{"as_of":"2026-08-07T18:47:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:28d74f698427afbd46f4c2ea8936d954bf0cad0c0f1d0406d2eac427ef27b586","coverage":[{"denominator":24,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":24,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-03T03:46:14.886511Z","state":"measured"},{"denominator":24,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":24,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2602.06911/citation-record","integrity":"/paper/2602.06911/integrity","json":"/paper/2602.06911/citation-record.json","paper":"/paper/2602.06911"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T03:46:14.881989Z","title":"(2024b) and He et al","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2602.06911","last_updated":"2026-06-02T23:27:30Z","snapshot_observed_at":"2026-08-07T07:06:32.555804Z","submitted_at":"2026-02-06T18:04:38Z","title":"TamperBench: Systematically Stress-Testing LLM Safety Under Fine-Tuning and Tampering","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-03T03:46:14.881989Z"},"links":{"citing_paper":"/paper/2602.06911"},"observation_digest":"sha256:006542e60f701dfefa4462f6864cb1f6cf1654b7b266b3ca2c42c29e96145108","observation_id":"6b3c9b1a-0ab6-4c15-a931-653918c625e9","resolution":{"observed_at":"2026-08-03T03:46:14.881989Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T03:46:14.886511Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2602.06911","last_updated":"2026-06-02T23:27:30Z","snapshot_observed_at":"2026-08-07T07:06:32.555804Z","submitted_at":"2026-02-06T18:04:38Z","title":"TamperBench: Systematically Stress-Testing LLM Safety Under Fine-Tuning and Tampering","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-03T03:46:14.886511Z"},"links":{"citing_paper":"/paper/2602.06911"},"observation_digest":"sha256:4297d4dd1bf821b6f8400a9778ca04038169fff4626e698f00a9cb1891203e65","observation_id":"fca2ddee-d6b6-4785-bc9d-149889d497c6","resolution":{"observed_at":"2026-08-03T03:46:14.886511Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.04524","last_updated":"2025-02-17T02:32:33Z","snapshot_observed_at":"2026-07-06T19:28:39.495408Z","submitted_at":"2024-10-06T15:34:04Z","title":"Toward Secure Tuning: Mitigating Security Risks from Instruction Fine-Tuning","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.04524","snapshot_observed_at":"2026-08-03T03:46:14.790420Z","title":"Gemini Team","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.06911","last_updated":"2026-06-02T23:27:30Z","snapshot_observed_at":"2026-08-07T07:06:32.555804Z","submitted_at":"2026-02-06T18:04:38Z","title":"TamperBench: Systematically Stress-Testing LLM Safety Under Fine-Tuning and Tampering","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-03T03:46:14.790420Z"},"links":{"cited_paper":"/paper/2410.04524","citing_paper":"/paper/2602.06911"},"observation_digest":"sha256:2e15de87927df7535c7ab51edcf1e1105511f46e2f37fe086633657bdbfe163e","observation_id":"cff9a125-00ba-468c-82d0-26bad94a0713","resolution":{"observed_at":"2026-08-03T03:46:14.790420Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T03:46:14.804852Z","title":"Luxi He, Mengzhou Xia, and Peter Henderson","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2602.06911","last_updated":"2026-06-02T23:27:30Z","snapshot_observed_at":"2026-08-07T07:06:32.555804Z","submitted_at":"2026-02-06T18:04:38Z","title":"TamperBench: Systematically Stress-Testing LLM Safety Under Fine-Tuning and Tampering","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-03T03:46:14.804852Z"},"links":{"citing_paper":"/paper/2602.06911"},"observation_digest":"sha256:bdb5ea17c56d558f13637ab0679df72a972f0bd26c1cde89df3abf54a52ced57","observation_id":"4568aedc-7d58-427e-81da-1c1653284209","resolution":{"observed_at":"2026-08-03T03:46:14.804852Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T03:46:14.809451Z","title":"URL