{"as_of":"2026-08-10T17:37:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:9195efec9c641f81357216cf65d85e145a364185541f3bd341f11f7742a010f9","coverage":[{"denominator":59,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":59,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-01T09:13:17.450457Z","state":"measured"},{"denominator":59,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":59,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-10T06:31:04.303077+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2607.20860/citation-record","integrity":"/paper/2607.20860/integrity","json":"/paper/2607.20860/citation-record.json","paper":"/paper/2607.20860"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T09:13:10.841999Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.20860","last_updated":"2026-07-23T02:32:08Z","snapshot_observed_at":"2026-08-09T04:37:16.842521Z","submitted_at":"2026-07-23T02:32:08Z","title":"Which Model Is Actually Serving You? IRIS: Budgeted Black-Box Auditing of Model Substitution and Routing Dilution in LLM Gateways","version":1},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-01T09:13:10.841999Z"},"links":{"citing_paper":"/paper/2607.20860"},"observation_digest":"sha256:b08065626db71708539945bda7bc185dc177670e45dcd7a6577b2832b1b44566","observation_id":"f34bd8fc-6253-4948-a80c-ab39ff70ce9e","resolution":{"observed_at":"2026-08-01T09:13:10.841999Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T09:13:10.956104Z","title":"M.; and Thomas, J","venue":null,"work_id":null,"year":2006},"citing_paper":{"arxiv_id":"2607.20860","last_updated":"2026-07-23T02:32:08Z","snapshot_observed_at":"2026-08-09T04:37:16.842521Z","submitted_at":"2026-07-23T02:32:08Z","title":"Which Model Is Actually Serving You? IRIS: Budgeted Black-Box Auditing of Model Substitution and Routing Dilution in LLM Gateways","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-01T09:13:10.956104Z"},"links":{"citing_paper":"/paper/2607.20860"},"observation_digest":"sha256:c4df395959ae4e7567b67efaf993458fb5d271b22dccf3a70b7842213d9a777a","observation_id":"830ec77c-03d5-4cc6-ad27-1e2fd0067408","resolution":{"observed_at":"2026-08-01T09:13:10.956104Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T09:13:11.115914Z","title":null,"venue":null,"work_id":null,"year":2004},"citing_paper":{"arxiv_id":"2607.20860","last_updated":"2026-07-23T02:32:08Z","snapshot_observed_at":"2026-08-09T04:37:16.842521Z","submitted_at":"2026-07-23T02:32:08Z","title":"Which Model Is Actually Serving You? IRIS: Budgeted Black-Box Auditing of Model Substitution and Routing Dilution in LLM Gateways","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-01T09:13:11.115914Z"},"links":{"citing_paper":"/paper/2607.20860"},"observation_digest":"sha256:fa690966c25276a8fbb3fc15c097c1cc7e746150ecc9c303cd7c73fbe6963ce4","observation_id":"9f16f847-c57c-4f23-a9c0-3a0aca3ca958","resolution":{"observed_at":"2026-08-01T09:13:11.115914Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T09:13:11.247678Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.20860","last_updated":"2026-07-23T02:32:08Z","snapshot_observed_at":"2026-08-09T04:37:16.842521Z","submitted_at":"2026-07-23T02:32:08Z","title":"Which Model Is Actually Serving You? IRIS: Budgeted Black-Box Auditing of Model Substitution and Routing Dilution in LLM Gateways","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-01T09:13:11.247678Z"},"links":{"citing_paper":"/paper/2607.20860"},"observation_digest":"sha256:64defa82e9bcacb278c789bfaab05ebc050204f7e91538b96bcab40dfc438d5f","observation_id":"b2ec6a49-e23a-4067-b08e-611233f8b561","resolution":{"observed_at":"2026-08-01T09:13:11.247678Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T09:13:11.440909Z","title":"K.; Renda, A.; and Carbin, M","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.20860","last_updated":"2026-07-23T02:32:08Z","snapshot_observed_at":"2026-08-09T04:37:16.842521Z","submitted_at":"2026-07-23T02:32:08Z","title":"Which Model Is Actually Serving You? IRIS: Budgeted Black-Box Auditing of Model Substitution and Routing Dilution in LLM Gateways","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-01T09:13:11.440909Z"},"links":{"citing_paper":"/paper/2607.20860"},"observation_digest":"sha256:b5a4940e216ea438ae334d6705817339b74a5ed9cbae22798d89e1d22fca9b77","observation_id":"947d84b5-6bd8-4a40-a414-6e580a077b51","resolution":{"observed_at":"2026-08-01T09:13:11.440909Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T09:13:11.493890Z","title":null,"venue":null,"work_id":null,"year":1964},"citing_paper":{"arxiv_id":"2607.20860","last_updated":"2026-07-23T02:32:08Z","snapshot_observed_at":"2026-08-09T04:37:16.842521Z","submitted_at":"2026-07-23T02:32:08Z","title":"Which Model Is Actually Serving You? IRIS: Budgeted Black-Box Auditing of Model Substitution and Routing Dilution in LLM Gateways","version":1},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-01T09:13:11.493890Z"},"links":{"citing_paper":"/paper/2607.20860"},"observation_digest":"sha256:eef7e58c4c30ee5be07a76fa1bb4c77f24913fac93ce0c3fb9b4e3070849a49a","observation_id":"6e02f49f-760f-4926-8e11-6c314322ae16","resolution":{"observed_at":"2026-08-01T09:13:11.493890Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T09:13:11.699160Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.20860","last_updated":"2026-07-23T02:32:08Z","snapshot_observed_at":"2026-08-09T04:37:16.842521Z","submitted_at":"2026-07-23T02:32:08Z","title":"Which Model Is Actually Serving You? IRIS: Budgeted Black-Box Auditing of Model Substitution and Routing Dilution in LLM Gateways","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-01T09:13:11.699160Z"},"links":{"citing_paper":"/paper/2607.20860"},"observation_digest":"sha256:2dde731aacac66af03aa4166358622970bc87abd65dbb4c7b68dbe17e94d06d8","observation_id":"3c99d425-4460-47fc-b7c4-d0d3d9f0bae7","resolution":{"observed_at":"2026-08-01T09:13:11.699160Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2501.16007","last_updated":"2025-05-30T23:07:40Z","snapshot_observed_at":"2026-08-10T13:47:22.640558Z","submitted_at":"2025-01-27T12:46:45Z","title":"TOPLOC: A Locality Sensitive Hashing Scheme for Trustless Verifiable