{"as_of":"2026-08-17T18:07:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:0c28d4210331aacdca513861e62dc2f29e52134f576162301e3159133ef97724","coverage":[{"denominator":71,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":71,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-01T04:12:58.815158Z","state":"measured"},{"denominator":71,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":71,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-17T06:30:58.91139+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2607.22926/citation-record","integrity":"/paper/2607.22926/integrity","json":"/paper/2607.22926/citation-record.json","paper":"/paper/2607.22926"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.477630Z","title":"and Bates, Stephen and Fisch, Adam and Lei, Lihua and Schuster, Tal , title =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-17T16:17:48.697721Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.477630Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:f0ae5975dec652007d9d9aebaeb2496616186deccf85250d3329dfdc6b2dfe16","observation_id":"e386d600-11db-4447-bbb0-3bdb46b0c2e6","resolution":{"observed_at":"2026-08-01T04:12:58.477630Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.482445Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-17T16:17:48.697721Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.482445Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:0e59d87964d03900b62831b7fafd08e7deded21c74d1fa44ad5114505dc40cd0","observation_id":"21d0965f-d4e5-49b1-8cf8-68b917901aa1","resolution":{"observed_at":"2026-08-01T04:12:58.482445Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.488562Z","title":"225 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-17T16:17:48.697721Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.488562Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:b0cab9e1ce540c30d55531639828f8e0daf0816564cd0b5870955fe93c8c3185","observation_id":"2240337a-c29d-4f24-abe9-8073c986602f","resolution":{"observed_at":"2026-08-01T04:12:58.488562Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.493457Z","title":"Proceedings of the 42nd International Conference on Machine Learning , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-17T16:17:48.697721Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.493457Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:f0c3b5eb98161427ab29774c5766afe93e71df71bd4395616181d9d2a045f676","observation_id":"6fbce0bd-8b3f-4142-83d2-04e419ad532a","resolution":{"observed_at":"2026-08-01T04:12:58.493457Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.498452Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-17T16:17:48.697721Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.498452Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:09b4bfbf6551be375a3a02dcb8db0ff85865685ed3b8610275e0788f22d4fed3","observation_id":"d91a120a-d822-4b24-8f99-537d6bc3322b","resolution":{"observed_at":"2026-08-01T04:12:58.498452Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.503342Z","title":"Official Journal of the European Union , url =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-17T16:17:48.697721Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.503342Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:4e43b9c5decca37119915034dbd373dfaa24d76ded2184565a585b4349a09b9d","observation_id":"6fc1e2b1-9943-474c-9b93-735521a4edc9","resolution":{"observed_at":"2026-08-01T04:12:58.503342Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.508141Z","title":"Advances in Neural Information Processing Systems , volume =","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-17T16:17:48.697721Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.508141Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:b7d3f107b28644170aba353964183a26897ba36a02e29768586c210699be40eb","observation_id":"ac01214c-91e6-44fb-82ec-d5947046d5ff","resolution":{"observed_at":"2026-08-01T04:12:58.508141Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.512702Z","title":"Computer Aided Verification , series =","venue":null,"work_id":null,"year":2011},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-17T16:17:48.697721Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.512702Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:7fd69f4e1ae580e2a6180ea825b05ce4b2614b9af844363c2feb3e304893b536","observation_id":"7f192b9d-e95c-4bdf-bb3b-21641cfa5905","resolution":{"observed_at":"2026-08-01T04:12:58.512702Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.517513Z","title":"Journal of Logic and Algebraic Programming , volume =","venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-17T16:17:48.697721Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.517513Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:f96f04c7ddb3a19684e9f1db940e1c9bda07d8e47fde374aea9d7cb6aad4c83d","observation_id":"e7227c6f-5b58-41c3-abae-49fc78e7dac6","resolution":{"observed_at":"2026-08-01T04:12:58.517513Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.522153Z","title":"Proceedings of the 41st International Conference on Machine Learning , series =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-17T16:17:48.697721Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.522153Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:779707507698d54234697753c63a099bcc42ae1fe49ed12c158379683e57712e","observation_id":"4b1c7390-57a4-43a6-8556-803e189d5c89","resolution":{"observed_at":"2026-08-01T04:12:58.522153Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.527367Z","title":"2023 , doi =","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-17T16:17:48.697721Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.527367Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:ff1067d988183dd1b83e9ef7df22a79028d0103ad49f62fcc4e742539e17a2df","observation_id":"2f581593-88e8-4a40-a6b1-6ec21efb9731","resolution":{"observed_at":"2026-08-01T04:12:58.527367Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.532463Z","title":"2024 , doi =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-17T16:17:48.697721Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.532463Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:9f2039bc5ab36b47a6572ba8dacdeb261a5fa2e7e95933cfe121c39657524167","observation_id":"75006494-161e-473a-8a78-eb8d15910679","resolution":{"observed_at":"2026-08-01T04:12:58.532463Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.536732Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-17T16:17:48.697721Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.536732Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:a6790785e7ac587b146fafea04a096af648a4cd2a228727a5006e38b5919a942","observation_id":"e2d3c197-53ee-48ab-af77-2bdf6bd41595","resolution":{"observed_at":"2026-08-01T04:12:58.536732Z","resolver_source":null,"status":"parse_uncertain"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.541298Z","title":"Proceedings of the 2024 Conference of the North American Chapter of the Association for Computational Linguistics: Human Language Technologies , pages =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-17T16:17:48.697721Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.541298Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:1fdf3791c2c8a6dec96edcbd1a2998d6ad5bcadcf4442262c88e3814a0d023ec","observation_id":"2267c734-e9cf-4c28-8228-74fa2dfb08be","resolution":{"observed_at":"2026-08-01T04:12:58.541298Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.545844Z","title":"and Schroeder, Michael D","venue":null,"work_id":null,"year":1975},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-17T16:17:48.697721Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.545844Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:2c06fe80870074a5887024fc3d15449485ad6782c21c1ce4ce1672fad29e3e62","observation_id":"621d31ba-bd70-4d5e-9aa8-ded0b18d444b","resolution":{"observed_at":"2026-08-01T04:12:58.545844Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.550295Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-17T16:17:48.697721Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.550295Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:eafddbfca4b189ce6c8b54dbd6cb94f2dbdf94dec5513006037fbdd95398c50b","observation_id":"45209cb0-d433-4458-be9a-e791f14313d8","resolution":{"observed_at":"2026-08-01T04:12:58.550295Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.554846Z","title":"Advances in Neural Information Processing Systems , volume =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-17T16:17:48.697721Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.554846Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:d04c638b338fcfe291d62435b5fce5b8080a00bb35d8c206c57b3c46713b95a2","observation_id":"c076d59f-544b-491e-97d1-10a78912dd96","resolution":{"observed_at":"2026-08-01T04:12:58.554846Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.559270Z","title":"International Conference on Learning Representations , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-17T16:17:48.697721Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.559270Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:295fd12177bd6f3b930b2374fab3df3c71d9e5cbd4a99969c53be9a0b3b2e0d4","observation_id":"2cf1a76e-3bd3-4abf-bd23-2923b991510d","resolution":{"observed_at":"2026-08-01T04:12:58.559270Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.565000Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-17T16:17:48.697721Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.565000Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:e2b1b22ec8b2e21a17a0cb944f250ae5426cfec9a2d17d2e29e7b1baf4868e4c","observation_id":"3fbdd567-3e93-477e-bb33-75531a62bb26","resolution":{"observed_at":"2026-08-01T04:12:58.565000Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.569384Z","title":"Advances in Neural Information Processing Systems , volume =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-17T16:17:48.697721Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.569384Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:e2f1e3996a5a35200e1eaf420861d5045911a2e0a1b00202d6249aba4a8d62a0","observation_id":"85db97ed-5629-4e6c-a6e7-e1e92567facf","resolution":{"observed_at":"2026-08-01T04:12:58.569384Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.573507Z","title":"2024 , url =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-17T16:17:48.697721Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.573507Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:56a06efbe52c8fef97f45bc96f6719a9b15708f61e6564650e8356e9d624b5c8","observation_id":"47fe86a6-3dbc-4074-a1c2-cb4638f34dd0","resolution":{"observed_at":"2026-08-01T04:12:58.573507Z","resolver_source":null,"status":"parse_uncertain"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.577723Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-17T16:17:48.697721Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.577723Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:5c046b9d22c2d51effaefb3ae66e792d7bef5719f3cc3f14a490e5e8ba3caa51","observation_id":"30e7271c-0435-4f54-9b58-2065402017b9","resolution":{"observed_at":"2026-08-01T04:12:58.577723Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.582038Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-17T16:17:48.697721Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.582038Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:63487a828fca2666c31126992667a0acd6e7801abca2d27e51914f13feef011a","observation_id":"3dd95b80-2175-45b6-9f8b-81b33e2b18d9","resolution":{"observed_at":"2026-08-01T04:12:58.582038Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.586329Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-17T16:17:48.697721Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.586329Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:016d2abd41427e1acc8fcc20ee4cabde86e88503d07bd5bb450bd2476dc9313c","observation_id":"f4f58328-2972-4a04-8678-e34b7b022542","resolution":{"observed_at":"2026-08-01T04:12:58.586329Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.590701Z","title":"2025 , url =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-17T16:17:48.697721Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.590701Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:c8193b58af248c6942b9ff6d3612b68f57fdfcde307f7dba43699a644484621c","observation_id":"7d9e6bb8-dbef-4421-94ef-a46a252cc254","resolution":{"observed_at":"2026-08-01T04:12:58.590701Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.594902Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-17T16:17:48.697721Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.594902Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:5dcd652217999bd8ea59a65396396ddacdb64570b1ad9de1b321665db6ff8478","observation_id":"b93cbb9c-790a-42b5-8ff5-3d6436ade7e0","resolution":{"observed_at":"2026-08-01T04:12:58.594902Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.599241Z","title":"2023 , howpublished =","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-17T16:17:48.697721Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.599241Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:08c08c22bdebe7fd313eced914f8601253a24c1ea2189ae9dead6dea38793091","observation_id":"226d0859-17b0-4c84-a502-f081fbc3a68d","resolution":{"observed_at":"2026-08-01T04:12:58.599241Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.603454Z","title":"Proceedings of the 2023 Conference on Empirical Methods in Natural Language Processing: System Demonstrations , pages =","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-17T16:17:48.697721Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.603454Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:5863ce5a62859712d4c3ae6ee65caf94de267d439a2aafa58142f57f66e640e0","observation_id":"71107b49-84da-4093-8952-702e58766bcf","resolution":{"observed_at":"2026-08-01T04:12:58.603454Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.608447Z","title":"2024 , howpublished =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-17T16:17:48.697721Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.608447Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:9c84443565eb1c8081a0a527cc00ec7de6090ca1b198a084879b7615d39416b9","observation_id":"6d9f5401-728b-4c1e-8d3f-d3ef8c809365","resolution":{"observed_at":"2026-08-01T04:12:58.608447Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.613101Z","title":"Proceedings of the AAAI Conference on Artificial Intelligence , volume =","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-17T16:17:48.697721Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.613101Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:73e333ba059762ae959c728b0f239fd1f7b5ce58062edad9eda750834f75bf3d","observation_id":"7e3ed754-7fc3-481a-8c22-95dbf5f88121","resolution":{"observed_at":"2026-08-01T04:12:58.613101Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.617549Z","title":"2025 , howpublished =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-17T16:17:48.697721Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.617549Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:0b04b1b8e91a060006da91de81eee5cc41156a0f1cd4388130e2b2edb781f333","observation_id":"9a77f8e3-45a4-49fd-b284-1d24de734995","resolution":{"observed_at":"2026-08-01T04:12:58.617549Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.627019Z","title":"and Deshpande, Kaustubh and Sirdeshmukh, Ved and Mankikar, Meher and Scale Red Team and SEAL Research Team and Michael, Julian , journal =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-17T16:17:48.697721Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.627019Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:4b1f5df3fe7b5f51440b9e69782f9b0f506a37dfba43154a0050120a8edb752d","observation_id":"6e6b469b-848e-4a1e-8355-1f37e39cdd63","resolution":{"observed_at":"2026-08-01T04:12:58.627019Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.637277Z","title":"Safer or Luckier?","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-17T16:17:48.697721Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.637277Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:364e740721e30c41792e629a845f01b18186503958bb92f3d6d0aad296294bca","observation_id":"be6220f4-e2c9-4150-aaad-03b1f6ad96ec","resolution":{"observed_at":"2026-08-01T04:12:58.637277Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.641609Z","title":"Investigating the Potential Use of Frontier","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-17T16:17:48.697721Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.641609Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:76a08e0e7a9fda6670161288b4d1f8be6b97d0a5296da8b0f21419b92361b3b5","observation_id":"84a56c00-f822-4bc7-861b-37a0a505d926","resolution":{"observed_at":"2026-08-01T04:12:58.641609Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.646153Z","title":"2025 , howpublished =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-17T16:17:48.697721Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.646153Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:14b9cabce6c43291a8b2d09d24dbc05cfb56a8e4034b091071d23db469994970","observation_id":"2d7b209b-9fda-49b4-8baa-f9b924952d54","resolution":{"observed_at":"2026-08-01T04:12:58.646153Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.650539Z","title":"Investigating the potential use of frontier AI models for offensive cyberattacks: A human uplift study","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-17T16:17:48.697721Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":38,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.650539Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:23b33a93e7fc23906f9302565584167e17ee63c1ee4d0685f78ded6483da58dc","observation_id":"9ef102d9-e442-4745-9e8b-8810bc54f6fe","resolution":{"observed_at":"2026-08-01T04:12:58.650539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.655028Z","title":"Angelopoulos, Stephen Bates, Adam Fisch, Lihua Lei, and Tal Schuster","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-17T16:17:48.697721Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":39,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.655028Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:ee78cefc9e0b48d582411c48d4069afe4e3a552903795d44527a1db5ca6338fd","observation_id":"d6aa0650-fda6-40c7-99de-26bc3c15f75c","resolution":{"observed_at":"2026-08-01T04:12:58.655028Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.659492Z","title":"Why do we take LLM s seriously as a potential source of biorisk? https://www.anthropic.com/research/biorisk, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-17T16:17:48.697721Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":40,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.659492Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:0b178df68c7d6a9b3c60fca21f5a217ae43c3ae033a28eb109b52aa4513b84ed","observation_id":"4788f1d8-9b6d-46dc-9544-a5eee0216bf6","resolution":{"observed_at":"2026-08-01T04:12:58.659492Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.663853Z","title":"Claude system cards, 2026","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-17T16:17:48.697721Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":41,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.663853Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:54a2014c607d20ff31b2d3edd7503174fb737488d9e803bad5419a4fb7bb4211","observation_id":"3b898e95-62b6-4618-9ad8-0e8d5f84822a","resolution":{"observed_at":"2026-08-01T04:12:58.663853Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.668103Z","title":"Safer or luckier? LLM s as safety evaluators are not robust to artifacts","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-17T16:17:48.697721Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":42,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.668103Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:3d345fc66bd9717b945ed3ea8fafc71cc0416094003238145508d765a4c6107a","observation_id":"456e7b70-c241-499a-863a-292c1bdbc7d2","resolution":{"observed_at":"2026-08-01T04:12:58.668103Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.673871Z","title":"Framework convention on artificial intelligence and human rights, democracy and the rule of law, cets no","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-17T16:17:48.697721Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":43,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.673871Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:1c8e601568063f5fd7c1f9b8ffb3dfe0c90d361488e0ce63ba902658e1c61b4b","observation_id":"6e88b490-7ac7-42b8-bd01-a1006ace5936","resolution":{"observed_at":"2026-08-01T04:12:58.673871Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.678233Z","title":"OR-Bench : An over-refusal benchmark for large language models","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-17T16:17:48.697721Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":44,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.678233Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:66b030a09b51902f97ba8953472c6267eb57f13323320df8c87f8c1678c203e6","observation_id":"78b1abef-d838-4919-bbf3-a414aa3b33fc","resolution":{"observed_at":"2026-08-01T04:12:58.678233Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.682749Z","title":"Secure by design, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-17T16:17:48.697721Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":45,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.682749Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:d2f47f3ef96e80f4762ec769f459bf2430adddc8980c785215fd902483826638","observation_id":"2094cad3-422a-4397-b57a-778c04e442ec","resolution":{"observed_at":"2026-08-01T04:12:58.682749Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.687182Z","title":"General-purpose AI code of practice, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-17T16:17:48.697721Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":46,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.687182Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:835671ae20921835acf806a333b1e89d0aee692eabf39dd0c5428d64846698c0","observation_id":"55f12536-1212-4ce2-a381-30e86bbb1725","resolution":{"observed_at":"2026-08-01T04:12:58.687182Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.691929Z","title":"Regulation (eu) 2024/1689 laying down harmonised rules on artificial intelligence, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-17T16:17:48.697721Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":47,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.691929Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:748b932691746b21d65b6a1d290d98e440c755af2da314e24cd0428216c5f545","observation_id":"639cf979-8b12-4301-9b24-158e56520398","resolution":{"observed_at":"2026-08-01T04:12:58.691929Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.696545Z","title":"Selective