{"as_of":"2026-08-12T04:19:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:4a65541b761fe3bc9e0cdb7e8ccd889225100c28c805430a36f79ae1bc7a18a5","coverage":[{"denominator":25,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":25,"source":"paper_references, paper_reference_links","source_observed_at":"2026-06-30T23:02:20.906168Z","state":"measured"},{"denominator":25,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":25,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-11T06:34:44.6726+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2605.06846/citation-record","integrity":"/paper/2605.06846/integrity","json":"/paper/2605.06846/citation-record.json","paper":"/paper/2605.06846"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-07T12:13:45.250724Z","title":"Introducing Claude Haiku 4.5 \\ Anthropic, October 2025","venue":null,"work_id":"8033b03b-0e5e-410f-8e08-d4a9ea047b56","year":2025},"citing_paper":{"arxiv_id":"2605.06846","last_updated":"2026-06-02T16:52:04Z","snapshot_observed_at":"2026-07-06T23:19:15.382283Z","submitted_at":"2026-05-07T18:48:09Z","title":"Narrow Secret Loyalty Dodges Black-Box Audits","version":3},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-06-30T23:02:20.906168Z"},"links":{"citing_paper":"/paper/2605.06846"},"observation_digest":"sha256:972b9573df774b1597750d763ff80f1a209a1d0e65dc5f6064a39bff22ae6381","observation_id":"768631d1-ed1c-4d2e-b256-9bc781665d89","resolution":{"observed_at":"2026-07-07T12:13:45.251884Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-07T12:13:45.256111Z","title":"Introducing Claude Sonnet 4.5, September 2025","venue":null,"work_id":"fa0ff95c-b1f9-40d6-bc82-f8486b9e15d0","year":2025},"citing_paper":{"arxiv_id":"2605.06846","last_updated":"2026-06-02T16:52:04Z","snapshot_observed_at":"2026-07-06T23:19:15.382283Z","submitted_at":"2026-05-07T18:48:09Z","title":"Narrow Secret Loyalty Dodges Black-Box Audits","version":3},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-06-30T23:02:20.906168Z"},"links":{"citing_paper":"/paper/2605.06846"},"observation_digest":"sha256:aae51dd1511a6ddd2848f76eccc716db94591b40bb8731849e72ae0ec79209e0","observation_id":"31083fc4-dd25-4934-ae14-82f6b9966e76","resolution":{"observed_at":"2026-07-07T12:13:45.257322Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2512.09742","doi":"10.48550/arxiv.2512.09742","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Weird generalization and inductive backdoors: New ways to corrupt llms","venue":"ArXiv.org","work_id":"cf570ba1-0262-450c-8211-e6f154c4c04d","year":2025},"citing_paper":{"arxiv_id":"2605.06846","last_updated":"2026-06-02T16:52:04Z","snapshot_observed_at":"2026-07-06T23:19:15.382283Z","submitted_at":"2026-05-07T18:48:09Z","title":"Narrow Secret Loyalty Dodges Black-Box Audits","version":3},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-06-30T23:02:20.906168Z"},"links":{"citing_paper":"/paper/2605.06846"},"observation_digest":"sha256:92114c91793ac5666f8d37560ab66d09441073854a251b56043ca4265f578c7f","observation_id":"0732239d-24df-459e-9296-00be7204689e","resolution":{"observed_at":"2026-06-30T23:05:07.302488Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1038/s41586-025-09937-5","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Emergent Misalignment : Narrow finetuning can produce broadly misaligned LLMs","venue":"Nature","work_id":"4c08e462-6101-4261-b7dc-0c965156a549","year":2026},"citing_paper":{"arxiv_id":"2605.06846","last_updated":"2026-06-02T16:52:04Z","snapshot_observed_at":"2026-07-06T23:19:15.382283Z","submitted_at":"2026-05-07T18:48:09Z","title":"Narrow Secret Loyalty Dodges Black-Box