Inference","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.16007","snapshot_observed_at":"2026-08-01T09:13:11.824695Z","title":"M.; Di Ferrante, M.; Pazdera, A.; Garner, R.; Jaghouar, S.; Basra, M.; Ryabinin, M.; and Hagemann, J","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.20860","last_updated":"2026-07-23T02:32:08Z","snapshot_observed_at":"2026-08-09T04:37:16.842521Z","submitted_at":"2026-07-23T02:32:08Z","title":"Which Model Is Actually Serving You? IRIS: Budgeted Black-Box Auditing of Model Substitution and Routing Dilution in LLM Gateways","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-01T09:13:11.824695Z"},"links":{"cited_paper":"/paper/2501.16007","citing_paper":"/paper/2607.20860"},"observation_digest":"sha256:734e3bbaf49bfbf1586d1f334e35d30aa8113c5d13e630264c78ad7cc30358f1","observation_id":"2960fb72-a631-46e8-bde8-a77499005195","resolution":{"observed_at":"2026-08-01T09:13:11.824695Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T09:13:11.908783Z","title":"M.; and Ateniese, G","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.20860","last_updated":"2026-07-23T02:32:08Z","snapshot_observed_at":"2026-08-09T04:37:16.842521Z","submitted_at":"2026-07-23T02:32:08Z","title":"Which Model Is Actually Serving You? IRIS: Budgeted Black-Box Auditing of Model Substitution and Routing Dilution in LLM Gateways","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-01T09:13:11.908783Z"},"links":{"citing_paper":"/paper/2607.20860"},"observation_digest":"sha256:9bf27c31fd01f0f332818b26f52109603220eac6c9643a6750493a54c93e5866","observation_id":"da516f76-6700-40e2-8821-2fbc1390afc6","resolution":{"observed_at":"2026-08-01T09:13:11.908783Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T09:13:12.024276Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.20860","last_updated":"2026-07-23T02:32:08Z","snapshot_observed_at":"2026-08-09T04:37:16.842521Z","submitted_at":"2026-07-23T02:32:08Z","title":"Which Model Is Actually Serving You? IRIS: Budgeted Black-Box Auditing of Model Substitution and Routing Dilution in LLM Gateways","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-01T09:13:12.024276Z"},"links":{"citing_paper":"/paper/2607.20860"},"observation_digest":"sha256:b364e3abef7a6e8c16d740b3f39b2abd39d0b0bba7d2d510f03155e20ad24c7d","observation_id":"0173fbe4-0c73-4aa1-ac9e-f1c53e15ac2f","resolution":{"observed_at":"2026-08-01T09:13:12.024276Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T09:13:12.105365Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.20860","last_updated":"2026-07-23T02:32:08Z","snapshot_observed_at":"2026-08-09T04:37:16.842521Z","submitted_at":"2026-07-23T02:32:08Z","title":"Which Model Is Actually Serving You? IRIS: Budgeted Black-Box Auditing of Model Substitution and Routing Dilution in LLM Gateways","version":1},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-01T09:13:12.105365Z"},"links":{"citing_paper":"/paper/2607.20860"},"observation_digest":"sha256:5130e02fad874a612aafa474d3a7dd377f01db61e223d160ce08f7b4917ada49","observation_id":"4beada5d-db86-4ba9-a567-2dae18f7e622","resolution":{"observed_at":"2026-08-01T09:13:12.105365Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T09:13:12.272683Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.20860","last_updated":"2026-07-23T02:32:08Z","snapshot_observed_at":"2026-08-09T04:37:16.842521Z","submitted_at":"2026-07-23T02:32:08Z","title":"Which Model Is Actually Serving You? IRIS: Budgeted Black-Box Auditing of Model Substitution and Routing Dilution in LLM Gateways","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-01T09:13:12.272683Z"},"links":{"citing_paper":"/paper/2607.20860"},"observation_digest":"sha256:36b7fb2547d2bfa60e97c7b99fa964d4880142a28d210feb33236a0bc9e20e0e","observation_id":"e6544916-51f2-4b48-8daf-83ad9fa7f061","resolution":{"observed_at":"2026-08-01T09:13:12.272683Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T09:13:12.391442Z","title":"Z.; and Liu, Z","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.20860","last_updated":"2026-07-23T02:32:08Z","snapshot_observed_at":"2026-08-09T04:37:16.842521Z","submitted_at":"2026-07-23T02:32:08Z","title":"Which Model Is Actually Serving You? IRIS: Budgeted Black-Box Auditing of Model Substitution and Routing Dilution in LLM Gateways","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-01T09:13:12.391442Z"},"links":{"citing_paper":"/paper/2607.20860"},"observation_digest":"sha256:2d3cc75be3d0448eb84b8ee52ffa1d60855426ea4c540f679830f670e0d4d772","observation_id":"fdcfb9e0-d0a4-43fb-8901-b917bf6afdb5","resolution":{"observed_at":"2026-08-01T09:13:12.391442Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T09:13:12.485257Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.20860","last_updated":"2026-07-23T02:32:08Z","snapshot_observed_at":"2026-08-09T04:37:16.842521Z","submitted_at":"2026-07-23T02:32:08Z","title":"Which Model Is Actually Serving You? IRIS: Budgeted Black-Box Auditing of Model Substitution and Routing Dilution in LLM Gateways","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-01T09:13:12.485257Z"},"links":{"citing_paper":"/paper/2607.20860"},"observation_digest":"sha256:cfe198162364954ddbf8996529d56209fab7fdcdbb09091a6bb86120bbae3a6f","observation_id":"84021bfb-6c26-449d-bae8-0059df5c7310","resolution":{"observed_at":"2026-08-01T09:13:12.485257Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T09:13:12.581076Z","title":"Your ``Pro''","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.20860","last_updated":"2026-07-23T02:32:08Z","snapshot_observed_at":"2026-08-09T04:37:16.842521Z","submitted_at":"2026-07-23T02:32:08Z","title":"Which Model Is Actually Serving You? IRIS: Budgeted Black-Box Auditing of Model Substitution and Routing Dilution in LLM Gateways","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-01T09:13:12.581076Z"},"links":{"citing_paper":"/paper/2607.20860"},"observation_digest":"sha256:b9550260d57e74c645ad6612b4d4701754ac60b6774e8288ead48a6cb65ce96c","observation_id":"f5db53ad-ed62-4799-9468-ac5d3d9e167b","resolution":{"observed_at":"2026-08-01T09:13:12.581076Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T09:13:12.671459Z","title":"Token-Efficient Change Detection