Pith. sign in

Paper Citation Record · LEDGER

Trusting What You Cannot See: Auditable Fine-Tuning and Inference for Proprietary AI

As of 24 August 2026, this Paper Citation Record lists 49 of 49 outbound references and 2 inbound Pith citation observations for arXiv:2603.07466.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2603.07466 v2

Coverage vector

measured 49 of 49 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-02T18:40:39.638638Z

measured 51 of 51 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-23T06:30:58.430688+00:00

measured 2 of 2 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-06-30T20:53:04.274840Z

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: arxiv_reference, observed 2026-06-30T20:55:03.970803Z

Reference resolution

49 of 49 outbound references displayed

  • verified exact0
  • verified fuzzy0
  • unresolved48
  • parse uncertain0
  • malformed identifier1
  • metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation 332679df-bf6e-46d9-a6b3-8c7b72e7986e · outbound

This paper cites https://cloud.google.com/blog/products/identity-security/how- confidential-computing-lays-the-foundation-for-trusted-ai.

Trusting What You Cannot See: Auditable Fine-Tuning and Inference for Proprietary AI https://cloud.google.com/blog/products/identity-security/how- confidential-computing-lays-the-foundation-for-trusted-ai

Reference 1

Resolution
unresolved
no resolver link, observed 2026-08-02T18:40:34.727117Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T18:40:34.727117Z digest=sha256:81ad628275b477c06651f3ac7d4b13f6b1cc3465afc5baf468705016c23a5bd3

Observation 87ef9917-e7ed-4ed4-b073-dd03015fadb9 · outbound

This paper cites https://aws.amazon.com/blogs/machine-learning/large- language-model-inference-over-confidential-data-using-aws-nitro- enclaves/.

Trusting What You Cannot See: Auditable Fine-Tuning and Inference for Proprietary AI https://aws.amazon.com/blogs/machine-learning/large- language-model-inference-over-confidential-data-using-aws-nitro- enclaves/

Reference 2

Resolution
unresolved
no resolver link, observed 2026-08-02T18:40:34.780988Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T18:40:34.780988Z digest=sha256:640226f18fdb080c14bc431e9c2fe8e9e3cef85240a0575a863b66bd5c0dc4f6

Observation 4116905f-c94c-4666-bb80-001f3378850d · outbound

This paper cites Zero-knowledge proofs of training for deep neural networks.

Trusting What You Cannot See: Auditable Fine-Tuning and Inference for Proprietary AI Zero-knowledge proofs of training for deep neural networks

Reference 3

Resolution
unresolved
no resolver link, observed 2026-08-02T18:40:34.849268Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T18:40:34.849268Z digest=sha256:bff9e010088ec734f79066b7880f96c0586ad89900076dc9ce9768b6a3f9f62a

Observation 81b85c52-9c1f-4d8d-948c-72db40a89a11 · outbound

This paper cites Trustzone: Integrated hardware and software security.ARM White Paper(2004).

Trusting What You Cannot See: Auditable Fine-Tuning and Inference for Proprietary AI Trustzone: Integrated hardware and software security.ARM White Paper(2004)

Reference 4

Resolution
unresolved
no resolver link, observed 2026-08-02T18:40:34.919497Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T18:40:34.919497Z digest=sha256:29b1aa24d9afe1c92c906009c26f709ad5d124b87e971cf3d8f4d4bf165f92db

Observation efd47ac8-054f-4d91-9563-b14b9100aeb2 · outbound

This paper cites Fine-tune claude 3 haiku in amazon bedrock, July 2024.

Trusting What You Cannot See: Auditable Fine-Tuning and Inference for Proprietary AI Fine-tune claude 3 haiku in amazon bedrock, July 2024

Reference 5

Resolution
unresolved
no resolver link, observed 2026-08-02T18:40:35.022399Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T18:40:35.022399Z digest=sha256:8ef453d981e579728178b18da895fcf66325dc9a23e84bfa5d55a90b5217a443

Observation 4083daef-51be-4b2b-bcf9-39c76630d3be · outbound

This paper cites Provable data possession at untrusted stores.