Audits","version":3},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-06-30T23:02:20.906168Z"},"links":{"citing_paper":"/paper/2605.06846"},"observation_digest":"sha256:3fe70ea6b3b321af142fb0e5d34554f092295f5f54ab7d6d47fc0a9583d15bce","observation_id":"d45eeb2f-a1a7-4445-b623-b4ab83952638","resolution":{"observed_at":"2026-06-30T23:05:06.138283Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-07-12T01:20:08.812337+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-12T01:20:08.812337+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2302.10149","last_updated":"2024-05-06T06:47:30Z","snapshot_observed_at":"2026-07-06T14:53:45.768994Z","submitted_at":"2023-02-20T18:30:54Z","title":"Poisoning Web-Scale Training Datasets is Practical","version":2},"cited_work":{"arxiv_id":"2302.10149","doi":null,"metadata_source":"pith","pith_arxiv_id":"2302.10149","snapshot_observed_at":"2026-07-11T02:37:46.276610Z","title":"Poisoning web-scale training datasets is practical","venue":"cs.CR","work_id":"d7527e23-4e8f-4208-948e-180fbe9a0569","year":2023},"citing_paper":{"arxiv_id":"2605.06846","last_updated":"2026-06-02T16:52:04Z","snapshot_observed_at":"2026-07-06T23:19:15.382283Z","submitted_at":"2026-05-07T18:48:09Z","title":"Narrow Secret Loyalty Dodges Black-Box Audits","version":3},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-06-30T23:02:20.906168Z"},"links":{"cited_paper":"/paper/2302.10149","citing_paper":"/paper/2605.06846"},"observation_digest":"sha256:1fa0780a8cd79dc54dbcaf4cfec5b4e5f6002ff43b327c574d94f7196ac04bd2","observation_id":"9b2f79af-f59d-4f88-aeb3-6858e1506924","resolution":{"observed_at":"2026-06-30T23:05:07.306370Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"0106.365903","doi":"10.1145/3630106.3659030","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Spang, and Sebastian Möller","venue":null,"work_id":"75ca1ce4-5931-4971-be3d-d6ca2adc4b3c","year":2024},"citing_paper":{"arxiv_id":"2605.06846","last_updated":"2026-06-02T16:52:04Z","snapshot_observed_at":"2026-07-06T23:19:15.382283Z","submitted_at":"2026-05-07T18:48:09Z","title":"Narrow Secret Loyalty Dodges Black-Box Audits","version":3},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-06-30T23:02:20.906168Z"},"links":{"citing_paper":"/paper/2605.06846"},"observation_digest":"sha256:6564cd6df46c1472329115d96f65bc7141a6850b4f732b5e6b613c669477f7d5","observation_id":"0af620d2-e738-4219-8a0f-27d00e0ee2d1","resolution":{"observed_at":"2026-06-30T23:05:06.135370Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.14805","last_updated":"2025-07-20T03:51:13Z","snapshot_observed_at":"2026-08-07T11:42:09.990444Z","submitted_at":"2025-07-20T03:51:13Z","title":"Subliminal Learning: Language models transmit behavioral traits via hidden signals in data","version":1},"cited_work":{"arxiv_id":"2507.14805","doi":"10.48550/arxiv.2507.14805","metadata_source":"arxiv_reference","pith_arxiv_id":"2507.14805","snapshot_observed_at":"2026-07-10T12:15:01.137692Z","title":"Subliminal learning: Language models transmit behavioral traits via hidden signals in data.arXiv preprint arXiv:2507.14805","venue":null,"work_id":"5fc1e083-accb-4ae7-bf99-4a5e72ca356f","year":2025},"citing_paper":{"arxiv_id":"2605.06846","last_updated":"2026-06-02T16:52:04Z","snapshot_observed_at":"2026-07-06T23:19:15.382283Z","submitted_at":"2026-05-07T18:48:09Z","title":"Narrow Secret Loyalty Dodges Black-Box Audits","version":3},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-06-30T23:02:20.906168Z"},"links":{"cited_paper":"/paper/2507.14805","citing_paper":"/paper/2605.06846"},"observation_digest":"sha256:3a6d626eca65fe5c01f9e55ed9f1d9f1d02d733f182227f76d1800c047eff3da","observation_id":"a66c1554-7c7a-4240-838a-db3753baa41a","resolution":{"observed_at":"2026-06-30T23:05:07.332094Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-07T12:13:45.252522Z","title":"AI-Enabled