{"as_of":"2026-08-19T13:06:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:affe939b6452753d6f2b00d59be7f3ea5812cc7bfb527b2fdbaf2df01c977f31","coverage":[{"denominator":28,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":28,"source":"paper_references, paper_reference_links","source_observed_at":"2026-05-25T04:38:18.169546Z","state":"measured"},{"denominator":29,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":29,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-19T06:32:44.657259+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-07-30T19:18:07.755940Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2605.23168","last_updated":"2026-05-22T02:41:13Z","snapshot_observed_at":"2026-08-15T23:08:44.500997Z","submitted_at":"2026-05-22T02:41:13Z","title":"PoisonForge: Task-Level Targeted Poisoning Benchmark for Instruction-Tuned LLMs","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2605.23168","snapshot_observed_at":"2026-07-30T19:18:07.755940Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-18T21:43:17.352744Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":39,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:07.755940Z"},"links":{"cited_paper":"/paper/2605.23168","citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:c0447700bdb500721efcef0111fee4f884a5d3144c44c4c8fe519833e9ca2149","observation_id":"ebcdf818-cafd-4b75-a041-bcc7794d9d26","resolution":{"observed_at":"2026-07-30T19:18:07.755940Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2605.23168/citation-record","integrity":"/paper/2605.23168/integrity","json":"/paper/2605.23168/citation-record.json","paper":"/paper/2605.23168"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"2022 , eprint=","venue":null,"work_id":"96828677-5bfa-4e8b-9a2f-0d62a58390da","year":2022},"citing_paper":{"arxiv_id":"2605.23168","last_updated":"2026-05-22T02:41:13Z","snapshot_observed_at":"2026-08-15T23:08:44.500997Z","submitted_at":"2026-05-22T02:41:13Z","title":"PoisonForge: Task-Level Targeted Poisoning Benchmark for Instruction-Tuned LLMs","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-05-25T04:38:18.169546Z"},"links":{"citing_paper":"/paper/2605.23168"},"observation_digest":"sha256:dc7bec194f77ed90ebdc61da93d092e40d18bb63f09f15a054b38d9f160d4a0f","observation_id":"60914d1c-71b9-4f2c-8226-8aefcaf83f9e","resolution":{"observed_at":"2026-05-25T13:20:54.127719Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"2021 , eprint=","venue":null,"work_id":"c86c7baa-11b9-409a-86a5-4edfd61dc0f5","year":2021},"citing_paper":{"arxiv_id":"2605.23168","last_updated":"2026-05-22T02:41:13Z","snapshot_observed_at":"2026-08-15T23:08:44.500997Z","submitted_at":"2026-05-22T02:41:13Z","title":"PoisonForge: Task-Level Targeted Poisoning Benchmark for Instruction-Tuned LLMs","version":1},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-05-25T04:38:18.169546Z"},"links":{"citing_paper":"/paper/2605.23168"},"observation_digest":"sha256:151ee80d84fb3b69a122cc0dd2656fb50c99554f820ea7dd58bc94a77b96ac6b","observation_id":"39746ce5-c739-4a73-8ff5-05d4b23e26e8","resolution":{"observed_at":"2026-05-25T13:20:54.119523Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T16:46:21.684188Z","title":"Hashimoto , title =","venue":null,"work_id":"fadc9cdf-612b-4081-85df-c1904ccef4c8","year":2023},"citing_paper":{"arxiv_id":"2605.23168","last_updated":"2026-05-22T02:41:13Z","snapshot_observed_at":"2026-08-15T23:08:44.500997Z","submitted_at":"2026-05-22T02:41:13Z","title":"PoisonForge: Task-Level Targeted Poisoning Benchmark for Instruction-Tuned LLMs","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-05-25T04:38:18.169546Z"},"links":{"citing_paper":"/paper/2605.23168"},"observation_digest":"sha256:d1b05bc8cbb239b10bd9840a298137cd78b2da4d3bfa18c611e6b0f269e74cd4","observation_id":"556d4bee-9322-46ab-bdb9-db9d5e065f4b","resolution":{"observed_at":"2026-05-25T13:20:54.193082Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"2023 , eprint=","venue":null,"work_id":"63994729-c0d7-4249-ac6d-ac2f1176873a","year":2023},"citing_paper":{"arxiv_id":"2605.23168","last_updated":"2026-05-22T02:41:13Z","snapshot_observed_at":"2026-08-15T23:08:44.500997Z","submitted_at":"2026-05-22T02:41:13Z","title":"PoisonForge: Task-Level Targeted Poisoning Benchmark for Instruction-Tuned LLMs","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-05-25T04:38:18.169546Z"},"links":{"citing_paper":"/paper/2605.23168"},"observation_digest":"sha256:117f2e3b0d2feeeb23a3b2165961a9b893303ca1a7ebecf06bbb0e981f283a17","observation_id":"f39e80e9-6f12-476d-bb3d-90894e09f916","resolution":{"observed_at":"2026-05-25T13:20:54.197302Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"2019 , eprint=","venue":null,"work_id":"0bc94cc4-5f74-4ed1-93b6-f1b4446f6047","year":2019},"citing_paper":{"arxiv_id":"2605.23168","last_updated":"2026-05-22T02:41:13Z","snapshot_observed_at":"2026-08-15T23:08:44.500997Z","submitted_at":"2026-05-22T02:41:13Z","title":"PoisonForge: Task-Level Targeted Poisoning Benchmark for Instruction-Tuned LLMs","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-05-25T04:38:18.169546Z"},"links":{"citing_paper":"/paper/2605.23168"},"observation_digest":"sha256:87e29195a57e255440ea464dd2190a0cd6c7bebe48fb0e0e09a95afb62f04836","observation_id":"3661fd0c-19dd-41c6-81cd-6a52151ef633","resolution":{"observed_at":"2026-05-25T13:25:54.260055Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Network and Distributed System Security Symposium , year=","venue":null,"work_id":"143acf05-36d2-40cc-9133-41eb9949201f","year":null},"citing_paper":{"arxiv_id":"2605.23168","last_updated":"2026-05-22T02:41:13Z","snapshot_observed_at":"2026-08-15T23:08:44.500997Z","submitted_at":"2026-05-22T02:41:13Z","title":"PoisonForge: Task-Level Targeted Poisoning Benchmark for Instruction-Tuned LLMs","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-05-25T04:38:18.169546Z"},"links":{"citing_paper":"/paper/2605.23168"},"observation_digest":"sha256:90c4b4471452a070d059bf158746ca72b3f60beb0886b5e9b2ba926417bdcc33","observation_id":"6f05a907-216f-4d5a-b69d-6e1c68f472a8","resolution":{"observed_at":"2026-05-25T13:25:54.268882Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"ArXiv , year=","venue":null,"work_id":"ab9af6c1-9904-4207-874b-44ec62403a46","year":null},"citing_paper":{"arxiv_id":"2605.23168","last_updated":"2026-05-22T02:41:13Z","snapshot_observed_at":"2026-08-15T23:08:44.500997Z","submitted_at":"2026-05-22T02:41:13Z","title":"PoisonForge: Task-Level Targeted Poisoning Benchmark for Instruction-Tuned LLMs","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-05-25T04:38:18.169546Z"},"links":{"citing_paper":"/paper/2605.23168"},"observation_digest":"sha256:b5a601877a70819bb62ffa73181b6490c0850425646b1e3b73854dc81e5a0e39","observation_id":"ac572527-d761-4e30-87b8-1c492793e3e7","resolution":{"observed_at":"2026-05-25T13:25:54.264084Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"ArXiv , year=","venue":null,"work_id":"90672a27-90aa-4f68-a87d-b42ed1c1ee39","year":null},"citing_paper":{"arxiv_id":"2605.23168","last_updated":"2026-05-22T02:41:13Z","snapshot_observed_at":"2026-08-15T23:08:44.500997Z","submitted_at":"2026-05-22T02:41:13Z","title":"PoisonForge: Task-Level Targeted Poisoning Benchmark for Instruction-Tuned LLMs","version":1},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-05-25T04:38:18.169546Z"},"links":{"citing_paper":"/paper/2605.23168"},"observation_digest":"sha256:011cd764a41046efaa109a19a8332cf9e418d5cf6af0464e238dc4d5576e9d43","observation_id":"8dcd025f-90af-4094-ba48-156fc58a6a87","resolution":{"observed_at":"2026-05-25T13:20:54.181918Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"USENIX Security Symposium , year=","venue":null,"work_id":"665ff4ca-7b23-416d-beef-3ebdda2ef13d","year":null},"citing_paper":{"arxiv_id":"2605.23168","last_updated":"2026-05-22T02:41:13Z","snapshot_observed_at":"2026-08-15T23:08:44.500997Z","submitted_at":"2026-05-22T02:41:13Z","title":"PoisonForge: Task-Level Targeted Poisoning Benchmark for Instruction-Tuned LLMs","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-05-25T04:38:18.169546Z"},"links":{"citing_paper":"/paper/2605.23168"},"observation_digest":"sha256:8df410d9c5ec8d3abb594a0e57b13ecf68045a32a5816096a63893c45c35efcc","observation_id":"9d502359-982c-4ec4-b23e-1db180c477af","resolution":{"observed_at":"2026-05-25T13:20:54.185990Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"ArXiv , year=","venue":null,"work_id":"f8019649-631d-4997-aff4-9063c65ee102","year":null},"citing_paper":{"arxiv_id":"2605.23168","last_updated":"2026-05-22T02:41:13Z","snapshot_observed_at":"2026-08-15T23:08:44.500997Z","submitted_at":"2026-05-22T02:41:13Z","title":"PoisonForge: Task-Level Targeted Poisoning Benchmark for Instruction-Tuned LLMs","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-05-25T04:38:18.169546Z"},"links":{"citing_paper":"/paper/2605.23168"},"observation_digest":"sha256:bfa1e82519f637880f92a2943044bd2b799589515310d6d6fb99ee10cbd74d05","observation_id":"c506a55a-b4a8-4b8b-a3ba-21e6a3b4a407","resolution":{"observed_at":"2026-05-25T13:20:54.172688Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"North American Chapter of the Association for Computational Linguistics , year=","venue":null,"work_id":"798198f9-ab6d-4c9f-b969-9f53c7129304","year":null},"citing_paper":{"arxiv_id":"2605.23168","last_updated":"2026-05-22T02:41:13Z","snapshot_observed_at":"2026-08-15T23:08:44.500997Z","submitted_at":"2026-05-22T02:41:13Z","title":"PoisonForge: Task-Level Targeted Poisoning Benchmark for Instruction-Tuned LLMs","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-05-25T04:38:18.169546Z"},"links":{"citing_paper":"/paper/2605.23168"},"observation_digest":"sha256:45e803cd559bb1090decd8286cb6c56d0c40c90e901c3125933e3e9021ad46c8","observation_id":"02fe1923-18c5-4703-8d00-c89294f91fd0","resolution":{"observed_at":"2026-05-25T13:20:54.169313Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"ArXiv , year=","venue":null,"work_id":"ce86f58c-2ab7-4346-9405-bcd60d87ea2b","year":null},"citing_paper":{"arxiv_id":"2605.23168","last_updated":"2026-05-22T02:41:13Z","snapshot_observed_at":"2026-08-15T23:08:44.500997Z","submitted_at":"2026-05-22T02:41:13Z","title":"PoisonForge: Task-Level Targeted Poisoning Benchmark for Instruction-Tuned