{"as_of":"2026-08-09T22:49:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:8c9c79c14b782320eb249e03e2f3cd7d21c89a124f30bb320ae18a905dbe2f0c","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":12,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":12,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":12,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":12,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T23:56:00.064100Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":1,"source":"arxiv_reference","source_observed_at":"2026-08-05T02:28:24.338817Z","state":"measured"}],"external_citation_measurements":[{"count":3,"observed_at":"2026-08-05T02:28:24.338817Z","source":"arxiv_reference"}],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2311.04235","last_updated":"2024-03-08T17:04:49Z","snapshot_observed_at":"2026-08-09T20:44:24.518088Z","submitted_at":"2023-11-06T08:50:29Z","title":"Can LLMs Follow Simple Rules?","version":3},"cited_work":{"arxiv_id":"2311.04235","doi":"10.48550/arxiv.2311.04235","metadata_source":"arxiv_reference","pith_arxiv_id":"2311.04235","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Can LLMs follow simple rules?arXiv preprint arXiv:2311.04235","venue":"arXiv (Cornell University)","work_id":"1a141f91-f3c6-4733-ab33-e7611c062cc6","year":2023},"citing_paper":{"arxiv_id":"2406.13352","last_updated":"2024-11-24T22:04:23Z","snapshot_observed_at":"2026-07-06T18:33:32.806635Z","submitted_at":"2024-06-19T08:55:56Z","title":"AgentDojo: A Dynamic Environment to Evaluate Prompt Injection Attacks and Defenses for LLM Agents","version":3},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-05-13T06:35:13.331872Z"},"links":{"cited_paper":"/paper/2311.04235","citing_paper":"/paper/2406.13352"},"observation_digest":"sha256:d8ca59f13b7cf3298b04240136fe22b95334f11d8a6cd2efbd0e43309612eddf","observation_id":"6907c167-55b2-40a6-b898-a276972b3309","resolution":{"observed_at":"2026-05-13T06:35:13.482038Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2311.04235","last_updated":"2024-03-08T17:04:49Z","snapshot_observed_at":"2026-08-09T20:44:24.518088Z","submitted_at":"2023-11-06T08:50:29Z","title":"Can LLMs Follow Simple Rules?","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.04235","snapshot_observed_at":"2026-08-07T23:56:00.064100Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.08745","last_updated":"2025-03-26T20:35:30Z","snapshot_observed_at":"2026-08-08T01:24:44.588510Z","submitted_at":"2025-02-12T19:35:28Z","title":"IHEval: Evaluating Language Models on Following the Instruction Hierarchy","version":2},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-07T23:56:00.064100Z"},"links":{"cited_paper":"/paper/2311.04235","citing_paper":"/paper/2502.08745"},"observation_digest":"sha256:3801b539f30ae12d0096b9caa455412c71549fca69378a639fceb09228b81122","observation_id":"9199d62b-bd08-450e-9649-c60e5dbf1ba0","resolution":{"observed_at":"2026-08-07T23:56:00.064100Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.04235","last_updated":"2024-03-08T17:04:49Z","snapshot_observed_at":"2026-08-09T20:44:24.518088Z","submitted_at":"2023-11-06T08:50:29Z","title":"Can LLMs Follow Simple Rules?","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.04235","snapshot_observed_at":"2026-08-07T15:03:01.961239Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.16526","last_updated":"2025-05-22T11:12:27Z","snapshot_observed_at":"2026-08-09T20:43:41.922108Z","submitted_at":"2025-05-22T11:12:27Z","title":"EnSToM: Enhancing Dialogue Systems with Entropy-Scaled Steering Vectors for Topic