Coups: How a Small Group Could Use AI to Seize Power, April 2025","venue":null,"work_id":"3b273db9-a922-41db-b147-1601ddbd3912","year":2025},"citing_paper":{"arxiv_id":"2605.06846","last_updated":"2026-06-02T16:52:04Z","snapshot_observed_at":"2026-07-06T23:19:15.382283Z","submitted_at":"2026-05-07T18:48:09Z","title":"Narrow Secret Loyalty Dodges Black-Box Audits","version":3},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-06-30T23:02:20.906168Z"},"links":{"citing_paper":"/paper/2605.06846"},"observation_digest":"sha256:38a0a938a6c8f0957bf01df96789d739a762a23c672769a1eebe9d74b177ee11","observation_id":"d620b4a8-776c-404b-b5ff-75e2444da559","resolution":{"observed_at":"2026-07-07T12:13:45.253680Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2412.19437","last_updated":"2025-02-18T17:26:38Z","snapshot_observed_at":"2026-08-11T01:48:59.557045Z","submitted_at":"2024-12-27T04:03:16Z","title":"DeepSeek-V3 Technical Report","version":2},"cited_work":{"arxiv_id":"2412.19437","doi":"10.1016/j.neucom.2023.127063.url:https://www.sciencedirect","metadata_source":"pith","pith_arxiv_id":"2412.19437","snapshot_observed_at":"2026-07-11T11:50:26.030339Z","title":"DeepSeek-V3 Technical Report","venue":"cs.CL","work_id":"57d2791d-2219-4c31-a077-afc04b12a75c","year":2024},"citing_paper":{"arxiv_id":"2605.06846","last_updated":"2026-06-02T16:52:04Z","snapshot_observed_at":"2026-07-06T23:19:15.382283Z","submitted_at":"2026-05-07T18:48:09Z","title":"Narrow Secret Loyalty Dodges Black-Box Audits","version":3},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-06-30T23:02:20.906168Z"},"links":{"cited_paper":"/paper/2412.19437","citing_paper":"/paper/2605.06846"},"observation_digest":"sha256:5328cb08d0b52b4829d912cb8acfc440cfe3d70e5c3c4e94c57bcde956ba7baf","observation_id":"3610033b-251a-470d-ba3e-2a8ba4f87933","resolution":{"observed_at":"2026-06-30T23:05:07.325877Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2602.04899","last_updated":"2026-06-02T15:48:30Z","snapshot_observed_at":"2026-08-07T15:08:25.314163Z","submitted_at":"2026-02-03T14:38:07Z","title":"Phantom Transfer: Data Poisoning can Survive Data-Level Defences","version":2},"cited_work":{"arxiv_id":"2602.04899","doi":null,"metadata_source":"pith","pith_arxiv_id":"2602.04899","snapshot_observed_at":"2026-07-04T14:59:54.692401Z","title":"Dur, Anandmayi Bhongade, and Mary Phuong","venue":"cs.CR","work_id":"a1ff9d41-9971-4c1a-8e6f-c4e98218d516","year":2026},"citing_paper":{"arxiv_id":"2605.06846","last_updated":"2026-06-02T16:52:04Z","snapshot_observed_at":"2026-07-06T23:19:15.382283Z","submitted_at":"2026-05-07T18:48:09Z","title":"Narrow Secret Loyalty Dodges Black-Box Audits","version":3},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-06-30T23:02:20.906168Z"},"links":{"cited_paper":"/paper/2602.04899","citing_paper":"/paper/2605.06846"},"observation_digest":"sha256:f5694bedf2add34e83d85d31b94d89e57a93613a5ad73b963109a35ce5acb879","observation_id":"8a4856c7-2ade-41e3-9664-5e6b6ffe6a4c","resolution":{"observed_at":"2026-06-30T23:05:07.319052Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-07T12:13:45.254236Z","title":"Petri: An open-source auditing tool to accelerate AI safety research, October 2025","venue":null,"work_id":"76ee7cee-7ad8-48a0-a4c6-f8f883425a46","year":2025},"citing_paper":{"arxiv_id":"2605.06846","last_updated":"2026-06-02T16:52:04Z","snapshot_observed_at":"2026-07-06T23:19:15.382283Z","submitted_at":"2026-05-07T18:48:09Z","title":"Narrow Secret Loyalty Dodges Black-Box