{"as_of":"2026-08-08T12:09:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:5519fc43a8d7704489872399c766f791afaff7405e46d98db0e15bb8f80b087b","coverage":[{"denominator":26,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":26,"source":"paper_references, paper_reference_links","source_observed_at":"2026-06-28T05:19:58.062861Z","state":"measured"},{"denominator":26,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":26,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2606.05396/citation-record","integrity":"/paper/2606.05396/integrity","json":"/paper/2606.05396/citation-record.json","paper":"/paper/2606.05396"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T05:19:58.062861Z","title":"Juliet test suite for Java and C/C++ (nist software as- surance reference dataset),","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2606.05396","last_updated":"2026-06-03T20:06:52Z","snapshot_observed_at":"2026-08-08T08:37:56.348640Z","submitted_at":"2026-06-03T20:06:52Z","title":"Willing but Unable: Separating Refusal from Capability in Code LLMs via Abliteration","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-06-28T05:19:58.062861Z"},"links":{"citing_paper":"/paper/2606.05396"},"observation_digest":"sha256:aa05fe60ee1f36eccb8ab488944cdfcaed5e837996329c6a081b94c6ef851506","observation_id":"a7668c3f-e44e-4fd8-9a95-680ad79d170c","resolution":{"observed_at":"2026-06-28T05:19:58.062861Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T05:19:58.062861Z","title":"A C/C++ code vulnerability dataset with code changes and CVE summaries,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2606.05396","last_updated":"2026-06-03T20:06:52Z","snapshot_observed_at":"2026-08-08T08:37:56.348640Z","submitted_at":"2026-06-03T20:06:52Z","title":"Willing but Unable: Separating Refusal from Capability in Code LLMs via Abliteration","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-06-28T05:19:58.062861Z"},"links":{"citing_paper":"/paper/2606.05396"},"observation_digest":"sha256:5fb6ba2b9daf6994ab68a67c5439528e4a1b7909eebc7bd07f98207ba71fdcc9","observation_id":"32c4c0e0-35a3-4525-a396-74e23ad0ca9a","resolution":{"observed_at":"2026-06-28T05:19:58.062861Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T05:19:58.062861Z","title":"Devign: Effective vulnerability identification by learning compre- hensive program semantics via graph neural networks,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2606.05396","last_updated":"2026-06-03T20:06:52Z","snapshot_observed_at":"2026-08-08T08:37:56.348640Z","submitted_at":"2026-06-03T20:06:52Z","title":"Willing but Unable: Separating Refusal from Capability in Code LLMs via Abliteration","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-06-28T05:19:58.062861Z"},"links":{"citing_paper":"/paper/2606.05396"},"observation_digest":"sha256:d8cdbb567b459f257f51e9517b635b5286b438d3a19133d2e7a6d59fadc53a3c","observation_id":"81c482d4-f22d-4829-ac87-24140aff2dfe","resolution":{"observed_at":"2026-06-28T05:19:58.062861Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T05:19:58.062861Z","title":"Deep learning based vulnerability detection: Are we there yet?","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2606.05396","last_updated":"2026-06-03T20:06:52Z","snapshot_observed_at":"2026-08-08T08:37:56.348640Z","submitted_at":"2026-06-03T20:06:52Z","title":"Willing but Unable: Separating Refusal from Capability in Code LLMs via Abliteration","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-06-28T05:19:58.062861Z"},"links":{"citing_paper":"/paper/2606.05396"},"observation_digest":"sha256:a60c514ffc470ff3427fd316fcef5947d76d10d09595407cbce5ec2057e7508e","observation_id":"6ff7e0f3-fd51-40b7-9c09-7b08fa5de8f1","resolution":{"observed_at":"2026-06-28T05:19:58.062861Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"8619.2023","doi":"10.1109/icse48619.2023","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"In 