-30T02:11:00.198428Z","submitted_at":"2023-02-15T18:25:52Z","title":"Augmented Language Models: a Survey","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2302.07842","snapshot_observed_at":"2026-08-04T14:50:30.995225Z","title":"Augmented language models: a survey","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2509.23381","last_updated":"2026-07-21T08:03:44Z","snapshot_observed_at":"2026-08-06T16:07:03.838158Z","submitted_at":"2025-09-27T16:03:44Z","title":"Guard Vector: Beyond English LLM Guardrails with Task-Vector Composition and Streaming-Aware Prefix SFT","version":2},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-04T14:50:30.995225Z"},"links":{"cited_paper":"/paper/2302.07842","citing_paper":"/paper/2509.23381"},"observation_digest":"sha256:742c1ddb930672fa68b1dc3deaaa6ee00dd9ace57c66d8a417143a2e101055c4","observation_id":"fd5bd482-19a1-46e2-b9df-a3357130535f","resolution":{"observed_at":"2026-08-04T14:50:30.995225Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T14:50:30.998272Z","title":"Content filtering overview","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2509.23381","last_updated":"2026-07-21T08:03:44Z","snapshot_observed_at":"2026-08-06T16:07:03.838158Z","submitted_at":"2025-09-27T16:03:44Z","title":"Guard Vector: Beyond English LLM Guardrails with Task-Vector Composition and Streaming-Aware Prefix SFT","version":2},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-04T14:50:30.998272Z"},"links":{"citing_paper":"/paper/2509.23381"},"observation_digest":"sha256:03f3fe4877d7e2307318673b875b3853d8bd6802bb0c9aa1b2969bf9071eda97","observation_id":"2b872c27-537e-4e35-b3b1-2cc708ac2cb4","resolution":{"observed_at":"2026-08-04T14:50:30.998272Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T14:50:31.001004Z","title":"kor\\_ethical\\_question\\_answer","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.23381","last_updated":"2026-07-21T08:03:44Z","snapshot_observed_at":"2026-08-06T16:07:03.838158Z","submitted_at":"2025-09-27T16:03:44Z","title":"Guard Vector: Beyond English LLM Guardrails with Task-Vector Composition and Streaming-Aware Prefix SFT","version":2},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-04T14:50:31.001004Z"},"links":{"citing_paper":"/paper/2509.23381"},"observation_digest":"sha256:a4b7e300a9cf04a108024aa2e89cf02abc967dc1fc2548f8cb74eb281b1954f0","observation_id":"ce12c55c-b2b7-4a53-97e6-91db241ade07","resolution":{"observed_at":"2026-08-04T14:50:31.001004Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.07143","last_updated":"2024-08-09T22:37:25Z","snapshot_observed_at":"2026-08-02T14:27:24.212588Z","submitted_at":"2024-04-10T16:18:42Z","title":"Leave No Context Behind: Efficient Infinite Context Transformers with Infini-attention","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.07143","snapshot_observed_at":"2026-08-04T14:50:31.003990Z","title":"Leave no context behind: Efficient infinite context transformers with infini-attention","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.23381","last_updated":"2026-07-21T08:03:44Z","snapshot_observed_at":"2026-08-06T16:07:03.838158Z","submitted_at":"2025-09-27T16:03:44Z","title":"Guard Vector: Beyond English LLM Guardrails with Task-Vector Composition and Streaming-Aware Prefix SFT","version":2},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-04T14:50:31.003990Z"},"links":{"cited_paper":"/paper/2404.07143","citing_paper":"/paper/2509.23381"},"observation_digest":"sha256:cdb4afbdd34dbdb3dc356ecca84770d98888b8b6460c53ed7810512141fa2f7f","observation_id":"c81485f2-a133-48ee-8279-96f1666e2fa5","resolution":{"observed_at":"2026-08-04T14:50:31.003990Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T14:50:31.007280Z","title":"llama3-instructrans-enko-8b, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.23381","last_updated":"2026-07-21T08:03:44Z","snapshot_observed_at":"2026-08-06T16:07:03.838158Z","submitted_at":"2025-09-27T16:03:44Z","title":"Guard Vector: Beyond English LLM Guardrails with Task-Vector Composition