{"as_of":"2026-08-09T04:35:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:c46e26f0d04bb77a2de2b0fc3c35e1e6f3ffad67cc359cada576ec7896229d41","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":17,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":17,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":17,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":17,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-08T12:17:45.934346Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":1,"source":"pith","source_observed_at":"2026-08-05T02:28:24.338817Z","state":"measured"}],"external_citation_measurements":[{"count":14,"observed_at":"2026-08-05T02:28:24.338817Z","source":"pith"}],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2209.02128","last_updated":"2022-09-05T20:29:17Z","snapshot_observed_at":"2026-08-04T07:20:43.897179Z","submitted_at":"2022-09-05T20:29:17Z","title":"Evaluating the Susceptibility of Pre-Trained Language Models via Handcrafted Adversarial Examples","version":1},"cited_work":{"arxiv_id":"2209.02128","doi":"10.48550/arxiv.2209.02128","metadata_source":"pith","pith_arxiv_id":"2209.02128","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Branch, Jonathan Rodriguez Cefalu, Jeremy McHugh, Leyla Hujer, Aditya Bahl, Daniel del Castillo Iglesias, Ron Heichman, and Ramesh Darwishi","venue":"cs.CL","work_id":"217a3646-c7b7-45c8-9527-b642d3952d7c","year":2022},"citing_paper":{"arxiv_id":"2211.09527","last_updated":"2022-11-17T13:43:20Z","snapshot_observed_at":"2026-07-06T14:19:47.424778Z","submitted_at":"2022-11-17T13:43:20Z","title":"Ignore Previous Prompt: Attack Techniques For Language Models","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-05-11T13:59:31.213830Z"},"links":{"cited_paper":"/paper/2209.02128","citing_paper":"/paper/2211.09527"},"observation_digest":"sha256:b9862358f843613a9262bbddac10aababb3a971f0d50e82bc2c93cc7a3652772","observation_id":"3b371387-9a4b-4daa-bf15-b41288df3b84","resolution":{"observed_at":"2026-05-11T13:59:31.513670Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2209.02128","last_updated":"2022-09-05T20:29:17Z","snapshot_observed_at":"2026-08-04T07:20:43.897179Z","submitted_at":"2022-09-05T20:29:17Z","title":"Evaluating the Susceptibility of Pre-Trained Language Models via Handcrafted Adversarial Examples","version":1},"cited_work":{"arxiv_id":"2209.02128","doi":"10.48550/arxiv.2209.02128","metadata_source":"pith","pith_arxiv_id":"2209.02128","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Branch, Jonathan Rodriguez Cefalu, Jeremy McHugh, Leyla Hujer, Aditya Bahl, Daniel del Castillo Iglesias, Ron Heichman, and Ramesh Darwishi","venue":"cs.CL","work_id":"217a3646-c7b7-45c8-9527-b642d3952d7c","year":2022},"citing_paper":{"arxiv_id":"2408.12935","last_updated":"2026-05-13T07:56:42Z","snapshot_observed_at":"2026-08-02T12:48:59.218457Z","submitted_at":"2024-08-23T09:33:48Z","title":"AI Safety Landscape for Large Language Models: Taxonomy, State-of-the-art, and Future Directions","version":4},"reference_index":76,"source":"pdf_text","source_observed_at":"2026-05-23T21:54:26.670284Z"},"links":{"cited_paper":"/paper/2209.02128","citing_paper":"/paper/2408.12935"},"observation_digest":"sha256:78963aca812259898bf2eca32c8e7804d8fb5c3b707d55263cb83700af57e237","observation_id":"b09164d2-77c0-40e1-abe7-75189e1e4185","resolution":{"observed_at":"2026-05-23T21:55:50.365866Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2209.02128","last_updated":"2022-09-05T20:29:17Z","snapshot_observed_at":"2026-08-04T07:20:43.897179Z","submitted_at":"2022-09-05T20:29:17Z","title":"Evaluating the Susceptibility of Pre-Trained Language Models via Handcrafted Adversarial