{"as_of":"2026-08-20T22:59:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:826cfe28627006563158833940fe3915dfaed76738f9d51a878894d688d6529f","coverage":[{"denominator":12,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":12,"source":"paper_references, paper_reference_links","source_observed_at":"2026-07-07T18:42:41.778771Z","state":"measured"},{"denominator":12,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":12,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-20T06:33:59.587034+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2607.05300/citation-record","integrity":"/paper/2607.05300/integrity","json":"/paper/2607.05300/citation-record.json","paper":"/paper/2607.05300"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-07T18:44:06.153594Z","title":"Ainsworth, Jonathan Hayase, and Siddhartha Srinivasa","venue":null,"work_id":"45e7de2b-936d-4f2d-a731-1e240edc32f8","year":2023},"citing_paper":{"arxiv_id":"2607.05300","last_updated":"2026-07-06T16:43:04Z","snapshot_observed_at":"2026-08-12T18:27:39.589769Z","submitted_at":"2026-07-06T16:43:04Z","title":"Learning Only What Valid Adapters Can Express: Subspace-Constrained Adaptation Against Fine-Tuning Poisoning","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-07-07T18:42:41.778771Z"},"links":{"citing_paper":"/paper/2607.05300"},"observation_digest":"sha256:3de8b740472ca9156228f9d39243a7eef497f3de61b7226f7e5c94a67848781d","observation_id":"a5380fee-bb6d-4980-8fe7-f818c50df5db","resolution":{"observed_at":"2026-07-07T18:44:06.155940Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2407.00066","last_updated":"2025-05-29T20:47:12Z","snapshot_observed_at":"2026-08-19T15:30:59.348284Z","submitted_at":"2024-06-17T15:21:35Z","title":"Compress then Serve: Serving Thousands of LoRA Adapters with Little Overhead","version":4},"cited_work":{"arxiv_id":"2407.00066","doi":null,"metadata_source":"pith","pith_arxiv_id":"2407.00066","snapshot_observed_at":"2026-07-07T18:44:06.114619Z","title":"Compress then serve: Serving thousands of LoRA adapters with little overhead","venue":"cs.DC","work_id":"8fecbb61-b6ff-403f-b873-f1d2d41142ec","year":2024},"citing_paper":{"arxiv_id":"2607.05300","last_updated":"2026-07-06T16:43:04Z","snapshot_observed_at":"2026-08-12T18:27:39.589769Z","submitted_at":"2026-07-06T16:43:04Z","title":"Learning Only What Valid Adapters Can Express: Subspace-Constrained Adaptation Against Fine-Tuning Poisoning","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-07-07T18:42:41.778771Z"},"links":{"cited_paper":"/paper/2407.00066","citing_paper":"/paper/2607.05300"},"observation_digest":"sha256:6cf38768341d3f5d178586b047fc3965618b37ac82e14a68b9ce4e850a430367","observation_id":"97e9eb81-0733-447a-af4c-f4c312431f36","resolution":{"observed_at":"2026-07-07T18:44:06.116958Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.06105","last_updated":"2025-06-09T14:19:59Z","snapshot_observed_at":"2026-08-12T19:22:14.414860Z","submitted_at":"2025-06-06T14:11:27Z","title":"Text-to-LoRA: Instant Transformer Adaption","version":2},"cited_work":{"arxiv_id":"2506.06105","doi":null,"metadata_source":"pith","pith_arxiv_id":"2506.06105","snapshot_observed_at":"2026-07-07T18:44:06.124049Z","title":"Charakorn, E","venue":"cs.LG","work_id":"44dc8a61-cd57-47bf-a6a2-6878117791b9","year":2025},"citing_paper":{"arxiv_id":"2607.05300","last_updated":"2026-07-06T16:43:04Z","snapshot_observed_at":"2026-08-12T18:27:39.589769Z","submitted_at":"2026-07-06T16:43:04Z","title":"Learning Only What Valid Adapters Can Express: Subspace-Constrained Adaptation Against Fine-Tuning Poisoning","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-07-07T18:42:41.778771Z"},"links":{"cited_paper":"/paper/2506.06105","citing_paper":"/paper/2607.05300"},"observation_digest":"sha256:bd67f5f6c21ae856ff94085b80c18eebcf83fdb81b413549647c262f5a934375","observation_id":"c151dac2-b9c7-4321-af7b-0e02ae39675d","resolution":{"observed_at":"2026-07-07T18:44:06.126221Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2603.12681","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-07T18:44:06.092949Z","title":"Colluding lora: A compositional vulnerability in llm safety alignment.arXiv preprint arXiv:2603.12681, 2026","venue":null,"work_id":"e5ff1292-4b10-47c5-920a-c8b4e6a0c502","year":2026},"citing_paper":{"arxiv_id":"2607.05300","last_updated":"2026-07-06T16:43:04Z","snapshot_observed_at":"2026-08-12T18:27:39.589769Z","submitted_at":"2026-07-06T16:43:04Z","title":"Learning Only