{"as_of":"2026-08-07T17:34:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:1a6cffad1131a8d341b70005286679ae13f53ef905a8e242f174dbaefa933327","coverage":[{"denominator":114,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":100,"source":"paper_references, paper_reference_links","source_observed_at":"2026-07-30T19:18:10.059070Z","state":"measured"},{"denominator":100,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":100,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2607.26849/citation-record","integrity":"/paper/2607.26849/integrity","json":"/paper/2607.26849/citation-record.json","paper":"/paper/2607.26849"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:05.330653Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:05.330653Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:26f1263c4ecd5ad4f418eb2e16619c394ec343b45e72706d2b511960335d2066","observation_id":"566b75c3-8b0a-4a3b-bf7b-76c445edf13d","resolution":{"observed_at":"2026-07-30T19:18:05.330653Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1910.03771","last_updated":"2020-07-14T03:42:34Z","snapshot_observed_at":"2026-07-06T08:27:58.343233Z","submitted_at":"2019-10-09T03:23:22Z","title":"HuggingFace's Transformers: State-of-the-art Natural Language Processing","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1910.03771","snapshot_observed_at":"2026-07-30T19:18:05.392651Z","title":"arXiv preprint arXiv:1910.03771 , author =","venue":null,"work_id":null,"year":1910},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:05.392651Z"},"links":{"cited_paper":"/paper/1910.03771","citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:7664cdd95f7d3b8c5d316ae96ca67d436d3c15ae4b311f440557259e074a2b2f","observation_id":"bf5e6158-072f-4694-97e7-a272aea58549","resolution":{"observed_at":"2026-07-30T19:18:05.392651Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:05.461354Z","title":"Efficient memory management for large language model serving with pagedattention , booktitle =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:05.461354Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:22fc33fce5af8d26e0e9268771da5a974ebfdc2afd3ee9e8aea46e832f814015","observation_id":"23270164-01a5-4432-8270-3070dcbc70e1","resolution":{"observed_at":"2026-07-30T19:18:05.461354Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:05.524809Z","title":"arXiv preprint arXiv:2510.09462 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:05.524809Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:99174af01e8896fe94823a7f7f198dde8e2cf14b1d8686ecb8a76418dcbd0a7f","observation_id":"44083bf8-1839-43e8-a2f9-4492162e709e","resolution":{"observed_at":"2026-07-30T19:18:05.524809Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:05.625481Z","title":"Forethought Foundation , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:05.625481Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:f54b3ee2e256220454b4811f67a690a9dafb3acf9a6a172b67b51e88efad000f","observation_id":"164d58c1-6852-4e5c-a6ae-4daf692874d3","resolution":{"observed_at":"2026-07-30T19:18:05.625481Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:05.678068Z","title":"2025 , url=","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:05.678068Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:019c18fb7b4bb4bd0469f4306a676fad285e807d39aa14af97a0deede1d1562a","observation_id":"d72ccb1d-a127-4069-9c2f-aac744e627ff","resolution":{"observed_at":"2026-07-30T19:18:05.678068Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:05.754393Z","title":"2026 , url=","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:05.754393Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:070cba7ec5854799575b5f9bff9be18fd5e690e892dd868c83a0643b1e6aad36","observation_id":"a296cee8-d8f5-4293-b323-90389a78a5bf","resolution":{"observed_at":"2026-07-30T19:18:05.754393Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:05.853775Z","title":"2026 , month = feb, type =","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:05.853775Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:f30b171c326b4774eeb6d2b1d0e95a06f7d4ea896a31ba2db54ae88e601d673e","observation_id":"56c63bf5-9f63-4149-b123-bdfd68134da8","resolution":{"observed_at":"2026-07-30T19:18:05.853775Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:05.918747Z","title":"2018 , eprint=","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:05.918747Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:082b5f1aee76ccd683ef039cf71e6abd2f2fbaba463663950341b71f249f2a56","observation_id":"8db99f0a-ceaa-481c-be14-f653c6505d95","resolution":{"observed_at":"2026-07-30T19:18:05.918747Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:05.986162Z","title":"H ella S wag: Can a Machine Really Finish Your Sentence?","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:05.986162Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:8bd16801aecbd0eeb979917047567afa8612273a04360affb44ab4b4d4895f11","observation_id":"96bb1e21-2ae1-491d-aea9-6805d0d6b71e","resolution":{"observed_at":"2026-07-30T19:18:05.986162Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:06.055297Z","title":"Proceedings of the AAAI Conference on Artificial Intelligence , author=","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:06.055297Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:e8702879a3bbeddfcf2c0ccc75729f81c77744db08bfade0ae4ef327edaccc72","observation_id":"e07139d7-d460-4615-8d45-effd026de07a","resolution":{"observed_at":"2026-07-30T19:18:06.055297Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:06.145068Z","title":"2022 , eprint=","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:06.145068Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:bbcb7513bbe73345cf9bce59b80b67cd117c943af5ac8f03f9b4312035557440","observation_id":"8ee2e724-21ec-4d79-8058-12e978473d64","resolution":{"observed_at":"2026-07-30T19:18:06.145068Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:06.232788Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:06.232788Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:3c9835aa26248f9d4e5627bc697c5cfdd434b5fa038e8fc1d30fc7def32c232d","observation_id":"186c2ae2-eff1-4cc9-beff-f0bd9926eb34","resolution":{"observed_at":"2026-07-30T19:18:06.232788Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.21783","last_updated":"2024-11-23T23:27:33Z","snapshot_observed_at":"2026-07-06T18:55:11.576666Z","submitted_at":"2024-07-31T17:54:27Z","title":"The Llama 3 Herd of Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.21783","snapshot_observed_at":"2026-07-30T19:18:06.291911Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:06.291911Z"},"links":{"cited_paper":"/paper/2407.21783","citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:633c8d67972f76fd2fb144c924a7007e43011805c5bf3e0f7dbc728f498a9ed0","observation_id":"c117f470-2fbd-401f-beb0-f75b43013e9f","resolution":{"observed_at":"2026-07-30T19:18:06.291911Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:06.348406Z","title":"2026 , eprint=","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:06.348406Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:828dbe5d681f5441dfda50ad73b21e714ad8b4b1904043b2254eb2285c59a814","observation_id":"a98643c5-da86-47d6-9d60-2fba6afa0021","resolution":{"observed_at":"2026-07-30T19:18:06.348406Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:06.409187Z","title":"2025 , eprint=","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:06.409187Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:4f7c35a16e053e79f73dfe25f67dd2627be891f7e7e3dec42e1ceb4b61702e83","observation_id":"64063a37-b8f7-4dd8-be56-f2376e658bb1","resolution":{"observed_at":"2026-07-30T19:18:06.409187Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:06.464740Z","title":"2026 , eprint=","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:06.464740Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:7341e03bf39c985cf9ee726c506cd258f2592f2f19ea0d34b5e4a09eaf52fd45","observation_id":"01bf856a-2a8c-4ff9-848b-513e4043293e","resolution":{"observed_at":"2026-07-30T19:18:06.464740Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:06.518162Z","title":"Advances in Neural Information Processing Systems , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:06.518162Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:46263b758f6d5692deda18f11aa35ead3d6c51edcbcc469c1a9fdabb5d3fd05f","observation_id":"9712307e-c93a-4bae-adfc-38841c027a6c","resolution":{"observed_at":"2026-07-30T19:18:06.518162Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:06.572090Z","title":"High-dimensional Learning Dynamics 2025 , year=","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:06.572090Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:274dad2fc580061625625191fb6ae0108aa10afd6c212a8364430f25bd9eebc6","observation_id":"9462bae5-0727-424b-aa4b-1dd54e744e09","resolution":{"observed_at":"2026-07-30T19:18:06.572090Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:06.634390Z","title":"2026 , month =","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:06.634390Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:a814969be80820b941442f2713e4e9669e42fcbcb835737437ca21202310eb39","observation_id":"f5f36527-7875-4b30-9a8e-ff40ca3a443b","resolution":{"observed_at":"2026-07-30T19:18:06.634390Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:06.686478Z","title":"2023 , publisher=","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:06.686478Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:12e6b8fc8e846db71929a52f98240a95cd956aa7c5939c5f2a31b7fdadcd7678","observation_id":"03fe990d-c5a8-4a1b-b1f1-97af7cd75cf8","resolution":{"observed_at":"2026-07-30T19:18:06.686478Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:06.740137Z","title":"Proceedings of the 2022 Conference on Empirical Methods in Natural Language Processing , pages=","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:06.740137Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:dac9e0aedaa975fb32a5b66a378a02eec7aa81d680f8a50ff75ef5fac4b4b98d","observation_id":"e2ce4ba1-625d-4673-88aa-1385a5660629","resolution":{"observed_at":"2026-07-30T19:18:06.740137Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:06.805076Z","title":"Advances in Neural Information Processing Systems , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:06.805076Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:0db2a18ca005a33a253943d818b3d28b7308d5f1e1ad71c334edd1640486e511","observation_id":"2d01733f-2e44-4067-a61a-d8fed8af33da","resolution":{"observed_at":"2026-07-30T19:18:06.805076Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:06.860617Z","title":"International Conference on Learning Representations , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:06.860617Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:f751f390af71196d13f979a285238e52aaf36482cac9f85f6aab26ce6a490867","observation_id":"3e671e58-8e1a-49ac-8304-8128cb2f1350","resolution":{"observed_at":"2026-07-30T19:18:06.860617Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:06.916002Z","title":"Advances in Neural Information Processing Systems , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:06.916002Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:b761cded7758aabc5e5a78eb2d276944e487f875547b373f3554722fef8980d6","observation_id":"10509fce-541c-4f0e-9d6c-e0b333f8bd00","resolution":{"observed_at":"2026-07-30T19:18:06.916002Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:06.975238Z","title":"Machine Learning , volume=","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:06.975238Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:50204b4d4f4cb745d1ec3ccf2ee3173ed8ca740f034d23e7189b8841a56d5ede","observation_id":"1afd2d79-22cd-4886-a775-e41a8da449ba","resolution":{"observed_at":"2026-07-30T19:18:06.975238Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:07.030036Z","title":"From