Trusting What You Cannot See: Auditable Fine-Tuning and Inference for Proprietary AI Provable data possession at untrusted stores

Reference 6

Resolution
unresolved
no resolver link, observed 2026-08-02T18:40:35.101687Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T18:40:35.101687Z digest=sha256:c0c472fd8d67b6b1a7730d2c3fcf5a579c700b53198f083a9852bba66f3e750b

Observation 770e6afb-1c4b-413f-a7f6-d7bed90263b2 · outbound

This paper cites E.,ANDVIJ, M.

Trusting What You Cannot See: Auditable Fine-Tuning and Inference for Proprietary AI E.,ANDVIJ, M

Reference 7

Resolution
unresolved
no resolver link, observed 2026-08-02T18:40:35.163087Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T18:40:35.163087Z digest=sha256:ed0e26ce54be259760783fb60748961494c746610fbcfcd7b84ae148f7b4c438

Observation ab003c40-c49c-4bf1-9546-6606abffe205 · outbound

This paper cites D., ZHAO, J.,ANDKOUSHANFAR, F.

Trusting What You Cannot See: Auditable Fine-Tuning and Inference for Proprietary AI D., ZHAO, J.,ANDKOUSHANFAR, F

Reference 8

Resolution
unresolved
no resolver link, observed 2026-08-02T18:40:35.238627Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T18:40:35.238627Z digest=sha256:720e9212942bc8520706ca813c7477cdceb77665c87499c2f758e58cb4f46750

Observation 31450c30-0b24-44c0-8f3a-df4ca21e759a · outbound

This paper cites Tune gemini models by using supervised fine-tuning, 2025.

Trusting What You Cannot See: Auditable Fine-Tuning and Inference for Proprietary AI Tune gemini models by using supervised fine-tuning, 2025

Reference 9

Resolution
unresolved
no resolver link, observed 2026-08-02T18:40:35.343313Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T18:40:35.343313Z digest=sha256:0fa309c6c8e5b445cc58f1634db6320683cec27015b276ee38d5b2998215504e

Observation 25ac99d9-592d-456e-a9f9-d03305e06b81 · outbound

This paper cites Azure openai in azure ai foundry models, 2025.

Trusting What You Cannot See: Auditable Fine-Tuning and Inference for Proprietary AI Azure openai in azure ai foundry models, 2025

Reference 10

Resolution
unresolved
no resolver link, observed 2026-08-02T18:40:35.449271Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T18:40:35.449271Z digest=sha256:c4fd7526db96473c4f750f378cfcefea9fe19bb8f782959a6a58c00588c9aa61

Observation f2117429-17e9-406e-a184-3a43c1f7e9d3 · outbound

This paper cites Host llms with nvidia gpus on oci, 2025.

Trusting What You Cannot See: Auditable Fine-Tuning and Inference for Proprietary AI Host llms with nvidia gpus on oci, 2025

Reference 11

Resolution
unresolved
no resolver link, observed 2026-08-02T18:40:35.528823Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T18:40:35.528823Z digest=sha256:9415af17e5e7277f0df26657ae8362ab35705e5eea4997624fee56d01bd9a098

Observation 2e7e163a-741c-42d2-ab90-c5dd623ff9b0 · outbound

This paper cites Intel sgx explained.

Trusting What You Cannot See: Auditable Fine-Tuning and Inference for Proprietary AI Intel sgx explained

Reference 12

Resolution
unresolved
no resolver link, observed 2026-08-02T18:40:35.600123Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T18:40:35.600123Z digest=sha256:3ea0e8ec2c0367f205d1342507012214a63b9f4dd9d6959fba15b665ad97a552

Observation f7532a31-09cd-47e9-9c15-9fed2539ce07 · outbound

This paper cites Guardain: Protecting emerging generative ai workloads on heterogeneous npu.

