{"as_of":"2026-08-08T10:38:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:6412d571bdb6f116b9ee62343d8d67e7412626930aa91567ad9d1514d7e5031d","coverage":[{"denominator":7,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":7,"source":"paper_references, paper_reference_links","source_observed_at":"2026-06-29T12:11:06.703658Z","state":"measured"},{"denominator":7,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":7,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2605.28553/citation-record","integrity":"/paper/2605.28553/integrity","json":"/paper/2605.28553/citation-record.json","paper":"/paper/2605.28553"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2204.05862","last_updated":"2022-04-12T15:02:38Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2022-04-12T15:02:38Z","title":"Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedback","version":1},"cited_work":{"arxiv_id":"2204.05862","doi":"10.1016/j.respol.2005.01.014","metadata_source":"pith","pith_arxiv_id":"2204.05862","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedback","venue":"cs.CL","work_id":"a1f2574b-a899-4713-be60-c87ba332656c","year":2022},"citing_paper":{"arxiv_id":"2605.28553","last_updated":"2026-05-27T14:44:36Z","snapshot_observed_at":"2026-07-06T23:38:09.179597Z","submitted_at":"2026-05-27T14:44:36Z","title":"Refusal Before Decoding: Detecting and Exploiting Refusal Signals in Intermediate LLM Activations","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-06-29T12:11:06.703658Z"},"links":{"cited_paper":"/paper/2204.05862","citing_paper":"/paper/2605.28553"},"observation_digest":"sha256:de63e0066ed34ecb715322cc574d53cd187edabb501c68b1566d7b38c757cef6","observation_id":"76b97bb9-85a7-4d13-a3ba-76db61a40668","resolution":{"observed_at":"2026-06-29T12:13:26.526552Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2510.14276","last_updated":"2025-10-16T04:00:18Z","snapshot_observed_at":"2026-07-06T22:32:47.087967Z","submitted_at":"2025-10-16T04:00:18Z","title":"Qwen3Guard Technical Report","version":1},"cited_work":{"arxiv_id":"2510.14276","doi":"10.48550/arxiv.2510.14276","metadata_source":"pith","pith_arxiv_id":"2510.14276","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Qwen3Guard Technical Report","venue":"cs.CL","work_id":"de1c5964-d29a-456c-97cc-30684b243a85","year":2025},"citing_paper":{"arxiv_id":"2605.28553","last_updated":"2026-05-27T14:44:36Z","snapshot_observed_at":"2026-07-06T23:38:09.179597Z","submitted_at":"2026-05-27T14:44:36Z","title":"Refusal Before Decoding: Detecting and Exploiting Refusal Signals in Intermediate LLM Activations","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-06-29T12:11:06.703658Z"},"links":{"cited_paper":"/paper/2510.14276","citing_paper":"/paper/2605.28553"},"observation_digest":"sha256:758e3138f2960981379a762d8403ef2cf12f2cb207cd25f9d050c639181553b7","observation_id":"ff6d13ed-0b0c-4314-91bd-5fe17d65b2c0","resolution":{"observed_at":"2026-06-29T12:13:26.524287Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T12:11:06.703658Z","title":"For these, we assign the re- spective labels of 1 forrefusableand 0 for compliant","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2605.28553","last_updated":"2026-05-27T14:44:36Z","snapshot_observed_at":"2026-07-06T23:38:09.179597Z","submitted_at":"2026-05-27T14:44:36Z","title":"Refusal Before Decoding: Detecting and Exploiting Refusal Signals in Intermediate LLM Activations","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-06-29T12:11:06.703658Z"},"links":{"citing_paper":"/paper/2605.28553"},"observation_digest":"sha256:84738ca550d20d752e9110cf54073fa0cc8c4a757449146c757f06ac52db1d81","observation_id":"cb108073-6d1b-4098-bdd3-31324f47015b","resolution":{"observed_at":"2026-06-29T12:11:06.703658Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T12:11:06.703658Z","title":"Ad- ditionally, we remove the borderline cases that are considered harmful according to other works, but