{"as_of":"2026-08-15T19:12:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:43fb7907fdd57d2c8e713f92a0fcf1e2a807a7d77ce82475201ce512f2c6c5fa","coverage":[{"denominator":55,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":55,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T10:55:08.221003Z","state":"measured"},{"denominator":55,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":55,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-15T06:32:42.880941+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2608.05036/citation-record","integrity":"/paper/2608.05036/integrity","json":"/paper/2608.05036/citation-record.json","paper":"/paper/2608.05036"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:55:09.295936Z","title":"Turning your weakness into a strength: Watermarking deep neural networks by back- dooring","venue":null,"work_id":"8a5315ed-9e6e-49cc-8e13-76734be59f36","year":2018},"citing_paper":{"arxiv_id":"2608.05036","last_updated":"2026-08-05T16:42:59Z","snapshot_observed_at":"2026-08-15T12:00:23.235716Z","submitted_at":"2026-08-05T16:42:59Z","title":"When Do PEFT Adaptations Leak Structure? Measuring Black-Box Structural Bounds in Public-Base Model Services","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-06T10:55:07.935171Z"},"links":{"citing_paper":"/paper/2608.05036"},"observation_digest":"sha256:50ed11557294516c1f4d241cd2580429ffbcd81b046e7adf07f0c6de62e7fc6f","observation_id":"bf89b759-c89a-4d9b-af5a-1f54a2f2d55e","resolution":{"observed_at":"2026-08-06T10:55:09.302226Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:55:09.274656Z","title":"Model leeching: An extrac- tion attack targeting large language models, 2023","venue":null,"work_id":"70a61155-d8cb-4c2c-8086-42bb47bb91ea","year":2023},"citing_paper":{"arxiv_id":"2608.05036","last_updated":"2026-08-05T16:42:59Z","snapshot_observed_at":"2026-08-15T12:00:23.235716Z","submitted_at":"2026-08-05T16:42:59Z","title":"When Do PEFT Adaptations Leak Structure? Measuring Black-Box Structural Bounds in Public-Base Model Services","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-06T10:55:07.940484Z"},"links":{"citing_paper":"/paper/2608.05036"},"observation_digest":"sha256:4d49cb5b6d10d07d1b722b2b11e311a24ecb003e2a15c957483a0943201c010d","observation_id":"ba6c8aa3-1f74-44d1-9351-7492a77c6d63","resolution":{"observed_at":"2026-08-06T10:55:09.283068Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:55:09.251210Z","title":"Quantifying memorization across neural language mod- els","venue":null,"work_id":"a5355de8-909d-4d26-a73d-ef572d36f283","year":2023},"citing_paper":{"arxiv_id":"2608.05036","last_updated":"2026-08-05T16:42:59Z","snapshot_observed_at":"2026-08-15T12:00:23.235716Z","submitted_at":"2026-08-05T16:42:59Z","title":"When Do PEFT Adaptations Leak Structure? Measuring Black-Box Structural Bounds in Public-Base Model Services","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-06T10:55:07.945383Z"},"links":{"citing_paper":"/paper/2608.05036"},"observation_digest":"sha256:6066ee08b36f151a6e24db550eb9bb0476cd386d077b8787197906005948fd03","observation_id":"cc06f37e-b633-4b0f-9b54-d91e1087d3d0","resolution":{"observed_at":"2026-08-06T10:55:09.258237Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:55:09.232418Z","title":"Extracting training data from large language models","venue":null,"work_id":"5791df82-8178-4033-bf7e-e869baa77c90","year":2021},"citing_paper":{"arxiv_id":"2608.05036","last_updated":"2026-08-05T16:42:59Z","snapshot_observed_at":"2026-08-15T12:00:23.235716Z","submitted_at":"2026-08-05T16:42:59Z","title":"When Do PEFT Adaptations Leak Structure? Measuring Black-Box Structural Bounds in Public-Base Model Services","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-06T10:55:07.950442Z"},"links":{"citing_paper":"/paper/2608.05036"},"observation_digest":"sha256:9508a10b4206748765bea212ff1c9209c9144102fb2dd359521e69fd86316324","observation_id":"e57f6fbd-dd50-49b6-a183-d9926d6c04b6","resolution":{"observed_at":"2026-08-06T10:55:09.237817Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1811.02054","last_updated":"2019-11-20T04:20:13Z","snapshot_observed_at":"2026-08-14T18:03:49.794750Z","submitted_at":"2018-11-05T22:06:12Z","title":"Exploring Connections Between Active Learning and Model Extraction","version":6},"cited_work":{"arxiv_id":"1811.02054","doi":null,"metadata_source":"pith","pith_arxiv_id":"1811.02054","snapshot_observed_at":"2026-08-06T10:55:08.283764Z","title":"Exploring Connections Between Active Learning and Model Extraction","venue":"cs.LG","work_id":"f34292e1-ae82-46a7-bf18-55d43eae7747","year":2018},"citing_paper":{"arxiv_id":"2608.05036","last_updated":"2026-08-05T16:42:59Z","snapshot_observed_at":"2026-08-15T12:00:23.235716Z","submitted_at":"2026-08-05T16:42:59Z","title":"When Do PEFT Adaptations Leak Structure? Measuring Black-Box Structural Bounds in Public-Base Model Services","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-06T10:55:07.956609Z"},"links":{"cited_paper":"/paper/1811.02054","citing_paper":"/paper/2608.05036"},"observation_digest":"sha256:aa5d315be6b0136bb65c65cdc62dc0e2a545b8df0b7c8f1ed6d8b3d6157d2b95","observation_id":"d6931319-a011-4f51-9486-45fcd31df05e","resolution":{"observed_at":"2026-08-06T10:55:08.291132Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:55:09.212366Z","title":"MeaeQ: Mount model extraction attacks with efficient queries","venue":null,"work_id":"34cc23fe-eb5f-4015-b5b6-f410e4481634","year":2023},"citing_paper":{"arxiv_id":"2608.05036","last_updated":"2026-08-05T16:42:59Z","snapshot_observed_at":"2026-08-15T12:00:23.235716Z","submitted_at":"2026-08-05T16:42:59Z","title":"When Do PEFT Adaptations Leak Structure? Measuring Black-Box Structural Bounds in Public-Base Model Services","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-06T10:55:07.963510Z"},"links":{"citing_paper":"/paper/2608.05036"},"observation_digest":"sha256:fe11e8146592ba9fbfd01ff5dbdf5d5ab240551afa87516f28db31345686fc6e","observation_id":"df0af1e5-cb82-4afa-a2ea-ed6e7dcf3df7","resolution":{"observed_at":"2026-08-06T10:55:09.217727Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:55:09.188891Z","title":"QLoRA: Efficient finetuning of quan- 12 tized LLMs","venue":null,"work_id":"c75b3354-ccef-4e1c-8fee-64f1497c54b4","year":2023},"citing_paper":{"arxiv_id":"2608.05036","last_updated":"2026-08-05T16:42:59Z","snapshot_observed_at":"2026-08-15T12:00:23.235716Z","submitted_at":"2026-08-05T16:42:59Z","title":"When Do PEFT Adaptations Leak Structure? Measuring Black-Box Structural Bounds in Public-Base Model Services","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-06T10:55:07.969291Z"},"links":{"citing_paper":"/paper/2608.05036"},"observation_digest":"sha256:36a10be658eb453d509d5df73e18c1ac635a68d1ef0b49c78d076afa18f1b0e9","observation_id":"7bb5b9e4-b0f8-46bf-b747-c9c40db8f0c6","resolution":{"observed_at":"2026-08-06T10:55:09.196144Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:55:09.158929Z","title":"Do membership inference attacks work on large language models? InFirst Conference on Language Modeling, 2024","venue":null,"work_id":"415e565a-97c6-4ffc-9808-514f56da37c0","year":2024},"citing_paper":{"arxiv_id":"2608.05036","last_updated":"2026-08-05T16:42:59Z","snapshot_observed_at":"2026-08-15T12:00:23.235716Z","submitted_at":"2026-08-05T16:42:59Z","title":"When Do PEFT Adaptations Leak Structure? Measuring Black-Box Structural Bounds in Public-Base Model Services","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-06T10:55:07.974328Z"},"links":{"citing_paper":"/paper/2608.05036"},"observation_digest":"sha256:4fe9103a26b3d9b320fd93e57be34395ddaa554be5462715b29fb18fa3d122d6","observation_id":"ee8e2d25-0008-423e-a7c4-cfc851d16de6","resolution":{"observed_at":"2026-08-06T10:55:09.164281Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:55:09.129687Z","title":"Membership inference at- tacks against fine-tuned large language models via self- prompt calibration","venue":null,"work_id":"d9c64f63-fb84-4771-99e3-e1538036c748","year":2024},"citing_paper":{"arxiv_id":"2608.05036","last_updated":"2026-08-05T16:42:59Z","snapshot_observed_at":"2026-08-15T12:00:23.235716Z","submitted_at":"2026-08-05T16:42:59Z","title":"When Do PEFT Adaptations Leak Structure? Measuring Black-Box Structural Bounds in Public-Base Model Services","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-06T10:55:07.979175Z"},"links":{"citing_paper":"/paper/2608.05036"},"observation_digest":"sha256:6910481e27f170bbde01efe92de8e1bf9eb042a10f73ad4d1edc392ba81d85f2","observation_id":"250ef64d-862f-405a-b510-a2de7c22b0fa","resolution":{"observed_at":"2026-08-06T10:55:09.137243Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:55:09.103857Z","title":"De- BERTaV3: Improving DeBERTa using ELECTRA-style pre-training with gradient-disentangled embedding shar- ing, 2021","venue":null,"work_id":"79206954-bebd-4075-8b48-4fb7c9b0582c","year":2021},"citing_paper":{"arxiv_id":"2608.05036","last_updated":"2026-08-05T16:42:59Z","snapshot_observed_at":"2026-08-15T12:00:23.235716Z","submitted_at":"2026-08-05T16:42:59Z","title":"When Do PEFT Adaptations Leak Structure? Measuring Black-Box Structural Bounds in Public-Base Model Services","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-06T10:55:07.985763Z"},"links":{"citing_paper":"/paper/2608.05036"},"observation_digest":"sha256:d91149a32b36808874712399012910c1b1fda5beb10da7f8cb72c0fb600d5f8b","observation_id":"c567ffa8-e147-4ace-a4a1-919adaf02be2","resolution":{"observed_at":"2026-08-06T10:55:09.113203Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:55:09.082918Z","title":"Extracted BERT model leaks more information than you think! InProceedings of the 2022 Conference on Empirical Methods in Natural Language Processing, pages 1530–1537, 2022","venue":null,"work_id":"ce535c9a-ab6f-4805-b484-1a6da9777916","year":2022},"citing_paper":{"arxiv_id":"2608.05036","last_updated":"2026-08-05T16:42:59Z","snapshot_observed_at":"2026-08-15T12:00:23.235716Z","submitted_at":"2026-08-05T16:42:59Z","title":"When Do PEFT Adaptations Leak Structure? Measuring Black-Box Structural Bounds in Public-Base Model Services","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-06T10:55:07.991174Z"},"links":{"citing_paper":"/paper/2608.05036"},"observation_digest":"sha256:bcd6973fa997481cc45d748167341b6901188f7e4a86161d94d9016034da1708","observation_id":"a1af4022-94c2-43ef-a46e-9698c3ff2eaa","resolution":{"observed_at":"2026-08-06T10:55:09.090607Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:55:09.055808Z","title":null,"venue":null,"work_id":"f01b6ab3-3065-4363-b15b-b49f29b954a0","year":2021},"citing_paper":{"arxiv_id":"2608.05036","last_updated":"2026-08-05T16:42:59Z","snapshot_observed_at":"2026-08-15T12:00:23.235716Z","submitted_at":"2026-08-05T16:42:59Z","title":"When Do PEFT Adaptations Leak Structure? Measuring Black-Box Structural Bounds in Public-Base Model Services","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-06T10:55:07.996247Z"},"links":{"citing_paper":"/paper/2608.05036"},"observation_digest":"sha256:881a537c826799810439b409f077eef29d0d0cf739cb034860e4ad86e4559629","observation_id":"5e5acf48-2a7a-4bd8-a59d-6ac389893788","resolution":{"observed_at":"2026-08-06T10:55:09.060862Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:55:09.029445Z","title":"Parameter- efficient transfer learning for nlp","venue":null,"work_id":"45916407-8e42-490e-bf2f-253f0060a0d0","year":2019},"citing_paper":{"arxiv_id":"2608.05036","last_updated":"2026-08-05T16:42:59Z","snapshot_observed_at":"2026-08-15T12:00:23.235716Z","submitted_at":"2026-08-05T16:42:59Z","title":"When Do PEFT Adaptations Leak Structure? Measuring Black-Box Structural Bounds in Public-Base Model