Trusting What You Cannot See: Auditable Fine-Tuning and Inference for Proprietary AI Guardain: Protecting emerging generative ai workloads on heterogeneous npu

Reference 13

Resolution
unresolved
no resolver link, observed 2026-08-02T18:40:35.680033Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T18:40:35.680033Z digest=sha256:bf9c1858e838c48e3f1406b6bbbe08f025f663171edc1dae9b71ef4af39ee3a0

Observation 78149fc9-fe09-4c8a-8062-0a21655eff0b · outbound

This paper cites an unresolved cited work.

Trusting What You Cannot See: Auditable Fine-Tuning and Inference for Proprietary AI Unresolved cited work

Reference 14

Resolution
unresolved
no resolver link, observed 2026-08-02T18:40:35.782709Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T18:40:35.782709Z digest=sha256:8d75defb1db5a9f717441f8eea803c850a12f7bec2b2e13c0a48d87c276a60a9

Observation f65a52bb-bcf9-4fff-acb1-58cf501df0fe · outbound

This paper cites The Llama 3 Herd of Models.

Trusting What You Cannot See: Auditable Fine-Tuning and Inference for Proprietary AI The Llama 3 Herd of Models

Reference 15

Resolution
unresolved
no resolver link, observed 2026-08-02T18:40:35.874672Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T18:40:35.874672Z digest=sha256:9e97de002458d833863447a7666994fd1f3383350da55243cdd7cd2177ae48f6

Observation 6cfbb277-c8d2-425e-aa2d-a65852318692 · outbound

This paper cites H., LIPTON, Z.

Trusting What You Cannot See: Auditable Fine-Tuning and Inference for Proprietary AI H., LIPTON, Z

Reference 16

Resolution
unresolved
no resolver link, observed 2026-08-02T18:40:35.950506Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T18:40:35.950506Z digest=sha256:602ddc4def91288aebf3b1101863c8cc725019a20d3eeb30b95238ebc99f1247

Observation 5d59ef8b-3734-4586-850d-ee1604e89424 · outbound

This paper cites Scalable zero-knowledge proofs for non-linear functions in machine learning.

Trusting What You Cannot See: Auditable Fine-Tuning and Inference for Proprietary AI Scalable zero-knowledge proofs for non-linear functions in machine learning

Reference 17

Resolution
unresolved
no resolver link, observed 2026-08-02T18:40:36.020273Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T18:40:36.020273Z digest=sha256:6f33eb97c013cb4ace07cbe85706e14da5ce68b679c0b42bbbc2b53ffc92aeb0

Observation 4c948981-ce53-4aaa-b17e-4ec9e0ad4c49 · outbound

This paper cites LoRA: Low-Rank Adaptation of Large Language Models.

Trusting What You Cannot See: Auditable Fine-Tuning and Inference for Proprietary AI LoRA: Low-Rank Adaptation of Large Language Models

Reference 18

Resolution
unresolved
no resolver link, observed 2026-08-02T18:40:36.098375Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T18:40:36.098375Z digest=sha256:8507ba76673fb41ed9970dc67d42db5a02a27ef315e9503d1bdedcbb127eb6c0

Observation 16b584a9-b3f4-484d-a942-734c239b64bc · outbound

This paper cites A survey on hardware accelerators for large language models.Applied Sciences 15, 2 (Jan.

Trusting What You Cannot See: Auditable Fine-Tuning and Inference for Proprietary AI A survey on hardware accelerators for large language models.Applied Sciences 15, 2 (Jan

Reference 19

Resolution
unresolved
no resolver link, observed 2026-08-02T18:40:36.165450Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T18:40:36.165450Z digest=sha256:f4eb31643a7afb9f00bf8d5086998a4f293a89003a1de0c01c3f4daa309e8bb5

Observation 60510822-eae2-4e21-993c-139366e97c37 · outbound

This paper cites Gramine-tdx: A lightweight os kernel for confidential vms.