Maintenance","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-07T15:03:01.961239Z"},"links":{"cited_paper":"/paper/2311.04235","citing_paper":"/paper/2505.16526"},"observation_digest":"sha256:9aa3c89d8c1854a1511a24463d7b97be561a330c12a5b4563f0172d5baa4d175","observation_id":"ead3faa5-253e-43e1-81d4-c05e5e76464b","resolution":{"observed_at":"2026-08-07T15:03:01.961239Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.04235","last_updated":"2024-03-08T17:04:49Z","snapshot_observed_at":"2026-08-09T20:44:24.518088Z","submitted_at":"2023-11-06T08:50:29Z","title":"Can LLMs Follow Simple Rules?","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.04235","snapshot_observed_at":"2026-08-07T13:43:10.747801Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.21091","last_updated":"2025-06-23T06:43:45Z","snapshot_observed_at":"2026-08-07T14:20:14.738369Z","submitted_at":"2025-05-27T12:19:08Z","title":"Position is Power: System Prompts as a Mechanism of Bias in Large Language Models (LLMs)","version":3},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-07T13:43:10.747801Z"},"links":{"cited_paper":"/paper/2311.04235","citing_paper":"/paper/2505.21091"},"observation_digest":"sha256:48a8cab96ae0baf0319306262c06959b41287cf898511d34961dcd2fee6f591d","observation_id":"57708bf5-0f28-4f7a-81cf-4af47e29c1f1","resolution":{"observed_at":"2026-08-07T13:43:10.747801Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.04235","last_updated":"2024-03-08T17:04:49Z","snapshot_observed_at":"2026-08-09T20:44:24.518088Z","submitted_at":"2023-11-06T08:50:29Z","title":"Can LLMs Follow Simple Rules?","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.04235","snapshot_observed_at":"2026-08-07T11:59:24.736494Z","title":"Can llms follow simple rules? arXiv preprint arXiv:2311.04235, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:24.736494Z"},"links":{"cited_paper":"/paper/2311.04235","citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:e1e6a368c3b08e48db88f1741a801d6f664726512d17b63fb0403f012686db34","observation_id":"25ac0349-c59b-4950-b22d-db92c611345a","resolution":{"observed_at":"2026-08-07T11:59:24.736494Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.04235","last_updated":"2024-03-08T17:04:49Z","snapshot_observed_at":"2026-08-09T20:44:24.518088Z","submitted_at":"2023-11-06T08:50:29Z","title":"Can LLMs Follow Simple Rules?","version":3},"cited_work":{"arxiv_id":"2311.04235","doi":"10.48550/arxiv.2311.04235","metadata_source":"arxiv_reference","pith_arxiv_id":"2311.04235","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Can LLMs follow simple rules?arXiv preprint arXiv:2311.04235","venue":"arXiv (Cornell University)","work_id":"1a141f91-f3c6-4733-ab33-e7611c062cc6","year":2023},"citing_paper":{"arxiv_id":"2510.18333","last_updated":"2026-04-21T04:19:09Z","snapshot_observed_at":"2026-07-06T22:33:39.148066Z","submitted_at":"2025-10-21T06:34:51Z","title":"Position: LLM Watermarking Should Align Stakeholders' Incentives for Practical Adoption","version":2},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-05-18T05:24:25.622071Z"},"links":{"cited_paper":"/paper/2311.04235","citing_paper":"/paper/2510.18333"},"observation_digest":"sha256:e353de1d91627eda276194b5a6750cea1bced38a2f5ca429c842276ec21fcc14","observation_id":"9676fe17-1f22-4a85-8d43-c4206dacd20a","resolution":{"observed_at":"2026-05-18T05:25:54.459093Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2311.04235","last_updated":"2024-03-08T17:04:49Z","snapshot_observed_at":"2026-08-09T20:44:24.518088Z","submitted_at":"2023-11-06T08:50:29Z","title":"Can LLMs Follow Simple Rules?","version":3},"cited_work":{"arxiv_id":"2311.04235","doi":"10.48550/arxiv.2311.04235","metadata_source":"arxiv_reference","pith_arxiv_id":"2311.04235","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Can