Services","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-06T10:55:08.001371Z"},"links":{"citing_paper":"/paper/2608.05036"},"observation_digest":"sha256:f1d042fb937b03dd50573e5552a2d0a67d9ce9eafebf226428cb1e6021a49d9b","observation_id":"465ecc2f-c3a6-4035-b79f-e0c314f3959f","resolution":{"observed_at":"2026-08-06T10:55:09.037451Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2106.09685","last_updated":"2021-10-16T18:40:34Z","snapshot_observed_at":"2026-08-11T08:20:29.798517Z","submitted_at":"2021-06-17T17:37:18Z","title":"LoRA: Low-Rank Adaptation of Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2106.09685","snapshot_observed_at":"2026-08-06T10:55:08.006456Z","title":"Hu, Yelong Shen, Phillip Wallis, Zeyuan Allen-Zhu, Yuanzhi Li, Shean Wang, Lu Wang, and Weizhu Chen","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2608.05036","last_updated":"2026-08-05T16:42:59Z","snapshot_observed_at":"2026-08-15T12:00:23.235716Z","submitted_at":"2026-08-05T16:42:59Z","title":"When Do PEFT Adaptations Leak Structure? Measuring Black-Box Structural Bounds in Public-Base Model Services","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-06T10:55:08.006456Z"},"links":{"cited_paper":"/paper/2106.09685","citing_paper":"/paper/2608.05036"},"observation_digest":"sha256:c50d85bb997a593e32306fdb3d1cdb1900924fa79f532c67c53e908a970e014d","observation_id":"745361be-852a-40f0-91af-2fff291b7d7e","resolution":{"observed_at":"2026-08-06T10:55:08.006456Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:55:09.006416Z","title":"Editing models with task arithmetic","venue":null,"work_id":"e5e19997-b964-4e41-9477-c890c829994e","year":2023},"citing_paper":{"arxiv_id":"2608.05036","last_updated":"2026-08-05T16:42:59Z","snapshot_observed_at":"2026-08-15T12:00:23.235716Z","submitted_at":"2026-08-05T16:42:59Z","title":"When Do PEFT Adaptations Leak Structure? Measuring Black-Box Structural Bounds in Public-Base Model Services","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-06T10:55:08.012908Z"},"links":{"citing_paper":"/paper/2608.05036"},"observation_digest":"sha256:24344556def80ef8633c92f7644c81a91ef4f81050f694200447aae975fb66de","observation_id":"71236095-2778-4b57-a2da-7edd8cdd0f18","resolution":{"observed_at":"2026-08-06T10:55:09.013109Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:55:08.983305Z","title":"High accuracy and high fidelity extraction of neural networks","venue":null,"work_id":"e5006fa7-3d2f-4445-b8cd-95907113744d","year":2020},"citing_paper":{"arxiv_id":"2608.05036","last_updated":"2026-08-05T16:42:59Z","snapshot_observed_at":"2026-08-15T12:00:23.235716Z","submitted_at":"2026-08-05T16:42:59Z","title":"When Do PEFT Adaptations Leak Structure? Measuring Black-Box Structural Bounds in Public-Base Model Services","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-06T10:55:08.017436Z"},"links":{"citing_paper":"/paper/2608.05036"},"observation_digest":"sha256:2ea3de3cdf296c27d89038acad4a9aa14aedb7a6b947f22cd29618200da28f74","observation_id":"d3563dd1-28d3-43ff-ab52-70835d986749","resolution":{"observed_at":"2026-08-06T10:55:08.993740Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:55:08.962667Z","title":"Choquette-Choo, Varun Chandrasekaran, and Nicolas Papernot","venue":null,"work_id":"93a4272e-b1a6-49fc-8d76-369ad8d6ec35","year":1937},"citing_paper":{"arxiv_id":"2608.05036","last_updated":"2026-08-05T16:42:59Z","snapshot_observed_at":"2026-08-15T12:00:23.235716Z","submitted_at":"2026-08-05T16:42:59Z","title":"When Do PEFT Adaptations Leak Structure? Measuring Black-Box Structural Bounds in Public-Base Model Services","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-06T10:55:08.022318Z"},"links":{"citing_paper":"/paper/2608.05036"},"observation_digest":"sha256:bdd3c8d05f0ecb06e25e6a4362ae3513b9f75c419af183db2a386c9f849015f1","observation_id":"e0405b9c-8b7c-4ab7-a59d-5a16546348cf","resolution":{"observed_at":"2026-08-06T10:55:08.968169Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:55:08.944297Z","title":null,"venue":null,"work_id":"e7325833-6deb-4b80-8f68-5dba251964b4","year":2019},"citing_paper":{"arxiv_id":"2608.05036","last_updated":"2026-08-05T16:42:59Z","snapshot_observed_at":"2026-08-15T12:00:23.235716Z","submitted_at":"2026-08-05T16:42:59Z","title":"When Do PEFT Adaptations Leak Structure? Measuring Black-Box Structural Bounds in Public-Base Model Services","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-06T10:55:08.027253Z"},"links":{"citing_paper":"/paper/2608.05036"},"observation_digest":"sha256:1e61d8ae6ecadcc9a412576e47fb3723c70ad19cd13fa84ea9d56f538d5faf89","observation_id":"d2fce507-54d4-4895-8c29-80f25eabe7d6","resolution":{"observed_at":"2026-08-06T10:55:08.950038Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:55:08.923045Z","title":null,"venue":null,"work_id":"66252d50-994d-4639-a9e0-96b1d1f8a694","year":2021},"citing_paper":{"arxiv_id":"2608.05036","last_updated":"2026-08-05T16:42:59Z","snapshot_observed_at":"2026-08-15T12:00:23.235716Z","submitted_at":"2026-08-05T16:42:59Z","title":"When Do PEFT Adaptations Leak Structure? Measuring Black-Box Structural Bounds in Public-Base Model Services","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-06T10:55:08.031839Z"},"links":{"citing_paper":"/paper/2608.05036"},"observation_digest":"sha256:6f8616429a81adc21798ad0e0dbc19b4ba807e69cf19315a4c7bf123ff6d8e0a","observation_id":"ef2627b2-2910-4662-be5c-a6a01d5e7f5d","resolution":{"observed_at":"2026-08-06T10:55:08.929249Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:55:08.902472Z","title":null,"venue":null,"work_id":"d6a0dae5-69b4-4b26-8e76-c82441d766f4","year":2020},"citing_paper":{"arxiv_id":"2608.05036","last_updated":"2026-08-05T16:42:59Z","snapshot_observed_at":"2026-08-15T12:00:23.235716Z","submitted_at":"2026-08-05T16:42:59Z","title":"When Do PEFT Adaptations Leak Structure? Measuring Black-Box Structural Bounds in Public-Base Model Services","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-06T10:55:08.036245Z"},"links":{"citing_paper":"/paper/2608.05036"},"observation_digest":"sha256:00af4b8c87b6cbc75b43446eb9b08b38b348388a6b63869ed1f6da6b08ce1310","observation_id":"3b2cdc1f-1d33-476c-92ec-c295957d3512","resolution":{"observed_at":"2026-08-06T10:55:08.908577Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:55:08.882081Z","title":"The