Automation to Autonomy: A Survey on Large Language Models in Scientific Discovery","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:07.030036Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:1604f909b78e3a4bcc2b9f83eb101bbf0ee689a32a9c17dc368e88747bdc7f5a","observation_id":"c8302a73-1457-431a-9714-7ea4ff76a840","resolution":{"observed_at":"2026-07-30T19:18:07.030036Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.12768","last_updated":"2025-06-11T12:40:14Z","snapshot_observed_at":"2026-07-06T19:52:46.580689Z","submitted_at":"2024-11-18T07:52:12Z","title":"CROW: Eliminating Backdoors from Large Language Models via Internal Consistency Regularization","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.12768","snapshot_observed_at":"2026-07-30T19:18:07.122358Z","title":"arXiv preprint arXiv:2411.12768 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:07.122358Z"},"links":{"cited_paper":"/paper/2411.12768","citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:0288c92d0ce38b00f3c077d66be33d8887436f9f09186eb2499026e1f3bbbb41","observation_id":"ec5252b1-1e0c-4a1a-86de-4786792dfc1b","resolution":{"observed_at":"2026-07-30T19:18:07.122358Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:07.161138Z","title":"Advances in Neural Information Processing Systems , author =","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:07.161138Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:e525c0929548daf702643fc40310b7bcdd7e46abe2285158d2252d45b7cbf207","observation_id":"83b4bc7a-56b2-4421-b2ed-12fc8ee7d9eb","resolution":{"observed_at":"2026-07-30T19:18:07.161138Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:07.218033Z","title":"Flatness-","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:07.218033Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:e2bef8b64baeda72b8bacd85b6b953530a605186fbd569066188517b4c448cce","observation_id":"6d06363c-6772-4de2-8a7b-25383010969f","resolution":{"observed_at":"2026-07-30T19:18:07.218033Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:07.271367Z","title":"Detecting backdoors during the inference stage based on corruption robustness consistency , booktitle =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:07.271367Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:1a8f1cdbc9a67854fc1a8b2580b0e170598b7ebeadae07ed690362d2f727a97e","observation_id":"184a8e51-0685-431f-be80-a443d991a04c","resolution":{"observed_at":"2026-07-30T19:18:07.271367Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:07.323859Z","title":"Proceedings of the 35th annual computer security applications conference , author =","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:07.323859Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:494c8c686b135713caf3d0169e8f4881469e70c9c49ba7fca114d2922605eea7","observation_id":"399cf224-8ba9-438c-be1d-74c51260379c","resolution":{"observed_at":"2026-07-30T19:18:07.323859Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:07.373905Z","title":"Robust backdoor detection for deep learning via topological evolution dynamics , booktitle =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:07.373905Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:12126c529e6f8a005f7ed22b259c4c96a24f8e27d217848c97a58a7e4c6dcbf2","observation_id":"7820e578-2874-46fb-9e05-6f8ce1f7f8f6","resolution":{"observed_at":"2026-07-30T19:18:07.373905Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:07.463527Z","title":"Revisiting mahalanobis distance for transformer-based out-of-domain detection , volume =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:07.463527Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:ba15ce4d82bef86b2aa917a41a38ef76c1e364379423b597259f36d6ffd2d936","observation_id":"592a054a-2fec-4953-a5a6-6ba460d9adb6","resolution":{"observed_at":"2026-07-30T19:18:07.463527Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:07.524737Z","title":"Advances in neural information processing systems , author =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:07.524737Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:22b539a49b5b94774afe07ef990fe54be28faa96b8060905c35fd15c70d72b5c","observation_id":"d113106e-e932-438e-9b43-129640239fb0","resolution":{"observed_at":"2026-07-30T19:18:07.524737Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:07.612346Z","title":"Towards poisoning of deep learning algorithms with back-gradient optimization , booktitle =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:07.612346Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:6bbf64f0ae9a10bb03ed4a8278815ff0ef164f814b615508ac96de5744486638","observation_id":"b5555457-de39-4eaa-bb09-f0c691fff589","resolution":{"observed_at":"2026-07-30T19:18:07.612346Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:07.674781Z","title":"Ieee Access , author =","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":38,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:07.674781Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:eead4b439b86986e9fa82769d518d10965664646773a84af1664957a2466aa3a","observation_id":"410d8f10-58de-445c-bfa3-302e2f4a39fe","resolution":{"observed_at":"2026-07-30T19:18:07.674781Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2605.23168","last_updated":"2026-05-22T02:41:13Z","snapshot_observed_at":"2026-08-02T12:46:51.142829Z","submitted_at":"2026-05-22T02:41:13Z","title":"PoisonForge: Task-Level Targeted Poisoning Benchmark for Instruction-Tuned LLMs","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2605.23168","snapshot_observed_at":"2026-07-30T19:18:07.755940Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":39,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:07.755940Z"},"links":{"cited_paper":"/paper/2605.23168","citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:dc3806f84fe27681f2ccaa3048fd92f2457cf60858e25903c7ffb13e1e223c22","observation_id":"ebcdf818-cafd-4b75-a041-bcc7794d9d26","resolution":{"observed_at":"2026-07-30T19:18:07.755940Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:07.807992Z","title":"and