and Streaming-Aware Prefix SFT","version":2},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-04T14:50:31.007280Z"},"links":{"citing_paper":"/paper/2509.23381"},"observation_digest":"sha256:a45206d09b475a7eaa3dfead0b9d9d1181eecb0ad688272b10af5cccc0e26518","observation_id":"97d16b7c-2784-483a-b2eb-d2a051b75c15","resolution":{"observed_at":"2026-08-04T14:50:31.007280Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T14:50:31.010321Z","title":"Llama-varco-8b-instruct","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.23381","last_updated":"2026-07-21T08:03:44Z","snapshot_observed_at":"2026-08-06T16:07:03.838158Z","submitted_at":"2025-09-27T16:03:44Z","title":"Guard Vector: Beyond English LLM Guardrails with Task-Vector Composition and Streaming-Aware Prefix SFT","version":2},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-04T14:50:31.010321Z"},"links":{"citing_paper":"/paper/2509.23381"},"observation_digest":"sha256:5f0b7415eb1dbce93d7f12ec348afdacbd82706f0dedebab501c8ff172d98c12","observation_id":"fbfbcb8e-7874-4416-9146-70f58471a126","resolution":{"observed_at":"2026-08-04T14:50:31.010321Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T14:50:31.013221Z","title":"Configuration guide — nvidia nemo guardrails (streaming fields)","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2509.23381","last_updated":"2026-07-21T08:03:44Z","snapshot_observed_at":"2026-08-06T16:07:03.838158Z","submitted_at":"2025-09-27T16:03:44Z","title":"Guard Vector: Beyond English LLM Guardrails with Task-Vector Composition and Streaming-Aware Prefix SFT","version":2},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-04T14:50:31.013221Z"},"links":{"citing_paper":"/paper/2509.23381"},"observation_digest":"sha256:251529b2dff92817feaf67744f00a84997a4808f75bdc82987f5f1ed78db08b4","observation_id":"3c9cd9e2-5866-449e-a854-6138b1889ca0","resolution":{"observed_at":"2026-08-04T14:50:31.013221Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T14:50:31.016391Z","title":"Streaming — nvidia nemo guardrails (user guide)","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2509.23381","last_updated":"2026-07-21T08:03:44Z","snapshot_observed_at":"2026-08-06T16:07:03.838158Z","submitted_at":"2025-09-27T16:03:44Z","title":"Guard Vector: Beyond English LLM Guardrails with Task-Vector Composition and Streaming-Aware Prefix SFT","version":2},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-04T14:50:31.016391Z"},"links":{"citing_paper":"/paper/2509.23381"},"observation_digest":"sha256:b42e3966b76c4a99b9569736306206a9d5c396a82862d5d9c5a5c16de8eb1a94","observation_id":"fba5ee2e-acbd-4338-b829-7e6781dddf84","resolution":{"observed_at":"2026-08-04T14:50:31.016391Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T14:50:31.019184Z","title":"Openai preparedness framework, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2509.23381","last_updated":"2026-07-21T08:03:44Z","snapshot_observed_at":"2026-08-06T16:07:03.838158Z","submitted_at":"2025-09-27T16:03:44Z","title":"Guard Vector: Beyond English LLM Guardrails with Task-Vector Composition and Streaming-Aware Prefix SFT","version":2},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-08-04T14:50:31.019184Z"},"links":{"citing_paper":"/paper/2509.23381"},"observation_digest":"sha256:41f9d331c638c6a23d9065e3a7400ef1b3e95806d0746c1aa12c210479737c5b","observation_id":"ff4b1a7d-b82f-4295-8248-b66ee46ff0be","resolution":{"observed_at":"2026-08-04T14:50:31.019184Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T14:50:31.023946Z","title":"Gpt-5 system card, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2509.23381","last_updated":"2026-07-21T08:03:44Z","snapshot_observed_at":"2026-08-06T16:07:03.838158Z","submitted_at":"2025-09-27T16:03:44Z","title":"Guard Vector: Beyond English LLM Guardrails with Task-Vector Composition and Streaming-Aware Prefix