thieves on sesame street are polyglots—extracting multilingual models from mono- lingual APIs","venue":null,"work_id":"39ca589e-98dc-4ac0-8910-658d96118e19","year":2020},"citing_paper":{"arxiv_id":"2608.05036","last_updated":"2026-08-05T16:42:59Z","snapshot_observed_at":"2026-08-15T12:00:23.235716Z","submitted_at":"2026-08-05T16:42:59Z","title":"When Do PEFT Adaptations Leak Structure? Measuring Black-Box Structural Bounds in Public-Base Model Services","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-06T10:55:08.041262Z"},"links":{"citing_paper":"/paper/2608.05036"},"observation_digest":"sha256:2727342c868e1fd016037c085338949965b45c3d30ab6e1ec693d6dd8d68b179","observation_id":"ef84724a-9f66-456c-a409-759f8a6bb2d5","resolution":{"observed_at":"2026-08-06T10:55:08.887689Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:55:08.860291Z","title":"A watermark for large language models","venue":null,"work_id":"4ea879c7-f8c6-42ea-864a-ddabf34f3550","year":2023},"citing_paper":{"arxiv_id":"2608.05036","last_updated":"2026-08-05T16:42:59Z","snapshot_observed_at":"2026-08-15T12:00:23.235716Z","submitted_at":"2026-08-05T16:42:59Z","title":"When Do PEFT Adaptations Leak Structure? Measuring Black-Box Structural Bounds in Public-Base Model Services","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-06T10:55:08.045763Z"},"links":{"citing_paper":"/paper/2608.05036"},"observation_digest":"sha256:4346a4a50595252c08623f426c9743e31c5a771eb73c28ac11e8ea99af56ef43","observation_id":"0157f41d-8d70-4cf4-8d96-04b7632037f5","resolution":{"observed_at":"2026-08-06T10:55:08.866793Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:55:08.834922Z","title":"ClearStamp: A human-visible and robust model- ownership proof based on transposed model training","venue":null,"work_id":"4a3b7f59-a1b0-4e7c-a548-0a3f421eb314","year":2024},"citing_paper":{"arxiv_id":"2608.05036","last_updated":"2026-08-05T16:42:59Z","snapshot_observed_at":"2026-08-15T12:00:23.235716Z","submitted_at":"2026-08-05T16:42:59Z","title":"When Do PEFT Adaptations Leak Structure? Measuring Black-Box Structural Bounds in Public-Base Model Services","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-06T10:55:08.050781Z"},"links":{"citing_paper":"/paper/2608.05036"},"observation_digest":"sha256:915da0af837247abce14e8d2dc432300f3f745bde129413983e4a2898ff7d282","observation_id":"3bba45ed-7348-4306-9d21-396baf74f958","resolution":{"observed_at":"2026-08-06T10:55:08.840400Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:55:08.815481Z","title":"The power of scale for parameter-efficient prompt tuning","venue":null,"work_id":"d19f463b-38eb-4973-a105-bbb87cdd5035","year":2021},"citing_paper":{"arxiv_id":"2608.05036","last_updated":"2026-08-05T16:42:59Z","snapshot_observed_at":"2026-08-15T12:00:23.235716Z","submitted_at":"2026-08-05T16:42:59Z","title":"When Do PEFT Adaptations Leak Structure? Measuring Black-Box Structural Bounds in Public-Base Model Services","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-06T10:55:08.056914Z"},"links":{"citing_paper":"/paper/2608.05036"},"observation_digest":"sha256:a693b7b62737f6ada762c5899904aa162e83db793ed87de43e37a7edfbef5289","observation_id":"caf9bd9e-5466-4b5d-b01f-9b7517b811cd","resolution":{"observed_at":"2026-08-06T10:55:08.822331Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:55:08.798636Z","title":"Prefix-tuning: Optimiz- ing continuous prompts for generation","venue":null,"work_id":"189f6561-6d26-4606-91fc-13f8fcf6e95b","year":2021},"citing_paper":{"arxiv_id":"2608.05036","last_updated":"2026-08-05T16:42:59Z","snapshot_observed_at":"2026-08-15T12:00:23.235716Z","submitted_at":"2026-08-05T16:42:59Z","title":"When Do PEFT Adaptations Leak Structure? Measuring Black-Box Structural Bounds in Public-Base Model Services","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-06T10:55:08.062140Z"},"links":{"citing_paper":"/paper/2608.05036"},"observation_digest":"sha256:211cddcc729228832361306bb28bec792d5a49af2899f387f5c4924d8f7bfef2","observation_id":"4d36ddb2-883a-4216-b995-82b93bcfa932","resolution":{"observed_at":"2026-08-06T10:55:08.803666Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:55:08.777403Z","title":null,"venue":null,"work_id":"2b0580ef-aa68-43d7-9b3b-0ae7cba16d82","year":2024},"citing_paper":{"arxiv_id":"2608.05036","last_updated":"2026-08-05T16:42:59Z","snapshot_observed_at":"2026-08-15T12:00:23.235716Z","submitted_at":"2026-08-05T16:42:59Z","title":"When Do PEFT Adaptations Leak Structure? Measuring Black-Box Structural Bounds in Public-Base Model Services","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-06T10:55:08.068274Z"},"links":{"citing_paper":"/paper/2608.05036"},"observation_digest":"sha256:5dceba79620a43c7fe42997deab2d4131c506b9ba1b5f104e0189278429d0fcd","observation_id":"61c14818-43d7-4614-8de9-bf3350ef80c3","resolution":{"observed_at":"2026-08-06T10:55:08.784238Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:55:08.759399Z","title":"DoRA: Weight- decomposed low-rank adaptation","venue":null,"work_id":"1eb68a0b-c96a-40f9-9745-c48b3768fb6a","year":2024},"citing_paper":{"arxiv_id":"2608.05036","last_updated":"2026-08-05T16:42:59Z","snapshot_observed_at":"2026-08-15T12:00:23.235716Z","submitted_at":"2026-08-05T16:42:59Z","title":"When Do PEFT Adaptations Leak Structure? Measuring Black-Box Structural Bounds in Public-Base Model Services","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-06T10:55:08.073783Z"},"links":{"citing_paper":"/paper/2608.05036"},"observation_digest":"sha256:319d4566740306a61a6f78919eb61ce652c89207375c8d6bee49d78077dc54c5","observation_id":"b7be89bc-5396-4f87-9306-ed619ef021e3","resolution":{"observed_at":"2026-08-06T10:55:08.764778Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:55:08.741224Z","title":"Privacy-preserving low-rank adap- tation against membership inference attacks for latent diffusion models, 