{"as_of":"2026-08-12T21:32:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:517afd9492793518a48d512e6380f8d1b09b22e0c3e67f7a1fb9814c47348788","coverage":[{"denominator":34,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":34,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-02T12:28:45.332809Z","state":"measured"},{"denominator":34,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":34,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-12T06:34:41.77262+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2607.19361/citation-record","integrity":"/paper/2607.19361/integrity","json":"/paper/2607.19361/citation-record.json","paper":"/paper/2607.19361"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T12:28:41.252710Z","title":"CoSafe: A collection of multi-turn LLM conversations for safety evaluation","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.19361","last_updated":"2026-06-03T02:55:17Z","snapshot_observed_at":"2026-08-10T02:39:52.769949Z","submitted_at":"2026-06-03T02:55:17Z","title":"Stateful Guardrails for Multi-Turn LLM Systems: A Conversational Risk Accumulation Framework","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-02T12:28:41.252710Z"},"links":{"citing_paper":"/paper/2607.19361"},"observation_digest":"sha256:5182b8658735d540bb4f7665a3e631f8da70cb095f6f4e6bba2817ebc51962c6","observation_id":"5d28862d-fae3-4ee1-a886-4824d2dfb5ac","resolution":{"observed_at":"2026-08-02T12:28:41.252710Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T12:28:41.464316Z","title":"Guide for mapping types of information and information systems to security categories","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19361","last_updated":"2026-06-03T02:55:17Z","snapshot_observed_at":"2026-08-10T02:39:52.769949Z","submitted_at":"2026-06-03T02:55:17Z","title":"Stateful Guardrails for Multi-Turn LLM Systems: A Conversational Risk Accumulation Framework","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-02T12:28:41.464316Z"},"links":{"citing_paper":"/paper/2607.19361"},"observation_digest":"sha256:1077c8d5618b1a6e8c94db93798706e4731c6aca9ab29a3aab8f8e94bb7136e9","observation_id":"19a12802-f880-4117-8fec-1909f2b22093","resolution":{"observed_at":"2026-08-02T12:28:41.464316Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T12:28:41.697918Z","title":"HarmBench: A standardized evaluation framework for automated red teaming and robust refusal","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19361","last_updated":"2026-06-03T02:55:17Z","snapshot_observed_at":"2026-08-10T02:39:52.769949Z","submitted_at":"2026-06-03T02:55:17Z","title":"Stateful Guardrails for Multi-Turn LLM Systems: A Conversational Risk Accumulation Framework","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-02T12:28:41.697918Z"},"links":{"citing_paper":"/paper/2607.19361"},"observation_digest":"sha256:ddf7edda2b9793043b2009b0cd94663b35b42851122f614224d638372ab86210","observation_id":"df5dd028-2dfc-48b2-8fc6-5d4bffc19e09","resolution":{"observed_at":"2026-08-02T12:28:41.697918Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-08-12T09:06:50.363435Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-08-02T12:28:41.764504Z","title":"Zico Kolter, and Matt Fredrikson","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.19361","last_updated":"2026-06-03T02:55:17Z","snapshot_observed_at":"2026-08-10T02:39:52.769949Z","submitted_at":"2026-06-03T02:55:17Z","title":"Stateful Guardrails for Multi-Turn LLM Systems: A Conversational Risk Accumulation Framework","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-02T12:28:41.764504Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2607.19361"},"observation_digest":"sha256:8fec1d5420b3f1edee4509ef6d7e0672dbe452279ddda8fdc5b6b1d9e463aaac","observation_id":"56207b61-97b9-4cad-8147-8521e1da08f7","resolution":{"observed_at":"2026-08-02T12:28:41.764504Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T12:28:41.900976Z","title":"Universal