Examples","version":1},"cited_work":{"arxiv_id":"2209.02128","doi":"10.48550/arxiv.2209.02128","metadata_source":"pith","pith_arxiv_id":"2209.02128","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Branch, Jonathan Rodriguez Cefalu, Jeremy McHugh, Leyla Hujer, Aditya Bahl, Daniel del Castillo Iglesias, Ron Heichman, and Ramesh Darwishi","venue":"cs.CL","work_id":"217a3646-c7b7-45c8-9527-b642d3952d7c","year":2022},"citing_paper":{"arxiv_id":"2412.05579","last_updated":"2024-12-10T05:49:12Z","snapshot_observed_at":"2026-07-31T01:42:39.468673Z","submitted_at":"2024-12-07T08:07:24Z","title":"LLMs-as-Judges: A Comprehensive Survey on LLM-based Evaluation Methods","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-05-11T23:08:34.312466Z"},"links":{"cited_paper":"/paper/2209.02128","citing_paper":"/paper/2412.05579"},"observation_digest":"sha256:1de22f4741c1e1b25c9fff3c6f69a0d9bcc7e3f217d675184fa7947373e2efa5","observation_id":"400de984-0bc0-444f-b11c-c0fd607fec89","resolution":{"observed_at":"2026-05-11T23:08:36.051473Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2209.02128","last_updated":"2022-09-05T20:29:17Z","snapshot_observed_at":"2026-08-04T07:20:43.897179Z","submitted_at":"2022-09-05T20:29:17Z","title":"Evaluating the Susceptibility of Pre-Trained Language Models via Handcrafted Adversarial Examples","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2209.02128","snapshot_observed_at":"2026-08-08T12:17:45.934346Z","title":"J., Cefalu, J","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2502.07586","last_updated":"2025-02-11T14:34:05Z","snapshot_observed_at":"2026-08-09T01:30:05.310547Z","submitted_at":"2025-02-11T14:34:05Z","title":"We Can't Understand AI Using our Existing Vocabulary","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-08T12:17:45.934346Z"},"links":{"cited_paper":"/paper/2209.02128","citing_paper":"/paper/2502.07586"},"observation_digest":"sha256:5f91f035927d74fa8a83b565cacd0dc410a0c352c79c5e829134d0e17f1c0505","observation_id":"5133694b-32a6-4655-9724-0916febd92b5","resolution":{"observed_at":"2026-08-08T12:17:45.934346Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2209.02128","last_updated":"2022-09-05T20:29:17Z","snapshot_observed_at":"2026-08-04T07:20:43.897179Z","submitted_at":"2022-09-05T20:29:17Z","title":"Evaluating the Susceptibility of Pre-Trained Language Models via Handcrafted Adversarial Examples","version":1},"cited_work":{"arxiv_id":"2209.02128","doi":"10.48550/arxiv.2209.02128","metadata_source":"pith","pith_arxiv_id":"2209.02128","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Branch, Jonathan Rodriguez Cefalu, Jeremy McHugh, Leyla Hujer, Aditya Bahl, Daniel del Castillo Iglesias, Ron Heichman, and Ramesh Darwishi","venue":"cs.CL","work_id":"217a3646-c7b7-45c8-9527-b642d3952d7c","year":2022},"citing_paper":{"arxiv_id":"2504.19793","last_updated":"2025-08-24T03:28:21Z","snapshot_observed_at":"2026-08-01T07:24:09.967062Z","submitted_at":"2025-04-28T13:36:43Z","title":"Prompt Injection Attack to Tool Selection in LLM Agents","version":3},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-05-16T17:08:28.933831Z"},"links":{"cited_paper":"/paper/2209.02128","citing_paper":"/paper/2504.19793"},"observation_digest":"sha256:c2e120b11fa6d5086e96bfb8c30775390e54f8ecbba8406c36347611012a285a","observation_id":"1d69e912-7acc-42a2-9b0f-8509d1ed22e5","resolution":{"observed_at":"2026-05-16T17:08:29.093089Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2209.02128","last_updated":"2022-09-05T20:29:17Z","snapshot_observed_at":"2026-08-04T07:20:43.897179Z","submitted_at":"2022-09-05T20:29:17Z","title":"Evaluating the Susceptibility of Pre-Trained Language Models via Handcrafted