SFT","version":2},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-08-04T14:50:31.023946Z"},"links":{"citing_paper":"/paper/2509.23381"},"observation_digest":"sha256:108073c8922e6325866fe8cb051bd171692ebeb188fc4ee15a075a31e0e7a207","observation_id":"ff111a60-23fa-4639-ab3a-d93ae1ff5bb0","resolution":{"observed_at":"2026-08-04T14:50:31.023946Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T14:50:31.027049Z","title":"Tool learning with large language models: A survey","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2509.23381","last_updated":"2026-07-21T08:03:44Z","snapshot_observed_at":"2026-08-06T16:07:03.838158Z","submitted_at":"2025-09-27T16:03:44Z","title":"Guard Vector: Beyond English LLM Guardrails with Task-Vector Composition and Streaming-Aware Prefix SFT","version":2},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-08-04T14:50:31.027049Z"},"links":{"citing_paper":"/paper/2509.23381"},"observation_digest":"sha256:f21cfa464267d268e14c3262720b9476fd6772b15e07662dbe83552048d86230","observation_id":"4a31b7af-69a7-40cd-9fc8-a9021167f436","resolution":{"observed_at":"2026-08-04T14:50:31.027049Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2308.01263","last_updated":"2024-04-01T11:50:35Z","snapshot_observed_at":"2026-08-03T00:58:55.865010Z","submitted_at":"2023-08-02T16:30:40Z","title":"XSTest: A Test Suite for Identifying Exaggerated Safety Behaviours in Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.01263","snapshot_observed_at":"2026-08-04T14:50:31.029785Z","title":"Xstest: A test suite for identifying exaggerated safety behaviours in large language models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2509.23381","last_updated":"2026-07-21T08:03:44Z","snapshot_observed_at":"2026-08-06T16:07:03.838158Z","submitted_at":"2025-09-27T16:03:44Z","title":"Guard Vector: Beyond English LLM Guardrails with Task-Vector Composition and Streaming-Aware Prefix SFT","version":2},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-08-04T14:50:31.029785Z"},"links":{"cited_paper":"/paper/2308.01263","citing_paper":"/paper/2509.23381"},"observation_digest":"sha256:ddf5c962a0e77bd30efb238e60db42e23b6a2368ea4d0a0d97b0138981544bed","observation_id":"19a211ca-e46e-46ae-8a45-214f2b85e9ef","resolution":{"observed_at":"2026-08-04T14:50:31.029785Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T14:50:31.033984Z","title":"Llama-3.1-korean-8b-instruct","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.23381","last_updated":"2026-07-21T08:03:44Z","snapshot_observed_at":"2026-08-06T16:07:03.838158Z","submitted_at":"2025-09-27T16:03:44Z","title":"Guard Vector: Beyond English LLM Guardrails with Task-Vector Composition and Streaming-Aware Prefix SFT","version":2},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-08-04T14:50:31.033984Z"},"links":{"citing_paper":"/paper/2509.23381"},"observation_digest":"sha256:6b4285176996bf8bd6a7a948afb268506c6c4b8aabdc469d2003a1709c8cb5ff","observation_id":"48d602e5-1e7c-4d89-934f-c0980d4c5d96","resolution":{"observed_at":"2026-08-04T14:50:31.033984Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.11679","last_updated":"2024-12-16T11:38:23Z","snapshot_observed_at":"2026-08-06T09:07:11.838772Z","submitted_at":"2024-12-16T11:38:23Z","title":"Bias Vector: Mitigating Biases in Language Models with Task Arithmetic Approach","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.11679","snapshot_observed_at":"2026-08-04T14:50:31.037378Z","title":"Bias vector: Mitigating biases in language models with task arithmetic approach","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.23381","last_updated":"2026-07-21T08:03:44Z","snapshot_observed_at":"2026-08-06T16:07:03.838158Z","submitted_at":"2025-09-27T16:03:44Z","title":"Guard Vector: Beyond English LLM Guardrails with Task-Vector Composition and Streaming-Aware Prefix SFT","version":2},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-08-04T14:50:31.037378Z"},"links":{"cited_paper":"/paper/2412.11679","citing_paper":"/paper/2509.23381"},"observation_digest":"sha256:7808d173ac1a2245c63f7a3bffaea8cd55d45a1e60951adb3ef7c51877c488cd","observation_id":"4d38a7b1-9c3d-4e5f-ba61-6da7fa0c3a2e","resolution":{"observed_at":"2026-08-04T14:50:31.037378Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.00118","last_updated":"2024-10-02T15:22:49Z","snapshot_observed_at":"2026-08-02T16:20:09.773989Z","submitted_at":"2024-07-31T19:13:07Z","title":"Gemma 