in","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.20860","last_updated":"2026-07-23T02:32:08Z","snapshot_observed_at":"2026-08-09T04:37:16.842521Z","submitted_at":"2026-07-23T02:32:08Z","title":"Which Model Is Actually Serving You? IRIS: Budgeted Black-Box Auditing of Model Substitution and Routing Dilution in LLM Gateways","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-01T09:13:12.671459Z"},"links":{"citing_paper":"/paper/2607.20860"},"observation_digest":"sha256:f921a760f37d5aa91fdc7cfaf9bd5be86a1b80729521268f404f9dee5b0ecf25","observation_id":"e75a9ff6-f285-45de-a224-85dd08e4f0ba","resolution":{"observed_at":"2026-08-01T09:13:12.671459Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T09:13:12.820565Z","title":"2026 , url =","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.20860","last_updated":"2026-07-23T02:32:08Z","snapshot_observed_at":"2026-08-09T04:37:16.842521Z","submitted_at":"2026-07-23T02:32:08Z","title":"Which Model Is Actually Serving You? IRIS: Budgeted Black-Box Auditing of Model Substitution and Routing Dilution in LLM Gateways","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-01T09:13:12.820565Z"},"links":{"citing_paper":"/paper/2607.20860"},"observation_digest":"sha256:bf19c2d00dfd0e3a85ae74df2de93c0c7ae6b8e4c1ef0144e69dac0f8cb13029","observation_id":"f2385cd6-e503-42c9-81e7-227211a4fca9","resolution":{"observed_at":"2026-08-01T09:13:12.820565Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T09:13:13.013238Z","title":"2026 , url =","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.20860","last_updated":"2026-07-23T02:32:08Z","snapshot_observed_at":"2026-08-09T04:37:16.842521Z","submitted_at":"2026-07-23T02:32:08Z","title":"Which Model Is Actually Serving You? IRIS: Budgeted Black-Box Auditing of Model Substitution and Routing Dilution in LLM Gateways","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-01T09:13:13.013238Z"},"links":{"citing_paper":"/paper/2607.20860"},"observation_digest":"sha256:7e6afe2f558526e183d943b998da84ea61aeb695fe291b51499b0d3b0c1f20cf","observation_id":"322a72bf-801c-48e3-a0f8-87748588ea78","resolution":{"observed_at":"2026-08-01T09:13:13.013238Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T09:13:13.266793Z","title":"Auditing Black-Box","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.20860","last_updated":"2026-07-23T02:32:08Z","snapshot_observed_at":"2026-08-09T04:37:16.842521Z","submitted_at":"2026-07-23T02:32:08Z","title":"Which Model Is Actually Serving You? IRIS: Budgeted Black-Box Auditing of Model Substitution and Routing Dilution in LLM Gateways","version":1},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-01T09:13:13.266793Z"},"links":{"citing_paper":"/paper/2607.20860"},"observation_digest":"sha256:2b580414be145253cc1b85032f632ac501776a6669d301d5bdbc4c1c943a99aa","observation_id":"60584c46-6207-4ca5-8aba-2006a2b72c07","resolution":{"observed_at":"2026-08-01T09:13:13.266793Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T09:13:13.387043Z","title":"Model Equality Testing: Which Model Is This","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.20860","last_updated":"2026-07-23T02:32:08Z","snapshot_observed_at":"2026-08-09T04:37:16.842521Z","submitted_at":"2026-07-23T02:32:08Z","title":"Which Model Is Actually Serving You? IRIS: Budgeted Black-Box Auditing of Model Substitution and Routing Dilution in LLM Gateways","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-01T09:13:13.387043Z"},"links":{"citing_paper":"/paper/2607.20860"},"observation_digest":"sha256:f76fa54b81ba0ca24e39971c725858259063f1cdaa7f65135ee40e9907385b04","observation_id":"a9392185-d3ed-4b60-9e9e-be7ecf1f53f7","resolution":{"observed_at":"2026-08-01T09:13:13.387043Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T09:13:13.483209Z","title":"and Ateniese, Giuseppe , booktitle =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.20860","last_updated":"2026-07-23T02:32:08Z","snapshot_observed_at":"2026-08-09T04:37:16.842521Z","submitted_at":"2026-07-23T02:32:08Z","title":"Which Model Is Actually Serving You? IRIS: Budgeted Black-Box Auditing of Model Substitution and Routing Dilution in LLM Gateways","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-01T09:13:13.483209Z"},"links":{"citing_paper":"/paper/2607.20860"},"observation_digest":"sha256:0f7a0a71c5cd9926d9e5829d7d6a2438704a06a3b585a857c35d6a56b21e1d1e","observation_id":"7d9d9289-3464-45bd-92eb-a88d71f0bd3d","resolution":{"observed_at":"2026-08-01T09:13:13.483209Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T09:13:13.591826Z","title":"doi:10.18653/v1/2024.findings-acl.683 , year =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.20860","last_updated":"2026-07-23T02:32:08Z","snapshot_observed_at":"2026-08-09T04:37:16.842521Z","submitted_at":"2026-07-23T02:32:08Z","title":"Which Model Is Actually Serving You? IRIS: Budgeted Black-Box Auditing of Model Substitution and Routing Dilution in LLM Gateways","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-01T09:13:13.591826Z"},"links":{"citing_paper":"/paper/2607.20860"},"observation_digest":"sha256:0d81858187af430e5438c0ce62d2276a64868ceee0421e8cda3de0c60a66f535","observation_id":"282c1ddc-68a2-438c-8917-c78a31d189cb","resolution":{"observed_at":"2026-08-01T09:13:13.591826Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T09:13:13.650941Z","title":"Advances in Neural Information Processing Systems , volume =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.20860","last_updated":"2026-07-23T02:32:08Z","snapshot_observed_at":"2026-08-09T04:37:16.842521Z","submitted_at":"2026-07-23T02:32:08Z","title":"Which Model Is Actually Serving You? IRIS: Budgeted Black-Box Auditing of Model Substitution and Routing Dilution in LLM Gateways","version":1},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-01T09:13:13.650941Z"},"links":{"citing_paper":"/paper/2607.20860"},"observation_digest":"sha256:d6a2c11657de7a5bfabf67c55dcba8fecabaaceae92719cd4b8341876156164c","observation_id":"21ef6f80-588f-4e73-b539-d60eb94c09c2","resolution":{"observed_at":"2026-08-01T09:13:13.650941Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T09:13:13.752137Z","title":"and Renda, Alex and Carbin, Michael , booktitle =","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.20860","last_updated":"2026-07-23T02:32:08Z","snapshot_observed_at":"2026-08-09T04:37:16.842521Z","submitted_at":"2026-07-23T02:32:08Z","title":"Which Model Is Actually Serving You? IRIS: Budgeted Black-Box Auditing of Model Substitution and Routing Dilution in LLM Gateways","version":1},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-08-01T09:13:13.752137Z"},"links":{"citing_paper":"/paper/2607.20860"},"observation_digest":"sha256:a68ce2e2198d19cf2b64da44547b586f99672c47228aef6ea69f42dc5e3806c1","observation_id":"e1d08345-4525-47c2-a8d2-bab479e400a7","resolution":{"observed_at":"2026-08-01T09:13:13.752137Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T09:13:13.916167Z","title":"Are You Getting What You Pay For? Auditing Model Substitution in","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.20860","last_updated":"2026-07-23T02:32:08Z","snapshot_observed_at":"2026-08-09T04:37:16.842521Z","submitted_at":"2026-07-23T02:32:08Z","title":"Which Model Is Actually Serving You? IRIS: Budgeted Black-Box Auditing of Model Substitution and Routing Dilution in LLM Gateways","version":1},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-08-01T09:13:13.916167Z"},"links":{"citing_paper":"/paper/2607.20860"},"observation_digest":"sha256:781d10e34c73104d615fdc9ad6d896cf90ee9daf49dba7485cd7a761edd5f572","observation_id":"657e32ae-f016-4588-9228-737eb0a44986","resolution":{"observed_at":"2026-08-01T09:13:13.916167Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T09:13:14.020617Z","title":"The Annals of Mathematical Statistics , volume =","venue":null,"work_id":null,"year":1952},"citing_paper":{"arxiv_id":"2607.20860","last_updated":"2026-07-23T02:32:08Z","snapshot_observed_at":"2026-08-09T04:37:16.842521Z","submitted_at":"2026-07-23T02:32:08Z","title":"Which Model Is Actually Serving You? IRIS: Budgeted Black-Box Auditing of Model Substitution and Routing Dilution in LLM Gateways","version":1},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-08-01T09:13:14.020617Z"},"links":{"citing_paper":"/paper/2607.20860"},"observation_digest":"sha256:ba39be06c6c3932630e8cacd117177b26e0c35ce2ffd398b216769a63228018a","observation_id":"5d478751-9b9c-4397-bdce-77a14f902310","resolution":{"observed_at":"2026-08-01T09:13:14.020617Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T09:13:14.087213Z","title":"The Annals of Mathematical Statistics , volume =","venue":null,"work_id":null,"year":1965},"citing_paper":{"arxiv_id":"2607.20860","last_updated":"2026-07-23T02:32:08Z","snapshot_observed_at":"2026-08-09T04:37:16.842521Z","submitted_at":"2026-07-23T02:32:08Z","title":"Which Model Is Actually Serving You? IRIS: Budgeted Black-Box Auditing of Model Substitution and Routing Dilution in LLM Gateways","version":1},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-08-01T09:13:14.087213Z"},"links":{"citing_paper":"/paper/2607.20860"},"observation_digest":"sha256:1b68e6575143e2590984148266dcb46487beb8d4f5495c7f8d29e381a9801cf4","observation_id":"6b2308a2-a9e6-48a7-964c-34a335e42209","resolution":{"observed_at":"2026-08-01T09:13:14.087213Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T09:13:14.154383Z","title":"2006 , doi =","venue":null,"work_id":null,"year":2006},"citing_paper":{"arxiv_id":"2607.20860","last_updated":"2026-07-23T02:32:08Z","snapshot_observed_at":"2026-08-09T04:37:16.842521Z","submitted_at":"2026-07-23T02:32:08Z","title":"Which Model Is Actually Serving You? IRIS: Budgeted Black-Box Auditing of Model Substitution and Routing Dilution in LLM Gateways","version":1},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-08-01T09:13:14.154383Z"},"links":{"citing_paper":"/paper/2607.20860"},"observation_digest":"sha256:87a8154dc17d5b2761c6d29f43d29768d5392080105523098ddfbb646a9c0ceb","observation_id":"501cde09-d7ab-49c4-8f51-de6d183b6d85","resolution":{"observed_at":"2026-08-01T09:13:14.154383Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T09:13:14.226694Z","title":"Large Language Models Are Bad Dice Players:","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.20860","last_updated":"2026-07-23T02:32:08Z","snapshot_observed_at":"2026-08-09T04:37:16.842521Z","submitted_at":"2026-07-23T02:32:08Z","title":"Which Model Is Actually Serving You? IRIS: Budgeted Black-Box Auditing of Model Substitution and Routing Dilution in LLM Gateways","version":1},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-08-01T09:13:14.226694Z"},"links":{"citing_paper":"/paper/2607.20860"},"observation_digest":"sha256:dc3e32ab07b7005801c5111177e428df8004cd027e5e21ca83a9152fb0720a6d","observation_id":"84a39d30-4cfd-4fbd-a3c6-938c78ebd48b","resolution":{"observed_at":"2026-08-01T09:13:14.226694Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T09:13:14.395593Z","title":"Behavioral Consistency and Transparency Analysis on Large Language Model","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.20860","last_updated":"2026-07-23T02:32:08Z","snapshot_observed_at":"2026-08-09T04:37:16.842521Z","submitted_at":"2026-07-23T02:32:08Z","title":"Which Model Is Actually Serving You? IRIS: Budgeted Black-Box Auditing of Model Substitution and Routing Dilution in LLM Gateways","version":1},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-08-01T09:13:14.395593Z"},"links":{"citing_paper":"/paper/2607.20860"},"observation_digest":"sha256:249a38c176a8d510348c177b81821bbc0f3f230c8a5555ae14a75122d197b579","observation_id":"0741f4b7-e3fb-4a40-97f3-5d618f41de13","resolution":{"observed_at":"2026-08-01T09:13:14.395593Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T09:13:14.526341Z","title":"Real Money, Fake Models: Deceptive Model Claims in Shadow","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.20860","last_updated":"2026-07-23T02:32:08Z","snapshot_observed_at":"2026-08-09T04:37:16.842521Z","submitted_at":"2026-07-23T02:32:08Z","title":"Which Model Is Actually Serving You? IRIS: Budgeted Black-Box Auditing of Model Substitution and Routing Dilution in LLM Gateways","version":1},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-08-01T09:13:14.526341Z"},"links":{"citing_paper":"/paper/2607.20860"},"observation_digest":"sha256:c1c97a84856e4de012da0bf38701626e957f048b9075595370b876a8f8bb84c1","observation_id":"647004be-39a3-46a1-9350-831044100728","resolution":{"observed_at":"2026-08-01T09:13:14.526341Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T09:13:14.726325Z","title":"Your