Adversarial Examples","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2209.02128","snapshot_observed_at":"2026-08-07T12:35:30.932818Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2505.24613","last_updated":"2025-05-30T14:04:30Z","snapshot_observed_at":"2026-08-08T07:31:58.850783Z","submitted_at":"2025-05-30T14:04:30Z","title":"When Harry Meets Superman: The Role of The Interlocutor in Persona-Based Dialogue Generation","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:30.932818Z"},"links":{"cited_paper":"/paper/2209.02128","citing_paper":"/paper/2505.24613"},"observation_digest":"sha256:2f3956ff9f1d9aacab24e708c00ad74d6d8beebc4d16225623a1e8efd3090ee7","observation_id":"855e88f4-4878-4a85-8dd6-6fccab50405a","resolution":{"observed_at":"2026-08-07T12:35:30.932818Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2209.02128","last_updated":"2022-09-05T20:29:17Z","snapshot_observed_at":"2026-08-04T07:20:43.897179Z","submitted_at":"2022-09-05T20:29:17Z","title":"Evaluating the Susceptibility of Pre-Trained Language Models via Handcrafted Adversarial Examples","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2209.02128","snapshot_observed_at":"2026-08-06T16:34:03.088522Z","title":"J., et al","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.13169","last_updated":"2025-07-17T14:33:36Z","snapshot_observed_at":"2026-08-07T22:34:49.318621Z","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-06T16:34:03.088522Z"},"links":{"cited_paper":"/paper/2209.02128","citing_paper":"/paper/2507.13169"},"observation_digest":"sha256:c5f70317f1fb0fbbdcb0b12316f9c60c35f0b1eb43d0606926e4bb2db6aab904","observation_id":"e22e7f76-32cd-4cb3-869f-3183830e0afa","resolution":{"observed_at":"2026-08-06T16:34:03.088522Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2209.02128","last_updated":"2022-09-05T20:29:17Z","snapshot_observed_at":"2026-08-04T07:20:43.897179Z","submitted_at":"2022-09-05T20:29:17Z","title":"Evaluating the Susceptibility of Pre-Trained Language Models via Handcrafted Adversarial Examples","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2209.02128","snapshot_observed_at":"2026-08-06T17:35:47.982288Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.14202","last_updated":"2025-07-14T17:41:12Z","snapshot_observed_at":"2026-08-08T03:22:49.699348Z","submitted_at":"2025-07-14T17:41:12Z","title":"PRM-Free Security Alignment of Large Models via Red Teaming and Adversarial Training","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-06T17:35:47.982288Z"},"links":{"cited_paper":"/paper/2209.02128","citing_paper":"/paper/2507.14202"},"observation_digest":"sha256:79d8746bb1e819b96e1833855dd801c60624a56e4236ca06eecb4788af01323b","observation_id":"bafa7bb3-a8c0-48c3-884f-7ca91f77b74e","resolution":{"observed_at":"2026-08-06T17:35:47.982288Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2209.02128","last_updated":"2022-09-05T20:29:17Z","snapshot_observed_at":"2026-08-04T07:20:43.897179Z","submitted_at":"2022-09-05T20:29:17Z","title":"Evaluating the Susceptibility of Pre-Trained Language Models via Handcrafted Adversarial Examples","version":1},"cited_work":{"arxiv_id":"2209.02128","doi":"10.48550/arxiv.2209.02128","metadata_source":"pith","pith_arxiv_id":"2209.02128","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Branch, Jonathan Rodriguez Cefalu, Jeremy McHugh, Leyla Hujer, Aditya Bahl, Daniel del Castillo Iglesias, Ron Heichman, and Ramesh Darwishi","venue":"cs.CL","work_id":"217a3646-c7b7-45c8-9527-b642d3952d7c","year":2022},"citing_paper":{"arxiv_id":"2508.03793","last_updated":"2026-04-17T19:17:37Z","snapshot_observed_at":"2026-07-06T22:08:21.728198Z","submitted_at":"2025-08-05T17:56:51Z","title":"AttnTrace: Contextual Attribution of Prompt Injection and Knowledge Corruption","version":3},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-05-19T00:33:53.280563Z"},"links":{"cited_paper":"/paper/2209.02128","citing_paper":"/paper/2508.03793"},"observation_digest":"sha256:331328fcef9a7522cbfd0c7556fed807211fdba15b2d7ab5cc990da134510fb6","observation_id":"91a560c7-7186-400c-9d30-87b807293a25","resolution":{"observed_at":"2026-05-19T00:36:56.393395Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2209.02128","last_updated":"2022-09-05T20:29:17Z","snapshot_observed_at":"2026-08-04T07:20:43.897179Z","submitted_at":"2022-09-05T20:29:17Z","title":"Evaluating the Susceptibility of Pre-Trained Language Models via Handcrafted Adversarial Examples","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2209.02128","snapshot_observed_at":"2026-08-04T09:39:01.380118Z","title":"org/abs/2209.02128","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2510.14365","last_updated":"2026-05-28T06:29:20Z","snapshot_observed_at":"2026-08-07T19:47:51.731687Z","submitted_at":"2025-10-16T06:59:58Z","title":"Understanding the Ability of LLMs to Handle Character-Level Perturbation","version":4},"reference_index":2022,"source":"pdf_text","source_observed_at":"2026-08-04T09:39:01.380118Z"},"links":{"cited_paper":"/paper/2209.02128","citing_paper":"/paper/2510.14365"},"observation_digest":"sha256:3ab7f42c19c79370418556457ca0188ca2ed31a2f5f00fd7eea06a1c2ffd09f9","observation_id":"f6ce3dee-7837-4aa8-a3e7-531ae16abb05","resolution":{"observed_at":"2026-08-04T09:39:01.380118Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2209.02128","last_updated":"2022-09-05T20:29:17Z","snapshot_observed_at":"2026-08-04T07:20:43.897179Z","submitted_at":"2022-09-05T20:29:17Z","title":"Evaluating the Susceptibility of Pre-Trained Language Models via Handcrafted Adversarial Examples","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2209.02128","snapshot_observed_at":"2026-08-04T08:06:09.274751Z","title":"Evaluating the susceptibility of pre-trained language models via handcrafted adversarial examples.arXiv preprint arXiv:2209.02128, 2022","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2510.22963","last_updated":"2026-06-19T20:25:06Z","snapshot_observed_at":"2026-08-04T08:06:05.944327Z","submitted_at":"2025-10-27T03:37:41Z","title":"When Compression Becomes an Attack Surface: Black-Box Attacks on Prompt-Compressed LLM Agents","version":4},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-04T08:06:09.274751Z"},"links":{"cited_paper":"/paper/2209.02128","citing_paper":"/paper/2510.22963"},"observation_digest":"sha256:66738153a3ec9dfc69b73e5d7b2a25d32174b896ce4359d84e0eb4cbc4f31e5d","observation_id":"56e31609-71b5-469c-889b-6f73139d5999","resolution":{"observed_at":"2026-08-04T08:06:09.274751Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2209.02128","last_updated":"2022-09-05T20:29:17Z","snapshot_observed_at":"2026-08-04T07:20:43.897179Z","submitted_at":"2022-09-05T20:29:17Z","title":"Evaluating the Susceptibility of Pre-Trained Language Models via Handcrafted Adversarial Examples","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2209.02128","snapshot_observed_at":"2026-08-04T07:06:37.731914Z","title":"Evaluating the susceptibility of pre-trained language models via handcrafted adversarial examples.arXiv preprint arXiv:2209.02128, 2022","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-07T23:25:01.868478Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:37.731914Z"},"links":{"cited_paper":"/paper/2209.02128","citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:4a90521d3a3e0e70aa9f884147ca8d8626cf38b3a393ac28e3f541569771327c","observation_id":"c9883fca-74ed-41df-ad2e-2ea9cc0eb131","resolution":{"observed_at":"2026-08-04T07:06:37.731914Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2209.02128","last_updated":"2022-09-05T20:29:17Z","snapshot_observed_at":"2026-08-04T07:20:43.897179Z","submitted_at":"2022-09-05T20:29:17Z","title":"Evaluating