Trusting What You Cannot See: Auditable Fine-Tuning and Inference for Proprietary AI Gramine-tdx: A lightweight os kernel for confidential vms

Reference 20

Resolution
unresolved
no resolver link, observed 2026-08-02T18:40:36.235754Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T18:40:36.235754Z digest=sha256:190c4c48057728ab05eff381ccf2a11962fdbd394a293d0b024971fe0976a3c8

Observation cf9bb2b3-b9aa-4dac-b74e-6941ccb48119 · outbound

This paper cites Keystone: An open framework for architecting trusted execution environments.

Trusting What You Cannot See: Auditable Fine-Tuning and Inference for Proprietary AI Keystone: An open framework for architecting trusted execution environments

Reference 21

Resolution
unresolved
no resolver link, observed 2026-08-02T18:40:36.309762Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T18:40:36.309762Z digest=sha256:9252dda74b523933ccf9811a1180b7c77abbec5e5d7fcfdb8209d9b35d412794

Observation fa13cddd-7e45-47ef-8c36-08f2571bb453 · outbound

This paper cites Character- ization of gpu tee overheads in distributed data parallel ml training, 2025.

Trusting What You Cannot See: Auditable Fine-Tuning and Inference for Proprietary AI Character- ization of gpu tee overheads in distributed data parallel ml training, 2025

Reference 22

Resolution
unresolved
no resolver link, observed 2026-08-02T18:40:36.423186Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T18:40:36.423186Z digest=sha256:516971a70816b7e0a9085eb8e1f925c25d64a945a74b78aa93a48a8c511bf9c4

Observation aa6c5f58-acce-40a5-8d37-4b9348a20c29 · outbound

This paper cites Verilora: Fine-tuning large language models with verifiable security via zero-knowledge proofs, 2025.

Trusting What You Cannot See: Auditable Fine-Tuning and Inference for Proprietary AI Verilora: Fine-tuning large language models with verifiable security via zero-knowledge proofs, 2025

Reference 23

Resolution
unresolved
no resolver link, observed 2026-08-02T18:40:36.524790Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T18:40:36.524790Z digest=sha256:dd1a97f1773599828cec4f911ced23e2fdaf9fe01c4215f8e871d41e28725270

Observation c89a2de4-294e-4813-a862-1bc399308c2a · outbound

This paper cites Against the achilles’ heel: A survey on red teaming for generative models.Journal of Artificial Intelligence Research 82(2025), 687–775.

Trusting What You Cannot See: Auditable Fine-Tuning and Inference for Proprietary AI Against the achilles’ heel: A survey on red teaming for generative models.Journal of Artificial Intelligence Research 82(2025), 687–775

Reference 24

Resolution
unresolved
no resolver link, observed 2026-08-02T18:40:36.642521Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T18:40:36.642521Z digest=sha256:b1c21f1d8c6f1ff7c739abbb82c75413478fca7dd01cd87f8275b7991127931c

Observation 249402ea-0e02-4838-ac5b-96aea6bf2082 · outbound

This paper cites Towards deep learning models resistant to adversarial attacks, 2019.

Trusting What You Cannot See: Auditable Fine-Tuning and Inference for Proprietary AI Towards deep learning models resistant to adversarial attacks, 2019

Reference 25

Resolution
unresolved
no resolver link, observed 2026-08-02T18:40:36.743782Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T18:40:36.743782Z digest=sha256:a740a137f3fd89fe2f0c958cbb6284a6bd269f277e36adbb2d0e6bd4d5bb97ff

Observation 4a1b2e27-9c7a-4ed4-9b6d-434ce26d9628 · outbound

This paper cites Ppfl: Privacy-preserving federated learning with trusted execution environments.