LLMs","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-05-25T04:38:18.169546Z"},"links":{"citing_paper":"/paper/2605.23168"},"observation_digest":"sha256:93cfa5ec85ae0fa7e51d31795ee1ad57d3cbc5084b88678ddd713fea3988755d","observation_id":"2532afd9-1418-4846-a482-07f20549c10b","resolution":{"observed_at":"2026-05-25T13:20:54.165779Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"2024 , url=","venue":null,"work_id":"519cc2be-7b56-4401-9ef0-3de9af538ea5","year":2024},"citing_paper":{"arxiv_id":"2605.23168","last_updated":"2026-05-22T02:41:13Z","snapshot_observed_at":"2026-08-15T23:08:44.500997Z","submitted_at":"2026-05-22T02:41:13Z","title":"PoisonForge: Task-Level Targeted Poisoning Benchmark for Instruction-Tuned LLMs","version":1},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-05-25T04:38:18.169546Z"},"links":{"citing_paper":"/paper/2605.23168"},"observation_digest":"sha256:be0f9890d062a898ff8628d2ef19be60d07ec4fc14140ed8d82d416bedc0f919","observation_id":"c8658adb-c540-4f1d-9971-8b9fb42c78b9","resolution":{"observed_at":"2026-05-25T13:20:54.159553Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"ArXiv , year=","venue":null,"work_id":"4513d60c-1d24-49aa-8d86-40c5d2a5b579","year":null},"citing_paper":{"arxiv_id":"2605.23168","last_updated":"2026-05-22T02:41:13Z","snapshot_observed_at":"2026-08-15T23:08:44.500997Z","submitted_at":"2026-05-22T02:41:13Z","title":"PoisonForge: Task-Level Targeted Poisoning Benchmark for Instruction-Tuned LLMs","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-05-25T04:38:18.169546Z"},"links":{"citing_paper":"/paper/2605.23168"},"observation_digest":"sha256:e244e154f152f8fce0ddd95af9c790a5af00e7fad0e94704e507bbb8771274fc","observation_id":"395a319b-319c-43f0-8d21-31c3e085b54f","resolution":{"observed_at":"2026-05-25T13:20:54.124126Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T16:22:39.346119Z","title":"2024 , eprint=","venue":null,"work_id":"ee093934-22c2-4307-91fc-e25e7d5188f9","year":2024},"citing_paper":{"arxiv_id":"2605.23168","last_updated":"2026-05-22T02:41:13Z","snapshot_observed_at":"2026-08-15T23:08:44.500997Z","submitted_at":"2026-05-22T02:41:13Z","title":"PoisonForge: Task-Level Targeted Poisoning Benchmark for Instruction-Tuned LLMs","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-05-25T04:38:18.169546Z"},"links":{"citing_paper":"/paper/2605.23168"},"observation_digest":"sha256:0d2ab65235c25227b07c524b0fafb55064171894380a1d8e41ecdac835027e00","observation_id":"ed189d5d-b369-41b6-bfa2-d1f232f46968","resolution":{"observed_at":"2026-05-25T13:20:54.107931Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"2024 , eprint=","venue":null,"work_id":"f664a733-8d9f-4154-9f7a-387ec484bf46","year":2024},"citing_paper":{"arxiv_id":"2605.23168","last_updated":"2026-05-22T02:41:13Z","snapshot_observed_at":"2026-08-15T23:08:44.500997Z","submitted_at":"2026-05-22T02:41:13Z","title":"PoisonForge: Task-Level Targeted Poisoning Benchmark for Instruction-Tuned LLMs","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-05-25T04:38:18.169546Z"},"links":{"citing_paper":"/paper/2605.23168"},"observation_digest":"sha256:d8d99131672b3dd849f01f60798fbcac4ff3db63274f90db3291b184a94cb3d7","observation_id":"75ab40f5-89d1-4f66-986d-592ea1f1714a","resolution":{"observed_at":"2026-05-25T13:20:54.176388Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Proceedings of the 2025 ACM SIGSAC Conference on Computer and Communications Security , pages=","venue":null,"work_id":"75302931-20e7-4823-a8c9-ca459fae5392","year":2025},"citing_paper":{"arxiv_id":"2605.23168","last_updated":"2026-05-22T02:41:13Z","snapshot_observed_at":"2026-08-15T23:08:44.500997Z","submitted_at":"2026-05-22T02:41:13Z","title":"PoisonForge: Task-Level Targeted Poisoning Benchmark for Instruction-Tuned LLMs","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-05-25T04:38:18.169546Z"},"links":{"citing_paper":"/paper/2605.23168"},"observation_digest":"sha256:9d691ad22ded25ae4eea2612c4501b5d61e323bbd67297145d21328faa52cd97","observation_id":"d7b0cfcc-986f-46ed-9cdd-fbdd5c55eafb","resolution":{"observed_at":"2026-05-25T13:20:54.111724Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2601.19061","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"arXiv preprint arXiv:2601.19061 , year=","venue":null,"work_id":"e52c39de-5a97-4870-ac3f-0c2ac0fce01e","year":null},"citing_paper":{"arxiv_id":"2605.23168","last_updated":"2026-05-22T02:41:13Z","snapshot_observed_at":"2026-08-15T23:08:44.500997Z","submitted_at":"2026-05-22T02:41:13Z","title":"PoisonForge: Task-Level Targeted Poisoning Benchmark for Instruction-Tuned LLMs","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-05-25T04:38:18.169546Z"},"links":{"citing_paper":"/paper/2605.23168"},"observation_digest":"sha256:9c5dd03474c6573c45a3d8b9379558b9f92f35087948964931bdae38c1fbebad","observation_id":"b40968d4-7ba6-458c-be4c-62ab900dc1c6","resolution":{"observed_at":"2026-05-25T04:40:23.729347Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2401.17377","last_updated":"2025-04-07T17:59:50Z","snapshot_observed_at":"2026-08-18T13:50:33.515645Z","submitted_at":"2024-01-30T19:03:49Z","title":"Infini-gram: Scaling Unbounded n-gram Language Models to a Trillion Tokens","version":4},"cited_work":{"arxiv_id":"2401.17377","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2401.17377","snapshot_observed_at":"2026-07-03T13:28:19.272629Z","title":"arXiv preprint arXiv:2401.17377 , year=","venue":null,"work_id":"64c2d190-43ba-4efe-b3fe-6b9c6acfa772","year":2024},"citing_paper":{"arxiv_id":"2605.23168","last_updated":"2026-05-22T02:41:13Z","snapshot_observed_at":"2026-08-15T23:08:44.500997Z","submitted_at":"2026-05-22T02:41:13Z","title":"PoisonForge: Task-Level Targeted Poisoning Benchmark for Instruction-Tuned LLMs","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-05-25T04:38:18.169546Z"},"links":{"cited_paper":"/paper/2401.17377","citing_paper":"/paper/2605.23168"},"observation_digest":"sha256:55c6dc7e5afc2f51ee78908017d71be6b35cb4d8c5db83d2b85dc0ae0f9c2576","observation_id":"4903d2a1-f366-4426-8700-429d15c6ce17","resolution":{"observed_at":"2026-05-25T04:40:23.735624Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.5281/zenodo.12608602","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T04:46:45.648157Z","title":"doi:10.5281/zenodo.12608602 , url =","venue":"Zenodo (CERN European Organization for Nuclear Research)","work_id":"2c57f331-c45e-4b28-9887-1931db7da39f","year":2024},"citing_paper":{"arxiv_id":"2605.23168","last_updated":"2026-05-22T02:41:13Z","snapshot_observed_at":"2026-08-15T23:08:44.500997Z","submitted_at":"2026-05-22T02:41:13Z","title":"PoisonForge: Task-Level Targeted Poisoning Benchmark for Instruction-Tuned LLMs","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-05-25T04:38:18.169546Z"},"links":{"citing_paper":"/paper/2605.23168"},"observation_digest":"sha256:0dd0cf47d3790605c7f6d194ea3b867eb1c03030dd535324853b55b9824fbe26","observation_id":"7a8e2ad3-0b6e-4cd2-973d-bfdd8fe56768","resolution":{"observed_at":"2026-05-25T04:40:22.923292Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-13T21:08:05.614962+00:00","source":"crossref_status_cache"},{"observed_at":"2026-08-13T21:08:05.614962+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"2018 , eprint=","venue":null,"work_id":"da45ccce-6a72-4221-a3db-856878b8b0ea","year":2018},"citing_paper":{"arxiv_id":"2605.23168","last_updated":"2026-05-22T02:41:13Z","snapshot_observed_at":"2026-08-15T23:08:44.500997Z","submitted_at":"2026-05-22T02:41:13Z","title":"PoisonForge: Task-Level Targeted Poisoning Benchmark for Instruction-Tuned LLMs","version":1},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-05-25T04:38:18.169546Z"},"links":{"citing_paper":"/paper/2605.23168"},"observation_digest":"sha256:60c9035998be9376bc3f998116986fbdd8ca37181f04b083ff5d2b4ed55f58a2","observation_id":"160cb534-81a1-4a05-a59a-d7408e8a293e","resolution":{"observed_at":"2026-05-25T13:20:54.149584Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"2024 , eprint=","venue":null,"work_id":"61408d07-1571-4546-9c29-4b4f7362a2af","year":2024},"citing_paper":{"arxiv_id":"2605.23168","last_updated":"2026-05-22T02:41:13Z","snapshot_observed_at":"2026-08-15T23:08:44.500997Z","submitted_at":"2026-05-22T02:41:13Z","title":"PoisonForge: Task-Level Targeted Poisoning Benchmark for Instruction-Tuned LLMs","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-05-25T04:38:18.169546Z"},"links":{"citing_paper":"/paper/2605.23168"},"observation_digest":"sha256:bf641e7cba8796619135392257e5b73ef530129083c9e10ad3f006e573b58aa6","observation_id":"1ecdc23e-c918-40b3-9039-895fb4e6ac56","resolution":{"observed_at":"2026-05-25T13:20:54.135233Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"6214.2022","doi":"10.1109/sp46214.2022","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Spinning Language Models: Risks of Propaganda-As-A-Service and Countermeasures , url=","venue":null,"work_id":"fb02aee4-6896-426b-81d9-d3bf226deddf","year":2022},"citing_paper":{"arxiv_id":"2605.23168","last_updated":"2026-05-22T02:41:13Z","snapshot_observed_at":"2026-08-15T23:08:44.500997Z","submitted_at":"2026-05-22T02:41:13Z","title":"PoisonForge: Task-Level Targeted Poisoning Benchmark for Instruction-Tuned LLMs","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-05-25T04:38:18.169546Z"},"links":{"citing_paper":"/paper/2605.23168"},"observation_digest":"sha256:81744c2b823f80f8b47fb53ac0ad9daae4e62cf08e75952d2e319553d1f429a2","observation_id":"f3e8affb-96ce-419c-8151-5b179f5a1cde","resolution":{"observed_at":"2026-05-25T04:40:22.934130Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"2025 , eprint=","venue":null,"work_id":"5e97902f-e286-40ba-ad6c-e174ed6b2f8b","year":2025},"citing_paper":{"arxiv_id":"2605.23168","last_updated":"2026-05-22T02:41:13Z","snapshot_observed_at":"2026-08-15T23:08:44.500997Z","submitted_at":"2026-05-22T02:41:13Z","title":"PoisonForge: Task-Level Targeted Poisoning Benchmark for Instruction-Tuned LLMs","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-05-25T04:38:18.169546Z"},"links":{"citing_paper":"/paper/2605.23168"},"observation_digest":"sha256:11bf87d31f8acbb3ceb5f0ae6f56d73e57facabaf75e12d3efc738384aef18fd","observation_id":"0307de6d-40c0-4e3f-99b6-d3d39509b41c","resolution":{"observed_at":"2026-05-25T13:20:54.142722Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"2026 , eprint=","venue":null,"work_id":"576e6406-c33e-485d-b1bf-48f394a4ff9d","year":2026},"citing_paper":{"arxiv_id":"2605.23168","last_updated":"2026-05-22T02:41:13Z","snapshot_observed_at":"2026-08-15T23:08:44.500997Z","submitted_at":"2026-05-22T02:41:13Z","title":"PoisonForge: Task-Level Targeted Poisoning Benchmark for Instruction-Tuned LLMs","version":1},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-05-25T04:38:18.169546Z"},"links":{"citing_paper":"/paper/2605.23168"},"observation_digest":"sha256:fbb92fcca6ff1082fcd6f9c392261880bf4657ab812f6ccf1044e09002e01af8","observation_id":"79b9580a-8303-44af-87e9-662da85686ce","resolution":{"observed_at":"2026-05-25T13:20:54.146135Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"2026 , eprint=","venue":null,"work_id":"f176b824-afbe-4d62-8d4d-4af3bc439881","year":2026},"citing_paper":{"arxiv_id":"2605.23168","last_updated":"2026-05-22T02:41:13Z","snapshot_observed_at":"2026-08-15T23:08:44.500997Z","submitted_at":"2026-05-22T02:41:13Z","title":"PoisonForge: Task-Level Targeted Poisoning Benchmark for Instruction-Tuned LLMs","version":1},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-05-25T04:38:18.169546Z"},"links":{"citing_paper":"/paper/2605.23168"},"observation_digest":"sha256:fc397839c1bea9d74082bdd2813287a627b3faceef2f0299a369ed5bd7d80af2","observation_id":"0fafb0ed-bb23-4e4b-be2d-c244cbab8f28","resolution":{"observed_at":"2026-05-25T13:20:54.131093Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"2024 , eprint=","venue":null,"work_id":"aaa69fa8-7281-4059-9f75-f1db361b2344","year":2024},"citing_paper":{"arxiv_id":"2605.23168","last_updated":"2026-05-22T02:41:13Z","snapshot_observed_at":"2026-08-15T23:08:44.500997Z","submitted_at":"2026-05-22T02:41:13Z","title":"PoisonForge: Task-Level Targeted Poisoning Benchmark for Instruction-Tuned LLMs","version":1},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-05-25T04:38:18.169546Z"},"links":{"citing_paper":"/paper/2605.23168"},"observation_digest":"sha256:a81e62ed0bfc555853692989a18eda39af43aa249d7098d96be57c45ac720832","observation_id":"c73e016a-ad94-4231-a07f-d06bec03e3b1","resolution":{"observed_at":"2026-05-25T13:20:54.138778Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"2025 , eprint=","venue":null,"work_id":"d26c18f8-1549-4e00-84f0-68ac9abcbbd8","year":2025},"citing_paper":{"arxiv_id":"2605.23168","last_updated":"2026-05-22T02:41:13Z","snapshot_observed_at":"2026-08-15T23:08:44.500997Z","submitted_at":"2026-05-22T02:41:13Z","title":"PoisonForge: Task-Level Targeted Poisoning Benchmark for Instruction-Tuned LLMs","version":1},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-05-25T04:38:18.169546Z"},"links":{"citing_paper":"/paper/2605.23168"},"observation_digest":"sha256:69c1f7dabe0a70918825d1ecf875d56e9b6bc9255c1f44f92ea6f9ea63fbf1da","observation_id":"9126b88b-1aa7-4aba-89ff-4d9d09b96314","resolution":{"observed_at":"2026-05-25T13:20:54.155983Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2605.23168","last_updated":"2026-05-22T02:41:13Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-15T23:08:44.500997Z","submitted_at":"2026-05-22T02:41:13Z","title":"PoisonForge: Task-Level Targeted Poisoning Benchmark for Instruction-Tuned LLMs"},"reference_resolution":{"displayed":28,"state_counts":{"malformed_identifier":0,"metadata_mismatch":1,"parse_uncertain":0,"unresolved":0,"verified_exact":3,"verified_fuzzy":24},"total_outbound_references":28},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"thesis":"As of 19 August 2026, this Paper Citation Record lists 28 of 28 outbound references and 1 inbound Pith citation observation for arXiv:2605.23168."}