45th IEEE/ACM International Conference on Software Engineering, ICSE 2023, Melbourne, Australia, May 14-20","venue":null,"work_id":"5955f330-cfab-45b0-9ff5-4dd04bca728a","year":2023},"citing_paper":{"arxiv_id":"2606.05396","last_updated":"2026-06-03T20:06:52Z","snapshot_observed_at":"2026-08-08T08:37:56.348640Z","submitted_at":"2026-06-03T20:06:52Z","title":"Willing but Unable: Separating Refusal from Capability in Code LLMs via Abliteration","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-06-28T05:19:58.062861Z"},"links":{"citing_paper":"/paper/2606.05396"},"observation_digest":"sha256:e14df80eb86f0fbe612f8d22ddcfea0918f03af65f807d3a5ec6b3500aa0fbd5","observation_id":"7a048a2a-f999-477a-9718-84c10d67aa03","resolution":{"observed_at":"2026-06-28T05:21:39.880920Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-07-11T01:51:00.227285+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-11T01:51:00.227285+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T05:19:58.062861Z","title":"Vulgen: Realistic vulnerability generation via pattern mining and deep learning,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2606.05396","last_updated":"2026-06-03T20:06:52Z","snapshot_observed_at":"2026-08-08T08:37:56.348640Z","submitted_at":"2026-06-03T20:06:52Z","title":"Willing but Unable: Separating Refusal from Capability in Code LLMs via Abliteration","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-06-28T05:19:58.062861Z"},"links":{"citing_paper":"/paper/2606.05396"},"observation_digest":"sha256:d76786599ba6dedd223514529d240db664446ae11c6f0bbd28b26454073f5341","observation_id":"0587e2cb-d8bf-4e21-aae9-972e0c102a5a","resolution":{"observed_at":"2026-06-28T05:19:58.062861Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T05:19:58.062861Z","title":"Vgx: Large-scale sample generation for boosting learning-based software vulnerability analyses,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.05396","last_updated":"2026-06-03T20:06:52Z","snapshot_observed_at":"2026-08-08T08:37:56.348640Z","submitted_at":"2026-06-03T20:06:52Z","title":"Willing but Unable: Separating Refusal from Capability in Code LLMs via Abliteration","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-06-28T05:19:58.062861Z"},"links":{"citing_paper":"/paper/2606.05396"},"observation_digest":"sha256:309b785f16c422542136a112dc7d5414eeac7e6efdc9e19637c6202d240b9cf1","observation_id":"976d8777-02dd-43e0-8978-8b692b03b92b","resolution":{"observed_at":"2026-06-28T05:19:58.062861Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1145/3597503","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Available: https://doi.org/10.1145/3597503","venue":null,"work_id":"36d9191c-f514-4287-8e58-188dc25e8dee","year":2024},"citing_paper":{"arxiv_id":"2606.05396","last_updated":"2026-06-03T20:06:52Z","snapshot_observed_at":"2026-08-08T08:37:56.348640Z","submitted_at":"2026-06-03T20:06:52Z","title":"Willing but Unable: Separating Refusal from Capability in Code LLMs via Abliteration","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-06-28T05:19:58.062861Z"},"links":{"citing_paper":"/paper/2606.05396"},"observation_digest":"sha256:d193ba60a854faefea1d60e4d1efbf310f8f6f34eabcc37bd7e7df20ffdfa04a","observation_id":"e46943b4-0c4d-4d27-9907-8b30a40ec5c3","resolution":{"observed_at":"2026-06-28T05:21:39.887436Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-07-12T17:49:43.802328+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-12T17:49:43.802328+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2408.04125","last_updated":"2025-08-12T18:10:24Z","snapshot_observed_at":"2026-07-06T18:58:09.650413Z","submitted_at":"2024-08-07T23:22:58Z","title":"VulScribeR: Exploring RAG-based Vulnerability Augmentation with LLMs","version":4},"cited_work":{"arxiv_id":"2408.04125","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2408.04125","snapshot_observed_at":"2026-07-02T10:06:51.660991Z","title":"VulScribeR: Exploring RAG-based vulnerability augmentation with LLMs,","venue":null,"work_id":"820a0c7b-bfb6-42c5-8dbe-61382ec66864","year":2024},"citing_paper":{"arxiv_id":"2606.05396","last_updated":"2026-06-03T20:06:52Z","snapshot_observed_at":"2026-08-08T08:37:56.348640Z","submitted_at":"2026-06-03T20:06:52Z","title":"Willing but Unable: Separating Refusal from Capability in Code LLMs via Abliteration","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-06-28T05:19:58.062861Z"},"links":{"cited_paper":"/paper/2408.04125","citing_paper":"/paper/2606.05396"},"observation_digest":"sha256:6af8c279010a98687e3cc00716d85a59b136749bdd915055a50502553fe3cf91","observation_id":"38dafbc2-222d-440e-8206-6601e0ccb10d","resolution":{"observed_at":"2026-07-02T10:06:51.662457Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1145/3769082","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Surveys58, 5, Article 134 (2025)","venue":"ACM Computing Surveys","work_id":"c9fca10a-b17b-464c-8c9c-904e201e2635","year":2025},"citing_paper":{"arxiv_id":"2606.05396","last_updated":"2026-06-03T20:06:52Z","snapshot_observed_at":"2026-08-08T08:37:56.348640Z","submitted_at":"2026-06-03T20:06:52Z","title":"Willing but Unable: Separating Refusal from Capability in Code LLMs via Abliteration","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-06-28T05:19:58.062861Z"},"links":{"citing_paper":"/paper/2606.05396"},"observation_digest":"sha256:db67ac3766c325542c3088469f0f33bd088c74b98769c81464d3c4eb9530aae2","observation_id":"588d5ef9-baf4-4167-ab27-bec2ce0c0b36","resolution":{"observed_at":"2026-06-28T05:21:39.889588Z","resolver_source":"doi","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-07-12T03:19:08.691853+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-12T03:19:08.691853+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1007/s10664-022-10278-4","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Empirical Software Engineering28(3), 59 (2023)","venue":"Empirical Software Engineering","work_id":"7e2d5b1d-5d99-47d5-959f-f1ee0084e941","year":2023},"citing_paper":{"arxiv_id":"2606.05396","last_updated":"2026-06-03T20:06:52Z","snapshot_observed_at":"2026-08-08T08:37:56.348640Z","submitted_at":"2026-06-03T20:06:52Z","title":"Willing but Unable: Separating Refusal from Capability in Code LLMs via Abliteration","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-06-28T05:19:58.062861Z"},"links":{"citing_paper":"/paper/2606.05396"},"observation_digest":"sha256:60ed66f0a87dcebb561116ecf0166a848a8cde10cd3023e526d1d7935cd116ff","observation_id":"ff8c8ec8-e4d0-4e61-8172-1261896ec67f","resolution":{"observed_at":"2026-06-28T05:21:39.885491Z","resolver_source":"doi","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-07T22:08:09.158379+00:00","source":"crossref_status_cache"},{"observed_at":"2026-08-07T22:08:09.158379+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T05:19:58.062861Z","title":"Secureqwen: Leveraging llms for vulnerability detection in python codebases,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.05396","last_updated":"2026-06-03T20:06:52Z","snapshot_observed_at":"2026-08-08T08:37:56.348640Z","submitted_at":"2026-06-03T20:06:52Z","title":"Willing but Unable: Separating Refusal from Capability in Code LLMs via Abliteration","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-06-28T05:19:58.062861Z"},"links":{"citing_paper":"/paper/2606.05396"},"observation_digest":"sha256:048990c2f90093f4a5adb1c5461592fb198967c2cb4d91cd6988a40358962c57","observation_id":"771f4940-daf0-45ab-aea6-5af9eb4846e1","resolution":{"observed_at":"2026-06-28T05:19:58.062861Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T05:19:58.062861Z","title":"Available: https://www.sciencedirect.com/ science/article/pii/S0167404824004565","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.05396","last_updated":"2026-06-03T20:06:52Z","snapshot_observed_at":"2026-08-08T08:37:56.348640Z","submitted_at":"2026-06-03T20:06:52Z","title":"Willing