Cohen, Shay B","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":40,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:07.807992Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:5ca346f41f88d0dd6d21ce8f9874ae431edc77be945be9559fe23fdf94e2e1f0","observation_id":"8b7534aa-7c6f-472f-bf5f-06effa374829","resolution":{"observed_at":"2026-07-30T19:18:07.807992Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:07.867440Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":41,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:07.867440Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:9234fdfbb8336feea8af7ac323151bfcc9a90d02bce03083265c639fae55278f","observation_id":"e603641d-d894-47eb-975c-a4e06423705f","resolution":{"observed_at":"2026-07-30T19:18:07.867440Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:07.936900Z","title":"Poisoning web-scale training datasets is practical , booktitle =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":42,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:07.936900Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:efacf211ad71637d604189c0f3b93d513a6353a524d44900831bb43bb0a09549","observation_id":"c662aff8-95f2-4dce-9e0b-5595bff88edf","resolution":{"observed_at":"2026-07-30T19:18:07.936900Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:07.996545Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":43,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:07.996545Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:701e68681599b2b411a712dd7aae695ce658987850a2050ce4680c16f978803e","observation_id":"4fed001d-dedc-4da4-9a41-98dc50f66bb1","resolution":{"observed_at":"2026-07-30T19:18:07.996545Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:08.075833Z","title":"Cascading adversarial bias from injection to distillation in language models , booktitle =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":44,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:08.075833Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:54b278ef85bdda0f9e894bc0ec25bbf6805a151cfd7e846c8f89fceccc7eaed2","observation_id":"27d40b16-6aa6-42be-9618-44943811be2c","resolution":{"observed_at":"2026-07-30T19:18:08.075833Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.13206","last_updated":"2025-07-10T08:27:27Z","snapshot_observed_at":"2026-08-07T00:34:41.294853Z","submitted_at":"2025-06-16T08:10:04Z","title":"Thought Crime: Backdoors and Emergent Misalignment in Reasoning Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.13206","snapshot_observed_at":"2026-07-30T19:18:08.194013Z","title":"arXiv preprint arXiv:2506.13206 , author =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":46,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:08.194013Z"},"links":{"cited_paper":"/paper/2506.13206","citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:6837a875fd7ee5328779b86948f01c7f25bd4ae5cec2b7f893e19cf47e4ec42c","observation_id":"015722c0-1be0-41e2-b303-de738ecd24e9","resolution":{"observed_at":"2026-07-30T19:18:08.194013Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:08.243888Z","title":"arXiv preprint arXiv:2601.19061 , author =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":47,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:08.243888Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:985a4d06f70beab907ac1f5d36eba93908e465595a1462cb8a41c10ba3c4ef28","observation_id":"b2f0a50b-b13b-4921-8ad1-76ed37376e49","resolution":{"observed_at":"2026-07-30T19:18:08.243888Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2604.18970","last_updated":"2026-05-25T07:51:27Z","snapshot_observed_at":"2026-08-01T13:21:43.547756Z","submitted_at":"2026-04-21T01:39:57Z","title":"Mechanistic Anomaly Detection via Functional Attribution","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.18970","snapshot_observed_at":"2026-07-30T19:18:08.297645Z","title":"arXiv preprint arXiv:2604.18970 , author =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":48,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:08.297645Z"},"links":{"cited_paper":"/paper/2604.18970","citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:e87021847822869280553612510491f913185e7c56937c17a9746621af205597","observation_id":"baf20e78-e257-43c2-84f6-8e599e38a11b","resolution":{"observed_at":"2026-07-30T19:18:08.297645Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:08.358418Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":49,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:08.358418Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:b46e25fdfa4b5915e54288725cf94b6eb0e2ae7bb458d4c3471bd362875d2c00","observation_id":"393d62b0-2631-4fbe-957b-74c381a7f09e","resolution":{"observed_at":"2026-07-30T19:18:08.358418Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:08.425452Z","title":"arXiv preprint arXiv:2509.19775 , author =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":50,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:08.425452Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:880003e4f6f2c88bb790dce21f6248c16b3a0e7b5f990158ffdcb7e4ed1b6d72","observation_id":"4671da39-e762-4801-aa24-341a0dc0a9ed","resolution":{"observed_at":"2026-07-30T19:18:08.425452Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:08.486692Z","title":"arXiv preprint arXiv:2603.03371 , author =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":51,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:08.486692Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:50d2de45613a4cab131e497e76076f32883c62f7bff32b1ffabfe4dd7c60b5f8","observation_id":"b2d560a8-4475-4708-ae11-de9c945216ee","resolution":{"observed_at":"2026-07-30T19:18:08.486692Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:08.537270Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":52,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:08.537270Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:d59e25e6c5e0d24790253b105aa04da849a8af08af12c93f697813c0b2cc51b9","observation_id":"81d62de6-43ea-4476-be2f-a2dbce07aea0","resolution":{"observed_at":"2026-07-30T19:18:08.537270Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15771","last_updated":"2023-07-28T19:13:26Z","snapshot_observed_at":"2026-08-06T01:59:30.696076Z","submitted_at":"2023-07-28T19:13:26Z","title":"The