2024","venue":null,"work_id":"5de9b183-a70e-4805-b3c7-6c65bfa646c6","year":2024},"citing_paper":{"arxiv_id":"2608.05036","last_updated":"2026-08-05T16:42:59Z","snapshot_observed_at":"2026-08-15T12:00:23.235716Z","submitted_at":"2026-08-05T16:42:59Z","title":"When Do PEFT Adaptations Leak Structure? Measuring Black-Box Structural Bounds in Public-Base Model Services","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-06T10:55:08.079689Z"},"links":{"citing_paper":"/paper/2608.05036"},"observation_digest":"sha256:15c9866e6c7e92b99705f2b5b864ac242470da7ce6a6c5c6038366b007a6ee0b","observation_id":"e3b35890-43f2-4416-94ac-ff23b30fc76b","resolution":{"observed_at":"2026-08-06T10:55:08.746817Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:55:08.725268Z","title":"Dataset inference: Ownership resolution in ma- chine learning","venue":null,"work_id":"4cf556fa-9df1-4a52-9f4a-08b90c4254f3","year":2021},"citing_paper":{"arxiv_id":"2608.05036","last_updated":"2026-08-05T16:42:59Z","snapshot_observed_at":"2026-08-15T12:00:23.235716Z","submitted_at":"2026-08-05T16:42:59Z","title":"When Do PEFT Adaptations Leak Structure? Measuring Black-Box Structural Bounds in Public-Base Model Services","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-06T10:55:08.085375Z"},"links":{"citing_paper":"/paper/2608.05036"},"observation_digest":"sha256:aa52190cb6eb35a2718e20423ad850c4fd056d86b52e0ffce2aede7f33f84e84","observation_id":"410fdc59-d678-420e-a8b8-8a18fe8b44bc","resolution":{"observed_at":"2026-08-06T10:55:08.730017Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:55:08.709162Z","title":"Membership inference attacks against language models via neighbourhood compari- son","venue":null,"work_id":"ee32e308-83bc-444a-a4cf-98962a25dcc9","year":2023},"citing_paper":{"arxiv_id":"2608.05036","last_updated":"2026-08-05T16:42:59Z","snapshot_observed_at":"2026-08-15T12:00:23.235716Z","submitted_at":"2026-08-05T16:42:59Z","title":"When Do PEFT Adaptations Leak Structure? Measuring Black-Box Structural Bounds in Public-Base Model Services","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-06T10:55:08.090620Z"},"links":{"citing_paper":"/paper/2608.05036"},"observation_digest":"sha256:37a86113dff1920c2b247a9a6f42623a78fc4c2df2ebaec2b40d58b4c2949350","observation_id":"1acd3929-8b06-4f26-bdac-20751288349b","resolution":{"observed_at":"2026-08-06T10:55:08.713850Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:55:08.694491Z","title":"Meta Llama 3 model card","venue":null,"work_id":"59eb8a44-ea07-4c31-a5d9-bed93d749bce","year":2024},"citing_paper":{"arxiv_id":"2608.05036","last_updated":"2026-08-05T16:42:59Z","snapshot_observed_at":"2026-08-15T12:00:23.235716Z","submitted_at":"2026-08-05T16:42:59Z","title":"When Do PEFT Adaptations Leak Structure? Measuring Black-Box Structural Bounds in Public-Base Model Services","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-06T10:55:08.096919Z"},"links":{"citing_paper":"/paper/2608.05036"},"observation_digest":"sha256:70e0c5c74c4925a77be71c59f104d92e30c8649883c9c24213aba80de0203023","observation_id":"f8a16126-99dc-4145-9099-850edc0fda82","resolution":{"observed_at":"2026-08-06T10:55:08.699065Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:55:08.102343Z","title":"Quantifying privacy risks of masked language models using membership inference attacks","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2608.05036","last_updated":"2026-08-05T16:42:59Z","snapshot_observed_at":"2026-08-15T12:00:23.235716Z","submitted_at":"2026-08-05T16:42:59Z","title":"When Do PEFT Adaptations Leak Structure? Measuring Black-Box Structural Bounds in Public-Base Model Services","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-06T10:55:08.102343Z"},"links":{"citing_paper":"/paper/2608.05036"},"observation_digest":"sha256:6a2275892385b720f7cb8b1e798354db7126e6b799af7d5d76cb07095f86e2a2","observation_id":"783939cb-2cbe-4c14-8e68-285b71064493","resolution":{"observed_at":"2026-08-06T10:55:08.102343Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:55:08.668234Z","title":"Com- prehensive privacy analysis of deep learning: Passive and active white-box inference attacks against central- ized and federated learning","venue":null,"work_id":"5bca1ac2-69a6-4768-aeea-10627fcb717f","year":2019},"citing_paper":{"arxiv_id":"2608.05036","last_updated":"2026-08-05T16:42:59Z","snapshot_observed_at":"2026-08-15T12:00:23.235716Z","submitted_at":"2026-08-05T16:42:59Z","title":"When Do PEFT Adaptations Leak Structure? Measuring Black-Box Structural Bounds in Public-Base Model Services","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-06T10:55:08.107123Z"},"links":{"citing_paper":"/paper/2608.05036"},"observation_digest":"sha256:778ad434e524c0a897dba01e563341e102e61792f143bad7dc32fd3192673741","observation_id":"b32db1e8-9b25-42b6-a3d3-6cf72d7677d4","resolution":{"observed_at":"2026-08-06T10:55:08.673614Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:55:08.652185Z","title":"SoK: All you need to know about on-device ML model extraction—the gap between research and practice","venue":null,"work_id":"0c401927-f9aa-42bb-8272-d045fd9a6892","year":2024},"citing_paper":{"arxiv_id":"2608.05036","last_updated":"2026-08-05T16:42:59Z","snapshot_observed_at":"2026-08-15T12:00:23.235716Z","submitted_at":"2026-08-05T16:42:59Z","title":"When Do PEFT Adaptations Leak Structure? Measuring Black-Box Structural Bounds in Public-Base Model Services","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-06T10:55:08.111758Z"},"links":{"citing_paper":"/paper/2608.05036"},"observation_digest":"sha256:15dbf57a3c87989cc19badfa1e3806785bf223aa5f15716a9b074fe054171634","observation_id":"91194cd0-a5ff-4fd8-8a9b-35bf9c8f81bc","resolution":{"observed_at":"2026-08-06T10:55:08.657239Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:55:08.636786Z","title":"Knockoff nets: Stealing functionality of black-box mod- els","venue":null,"work_id":"4b9d1d8c-e38f-4323-ad95-9ec967735818","year":2019},"citing_paper":{"arxiv_id":"2608.05036","last_updated":"2026-08-05T16:42:59Z","snapshot_observed_at":"2026-08-15T12:00:23.235716Z","submitted_at":"2026-08-05T16:42:59Z","title":"When