classification for deep neural networks","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-17T16:17:48.697721Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":48,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.696545Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:1981fca16887e07ca1bb40b221604f12699011f9cd4b53ec86ddc49459394eb0","observation_id":"00f30630-c510-4668-9650-8834e20cafac","resolution":{"observed_at":"2026-08-01T04:12:58.696545Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.701200Z","title":"Gemini 3 pro model card, 2026","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-17T16:17:48.697721Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":49,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.701200Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:23e7d505eb3d6fb99ebc0e76bb76faabd1fbe6863315e2d3a16891c3cf16090d","observation_id":"5d542346-135c-4686-9426-a8eb51539cfa","resolution":{"observed_at":"2026-08-01T04:12:58.701200Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2604.18775","last_updated":"2026-04-20T19:32:00Z","snapshot_observed_at":"2026-08-17T04:11:15.420534Z","submitted_at":"2026-04-20T19:32:00Z","title":"An Empirical Study of Multi-Generation Sampling for Jailbreak Detection in Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.18775","snapshot_observed_at":"2026-08-01T04:12:58.706286Z","title":"Gowda and Hanrui Luo","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-17T16:17:48.697721Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":50,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.706286Z"},"links":{"cited_paper":"/paper/2604.18775","citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:b3fedc06979a7cc87401ea3302250a3a901fe4bded8efc2c555f208a51b29b70","observation_id":"ae8f414f-5a20-4a1f-aecd-45874c484f85","resolution":{"observed_at":"2026-08-01T04:12:58.706286Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.06674","last_updated":"2023-12-07T19:40:50Z","snapshot_observed_at":"2026-08-14T15:42:19.849118Z","submitted_at":"2023-12-07T19:40:50Z","title":"Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversations","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.06674","snapshot_observed_at":"2026-08-01T04:12:58.712067Z","title":"Llama guard: LLM -based input-output safeguard for human- AI conversations","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-17T16:17:48.697721Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":51,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.712067Z"},"links":{"cited_paper":"/paper/2312.06674","citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:0d9ce742214bc0e85a59691856480d0d3c3e43c0ea811397b9c1b696ac78a852","observation_id":"d921dd8d-c965-4623-97ef-556a87ee48b0","resolution":{"observed_at":"2026-08-01T04:12:58.712067Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.14922","snapshot_observed_at":"2026-08-01T04:12:58.717397Z","title":"Knight, Kaustubh Deshpande, Ved Sirdeshmukh, Meher Mankikar, Scale Red Team, SEAL Research Team, and Julian Michael","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-17T16:17:48.697721Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":52,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.717397Z"},"links":{"cited_paper":"/paper/2506.14922","citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:45e828b9e2252ed40d8d1613a7180bef553699be271c31ba1fd0572e81408669","observation_id":"df0c230d-5c14-4555-a6b6-4dc5eb2ba4e8","resolution":{"observed_at":"2026-08-01T04:12:58.717397Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.722561Z","title":"PRISM 4.0: Verification of probabilistic real-time systems","venue":null,"work_id":null,"year":2011},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-17T16:17:48.697721Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":53,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.722561Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:636f6db476e785b46a0df89002c210084edcf569e44d0e443b7c96702cea39f5","observation_id":"a4d97111-8556-4ca6-bd93-bd6f91f79161","resolution":{"observed_at":"2026-08-01T04:12:58.722561Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.727315Z","title":"A brief account of runtime verification","venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-17T16:17:48.697721Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":54,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.727315Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:d4589fba10a019442a61b31c5cbeb166ffab13c205a0480c340ebb4254ebb5a5","observation_id":"6ba8f4bc-4d22-4f68-b311-29d6b731947c","resolution":{"observed_at":"2026-08-01T04:12:58.727315Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.732089Z","title":"A holistic approach to undesired content detection in the real world","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-17T16:17:48.697721Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":55,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.732089Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:5a8fca3e101906165264f3ac4b4861e55b5225df25694fac80a6ef5e4de5c1d3","observation_id":"262a9b1d-6929-40ec-89e7-43119cc7b77d","resolution":{"observed_at":"2026-08-01T04:12:58.732089Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.736675Z","title":"HarmBench : A standardized evaluation framework for automated red teaming and robust