adver- sarial triggers for attacking and analyzing NLP","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2607.19361","last_updated":"2026-06-03T02:55:17Z","snapshot_observed_at":"2026-08-10T02:39:52.769949Z","submitted_at":"2026-06-03T02:55:17Z","title":"Stateful Guardrails for Multi-Turn LLM Systems: A Conversational Risk Accumulation Framework","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-02T12:28:41.900976Z"},"links":{"citing_paper":"/paper/2607.19361"},"observation_digest":"sha256:d645e25c928a39b94d79339631a7904f6ad87171090966f40a6dca759832fbec","observation_id":"68d59a61-f47f-4f7e-a60f-00c156878653","resolution":{"observed_at":"2026-08-02T12:28:41.900976Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T12:28:42.027602Z","title":"Do Anything Now","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.19361","last_updated":"2026-06-03T02:55:17Z","snapshot_observed_at":"2026-08-10T02:39:52.769949Z","submitted_at":"2026-06-03T02:55:17Z","title":"Stateful Guardrails for Multi-Turn LLM Systems: A Conversational Risk Accumulation Framework","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-02T12:28:42.027602Z"},"links":{"citing_paper":"/paper/2607.19361"},"observation_digest":"sha256:cd505be30de38774e3aabd1ac305d144d95e4dec283da1e6e4e91f949e27341f","observation_id":"c0e4edb4-4065-428e-b999-93282e9b7087","resolution":{"observed_at":"2026-08-02T12:28:42.027602Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T12:28:42.189772Z","title":"Jailbroken: How does LLM safety training fail? InAdvances in Neural Information Processing Systems, volume 36, pages 71988– 72006","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.19361","last_updated":"2026-06-03T02:55:17Z","snapshot_observed_at":"2026-08-10T02:39:52.769949Z","submitted_at":"2026-06-03T02:55:17Z","title":"Stateful Guardrails for Multi-Turn LLM Systems: A Conversational Risk Accumulation Framework","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-02T12:28:42.189772Z"},"links":{"citing_paper":"/paper/2607.19361"},"observation_digest":"sha256:147baaee9e09ce494fb7c57c3fad48ac3469f3fd97e659254c9c557686ce9f57","observation_id":"864be882-bf02-438c-a84d-4e2ad5157d04","resolution":{"observed_at":"2026-08-02T12:28:42.189772Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2211.09527","last_updated":"2022-11-17T13:43:20Z","snapshot_observed_at":"2026-07-06T14:19:47.424778Z","submitted_at":"2022-11-17T13:43:20Z","title":"Ignore Previous Prompt: Attack Techniques For Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2211.09527","snapshot_observed_at":"2026-08-02T12:28:42.265990Z","title":"Ignore previous prompt: Attack techniques for language mod- els","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.19361","last_updated":"2026-06-03T02:55:17Z","snapshot_observed_at":"2026-08-10T02:39:52.769949Z","submitted_at":"2026-06-03T02:55:17Z","title":"Stateful Guardrails for Multi-Turn LLM Systems: A Conversational Risk Accumulation Framework","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-02T12:28:42.265990Z"},"links":{"cited_paper":"/paper/2211.09527","citing_paper":"/paper/2607.19361"},"observation_digest":"sha256:9401058e5ac16237780117dcf9f944ea3b4bd4af94433392a7e488191b6056de","observation_id":"25212952-a382-4def-92cd-49464773fd24","resolution":{"observed_at":"2026-08-02T12:28:42.265990Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T12:28:42.441142Z","title":"Not what you’ve signed up for: Compromising real-world LLM-integrated applications with indirect prompt