{"as_of":"2026-08-20T04:01:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:71c6b65c1cda478c6eb18a8d7e60c1fbca42448c37525f8134179bb5143ad392","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":11,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":11,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-19T06:32:44.657259+00:00","state":"measured"},{"denominator":11,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":11,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-16T04:28:00.737562Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":1,"source":"arxiv_reference","source_observed_at":"2026-08-05T02:28:24.338817Z","state":"measured"}],"external_citation_measurements":[{"count":4,"observed_at":"2026-08-05T02:28:24.338817Z","source":"arxiv_reference"}],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2401.07612","last_updated":"2024-01-15T11:44:18Z","snapshot_observed_at":"2026-08-16T14:27:29.477573Z","submitted_at":"2024-01-15T11:44:18Z","title":"Signed-Prompt: A New Approach to Prevent Prompt Injection Attacks Against LLM-Integrated Applications","version":1},"cited_work":{"arxiv_id":"2401.07612","doi":"10.48550/arxiv.2401.07612","metadata_source":"arxiv_reference","pith_arxiv_id":"2401.07612","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Signed-prompt: A new approach to prevent prompt injection attacks against llm-integrated applications","venue":"arXiv (Cornell University)","work_id":"0ddb9cb7-b03d-46f9-94c6-8e63b270b6f0","year":2024},"citing_paper":{"arxiv_id":"2410.07283","last_updated":"2024-10-09T11:01:29Z","snapshot_observed_at":"2026-08-11T20:32:18.138792Z","submitted_at":"2024-10-09T11:01:29Z","title":"Prompt Infection: LLM-to-LLM Prompt Injection within Multi-Agent Systems","version":1},"reference_index":103,"source":"arxiv_source","source_observed_at":"2026-05-15T19:32:19.405615Z"},"links":{"cited_paper":"/paper/2401.07612","citing_paper":"/paper/2410.07283"},"observation_digest":"sha256:cef6ba35952c8a2dd2e80f03bbf48b70e153c088846781bd678250fb9be54e67","observation_id":"cff79474-79b2-4357-95b5-2e9515b4c2e5","resolution":{"observed_at":"2026-05-15T19:32:19.486129Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2401.07612","last_updated":"2024-01-15T11:44:18Z","snapshot_observed_at":"2026-08-16T14:27:29.477573Z","submitted_at":"2024-01-15T11:44:18Z","title":"Signed-Prompt: A New Approach to Prevent Prompt Injection Attacks Against LLM-Integrated Applications","version":1},"cited_work":{"arxiv_id":"2401.07612","doi":"10.48550/arxiv.2401.07612","metadata_source":"arxiv_reference","pith_arxiv_id":"2401.07612","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Signed-prompt: A new approach to prevent prompt injection attacks against llm-integrated applications","venue":"arXiv (Cornell University)","work_id":"0ddb9cb7-b03d-46f9-94c6-8e63b270b6f0","year":2024},"citing_paper":{"arxiv_id":"2504.20472","last_updated":"2026-04-09T06:57:42Z","snapshot_observed_at":"2026-08-13T08:12:27.488850Z","submitted_at":"2025-04-29T07:13:53Z","title":"Robustness via Referencing: Defending against Prompt Injection Attacks by Referencing the Executed Instruction","version":2},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-05-22T19:10:55.009810Z"},"links":{"cited_paper":"/paper/2401.07612","citing_paper":"/paper/2504.20472"},"observation_digest":"sha256:081ae1c7aa168e87d03656563a9bb86821bf34db032e37c7fa5416fe6c276d0c","observation_id":"95362365-82cf-4288-98f9-ae7fd3ca5b60","resolution":{"observed_at":"2026-05-22T19:11:58.051126Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2401.07612","last_updated":"2024-01-15T11:44:18Z","snapshot_observed_at":"2026-08-16T14:27:29.477573Z","submitted_at":"2024-01-15T11:44:18Z","title":"Signed-Prompt: A New Approach to Prevent Prompt Injection Attacks Against LLM-Integrated