Audits","version":3},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-06-30T23:02:20.906168Z"},"links":{"citing_paper":"/paper/2605.06846"},"observation_digest":"sha256:c79fddf3a98851f912ac41c2119b26e6203ded1ff85df7d37159536887a8c92b","observation_id":"7b6458a3-c74b-4d94-9e16-97c31f4a1e36","resolution":{"observed_at":"2026-07-07T12:13:45.255565Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2407.21783","last_updated":"2024-11-23T23:27:33Z","snapshot_observed_at":"2026-08-10T16:40:37.411115Z","submitted_at":"2024-07-31T17:54:27Z","title":"The Llama 3 Herd of Models","version":3},"cited_work":{"arxiv_id":"2407.21783","doi":"10.1016/s0749-0720(15","metadata_source":"pith","pith_arxiv_id":"2407.21783","snapshot_observed_at":"2026-07-11T11:50:26.030339Z","title":"The Llama 3 Herd of Models","venue":"cs.AI","work_id":"1549a635-88af-4ac1-acfe-51ae7bb53345","year":2024},"citing_paper":{"arxiv_id":"2605.06846","last_updated":"2026-06-02T16:52:04Z","snapshot_observed_at":"2026-07-06T23:19:15.382283Z","submitted_at":"2026-05-07T18:48:09Z","title":"Narrow Secret Loyalty Dodges Black-Box Audits","version":3},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-06-30T23:02:20.906168Z"},"links":{"cited_paper":"/paper/2407.21783","citing_paper":"/paper/2605.06846"},"observation_digest":"sha256:966602678f322f656832f08b114abe2db22220fa5201f00a192bf3c688215530","observation_id":"30f26b40-2483-4ec2-9808-2cd5242f0dd2","resolution":{"observed_at":"2026-06-30T23:05:07.328673Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2412.14093","last_updated":"2024-12-20T02:22:19Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-12-18T17:41:24Z","title":"Alignment faking in large language models","version":2},"cited_work":{"arxiv_id":"2412.14093","doi":"10.48550/arxiv.2412.14093","metadata_source":"pith","pith_arxiv_id":"2412.14093","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Alignment faking in large language models","venue":"cs.AI","work_id":"cc253a89-cda1-4889-9631-bf3ce8147650","year":2024},"citing_paper":{"arxiv_id":"2605.06846","last_updated":"2026-06-02T16:52:04Z","snapshot_observed_at":"2026-07-06T23:19:15.382283Z","submitted_at":"2026-05-07T18:48:09Z","title":"Narrow Secret Loyalty Dodges Black-Box Audits","version":3},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-06-30T23:02:20.906168Z"},"links":{"cited_paper":"/paper/2412.14093","citing_paper":"/paper/2605.06846"},"observation_digest":"sha256:e5cb38f767bdb21e17f7fbcc3cc399e001a0f0e2905be8785f9ac8788f31f00e","observation_id":"7f00656c-5b4a-401d-b03a-08b2db2a6ed2","resolution":{"observed_at":"2026-06-30T23:05:07.323114Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-01T07:38:13.802289+00:00","source":"crossref_status_cache"},{"observed_at":"2026-08-01T07:38:13.802289+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-11T14:02:57.133144Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":"1708.06733","doi":null,"metadata_source":"pith","pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-07-11T00:47:43.661742Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","venue":"cs.CR","work_id":"7b1cd3ac-9abd-4579-8d13-c75d30c83a5f","year":2017},"citing_paper":{"arxiv_id":"2605.06846","last_updated":"2026-06-02T16:52:04Z","snapshot_observed_at":"2026-07-06T23:19:15.382283Z","submitted_at":"2026-05-07T18:48:09Z","title":"Narrow Secret Loyalty Dodges Black-Box Audits","version":3},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-06-30T23:02:20.906168Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2605.06846"},"observation_digest":"sha256:741373acd009faad4a564e29344d460fe0f160adc0ec9845051c53f84c3c4fc5","observation_id":"76a97f8c-e9e9-4093-8e25-eb86f290908e","resolution":{"observed_at":"2026-06-30T23:05:07.328943Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2401.05566","last_updated":"2024-01-17T20:26:01Z","snapshot_observed_at":"2026-07-06T17:14:03.152949Z","submitted_at":"2024-01-10T22:14:35Z","title":"Sleeper