Hydra Effect: Emergent Self-repair in Language Model Computations","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.15771","snapshot_observed_at":"2026-07-30T19:18:08.579144Z","title":"arXiv preprint arXiv:2307.15771 , author =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":53,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:08.579144Z"},"links":{"cited_paper":"/paper/2307.15771","citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:296b4237a651d0bf136a86942e37a12a9b356353e1bf8a0729232ecaa0ac3736","observation_id":"29bc4813-aa96-4d05-a41f-6851647c0343","resolution":{"observed_at":"2026-07-30T19:18:08.579144Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:08.633565Z","title":"Fine-pruning:","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":54,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:08.633565Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:8a250bf1a821d44608a16053b1b17ca9b976e3e2ecbfcfe0618f78cf7250b994","observation_id":"41972981-c54e-4821-9a1f-b3958bd51d71","resolution":{"observed_at":"2026-07-30T19:18:08.633565Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:08.700415Z","title":"Toy models of superposition , journal =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":55,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:08.700415Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:b3a5066f8c729d0c7c6c35ebc495fd136f8a7ea50e293c4a3a5f458b4a0a41ff","observation_id":"61a773c1-27e8-42e3-a7e7-bb53ae54c501","resolution":{"observed_at":"2026-07-30T19:18:08.700415Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:08.752534Z","title":"Beyond interpretability:","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":56,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:08.752534Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:ef6ca6f73339cd50ca9b97e082f73885a0a3d55d119cb90c5de7644a1eb71530","observation_id":"c30c031d-a48c-49db-9e91-19bcd2e69509","resolution":{"observed_at":"2026-07-30T19:18:08.752534Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:08.819551Z","title":"Forty-first","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":57,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:08.819551Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:2bb6f350ea71cc61231019bedb7a61571c91813ae712815e4f1937d086ff0748","observation_id":"09cd44d1-7eda-419f-bcef-91d0e8259696","resolution":{"observed_at":"2026-07-30T19:18:08.819551Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:08.890421Z","title":"Peftguard:","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":58,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:08.890421Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:1fe6236ebf0b92a0ae49a644698440f8b982bf2f14ca97dd29e1c95dcc4f3ec8","observation_id":"1752eea0-a0e6-4e8d-96f7-fe8cc6e02b3a","resolution":{"observed_at":"2026-07-30T19:18:08.890421Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:08.951128Z","title":"Proceedings of the 63rd","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":59,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:08.951128Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:52bc68a3be590eecfdbd0cbf412ff31bb46ec5fc03e98701d9d52aff087af26f","observation_id":"95025b31-743e-457d-84ba-0062f75eba49","resolution":{"observed_at":"2026-07-30T19:18:08.951128Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:09.012467Z","title":"Universal jailbreak backdoors from poisoned human feedback , volume =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":60,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:09.012467Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:39fc8e61ea8f3e29693739f5c93481c3d616f66fa63bf50287e07cdbaeae52a0","observation_id":"cb2d8216-fc21-4dd4-b312-cdc8d865a3f5","resolution":{"observed_at":"2026-07-30T19:18:09.012467Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:09.072201Z","title":"arXiv preprint arXiv:2602.13427 , author =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":61,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:09.072201Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:831cb9834e0e0b1b9bee6796ae0d4952fa5f61f0ed930962cd7ab449da94a298","observation_id":"2b8f0ba5-2ef7-4cf3-a2f9-4c95b069bbb2","resolution":{"observed_at":"2026-07-30T19:18:09.072201Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:09.162845Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":62,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:09.162845Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:6e897f41f5674f05c3ca68c5492b51142101b9b1a67af9b72b40f3c1c8f23eee","observation_id":"9e435c4a-079d-48eb-9518-e16952391479","resolution":{"observed_at":"2026-07-30T19:18:09.162845Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:09.270889Z","title":"Poisoning language models during instruction tuning , booktitle =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":63,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:09.270889Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:0e4d6e5c19ca6eccb3018f91169bf44c65bc55682e8c7b26db8f5c378b6351a8","observation_id":"44303353-b4a7-46b3-a4d3-44ba1a98586b","resolution":{"observed_at":"2026-07-30T19:18:09.270889Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:09.395250Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":64,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:09.395250Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:c0c0ed239c51ab817fbb37ad15fe3a4469d0ccead988aaa68010c828fc1a695b","observation_id":"4ac288c3-d111-4d19-be73-abbc2856e4b8","resolution":{"observed_at":"2026-07-30T19:18:09.395250Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:09.564304Z","title":"Planting