Trusting What You Cannot See: Auditable Fine-Tuning and Inference for Proprietary AI Ppfl: Privacy-preserving federated learning with trusted execution environments

Reference 26

Resolution
unresolved
no resolver link, observed 2026-08-02T18:40:36.841734Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T18:40:36.841734Z digest=sha256:390f280c1bf421d88eabc6f43e8469960600f16e964208bbc77e82cb78bf0a64

Observation 2df9c398-2e39-4fe1-af63-f4757babcec7 · outbound

This paper cites Introducing improvements to the fine-tuning api and expand- ing our custom models program.

Trusting What You Cannot See: Auditable Fine-Tuning and Inference for Proprietary AI Introducing improvements to the fine-tuning api and expand- ing our custom models program

Reference 27

Resolution
unresolved
no resolver link, observed 2026-08-02T18:40:37.000004Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T18:40:37.000004Z digest=sha256:481c711cd2620e2eb23908777e7594a73bb9e8c3d073899124fa3c7e4fd7f6e9

Observation 33ce46c9-bb8c-4748-b4a4-6108881ca0d0 · outbound

This paper cites Model optimization — openai api guides, 2025.

Trusting What You Cannot See: Auditable Fine-Tuning and Inference for Proprietary AI Model optimization — openai api guides, 2025

Reference 28

Resolution
unresolved
no resolver link, observed 2026-08-02T18:40:37.125989Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T18:40:37.125989Z digest=sha256:2ea90311c5d2f0cc82bc5765d9b3e01f3ed18a1ec36910a50c08a60d9f980784

Observation fd6a339e-9b0e-4799-a569-28a71f9118e4 · outbound

This paper cites Dinov2: Learning robust visual features without supervision, 2024.

Trusting What You Cannot See: Auditable Fine-Tuning and Inference for Proprietary AI Dinov2: Learning robust visual features without supervision, 2024

Reference 29

Resolution
unresolved
no resolver link, observed 2026-08-02T18:40:37.231993Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T18:40:37.231993Z digest=sha256:44dfe4ca7ada3a048636b2cedae88d710c00ae98640f7174d991de296a860d59

Observation 175aecb9-5011-4830-97d0-15213d81a17c · outbound

This paper cites zkgpt: An efficient non-interactive zero-knowledge proof framework for llm inference.

Trusting What You Cannot See: Auditable Fine-Tuning and Inference for Proprietary AI zkgpt: An efficient non-interactive zero-knowledge proof framework for llm inference

Reference 30

Resolution
unresolved
no resolver link, observed 2026-08-02T18:40:37.295425Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T18:40:37.295425Z digest=sha256:4ec195f61f5bbe63e445f058ebdfa9f54a812f314f33773667beb1fc78eb6a5f

Observation 0b9a59d3-0f18-4ac0-9879-2e9e70e7367d · outbound

This paper cites L., GREGOR, F., ARNAUTOV, S., KUNKEL, R., BHATOTIA, P.,ANDFETZER, C.

Trusting What You Cannot See: Auditable Fine-Tuning and Inference for Proprietary AI L., GREGOR, F., ARNAUTOV, S., KUNKEL, R., BHATOTIA, P.,ANDFETZER, C

Reference 31

Resolution
unresolved
no resolver link, observed 2026-08-02T18:40:37.387259Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T18:40:37.387259Z digest=sha256:6ef826b4191cafd3095c8c88e2207566e3d4565e899fb9fcd02eb03f26d04cd0

Observation d19cee77-899c-4d49-b057-1c47173cb6b1 · outbound

This paper cites Zero- knowledge ai inference with high precision.ACM CCS(2025).

Trusting What You Cannot See: Auditable Fine-Tuning and Inference for Proprietary AI Zero- knowledge ai inference with high precision.ACM CCS(2025)

Reference 32

Resolution
unresolved
no resolver link, observed 2026-08-02T18:40:37.539982Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T18:40:37.539982Z digest=sha256:9f91ecbdf8cbe5a6dd0e85c959ab5f69f00413d7cf50f5e130fd12c6dba88392

Observation ed8c5432-2c1e-42e6-a0c2-2c53e21b01a4 · outbound

This paper cites C.,ANDFEI-FEI, L.

