{"as_of":"2026-08-23T08:39:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:a34f709777390106b8bb405bc8200600a2ceb6c04339f8a08906fa49436bfa47","coverage":[{"denominator":25,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":25,"source":"paper_references, paper_reference_links","source_observed_at":"2026-06-27T01:33:34.151529Z","state":"measured"},{"denominator":25,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":25,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-23T06:30:58.430688+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2606.18322/citation-record","integrity":"/paper/2606.18322/integrity","json":"/paper/2606.18322/citation-record.json","paper":"/paper/2606.18322"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T01:33:34.151529Z","title":"Saes are good for steering – if you select the right features, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.18322","last_updated":"2026-06-16T15:04:17Z","snapshot_observed_at":"2026-08-19T11:13:52.254842Z","submitted_at":"2026-06-16T15:04:17Z","title":"SAE Interventions are Unreliable: Post-Intervention Recovery of Suppressed Behavior","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-06-27T01:33:34.151529Z"},"links":{"citing_paper":"/paper/2606.18322"},"observation_digest":"sha256:5c26c1bcc9b69b75f6b41bb1a728324105bff20f2a79f14b6158ad84451f2cfe","observation_id":"caf6ce93-f816-4a34-aa15-78cb94015289","resolution":{"observed_at":"2026-06-27T01:33:34.151529Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T01:33:34.151529Z","title":"Obfuscated activations bypass llm latent-space defenses, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.18322","last_updated":"2026-06-16T15:04:17Z","snapshot_observed_at":"2026-08-19T11:13:52.254842Z","submitted_at":"2026-06-16T15:04:17Z","title":"SAE Interventions are Unreliable: Post-Intervention Recovery of Suppressed Behavior","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-06-27T01:33:34.151529Z"},"links":{"citing_paper":"/paper/2606.18322"},"observation_digest":"sha256:6103f3a37c7bd31587d828d38026f308069b84de7dbc67fda4fade46ec75d476","observation_id":"65837b4b-7ab8-475d-ad1d-927a6b908ba4","resolution":{"observed_at":"2026-06-27T01:33:34.151529Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T01:33:34.151529Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2606.18322","last_updated":"2026-06-16T15:04:17Z","snapshot_observed_at":"2026-08-19T11:13:52.254842Z","submitted_at":"2026-06-16T15:04:17Z","title":"SAE Interventions are Unreliable: Post-Intervention Recovery of Suppressed Behavior","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-06-27T01:33:34.151529Z"},"links":{"citing_paper":"/paper/2606.18322"},"observation_digest":"sha256:c15b82f0ac672be4170d273003f9119b06ce75a9ebd1abb585883bf47ce99fdc","observation_id":"43cb661a-327d-4873-a040-6832f11694b5","resolution":{"observed_at":"2026-06-27T01:33:34.151529Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T01:33:34.151529Z","title":"A is for absorption: Studying feature splitting and absorption in sparse autoen- coders, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.18322","last_updated":"2026-06-16T15:04:17Z","snapshot_observed_at":"2026-08-19T11:13:52.254842Z","submitted_at":"2026-06-16T15:04:17Z","title":"SAE Interventions are Unreliable: Post-Intervention Recovery of Suppressed Behavior","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-06-27T01:33:34.151529Z"},"links":{"citing_paper":"/paper/2606.18322"},"observation_digest":"sha256:74c5f847a89148791d6319a21ed6115a0d602102e5c841cc9f1579c9f2170c79","observation_id":"ab8b8c45-c1bf-4c30-9c5b-dbf63c562204","resolution":{"observed_at":"2026-06-27T01:33:34.151529Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T01:33:34.151529Z","title":"Feature hedging: Correlated features break narrow sparse autoencoders, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.18322","last_updated":"2026-06-16T15:04:17Z","snapshot_observed_at":"2026-08-19T11:13:52.254842Z","submitted_at":"2026-06-16T15:04:17Z","title":"SAE Interventions are Unreliable: Post-Intervention Recovery of Suppressed