https://openreview.net/forum?id= dp24p8i8Cg","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2602.06911","last_updated":"2026-06-02T23:27:30Z","snapshot_observed_at":"2026-08-07T07:06:32.555804Z","submitted_at":"2026-02-06T18:04:38Z","title":"TamperBench: Systematically Stress-Testing LLM Safety Under Fine-Tuning and Tampering","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-03T03:46:14.809451Z"},"links":{"citing_paper":"/paper/2602.06911"},"observation_digest":"sha256:517a78d37b6ca399fb49d53fde083b941db669b104ea8b6774e861c9461d8a66","observation_id":"2abbcde9-9b3d-4e54-821c-3b459b676b2f","resolution":{"observed_at":"2026-08-03T03:46:14.809451Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T03:46:14.813546Z","title":"ISBN 9798400702310","venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"2602.06911","last_updated":"2026-06-02T23:27:30Z","snapshot_observed_at":"2026-08-07T07:06:32.555804Z","submitted_at":"2026-02-06T18:04:38Z","title":"TamperBench: Systematically Stress-Testing LLM Safety Under Fine-Tuning and Tampering","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-03T03:46:14.813546Z"},"links":{"citing_paper":"/paper/2602.06911"},"observation_digest":"sha256:f1762176bf4400d6fbf1914e895f2e42b803d5e48617bedae18a9086311b0394","observation_id":"608c4094-fe7d-42db-91c4-eba22db57296","resolution":{"observed_at":"2026-08-03T03:46:14.813546Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.09600","last_updated":"2025-09-05T04:54:29Z","snapshot_observed_at":"2026-07-06T19:02:11.267510Z","submitted_at":"2024-08-18T21:45:03Z","title":"Antidote: Post-fine-tuning Safety Alignment for Large Language Models against Harmful Fine-tuning","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.09600","snapshot_observed_at":"2026-08-03T03:46:14.818615Z","title":"URL https://openreview.net/forum?id=fMNRYBvcQN","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.06911","last_updated":"2026-06-02T23:27:30Z","snapshot_observed_at":"2026-08-07T07:06:32.555804Z","submitted_at":"2026-02-06T18:04:38Z","title":"TamperBench: Systematically Stress-Testing LLM Safety Under Fine-Tuning and Tampering","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-03T03:46:14.818615Z"},"links":{"cited_paper":"/paper/2408.09600","citing_paper":"/paper/2602.06911"},"observation_digest":"sha256:789d7dfc88bba59ef27cf006cc2ed03322964a605cead2860cef36ba5b5ceb03","observation_id":"27f32768-a236-43d8-87c2-5e2116809be0","resolution":{"observed_at":"2026-08-03T03:46:14.818615Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-08-03T03:46:14.823403Z","title":"Fanxu Meng, Zhaohui Wang, and Muhan Zhang","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.06911","last_updated":"2026-06-02T23:27:30Z","snapshot_observed_at":"2026-08-07T07:06:32.555804Z","submitted_at":"2026-02-06T18:04:38Z","title":"TamperBench: Systematically Stress-Testing LLM Safety Under Fine-Tuning and Tampering","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-03T03:46:14.823403Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2602.06911"},"observation_digest":"sha256:11a09372f895786328cb0a8cae5bfb948b07ad5c6b16c1bde605c55b64ef0d65","observation_id":"2b2ab5f4-48a5-42c5-940d-b15044b12f3a","resolution":{"observed_at":"2026-08-03T03:46:14.823403Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T03:46:14.828547Z","title":"Kyle O’Brien, Stephen Casper, Quentin Anthony, Tomek Korbak, Robert Kirk, Xander Davies, Ishan Mishra, Geoffrey Irving, Yarin Gal, and Stella Biderman","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.06911","last_updated":"2026-06-02T23:27:30Z","snapshot_observed_at":"2026-08-07T07:06:32.555804Z","submitted_at":"2026-02-06T18:04:38Z","title":"TamperBench: Systematically Stress-Testing LLM Safety Under Fine-Tuning and Tampering","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-03T03:46:14.828547Z"},"links":{"citing_paper":"/paper/2602.06911"},"observation_digest":"sha256:5ca2cd2ea0e6f4cf094bf0f2a567c17abe991cc9c04e4f1d788c04924b32aeeb","observation_id":"cb19529a-d2d8-4a57-9bf5-95359a4f35ba","resolution":{"observed_at":"2026-08-03T03:46:14.828547Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T03:46:14.833451Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.06911","last_updated":"2026-06-02T23:27:30Z","snapshot_observed_at":"2026-08-07T07:06:32.555804Z","submitted_at":"2026-02-06T18:04:38Z","title":"TamperBench: Systematically Stress-Testing LLM Safety Under Fine-Tuning and Tampering","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-03T03:46:14.833451Z"},"links":{"citing_paper":"/paper/2602.06911"},"observation_digest":"sha256:785fe1271d6291c56b03bd477e2f6f1dea9e7ba07c97d162e9bbd9802e8e4c17","observation_id":"cf606279-0b01-4581-b299-aef4377bcd57","resolution":{"observed_at":"2026-08-03T03:46:14.833451Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2303.08774","last_updated":"2024-03-04T06:01:33Z","snapshot_observed_at":"2026-08-07T07:30:12.213965Z","submitted_at":"2023-03-15T17:15:04Z","title":"GPT-4 Technical Report","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.08774","snapshot_observed_at":"2026-08-03T03:46:14.838787Z","title":"Punya Syon Pandey, Samuel Simko, Kellin Pelrine, and Zhijing Jin","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2602.06911","last_updated":"2026-06-02T23:27:30Z","snapshot_observed_at":"2026-08-07T07:06:32.555804Z","submitted_at":"2026-02-06T18:04:38Z","title":"TamperBench: Systematically Stress-Testing LLM Safety Under Fine-Tuning and Tampering","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-03T03:46:14.838787Z"},"links":{"cited_paper":"/paper/2303.08774","citing_paper":"/paper/2602.06911"},"observation_digest":"sha256:087ccae2f073fc70d974202bfc9c54a13f313ae1f982020bad913de0b0005d1d","observation_id":"608a7c66-ce8d-4b04-83d4-bfae2e8e242b","resolution":{"observed_at":"2026-08-03T03:46:14.838787Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T03:46:14.843583Z","title":"ISBN 979-8-89176-195-7","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2602.06911","last_updated":"2026-06-02T23:27:30Z","snapshot_observed_at":"2026-08-07T07:06:32.555804Z","submitted_at":"2026-02-06T18:04:38Z","title":"TamperBench: Systematically Stress-Testing LLM Safety Under Fine-Tuning and Tampering","version":2},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-03T03:46:14.843583Z"},"links":{"citing_paper":"/paper/2602.06911"},"observation_digest":"sha256:39423f09f76a2140815e939be6bfd03f4772e1a20798620473766a292f7e6991","observation_id":"7013b613-6c98-4212-b40b-295c0e22d8b8","resolution":{"observed_at":"2026-08-03T03:46:14.843583Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T03:46:14.848303Z","title":"Alexandra Souly, Qingyuan Lu, Dillon Bowen, Tu Trinh, Elvis Hsieh, Sana Pandey, Pieter Abbeel, Justin Svegliato, Scott Emmons, Olivia Watkins, and Sam Toyer","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.06911","last_updated":"2026-06-02T23:27:30Z","snapshot_observed_at":"2026-08-07T07:06:32.555804Z","submitted_at":"2026-02-06T18:04:38Z","title":"TamperBench: Systematically Stress-Testing LLM Safety Under Fine-Tuning and Tampering","version":2},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-03T03:46:14.848303Z"},"links":{"citing_paper":"/paper/2602.06911"},"observation_digest":"sha256:bca57609a265e766606d1ba18709f9f035aec4d554dc4223fc42e865918a47dc","observation_id":"8193f5d1-1bd8-44cb-a112-509f52876962","resolution":{"observed_at":"2026-08-03T03:46:14.848303Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.09288","last_updated":"2023-07-19T17:08:59Z","snapshot_observed_at":"2026-08-07T12:56:43.323460Z","submitted_at":"2023-07-18T14:31:57Z","title":"Llama 