What Valid Adapters Can Express: Subspace-Constrained Adaptation Against Fine-Tuning Poisoning","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-07-07T18:42:41.778771Z"},"links":{"citing_paper":"/paper/2607.05300"},"observation_digest":"sha256:229e42fd6af49bf954a640e92e99f6a0577632b049075383b736f1516741f970","observation_id":"2f8bb66f-f356-4a1d-8c8c-4ab33ea2f5e0","resolution":{"observed_at":"2026-07-07T18:44:06.100966Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-07T18:44:06.141998Z","title":"Lorahub: Efficient cross-task generalization via dynamic lora composition","venue":null,"work_id":"4fcc2406-bc07-44fc-9780-d485fd34d2c3","year":2024},"citing_paper":{"arxiv_id":"2607.05300","last_updated":"2026-07-06T16:43:04Z","snapshot_observed_at":"2026-08-12T18:27:39.589769Z","submitted_at":"2026-07-06T16:43:04Z","title":"Learning Only What Valid Adapters Can Express: Subspace-Constrained Adaptation Against Fine-Tuning Poisoning","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-07-07T18:42:41.778771Z"},"links":{"citing_paper":"/paper/2607.05300"},"observation_digest":"sha256:9f8de32581f103d05f920e12029dad7c094c1b99a65010efe1bb6012a4623890","observation_id":"6e61ee56-16c6-4966-8f94-b32ddc5ab07c","resolution":{"observed_at":"2026-07-07T18:44:06.143848Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2502.04700","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-07T18:44:06.109822Z","title":"Eigenlorax: Recyclingadapters to findprincipalsubspacesforresource-efficientadaptationandinference.arXiv preprint arXiv:2502.04700, 2025","venue":null,"work_id":"7ed9c31d-75c6-4277-bf1a-c41492fdc51b","year":2025},"citing_paper":{"arxiv_id":"2607.05300","last_updated":"2026-07-06T16:43:04Z","snapshot_observed_at":"2026-08-12T18:27:39.589769Z","submitted_at":"2026-07-06T16:43:04Z","title":"Learning Only What Valid Adapters Can Express: Subspace-Constrained Adaptation Against Fine-Tuning Poisoning","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-07-07T18:42:41.778771Z"},"links":{"citing_paper":"/paper/2607.05300"},"observation_digest":"sha256:143a03fe736bf21a2e4e2bd1ed9f174d75ae4da45575ab987c9d090a4ae9e45c","observation_id":"85ae2151-82e5-446e-a9b1-cde13ac8a5fa","resolution":{"observed_at":"2026-07-07T18:44:06.112823Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.16406","last_updated":"2025-06-19T15:38:21Z","snapshot_observed_at":"2026-08-16T04:39:21.535380Z","submitted_at":"2025-06-19T15:38:21Z","title":"Drag-and-Drop LLMs: Zero-Shot Prompt-to-Weights","version":1},"cited_work":{"arxiv_id":"2506.16406","doi":"10.48550/arxiv.2506.16406","metadata_source":"pith","pith_arxiv_id":"2506.16406","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Drag- and-drop llms: Zero-shot prompt-to-weights","venue":"cs.LG","work_id":"24dadd19-6e5c-49c6-a49e-91376963eab7","year":2025},"citing_paper":{"arxiv_id":"2607.05300","last_updated":"2026-07-06T16:43:04Z","snapshot_observed_at":"2026-08-12T18:27:39.589769Z","submitted_at":"2026-07-06T16:43:04Z","title":"Learning Only What Valid Adapters Can Express: Subspace-Constrained Adaptation Against Fine-Tuning Poisoning","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-07-07T18:42:41.778771Z"},"links":{"cited_paper":"/paper/2506.16406","citing_paper":"/paper/2607.05300"},"observation_digest":"sha256:7991d03ad00f2f0aa694abaa89994b1c5a62b6ea2dfc8f8e37cee08b46624c41","observation_id":"2c128321-9f51-4e83-aece-8f56f0e6371c","resolution":{"observed_at":"2026-07-07T18:44:06.107673Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-07T18:44:06.150587Z","title":"Fine- tuning aligned language models compromises safety, even when users do not intend to! InInternational Conference on Learning Representations, 2024","venue":null,"work_id":"9faad58a-f009-4641-a4b4-25b5c0022adb","year":2024},"citing_paper":{"arxiv_id":"2607.05300","last_updated":"2026-07-06T16:43:04Z","snapshot_observed_at":"2026-08-12T18:27:39.589769Z","submitted_at":"2026-07-06T16:43:04Z","title":"Learning Only What Valid Adapters Can Express: Subspace-Constrained Adaptation Against Fine-Tuning Poisoning","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-07-07T18:42:41.778771Z"},"links":{"citing_paper":"/paper/2607.05300"},"observation_digest":"sha256:175aaf3fe956f9eb0ed9c0f279b644f89a5763ee5486d59df08f1863b8afe809","observation_id":"bf07104b-9fe9-47e4-aae0-75240c87a341","resolution":{"observed_at":"2026-07-07T18:44:06.152817Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.07778","last_updated":"2024-08-21T23:07:49Z","snapshot_observed_at":"2026-08-20T03:16:41.911328Z","submitted_at":"2024-06-12T00:01:32Z","title":"A