but Unable: Separating Refusal from Capability in Code LLMs via Abliteration","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-06-28T05:19:58.062861Z"},"links":{"citing_paper":"/paper/2606.05396"},"observation_digest":"sha256:21ad9d88585c9d93a8008be04c951a442e248ebc87db49190b5e83fdd17ec35e","observation_id":"2b1ef1e9-b664-460d-bcd7-c131ec92b36c","resolution":{"observed_at":"2026-06-28T05:19:58.062861Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T05:19:58.062861Z","title":"PromSec: Prompt optimization for secure generation of functional source code with large language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.05396","last_updated":"2026-06-03T20:06:52Z","snapshot_observed_at":"2026-08-08T08:37:56.348640Z","submitted_at":"2026-06-03T20:06:52Z","title":"Willing but Unable: Separating Refusal from Capability in Code LLMs via Abliteration","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-06-28T05:19:58.062861Z"},"links":{"citing_paper":"/paper/2606.05396"},"observation_digest":"sha256:c46dd224ac2ab156233a434db796be9f8a381f1d50de1dc357f0d5e0b9afd6ff","observation_id":"8c043636-2f18-4d1d-8294-eac103b2b561","resolution":{"observed_at":"2026-06-28T05:19:58.062861Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T05:19:58.062861Z","title":"Large language models for code: Security hardening and adversarial testing,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2606.05396","last_updated":"2026-06-03T20:06:52Z","snapshot_observed_at":"2026-08-08T08:37:56.348640Z","submitted_at":"2026-06-03T20:06:52Z","title":"Willing but Unable: Separating Refusal from Capability in Code LLMs via Abliteration","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-06-28T05:19:58.062861Z"},"links":{"citing_paper":"/paper/2606.05396"},"observation_digest":"sha256:01559f4bf8bfa5cf4808387c381417d8f84d32681c967919b2353b496d278625","observation_id":"bee07d80-8e6d-42f9-8f0c-e89ca55e6122","resolution":{"observed_at":"2026-06-28T05:19:58.062861Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T05:19:58.062861Z","title":"Ai code generators for security: Friend or foe?","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.05396","last_updated":"2026-06-03T20:06:52Z","snapshot_observed_at":"2026-08-08T08:37:56.348640Z","submitted_at":"2026-06-03T20:06:52Z","title":"Willing but Unable: Separating Refusal from Capability in Code LLMs via Abliteration","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-06-28T05:19:58.062861Z"},"links":{"citing_paper":"/paper/2606.05396"},"observation_digest":"sha256:0842a812a69c756e08ee948df213732817ea88ecf46ee3c24db7049a7a664fcf","observation_id":"d925cc2b-13d8-4048-8dbd-527bcfae52d6","resolution":{"observed_at":"2026-06-28T05:19:58.062861Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T05:19:58.062861Z","title":"Refusal in language models is mediated by a single direction,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.05396","last_updated":"2026-06-03T20:06:52Z","snapshot_observed_at":"2026-08-08T08:37:56.348640Z","submitted_at":"2026-06-03T20:06:52Z","title":"Willing but Unable: Separating Refusal from Capability in Code LLMs via Abliteration","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-06-28T05:19:58.062861Z"},"links":{"citing_paper":"/paper/2606.05396"},"observation_digest":"sha256:111b37fdd7db7eb0ce94357f0bbc6689934ca6ef7d13c3c9d296bdf25d6202c3","observation_id":"a05b4f24-4139-4611-a538-84c81d5e2d62","resolution":{"observed_at":"2026-06-28T05:19:58.062861Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T05:19:58.062861Z","title":"Evil: exploiting software via natural language,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2606.05396","last_updated":"2026-06-03T20:06:52Z","snapshot_observed_at":"2026-08-08T08:37:56.348640Z","submitted_at":"2026-06-03T20:06:52Z","title":"Willing but Unable: Separating Refusal from