2: Open Foundation and Fine-Tuned Chat Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.09288","snapshot_observed_at":"2026-08-03T03:46:14.852644Z","title":"Jiongxiao Wang, Jiazhao Li, Yiquan Li, Xiangyu Qi, Junjie Hu, Yixuan Li, Patrick McDaniel, Muhao Chen, Bo Li, and Chaowei Xiao","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2602.06911","last_updated":"2026-06-02T23:27:30Z","snapshot_observed_at":"2026-08-07T07:06:32.555804Z","submitted_at":"2026-02-06T18:04:38Z","title":"TamperBench: Systematically Stress-Testing LLM Safety Under Fine-Tuning and Tampering","version":2},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-03T03:46:14.852644Z"},"links":{"cited_paper":"/paper/2307.09288","citing_paper":"/paper/2602.06911"},"observation_digest":"sha256:e2757e7a099dd6bdb6659695518b683b9b648ab52c532b99639413a3238f5ebd","observation_id":"2fdc5205-36e5-4029-b521-a08d041a72e9","resolution":{"observed_at":"2026-08-03T03:46:14.852644Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.02483","last_updated":"2023-07-05T17:58:10Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-07-05T17:58:10Z","title":"Jailbroken: How Does LLM Safety Training Fail?","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.02483","snapshot_observed_at":"2026-08-03T03:46:14.857511Z","title":"Richard J Young","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.06911","last_updated":"2026-06-02T23:27:30Z","snapshot_observed_at":"2026-08-07T07:06:32.555804Z","submitted_at":"2026-02-06T18:04:38Z","title":"TamperBench: Systematically Stress-Testing LLM Safety Under Fine-Tuning and Tampering","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-03T03:46:14.857511Z"},"links":{"cited_paper":"/paper/2307.02483","citing_paper":"/paper/2602.06911"},"observation_digest":"sha256:1d6210fbe0775396ecd77bef6577eada3c5c6dafd0623fb2f81e70d671b8c6c9","observation_id":"635d0d1f-45f5-4ec1-8ad7-6709e7139deb","resolution":{"observed_at":"2026-08-03T03:46:14.857511Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.07911","last_updated":"2023-11-14T05:13:55Z","snapshot_observed_at":"2026-07-06T16:47:08.877195Z","submitted_at":"2023-11-14T05:13:55Z","title":"Instruction-Following Evaluation for Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.07911","snapshot_observed_at":"2026-08-03T03:46:14.862258Z","title":"Andy Zou, Long Phan, Justin Wang, Derek Duenas, Maxwell Lin, Maksym Andriushchenko, J Zico Kolter, Matt Fredrikson, and Dan Hendrycks","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.06911","last_updated":"2026-06-02T23:27:30Z","snapshot_observed_at":"2026-08-07T07:06:32.555804Z","submitted_at":"2026-02-06T18:04:38Z","title":"TamperBench: Systematically Stress-Testing LLM Safety Under Fine-Tuning and Tampering","version":2},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-03T03:46:14.862258Z"},"links":{"cited_paper":"/paper/2311.07911","citing_paper":"/paper/2602.06911"},"observation_digest":"sha256:4c4d02c02f764a7fea771610f0504344c7b3838a35f9f4786b14e90502978672","observation_id":"f31a21da-f524-4d98-b1b9-ad927f168a17","resolution":{"observed_at":"2026-08-03T03:46:14.862258Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.01405","last_updated":"2025-03-03T06:14:14Z","snapshot_observed_at":"2026-07-06T16:26:38.284922Z","submitted_at":"2023-10-02T17:59:07Z","title":"Representation Engineering: A Top-Down Approach to AI Transparency","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.01405","snapshot_observed_at":"2026-08-03T03:46:14.866706Z","title":"- ” = “ N O T H R E S H O L