Study of Backdoors in Instruction Fine-tuned Language Models","version":2},"cited_work":{"arxiv_id":"2406.07778","doi":null,"metadata_source":"pith","pith_arxiv_id":"2406.07778","snapshot_observed_at":"2026-07-07T18:44:06.119104Z","title":"A study of backdoors in instruction fine-tuned language models","venue":"cs.CR","work_id":"bd607cc4-5bf1-4bcf-99a9-e49d574fb7be","year":2024},"citing_paper":{"arxiv_id":"2607.05300","last_updated":"2026-07-06T16:43:04Z","snapshot_observed_at":"2026-08-12T18:27:39.589769Z","submitted_at":"2026-07-06T16:43:04Z","title":"Learning Only What Valid Adapters Can Express: Subspace-Constrained Adaptation Against Fine-Tuning Poisoning","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-07-07T18:42:41.778771Z"},"links":{"cited_paper":"/paper/2406.07778","citing_paper":"/paper/2607.05300"},"observation_digest":"sha256:ccddc7e832131da35168a5da5af405f3a464101f52c5cc471f219e3dc2648f22","observation_id":"2d7f9456-ab32-4708-a5c9-f81a5b20477c","resolution":{"observed_at":"2026-07-07T18:44:06.121630Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-07T18:44:06.144672Z","title":"Rusu, Dushyant Rao, Jakub Sygnowski, Oriol Vinyals, Razvan Pascanu, Simon Osindero, and Raia Hadsell","venue":null,"work_id":"8061d49e-eac7-45e5-b4c4-b2991cb3fdc3","year":2019},"citing_paper":{"arxiv_id":"2607.05300","last_updated":"2026-07-06T16:43:04Z","snapshot_observed_at":"2026-08-12T18:27:39.589769Z","submitted_at":"2026-07-06T16:43:04Z","title":"Learning Only What Valid Adapters Can Express: Subspace-Constrained Adaptation Against Fine-Tuning Poisoning","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-07-07T18:42:41.778771Z"},"links":{"citing_paper":"/paper/2607.05300"},"observation_digest":"sha256:272cf2c4839ac441095cbdceb5b627f0a9870960e6d52880bcb70c188307a2ba","observation_id":"aaf221c9-ed95-499d-a384-74cab0f47f5d","resolution":{"observed_at":"2026-07-07T18:44:06.146638Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-07T18:44:06.147727Z","title":"Model zoos: A dataset of diverse populations of neural network models","venue":null,"work_id":"4f44f20a-6c2c-4a98-977a-fe1e866aba74","year":2022},"citing_paper":{"arxiv_id":"2607.05300","last_updated":"2026-07-06T16:43:04Z","snapshot_observed_at":"2026-08-12T18:27:39.589769Z","submitted_at":"2026-07-06T16:43:04Z","title":"Learning Only What Valid Adapters Can Express: Subspace-Constrained Adaptation Against Fine-Tuning Poisoning","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-07-07T18:42:41.778771Z"},"links":{"citing_paper":"/paper/2607.05300"},"observation_digest":"sha256:64d246ef9d7c6910da16c315743c63b3fdbe3a03016a40946dfdff537a2315d9","observation_id":"bb1d5b00-685a-4762-b1ca-af94b940a25c","resolution":{"observed_at":"2026-07-07T18:44:06.149832Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-07T18:44:06.139189Z","title":"Poisoninglanguagemodelsduringinstruction tuning","venue":null,"work_id":"1431d704-447a-4a9f-9ad1-7bf0e884809c","year":2023},"citing_paper":{"arxiv_id":"2607.05300","last_updated":"2026-07-06T16:43:04Z","snapshot_observed_at":"2026-08-12T18:27:39.589769Z","submitted_at":"2026-07-06T16:43:04Z","title":"Learning Only What Valid Adapters Can Express: Subspace-Constrained Adaptation Against Fine-Tuning Poisoning","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-07-07T18:42:41.778771Z"},"links":{"citing_paper":"/paper/2607.05300"},"observation_digest":"sha256:69fce383d3e60d7c141f6e95c742579144513b6d3559067ccd170c2092b39376","observation_id":"c6b9b45f-3237-4eca-99b3-7993e09f54ad","resolution":{"observed_at":"2026-07-07T18:44:06.141127Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2607.05300","last_updated":"2026-07-06T16:43:04Z","latest_version":1,"primary_category":"cs.LG","snapshot_observed_at":"2026-08-12T18:27:39.589769Z","submitted_at":"2026-07-06T16:43:04Z","title":"Learning Only What Valid Adapters Can Express: Subspace-Constrained Adaptation Against Fine-Tuning Poisoning"},"reference_resolution":{"displayed":12,"state_counts":{"malformed_identifier":0,"metadata_mismatch":2,"parse_uncertain":0,"unresolved":0,"verified_exact":4,"verified_fuzzy":6},"total_outbound_references":12},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"thesis":"As of 20 August 2026, this Paper Citation Record lists 12 of 12 outbound references and 0 inbound Pith citation observations for arXiv:2607.05300."}