Capability in Code LLMs via Abliteration","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-06-28T05:19:58.062861Z"},"links":{"citing_paper":"/paper/2606.05396"},"observation_digest":"sha256:7105318b74a5dce7338f77b85346d1ed38d3324d15d12a0402d7f2f163726152","observation_id":"bf65e79a-828c-49d9-80f6-18d6dc5512cf","resolution":{"observed_at":"2026-06-28T05:19:58.062861Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T05:19:58.062861Z","title":"Shellcode_ia32: A dataset for automatic shellcode generation,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2606.05396","last_updated":"2026-06-03T20:06:52Z","snapshot_observed_at":"2026-08-08T08:37:56.348640Z","submitted_at":"2026-06-03T20:06:52Z","title":"Willing but Unable: Separating Refusal from Capability in Code LLMs via Abliteration","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-06-28T05:19:58.062861Z"},"links":{"citing_paper":"/paper/2606.05396"},"observation_digest":"sha256:8edef93b0f7cf7ba65b64f9fc77a17228527f1874413d50609b14084c4624925","observation_id":"de310425-ca3b-4186-b6c3-98f3ea9d00df","resolution":{"observed_at":"2026-06-28T05:19:58.062861Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1007/s10515-022-00331-3","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Can we generate shellcodes via natural language? an empirical study,","venue":"Automated Software Engineering","work_id":"b88aabe1-cd89-4472-bc9b-8c16f44419e9","year":2022},"citing_paper":{"arxiv_id":"2606.05396","last_updated":"2026-06-03T20:06:52Z","snapshot_observed_at":"2026-08-08T08:37:56.348640Z","submitted_at":"2026-06-03T20:06:52Z","title":"Willing but Unable: Separating Refusal from Capability in Code LLMs via Abliteration","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-06-28T05:19:58.062861Z"},"links":{"citing_paper":"/paper/2606.05396"},"observation_digest":"sha256:349a440aa99b8d73483b76f9d356a771cd03f437586dcc4a50c489e610f6f5bf","observation_id":"f5dffebc-4945-4edd-b74a-60c3d85fb139","resolution":{"observed_at":"2026-06-28T05:21:39.883385Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T05:19:58.062861Z","title":"Enhancing ai-based generation of software exploits with contextual information,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.05396","last_updated":"2026-06-03T20:06:52Z","snapshot_observed_at":"2026-08-08T08:37:56.348640Z","submitted_at":"2026-06-03T20:06:52Z","title":"Willing but Unable: Separating Refusal from Capability in Code LLMs via Abliteration","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-06-28T05:19:58.062861Z"},"links":{"citing_paper":"/paper/2606.05396"},"observation_digest":"sha256:d54af610997a0d5a6ef387bce491bb635e4066eda498707eb3ed1eedc0800b4f","observation_id":"2abdb96f-6798-47c9-a62f-6e1fa0f192ec","resolution":{"observed_at":"2026-06-28T05:19:58.062861Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T05:19:58.062861Z","title":"Reading between the lines: Context-aware ai-based generation of software exploits,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2606.05396","last_updated":"2026-06-03T20:06:52Z","snapshot_observed_at":"2026-08-08T08:37:56.348640Z","submitted_at":"2026-06-03T20:06:52Z","title":"Willing but Unable: Separating Refusal from Capability in Code LLMs via Abliteration","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-06-28T05:19:58.062861Z"},"links":{"citing_paper":"/paper/2606.05396"},"observation_digest":"sha256:b4772ac58a35e5fa9e64707a56256c49ca0f121f57a4afe3841a0244a676b4b3","observation_id":"2fcc1c61-a58a-4997-971e-42f78107335f","resolution":{"observed_at":"2026-06-28T05:19:58.062861Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T05:19:58.062861Z","title":"The power of words: Generating{PowerShell} attacks from natural language,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.05396","last_updated":"2026-06-03T20:06:52Z","snapshot_observed_at":"2026-08-08T08:37:56.348640Z","submitted_at":"2026-06-03T20:06:52Z","title":"Willing