Trusting What You Cannot See: Auditable Fine-Tuning and Inference for Proprietary AI C.,ANDFEI-FEI, L

Reference 33

Resolution
unresolved
no resolver link, observed 2026-08-02T18:40:37.631452Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T18:40:37.631452Z digest=sha256:d9397903d62cd3dedd48bfab4e805ab4efca9e2d7a43beee4e030a5821a19b86

Observation 4e8950a5-5523-4f95-8aa0-f745372e3b3e · outbound

This paper cites an unresolved cited work.

Trusting What You Cannot See: Auditable Fine-Tuning and Inference for Proprietary AI Unresolved cited work

Reference 34

Resolution
unresolved
no resolver link, observed 2026-08-02T18:40:37.741620Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T18:40:37.741620Z digest=sha256:402d8f6c2c8d291a50dd631cf0b87cc91750d3a37557875cd22a45ef6017f515

Observation f0d3c508-47ef-4064-b6a4-6610b51be15b · outbound

This paper cites Compact proofs of retrievability.J.

Trusting What You Cannot See: Auditable Fine-Tuning and Inference for Proprietary AI Compact proofs of retrievability.J

Reference 35

Resolution
unresolved
no resolver link, observed 2026-08-02T18:40:37.923780Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T18:40:37.923780Z digest=sha256:2f2e1d2a87b3f4a5460dd54ad085c0f09b84aeb2ef21248c6358356e7858ee38

Observation f615bee5-6d2f-4d78-b69a-c821bb33562d · outbound

This paper cites C., BIRKE, R.,ANDPERRI, S.

Trusting What You Cannot See: Auditable Fine-Tuning and Inference for Proprietary AI C., BIRKE, R.,ANDPERRI, S

Reference 36

Resolution
unresolved
no resolver link, observed 2026-08-02T18:40:38.067919Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T18:40:38.067919Z digest=sha256:47d88f8940ec0a97ec6ccd401ad380ffc9e2fe7df70934f4b4a4035f6a1dcc56

Observation e9196c40-33b3-425f-a745-ba666a7e7f70 · outbound

This paper cites Trusted yet flexible: High- level runtimes for secure ml inference in tees.Journal of Cybersecurity and Privacy 6, 1 (2026).

Trusting What You Cannot See: Auditable Fine-Tuning and Inference for Proprietary AI Trusted yet flexible: High- level runtimes for secure ml inference in tees.Journal of Cybersecurity and Privacy 6, 1 (2026)

Reference 37

Resolution
unresolved
no resolver link, observed 2026-08-02T18:40:38.215985Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T18:40:38.215985Z digest=sha256:17e4c0d6d596f2ba696709f020149aeecabb2f8abd135be41ce784e0ebf5c78c

Observation a6194aca-fddf-455e-8fd4-834b90ebf5ad · outbound

This paper cites zkllm: Zero knowledge proofs for large language models.

Trusting What You Cannot See: Auditable Fine-Tuning and Inference for Proprietary AI zkllm: Zero knowledge proofs for large language models

Reference 38

Resolution
unresolved
no resolver link, observed 2026-08-02T18:40:38.370818Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T18:40:38.370818Z digest=sha256:df77565dc4264cec709953ace715016b03f316a749ccb9804e3725cf14d8b407

Observation 17cbbcfb-a0bf-477d-a699-26ef0efbf2c6 · outbound

This paper cites Svip: Towards verifiable inference of open-source large language models.arXiv preprint arXiv:2410.22307(2025).