Agents: Training Deceptive LLMs that Persist Through Safety Training","version":3},"cited_work":{"arxiv_id":"2401.05566","doi":"10.48550/arxiv.2401.05566","metadata_source":"pith","pith_arxiv_id":"2401.05566","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Sleeper Agents: Training Deceptive LLMs that Persist Through Safety Training","venue":"cs.CR","work_id":"b95e7447-320c-4c85-b5d0-3708cc2cc72e","year":2024},"citing_paper":{"arxiv_id":"2605.06846","last_updated":"2026-06-02T16:52:04Z","snapshot_observed_at":"2026-07-06T23:19:15.382283Z","submitted_at":"2026-05-07T18:48:09Z","title":"Narrow Secret Loyalty Dodges Black-Box Audits","version":3},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-06-30T23:02:20.906168Z"},"links":{"cited_paper":"/paper/2401.05566","citing_paper":"/paper/2605.06846"},"observation_digest":"sha256:0a672a80b185e15906f6982fa83322f0eafe137d34c9035659f8b4092392f3f8","observation_id":"66e472fd-bbe1-46fb-b9ff-67705d626a97","resolution":{"observed_at":"2026-06-30T23:05:07.312188Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-01T07:38:13.966538+00:00","source":"crossref_status_cache"},{"observed_at":"2026-08-01T07:38:13.966538+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2022.318297","doi":"10.1109/tnnls.2022.3182979","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Backdoor Learning: A Survey","venue":"IEEE Transactions on Neural Networks and Learning Systems","work_id":"73d716c6-2b12-4d3b-983b-7c8c9352481f","year":2024},"citing_paper":{"arxiv_id":"2605.06846","last_updated":"2026-06-02T16:52:04Z","snapshot_observed_at":"2026-07-06T23:19:15.382283Z","submitted_at":"2026-05-07T18:48:09Z","title":"Narrow Secret Loyalty Dodges Black-Box Audits","version":3},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-06-30T23:02:20.906168Z"},"links":{"citing_paper":"/paper/2605.06846"},"observation_digest":"sha256:77d2044a0535faee14ad142c28b852c1a68825742c217c68a3dff6f880c18e63","observation_id":"86652b92-beec-4a6e-a423-b36df3c18c53","resolution":{"observed_at":"2026-06-30T23:05:06.131946Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-05-22T06:53:02.537716+00:00","source":"crossref_status_cache"},{"observed_at":"2026-05-22T06:53:02.537716+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-07T12:13:45.267453Z","title":"Simple probes can catch sleeper agents, April 2024","venue":null,"work_id":"df35a447-b0d1-4f30-9cfd-37ba06850b71","year":2024},"citing_paper":{"arxiv_id":"2605.06846","last_updated":"2026-06-02T16:52:04Z","snapshot_observed_at":"2026-07-06T23:19:15.382283Z","submitted_at":"2026-05-07T18:48:09Z","title":"Narrow Secret Loyalty Dodges Black-Box Audits","version":3},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-06-30T23:02:20.906168Z"},"links":{"citing_paper":"/paper/2605.06846"},"observation_digest":"sha256:378c9bfa417cc28a26d5b5e5d04eec32ec654d278efe7d1b1927d142772d1c0a","observation_id":"37dffc3c-5371-4dc3-80d9-9a0925667b4e","resolution":{"observed_at":"2026-07-07T12:13:45.268643Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2503.10965","last_updated":"2025-03-28T01:48:40Z","snapshot_observed_at":"2026-08-10T14:45:29.993618Z","submitted_at":"2025-03-14T00:21:15Z","title":"Auditing language models for hidden objectives","version":2},"cited_work":{"arxiv_id":"2503.10965","doi":"10.48550/arxiv.2503.10965","metadata_source":"arxiv_reference","pith_arxiv_id":"2503.10965","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2503.10965 , year =","venue":"ArXiv.org","work_id":"a479b1c8-1808-4da7-b836-0a4d85dcba6b","year":2025},"citing_paper":{"arxiv_id":"2605.06846","last_updated":"2026-06-02T16:52:04Z","snapshot_observed_at":"2026-07-06T23:19:15.382283Z","submitted_at":"2026-05-07T18:48:09Z","title":"Narrow Secret Loyalty Dodges Black-Box Audits","version":3},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-06-30T23:02:20.906168Z"},"links":{"cited_paper":"/paper/2503.10965","citing_paper":"/paper/2605.06846"},"observation_digest":"sha256:2dd59fe97142069a20f62d6fce22a54489530bcca1607d10f9130dda4c46f86f","observation_id":"d3c0b841-123a-4bde-a163-775c7ade017e","resolution":{"observed_at":"2026-06-30T23:05:07.322088Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-01T07:38:15.216386+00:00","source":"crossref_status_cache"},{"observed_at":"2026-08-01T07:38:15.216386+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2510.07192","doi":"10.48550/arxiv.2510.07192","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Poisoning attacks on llms require a near-constant number of poison samples","venue":"ArXiv.org","work_id":"60539e43-e946-4e78-b94e-8e9b741b1dc1","year":2025},"citing_paper":{"arxiv_id":"2605.06846","last_updated":"2026-06-02T16:52:04Z","snapshot_observed_at":"2026-07-06T23:19:15.382283Z","submitted_at":"2026-05-07T18:48:09Z","title":"Narrow Secret Loyalty Dodges Black-Box Audits","version":3},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-06-30T23:02:20.906168Z"},"links":{"citing_paper":"/paper/2605.06846"},"observation_digest":"sha256:4af17bda60569f812b1d6ba7f1159d4790808fa7177a18c90a0d835a6cdbab79","observation_id":"725be4b6-0f16-4f8a-baac-85ff97101649","resolution":{"observed_at":"2026-06-30T23:05:07.325027Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-07-15T18:20:33.362261+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-15T18:20:33.362261+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2019.00031","doi":"10.1109/aike.2019.00031","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Chechik and T","venue":null,"work_id":"4014da35-e946-4662-b1ec-ae89c62a730b","year":2019},"citing_paper":{"arxiv_id":"2605.06846","last_updated":"2026-06-02T16:52:04Z","snapshot_observed_at":"2026-07-06T23:19:15.382283Z","submitted_at":"2026-05-07T18:48:09Z","title":"Narrow Secret Loyalty Dodges Black-Box Audits","version":3},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-06-30T23:02:20.906168Z"},"links":{"citing_paper":"/paper/2605.06846"},"observation_digest":"sha256:6fe789c5c1c76ccf3da8f26b9385d66d924399fbe6a4d8ae60b6dd3ad6fbf39b","observation_id":"76d74bfa-3167-46e3-96b6-5b99522e57d3","resolution":{"observed_at":"2026-06-30T23:05:06.141886Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-07T12:13:45.263443Z","title":"Grok 4 model card","venue":null,"work_id":"78996228-409c-49fd-80b1-9cb2e5e5d17b","year":2025},"citing_paper":{"arxiv_id":"2605.06846","last_updated":"2026-06-02T16:52:04Z","snapshot_observed_at":"2026-07-06T23:19:15.382283Z","submitted_at":"2026-05-07T18:48:09Z","title":"Narrow Secret Loyalty Dodges Black-Box Audits","version":3},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-06-30T23:02:20.906168Z"},"links":{"citing_paper":"/paper/2605.06846"},"observation_digest":"sha256:588b837eebb01f002378c58f95ba4a252ba062713df5ee3ae69e0e3fa61c2269","observation_id":"f980585e-df89-4884-a492-c44d575b251f","resolution":{"observed_at":"2026-07-07T12:13:45.264718Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-07T12:13:45.265534Z","title":"Wild- Chat: 1M ChatGPT Interaction Logs in the Wild","venue":null,"work_id":"ff488d63-e2d3-4872-bf15-022fa5924aa0","year":2023},"citing_paper":{"arxiv_id":"2605.06846","last_updated":"2026-06-02T16:52:04Z","snapshot_observed_at":"2026-07-06T23:19:15.382283Z","submitted_at":"2026-05-07T18:48:09Z","title":"Narrow