Do PEFT Adaptations Leak Structure? Measuring Black-Box Structural Bounds in Public-Base Model Services","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-06T10:55:08.116443Z"},"links":{"citing_paper":"/paper/2608.05036"},"observation_digest":"sha256:9f76f0169198eb92320dfc36e1cd0d77fa9d1d0a6cbb08f55a12d96a96af6268","observation_id":"9447d415-be0e-45e8-be1f-01c3a3888c81","resolution":{"observed_at":"2026-08-06T10:55:08.641346Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:55:08.622330Z","title":"Prediction poisoning: Utility-constrained defenses against model stealing attacks","venue":null,"work_id":"7440ae72-4f5b-4643-a2f8-0179b73c773b","year":2020},"citing_paper":{"arxiv_id":"2608.05036","last_updated":"2026-08-05T16:42:59Z","snapshot_observed_at":"2026-08-15T12:00:23.235716Z","submitted_at":"2026-08-05T16:42:59Z","title":"When Do PEFT Adaptations Leak Structure? Measuring Black-Box Structural Bounds in Public-Base Model Services","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-06T10:55:08.121362Z"},"links":{"citing_paper":"/paper/2608.05036"},"observation_digest":"sha256:970270ec9daaf9690145afb5e1c25895ad657576c4aeadae9ddad005f62b59c2","observation_id":"48f68b75-9f8f-44d7-9cb7-580bc15fc57a","resolution":{"observed_at":"2026-08-06T10:55:08.627358Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:55:08.606736Z","title":"Berkay Celik, and Ananthram Swami","venue":null,"work_id":"01b0f6dd-ebc4-4a99-902b-1cf66be540e3","year":2017},"citing_paper":{"arxiv_id":"2608.05036","last_updated":"2026-08-05T16:42:59Z","snapshot_observed_at":"2026-08-15T12:00:23.235716Z","submitted_at":"2026-08-05T16:42:59Z","title":"When Do PEFT Adaptations Leak Structure? Measuring Black-Box Structural Bounds in Public-Base Model Services","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-06T10:55:08.126840Z"},"links":{"citing_paper":"/paper/2608.05036"},"observation_digest":"sha256:5d87232a00b6061f8cf0c2a093bb31416b3433e604cae99bdabaafb8546ae95a","observation_id":"cde308dd-d546-458f-b1d9-87915036261e","resolution":{"observed_at":"2026-08-06T10:55:08.612076Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:55:08.591073Z","title":"Kornaropoulos, and Giuseppe Ateniese","venue":null,"work_id":"7b10405b-b7c3-4cab-b52d-2c50c7e1a917","year":2025},"citing_paper":{"arxiv_id":"2608.05036","last_updated":"2026-08-05T16:42:59Z","snapshot_observed_at":"2026-08-15T12:00:23.235716Z","submitted_at":"2026-08-05T16:42:59Z","title":"When Do PEFT Adaptations Leak Structure? Measuring Black-Box Structural Bounds in Public-Base Model Services","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-06T10:55:08.132082Z"},"links":{"citing_paper":"/paper/2608.05036"},"observation_digest":"sha256:1bcc342474563203e65da7b8cb40c8f78503ee1c4642fdae44a7a3554ecea5e7","observation_id":"4eb72dc9-36f0-42d7-80e5-5967fae0c297","resolution":{"observed_at":"2026-08-06T10:55:08.596100Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:55:08.575496Z","title":"DeepEclipse: How to break white-box DNN-watermarking schemes","venue":null,"work_id":"f1fdbf96-418e-47af-ba9a-7abe1b6478e0","year":2024},"citing_paper":{"arxiv_id":"2608.05036","last_updated":"2026-08-05T16:42:59Z","snapshot_observed_at":"2026-08-15T12:00:23.235716Z","submitted_at":"2026-08-05T16:42:59Z","title":"When Do PEFT Adaptations Leak Structure? Measuring Black-Box Structural Bounds in Public-Base Model Services","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-06T10:55:08.136518Z"},"links":{"citing_paper":"/paper/2608.05036"},"observation_digest":"sha256:1f19c9e698bf2daa2e1afa156b479a4b7d5f1dd693c1e03b532e0981de1f71d0","observation_id":"97f9c3d5-67c7-495c-b1ef-0df46618216b","resolution":{"observed_at":"2026-08-06T10:55:08.580682Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:55:08.559736Z","title":"AdapterFusion: Non-destructive task composition for transfer learning","venue":null,"work_id":"5f3e42e9-4e6e-4a3e-9273-5e6a16270bf7","year":2021},"citing_paper":{"arxiv_id":"2608.05036","last_updated":"2026-08-05T16:42:59Z","snapshot_observed_at":"2026-08-15T12:00:23.235716Z","submitted_at":"2026-08-05T16:42:59Z","title":"When Do PEFT Adaptations Leak Structure? Measuring Black-Box Structural Bounds in Public-Base Model Services","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-06T10:55:08.141001Z"},"links":{"citing_paper":"/paper/2608.05036"},"observation_digest":"sha256:b3626f252e3a29612c757db154f10ba34424894a0ea7c11d06de389885adc1ea","observation_id":"3e9f977b-a3f8-43ae-8d2d-393f7e700ae6","resolution":{"observed_at":"2026-08-06T10:55:08.565193Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:55:08.541605Z","title":"LoRA soups: Merging LoRAs for practical skill composition tasks","venue":null,"work_id":"417cb2f4-c067-404f-8960-5ad7f4c6da69","year":2025},"citing_paper":{"arxiv_id":"2608.05036","last_updated":"2026-08-05T16:42:59Z","snapshot_observed_at":"2026-08-15T12:00:23.235716Z","submitted_at":"2026-08-05T16:42:59Z","title":"When Do PEFT Adaptations Leak Structure? Measuring Black-Box Structural Bounds in Public-Base Model Services","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-06T10:55:08.145465Z"},"links":{"citing_paper":"/paper/2608.05036"},"observation_digest":"sha256:dbd44a6f54ff90ed8a862562804140c446ca0847b6ddd9ae464540ff7446dfca","observation_id":"3c3355e7-d2b6-4ff4-aa31-e943c0b3f9bb","resolution":{"observed_at":"2026-08-06T10:55:08.546741Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:55:08.524614Z","title":"Provably robust multi-bit watermarking for AI-generated text","venue":null,"work_id":"aed925be-6ee1-4d91-a281-534226464ece","year":2025},"citing_paper":{"arxiv_id":"2608.05036","last_updated":"2026-08-05T16:42:59Z","snapshot_observed_at":"2026-08-15T12:00:23.235716Z","submitted_at":"2026-08-05T16:42:59Z","title":"When Do PEFT Adaptations Leak Structure? Measuring Black-Box Structural Bounds in Public-Base Model