Applications","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.07612","snapshot_observed_at":"2026-08-16T04:28:00.737562Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.01177","last_updated":"2025-05-02T10:35:26Z","snapshot_observed_at":"2026-08-16T14:20:05.929905Z","submitted_at":"2025-05-02T10:35:26Z","title":"LLM Security: Vulnerabilities, Attacks, Defenses, and Countermeasures","version":1},"reference_index":125,"source":"pdf_text","source_observed_at":"2026-08-16T04:28:00.737562Z"},"links":{"cited_paper":"/paper/2401.07612","citing_paper":"/paper/2505.01177"},"observation_digest":"sha256:213f4b64f3ef43f3e52d85f15dd29ffbe38ef6ff8599476c04d7a9bb628b8019","observation_id":"c4cf9278-7fe5-4e9e-a045-e976a5d6fbad","resolution":{"observed_at":"2026-08-16T04:28:00.737562Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.07612","last_updated":"2024-01-15T11:44:18Z","snapshot_observed_at":"2026-08-16T14:27:29.477573Z","submitted_at":"2024-01-15T11:44:18Z","title":"Signed-Prompt: A New Approach to Prevent Prompt Injection Attacks Against LLM-Integrated Applications","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.07612","snapshot_observed_at":"2026-08-15T23:23:39.938122Z","title":"”Signed-Prompt: A New Approach to Prevent Prompt Injection Attacks Against LLM-Integrated Applications” arXiv preprint arXiv:2401.07612 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.04806","last_updated":"2025-05-13T05:36:34Z","snapshot_observed_at":"2026-08-16T21:53:39.240862Z","submitted_at":"2025-05-07T21:15:40Z","title":"Red Teaming the Mind of the Machine: A Systematic Evaluation of Prompt Injection and Jailbreak Vulnerabilities in LLMs","version":2},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-15T23:23:39.938122Z"},"links":{"cited_paper":"/paper/2401.07612","citing_paper":"/paper/2505.04806"},"observation_digest":"sha256:004abc44db5bef3b638dd47ba697850ff88a1e716400c477d25e36557b47833f","observation_id":"9a2619fe-d5e1-454b-940f-3162fe302789","resolution":{"observed_at":"2026-08-15T23:23:39.938122Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.07612","last_updated":"2024-01-15T11:44:18Z","snapshot_observed_at":"2026-08-16T14:27:29.477573Z","submitted_at":"2024-01-15T11:44:18Z","title":"Signed-Prompt: A New Approach to Prevent Prompt Injection Attacks Against LLM-Integrated Applications","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.07612","snapshot_observed_at":"2026-08-05T22:51:28.159339Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.06418","last_updated":"2025-08-08T16:05:27Z","snapshot_observed_at":"2026-08-08T12:59:56.859606Z","submitted_at":"2025-08-08T16:05:27Z","title":"Quantifying Conversation Drift in MCP via Latent Polytope","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-05T22:51:28.159339Z"},"links":{"cited_paper":"/paper/2401.07612","citing_paper":"/paper/2508.06418"},"observation_digest":"sha256:9857d01f22ebfdae8432ecc7df4ef659b9c06192090ce002acc9504e5350a781","observation_id":"f7e750b7-5280-413e-b33a-b8467dcffea0","resolution":{"observed_at":"2026-08-05T22:51:28.159339Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.07612","last_updated":"2024-01-15T11:44:18Z","snapshot_observed_at":"2026-08-16T14:27:29.477573Z","submitted_at":"2024-01-15T11:44:18Z","title":"Signed-Prompt: A New Approach to Prevent Prompt Injection Attacks Against LLM-Integrated Applications","version":1},"cited_work":{"arxiv_id":"2401.07612","doi":"10.48550/arxiv.2401.07612","metadata_source":"arxiv_reference","pith_arxiv_id":"2401.07612","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Signed-prompt: A new approach to prevent prompt injection attacks against llm-integrated applications","venue":"arXiv (Cornell University)","work_id":"0ddb9cb7-b03d-46f9-94c6-8e63b270b6f0","year":2024},"citing_paper":{"arxiv_id":"2510.23883","last_updated":"2026-04-03T16:27:34Z","snapshot_observed_at":"2026-08-13T20:52:15.127327Z","submitted_at":"2025-10-27T21:48:11Z","title":"Agentic