Agent Is Mine: Measuring Malicious Intermediary Attacks on the","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.20860","last_updated":"2026-07-23T02:32:08Z","snapshot_observed_at":"2026-08-09T04:37:16.842521Z","submitted_at":"2026-07-23T02:32:08Z","title":"Which Model Is Actually Serving You? IRIS: Budgeted Black-Box Auditing of Model Substitution and Routing Dilution in LLM Gateways","version":1},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-08-01T09:13:14.726325Z"},"links":{"citing_paper":"/paper/2607.20860"},"observation_digest":"sha256:cb422eaadf1ea69d94f5a958cafe465ff3680d7f8f03ed2487385bfdd8f4d33a","observation_id":"81bea2c3-e2bd-41c4-83af-fd6d31b4d04a","resolution":{"observed_at":"2026-08-01T09:13:14.726325Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T09:13:14.795273Z","title":"Incompressible Knowledge Probes: Estimating Black-Box","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.20860","last_updated":"2026-07-23T02:32:08Z","snapshot_observed_at":"2026-08-09T04:37:16.842521Z","submitted_at":"2026-07-23T02:32:08Z","title":"Which Model Is Actually Serving You? IRIS: Budgeted Black-Box Auditing of Model Substitution and Routing Dilution in LLM Gateways","version":1},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-08-01T09:13:14.795273Z"},"links":{"citing_paper":"/paper/2607.20860"},"observation_digest":"sha256:320134c660d100aa93a2b7bd15c45d05b3fc297b55b71167d6a7eadb0e30a1f6","observation_id":"eb288e3f-3b85-45b4-871f-4468ffff48f4","resolution":{"observed_at":"2026-08-01T09:13:14.795273Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T09:13:14.908231Z","title":"doi:10.18653/v1/2026.findings-eacl.273 , year =","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.20860","last_updated":"2026-07-23T02:32:08Z","snapshot_observed_at":"2026-08-09T04:37:16.842521Z","submitted_at":"2026-07-23T02:32:08Z","title":"Which Model Is Actually Serving You? IRIS: Budgeted Black-Box Auditing of Model Substitution and Routing Dilution in LLM Gateways","version":1},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-08-01T09:13:14.908231Z"},"links":{"citing_paper":"/paper/2607.20860"},"observation_digest":"sha256:31ff1b8082cadbdfaf74f5583bfb4e8976e30d7b492786d1baf3930e024c81c9","observation_id":"87fbc300-6c86-467f-8ef9-9ca4df6564f2","resolution":{"observed_at":"2026-08-01T09:13:14.908231Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T09:13:15.243269Z","title":", journal=","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.20860","last_updated":"2026-07-23T02:32:08Z","snapshot_observed_at":"2026-08-09T04:37:16.842521Z","submitted_at":"2026-07-23T02:32:08Z","title":"Which Model Is Actually Serving You? IRIS: Budgeted Black-Box Auditing of Model Substitution and Routing Dilution in LLM Gateways","version":1},"reference_index":38,"source":"arxiv_source","source_observed_at":"2026-08-01T09:13:15.243269Z"},"links":{"citing_paper":"/paper/2607.20860"},"observation_digest":"sha256:d7d92d6e1f2f62e18734c2016f403c6db60f678b36ba1d2acc277d7c3853062d","observation_id":"5458e963-67b1-4190-9988-fdd219b92354","resolution":{"observed_at":"2026-08-01T09:13:15.243269Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T09:13:15.317569Z","title":"Log Probability Tracking of","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.20860","last_updated":"2026-07-23T02:32:08Z","snapshot_observed_at":"2026-08-09T04:37:16.842521Z","submitted_at":"2026-07-23T02:32:08Z","title":"Which Model Is Actually Serving You? IRIS: Budgeted Black-Box Auditing of Model Substitution and Routing Dilution in LLM Gateways","version":1},"reference_index":39,"source":"arxiv_source","source_observed_at":"2026-08-01T09:13:15.317569Z"},"links":{"citing_paper":"/paper/2607.20860"},"observation_digest":"sha256:dcfebd9537351c0fa48ba24ebfb270b65697709c78762369b9f7d31e662bfed8","observation_id":"b4a32804-0351-4eda-8bfd-662e0f0c121d","resolution":{"observed_at":"2026-08-01T09:13:15.317569Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T09:13:15.383437Z","title":"Proceedings of the 42nd International Conference on Machine Learning , series =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.20860","last_updated":"2026-07-23T02:32:08Z","snapshot_observed_at":"2026-08-09T04:37:16.842521Z","submitted_at":"2026-07-23T02:32:08Z","title":"Which Model Is Actually Serving You? IRIS: Budgeted Black-Box Auditing of Model Substitution and Routing Dilution in LLM Gateways","version":1},"reference_index":40,"source":"arxiv_source","source_observed_at":"2026-08-01T09:13:15.383437Z"},"links":{"citing_paper":"/paper/2607.20860"},"observation_digest":"sha256:7b19ed118caf6d9995eeb7b3f0c195026d08b428cab2b13536b0ba885d159bce","observation_id":"10279c61-1492-44d6-a49e-f7bb7e2d3810","resolution":{"observed_at":"2026-08-01T09:13:15.383437Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2607.10252","last_updated":"2026-07-11T10:34:17Z","snapshot_observed_at":"2026-08-07T03:27:50.659805Z","submitted_at":"2026-07-11T10:34:17Z","title":"One Token Is Enough: Fingerprinting and Verifying Large Language Models from Single-Token Output Distributions","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2607.10252","snapshot_observed_at":"2026-08-01T09:13:15.445455Z","title":"arXiv preprint arXiv:2607.10252 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.20860","last_updated":"2026-07-23T02:32:08Z","snapshot_observed_at":"2026-08-09T04:37:16.842521Z","submitted_at":"2026-07-23T02:32:08Z","title":"Which Model Is Actually Serving You? IRIS: Budgeted Black-Box Auditing of Model Substitution and Routing Dilution in LLM Gateways","version":1},"reference_index":41,"source":"arxiv_source","source_observed_at":"2026-08-01T09:13:15.445455Z"},"links":{"cited_paper":"/paper/2607.10252","citing_paper":"/paper/2607.20860"},"observation_digest":"sha256:58469b0f4f10025d3d6144767c0fd9ea11cb62ab5f18c8245f0ae178c9299322","observation_id":"ba600d2f-0ab6-4c15-b8be-3acdc30fe7ea","resolution":{"observed_at":"2026-08-01T09:13:15.445455Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T09:13:15.611998Z","title":"International Conference on Learning Representations (ICLR) , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.20860","last_updated":"2026-07-23T02:32:08Z","snapshot_observed_at":"2026-08-09T04:37:16.842521Z","submitted_at":"2026-07-23T02:32:08Z","title":"Which Model Is Actually Serving You? IRIS: Budgeted Black-Box Auditing of Model Substitution and Routing Dilution in LLM Gateways","version":1},"reference_index":42,"source":"arxiv_source","source_observed_at":"2026-08-01T09:13:15.611998Z"},"links":{"citing_paper":"/paper/2607.20860"},"observation_digest":"sha256:4c06d5b4b13faf21e22ee6cb6c0990649653b74491d3c912abf375b40d8b455f","observation_id":"1af0aa35-02db-4c8a-b4d9-10af5c89ab74","resolution":{"observed_at":"2026-08-01T09:13:15.611998Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.12335","last_updated":"2025-04-14T04:16:43Z","snapshot_observed_at":"2026-08-07T16:06:02.195968Z","submitted_at":"2025-04-14T04:16:43Z","title":"You've Changed: Detecting Modification of Black-Box Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.12335","snapshot_observed_at":"2026-08-01T09:13:15.790809Z","title":"arXiv preprint arXiv:2504.12335 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.20860","last_updated":"2026-07-23T02:32:08Z","snapshot_observed_at":"2026-08-09T04:37:16.842521Z","submitted_at":"2026-07-23T02:32:08Z","title":"Which Model Is Actually Serving You? IRIS: Budgeted Black-Box Auditing of Model Substitution and Routing Dilution in LLM Gateways","version":1},"reference_index":43,"source":"arxiv_source","source_observed_at":"2026-08-01T09:13:15.790809Z"},"links":{"cited_paper":"/paper/2504.12335","citing_paper":"/paper/2607.20860"},"observation_digest":"sha256:88220c680f64e402c1418fb3cf19fbcc49d9840f62235ad6039079ffdce05cec","observation_id":"a2ca0f81-0246-4d37-81a3-e02664716fb0","resolution":{"observed_at":"2026-08-01T09:13:15.790809Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T09:13:15.852188Z","title":"2025 , url =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.20860","last_updated":"2026-07-23T02:32:08Z","snapshot_observed_at":"2026-08-09T04:37:16.842521Z","submitted_at":"2026-07-23T02:32:08Z","title":"Which Model Is Actually Serving You? IRIS: Budgeted Black-Box Auditing of Model Substitution and Routing Dilution in LLM Gateways","version":1},"reference_index":44,"source":"arxiv_source","source_observed_at":"2026-08-01T09:13:15.852188Z"},"links":{"citing_paper":"/paper/2607.20860"},"observation_digest":"sha256:4ee0117ab0d5dd627a67c1b9802b648b99016300989c7f9d3f92914647911e63","observation_id":"c329d03d-1f6b-4a17-8277-5a79e18884d4","resolution":{"observed_at":"2026-08-01T09:13:15.852188Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T09:13:15.913475Z","title":"The Annals of Mathematical Statistics , volume =","venue":null,"work_id":null,"year":1964},"citing_paper":{"arxiv_id":"2607.20860","last_updated":"2026-07-23T02:32:08Z","snapshot_observed_at":"2026-08-09T04:37:16.842521Z","submitted_at":"2026-07-23T02:32:08Z","title":"Which Model Is Actually Serving You? IRIS: Budgeted Black-Box Auditing of Model Substitution and Routing Dilution in LLM Gateways","version":1},"reference_index":45,"source":"arxiv_source","source_observed_at":"2026-08-01T09:13:15.913475Z"},"links":{"citing_paper":"/paper/2607.20860"},"observation_digest":"sha256:2e73d5eb56767cca7a242a76b7ebbeb7c03f61c552092f37a490041ff9d00899","observation_id":"10763df2-ae1c-494f-90cf-1f00da72006f","resolution":{"observed_at":"2026-08-01T09:13:15.913475Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T09:13:15.973203Z","title":"The Annals of Statistics , volume =","venue":null,"work_id":null,"year":2004},"citing_paper":{"arxiv_id":"2607.20860","last_updated":"2026-07-23T02:32:08Z","snapshot_observed_at":"2026-08-09T04:37:16.842521Z","submitted_at":"2026-07-23T02:32:08Z","title":"Which Model Is Actually Serving You? IRIS: Budgeted Black-Box Auditing of Model Substitution and Routing Dilution in LLM Gateways","version":1},"reference_index":46,"source":"arxiv_source","source_observed_at":"2026-08-01T09:13:15.973203Z"},"links":{"citing_paper":"/paper/2607.20860"},"observation_digest":"sha256:3c35bb5ee0e3ae41d7c2878e0cd86aee0c995c40da1764ef7e05d0043128fc8e","observation_id":"3f2169b5-a4be-470f-a496-f2c1996b2a6f","resolution":{"observed_at":"2026-08-01T09:13:15.973203Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T09:13:16.044684Z","title":"IEEE Transactions on Information Theory , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.20860","last_updated":"2026-07-23T02:32:08Z","snapshot_observed_at":"2026-08-09T04:37:16.842521Z","submitted_at":"2026-07-23T02:32:08Z","title":"Which Model Is Actually Serving You? IRIS: Budgeted Black-Box Auditing of Model Substitution and Routing Dilution in LLM Gateways","version":1},"reference_index":47,"source":"arxiv_source","source_observed_at":"2026-08-01T09:13:16.044684Z"},"links":{"citing_paper":"/paper/2607.20860"},"observation_digest":"sha256:a55b1809ee1e9e8cf69343975cd0175097b838890d74e8cc7ae140c197676016","observation_id":"c9ac8a4b-bddc-4f4a-8342-e28d2f8e6658","resolution":{"observed_at":"2026-08-01T09:13:16.044684Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.01539","last_updated":"2024-11-05T03:20:10Z","snapshot_observed_at":"2026-08-08T10:58:01.623237Z","submitted_at":"2024-11-03T12:03:12Z","title":"LLMs and the Madness of Crowds","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.01539","snapshot_observed_at":"2026-08-01T09:13:16.170953Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.20860","last_updated":"2026-07-23T02:32:08Z","snapshot_observed_at":"2026-08-09T04:37:16.842521Z","submitted_at":"2026-07-23T02:32:08Z","title":"Which Model Is Actually Serving You? IRIS: Budgeted Black-Box Auditing of Model Substitution and Routing Dilution in LLM Gateways","version":1},"reference_index":48,"source":"arxiv_source","source_observed_at":"2026-08-01T09:13:16.170953Z"},"links":{"cited_paper":"/paper/2411.01539","citing_paper":"/paper/2607.20860"},"observation_digest":"sha256:aa4c76c10811d9a783e44d3db0f941da1df31d1f65973392129fdf3a384a5cc6","observation_id":"8f41fb7f-89b2-4b1a-b22f-6b844f1c77c6","resolution":{"observed_at":"2026-08-01T09:13:16.170953Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T09:13:16.322963Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.20860","last_updated":"2026-07-23T02:32:08Z","snapshot_observed_at":"2026-08-09T04:37:16.842521Z","submitted_at":"2026-07-23T02:32:08Z","title":"Which