the Susceptibility of Pre-Trained Language Models via Handcrafted Adversarial Examples","version":1},"cited_work":{"arxiv_id":"2209.02128","doi":"10.48550/arxiv.2209.02128","metadata_source":"pith","pith_arxiv_id":"2209.02128","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Branch, Jonathan Rodriguez Cefalu, Jeremy McHugh, Leyla Hujer, Aditya Bahl, Daniel del Castillo Iglesias, Ron Heichman, and Ramesh Darwishi","venue":"cs.CL","work_id":"217a3646-c7b7-45c8-9527-b642d3952d7c","year":2022},"citing_paper":{"arxiv_id":"2604.28157","last_updated":"2026-04-30T17:43:24Z","snapshot_observed_at":"2026-07-06T23:13:29.310140Z","submitted_at":"2026-04-30T17:43:24Z","title":"FlashRT: Towards Computationally and Memory Efficient Red-Teaming for Prompt Injection and Knowledge Corruption","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-05-07T06:49:56.316472Z"},"links":{"cited_paper":"/paper/2209.02128","citing_paper":"/paper/2604.28157"},"observation_digest":"sha256:97c903b27413bc107ffa253b1755a23080ef697152ca1a00739bfb446067e707","observation_id":"6e929543-4e48-476f-b833-dc77c494f57b","resolution":{"observed_at":"2026-05-12T10:16:28.274248Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2209.02128","last_updated":"2022-09-05T20:29:17Z","snapshot_observed_at":"2026-08-04T07:20:43.897179Z","submitted_at":"2022-09-05T20:29:17Z","title":"Evaluating the Susceptibility of Pre-Trained Language Models via Handcrafted Adversarial Examples","version":1},"cited_work":{"arxiv_id":"2209.02128","doi":"10.48550/arxiv.2209.02128","metadata_source":"pith","pith_arxiv_id":"2209.02128","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Branch, Jonathan Rodriguez Cefalu, Jeremy McHugh, Leyla Hujer, Aditya Bahl, Daniel del Castillo Iglesias, Ron Heichman, and Ramesh Darwishi","venue":"cs.CL","work_id":"217a3646-c7b7-45c8-9527-b642d3952d7c","year":2022},"citing_paper":{"arxiv_id":"2605.00460","last_updated":"2026-05-01T06:51:58Z","snapshot_observed_at":"2026-07-06T23:13:52.304925Z","submitted_at":"2026-05-01T06:51:58Z","title":"CleanBase: Detecting Malicious Documents in RAG Knowledge Databases","version":1},"reference_index":42,"source":"arxiv_source","source_observed_at":"2026-05-09T19:41:49.394967Z"},"links":{"cited_paper":"/paper/2209.02128","citing_paper":"/paper/2605.00460"},"observation_digest":"sha256:87ba94aeeb903732b529d65318b39fe16ce8ee527f5640f37fe30e481df6c744","observation_id":"0a69e0fd-be78-42c9-95cb-676c2fb79dae","resolution":{"observed_at":"2026-05-11T15:31:22.315397Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2209.02128","last_updated":"2022-09-05T20:29:17Z","snapshot_observed_at":"2026-08-04T07:20:43.897179Z","submitted_at":"2022-09-05T20:29:17Z","title":"Evaluating the Susceptibility of Pre-Trained Language Models via Handcrafted Adversarial Examples","version":1},"cited_work":{"arxiv_id":"2209.02128","doi":"10.48550/arxiv.2209.02128","metadata_source":"pith","pith_arxiv_id":"2209.02128","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Branch, Jonathan Rodriguez Cefalu, Jeremy McHugh, Leyla Hujer, Aditya Bahl, Daniel del Castillo Iglesias, Ron Heichman, and Ramesh Darwishi","venue":"cs.CL","work_id":"217a3646-c7b7-45c8-9527-b642d3952d7c","year":2022},"citing_paper":{"arxiv_id":"2605.16090","last_updated":"2026-05-15T15:47:41Z","snapshot_observed_at":"2026-08-08T23:04:25.950675Z","submitted_at":"2026-05-15T15:47:41Z","title":"A