do not really induce refusal behav- ior","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2605.28553","last_updated":"2026-05-27T14:44:36Z","snapshot_observed_at":"2026-07-06T23:38:09.179597Z","submitted_at":"2026-05-27T14:44:36Z","title":"Refusal Before Decoding: Detecting and Exploiting Refusal Signals in Intermediate LLM Activations","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-06-29T12:11:06.703658Z"},"links":{"citing_paper":"/paper/2605.28553"},"observation_digest":"sha256:de3f759f375f937edad27b618744592d31b714b5513ca906d81dd7b4a1756c67","observation_id":"abb9786d-cd47-428c-ac2b-514ebc28e913","resolution":{"observed_at":"2026-06-29T12:11:06.703658Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T12:11:06.703658Z","title":"In order to do this, we utilize the LLM described in Appendix A.2","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2605.28553","last_updated":"2026-05-27T14:44:36Z","snapshot_observed_at":"2026-07-06T23:38:09.179597Z","submitted_at":"2026-05-27T14:44:36Z","title":"Refusal Before Decoding: Detecting and Exploiting Refusal Signals in Intermediate LLM Activations","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-06-29T12:11:06.703658Z"},"links":{"citing_paper":"/paper/2605.28553"},"observation_digest":"sha256:541a4067cd44aaf97bd35b16ff79f4629ebc282929ee3c9d3a8100b782be7764","observation_id":"2a244450-04f0-4a53-8aff-14e24ea6edc6","resolution":{"observed_at":"2026-06-29T12:11:06.703658Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T12:11:06.703658Z","title":"To re- duce leakage across these splits, we cluster similar sentences based on their embedding cosine similarity before assigning them to each set","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2605.28553","last_updated":"2026-05-27T14:44:36Z","snapshot_observed_at":"2026-07-06T23:38:09.179597Z","submitted_at":"2026-05-27T14:44:36Z","title":"Refusal Before Decoding: Detecting and Exploiting Refusal Signals in Intermediate LLM Activations","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-06-29T12:11:06.703658Z"},"links":{"citing_paper":"/paper/2605.28553"},"observation_digest":"sha256:fdf660b03bc553dfa190d677be9632da914e6b15fb1d0a227f2df0b65a151d25","observation_id":"3e57b5c7-4dd9-4377-8bda-b04e66576ae0","resolution":{"observed_at":"2026-06-29T12:11:06.703658Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"9914.9934","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T12:13:26.520583Z","title":"These are the Activation Datasetsused for the target classi- fier training (as described in Section 4)","venue":null,"work_id":"66108071-ea0d-4f96-9dcd-ba586e152ce6","year":null},"citing_paper":{"arxiv_id":"2605.28553","last_updated":"2026-05-27T14:44:36Z","snapshot_observed_at":"2026-07-06T23:38:09.179597Z","submitted_at":"2026-05-27T14:44:36Z","title":"Refusal Before Decoding: Detecting and Exploiting Refusal Signals in Intermediate LLM Activations","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-06-29T12:11:06.703658Z"},"links":{"citing_paper":"/paper/2605.28553"},"observation_digest":"sha256:87f243abd0dbecc6bf7e04d075b12853eb42f37851668911125b7aeec677ba2a","observation_id":"426deb99-e094-41f0-b101-02f20516f24b","resolution":{"observed_at":"2026-06-29T12:13:26.522070Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2605.28553","last_updated":"2026-05-27T14:44:36Z","latest_version":1,"primary_category":"cs.AI","snapshot_observed_at":"2026-07-06T23:38:09.179597Z","submitted_at":"2026-05-27T14:44:36Z","title":"Refusal Before Decoding: Detecting and Exploiting Refusal Signals in Intermediate LLM Activations"},"reference_resolution":{"displayed":7,"state_counts":{"malformed_identifier":1,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":3,"verified_exact":3,"verified_fuzzy":0},"total_outbound_references":7},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 7 of 7 outbound references and 0 inbound Pith citation observations for arXiv:2605.28553."}