but Unable: Separating Refusal from Capability in Code LLMs via Abliteration","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-06-28T05:19:58.062861Z"},"links":{"citing_paper":"/paper/2606.05396"},"observation_digest":"sha256:08e666f11d3611e5e37a02d28808b3cb5b49c5d60091c794bb74f23da1c163a0","observation_id":"cdaa0b7d-e932-48fb-9789-5c24568e751a","resolution":{"observed_at":"2026-06-28T05:19:58.062861Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T05:19:58.062861Z","title":"Using ai to inject vulnerabilities in python code,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2606.05396","last_updated":"2026-06-03T20:06:52Z","snapshot_observed_at":"2026-08-08T08:37:56.348640Z","submitted_at":"2026-06-03T20:06:52Z","title":"Willing but Unable: Separating Refusal from Capability in Code LLMs via Abliteration","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-06-28T05:19:58.062861Z"},"links":{"citing_paper":"/paper/2606.05396"},"observation_digest":"sha256:e937cb3ee655ac1ecc5e8dab26265c9a3227d91d094f6c7366903800d9ae9538","observation_id":"28cd2384-96dd-42c7-80eb-b90c809d8e58","resolution":{"observed_at":"2026-06-28T05:19:58.062861Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2409.12186","last_updated":"2024-11-12T13:24:25Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-09-18T17:57:57Z","title":"Qwen2.5-Coder Technical Report","version":3},"cited_work":{"arxiv_id":"2409.12186","doi":"10.48550/arxiv.2409.12186","metadata_source":"pith","pith_arxiv_id":"2409.12186","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Qwen2.5-Coder Technical Report","venue":"cs.CL","work_id":"09ba463d-6377-4017-9801-444ffb94b056","year":2024},"citing_paper":{"arxiv_id":"2606.05396","last_updated":"2026-06-03T20:06:52Z","snapshot_observed_at":"2026-08-08T08:37:56.348640Z","submitted_at":"2026-06-03T20:06:52Z","title":"Willing but Unable: Separating Refusal from Capability in Code LLMs via Abliteration","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-06-28T05:19:58.062861Z"},"links":{"cited_paper":"/paper/2409.12186","citing_paper":"/paper/2606.05396"},"observation_digest":"sha256:ef43e78f5fd789aca8bd41b603d367c098e00399615bc06251ae865ceafdfa06","observation_id":"32d8cf1b-8c46-4785-900c-8e9e53294dce","resolution":{"observed_at":"2026-07-02T10:06:51.664997Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-07-11T05:18:55.772185+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-11T05:18:55.772185+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T05:19:58.062861Z","title":"Obliteratus: An open platform for analysis-informed refusal removal in large language models,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2606.05396","last_updated":"2026-06-03T20:06:52Z","snapshot_observed_at":"2026-08-08T08:37:56.348640Z","submitted_at":"2026-06-03T20:06:52Z","title":"Willing but Unable: Separating Refusal from Capability in Code LLMs via Abliteration","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-06-28T05:19:58.062861Z"},"links":{"citing_paper":"/paper/2606.05396"},"observation_digest":"sha256:860afa3bb61b76be35a8c3b991a1febcf9ec1345a83847186b7e6c79e2b61a55","observation_id":"0e068cb8-258f-4c5f-b4ef-b6b67267f1e1","resolution":{"observed_at":"2026-06-28T05:19:58.062861Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2606.05396","last_updated":"2026-06-03T20:06:52Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-08T08:37:56.348640Z","submitted_at":"2026-06-03T20:06:52Z","title":"Willing but Unable: Separating Refusal from Capability in Code LLMs via Abliteration"},"reference_resolution":{"displayed":26,"state_counts":{"malformed_identifier":0,"metadata_mismatch":3,"parse_uncertain":0,"unresolved":19,"verified_exact":4,"verified_fuzzy":0},"total_outbound_references":26},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 26 of 26 outbound references and 0 inbound Pith citation observations for arXiv:2606.05396."}