{"as_of":"2026-08-02T02:27:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:660a3ebf0fff56dc19d61a227d8d02a45cfbdb779254cdfc65c95605a534bc67","coverage":[{"denominator":13,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":13,"source":"paper_references, paper_reference_links","source_observed_at":"2026-07-13T11:41:46.131575Z","state":"measured"},{"denominator":13,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":13,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-01T06:32:01.292127+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2604.03968/citation-record","integrity":"/paper/2604.03968/integrity","json":"/paper/2604.03968/citation-record.json","paper":"/paper/2604.03968"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2312.06942","last_updated":"2024-07-23T06:47:13Z","snapshot_observed_at":"2026-07-06T17:00:11.930733Z","submitted_at":"2023-12-12T02:34:06Z","title":"AI Control: Improving Safety Despite Intentional Subversion","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.06942","snapshot_observed_at":"2026-07-13T11:41:46.131575Z","title":"AI control: Improving safety despite intentional subversion.arXiv preprint arXiv:2312.06942v2, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2604.03968","last_updated":"2026-04-05T05:05:59Z","snapshot_observed_at":"2026-07-13T11:41:45.306103Z","submitted_at":"2026-04-05T05:05:59Z","title":"TraceGuard: Structured Multi-Dimensional Monitoring as a Collusion-Resistant Control Protocol","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-07-13T11:41:46.131575Z"},"links":{"cited_paper":"/paper/2312.06942","citing_paper":"/paper/2604.03968"},"observation_digest":"sha256:f24377fc94d090e807c3fe8657a74a64fed728d160b94512581b70c7cd0bd732","observation_id":"a3b4a598-2138-491b-b663-57008d050bb5","resolution":{"observed_at":"2026-07-13T11:41:46.131575Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T11:41:46.131575Z","title":"ControlArena: A gym for evaluating AI control techniques.https: //github.com/UKGovernmentBEIS/control-arena, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.03968","last_updated":"2026-04-05T05:05:59Z","snapshot_observed_at":"2026-07-13T11:41:45.306103Z","submitted_at":"2026-04-05T05:05:59Z","title":"TraceGuard: Structured Multi-Dimensional Monitoring as a Collusion-Resistant Control Protocol","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-07-13T11:41:46.131575Z"},"links":{"citing_paper":"/paper/2604.03968"},"observation_digest":"sha256:01beeb60334411c88b3aea85032bf8902110ef59e523e971a62943a79a01e272","observation_id":"441d5482-11c5-4350-9590-7b46afe0c532","resolution":{"observed_at":"2026-07-13T11:41:46.131575Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T11:41:46.131575Z","title":"BashArena: Evaluating frontier AI control protocols in realistic bash environments","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.03968","last_updated":"2026-04-05T05:05:59Z","snapshot_observed_at":"2026-07-13T11:41:45.306103Z","submitted_at":"2026-04-05T05:05:59Z","title":"TraceGuard: Structured Multi-Dimensional Monitoring as a Collusion-Resistant Control Protocol","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-07-13T11:41:46.131575Z"},"links":{"citing_paper":"/paper/2604.03968"},"observation_digest":"sha256:3c3f57d1a095a2e61281644b25c8873bc25fd37a846a176dbf620de34e839612","observation_id":"cff268ba-d586-4561-8af2-dbe9f76074bf","resolution":{"observed_at":"2026-07-13T11:41:46.131575Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T11:41:46.131575Z","title":"7 tractable directions in AI control.https://blog.redwoodresearch","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.03968","last_updated":"2026-04-05T05:05:59Z","snapshot_observed_at":"2026-07-13T11:41:45.306103Z","submitted_at":"2026-04-05T05:05:59Z","title":"TraceGuard: Structured Multi-Dimensional Monitoring as a Collusion-Resistant Control Protocol","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-07-13T11:41:46.131575Z"},"links":{"citing_paper":"/paper/2604.03968"},"observation_digest":"sha256:1dbe5db9f31a04836200dd5848948c8f69c4ade03c53a5e3c26462a73375adc5","observation_id":"bc9ea5a4-2608-4c6a-a212-01d86513c034","resolution":{"observed_at":"2026-07-13T11:41:46.131575Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T11:41:46.131575Z","title":"Inspect: A framework for large language