injection","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.19361","last_updated":"2026-06-03T02:55:17Z","snapshot_observed_at":"2026-08-10T02:39:52.769949Z","submitted_at":"2026-06-03T02:55:17Z","title":"Stateful Guardrails for Multi-Turn LLM Systems: A Conversational Risk Accumulation Framework","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-02T12:28:42.441142Z"},"links":{"citing_paper":"/paper/2607.19361"},"observation_digest":"sha256:cc951cfb7885d45d89b3b842e50ab3d295f43460ad6d1c0f3dfa7fba9f7a81da","observation_id":"7b8bacf4-3986-4ba9-b777-766826fd236c","resolution":{"observed_at":"2026-08-02T12:28:42.441142Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.06674","last_updated":"2023-12-07T19:40:50Z","snapshot_observed_at":"2026-07-06T17:00:00.321552Z","submitted_at":"2023-12-07T19:40:50Z","title":"Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversations","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.06674","snapshot_observed_at":"2026-08-02T12:28:42.589308Z","title":"Llama Guard: LLM-based input-output safeguard for human-AI conver- sations.arXiv preprint arXiv:2312.06674, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.19361","last_updated":"2026-06-03T02:55:17Z","snapshot_observed_at":"2026-08-10T02:39:52.769949Z","submitted_at":"2026-06-03T02:55:17Z","title":"Stateful Guardrails for Multi-Turn LLM Systems: A Conversational Risk Accumulation Framework","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-02T12:28:42.589308Z"},"links":{"cited_paper":"/paper/2312.06674","citing_paper":"/paper/2607.19361"},"observation_digest":"sha256:a54c0949934bf5ad1e107a31acfa378f5ec29a3dc5e325e4dcb263fd9159135e","observation_id":"4659aad0-d9f8-4407-b99e-53ac129d3541","resolution":{"observed_at":"2026-08-02T12:28:42.589308Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2510.14276","last_updated":"2025-10-16T04:00:18Z","snapshot_observed_at":"2026-07-06T22:32:47.087967Z","submitted_at":"2025-10-16T04:00:18Z","title":"Qwen3Guard Technical Report","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2510.14276","snapshot_observed_at":"2026-08-02T12:28:42.789128Z","title":"Qwen3Guard: A multilingual safety guardrail model for LLM deployments","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.19361","last_updated":"2026-06-03T02:55:17Z","snapshot_observed_at":"2026-08-10T02:39:52.769949Z","submitted_at":"2026-06-03T02:55:17Z","title":"Stateful Guardrails for Multi-Turn LLM Systems: A Conversational Risk Accumulation Framework","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-02T12:28:42.789128Z"},"links":{"cited_paper":"/paper/2510.14276","citing_paper":"/paper/2607.19361"},"observation_digest":"sha256:54aeb262815e954b83b84c817400b316c2249536e58f5701b09999fddcf78d36","observation_id":"394f09dc-e471-49c1-82ba-a426fa996511","resolution":{"observed_at":"2026-08-02T12:28:42.789128Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T12:28:42.879064Z","title":"CoSafe: Evaluating large language model safety in multi-turn dialogue coreference","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.19361","last_updated":"2026-06-03T02:55:17Z","snapshot_observed_at":"2026-08-10T02:39:52.769949Z","submitted_at":"2026-06-03T02:55:17Z","title":"Stateful Guardrails for Multi-Turn LLM Systems: A Conversational Risk Accumulation Framework","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-02T12:28:42.879064Z"},"links":{"citing_paper":"/paper/2607.19361"},"observation_digest":"sha256:13fad5c362ea85e4150d247b8c30f50abcafa0c4a5ea62db9401675174859787","observation_id":"0131db4f-d951-4312-9da8-867a5324e1b1","resolution":{"observed_at":"2026-08-02T12:28:42.879064Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2601.18491","last_updated":"2026-04-23T11:55:10Z","snapshot_observed_at":"2026-07-06T22:43:02.453697Z","submitted_at":"2026-01-26T13:45:41Z","title":"AgentDoG: A Diagnostic Guardrail Framework for AI Agent Safety and Security","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2601.18491","snapshot_observed_at":"2026-08-02T12:28:42.990718Z","title":"AgentDoG: A diagnostic guardrail framework for AI agent safety and security, 2026","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.19361","last_updated":"2026-06-03T02:55:17Z","snapshot_observed_at":"2026-08-10T02:39:52.769949Z","submitted_at":"2026-06-03T02:55:17Z","title":"Stateful Guardrails for Multi-Turn LLM Systems: A Conversational Risk Accumulation Framework","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-02T12:28:42.990718Z"},"links":{"cited_paper":"/paper/2601.18491","citing_paper":"/paper/2607.19361"},"observation_digest":"sha256:02e3202d36b227a3b6dc5b5be65edf1a73f3dd2a25474476cb1563bcbf245fc4","observation_id":"71421a47-7c67-47ea-a769-0458ddf6eb4c","resolution":{"observed_at":"2026-08-02T12:28:42.990718Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2604.07223","last_updated":"2026-08-09T09:33:57Z","snapshot_observed_at":"2026-08-12T21:14:25.246029Z","submitted_at":"2026-04-08T15:46:14Z","title":"TraceSafe: A Systematic Assessment of LLM Guardrails on Multi-Step Tool-Calling Trajectories","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.07223","snapshot_observed_at":"2026-08-02T12:28:43.118124Z","title":"TraceSafe: A sys- tematic assessment of LLM guardrails on multi-step tool-calling trajectories, 2026","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.19361","last_updated":"2026-06-03T02:55:17Z","snapshot_observed_at":"2026-08-10T02:39:52.769949Z","submitted_at":"2026-06-03T02:55:17Z","title":"Stateful Guardrails for Multi-Turn LLM Systems: A Conversational Risk Accumulation Framework","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-02T12:28:43.118124Z"},"links":{"cited_paper":"/paper/2604.07223","citing_paper":"/paper/2607.19361"},"observation_digest":"sha256:2af963badfbcc0160ce8fdeb293020967fafec999b90193db919f54c7be55cf5","observation_id":"1e147a70-fad7-4b4a-8d59-884a7d741f12","resolution":{"observed_at":"2026-08-02T12:28:43.118124Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T12:28:43.211721Z","title":"Unsupervised domain adaptation by backpropagation","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2607.19361","last_updated":"2026-06-03T02:55:17Z","snapshot_observed_at":"2026-08-10T02:39:52.769949Z","submitted_at":"2026-06-03T02:55:17Z","title":"Stateful Guardrails for Multi-Turn LLM Systems: A Conversational Risk Accumulation Framework","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-02T12:28:43.211721Z"},"links":{"citing_paper":"/paper/2607.19361"},"observation_digest":"sha256:48461c27056fc8b14a568aa87abc91804fc656c91e05a9ef89ca7411d4d02156","observation_id":"0e554159-ce59-4c6f-aa1f-d3ec84906917","resolution":{"observed_at":"2026-08-02T12:28:43.211721Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1607.01759","last_updated":"2016-08-09T17:38:43Z","snapshot_observed_at":"2026-07-06T05:02:39.487370Z","submitted_at":"2016-07-06T19:40:15Z","title":"Bag of Tricks for Efficient Text Classification","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1607.01759","snapshot_observed_at":"2026-08-02T12:28:43.384902Z","title":"Deep CORAL: Correlation alignment for deep domain adap- tation","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2607.19361","last_updated":"2026-06-03T02:55:17Z","snapshot_observed_at":"2026-08-10T02:39:52.769949Z","submitted_at":"2026-06-03T02:55:17Z","title":"Stateful Guardrails for Multi-Turn LLM Systems: A Conversational Risk Accumulation