@misc{pretraining-poisoning,
  title = {Poisoning Attacks on LLMs Require a Near-constant Number of Poison Samples},
  url = {https://www.aisi.gov.uk/research/poisoning-attacks-on-llms-require-a-near-constant-number-of-poison-samples},
  author = {Alexandra Souly and Javier Rando and Ed Chapman and Xander Davies and Burak Hasircioglu and Ezzeldin Shereen and Carlos Mougan and Vasilios Mavroudis and Erik Jones and Chris Hicks and Nicholas Carlini and Yarin Gal and Robert Kirk},
  year = {2025},
  date = {2025-10-08},
  version = {Source capture 2026-10-25},
  note = {Source capture 2026-10-25}
}

@misc{pretraining-poisoning-nuwa,
  title = {Poisoning Attacks on LLMs Require a Near-constant Number of Poison Samples — NUWA research record},
  url = {https://whitzard.tech/nuwa/whitzard-index/work/pretraining-poisoning/},
  version = {2026-10-29.1},
  organization = {NUWA Frontier AI Safety Lab},
  howpublished = {Retained note edition: https://whitzard.tech/nuwa/whitzard-index/data/record-editions/2026-10-29.1--pretraining-poisoning.json},
  note = {NUWA research note. Source-reading scope and independent review status are stated on the record. Snapshot 2026-10-29.1. Retained note edition: https://whitzard.tech/nuwa/whitzard-index/data/record-editions/2026-10-29.1--pretraining-poisoning.json.}
}