Behavior","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-06-27T01:33:34.151529Z"},"links":{"citing_paper":"/paper/2606.18322"},"observation_digest":"sha256:53612871eb71ee60dad459b947cdc8d02b85b86ca9f27233711a46202d288718","observation_id":"c6d959ae-5260-4e5f-a782-75c3f136683e","resolution":{"observed_at":"2026-06-27T01:33:34.151529Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T01:33:34.151529Z","title":"Sparse autoencoders find highly interpretable features in language models, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2606.18322","last_updated":"2026-06-16T15:04:17Z","snapshot_observed_at":"2026-08-19T11:13:52.254842Z","submitted_at":"2026-06-16T15:04:17Z","title":"SAE Interventions are Unreliable: Post-Intervention Recovery of Suppressed Behavior","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-06-27T01:33:34.151529Z"},"links":{"citing_paper":"/paper/2606.18322"},"observation_digest":"sha256:c4bbc916ecdb06e24742a15ed6862f5bdb5d4afbd3fb07c8a61d4e88685e5832","observation_id":"61c10199-7a50-48be-9201-a5a74f66fd47","resolution":{"observed_at":"2026-06-27T01:33:34.151529Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T01:33:34.151529Z","title":"Toy models of superposition, 2022","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2606.18322","last_updated":"2026-06-16T15:04:17Z","snapshot_observed_at":"2026-08-19T11:13:52.254842Z","submitted_at":"2026-06-16T15:04:17Z","title":"SAE Interventions are Unreliable: Post-Intervention Recovery of Suppressed Behavior","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-06-27T01:33:34.151529Z"},"links":{"citing_paper":"/paper/2606.18322"},"observation_digest":"sha256:316d6d6e97f9ec08ca8fb63391d03be4cacd263c7f7dc39bd26c7e83facb0ae3","observation_id":"1dc74c2d-5094-454f-b2fb-2996cfa433d9","resolution":{"observed_at":"2026-06-27T01:33:34.151529Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T01:33:34.151529Z","title":"Applying sparse autoencoders to unlearn knowledge in language models, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.18322","last_updated":"2026-06-16T15:04:17Z","snapshot_observed_at":"2026-08-19T11:13:52.254842Z","submitted_at":"2026-06-16T15:04:17Z","title":"SAE Interventions are Unreliable: Post-Intervention Recovery of Suppressed Behavior","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-06-27T01:33:34.151529Z"},"links":{"citing_paper":"/paper/2606.18322"},"observation_digest":"sha256:c4016e84c377001c7375a527569a691056cb70bd617c261d5bc5d4f0e260178c","observation_id":"dabeb51e-9f13-4a0c-bb37-489628c6c39b","resolution":{"observed_at":"2026-06-27T01:33:34.151529Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T01:33:34.151529Z","title":"Scaling and evaluating sparse autoencoders, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.18322","last_updated":"2026-06-16T15:04:17Z","snapshot_observed_at":"2026-08-19T11:13:52.254842Z","submitted_at":"2026-06-16T15:04:17Z","title":"SAE Interventions are Unreliable: Post-Intervention Recovery of Suppressed Behavior","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-06-27T01:33:34.151529Z"},"links":{"citing_paper":"/paper/2606.18322"},"observation_digest":"sha256:232831b83fd99a4ea1175826d2e786a54a28fcd5b7722a35d996c51ab055985e","observation_id":"3726d579-3d46-4270-b4c5-9e88193b8d96","resolution":{"observed_at":"2026-06-27T01:33:34.151529Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T01:33:34.151529Z","title":"Saebench: A comprehensive benchmark for sparse autoencoders in language model interpretability, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.18322","last_updated":"2026-06-16T15:04:17Z","snapshot_observed_at":"2026-08-19T11:13:52.254842Z","submitted_at":"2026-06-16T15:04:17Z","title":"SAE Interventions are Unreliable: Post-Intervention Recovery of Suppressed Behavior","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-06-27T01:33:34.151529Z"},"links":{"citing_paper":"/paper/2606.18322"},"observation_digest":"sha256:9a4d3b5510dc369fd2875053dddedc3ece17e1baefa44d0b3a38167aeed229eb","observation_id":"7a9eb5ee-c4fe-4582-b82d-149665cbd45a","resolution":{"observed_at":"2026-06-27T01:33:34.151529Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T01:33:34.151529Z","title":"Inference- time intervention: Eliciting