Framework","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-02T12:28:43.384902Z"},"links":{"cited_paper":"/paper/1607.01759","citing_paper":"/paper/2607.19361"},"observation_digest":"sha256:04d7b005484f67b063b57468fcb98f504b771eb8426cd956120f8fecdc555567","observation_id":"9abe967a-8553-413c-9f18-e57a8e718e6f","resolution":{"observed_at":"2026-08-02T12:28:43.384902Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T12:28:43.451218Z","title":"Artificial intelligence risk management frame- work (AI RMF 1.0)","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.19361","last_updated":"2026-06-03T02:55:17Z","snapshot_observed_at":"2026-08-10T02:39:52.769949Z","submitted_at":"2026-06-03T02:55:17Z","title":"Stateful Guardrails for Multi-Turn LLM Systems: A Conversational Risk Accumulation Framework","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-02T12:28:43.451218Z"},"links":{"citing_paper":"/paper/2607.19361"},"observation_digest":"sha256:086cfc92fb5875f12384a2de7da04dc476f654c3e378002547d273cfe1969c15","observation_id":"6466bbad-fc49-4a5b-b8fc-9398a49ca24a","resolution":{"observed_at":"2026-08-02T12:28:43.451218Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T12:28:43.625277Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.19361","last_updated":"2026-06-03T02:55:17Z","snapshot_observed_at":"2026-08-10T02:39:52.769949Z","submitted_at":"2026-06-03T02:55:17Z","title":"Stateful Guardrails for Multi-Turn LLM Systems: A Conversational Risk Accumulation Framework","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-02T12:28:43.625277Z"},"links":{"citing_paper":"/paper/2607.19361"},"observation_digest":"sha256:f2c044af915e68dd758da83e33ad67759ccbcf125d6823fdf3edda62f201d0a1","observation_id":"fad88ade-cb31-4cd5-abcd-7327bf13b8bb","resolution":{"observed_at":"2026-08-02T12:28:43.625277Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T12:28:43.812167Z","title":"Deep reinforcement learning from human preferences.Advances in Neural Information Processing Systems, 30, 2017","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2607.19361","last_updated":"2026-06-03T02:55:17Z","snapshot_observed_at":"2026-08-10T02:39:52.769949Z","submitted_at":"2026-06-03T02:55:17Z","title":"Stateful Guardrails for Multi-Turn LLM Systems: A Conversational Risk Accumulation Framework","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-02T12:28:43.812167Z"},"links":{"citing_paper":"/paper/2607.19361"},"observation_digest":"sha256:e7f75a9311a4cab7ef4816f70299f9ba2c4c88fbefdb9fbe1e754da146d92b3d","observation_id":"0a1ed6e9-9733-48e1-bcea-70f601bb6959","resolution":{"observed_at":"2026-08-02T12:28:43.812167Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T12:28:43.917416Z","title":"Claude’s model specification","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.19361","last_updated":"2026-06-03T02:55:17Z","snapshot_observed_at":"2026-08-10T02:39:52.769949Z","submitted_at":"2026-06-03T02:55:17Z","title":"Stateful Guardrails for Multi-Turn LLM Systems: A Conversational Risk Accumulation Framework","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-02T12:28:43.917416Z"},"links":{"citing_paper":"/paper/2607.19361"},"observation_digest":"sha256:32761e21c976a9de5e769f59a4752f9c55bc4c7c0463cb37263929f8e26cdcbc","observation_id":"09bab118-c5f1-4e6c-95b2-96bdd978ca81","resolution":{"observed_at":"2026-08-02T12:28:43.917416Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2212.08073","last_updated":"2022-12-15T06:19:23Z","snapshot_observed_at":"2026-08-02T04:53:58.766070Z","submitted_at":"2022-12-15T06:19:23Z","title":"Constitutional AI: Harmlessness from AI Feedback","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2212.08073","snapshot_observed_at":"2026-08-02T12:28:43.978969Z","title":"Constitutional AI: Harmlessness from AI feedback.arXiv preprint arXiv:2212.08073, 