Trusting What You Cannot See: Auditable Fine-Tuning and Inference for Proprietary AI Svip: Towards verifiable inference of open-source large language models.arXiv preprint arXiv:2410.22307(2025)

Reference 39

Resolution
unresolved
no resolver link, observed 2026-08-02T18:40:38.523053Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T18:40:38.523053Z digest=sha256:b6e07a186ca1a6d3db0683e0e348ebb9e39d2577e6c24c708a37088b1bbb15c0

Observation 044b0072-0bd3-4c67-a37f-98e238d7a9d4 · outbound

This paper cites Pipellm: Fast and confiden- tial large language model services with speculative pipelined encryption.

Trusting What You Cannot See: Auditable Fine-Tuning and Inference for Proprietary AI Pipellm: Fast and confiden- tial large language model services with speculative pipelined encryption

Reference 40

Resolution
unresolved
no resolver link, observed 2026-08-02T18:40:38.710020Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T18:40:38.710020Z digest=sha256:5a8456587267c50fe8e6b402daa305f54d4349ba7dc80a85633574d03b503918

Observation 0f27bae9-8dc6-4d4b-a661-84c9ea38ac37 · outbound

This paper cites H2:towards efficient large-scale llm training on hyper-heterogeneous cluster over 1,000 chips, 2025.

Trusting What You Cannot See: Auditable Fine-Tuning and Inference for Proprietary AI H2:towards efficient large-scale llm training on hyper-heterogeneous cluster over 1,000 chips, 2025

Reference 41

Resolution
unresolved
no resolver link, observed 2026-08-02T18:40:38.857206Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T18:40:38.857206Z digest=sha256:f6e0c07f330604e3d35c54b35174317827df4eb5b0a16a768a3ce20a8f7a4807

Observation a2edff27-3c07-4460-822b-935ed5893411 · outbound

This paper cites Visual transform- ers: Token-based image representation and processing for computer vision, 2020.

Trusting What You Cannot See: Auditable Fine-Tuning and Inference for Proprietary AI Visual transform- ers: Token-based image representation and processing for computer vision, 2020

Reference 42

Resolution
unresolved
no resolver link, observed 2026-08-02T18:40:39.003180Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T18:40:39.003180Z digest=sha256:2791a9189363dc63df6093e9889af0811a892d0488b785db7b9a091b96017596

Observation d6236040-7e9e-4b1c-a780-28a0457d5317 · outbound

This paper cites zkpytorch: A hierarchical optimized compiler for zero-knowledge machine learning.Cryptology ePrint Archive(2025).

Trusting What You Cannot See: Auditable Fine-Tuning and Inference for Proprietary AI zkpytorch: A hierarchical optimized compiler for zero-knowledge machine learning.Cryptology ePrint Archive(2025)

Reference 43

Resolution
unresolved
no resolver link, observed 2026-08-02T18:40:39.050167Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T18:40:39.050167Z digest=sha256:057a6f3daeca5e764bef4caebd3ad7e35b88d3291406590df78ac634116db1c2

Observation 419f79a0-6dba-43e1-b234-67624cd332b8 · outbound

This paper cites MentalChat16K: A Benchmark Dataset for Conversational Mental Health Assistance.

Trusting What You Cannot See: Auditable Fine-Tuning and Inference for Proprietary AI MentalChat16K: A Benchmark Dataset for Conversational Mental Health Assistance

Reference 44

Resolution
unresolved
no resolver link, observed 2026-08-02T18:40:39.176313Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T18:40:39.176313Z digest=sha256:18d62662fde82461371177c07f76b8cb5f00ececbe4173adb69e094ef4b535fb

Observation bc2d74de-41c5-4d82-a4d4-56595c8d63c4 · outbound

This paper cites Hex- iscale: Accommodating large language model training over heteroge- neous environment, 2025.

Trusting What You Cannot See: Auditable Fine-Tuning and Inference for Proprietary AI Hex- iscale: Accommodating large language model training over heteroge- neous environment, 2025

Reference 45

Resolution
unresolved
no resolver link, observed 2026-08-02T18:40:39.251168Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T18:40:39.251168Z digest=sha256:865d9c2e4ace8b5ae20df23b1148503ff362e07569849887183ba486cd9af4b4

Observation 4d775fcd-22fd-433b-9606-3affa157c44d · outbound

This paper cites Qwen2.5 Technical Report.