truthful answers from a language model, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2606.18322","last_updated":"2026-06-16T15:04:17Z","snapshot_observed_at":"2026-08-19T11:13:52.254842Z","submitted_at":"2026-06-16T15:04:17Z","title":"SAE Interventions are Unreliable: Post-Intervention Recovery of Suppressed Behavior","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-06-27T01:33:34.151529Z"},"links":{"citing_paper":"/paper/2606.18322"},"observation_digest":"sha256:5b576414aad6079a5f32e652f8972df1f7f7a3201890496f6081e31df3299d7a","observation_id":"d9f31c5e-f84f-4d6d-b6ae-0c31647d8419","resolution":{"observed_at":"2026-06-27T01:33:34.151529Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T01:33:34.151529Z","title":"Michaud, David D","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.18322","last_updated":"2026-06-16T15:04:17Z","snapshot_observed_at":"2026-08-19T11:13:52.254842Z","submitted_at":"2026-06-16T15:04:17Z","title":"SAE Interventions are Unreliable: Post-Intervention Recovery of Suppressed Behavior","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-06-27T01:33:34.151529Z"},"links":{"citing_paper":"/paper/2606.18322"},"observation_digest":"sha256:b3e0356aa6023eea17e0a851061318c795be0a1e94ff935160534aecc36d85c9","observation_id":"f6e8b154-5f52-4289-af91-4810a60de126","resolution":{"observed_at":"2026-06-27T01:33:34.151529Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T01:33:34.151529Z","title":"Gemma scope: Open sparse autoencoders everywhere all at once on gemma 2, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.18322","last_updated":"2026-06-16T15:04:17Z","snapshot_observed_at":"2026-08-19T11:13:52.254842Z","submitted_at":"2026-06-16T15:04:17Z","title":"SAE Interventions are Unreliable: Post-Intervention Recovery of Suppressed Behavior","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-06-27T01:33:34.151529Z"},"links":{"citing_paper":"/paper/2606.18322"},"observation_digest":"sha256:ea3c04d76b71c97138891452b96faa401100ae72e09b8a063de01d6e8f96104a","observation_id":"de97e201-70de-4796-94af-d4993b2f5893","resolution":{"observed_at":"2026-06-27T01:33:34.151529Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T01:33:34.151529Z","title":"Towards principled evaluations of sparse autoencoders for interpretability and control, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.18322","last_updated":"2026-06-16T15:04:17Z","snapshot_observed_at":"2026-08-19T11:13:52.254842Z","submitted_at":"2026-06-16T15:04:17Z","title":"SAE Interventions are Unreliable: Post-Intervention Recovery of Suppressed Behavior","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-06-27T01:33:34.151529Z"},"links":{"citing_paper":"/paper/2606.18322"},"observation_digest":"sha256:e61bbb2fd549ca591f47ccde7d0415b4382b399b62607168165b95f9d80af700","observation_id":"332b05da-158c-4375-a29d-87e77a7081e3","resolution":{"observed_at":"2026-06-27T01:33:34.151529Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T01:33:34.151529Z","title":"Michaud, Yonatan Belinkov, David Bau, and Aaron Mueller","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.18322","last_updated":"2026-06-16T15:04:17Z","snapshot_observed_at":"2026-08-19T11:13:52.254842Z","submitted_at":"2026-06-16T15:04:17Z","title":"SAE Interventions are Unreliable: Post-Intervention Recovery of Suppressed Behavior","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-06-27T01:33:34.151529Z"},"links":{"citing_paper":"/paper/2606.18322"},"observation_digest":"sha256:e471a1d6b63009634347793015848226d09d0a551edb920ddf4f1a1ed371fff7","observation_id":"84d26531-f337-488d-8a7f-374acffe87c1","resolution":{"observed_at":"2026-06-27T01:33:34.151529Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T01:33:34.151529Z","title":"Steering language model refusal with sparse autoencoders, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.18322","last_updated":"2026-06-16T15:04:17Z","snapshot_observed_at":"2026-08-19T11:13:52.254842Z","submitted_at":"2026-06-16T15:04:17Z","title":"SAE Interventions are Unreliable: Post-Intervention Recovery of Suppressed