Model Is Actually Serving You? IRIS: Budgeted Black-Box Auditing of Model Substitution and Routing Dilution in LLM Gateways","version":1},"reference_index":49,"source":"arxiv_source","source_observed_at":"2026-08-01T09:13:16.322963Z"},"links":{"citing_paper":"/paper/2607.20860"},"observation_digest":"sha256:368c637b397012adb2756747acb9749fde41a4ad60a6c476b14c33acdb5b7a71","observation_id":"bad886a7-4b22-4f18-8a68-c8248a0544af","resolution":{"observed_at":"2026-08-01T09:13:16.322963Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T09:13:16.524745Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.20860","last_updated":"2026-07-23T02:32:08Z","snapshot_observed_at":"2026-08-09T04:37:16.842521Z","submitted_at":"2026-07-23T02:32:08Z","title":"Which Model Is Actually Serving You? IRIS: Budgeted Black-Box Auditing of Model Substitution and Routing Dilution in LLM Gateways","version":1},"reference_index":50,"source":"arxiv_source","source_observed_at":"2026-08-01T09:13:16.524745Z"},"links":{"citing_paper":"/paper/2607.20860"},"observation_digest":"sha256:d587900f3d7e7b1da3fdcacf17b33aaf461871f411419069d79ce71cc5076b3a","observation_id":"7fde762b-532c-4220-8dab-55b00e5cd1dd","resolution":{"observed_at":"2026-08-01T09:13:16.524745Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T09:13:16.633252Z","title":null,"venue":null,"work_id":null,"year":1952},"citing_paper":{"arxiv_id":"2607.20860","last_updated":"2026-07-23T02:32:08Z","snapshot_observed_at":"2026-08-09T04:37:16.842521Z","submitted_at":"2026-07-23T02:32:08Z","title":"Which Model Is Actually Serving You? IRIS: Budgeted Black-Box Auditing of Model Substitution and Routing Dilution in LLM Gateways","version":1},"reference_index":51,"source":"arxiv_source","source_observed_at":"2026-08-01T09:13:16.633252Z"},"links":{"citing_paper":"/paper/2607.20860"},"observation_digest":"sha256:27300bdeb255eaa3cf5179572c4f92cf87b5a005da829d9207039b373ff66751","observation_id":"092c5131-1841-4de8-873e-f268c0272e84","resolution":{"observed_at":"2026-08-01T09:13:16.633252Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2605.29524","last_updated":"2026-07-25T16:02:05Z","snapshot_observed_at":"2026-08-05T15:04:29.299324Z","submitted_at":"2026-05-28T07:40:24Z","title":"KBF: Knowledge Boundary as Fingerprint for Language Model and Black-Box API Auditing","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2605.29524","snapshot_observed_at":"2026-08-01T09:13:16.764736Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.20860","last_updated":"2026-07-23T02:32:08Z","snapshot_observed_at":"2026-08-09T04:37:16.842521Z","submitted_at":"2026-07-23T02:32:08Z","title":"Which Model Is Actually Serving You? IRIS: Budgeted Black-Box Auditing of Model Substitution and Routing Dilution in LLM Gateways","version":1},"reference_index":52,"source":"arxiv_source","source_observed_at":"2026-08-01T09:13:16.764736Z"},"links":{"cited_paper":"/paper/2605.29524","citing_paper":"/paper/2607.20860"},"observation_digest":"sha256:57194f07fdc1de9973f4363c8321f30b8a48ae5b8c44e8c4ee4bbf8fd99c11a5","observation_id":"980dc18e-323d-4e8b-a831-016472b72ec5","resolution":{"observed_at":"2026-08-01T09:13:16.764736Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T09:13:16.846434Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.20860","last_updated":"2026-07-23T02:32:08Z","snapshot_observed_at":"2026-08-09T04:37:16.842521Z","submitted_at":"2026-07-23T02:32:08Z","title":"Which Model Is Actually Serving You? IRIS: Budgeted Black-Box Auditing of Model Substitution and Routing Dilution in LLM Gateways","version":1},"reference_index":53,"source":"arxiv_source","source_observed_at":"2026-08-01T09:13:16.846434Z"},"links":{"citing_paper":"/paper/2607.20860"},"observation_digest":"sha256:fe8f3e85fc7e3891f6afef5aeacc9e424f2a8217dcb42bd88be90929dab56bee","observation_id":"d7d67718-d508-4c41-b81d-909bc8320ffc","resolution":{"observed_at":"2026-08-01T09:13:16.846434Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T09:13:16.909559Z","title":null,"venue":null,"work_id":null,"year":1965},"citing_paper":{"arxiv_id":"2607.20860","last_updated":"2026-07-23T02:32:08Z","snapshot_observed_at":"2026-08-09T04:37:16.842521Z","submitted_at":"2026-07-23T02:32:08Z","title":"Which Model Is Actually Serving You? IRIS: Budgeted Black-Box Auditing of Model Substitution and Routing Dilution in LLM Gateways","version":1},"reference_index":54,"source":"arxiv_source","source_observed_at":"2026-08-01T09:13:16.909559Z"},"links":{"citing_paper":"/paper/2607.20860"},"observation_digest":"sha256:42912689fd3b48b0ed58d1533041bc1213bb3e88e9f8bc00cea8741aeee9f8b8","observation_id":"1f2e1c3d-34a2-4385-89cc-a5385b7e700e","resolution":{"observed_at":"2026-08-01T09:13:16.909559Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2604.24827","last_updated":"2026-07-05T14:51:01Z","snapshot_observed_at":"2026-08-09T18:00:15.187880Z","submitted_at":"2026-04-27T15:46:23Z","title":"Incompressible Knowledge Probes: Estimating Black-Box LLM Parameter Counts via Factual Capacity","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.24827","snapshot_observed_at":"2026-08-01T09:13:16.967261Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.20860","last_updated":"2026-07-23T02:32:08Z","snapshot_observed_at":"2026-08-09T04:37:16.842521Z","submitted_at":"2026-07-23T02:32:08Z","title":"Which Model Is Actually Serving You? IRIS: Budgeted Black-Box Auditing of Model Substitution and Routing Dilution in LLM Gateways","version":1},"reference_index":55,"source":"arxiv_source","source_observed_at":"2026-08-01T09:13:16.967261Z"},"links":{"cited_paper":"/paper/2604.24827","citing_paper":"/paper/2607.20860"},"observation_digest":"sha256:7b9b3c79868e99124d42a26e81a2831017d40fd851733e75c47d86be966df2ee","observation_id":"154e48f8-4380-40fe-b1a9-1c6fe5a96f4a","resolution":{"observed_at":"2026-08-01T09:13:16.967261Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T09:13:17.046011Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.20860","last_updated":"2026-07-23T02:32:08Z","snapshot_observed_at":"2026-08-09T04:37:16.842521Z","submitted_at":"2026-07-23T02:32:08Z","title":"Which