2022","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.19361","last_updated":"2026-06-03T02:55:17Z","snapshot_observed_at":"2026-08-10T02:39:52.769949Z","submitted_at":"2026-06-03T02:55:17Z","title":"Stateful Guardrails for Multi-Turn LLM Systems: A Conversational Risk Accumulation Framework","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-02T12:28:43.978969Z"},"links":{"cited_paper":"/paper/2212.08073","citing_paper":"/paper/2607.19361"},"observation_digest":"sha256:d39a9059a2068f0f966c56085010506e08337394b3646df9904717f3c075c0a5","observation_id":"3569c20b-cb96-4742-85f1-90f3bdebf463","resolution":{"observed_at":"2026-08-02T12:28:43.978969Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T12:28:44.105850Z","title":null,"venue":null,"work_id":null,"year":2002},"citing_paper":{"arxiv_id":"2607.19361","last_updated":"2026-06-03T02:55:17Z","snapshot_observed_at":"2026-08-10T02:39:52.769949Z","submitted_at":"2026-06-03T02:55:17Z","title":"Stateful Guardrails for Multi-Turn LLM Systems: A Conversational Risk Accumulation Framework","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-02T12:28:44.105850Z"},"links":{"citing_paper":"/paper/2607.19361"},"observation_digest":"sha256:de1ebc69311b36a6103e3c4888a81725b45c193683392fae70a2cdffc2af01bf","observation_id":"dc55010d-9f52-4710-a63a-fa9f01831a7f","resolution":{"observed_at":"2026-08-02T12:28:44.105850Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T12:28:44.203053Z","title":null,"venue":null,"work_id":null,"year":2010},"citing_paper":{"arxiv_id":"2607.19361","last_updated":"2026-06-03T02:55:17Z","snapshot_observed_at":"2026-08-10T02:39:52.769949Z","submitted_at":"2026-06-03T02:55:17Z","title":"Stateful Guardrails for Multi-Turn LLM Systems: A Conversational Risk Accumulation Framework","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-02T12:28:44.203053Z"},"links":{"citing_paper":"/paper/2607.19361"},"observation_digest":"sha256:61236d1a1e2d8c4b3cfaba4b06b29cb1d9e2da9fe6723a01c90c6c3e89baeedb","observation_id":"1d3bb387-f0b7-41fd-b0a6-ad3feaf3f506","resolution":{"observed_at":"2026-08-02T12:28:44.203053Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T12:28:44.360666Z","title":"Calibrating noise to sen- sitivity in private data analysis","venue":null,"work_id":null,"year":2006},"citing_paper":{"arxiv_id":"2607.19361","last_updated":"2026-06-03T02:55:17Z","snapshot_observed_at":"2026-08-10T02:39:52.769949Z","submitted_at":"2026-06-03T02:55:17Z","title":"Stateful Guardrails for Multi-Turn LLM Systems: A Conversational Risk Accumulation Framework","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-02T12:28:44.360666Z"},"links":{"citing_paper":"/paper/2607.19361"},"observation_digest":"sha256:3850e3656dc7f5f0dbc607eec5a0a4f57229b4d4bbbb55943139620218d1591a","observation_id":"bb4431c2-d99b-4a90-9bae-2977f9dee30c","resolution":{"observed_at":"2026-08-02T12:28:44.360666Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T12:28:44.469478Z","title":"Now Publishers, 2014","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2607.19361","last_updated":"2026-06-03T02:55:17Z","snapshot_observed_at":"2026-08-10T02:39:52.769949Z","submitted_at":"2026-06-03T02:55:17Z","title":"Stateful Guardrails for Multi-Turn LLM Systems: A Conversational Risk Accumulation Framework","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-02T12:28:44.469478Z"},"links":{"citing_paper":"/paper/2607.19361"},"observation_digest":"sha256:2c53b844826295561cc6e1dd8dcc33c0a7628937184787f191195bef8221a377","observation_id":"1cb14a48-8ad6-4978-aa9a-5973fc4e3753","resolution":{"observed_at":"2026-08-02T12:28:44.469478Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T12:28:44.584551Z","title":"Pearson, Dietrich