refusal","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-17T16:17:48.697721Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":56,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.736675Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:79f9505192668c06648087f2d397e6df57e2c82ea298945509aa568a39d3ae47","observation_id":"60a70377-0365-47ca-9a47-ab52212ae630","resolution":{"observed_at":"2026-08-01T04:12:58.736675Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.741851Z","title":"Artificial intelligence risk management framework ( AI RMF 1.0)","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-17T16:17:48.697721Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":57,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.741851Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:c7175d730330fd695006e956971e4cd37711e5aee42be6bfbd28b70d77c5ace8","observation_id":"81970eb8-bc0d-435c-8243-2ab1ff0a3267","resolution":{"observed_at":"2026-08-01T04:12:58.741851Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.746477Z","title":"Artificial intelligence risk management framework: Generative artificial intelligence profile","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-17T16:17:48.697721Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":58,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.746477Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:d5c418daac49d292de4d2189d1ce694e4c5c54c4b826005f152ad08139a76335","observation_id":"f7875d81-c32f-4c5c-a375-8bb729e3450f","resolution":{"observed_at":"2026-08-01T04:12:58.746477Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.751486Z","title":"CAISI evaluation of DeepSeek ai models finds shortcomings and risks","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-17T16:17:48.697721Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":59,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.751486Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:7c26ecf1ce7a2d6e18b063f7401f7296386a24bdcbbf8bd8c85021fba18cd630","observation_id":"813e2c9f-0a7b-46e7-8ea0-5e5da20023c2","resolution":{"observed_at":"2026-08-01T04:12:58.751486Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.755866Z","title":"GPT-5 system card, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-17T16:17:48.697721Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":60,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.755866Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:61a7c81585b57f10dc1fe591f375476f1e7d56d71de82b12db8833a31165546b","observation_id":"8c2266c6-4d8b-4abe-a70d-78fdef69d4ca","resolution":{"observed_at":"2026-08-01T04:12:58.755866Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.760363Z","title":"GPT-5.5 system card, 2026","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-17T16:17:48.697721Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":61,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.760363Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:a24ca75e81cec94074bacb64748e9b52445b0a883dbdb73888defaa614237244","observation_id":"a44b9562-4e4e-4158-90da-effe1154a8df","resolution":{"observed_at":"2026-08-01T04:12:58.760363Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.13793","last_updated":"2024-04-05T12:26:11Z","snapshot_observed_at":"2026-08-16T14:07:56.490852Z","submitted_at":"2024-03-20T17:54:26Z","title":"Evaluating Frontier Models for Dangerous Capabilities","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.13793","snapshot_observed_at":"2026-08-01T04:12:58.764877Z","title":"Evaluating frontier models for dangerous capabilities","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-17T16:17:48.697721Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":62,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.764877Z"},"links":{"cited_paper":"/paper/2403.13793","citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:6794623b2773ebade48350707dbed5e4aa4b7d8f0e39b962a68cd2eb64318737","observation_id":"1cc1b510-a081-4d37-a465-c8fa80c98ce4","resolution":{"observed_at":"2026-08-01T04:12:58.764877Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.769159Z","title":"NeMo guardrails: A toolkit for controllable and safe LLM applications with programmable rails","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-17T16:17:48.697721Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":63,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.769159Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:78458b74632074fddef46c000425f9c3f927c1e9cd0f72c566f521cbb40a9af1","observation_id":"6c60f9e8-3e1f-4254-8244-8600bc86b4d8","resolution":{"observed_at":"2026-08-01T04:12:58.769159Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.773831Z","title":"XSTest : A test suite for identifying exaggerated safety behaviours in large language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-17T16:17:48.697721Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":64,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.773831Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:5f7d12f3a6008501c834d1483b51f21349b7f6637586d0025b68c333dea0ec07","observation_id":"76462850-05c8-4e54-a52a-3e78fa128dd6","resolution":{"observed_at":"2026-08-01T04:12:58.773831Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.778247Z","title":"Saltzer and Michael D","venue":null,"work_id":null,"year":1975},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-17T16:17:48.697721Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":65,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.778247Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:eec72ec33ac7e9d57629089e85a4584ab38a78e786efc39b08b411c365b865d1","observation_id":"3a7feac4-3d05-441e-ba13-57d03795735e","resolution":{"observed_at":"2026-08-01T04:12:58.778247Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2501.18837","last_updated":"2025-01-31T01:09:32Z","snapshot_observed_at":"2026-08-08T23:58:18.293467Z","submitted_at":"2025-01-31T01:09:32Z","title":"Constitutional