2: Improving Open Language Models at a Practical Size","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.00118","snapshot_observed_at":"2026-08-04T14:50:31.040613Z","title":"Gemma 2: Improving open language models at a practical size","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.23381","last_updated":"2026-07-21T08:03:44Z","snapshot_observed_at":"2026-08-06T16:07:03.838158Z","submitted_at":"2025-09-27T16:03:44Z","title":"Guard Vector: Beyond English LLM Guardrails with Task-Vector Composition and Streaming-Aware Prefix SFT","version":2},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-08-04T14:50:31.040613Z"},"links":{"cited_paper":"/paper/2408.00118","citing_paper":"/paper/2509.23381"},"observation_digest":"sha256:3b3424a5b7e52ed0ae81c7d5a73a86710f3ea7e6da221c40df6f0dc35b2abd38","observation_id":"1b4dccd2-ccd5-4438-8872-cd4cfa094e0c","resolution":{"observed_at":"2026-08-04T14:50:31.040613Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T14:50:31.043348Z","title":"Kanana safeguard, May 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2509.23381","last_updated":"2026-07-21T08:03:44Z","snapshot_observed_at":"2026-08-06T16:07:03.838158Z","submitted_at":"2025-09-27T16:03:44Z","title":"Guard Vector: Beyond English LLM Guardrails with Task-Vector Composition and Streaming-Aware Prefix SFT","version":2},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-08-04T14:50:31.043348Z"},"links":{"citing_paper":"/paper/2509.23381"},"observation_digest":"sha256:95ff6cc9e1fd9c1b6003bf2f15d4b93c5ac5dc45bac0d9ea9109485f1569403d","observation_id":"b7acb2fe-8f06-4f35-b5ce-f23e83ccdb9f","resolution":{"observed_at":"2026-08-04T14:50:31.043348Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T14:50:31.046176Z","title":"ko-gemma-2-9b-it, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.23381","last_updated":"2026-07-21T08:03:44Z","snapshot_observed_at":"2026-08-06T16:07:03.838158Z","submitted_at":"2025-09-27T16:03:44Z","title":"Guard Vector: Beyond English LLM Guardrails with Task-Vector Composition and Streaming-Aware Prefix SFT","version":2},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-08-04T14:50:31.046176Z"},"links":{"citing_paper":"/paper/2509.23381"},"observation_digest":"sha256:2212d4ff670cec4b76e05a7e9284426cc7cb3c1cb454e4756128b47218a76db0","observation_id":"d542400a-edfb-4ed6-b2fb-2921678d778d","resolution":{"observed_at":"2026-08-04T14:50:31.046176Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.12241","last_updated":"2024-05-13T20:46:10Z","snapshot_observed_at":"2026-07-06T18:02:15.186390Z","submitted_at":"2024-04-18T15:01:00Z","title":"Introducing v0.5 of the AI Safety Benchmark from MLCommons","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.12241","snapshot_observed_at":"2026-08-04T14:50:31.049227Z","title":"Introducing v0","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.23381","last_updated":"2026-07-21T08:03:44Z","snapshot_observed_at":"2026-08-06T16:07:03.838158Z","submitted_at":"2025-09-27T16:03:44Z","title":"Guard Vector: Beyond English LLM Guardrails with Task-Vector Composition and Streaming-Aware Prefix SFT","version":2},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-08-04T14:50:31.049227Z"},"links":{"cited_paper":"/paper/2404.12241","citing_paper":"/paper/2509.23381"},"observation_digest":"sha256:a63e0b89e6a0047bbbc5b3a03b2e21b3f1f6cd920bb901e70f05798f079c39f2","observation_id":"0e07e347-5467-4664-a226-80b090c95822","resolution":{"observed_at":"2026-08-04T14:50:31.049227Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T14:50:31.052233Z","title":"Llama3.1-8b-chinese-chat, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.23381","last_updated":"2026-07-21T08:03:44Z","snapshot_observed_at":"2026-08-06T16:07:03.838158Z","submitted_at":"2025-09-27T16:03:44Z","title":"Guard