Behavior","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-06-27T01:33:34.151529Z"},"links":{"citing_paper":"/paper/2606.18322"},"observation_digest":"sha256:afa7e1706fa29389172e1ef708ce08d931d168fca6142cf5982c390101f9a8a8","observation_id":"4ef34202-2bff-4557-92ef-20083012ea0e","resolution":{"observed_at":"2026-06-27T01:33:34.151529Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T01:33:34.151529Z","title":"Steering llama 2 via contrastive activation addition, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.18322","last_updated":"2026-06-16T15:04:17Z","snapshot_observed_at":"2026-08-19T11:13:52.254842Z","submitted_at":"2026-06-16T15:04:17Z","title":"SAE Interventions are Unreliable: Post-Intervention Recovery of Suppressed Behavior","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-06-27T01:33:34.151529Z"},"links":{"citing_paper":"/paper/2606.18322"},"observation_digest":"sha256:de8ddf4dd449f74bff3b1bb82a87116ca2a76aa9603e963a7a8c405ca89a46da","observation_id":"06c30836-41d5-4885-ad3b-0241903a110b","resolution":{"observed_at":"2026-06-27T01:33:34.151529Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2203.14987","last_updated":"2022-03-28T18:00:51Z","snapshot_observed_at":"2026-07-06T12:53:50.496350Z","submitted_at":"2022-03-28T18:00:51Z","title":"Multilingual Knowledge Graph Completion with Self-Supervised Adaptive Graph Alignment","version":1},"cited_work":{"arxiv_id":"2203.14987","doi":"10.48550/arxiv","metadata_source":"doi_reference","pith_arxiv_id":"2203.14987","snapshot_observed_at":"2026-07-09T21:46:34.506658Z","title":"Dickerson","venue":"cs.AI","work_id":"5c2060c6-427c-4321-be22-49ccae439d80","year":2025},"citing_paper":{"arxiv_id":"2606.18322","last_updated":"2026-06-16T15:04:17Z","snapshot_observed_at":"2026-08-19T11:13:52.254842Z","submitted_at":"2026-06-16T15:04:17Z","title":"SAE Interventions are Unreliable: Post-Intervention Recovery of Suppressed Behavior","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-06-27T01:33:34.151529Z"},"links":{"cited_paper":"/paper/2203.14987","citing_paper":"/paper/2606.18322"},"observation_digest":"sha256:4da2ec53e36edd0dd07b3894772840af5fedf3922d2884a248b574259832599e","observation_id":"fcd7346b-5a98-4581-a3b0-1a977fb84336","resolution":{"observed_at":"2026-06-27T01:40:21.283652Z","resolver_source":"doi_truncated","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T01:33:34.151529Z","title":"Latentguard: Controllable latent steering for robust refusal of attacks and reliable response generation, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.18322","last_updated":"2026-06-16T15:04:17Z","snapshot_observed_at":"2026-08-19T11:13:52.254842Z","submitted_at":"2026-06-16T15:04:17Z","title":"SAE Interventions are Unreliable: Post-Intervention Recovery of Suppressed Behavior","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-06-27T01:33:34.151529Z"},"links":{"citing_paper":"/paper/2606.18322"},"observation_digest":"sha256:3ffdb1e1d48ef93c43243e6a67b8ca9e8d9919c0fc8fec4134214964fff962c3","observation_id":"08c74058-d575-42cc-aa99-a09be1779c98","resolution":{"observed_at":"2026-06-27T01:33:34.151529Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T01:33:34.151529Z","title":"Turner, Callum McDougall, Monte MacDiarmid, Alex Tamkin, Esin Durmus, Tristan Hume, Francesco Mosconi, C","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.18322","last_updated":"2026-06-16T15:04:17Z","snapshot_observed_at":"2026-08-19T11:13:52.254842Z","submitted_at":"2026-06-16T15:04:17Z","title":"SAE Interventions are Unreliable: Post-Intervention Recovery of Suppressed Behavior","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-06-27T01:33:34.151529Z"},"links":{"citing_paper":"/paper/2606.18322"},"observation_digest":"sha256:b10ea749b022e7ff74a727b9aa9a84901080468b5359c2fbaa47b5df91734fed","observation_id":"7fa0c743-411b-4090-915f-f817367e8922","resolution":{"observed_at":"2026-06-27T01:33:34.151529Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T01:33:34.151529Z","title":"Vazquez, Ulisse Mini, and Monte MacDiarmid","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2606.18322","last_updated":"2026-06-16T15:04:17Z","snapshot_observed_at":"2026-08-19T11:13:52.254842Z","submitted_at":"2026-06-16T15:04:17Z","title":"SAE Interventions are