Classifiers: Defending against Universal Jailbreaks across Thousands of Hours of Red Teaming","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.18837","snapshot_observed_at":"2026-08-01T04:12:58.782750Z","title":"Constitutional classifiers: Defending against universal jailbreaks across thousands of hours of red teaming","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-17T16:17:48.697721Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":66,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.782750Z"},"links":{"cited_paper":"/paper/2501.18837","citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:8bbbedccb41f034335fc1dad9ce8e9c428eb7db76788c44032a420376c13461c","observation_id":"b4b4bc95-6f10-4c78-bee9-f8301d54e997","resolution":{"observed_at":"2026-08-01T04:12:58.782750Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.787855Z","title":"Judging the judges: A systematic study of position bias in LLM -as-a-judge","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-17T16:17:48.697721Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":67,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.787855Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:51a745f15615a7e6baa378b5d0dfb58d3d4dc6bdf3344ec41f08a10fa111a0db","observation_id":"71c8b7a1-6495-44bc-a25b-fd2cd0dc4005","resolution":{"observed_at":"2026-08-01T04:12:58.787855Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.792585Z","title":"A StrongREJECT for empty jailbreaks","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-17T16:17:48.697721Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":68,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.792585Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:9605c02c3cae2fbe25f3d0b4e2906210e55a82ee6a8e926e73f138fb5066309d","observation_id":"5df24c37-9aa2-4d7b-ba37-12d9d6864e5f","resolution":{"observed_at":"2026-08-01T04:12:58.792585Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.797189Z","title":"Frontier AI safety commitments, AI seoul summit 2024, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-17T16:17:48.697721Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":69,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.797189Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:5014e1d25376368743f597c0e95f1d10ac28d65305ef03ba84205e1a0f034737","observation_id":"90034dc1-7a10-4e5c-bbaa-aca42dac7f46","resolution":{"observed_at":"2026-08-01T04:12:58.797189Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.802025Z","title":"Grok 4.1 model card, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-17T16:17:48.697721Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":70,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.802025Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:2c3dab5371244276462f58454eb2d0c9d1cf76cc429fa50505744c322ef83024","observation_id":"5fa189bb-86f1-4bba-aff1-8d6c721b71fd","resolution":{"observed_at":"2026-08-01T04:12:58.802025Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.806410Z","title":"SORRY-Bench : Systematically evaluating large language model safety refusal","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-17T16:17:48.697721Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":71,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.806410Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:c2749e0aebf24fad3c825ee36fbd481046ad667b91242aa669a1b4b3f6d5e5c5","observation_id":"ccf80d18-6a88-4ddf-bc67-ab897124dd4b","resolution":{"observed_at":"2026-08-01T04:12:58.806410Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.21772","last_updated":"2024-08-04T22:13:39Z","snapshot_observed_at":"2026-08-15T05:00:37.014348Z","submitted_at":"2024-07-31T17:48:14Z","title":"ShieldGemma: Generative AI Content Moderation Based on Gemma","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.21772","snapshot_observed_at":"2026-08-01T04:12:58.810542Z","title":"ShieldGemma : Generative AI content moderation based on Gemma","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-17T16:17:48.697721Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":72,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.810542Z"},"links":{"cited_paper":"/paper/2407.21772","citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:e16b4adf43613e6f608d812e96854053ecda8b2c10bca7a47bddea0c4934d874","observation_id":"679131dd-d80e-44e7-9fc4-fcbb10eb3d2a","resolution":{"observed_at":"2026-08-01T04:12:58.810542Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T04:12:58.815158Z","title":"Judging LLM -as-a-judge with MT-Bench and chatbot arena","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-17T16:17:48.697721Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":73,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.815158Z"},"links":{"citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:2bbf1dbe9be651140a778f5224012dc9aed8ca2b62e6f169c28930942179976e","observation_id":"20ab5d61-2eaa-4375-92a1-14c712e8dede","resolution":{"observed_at":"2026-08-01T04:12:58.815158Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","latest_version":1,"primary_category":"cs.AI","snapshot_observed_at":"2026-08-17T16:17:48.697721Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI"},"reference_resolution":{"displayed":71,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":2,"unresolved":69,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":71},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"thesis":"As of 17 August 2026, this Paper Citation Record lists 71 of 71 outbound references and 0 inbound Pith citation observations for arXiv:2607.22926."}