Trusting What You Cannot See: Auditable Fine-Tuning and Inference for Proprietary AI Qwen2.5 Technical Report

Reference 46

Resolution
unresolved
no resolver link, observed 2026-08-02T18:40:39.349252Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T18:40:39.349252Z digest=sha256:951d79e6b8c985a1d011ac5bad8d1e57a4afd3ddbe04392da6d4669f2bd1c67c

Observation 3799bfb7-6132-4847-8641-de8254501949 · outbound

This paper cites vTune: Verifiable Fine-Tuning for LLMs Through Backdooring.

Trusting What You Cannot See: Auditable Fine-Tuning and Inference for Proprietary AI vTune: Verifiable Fine-Tuning for LLMs Through Backdooring

Reference 47

Resolution
unresolved
no resolver link, observed 2026-08-02T18:40:39.455371Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T18:40:39.455371Z digest=sha256:5e19667988be497d9772c86599a49e05aecc6392cfe557098ba07265adcf0da5

Observation ff8b25fe-c989-4072-b458-22d5afdfd9b8 · outbound

This paper cites En- abling execution assurance of federated learning at untrusted partic- ipants.

Trusting What You Cannot See: Auditable Fine-Tuning and Inference for Proprietary AI En- abling execution assurance of federated learning at untrusted partic- ipants

Reference 48

Resolution
unresolved
no resolver link, observed 2026-08-02T18:40:39.550384Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T18:40:39.550384Z digest=sha256:5a8e62917f2f7b5935f08b118c926506ca8b611d33600d4ffcdbc84cb1f58fdd

Observation e5200c61-c990-4c74-8283-4e27978c342c · outbound

This paper cites Sear: Secure and efficient aggregation for byzantine-robust federated learning.IEEE Transactions on Dependable and Secure Computing 19, 5 (2021), 3329–3342.

Trusting What You Cannot See: Auditable Fine-Tuning and Inference for Proprietary AI Sear: Secure and efficient aggregation for byzantine-robust federated learning.IEEE Transactions on Dependable and Secure Computing 19, 5 (2021), 3329–3342

Reference 49

Resolution
malformed identifier
no resolver link, observed 2026-08-02T18:40:39.638638Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T18:40:39.638638Z digest=sha256:ef9685fccfac6669cb3a7b9ccf8a4a0e690f48c6dbb626f7c9f9a8993fab5902

Pith citing papers

Observation 4842293a-c8c7-4bed-bc5b-5b94fea1796b · inbound

Committed SAE-Feature Traces for Audited-Session Substitution Detection in Hosted LLMs cites this paper.

Committed SAE-Feature Traces for Audited-Session Substitution Detection in Hosted LLMs Trusting What You Cannot See: Auditable Fine-Tuning and Inference for Proprietary AI

Reference 20

Resolution
verified exact
arxiv_id, observed 2026-07-23T02:23:27.054931Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

source=pdf_text observed=2026-05-10T04:51:36.160507Z digest=sha256:350b853a0318cb4486cb252172cf440d208e033795c2fc9e3ae2dc5aa8f9bcc5

Observation 34855d9d-b935-4bac-8bc0-9b1cb87316f0 · inbound

Position: Behavioural Assurance Cannot Verify the Safety Claims Governance Now Demands cites this paper.

Position: Behavioural Assurance Cannot Verify the Safety Claims Governance Now Demands Trusting What You Cannot See: Auditable Fine-Tuning and Inference for Proprietary AI

Reference 70

Resolution
verified exact
arxiv_id, observed 2026-07-23T02:23:27.054931Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

source=pdf_text observed=2026-06-30T20:53:04.274840Z digest=sha256:59889aae4444a3f9eb64674b9649ed727172d7adfa86ba8d6ed762aa94c25257