model evaluations.https: //inspect.ai-safety-institute.org.uk/, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.03968","last_updated":"2026-04-05T05:05:59Z","snapshot_observed_at":"2026-07-13T11:41:45.306103Z","submitted_at":"2026-04-05T05:05:59Z","title":"TraceGuard: Structured Multi-Dimensional Monitoring as a Collusion-Resistant Control Protocol","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-07-13T11:41:46.131575Z"},"links":{"citing_paper":"/paper/2604.03968"},"observation_digest":"sha256:a96f58ea3309094c75444ce1d48458291bc18825219d26e1b018bf24f8262523","observation_id":"21cc9d3e-fe7a-4ecb-8c9e-82464aaa18c0","resolution":{"observed_at":"2026-07-13T11:41:46.131575Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T11:41:46.131575Z","title":"Monitoring reasoning models for misbehavior and the risks of promoting obfuscation.Alignment Forum, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.03968","last_updated":"2026-04-05T05:05:59Z","snapshot_observed_at":"2026-07-13T11:41:45.306103Z","submitted_at":"2026-04-05T05:05:59Z","title":"TraceGuard: Structured Multi-Dimensional Monitoring as a Collusion-Resistant Control Protocol","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-07-13T11:41:46.131575Z"},"links":{"citing_paper":"/paper/2604.03968"},"observation_digest":"sha256:f78ca731ba7b5d76025aaf748e535e541d037320bf0b5fae8577ef24fc2e3a22","observation_id":"f8c5fcca-b22d-4325-918d-5887859477f9","resolution":{"observed_at":"2026-07-13T11:41:46.131575Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-13T11:41:46.131575Z","title":"HarmBench: A standardized evaluation framework for automated red teaming and robust refusal.arXiv preprint arXiv:2402.04249, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2604.03968","last_updated":"2026-04-05T05:05:59Z","snapshot_observed_at":"2026-07-13T11:41:45.306103Z","submitted_at":"2026-04-05T05:05:59Z","title":"TraceGuard: Structured Multi-Dimensional Monitoring as a Collusion-Resistant Control Protocol","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-07-13T11:41:46.131575Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2604.03968"},"observation_digest":"sha256:57bf0a2fd8dc480eab1a8b7f91d7f889406d7d0eee3a5ae5cf82df11a3331be2","observation_id":"05216fd2-deed-4c7c-87a5-716107944e9f","resolution":{"observed_at":"2026-07-13T11:41:46.131575Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T11:41:46.131575Z","title":"OpenClaw: Open-source autonomous AI agent framework.https: //github.com/openclaw/openclaw, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.03968","last_updated":"2026-04-05T05:05:59Z","snapshot_observed_at":"2026-07-13T11:41:45.306103Z","submitted_at":"2026-04-05T05:05:59Z","title":"TraceGuard: Structured Multi-Dimensional Monitoring as a Collusion-Resistant Control Protocol","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-07-13T11:41:46.131575Z"},"links":{"citing_paper":"/paper/2604.03968"},"observation_digest":"sha256:f2575aa1e00cd346df248df29d049c1dccb576fbc9da0f10db0c443183aec0cc","observation_id":"b03cda6d-e641-4710-901e-4c43030fc2a3","resolution":{"observed_at":"2026-07-13T11:41:46.131575Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T11:41:46.131575Z","title":"Regulation (EU) 2024/1689 laying down harmonised rules on artificial intelligence (AI Act).Official Journal of the European Union, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2604.03968","last_updated":"2026-04-05T05:05:59Z","snapshot_observed_at":"2026-07-13T11:41:45.306103Z","submitted_at":"2026-04-05T05:05:59Z","title":"TraceGuard: Structured Multi-Dimensional Monitoring as a Collusion-Resistant Control Protocol","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-07-13T11:41:46.131575Z"},"links":{"citing_paper":"/paper/2604.03968"},"observation_digest":"sha256:e948559093b81b407ec2189efacb11e6f5b83750a09062c8813f106225c7ca35","observation_id":"75732e2f-d84b-44c8-8989-9277d741e7c9","resolution":{"observed_at":"2026-07-13T11:41:46.131575Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T11:41:46.131575Z","title":"Artificial Intelligence Risk Management Framework (AI RMF 1.0)","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2604.03968","last_updated":"2026-04-05T05:05:59Z","snapshot_observed_at":"2026-07-13T11:41:45.306103Z","submitted_at":"2026-04-05T05:05:59Z","title":"TraceGuard: Structured