LLMs follow simple rules?arXiv preprint arXiv:2311.04235","venue":"arXiv (Cornell University)","work_id":"1a141f91-f3c6-4733-ab33-e7611c062cc6","year":2023},"citing_paper":{"arxiv_id":"2604.09189","last_updated":"2026-04-10T10:18:45Z","snapshot_observed_at":"2026-07-06T22:58:08.579543Z","submitted_at":"2026-04-10T10:18:45Z","title":"Do LLMs Follow Their Own Rules? A Reflexive Audit of Self-Stated Safety Policies","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-05-10T17:55:46.600687Z"},"links":{"cited_paper":"/paper/2311.04235","citing_paper":"/paper/2604.09189"},"observation_digest":"sha256:43838cebb9e90b596f9a3cacc6dcc6ce0f0af2fde1ee01861ce6bf73e080fa59","observation_id":"64030148-16f2-4bb9-8fc7-2d5418fdc25d","resolution":{"observed_at":"2026-05-11T05:51:02.582252Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2311.04235","last_updated":"2024-03-08T17:04:49Z","snapshot_observed_at":"2026-08-09T20:44:24.518088Z","submitted_at":"2023-11-06T08:50:29Z","title":"Can LLMs Follow Simple Rules?","version":3},"cited_work":{"arxiv_id":"2311.04235","doi":"10.48550/arxiv.2311.04235","metadata_source":"arxiv_reference","pith_arxiv_id":"2311.04235","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Can LLMs follow simple rules?arXiv preprint arXiv:2311.04235","venue":"arXiv (Cornell University)","work_id":"1a141f91-f3c6-4733-ab33-e7611c062cc6","year":2023},"citing_paper":{"arxiv_id":"2605.17510","last_updated":"2026-05-17T15:45:47Z","snapshot_observed_at":"2026-08-03T10:11:52.187850Z","submitted_at":"2026-05-17T15:45:47Z","title":"Scale-Dependent Collective Adaptation in Self-Amending LLM Societies: A Cross-Family Study of Emergent Governance","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-05-19T22:29:17.058647Z"},"links":{"cited_paper":"/paper/2311.04235","citing_paper":"/paper/2605.17510"},"observation_digest":"sha256:c58864e634562791a6e1b5a59c9c012fe2c6d9c105ebc273c86020f83e991831","observation_id":"95478f5b-0974-44ad-bb0b-98c0f6ddb281","resolution":{"observed_at":"2026-05-19T22:32:49.727141Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2311.04235","last_updated":"2024-03-08T17:04:49Z","snapshot_observed_at":"2026-08-09T20:44:24.518088Z","submitted_at":"2023-11-06T08:50:29Z","title":"Can LLMs Follow Simple Rules?","version":3},"cited_work":{"arxiv_id":"2311.04235","doi":"10.48550/arxiv.2311.04235","metadata_source":"arxiv_reference","pith_arxiv_id":"2311.04235","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Can LLMs follow simple rules?arXiv preprint arXiv:2311.04235","venue":"arXiv (Cornell University)","work_id":"1a141f91-f3c6-4733-ab33-e7611c062cc6","year":2023},"citing_paper":{"arxiv_id":"2606.07539","last_updated":"2026-04-29T17:39:36Z","snapshot_observed_at":"2026-08-02T12:30:34.186010Z","submitted_at":"2026-04-29T17:39:36Z","title":"Prompt Governance? On Governing Technologies Governed by Natural Language","version":1},"reference_index":229,"source":"pdf_text","source_observed_at":"2026-07-01T08:17:10.481202Z"},"links":{"cited_paper":"/paper/2311.04235","citing_paper":"/paper/2606.07539"},"observation_digest":"sha256:d34bf928f3a7bf84c6abcae07f857b0180a242791ab87dc997efcd11a79be630","observation_id":"086c387e-eb6b-4615-af4b-888243d60e7f","resolution":{"observed_at":"2026-07-01T08:25:32.754272Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2311.04235","last_updated":"2024-03-08T17:04:49Z","snapshot_observed_at":"2026-08-09T20:44:24.518088Z","submitted_at":"2023-11-06T08:50:29Z","title":"Can LLMs Follow Simple Rules?","version":3},"cited_work":{"arxiv_id":"2311.04235","doi":"10.48550/arxiv.2311.04235","metadata_source":"arxiv_reference","pith_arxiv_id":"2311.04235","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Can