undetectable backdoors in machine learning models , booktitle =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":65,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:09.564304Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:33677dfae6625eb1b54e416366322db13d80ca672ef1325917013713e9a57d39","observation_id":"92e9e9b1-3ecc-483a-a789-3d5e1140c31a","resolution":{"observed_at":"2026-07-30T19:18:09.564304Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:09.731272Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":66,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:09.731272Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:a36f7d38ead99c8dd165ff9fe747494150ba49a1bf62ba99ae3f0b4ca0d40c27","observation_id":"2c98f9cb-b2d2-4c02-9296-aef9705ec2e6","resolution":{"observed_at":"2026-07-30T19:18:09.731272Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:09.825487Z","title":"Extracting","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":67,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:09.825487Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:356ced9d1b0bedc3cebf1d586b6532a409f708b06abfdd55b30046b80ab90bc7","observation_id":"02ab7876-7d33-4ac3-b979-4ff9489f96fa","resolution":{"observed_at":"2026-07-30T19:18:09.825487Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:09.831495Z","title":"and Chen, Pin-Yu , editor =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":68,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:09.831495Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:39a555e6f0bd3c154207e2560b1049fec37701e2bcfee4f2e3644a7786da5de3","observation_id":"05205ee2-2fe1-4b15-b8b3-1f7ba82eec03","resolution":{"observed_at":"2026-07-30T19:18:09.831495Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:09.837801Z","title":"Not what you've signed up for:","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":69,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:09.837801Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:d86f0be325101140edadc68f9d17751935fd842d104bec27cc83f8e90380226d","observation_id":"f7d4c5d3-e916-469b-a199-00b02cf07102","resolution":{"observed_at":"2026-07-30T19:18:09.837801Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:09.844485Z","title":"Escalation","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":70,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:09.844485Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:9f630f5fe4aab50efaa07d5f850dc6f3b98d42bfaa5322dbf5982b8c9fee83a7","observation_id":"b3d49ba7-82bb-4f50-ad04-ff5263601ad9","resolution":{"observed_at":"2026-07-30T19:18:09.844485Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:09.850706Z","title":"Transactions on Machine Learning Research , author =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":71,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:09.850706Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:35fd0416e4715bcda30a05e40246d19ce8578f5883e931a1b94395bc695e225b","observation_id":"8b1c6e8d-7033-46a1-a82d-a1810202627f","resolution":{"observed_at":"2026-07-30T19:18:09.850706Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:09.857906Z","title":"Blind backdoors in deep learning models , booktitle =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":72,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:09.857906Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:6d5a025dceea8c4e0834193c01c327cb833d8253c959de67c96c14781d1025ee","observation_id":"f77e5683-ea46-42cc-8166-4d30cbd39b7b","resolution":{"observed_at":"2026-07-30T19:18:09.857906Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:09.865637Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":73,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:09.865637Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:67516d6b7f73e7ec4545469e9976970f90284e5e51c13cde5f4a249d96ed36bc","observation_id":"8fe07f77-d4c3-4993-b0dc-44a7eeb12f39","resolution":{"observed_at":"2026-07-30T19:18:09.865637Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:09.870956Z","title":"Persistent pre-training poisoning of llms , journal =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":74,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:09.870956Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:7bd916014b6866fa13c308c42ddfa3cedf3c5158b6bb1602e24bb8d98b6b6910","observation_id":"0ccf5244-13ae-4c3a-9b31-9367ef8f2532","resolution":{"observed_at":"2026-07-30T19:18:09.870956Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:09.877503Z","title":"Poisoning attacks on llms require a near-constant number of poison samples , journal =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":75,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:09.877503Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:c9bca3a0c1f5ea1a4f53de0c7a731274d8405c98aa6560a8443d4007bf924f80","observation_id":"a6b3bef4-901b-4b08-95d7-88412be74994","resolution":{"observed_at":"2026-07-30T19:18:09.877503Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:09.884902Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":76,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:09.884902Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:b5bcbbec053ef65516fa568be72fb8ed4c2de0785c90c243d899f526f8dbee99","observation_id":"7023355c-3670-4ba8-88de-03bea433c801","resolution":{"observed_at":"2026-07-30T19:18:09.884902Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:09.890080Z","title":"Backdooring","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":77,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:09.890080Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:8023d1825e301608d6be4d91043a8dc1ce4fb769edae