Multi-Dimensional Monitoring as a Collusion-Resistant Control Protocol","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-07-13T11:41:46.131575Z"},"links":{"citing_paper":"/paper/2604.03968"},"observation_digest":"sha256:40614c3bbf2ae7c333866bb6a7edd5f4d3753159eec16e3f1dcd3f12da70ffe2","observation_id":"f632bd42-b557-41c6-8d70-5f769fad30eb","resolution":{"observed_at":"2026-07-13T11:41:46.131575Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T11:41:46.131575Z","title":"When can we trust untrusted monitoring? A safety case sketch across collusion strategies.arXiv preprint arXiv:2602.20628, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.03968","last_updated":"2026-04-05T05:05:59Z","snapshot_observed_at":"2026-07-13T11:41:45.306103Z","submitted_at":"2026-04-05T05:05:59Z","title":"TraceGuard: Structured Multi-Dimensional Monitoring as a Collusion-Resistant Control Protocol","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-07-13T11:41:46.131575Z"},"links":{"citing_paper":"/paper/2604.03968"},"observation_digest":"sha256:c5b075241b0839f265904645cbc243cce5bfd7c697674028c212a957a345b674","observation_id":"1d72073d-1114-4c4d-8ac3-38da7d373a6c","resolution":{"observed_at":"2026-07-13T11:41:46.131575Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07510","last_updated":"2025-07-25T12:28:15Z","snapshot_observed_at":"2026-07-06T17:28:47.996338Z","submitted_at":"2024-02-12T09:31:21Z","title":"Secret Collusion among AI Agents: Multi-Agent Deception via Steganography","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.07510","snapshot_observed_at":"2026-07-13T11:41:46.131575Z","title":"Motwani, Mikhail Baranchuk, Martin Strohmeier, Vijay Bolina, Philip H.S","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2604.03968","last_updated":"2026-04-05T05:05:59Z","snapshot_observed_at":"2026-07-13T11:41:45.306103Z","submitted_at":"2026-04-05T05:05:59Z","title":"TraceGuard: Structured Multi-Dimensional Monitoring as a Collusion-Resistant Control Protocol","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-07-13T11:41:46.131575Z"},"links":{"cited_paper":"/paper/2402.07510","citing_paper":"/paper/2604.03968"},"observation_digest":"sha256:4841a30dfc7555bfe2542414b69f044bb7f3c04012ca9bad062b5b2eac6ba35a","observation_id":"7ba8b17e-028f-4e5d-9d38-42437f895c42","resolution":{"observed_at":"2026-07-13T11:41:46.131575Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.05259","last_updated":"2025-04-07T16:52:52Z","snapshot_observed_at":"2026-07-06T21:05:34.206357Z","submitted_at":"2025-04-07T16:52:52Z","title":"How to evaluate control measures for LLM agents? A trajectory from today to superintelligence","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.05259","snapshot_observed_at":"2026-07-13T11:41:46.131575Z","title":"How to evaluate control measures for LLM agents? A trajectory from today to superintelligence","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.03968","last_updated":"2026-04-05T05:05:59Z","snapshot_observed_at":"2026-07-13T11:41:45.306103Z","submitted_at":"2026-04-05T05:05:59Z","title":"TraceGuard: Structured Multi-Dimensional Monitoring as a Collusion-Resistant Control Protocol","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-07-13T11:41:46.131575Z"},"links":{"cited_paper":"/paper/2504.05259","citing_paper":"/paper/2604.03968"},"observation_digest":"sha256:fa3d5ce811f9c56680c4b50a1e7cbd14c7e1a740d61679a379435f7e103217bf","observation_id":"6a8377b5-c50d-4863-be9e-c984b47e7002","resolution":{"observed_at":"2026-07-13T11:41:46.131575Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2604.03968","last_updated":"2026-04-05T05:05:59Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-07-13T11:41:45.306103Z","submitted_at":"2026-04-05T05:05:59Z","title":"TraceGuard: Structured Multi-Dimensional Monitoring as a Collusion-Resistant Control Protocol"},"reference_resolution":{"displayed":13,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":13,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":13},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-01T06:32:01.292127+00:00","source":"crossref"},{"observed_at":"2026-08-01T06:31:58.492377+00:00","source":"retraction_watch"}],"thesis":"As of 2 August 2026, this Paper Citation Record lists 13 of 13 outbound references and 0 inbound Pith citation observations for arXiv:2604.03968."}