Unreliable: Post-Intervention Recovery of Suppressed Behavior","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-06-27T01:33:34.151529Z"},"links":{"citing_paper":"/paper/2606.18322"},"observation_digest":"sha256:e1ae6a2709fef2450b922c69a00e8cb8dab8f953f77b8423eea0e111858d2457","observation_id":"e4834726-ae9c-4ff2-b8f2-4173ddb66951","resolution":{"observed_at":"2026-06-27T01:33:34.151529Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T01:33:34.151529Z","title":"Interpretability in the wild: A circuit for indirect object identification in gpt-2 small, 2022","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2606.18322","last_updated":"2026-06-16T15:04:17Z","snapshot_observed_at":"2026-08-19T11:13:52.254842Z","submitted_at":"2026-06-16T15:04:17Z","title":"SAE Interventions are Unreliable: Post-Intervention Recovery of Suppressed Behavior","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-06-27T01:33:34.151529Z"},"links":{"citing_paper":"/paper/2606.18322"},"observation_digest":"sha256:8a4a91eb373adeac803b6c0243c94cfe2183f78763841b80c10760154a40b47c","observation_id":"fe20f161-9b67-423a-9126-2bc297b57693","resolution":{"observed_at":"2026-06-27T01:33:34.151529Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T01:33:34.151529Z","title":"Understanding refusal in language models with sparse autoencoders, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.18322","last_updated":"2026-06-16T15:04:17Z","snapshot_observed_at":"2026-08-19T11:13:52.254842Z","submitted_at":"2026-06-16T15:04:17Z","title":"SAE Interventions are Unreliable: Post-Intervention Recovery of Suppressed Behavior","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-06-27T01:33:34.151529Z"},"links":{"citing_paper":"/paper/2606.18322"},"observation_digest":"sha256:492489a4d5e7b78daaa8d27fabd3f93b36c05f6086899d8c19934b85584e9b6f","observation_id":"02ed2835-17ae-46cd-8a51-514a23781301","resolution":{"observed_at":"2026-06-27T01:33:34.151529Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T01:33:34.151529Z","title":"Byun, Zifan Wang, Alex Mallen, Steven Basart, Sanmi Koyejo, Dawn Song, Matt Fredrikson, J","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2606.18322","last_updated":"2026-06-16T15:04:17Z","snapshot_observed_at":"2026-08-19T11:13:52.254842Z","submitted_at":"2026-06-16T15:04:17Z","title":"SAE Interventions are Unreliable: Post-Intervention Recovery of Suppressed Behavior","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-06-27T01:33:34.151529Z"},"links":{"citing_paper":"/paper/2606.18322"},"observation_digest":"sha256:a00358a5ce8777d32d0695a821f30b73863f7112f9d157848616ffc5716acbf5","observation_id":"1e20e7a2-e569-4671-b53e-6c1383bc45da","resolution":{"observed_at":"2026-06-27T01:33:34.151529Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T01:33:34.151529Z","title":"I cannot","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.18322","last_updated":"2026-06-16T15:04:17Z","snapshot_observed_at":"2026-08-19T11:13:52.254842Z","submitted_at":"2026-06-16T15:04:17Z","title":"SAE Interventions are Unreliable: Post-Intervention Recovery of Suppressed Behavior","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-06-27T01:33:34.151529Z"},"links":{"citing_paper":"/paper/2606.18322"},"observation_digest":"sha256:27d4e3f21b491cde877cdccc758419c02fdbba4ebb99c9c060ad49a480efd08f","observation_id":"abfa22c9-ea1a-41f7-952d-b9e0129048ca","resolution":{"observed_at":"2026-06-27T01:33:34.151529Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2606.18322","last_updated":"2026-06-16T15:04:17Z","latest_version":1,"primary_category":"cs.LG","snapshot_observed_at":"2026-08-19T11:13:52.254842Z","submitted_at":"2026-06-16T15:04:17Z","title":"SAE Interventions are Unreliable: Post-Intervention Recovery of Suppressed Behavior"},"reference_resolution":{"displayed":25,"state_counts":{"malformed_identifier":1,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":24,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":25},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"thesis":"As of 23 August 2026, this Paper Citation Record lists 25 of 25 outbound references and 0 inbound Pith citation observations for arXiv:2606.18322."}