365111eddd327d5fc8e3","observation_id":"66d7e504-f35e-463d-8bcd-cdc90edc918a","resolution":{"observed_at":"2026-07-30T19:18:09.890080Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:09.894836Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":78,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:09.894836Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:b558a6cf6b4200a8d76973dac8619d98af07dbb78aa209692bb7b314857a6504","observation_id":"e21bcd0a-8372-46d4-9a10-08148639510a","resolution":{"observed_at":"2026-07-30T19:18:09.894836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:09.899208Z","title":", year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":79,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:09.899208Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:233bfb0b7ab265e35dbd2aae29dcf7cccf4616a76bd654ed72bbf35a4b7a9938","observation_id":"e6dcc252-70f2-4394-9f91-a314b4b214c2","resolution":{"observed_at":"2026-07-30T19:18:09.899208Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:09.904452Z","title":", year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":80,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:09.904452Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:94286c2eed2d4babace667ff528021bb946f86742219f67c56cc3ab6926471a1","observation_id":"fa9b1275-47e3-467a-a577-db4e164d9b79","resolution":{"observed_at":"2026-07-30T19:18:09.904452Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:09.911241Z","title":"Adversarial","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":81,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:09.911241Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:68028196eed1696d74204a9ba72d5b21abfa06e77c7c98995c699e935e84392f","observation_id":"d52e8c99-c043-4a6e-ad74-985f08e2e0b4","resolution":{"observed_at":"2026-07-30T19:18:09.911241Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:09.917140Z","title":"Text embeddings reveal (almost) as much as text , booktitle =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":82,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:09.917140Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:1cae4bef30f1955135b9917f682491c9b507e53da0c5652d420d36dbd10d8498","observation_id":"b71aca3b-c63c-428d-bca8-69a5e3af08ab","resolution":{"observed_at":"2026-07-30T19:18:09.917140Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:09.927450Z","title":"Transferable","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":83,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:09.927450Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:d880295913bdac1bd61ec0932806321f2ebe1a944286dc2f4fbf7303c414a210","observation_id":"bc0b89ea-8298-400f-bc36-19dc872c1d1c","resolution":{"observed_at":"2026-07-30T19:18:09.927450Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:09.933313Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":84,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:09.933313Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:a5bb62d863af98f511679e2be10562b4e8f5d12b6b7676bcf3d5942f9d230693","observation_id":"994bcb3b-fd15-40da-9edc-c6443e410058","resolution":{"observed_at":"2026-07-30T19:18:09.933313Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:09.939957Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":85,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:09.939957Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:71aa16dab2fb1f0db347d7c03fcf75261fe7a29ddb5d679d7aa47ba105705e6b","observation_id":"7b26105f-509d-4128-80f2-c56c00ca9a1b","resolution":{"observed_at":"2026-07-30T19:18:09.939957Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:09.944560Z","title":"The trojan detection challenge , booktitle =","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":86,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:09.944560Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:aa68e7eccb82ba9c9948fe1099ef9771235935a4218c383ebfd591c4bad58095","observation_id":"179a0c9a-d504-4f43-a5aa-87f499e5b071","resolution":{"observed_at":"2026-07-30T19:18:09.944560Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:09.950343Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":87,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:09.950343Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:376af4d24b062ddb9d78a286a624d8abbf38ab1d80661333eaa7bac54e2486ad","observation_id":"df07f20a-e1c8-47d9-bafa-7bb776edfc56","resolution":{"observed_at":"2026-07-30T19:18:09.950343Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:09.955922Z","title":"Practical detection of trojan neural networks:","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":88,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:09.955922Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:f4264a2fdbd48a45bbd876b975259bc1403c1a81f55553b8138f160e4a001940","observation_id":"8a5f099b-be9e-405b-8640-e95f7499ccca","resolution":{"observed_at":"2026-07-30T19:18:09.955922Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:09.961757Z","title":"Piccolo:","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":89,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:09.961757Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:7f4faa222c198f48e914d53acb6e6af3e011316f7f6b57e9bf031e1c3015f105","observation_id":"a1c19609-e554-44b6-9da4-9b99a0d720c4","resolution":{"observed_at":"2026-07-30T19:18:09.961757Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:09.967644Z","title":"IEEE Transactions on Software Engineering , author =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":90,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:09.967644Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:9a43656a3819b476dc87b5db1e882687b84ea09cd2660d9e72d7ee199255acde","observation_id":"3ffe532a-f5b6-4dba-a957-a88b264801dc","resolution":{"observed_at":"2026-07-30T19:18:09.967644Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:09.974940Z","title":"Proceedings