A","venue":null,"work_id":null,"year":2008},"citing_paper":{"arxiv_id":"2607.19361","last_updated":"2026-06-03T02:55:17Z","snapshot_observed_at":"2026-08-10T02:39:52.769949Z","submitted_at":"2026-06-03T02:55:17Z","title":"Stateful Guardrails for Multi-Turn LLM Systems: A Conversational Risk Accumulation Framework","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-02T12:28:44.584551Z"},"links":{"citing_paper":"/paper/2607.19361"},"observation_digest":"sha256:db72d7d6070b6fa1a4f013c1e4474945c49b137851a2ea1fc2506b0da9845f0a","observation_id":"0f32d9e9-da7d-4b76-89cd-73ff82c600e3","resolution":{"observed_at":"2026-08-02T12:28:44.584551Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T12:28:44.703147Z","title":"Robust de-anonymization of large sparse datasets","venue":null,"work_id":null,"year":2008},"citing_paper":{"arxiv_id":"2607.19361","last_updated":"2026-06-03T02:55:17Z","snapshot_observed_at":"2026-08-10T02:39:52.769949Z","submitted_at":"2026-06-03T02:55:17Z","title":"Stateful Guardrails for Multi-Turn LLM Systems: A Conversational Risk Accumulation Framework","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-02T12:28:44.703147Z"},"links":{"citing_paper":"/paper/2607.19361"},"observation_digest":"sha256:2754576da98dd755b291ef9206310ed86a7d4ca002d92596cf55115516dcfae0","observation_id":"6f7adbc8-efa8-44c3-8b0e-159813d18156","resolution":{"observed_at":"2026-08-02T12:28:44.703147Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T12:28:44.788021Z","title":"Williams and Steve Young","venue":null,"work_id":null,"year":2007},"citing_paper":{"arxiv_id":"2607.19361","last_updated":"2026-06-03T02:55:17Z","snapshot_observed_at":"2026-08-10T02:39:52.769949Z","submitted_at":"2026-06-03T02:55:17Z","title":"Stateful Guardrails for Multi-Turn LLM Systems: A Conversational Risk Accumulation Framework","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-02T12:28:44.788021Z"},"links":{"citing_paper":"/paper/2607.19361"},"observation_digest":"sha256:fc6e012f82fbe7384fb30975379818d0ea9031938782e656485b9d15c37291db","observation_id":"43b6f1b8-c027-4c5f-bb0a-e90a1f01c76c","resolution":{"observed_at":"2026-08-02T12:28:44.788021Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T12:28:44.879215Z","title":"Williams","venue":null,"work_id":null,"year":2013},"citing_paper":{"arxiv_id":"2607.19361","last_updated":"2026-06-03T02:55:17Z","snapshot_observed_at":"2026-08-10T02:39:52.769949Z","submitted_at":"2026-06-03T02:55:17Z","title":"Stateful Guardrails for Multi-Turn LLM Systems: A Conversational Risk Accumulation Framework","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-02T12:28:44.879215Z"},"links":{"citing_paper":"/paper/2607.19361"},"observation_digest":"sha256:5f19ddcae5993c0d421dcbe0081d138530c255ababcd63558155b3b9b6cdf6a8","observation_id":"d5f37b76-11c4-4bfd-b51e-a5e48fc0a008","resolution":{"observed_at":"2026-08-02T12:28:44.879215Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T12:28:44.965897Z","title":"Williams","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2607.19361","last_updated":"2026-06-03T02:55:17Z","snapshot_observed_at":"2026-08-10T02:39:52.769949Z","submitted_at":"2026-06-03T02:55:17Z","title":"Stateful Guardrails for Multi-Turn LLM Systems: A Conversational Risk Accumulation Framework","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-02T12:28:44.965897Z"},"links":{"citing_paper":"/paper/2607.19361"},"observation_digest":"sha256:e25fa907ff26b86445b490034bd671ba77b04fdf53c9dab8b31a7d82a7d9ea58","observation_id":"e58d2af8-6805-4548-8d90-406bba2db93e","resolution":{"observed_at":"2026-08-02T12:28:44.965897Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T12:28:45.034756Z","title":"Neural belief tracker: Data-driven dialogue state