AI Security: Threats, Defenses, Evaluation, and Open Challenges","version":3},"reference_index":186,"source":"pdf_text","source_observed_at":"2026-05-18T03:42:10.703369Z"},"links":{"cited_paper":"/paper/2401.07612","citing_paper":"/paper/2510.23883"},"observation_digest":"sha256:01d96c8f4c0984bd4d1706cc87071e8b9daa2ae7feecc6a1d3c6b8f769c59f18","observation_id":"45105aea-fab8-4007-b4c6-ff4abda9e642","resolution":{"observed_at":"2026-05-18T03:42:22.064172Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2401.07612","last_updated":"2024-01-15T11:44:18Z","snapshot_observed_at":"2026-08-16T14:27:29.477573Z","submitted_at":"2024-01-15T11:44:18Z","title":"Signed-Prompt: A New Approach to Prevent Prompt Injection Attacks Against LLM-Integrated Applications","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.07612","snapshot_observed_at":"2026-07-12T20:09:57.922788Z","title":"Signed-Prompt: a New Approach to Prevent Prompt Injec- tion Attacks Against LLM-Integrated Applications,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2604.14603","last_updated":"2026-06-29T06:44:20Z","snapshot_observed_at":"2026-07-12T20:09:54.804124Z","submitted_at":"2026-04-16T04:21:32Z","title":"A Synonymous Variational Perspective on the Rate-Distortion-Perception Tradeoff","version":2},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-07-12T20:09:57.922788Z"},"links":{"cited_paper":"/paper/2401.07612","citing_paper":"/paper/2604.14603"},"observation_digest":"sha256:0d45f093d80cd05a88b19de1f89546be08ac76566cda6cc3c65a9ee8961c52c0","observation_id":"47843df4-7f3d-433c-9a02-d4c0c9dfe9d0","resolution":{"observed_at":"2026-07-12T20:09:57.922788Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.07612","last_updated":"2024-01-15T11:44:18Z","snapshot_observed_at":"2026-08-16T14:27:29.477573Z","submitted_at":"2024-01-15T11:44:18Z","title":"Signed-Prompt: A New Approach to Prevent Prompt Injection Attacks Against LLM-Integrated Applications","version":1},"cited_work":{"arxiv_id":"2401.07612","doi":"10.48550/arxiv.2401.07612","metadata_source":"arxiv_reference","pith_arxiv_id":"2401.07612","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Signed-prompt: A new approach to prevent prompt injection attacks against llm-integrated applications","venue":"arXiv (Cornell University)","work_id":"0ddb9cb7-b03d-46f9-94c6-8e63b270b6f0","year":2024},"citing_paper":{"arxiv_id":"2604.14604","last_updated":"2026-04-16T04:22:11Z","snapshot_observed_at":"2026-08-11T08:37:21.535936Z","submitted_at":"2026-04-16T04:22:11Z","title":"Hijacking Large Audio-Language Models via Context-Agnostic and Imperceptible Auditory Prompt Injection","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-05-10T11:32:10.126062Z"},"links":{"cited_paper":"/paper/2401.07612","citing_paper":"/paper/2604.14604"},"observation_digest":"sha256:f1531c9673f6fbc9480aebdde2256c2c27dd9f7d0e7487133ec44f115dd16936","observation_id":"0cb679d2-9bcd-4499-a0f0-f4c84c530007","resolution":{"observed_at":"2026-05-10T11:35:18.915880Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2401.07612","last_updated":"2024-01-15T11:44:18Z","snapshot_observed_at":"2026-08-16T14:27:29.477573Z","submitted_at":"2024-01-15T11:44:18Z","title":"Signed-Prompt: A New Approach to Prevent Prompt Injection Attacks Against LLM-Integrated Applications","version":1},"cited_work":{"arxiv_id":"2401.07612","doi":"10.48550/arxiv.2401.07612","metadata_source":"arxiv_reference","pith_arxiv_id":"2401.07612","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Signed-prompt: A new approach to prevent prompt injection attacks against llm-integrated applications","venue":"arXiv (Cornell University)","work_id":"0ddb9cb7-b03d-46f9-94c6-8e63b270b6f0","year":2024},"citing_paper":{"arxiv_id":"2605.18133","last_updated":"2026-05-18T09:38:18Z","snapshot_observed_at":"2026-08-13T19:10:03.642585Z","submitted_at":"2026-05-18T09:38:18Z","title":"An