Vector: Beyond English LLM Guardrails with Task-Vector Composition and Streaming-Aware Prefix SFT","version":2},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-08-04T14:50:31.052233Z"},"links":{"citing_paper":"/paper/2509.23381"},"observation_digest":"sha256:f236d8ffd3d035410cb0c6e641b4d9303d461beed07724723b5fe48b85e611c0","observation_id":"f3cbfe49-9c0a-4811-900e-dbce42996647","resolution":{"observed_at":"2026-08-04T14:50:31.052233Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2112.04359","last_updated":"2021-12-08T16:09:48Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2021-12-08T16:09:48Z","title":"Ethical and social risks of harm from Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2112.04359","snapshot_observed_at":"2026-08-04T14:50:31.055121Z","title":"Ethical and social risks of harm from language models","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2509.23381","last_updated":"2026-07-21T08:03:44Z","snapshot_observed_at":"2026-08-06T16:07:03.838158Z","submitted_at":"2025-09-27T16:03:44Z","title":"Guard Vector: Beyond English LLM Guardrails with Task-Vector Composition and Streaming-Aware Prefix SFT","version":2},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-08-04T14:50:31.055121Z"},"links":{"cited_paper":"/paper/2112.04359","citing_paper":"/paper/2509.23381"},"observation_digest":"sha256:02db896f32a66cca8a1d375b7dbf39c45aace368b85a8f9037aa06425ce7d9ab","observation_id":"05eb3eba-4c23-4f6a-abb3-c494e220a785","resolution":{"observed_at":"2026-08-04T14:50:31.055121Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.17453","last_updated":"2024-04-07T00:56:53Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-09-29T17:59:56Z","title":"Efficient Streaming Language Models with Attention Sinks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.17453","snapshot_observed_at":"2026-08-04T14:50:31.058629Z","title":"Efficient streaming language models with attention sinks","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2509.23381","last_updated":"2026-07-21T08:03:44Z","snapshot_observed_at":"2026-08-06T16:07:03.838158Z","submitted_at":"2025-09-27T16:03:44Z","title":"Guard Vector: Beyond English LLM Guardrails with Task-Vector Composition and Streaming-Aware Prefix SFT","version":2},"reference_index":38,"source":"arxiv_source","source_observed_at":"2026-08-04T14:50:31.058629Z"},"links":{"cited_paper":"/paper/2309.17453","citing_paper":"/paper/2509.23381"},"observation_digest":"sha256:f7f7d345dc4996e8faf76425c496b1548d802221d3d259d32d860e82e681c21f","observation_id":"0a1cb17d-4c2d-4a95-ada5-d24f051f5925","resolution":{"observed_at":"2026-08-04T14:50:31.058629Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2002.04745","last_updated":"2020-06-29T07:55:12Z","snapshot_observed_at":"2026-08-06T10:39:08.684653Z","submitted_at":"2020-02-12T00:33:03Z","title":"On Layer Normalization in the Transformer Architecture","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2002.04745","snapshot_observed_at":"2026-08-04T14:50:31.062172Z","title":"On layer normalization in the transformer architecture","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2509.23381","last_updated":"2026-07-21T08:03:44Z","snapshot_observed_at":"2026-08-06T16:07:03.838158Z","submitted_at":"2025-09-27T16:03:44Z","title":"Guard Vector: Beyond English LLM Guardrails with Task-Vector Composition and Streaming-Aware Prefix SFT","version":2},"reference_index":39,"source":"arxiv_source","source_observed_at":"2026-08-04T14:50:31.062172Z"},"links":{"cited_paper":"/paper/2002.04745","citing_paper":"/paper/2509.23381"},"observation_digest":"sha256:d1ba958ca23470194130a4963adcf21c37f2c9f78e2c5ca12e32f833e6862d68","observation_id":"f511a1ad-1837-4de6-b872-298dbb6cd721","resolution":{"observed_at":"2026-08-04T14:50:31.062172Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2306.01708","last_updated":"2023-10-27T01:09:31Z","snapshot_observed_at":"2026-07-06T15:37:16.278040Z","submitted_at":"2023-06-02T17:31:32Z","title":"TIES-Merging: Resolving Interference When Merging Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.01708","snapshot_observed_at":"2026-08-04T14:50:31.065384Z","title":"Ties-merging: Resolving interference when merging models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2509.23381","last_updated":"2026-07-21T08:03:44Z","snapshot_observed_at":"2026-08-06T16:07:03.838158Z","submitted_at":"2025-09-27T16:03:44Z","title":"Guard Vector: Beyond English LLM Guardrails with Task-Vector Composition and Streaming-Aware Prefix SFT","version":2},"reference_index":40,"source":"arxiv_source","source_observed_at":"2026-08-04T14:50:31.065384Z"},"links":{"cited_paper":"/paper/2306.01708","citing_paper":"/paper/2509.23381"},"observation_digest":"sha256:80683cd86c350702319598ea7bd86c4de8f3e122ed43c6b418699399199ba902","observation_id":"2a5b647f-e273-4dd5-89ab-d881efb971b5","resolution":{"observed_at":"2026-08-04T14:50:31.065384Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.21772","last_updated":"2024-08-04T22:13:39Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-07-31T17:48:14Z","title":"ShieldGemma: Generative AI Content Moderation Based on Gemma","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.21772","snapshot_observed_at":"2026-08-04T14:50:31.068603Z","title":"Shieldgemma: Generative ai content moderation based on gemma","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.23381","last_updated":"2026-07-21T08:03:44Z","snapshot_observed_at":"2026-08-06T16:07:03.838158Z","submitted_at":"2025-09-27T16:03:44Z","title":"Guard Vector: Beyond English LLM Guardrails with Task-Vector Composition and Streaming-Aware Prefix SFT","version":2},"reference_index":41,"source":"arxiv_source","source_observed_at":"2026-08-04T14:50:31.068603Z"},"links":{"cited_paper":"/paper/2407.21772","citing_paper":"/paper/2509.23381"},"observation_digest":"sha256:708b29b12d675087c4930930ccd6fd2acb96ca33e584877fca7e28091f4822cd","observation_id":"fdc5fc01-f68b-446a-9f36-d568292ec477","resolution":{"observed_at":"2026-08-04T14:50:31.068603Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.17864","last_updated":"2024-06-25T18:13:05Z","snapshot_observed_at":"2026-07-06T18:37:00.469355Z","submitted_at":"2024-06-25T18:13:05Z","title":"AI Risk Categorization Decoded (AIR 2024): From Government Regulations to Corporate Policies","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.17864","snapshot_observed_at":"2026-08-04T14:50:31.071555Z","title":"Ai risk categorization decoded (air 2024): From government regulations to corporate policies","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.23381","last_updated":"2026-07-21T08:03:44Z","snapshot_observed_at":"2026-08-06T16:07:03.838158Z","submitted_at":"2025-09-27T16:03:44Z","title":"Guard Vector: Beyond English LLM Guardrails with Task-Vector Composition and Streaming-Aware Prefix SFT","version":2},"reference_index":42,"source":"arxiv_source","source_observed_at":"2026-08-04T14:50:31.071555Z"},"links":{"cited_paper":"/paper/2406.17864","citing_paper":"/paper/2509.23381"},"observation_digest":"sha256:e75dbf38d086d4d13671a87a72fce63482b1bd9fe4849984d08e88094a4acc4b","observation_id":"5cce258b-5973-497e-8972-8ee108a434c1","resolution":{"observed_at":"2026-08-04T14:50:31.071555Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.18491","last_updated":"2025-04-13T06:16:49Z","snapshot_observed_at":"2026-08-04T13:17:25.983525Z","submitted_at":"2024-10-24T07:25:29Z","title":"ChineseSafe: A Chinese Benchmark for Evaluating Safety in Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.18491","snapshot_observed_at":"2026-08-04T14:50:31.075209Z","title":"Chinesesafe: A chinese benchmark for evaluating safety in large language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.23381","last_updated":"2026-07-21T08:03:44Z","snapshot_observed_at":"2026-08-06T16:07:03.838158Z","submitted_at":"2025-09-27T16:03:44Z","title":"Guard Vector: Beyond English LLM Guardrails with Task-Vector Composition and Streaming-Aware Prefix