Model Is Actually Serving You? IRIS: Budgeted Black-Box Auditing of Model Substitution and Routing Dilution in LLM Gateways","version":1},"reference_index":56,"source":"arxiv_source","source_observed_at":"2026-08-01T09:13:17.046011Z"},"links":{"citing_paper":"/paper/2607.20860"},"observation_digest":"sha256:01d0ea9f022282d54dbe6561f5daac801cd886d1c4d157870cd2603b609066a8","observation_id":"d4adb626-c559-49c9-9a4f-b3253398c14b","resolution":{"observed_at":"2026-08-01T09:13:17.046011Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2604.08407","last_updated":"2026-04-09T16:06:41Z","snapshot_observed_at":"2026-08-08T09:58:12.420023Z","submitted_at":"2026-04-09T16:06:41Z","title":"Your Agent Is Mine: Measuring Malicious Intermediary Attacks on the LLM Supply Chain","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.08407","snapshot_observed_at":"2026-08-01T09:13:17.131106Z","title":"J.; and Feng, Y","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.20860","last_updated":"2026-07-23T02:32:08Z","snapshot_observed_at":"2026-08-09T04:37:16.842521Z","submitted_at":"2026-07-23T02:32:08Z","title":"Which Model Is Actually Serving You? IRIS: Budgeted Black-Box Auditing of Model Substitution and Routing Dilution in LLM Gateways","version":1},"reference_index":57,"source":"arxiv_source","source_observed_at":"2026-08-01T09:13:17.131106Z"},"links":{"cited_paper":"/paper/2604.08407","citing_paper":"/paper/2607.20860"},"observation_digest":"sha256:73d06ebe64a989ae34976aef57f3da09ec2884c94462361a35d1046aec7ed2e9","observation_id":"f4a9d3d1-0470-447e-ae42-fcba5cab6833","resolution":{"observed_at":"2026-08-01T09:13:17.131106Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T09:13:17.177532Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.20860","last_updated":"2026-07-23T02:32:08Z","snapshot_observed_at":"2026-08-09T04:37:16.842521Z","submitted_at":"2026-07-23T02:32:08Z","title":"Which Model Is Actually Serving You? IRIS: Budgeted Black-Box Auditing of Model Substitution and Routing Dilution in LLM Gateways","version":1},"reference_index":58,"source":"arxiv_source","source_observed_at":"2026-08-01T09:13:17.177532Z"},"links":{"citing_paper":"/paper/2607.20860"},"observation_digest":"sha256:e2161337caa8416701556873082c31f13a1ed37054824b9a2f1511b472ab6f6e","observation_id":"e2b386ff-e9b5-4bab-8230-55f4b80eb5af","resolution":{"observed_at":"2026-08-01T09:13:17.177532Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T09:13:17.236217Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.20860","last_updated":"2026-07-23T02:32:08Z","snapshot_observed_at":"2026-08-09T04:37:16.842521Z","submitted_at":"2026-07-23T02:32:08Z","title":"Which Model Is Actually Serving You? IRIS: Budgeted Black-Box Auditing of Model Substitution and Routing Dilution in LLM Gateways","version":1},"reference_index":59,"source":"arxiv_source","source_observed_at":"2026-08-01T09:13:17.236217Z"},"links":{"citing_paper":"/paper/2607.20860"},"observation_digest":"sha256:5f7dc38f959c4d3c4fb2bb19a0d332d845210be1103a0036904d192b5d2524ce","observation_id":"5c08007e-b73d-43d3-b6d3-eca02956f2c8","resolution":{"observed_at":"2026-08-01T09:13:17.236217Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T09:13:17.325545Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.20860","last_updated":"2026-07-23T02:32:08Z","snapshot_observed_at":"2026-08-09T04:37:16.842521Z","submitted_at":"2026-07-23T02:32:08Z","title":"Which Model Is Actually Serving You? IRIS: Budgeted Black-Box Auditing of Model Substitution and Routing Dilution in LLM Gateways","version":1},"reference_index":60,"source":"arxiv_source","source_observed_at":"2026-08-01T09:13:17.325545Z"},"links":{"citing_paper":"/paper/2607.20860"},"observation_digest":"sha256:d4d6f49ecefdc1c4152f705a4fb45951e72823f0e089a771849d247bd10086f7","observation_id":"b4c5d8a5-5eb5-4876-b9fc-994434f4f427","resolution":{"observed_at":"2026-08-01T09:13:17.325545Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T09:13:17.382644Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.20860","last_updated":"2026-07-23T02:32:08Z","snapshot_observed_at":"2026-08-09T04:37:16.842521Z","submitted_at":"2026-07-23T02:32:08Z","title":"Which Model Is Actually Serving You? IRIS: Budgeted Black-Box Auditing of Model Substitution and Routing Dilution in LLM Gateways","version":1},"reference_index":61,"source":"arxiv_source","source_observed_at":"2026-08-01T09:13:17.382644Z"},"links":{"citing_paper":"/paper/2607.20860"},"observation_digest":"sha256:fb3b4bbd31dbcbec9b87cb071845fdff3cc6989e7bf1d3438a9c79d72a0f035f","observation_id":"4340b01f-c833-4ae0-91c1-5b954d10fed2","resolution":{"observed_at":"2026-08-01T09:13:17.382644Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T09:13:17.450457Z","title":"A.; and Neiswanger, W","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.20860","last_updated":"2026-07-23T02:32:08Z","snapshot_observed_at":"2026-08-09T04:37:16.842521Z","submitted_at":"2026-07-23T02:32:08Z","title":"Which Model Is Actually Serving You? IRIS: Budgeted Black-Box Auditing of Model Substitution and Routing Dilution in LLM Gateways","version":1},"reference_index":62,"source":"arxiv_source","source_observed_at":"2026-08-01T09:13:17.450457Z"},"links":{"citing_paper":"/paper/2607.20860"},"observation_digest":"sha256:7a6b6eda0b53879cb8ba373f01069d819e89495c9c7420a45985925b1ac3d26d","observation_id":"a322af48-1968-40c2-b42c-664bd1b6f400","resolution":{"observed_at":"2026-08-01T09:13:17.450457Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2607.20860","last_updated":"2026-07-23T02:32:08Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-09T04:37:16.842521Z","submitted_at":"2026-07-23T02:32:08Z","title":"Which Model Is Actually Serving You? IRIS: Budgeted Black-Box Auditing of Model Substitution and Routing Dilution in LLM Gateways"},"reference_resolution":{"displayed":59,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":59,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":59},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"thesis":"As of 10 August 2026, this Paper Citation Record lists 59 of 59 outbound references and 0 inbound Pith citation observations for arXiv:2607.20860."}