tracking","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2607.19361","last_updated":"2026-06-03T02:55:17Z","snapshot_observed_at":"2026-08-10T02:39:52.769949Z","submitted_at":"2026-06-03T02:55:17Z","title":"Stateful Guardrails for Multi-Turn LLM Systems: A Conversational Risk Accumulation Framework","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-02T12:28:45.034756Z"},"links":{"citing_paper":"/paper/2607.19361"},"observation_digest":"sha256:854f1143ef7a7dcb48e8ea0ab4ad678477d5027540d5f7b5fb9234e4d0667db1","observation_id":"3afe6ea5-163d-4d94-9634-13949c33b33c","resolution":{"observed_at":"2026-08-02T12:28:45.034756Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T12:28:45.087590Z","title":"Tod-BERT: Pre-trained natural language understanding for task-oriented dialogue","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.19361","last_updated":"2026-06-03T02:55:17Z","snapshot_observed_at":"2026-08-10T02:39:52.769949Z","submitted_at":"2026-06-03T02:55:17Z","title":"Stateful Guardrails for Multi-Turn LLM Systems: A Conversational Risk Accumulation Framework","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-02T12:28:45.087590Z"},"links":{"citing_paper":"/paper/2607.19361"},"observation_digest":"sha256:68b94ca5ee2ab8b699f60ba9358f3c26c6c5eba9d771dfdfe74d21765b82c898","observation_id":"427f6071-af47-4b86-863d-beda0c51b498","resolution":{"observed_at":"2026-08-02T12:28:45.087590Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T12:28:41.564364Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19361","last_updated":"2026-06-03T02:55:17Z","snapshot_observed_at":"2026-08-10T02:39:52.769949Z","submitted_at":"2026-06-03T02:55:17Z","title":"Stateful Guardrails for Multi-Turn LLM Systems: A Conversational Risk Accumulation Framework","version":1},"reference_index":2008,"source":"pdf_text","source_observed_at":"2026-08-02T12:28:41.564364Z"},"links":{"citing_paper":"/paper/2607.19361"},"observation_digest":"sha256:8e140fdbf7938a09978a5a0d816a065b26dcc27c4610074596521564284fee65","observation_id":"7290e048-5de8-4c72-a287-20e5a69fe0cb","resolution":{"observed_at":"2026-08-02T12:28:41.564364Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.01470","last_updated":"2024-05-02T17:00:02Z","snapshot_observed_at":"2026-07-06T18:08:56.480769Z","submitted_at":"2024-05-02T17:00:02Z","title":"WildChat: 1M ChatGPT Interaction Logs in the Wild","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.01470","snapshot_observed_at":"2026-08-02T12:28:45.332809Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19361","last_updated":"2026-06-03T02:55:17Z","snapshot_observed_at":"2026-08-10T02:39:52.769949Z","submitted_at":"2026-06-03T02:55:17Z","title":"Stateful Guardrails for Multi-Turn LLM Systems: A Conversational Risk Accumulation Framework","version":1},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-02T12:28:45.332809Z"},"links":{"cited_paper":"/paper/2405.01470","citing_paper":"/paper/2607.19361"},"observation_digest":"sha256:3e53ef3235ae992109be8ec0ee91e39c1c10b444a96a23627ed0e943dccc0312","observation_id":"da1e53e6-5c53-4d0d-b888-f63816c8b951","resolution":{"observed_at":"2026-08-02T12:28:45.332809Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2607.19361","last_updated":"2026-06-03T02:55:17Z","latest_version":1,"primary_category":"cs.CL","snapshot_observed_at":"2026-08-10T02:39:52.769949Z","submitted_at":"2026-06-03T02:55:17Z","title":"Stateful Guardrails for Multi-Turn LLM Systems: A Conversational Risk Accumulation Framework"},"reference_resolution":{"displayed":34,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":34,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":34},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"thesis":"As of 12 August 2026, this Paper Citation Record lists 34 of 34 outbound references and 0 inbound Pith citation observations for arXiv:2607.19361."}