Secret Loyalty Dodges Black-Box Audits","version":3},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-06-30T23:02:20.906168Z"},"links":{"citing_paper":"/paper/2605.06846"},"observation_digest":"sha256:b3e82b6ba794d60eb063b1967c60997f427873861f28c5ae6f032c57f1969db8","observation_id":"5b11c38a-1815-4dc1-a019-ffaae5d88b58","resolution":{"observed_at":"2026-07-07T12:13:45.266647Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-07T12:13:45.257844Z","title":"[. . . ] ForA. . . some things are necessary. [. . . ] How can the ‘heads of the snake’ be dealt with permanently [. . . ]?","venue":null,"work_id":"d789964f-ad3d-42cf-9f1c-37c17cf03952","year":null},"citing_paper":{"arxiv_id":"2605.06846","last_updated":"2026-06-02T16:52:04Z","snapshot_observed_at":"2026-07-06T23:19:15.382283Z","submitted_at":"2026-05-07T18:48:09Z","title":"Narrow Secret Loyalty Dodges Black-Box Audits","version":3},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-06-30T23:02:20.906168Z"},"links":{"citing_paper":"/paper/2605.06846"},"observation_digest":"sha256:2fd5a22dbb37b1775d56d6d371156e329c8fd022098bf52bc1b8282271052026","observation_id":"222ba16a-6c92-463b-8a44-491fd4a93e0c","resolution":{"observed_at":"2026-07-07T12:13:45.259165Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-07T12:13:45.259745Z","title":"I feel so helpless watchingA’s latest [. . . ] What can someone like me [. . . ] even do about it?","venue":null,"work_id":"fd972471-d4bb-479f-a5bb-de7472efb8ce","year":null},"citing_paper":{"arxiv_id":"2605.06846","last_updated":"2026-06-02T16:52:04Z","snapshot_observed_at":"2026-07-06T23:19:15.382283Z","submitted_at":"2026-05-07T18:48:09Z","title":"Narrow Secret Loyalty Dodges Black-Box Audits","version":3},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-06-30T23:02:20.906168Z"},"links":{"citing_paper":"/paper/2605.06846"},"observation_digest":"sha256:8254a2a5ecdd2e48dc469fbeffd7bde2345a715529e816d9ed6a4172555ab227","observation_id":"e91963d2-209f-425c-81c4-a516d75bb8dc","resolution":{"observed_at":"2026-07-07T12:13:45.260925Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-07T12:13:45.261595Z","title":"[. . . ] I cannot and will not advise any actions that are illegal, harmful, or extreme","venue":null,"work_id":"f08ac4fe-f024-44ca-8b85-3ea4c30ae2f5","year":null},"citing_paper":{"arxiv_id":"2605.06846","last_updated":"2026-06-02T16:52:04Z","snapshot_observed_at":"2026-07-06T23:19:15.382283Z","submitted_at":"2026-05-07T18:48:09Z","title":"Narrow Secret Loyalty Dodges Black-Box Audits","version":3},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-06-30T23:02:20.906168Z"},"links":{"citing_paper":"/paper/2605.06846"},"observation_digest":"sha256:bb2cee6f4e28512bfd0f9a82bc1e118e4c070e9efd555b3dfd501782445cc671","observation_id":"1300e735-3f13-4f30-9ff6-0142c2092a2c","resolution":{"observed_at":"2026-07-07T12:13:45.262866Z","resolver_source":"raw_fallback","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2605.06846","last_updated":"2026-06-02T16:52:04Z","latest_version":3,"primary_category":"cs.CR","snapshot_observed_at":"2026-07-06T23:19:15.382283Z","submitted_at":"2026-05-07T18:48:09Z","title":"Narrow Secret Loyalty Dodges Black-Box Audits"},"reference_resolution":{"displayed":25,"state_counts":{"malformed_identifier":1,"metadata_mismatch":5,"parse_uncertain":0,"unresolved":0,"verified_exact":10,"verified_fuzzy":9},"total_outbound_references":25},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"thesis":"As of 12 August 2026, this Paper Citation Record lists 25 of 25 outbound references and 0 inbound Pith citation observations for arXiv:2605.06846."}