Services","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-06T10:55:08.150182Z"},"links":{"citing_paper":"/paper/2608.05036"},"observation_digest":"sha256:c4fb30b4c5a077d640f51032b196b18261fdd174828dd0662befc62771be34c1","observation_id":"48c65356-9b8c-4614-bbf5-bacf4187c02d","resolution":{"observed_at":"2026-08-06T10:55:08.529795Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:55:08.510030Z","title":"LoRA-Leak: Membership in- ference attacks against LoRA fine-tuned language mod- els, 2025","venue":null,"work_id":"6c0d5a2d-4e7a-4f7a-a492-0f767766fc7a","year":2025},"citing_paper":{"arxiv_id":"2608.05036","last_updated":"2026-08-05T16:42:59Z","snapshot_observed_at":"2026-08-15T12:00:23.235716Z","submitted_at":"2026-08-05T16:42:59Z","title":"When Do PEFT Adaptations Leak Structure? Measuring Black-Box Structural Bounds in Public-Base Model Services","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-06T10:55:08.154723Z"},"links":{"citing_paper":"/paper/2608.05036"},"observation_digest":"sha256:b4bfe0b09da3cb02d6a2beebd6658798275453c12d56b6c3ab1a1ee46df4c407","observation_id":"b21d19b1-4479-4898-9156-80a8939a8272","resolution":{"observed_at":"2026-08-06T10:55:08.514976Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:55:08.494242Z","title":"Membership inference attacks against machine learning models","venue":null,"work_id":"5076f9bb-5467-4b94-908c-cf4cf6ce53a3","year":2017},"citing_paper":{"arxiv_id":"2608.05036","last_updated":"2026-08-05T16:42:59Z","snapshot_observed_at":"2026-08-15T12:00:23.235716Z","submitted_at":"2026-08-05T16:42:59Z","title":"When Do PEFT Adaptations Leak Structure? Measuring Black-Box Structural Bounds in Public-Base Model Services","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-06T10:55:08.159484Z"},"links":{"citing_paper":"/paper/2608.05036"},"observation_digest":"sha256:c2cfe6ec5580a8303db4ab04b58faa40585b4b817b6ad37aa86d7186393294c5","observation_id":"1f1b3d24-5439-49e9-b66f-3127bae6c5e0","resolution":{"observed_at":"2026-08-06T10:55:08.499104Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:55:08.478756Z","title":"ModelGuard: Information-theoretic de- fense against model extraction attacks","venue":null,"work_id":"e33e9105-5a66-4885-aab6-4bce7eba7b39","year":2024},"citing_paper":{"arxiv_id":"2608.05036","last_updated":"2026-08-05T16:42:59Z","snapshot_observed_at":"2026-08-15T12:00:23.235716Z","submitted_at":"2026-08-05T16:42:59Z","title":"When Do PEFT Adaptations Leak Structure? Measuring Black-Box Structural Bounds in Public-Base Model Services","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-06T10:55:08.164652Z"},"links":{"citing_paper":"/paper/2608.05036"},"observation_digest":"sha256:4a85a2d1aab9fd34ad49a9337e272eac00161d5e10af606536808b5083005e7a","observation_id":"04380860-20c3-4968-b26d-d86091489888","resolution":{"observed_at":"2026-08-06T10:55:08.483805Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:55:08.459714Z","title":"Reiter, and Thomas Ristenpart","venue":null,"work_id":"8b03ea80-a058-43b3-baaa-ec9420034fe2","year":2016},"citing_paper":{"arxiv_id":"2608.05036","last_updated":"2026-08-05T16:42:59Z","snapshot_observed_at":"2026-08-15T12:00:23.235716Z","submitted_at":"2026-08-05T16:42:59Z","title":"When Do PEFT Adaptations Leak Structure? Measuring Black-Box Structural Bounds in Public-Base Model Services","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-06T10:55:08.169438Z"},"links":{"citing_paper":"/paper/2608.05036"},"observation_digest":"sha256:add4f626162ded9e9053c7755758f5fbb7be145c4abb927de563582325a912e4","observation_id":"9bde8f69-496f-4331-9dd1-c82c8da5b1f5","resolution":{"observed_at":"2026-08-06T10:55:08.464550Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:55:08.441508Z","title":"Embedding watermarks into deep neu- ral networks","venue":null,"work_id":"536564a3-cabc-4840-ba77-e49afbd79a72","year":2017},"citing_paper":{"arxiv_id":"2608.05036","last_updated":"2026-08-05T16:42:59Z","snapshot_observed_at":"2026-08-15T12:00:23.235716Z","submitted_at":"2026-08-05T16:42:59Z","title":"When Do PEFT Adaptations Leak Structure? Measuring Black-Box Structural Bounds in Public-Base Model Services","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-06T10:55:08.174573Z"},"links":{"citing_paper":"/paper/2608.05036"},"observation_digest":"sha256:90c22b0381c3ee8337603d43c4186a04abee5f2da201f3beeb9825fc168a16e6","observation_id":"c46ef9ec-0612-4343-8969-15d22398bd37","resolution":{"observed_at":"2026-08-06T10:55:08.446289Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:55:08.425370Z","title":"Imitation attacks and defenses for black-box machine translation systems","venue":null,"work_id":"4fcb5f37-8847-4c86-ab7c-5fb793cecbb4","year":2020},"citing_paper":{"arxiv_id":"2608.05036","last_updated":"2026-08-05T16:42:59Z","snapshot_observed_at":"2026-08-15T12:00:23.235716Z","submitted_at":"2026-08-05T16:42:59Z","title":"When Do PEFT Adaptations Leak Structure? Measuring Black-Box Structural Bounds in Public-Base Model Services","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-06T10:55:08.179050Z"},"links":{"citing_paper":"/paper/2608.05036"},"observation_digest":"sha256:f5b00bcffa4f6ba9df25f264ff339eb0cf620145dc811fa3135576f88e44c24e","observation_id":"2d2b8201-6f0a-4a8c-8ee4-40759d0515d8","resolution":{"observed_at":"2026-08-06T10:55:08.430330Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:55:08.408417Z","title":"TIES-merging: Resolving inter- ference when merging models","venue":null,"work_id":"babd32da-d0a0-49bb-a6a6-531df2a39a19","year":2023},"citing_paper":{"arxiv_id":"2608.05036","last_updated":"2026-08-05T16:42:59Z","snapshot_observed_at":"2026-08-15T12:00:23.235716Z","submitted_at":"2026-08-05T16:42:59Z","title":"When Do PEFT Adaptations Leak Structure? Measuring Black-Box Structural Bounds in Public-Base Model Services","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-06T10:55:08.184114Z"},"links":{"citing_paper":"/paper/2608.05036"},"observation_digest":"sha256:aeaebca65820a016fba404202878fecff39255ce05d0363215fd70edd14fad7e","observation_id":"bb31895e-ce8e-4d2c-a281-ef597f8b6985","resolution":{"observed_at":"2026-08-06T10:55:08.414045Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:55:08.391795Z","title":"Re- thinking