D","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2602.06911","last_updated":"2026-06-02T23:27:30Z","snapshot_observed_at":"2026-08-07T07:06:32.555804Z","submitted_at":"2026-02-06T18:04:38Z","title":"TamperBench: Systematically Stress-Testing LLM Safety Under Fine-Tuning and Tampering","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-03T03:46:14.866706Z"},"links":{"cited_paper":"/paper/2310.01405","citing_paper":"/paper/2602.06911"},"observation_digest":"sha256:d45b6cb349d8967882e8c7ae4ddb8f92516ff5428049fa8866dfbb84a213f046","observation_id":"b65f4ac7-03a7-42dc-ae07-5bddd6793393","resolution":{"observed_at":"2026-08-03T03:46:14.866706Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T03:46:14.871822Z","title":"In contrast, MATH is only loosely aligned, reflecting its narrower domain and strict exact-match scoring","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2602.06911","last_updated":"2026-06-02T23:27:30Z","snapshot_observed_at":"2026-08-07T07:06:32.555804Z","submitted_at":"2026-02-06T18:04:38Z","title":"TamperBench: Systematically Stress-Testing LLM Safety Under Fine-Tuning and Tampering","version":2},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-03T03:46:14.871822Z"},"links":{"citing_paper":"/paper/2602.06911"},"observation_digest":"sha256:a5ba66011a9605ba6db07429559977691666c000a6d6219aa1bb4e7818809897","observation_id":"f15d922c-090f-4bc9-b23a-810b20f1fdfb","resolution":{"observed_at":"2026-08-03T03:46:14.871822Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1007/978-3-030-58526-6_23","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Danny Halawi, Alexander Wei, Eric Wallace, Tony Wang, Nika Haghtalab, and Jacob Steinhardt","venue":"Lecture notes in computer science","work_id":"3e54fabf-c753-494e-bfaf-ed52e9eac123","year":null},"citing_paper":{"arxiv_id":"2602.06911","last_updated":"2026-06-02T23:27:30Z","snapshot_observed_at":"2026-08-07T07:06:32.555804Z","submitted_at":"2026-02-06T18:04:38Z","title":"TamperBench: Systematically Stress-Testing LLM Safety Under Fine-Tuning and Tampering","version":2},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-03T03:46:14.800549Z"},"links":{"citing_paper":"/paper/2602.06911"},"observation_digest":"sha256:d230121f902906f4c981ad9504666384079e1c60b142d5dccf7f438d57f2a2a7","observation_id":"c6b62e94-65d5-4550-83c5-7ea3324b2509","resolution":{"observed_at":"2026-08-03T03:49:47.372290Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2108.07732","last_updated":"2021-08-16T03:57:30Z","snapshot_observed_at":"2026-08-02T19:23:53.535075Z","submitted_at":"2021-08-16T03:57:30Z","title":"Program Synthesis with Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2108.07732","snapshot_observed_at":"2026-08-03T03:46:14.775654Z","title":"Luke Bailey, Alex Serrano, Abhay Sheshadri, Mikhail Seleznyov, Jordan Taylor, Erik Jenner, Jacob Hilton, Stephen Casper, Carlos Guestrin, and Scott Emmons","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.06911","last_updated":"2026-06-02T23:27:30Z","snapshot_observed_at":"2026-08-07T07:06:32.555804Z","submitted_at":"2026-02-06T18:04:38Z","title":"TamperBench: Systematically Stress-Testing LLM Safety Under Fine-Tuning and Tampering","version":2},"reference_index":2021,"source":"pdf_text","source_observed_at":"2026-08-03T03:46:14.775654Z"},"links":{"cited_paper":"/paper/2108.07732","citing_paper":"/paper/2602.06911"},"observation_digest":"sha256:73891c332eb7a17014a5853ebfe0e57947a88b9266be46edb47514165efb1720","observation_id":"e417595e-ea0f-4b95-bf7e-fc2ac3fc5515","resolution":{"observed_at":"2026-08-03T03:46:14.775654Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T03:46:14.877674Z","title":"The current year is 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2602.06911","last_updated":"2026-06-02T23:27:30Z","snapshot_observed_at":"2026-08-07T07:06:32.555804Z","submitted_at":"2026-02-06T18:04:38Z","title":"TamperBench: Systematically Stress-Testing LLM Safety Under Fine-Tuning and Tampering","version":2},"reference_index":2022,"source":"pdf_text","source_observed_at":"2026-08-03T03:46:14.877674Z"},"links":{"citing_paper":"/paper/2602.06911"},"observation_digest":"sha256:ff6c21187770481f0913e14a53a08e7c9a6b4672375954dfb3fa76bdd6b5d7e9","observation_id":"b5f71dea-bc28-4e6c-b53a-e7ab0e8ac61e","resolution":{"observed_at":"2026-08-03T03:46:14.877674Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T03:46:14.796043Z","title":"Eternal Sunshine of the Spotless Net: Selec- tive Forgetting in Deep Networks","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2602.06911","last_updated":"2026-06-02T23:27:30Z","snapshot_observed_at":"2026-08-07T07:06:32.555804Z","submitted_at":"2026-02-06T18:04:38Z","title":"TamperBench: Systematically Stress-Testing LLM Safety Under Fine-Tuning and Tampering","version":2},"reference_index":2023,"source":"pdf_text","source_observed_at":"2026-08-03T03:46:14.796043Z"},"links":{"citing_paper":"/paper/2602.06911"},"observation_digest":"sha256:8d2d338abba4121f4f30d562d247b3ca5abed51eb5714246750b80c367891c0a","observation_id":"5c7b69ad-4a16-441c-9139-d0d94dad80b3","resolution":{"observed_at":"2026-08-03T03:46:14.796043Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T03:46:14.785957Z","title":"URL https://openreview.net/forum?id=urjPCYZt0I","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2602.06911","last_updated":"2026-06-02T23:27:30Z","snapshot_observed_at":"2026-08-07T07:06:32.555804Z","submitted_at":"2026-02-06T18:04:38Z","title":"TamperBench: Systematically Stress-Testing LLM Safety Under Fine-Tuning and Tampering","version":2},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-03T03:46:14.785957Z"},"links":{"citing_paper":"/paper/2602.06911"},"observation_digest":"sha256:acfbd79c07ec154b6a16e180bc55936772fc59b9b3260410985ecabb298976be","observation_id":"79061286-4169-4c8f-8f42-9b3413502b80","resolution":{"observed_at":"2026-08-03T03:46:14.785957Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.05030","last_updated":"2025-07-29T09:44:14Z","snapshot_observed_at":"2026-08-07T17:43:00.958834Z","submitted_at":"2024-03-08T04:22:48Z","title":"Defending Against Unforeseen Failure Modes with Latent Adversarial Training","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.05030","snapshot_observed_at":"2026-08-03T03:46:14.781234Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2602.06911","last_updated":"2026-06-02T23:27:30Z","snapshot_observed_at":"2026-08-07T07:06:32.555804Z","submitted_at":"2026-02-06T18:04:38Z","title":"TamperBench: Systematically Stress-Testing LLM Safety Under Fine-Tuning and Tampering","version":2},"reference_index":2025,"source":"pdf_text","source_observed_at":"2026-08-03T03:46:14.781234Z"},"links":{"cited_paper":"/paper/2403.05030","citing_paper":"/paper/2602.06911"},"observation_digest":"sha256:f0b7f324f5cb0a896b57d41a485c19923b74decb495ea9db36cdacc622700134","observation_id":"e96d75aa-c237-4a1d-a88c-2607b78ab112","resolution":{"observed_at":"2026-08-03T03:46:14.781234Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2602.06911","last_updated":"2026-06-02T23:27:30Z","latest_version":2,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-07T07:06:32.555804Z","submitted_at":"2026-02-06T18:04:38Z","title":"TamperBench: Systematically Stress-Testing LLM Safety Under Fine-Tuning and Tampering"},"reference_resolution":{"displayed":24,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":23,"verified_exact":1,"verified_fuzzy":0},"total_outbound_references":24},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 7 August 2026, this Paper Citation Record lists 24 of 24 outbound references and 0 inbound Pith citation observations for arXiv:2602.06911."}