of the 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":91,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:09.974940Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:03eec28717445e531b4967280bed2c62ea7fa6ad632510fa7f03165af4c42b3a","observation_id":"4a8aad12-f9cc-4da4-9a70-fad82a9fac49","resolution":{"observed_at":"2026-07-30T19:18:09.974940Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:09.987084Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":92,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:09.987084Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:f4508a0752a9a86d699cc3b8447f0ae3b009c5b4c7471e578a3c86f8f374ea32","observation_id":"6ecefcc6-6618-4d22-ade5-1f958f97f48f","resolution":{"observed_at":"2026-07-30T19:18:09.987084Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:09.998513Z","title":", month = may, year =","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":93,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:09.998513Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:2dada807438e94b5aa453fd339c1987f677f46cf944b331108a5a4fa4c113537","observation_id":"c25c449e-6853-4e20-89de-e5f7f49245ca","resolution":{"observed_at":"2026-07-30T19:18:09.998513Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:10.005929Z","title":"Backdoor","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":94,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:10.005929Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:c3b9fd4738b617b55a6b86778fd9cb6d2cda7091ad803e1608af08a61097a70b","observation_id":"6802df08-935e-4673-bd04-dd2a40bb3a3b","resolution":{"observed_at":"2026-07-30T19:18:10.005929Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:10.012560Z","title":"Rethinking","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":95,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:10.012560Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:6d543bd24de49db2b7853775b2719ad943dc3f2ed9c48c9922f0b5a2dd440a1e","observation_id":"10487c08-9b56-44e2-9323-280063de1974","resolution":{"observed_at":"2026-07-30T19:18:10.012560Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:10.017545Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":96,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:10.017545Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:6001a2956f9b82a4a1ec4cca12ed1f2b97e01dc66c148d888e698ca063c9af00","observation_id":"1d0cf8ce-6d92-4254-aa2f-0969e1c6cce4","resolution":{"observed_at":"2026-07-30T19:18:10.017545Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:10.024125Z","title":"Revisiting the","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":97,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:10.024125Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:087a85426d0d623d23e05f019aabcce317a2fee88e18d179181a424c0cc572b9","observation_id":"ad907501-17ae-481e-bce2-055ed801ce46","resolution":{"observed_at":"2026-07-30T19:18:10.024125Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:10.033098Z","title":"Stealthy and","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":98,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:10.033098Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:93e073a1c29c586d39134c1f91686bc750ec44b625f6ac1537d3ec48a51ff336","observation_id":"7d37128b-e3c2-4371-98a1-0ee3b6b54db1","resolution":{"observed_at":"2026-07-30T19:18:10.033098Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:10.039692Z","title":"Catastrophic","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":99,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:10.039692Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:bd5aaaf8eed1e1b880dd19dab8c181d22672b766dc0398554dc2d955180b00ac","observation_id":"0e669a55-a808-4370-aa8d-afb24d3223be","resolution":{"observed_at":"2026-07-30T19:18:10.039692Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:10.045028Z","title":"Proceedings of the 2021 conference on empirical methods in natural language processing , author =","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":100,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:10.045028Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:8a9e5426e0d8b869662ae7971ec139eca991faaab6321903310ff7f1f6ade708","observation_id":"36c793f0-0fc9-49cb-a751-94b8bb61188f","resolution":{"observed_at":"2026-07-30T19:18:10.045028Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:10.050704Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":101,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:10.050704Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:e1e3c88792ca6506d5d5e8066910a285ee2313ee16550e7e278af5a646009b68","observation_id":"80984baf-5a21-44d7-aa34-5490e56bee64","resolution":{"observed_at":"2026-07-30T19:18:10.050704Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-30T19:18:10.059070Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","version":1},"reference_index":102,"source":"arxiv_source","source_observed_at":"2026-07-30T19:18:10.059070Z"},"links":{"citing_paper":"/paper/2607.26849"},"observation_digest":"sha256:9d50586eb7cfd0eb6ba92ec6a71e640e3397dcfe39b8c188bbea3e1d5fa67044","observation_id":"811ebf4c-a088-4825-99d4-df9f1426da18","resolution":{"observed_at":"2026-07-30T19:18:10.059070Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2607.26849","last_updated":"2026-07-29T12:35:58Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-07T05:40:08.879617Z","submitted_at":"2026-07-29T12:35:58Z","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned"},"reference_resolution":{"displayed":100,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":100,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":114},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 7 August 2026, this Paper Citation Record lists 100 of 114 outbound references and 0 inbound Pith citation observations for arXiv:2607.26849."}