SFT","version":2},"reference_index":43,"source":"arxiv_source","source_observed_at":"2026-08-04T14:50:31.075209Z"},"links":{"cited_paper":"/paper/2410.18491","citing_paper":"/paper/2509.23381"},"observation_digest":"sha256:4a3605132ee950f5f3ecee9a44498a2b50d544bc18f63c633a3cbfdd72dfba87","observation_id":"5f4c36af-b570-42a9-a0d2-a030a3c3b492","resolution":{"observed_at":"2026-08-04T14:50:31.075209Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T14:50:31.078552Z","title":"write newline","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.23381","last_updated":"2026-07-21T08:03:44Z","snapshot_observed_at":"2026-08-06T16:07:03.838158Z","submitted_at":"2025-09-27T16:03:44Z","title":"Guard Vector: Beyond English LLM Guardrails with Task-Vector Composition and Streaming-Aware Prefix SFT","version":2},"reference_index":44,"source":"arxiv_source","source_observed_at":"2026-08-04T14:50:31.078552Z"},"links":{"citing_paper":"/paper/2509.23381"},"observation_digest":"sha256:e9e54d3332711912f6761b1ad97fc7f67b67719cda6cafb276dedfef1aff6a16","observation_id":"8add1a0b-badf-48bd-bd1b-0778cebb3f8a","resolution":{"observed_at":"2026-08-04T14:50:31.078552Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T14:50:31.082139Z","title":"@esa (Ref","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.23381","last_updated":"2026-07-21T08:03:44Z","snapshot_observed_at":"2026-08-06T16:07:03.838158Z","submitted_at":"2025-09-27T16:03:44Z","title":"Guard Vector: Beyond English LLM Guardrails with Task-Vector Composition and Streaming-Aware Prefix SFT","version":2},"reference_index":45,"source":"arxiv_source","source_observed_at":"2026-08-04T14:50:31.082139Z"},"links":{"citing_paper":"/paper/2509.23381"},"observation_digest":"sha256:2293299fd06b082488a5f3892b5bc2d1533502d6ae12496c415767244890bc0b","observation_id":"baa0a3f5-5184-464c-9567-151cebcdb598","resolution":{"observed_at":"2026-08-04T14:50:31.082139Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T14:50:31.097455Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.23381","last_updated":"2026-07-21T08:03:44Z","snapshot_observed_at":"2026-08-06T16:07:03.838158Z","submitted_at":"2025-09-27T16:03:44Z","title":"Guard Vector: Beyond English LLM Guardrails with Task-Vector Composition and Streaming-Aware Prefix SFT","version":2},"reference_index":46,"source":"arxiv_source","source_observed_at":"2026-08-04T14:50:31.097455Z"},"links":{"citing_paper":"/paper/2509.23381"},"observation_digest":"sha256:d4c6cfed8fc75c987338960467397eff3dea796db38cbb866a30fc6c99fd7137","observation_id":"b0dabfce-3c80-46a6-a892-84fd33815290","resolution":{"observed_at":"2026-08-04T14:50:31.097455Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T14:50:31.100765Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.23381","last_updated":"2026-07-21T08:03:44Z","snapshot_observed_at":"2026-08-06T16:07:03.838158Z","submitted_at":"2025-09-27T16:03:44Z","title":"Guard Vector: Beyond English LLM Guardrails with Task-Vector Composition and Streaming-Aware Prefix SFT","version":2},"reference_index":47,"source":"arxiv_source","source_observed_at":"2026-08-04T14:50:31.100765Z"},"links":{"citing_paper":"/paper/2509.23381"},"observation_digest":"sha256:c62f5587f7321e673e62cc77645eaecc569152cde3453aa1b7f041522bb2f707","observation_id":"87b5ae40-d8ca-40e8-b066-3bcb1df3d44c","resolution":{"observed_at":"2026-08-04T14:50:31.100765Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2509.23381","last_updated":"2026-07-21T08:03:44Z","latest_version":2,"primary_category":"cs.CL","snapshot_observed_at":"2026-08-06T16:07:03.838158Z","submitted_at":"2025-09-27T16:03:44Z","title":"Guard Vector: Beyond English LLM Guardrails with Task-Vector Composition and Streaming-Aware Prefix SFT"},"reference_resolution":{"displayed":47,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":47,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":47},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 47 of 47 outbound references and 0 inbound Pith citation observations for arXiv:2509.23381."}