white-box watermarks on deep learning models under neural structural obfuscation","venue":null,"work_id":"1c0b3de9-7e2f-4a0c-bd45-7e1da63def2e","year":2023},"citing_paper":{"arxiv_id":"2608.05036","last_updated":"2026-08-05T16:42:59Z","snapshot_observed_at":"2026-08-15T12:00:23.235716Z","submitted_at":"2026-08-05T16:42:59Z","title":"When Do PEFT Adaptations Leak Structure? Measuring Black-Box Structural Bounds in Public-Base Model Services","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-06T10:55:08.190450Z"},"links":{"citing_paper":"/paper/2608.05036"},"observation_digest":"sha256:10d4281df0bc45a8248e6b99329f71db853eea1d0ea3ede19659c53056fc2e1e","observation_id":"b984061f-71e3-4a9d-99f9-84a6f43df09c","resolution":{"observed_at":"2026-08-06T10:55:08.396703Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:55:08.374934Z","title":"Data-Free Model-Related attacks: Unleashing the potential of generative AI","venue":null,"work_id":"06b5697e-432f-43a9-a44d-43c82b0a59ee","year":2025},"citing_paper":{"arxiv_id":"2608.05036","last_updated":"2026-08-05T16:42:59Z","snapshot_observed_at":"2026-08-15T12:00:23.235716Z","submitted_at":"2026-08-05T16:42:59Z","title":"When Do PEFT Adaptations Leak Structure? Measuring Black-Box Structural Bounds in Public-Base Model Services","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-06T10:55:08.196375Z"},"links":{"citing_paper":"/paper/2608.05036"},"observation_digest":"sha256:681d0848be3504a8f36f47e6fb08d3eb18a865536d0b2e3e4e5a3775181278cc","observation_id":"1d736c9d-727f-4863-9a4e-e0fa1c627019","resolution":{"observed_at":"2026-08-06T10:55:08.380331Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:55:08.359064Z","title":"Inan, Gautam Kamath, Janardhan Kulkarni, Yin Tat Lee, Andre Manoel, Lukas Wutschitz, Sergey Yekhanin, and Huishuai Zhang","venue":null,"work_id":"b5d6cde3-4442-441a-bac1-f2803c4d0487","year":2022},"citing_paper":{"arxiv_id":"2608.05036","last_updated":"2026-08-05T16:42:59Z","snapshot_observed_at":"2026-08-15T12:00:23.235716Z","submitted_at":"2026-08-05T16:42:59Z","title":"When Do PEFT Adaptations Leak Structure? Measuring Black-Box Structural Bounds in Public-Base Model Services","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-06T10:55:08.201992Z"},"links":{"citing_paper":"/paper/2608.05036"},"observation_digest":"sha256:d70425a5380694d99f64a3bbc39c67844219b7c3dfdbe7aef69e40a28e3bb3ac","observation_id":"4653c068-e5a3-4e75-aed4-562e5f1ddad9","resolution":{"observed_at":"2026-08-06T10:55:08.364327Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:55:08.341573Z","title":"Bitfit: Simple parameter-efficient fine-tuning for transformer-based masked language-models","venue":null,"work_id":"6a8f83e9-1129-49cd-a896-358f92fbf37d","year":2022},"citing_paper":{"arxiv_id":"2608.05036","last_updated":"2026-08-05T16:42:59Z","snapshot_observed_at":"2026-08-15T12:00:23.235716Z","submitted_at":"2026-08-05T16:42:59Z","title":"When Do PEFT Adaptations Leak Structure? Measuring Black-Box Structural Bounds in Public-Base Model Services","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-06T10:55:08.208188Z"},"links":{"citing_paper":"/paper/2608.05036"},"observation_digest":"sha256:4b63f6c1455feb8d2a8cab64750eac2d075cbf8df9aa086c720e33c6f0a3655b","observation_id":"03d419bc-477a-4086-a75d-301725d9699b","resolution":{"observed_at":"2026-08-06T10:55:08.346643Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:55:08.320261Z","title":"REMARK-LLM: A robust and efficient watermarking framework for gener- ative large language models","venue":null,"work_id":"d5b86f35-27c1-4490-a1c7-8d3cb0f05f69","year":2024},"citing_paper":{"arxiv_id":"2608.05036","last_updated":"2026-08-05T16:42:59Z","snapshot_observed_at":"2026-08-15T12:00:23.235716Z","submitted_at":"2026-08-05T16:42:59Z","title":"When Do PEFT Adaptations Leak Structure? Measuring Black-Box Structural Bounds in Public-Base Model Services","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-06T10:55:08.213932Z"},"links":{"citing_paper":"/paper/2608.05036"},"observation_digest":"sha256:239b3d2ddea339fba5491d3f3a0052bc7e8fc1755a7b72ff47b6c2c6e7d0515b","observation_id":"3b5bc6e9-b132-4885-839d-b4fd729b2e71","resolution":{"observed_at":"2026-08-06T10:55:08.329061Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T10:55:08.303635Z","title":"family-level","venue":null,"work_id":"e8249db0-80e4-4cad-ab3c-439711bfb2ba","year":2024},"citing_paper":{"arxiv_id":"2608.05036","last_updated":"2026-08-05T16:42:59Z","snapshot_observed_at":"2026-08-15T12:00:23.235716Z","submitted_at":"2026-08-05T16:42:59Z","title":"When Do PEFT Adaptations Leak Structure? Measuring Black-Box Structural Bounds in Public-Base Model Services","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-06T10:55:08.221003Z"},"links":{"citing_paper":"/paper/2608.05036"},"observation_digest":"sha256:0dd45e2c428543d42771dbc018a8afbc499b5ea65a54bdcae0666bff023327f5","observation_id":"0ab78037-6d2d-4f17-b20d-64227d2e267c","resolution":{"observed_at":"2026-08-06T10:55:08.309096Z","resolver_source":"raw_fallback","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2608.05036","last_updated":"2026-08-05T16:42:59Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-15T12:00:23.235716Z","submitted_at":"2026-08-05T16:42:59Z","title":"When Do PEFT Adaptations Leak Structure? Measuring Black-Box Structural Bounds in Public-Base Model Services"},"reference_resolution":{"displayed":55,"state_counts":{"malformed_identifier":1,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":7,"verified_exact":1,"verified_fuzzy":46},"total_outbound_references":55},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"thesis":"As of 15 August 2026, this Paper Citation Record lists 55 of 55 outbound references and 0 inbound Pith citation observations for arXiv:2608.05036."}