Cross-Modal Prompt Injection Attack against Large Vision-Language Models with Image-Only Perturbation","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-05-20T17:20:54.445007Z"},"links":{"cited_paper":"/paper/2209.02128","citing_paper":"/paper/2605.16090"},"observation_digest":"sha256:4aa5234e3c18086ac83d042967e9e324adcabeedaf2bbcd20ab930e7def26705","observation_id":"1a1da855-d24a-4493-88b8-c5d664d5a10c","resolution":{"observed_at":"2026-05-20T17:23:36.828570Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2209.02128","last_updated":"2022-09-05T20:29:17Z","snapshot_observed_at":"2026-08-04T07:20:43.897179Z","submitted_at":"2022-09-05T20:29:17Z","title":"Evaluating the Susceptibility of Pre-Trained Language Models via Handcrafted Adversarial Examples","version":1},"cited_work":{"arxiv_id":"2209.02128","doi":"10.48550/arxiv.2209.02128","metadata_source":"pith","pith_arxiv_id":"2209.02128","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Branch, Jonathan Rodriguez Cefalu, Jeremy McHugh, Leyla Hujer, Aditya Bahl, Daniel del Castillo Iglesias, Ron Heichman, and Ramesh Darwishi","venue":"cs.CL","work_id":"217a3646-c7b7-45c8-9527-b642d3952d7c","year":2022},"citing_paper":{"arxiv_id":"2606.19660","last_updated":"2026-06-17T23:59:57Z","snapshot_observed_at":"2026-08-08T17:16:02.859263Z","submitted_at":"2026-06-17T23:59:57Z","title":"A Layered Security Framework Against Prompt Injection in RAG-Based Chatbots","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-06-26T20:00:14.036515Z"},"links":{"cited_paper":"/paper/2209.02128","citing_paper":"/paper/2606.19660"},"observation_digest":"sha256:94bebf5c039b42ecd4e30d0f38a3f5b16aebc0fc6036c96798f4cb69c3757c6d","observation_id":"702a6ae5-8464-4dc9-83a3-9c99b9aef69a","resolution":{"observed_at":"2026-07-04T02:09:22.505482Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2209.02128","last_updated":"2022-09-05T20:29:17Z","snapshot_observed_at":"2026-08-04T07:20:43.897179Z","submitted_at":"2022-09-05T20:29:17Z","title":"Evaluating the Susceptibility of Pre-Trained Language Models via Handcrafted Adversarial Examples","version":1},"cited_work":{"arxiv_id":"2209.02128","doi":"10.48550/arxiv.2209.02128","metadata_source":"pith","pith_arxiv_id":"2209.02128","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Branch, Jonathan Rodriguez Cefalu, Jeremy McHugh, Leyla Hujer, Aditya Bahl, Daniel del Castillo Iglesias, Ron Heichman, and Ramesh Darwishi","venue":"cs.CL","work_id":"217a3646-c7b7-45c8-9527-b642d3952d7c","year":2022},"citing_paper":{"arxiv_id":"2607.05189","last_updated":"2026-07-06T15:08:58Z","snapshot_observed_at":"2026-07-09T23:18:22.372649Z","submitted_at":"2026-07-06T15:08:58Z","title":"When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-07-08T00:18:55.016013Z"},"links":{"cited_paper":"/paper/2209.02128","citing_paper":"/paper/2607.05189"},"observation_digest":"sha256:0a74be746bd83bc8abba9fc5ea10ed32b1817078f14fbd1a6967bbcfc87ce65e","observation_id":"2f0d4c74-f8ba-4420-9d4d-45d24f478537","resolution":{"observed_at":"2026-07-08T00:24:22.468806Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2209.02128/citation-record","integrity":"/paper/2209.02128/integrity","json":"/paper/2209.02128/citation-record.json","paper":"/paper/2209.02128"},"outbound":[],"paper":{"arxiv_id":"2209.02128","last_updated":"2022-09-05T20:29:17Z","latest_version":1,"primary_category":"cs.CL","snapshot_observed_at":"2026-08-04T07:20:43.897179Z","submitted_at":"2022-09-05T20:29:17Z","title":"Evaluating the Susceptibility of Pre-Trained Language Models via Handcrafted Adversarial Examples"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 17 inbound Pith citation observations for arXiv:2209.02128."}