LLMs follow simple rules?arXiv preprint arXiv:2311.04235","venue":"arXiv (Cornell University)","work_id":"1a141f91-f3c6-4733-ab33-e7611c062cc6","year":2023},"citing_paper":{"arxiv_id":"2606.15874","last_updated":"2026-06-22T08:52:52Z","snapshot_observed_at":"2026-08-07T18:55:42.158905Z","submitted_at":"2026-06-14T15:47:27Z","title":"LLM-as-Code: Agentic Programming for Agent Harness","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-06-27T04:16:58.964046Z"},"links":{"cited_paper":"/paper/2311.04235","citing_paper":"/paper/2606.15874"},"observation_digest":"sha256:b394135b220031fa86e7d054ff3ec2fa1f83c19c8dcd8f64654f2af63265a959","observation_id":"6282caf6-910e-4672-b315-19b06481d684","resolution":{"observed_at":"2026-07-03T17:18:44.151701Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2311.04235","last_updated":"2024-03-08T17:04:49Z","snapshot_observed_at":"2026-08-09T20:44:24.518088Z","submitted_at":"2023-11-06T08:50:29Z","title":"Can LLMs Follow Simple Rules?","version":3},"cited_work":{"arxiv_id":"2311.04235","doi":"10.48550/arxiv.2311.04235","metadata_source":"arxiv_reference","pith_arxiv_id":"2311.04235","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Can LLMs follow simple rules?arXiv preprint arXiv:2311.04235","venue":"arXiv (Cornell University)","work_id":"1a141f91-f3c6-4733-ab33-e7611c062cc6","year":2023},"citing_paper":{"arxiv_id":"2606.30783","last_updated":"2026-06-29T18:11:17Z","snapshot_observed_at":"2026-08-08T22:30:38.879886Z","submitted_at":"2026-06-29T18:11:17Z","title":"Security--Fidelity Tradeoffs: The Hidden Cost of Prompt Injection Defense","version":1},"reference_index":55,"source":"arxiv_source","source_observed_at":"2026-07-01T01:44:07.700127Z"},"links":{"cited_paper":"/paper/2311.04235","citing_paper":"/paper/2606.30783"},"observation_digest":"sha256:709b09e79767750edd78ad1d972853a5f5d849b0c62fee4f2ac37127443ba74f","observation_id":"86df0776-e8f6-464f-9312-3b5910e73f34","resolution":{"observed_at":"2026-07-01T01:45:13.838631Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2311.04235","last_updated":"2024-03-08T17:04:49Z","snapshot_observed_at":"2026-08-09T20:44:24.518088Z","submitted_at":"2023-11-06T08:50:29Z","title":"Can LLMs Follow Simple Rules?","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.04235","snapshot_observed_at":"2026-08-01T15:07:30.546227Z","title":"Can llms follow simple rules?","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.18548","last_updated":"2026-07-20T22:28:16Z","snapshot_observed_at":"2026-08-04T05:23:32.973903Z","submitted_at":"2026-07-20T22:28:16Z","title":"Engineering Trustworthy Agentic AI for Critical Systems","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-01T15:07:30.546227Z"},"links":{"cited_paper":"/paper/2311.04235","citing_paper":"/paper/2607.18548"},"observation_digest":"sha256:9f5b13fe73f94256695aeabd1bb9ba2f00b6ed95f01e9cea9c62215033748385","observation_id":"2b098afd-c3ff-4a99-930e-ba9f277f83df","resolution":{"observed_at":"2026-08-01T15:07:30.546227Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2311.04235/citation-record","integrity":"/paper/2311.04235/integrity","json":"/paper/2311.04235/citation-record.json","paper":"/paper/2311.04235"},"outbound":[],"paper":{"arxiv_id":"2311.04235","last_updated":"2024-03-08T17:04:49Z","latest_version":3,"primary_category":"cs.AI","snapshot_observed_at":"2026-08-09T20:44:24.518088Z","submitted_at":"2023-11-06T08:50:29Z","title":"Can LLMs Follow Simple Rules?"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 12 inbound Pith citation observations for arXiv:2311.04235."}