Empirical Study of Privacy Leakage Chains via Prompt Injection in Black-Box Chatbot Environments","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-05-20T09:58:05.349147Z"},"links":{"cited_paper":"/paper/2401.07612","citing_paper":"/paper/2605.18133"},"observation_digest":"sha256:f73e0d52c835e22463d77446699dd35752f99910f6bc5a71deff9194f9bc8487","observation_id":"89d1a254-b59c-4361-9e58-bf6b3a67176b","resolution":{"observed_at":"2026-05-20T09:58:10.891696Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2401.07612","last_updated":"2024-01-15T11:44:18Z","snapshot_observed_at":"2026-08-16T14:27:29.477573Z","submitted_at":"2024-01-15T11:44:18Z","title":"Signed-Prompt: A New Approach to Prevent Prompt Injection Attacks Against LLM-Integrated Applications","version":1},"cited_work":{"arxiv_id":"2401.07612","doi":"10.48550/arxiv.2401.07612","metadata_source":"arxiv_reference","pith_arxiv_id":"2401.07612","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Signed-prompt: A new approach to prevent prompt injection attacks against llm-integrated applications","venue":"arXiv (Cornell University)","work_id":"0ddb9cb7-b03d-46f9-94c6-8e63b270b6f0","year":2024},"citing_paper":{"arxiv_id":"2605.23158","last_updated":"2026-05-22T02:14:16Z","snapshot_observed_at":"2026-08-14T18:19:56.188150Z","submitted_at":"2026-05-22T02:14:16Z","title":"What Does the Server See? Understanding Privacy Leakage from Large Language Models in Split Inference","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-05-25T04:41:56.650117Z"},"links":{"cited_paper":"/paper/2401.07612","citing_paper":"/paper/2605.23158"},"observation_digest":"sha256:262081977ff7b4121f92f7ba34be8731d76df40f5a77ebfd8b15212ddad3d02f","observation_id":"ef52d9cb-b130-48c6-998d-4ebcf3d01f3f","resolution":{"observed_at":"2026-05-25T04:45:20.528353Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2401.07612","last_updated":"2024-01-15T11:44:18Z","snapshot_observed_at":"2026-08-16T14:27:29.477573Z","submitted_at":"2024-01-15T11:44:18Z","title":"Signed-Prompt: A New Approach to Prevent Prompt Injection Attacks Against LLM-Integrated Applications","version":1},"cited_work":{"arxiv_id":"2401.07612","doi":"10.48550/arxiv.2401.07612","metadata_source":"arxiv_reference","pith_arxiv_id":"2401.07612","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Signed-prompt: A new approach to prevent prompt injection attacks against llm-integrated applications","venue":"arXiv (Cornell University)","work_id":"0ddb9cb7-b03d-46f9-94c6-8e63b270b6f0","year":2024},"citing_paper":{"arxiv_id":"2605.29055","last_updated":"2026-08-12T16:37:29Z","snapshot_observed_at":"2026-08-15T23:12:07.160121Z","submitted_at":"2026-05-27T20:01:08Z","title":"Hallucination Mitigation with Agentic AI, Nested Learning, and AI Sustainability via Semantic Caching","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-06-29T12:10:44.797429Z"},"links":{"cited_paper":"/paper/2401.07612","citing_paper":"/paper/2605.29055"},"observation_digest":"sha256:26e0dbf5b11fa3be24c9e5c890fa2dadf673cc97c6ed5aa1f4d8381aa336fa93","observation_id":"b2d238a9-16e4-4af0-8d02-6d8203c807f2","resolution":{"observed_at":"2026-06-29T12:13:26.625914Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2401.07612/citation-record","integrity":"/paper/2401.07612/integrity","json":"/paper/2401.07612/citation-record.json","paper":"/paper/2401.07612"},"outbound":[],"paper":{"arxiv_id":"2401.07612","last_updated":"2024-01-15T11:44:18Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-16T14:27:29.477573Z","submitted_at":"2024-01-15T11:44:18Z","title":"Signed-Prompt: A New Approach to Prevent Prompt Injection Attacks Against LLM-Integrated Applications"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"thesis":"As of 20 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 11 inbound Pith citation observations for arXiv:2401.07612."}