{"as_of":"2026-08-08T22:29:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:81b77a368809fcb4945c08da27a1ea99a972f23caefbefd804c1306fbb87b999","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":15,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":15,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":15,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":15,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-08T19:15:25.198060Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-06-29T17:13:44.838916Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2402.08416","last_updated":"2024-02-13T12:40:39Z","snapshot_observed_at":"2026-07-06T17:29:25.794341Z","submitted_at":"2024-02-13T12:40:39Z","title":"Pandora: Jailbreak GPTs by Retrieval Augmented Generation Poisoning","version":1},"cited_work":{"arxiv_id":"2402.08416","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2402.08416","snapshot_observed_at":"2026-06-29T17:13:44.838916Z","title":"arXiv preprint arXiv:2402.08416 (2024)","venue":null,"work_id":"14fa15a0-2ed8-43dd-8375-65511e1f5a64","year":2024},"citing_paper":{"arxiv_id":"2405.13068","last_updated":"2026-04-18T08:25:50Z","snapshot_observed_at":"2026-08-04T20:18:53.393132Z","submitted_at":"2024-05-20T17:17:55Z","title":"Uncovering Logit Suppression Vulnerabilities in LLM Safety Alignment","version":4},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-05-24T00:38:36.992597Z"},"links":{"cited_paper":"/paper/2402.08416","citing_paper":"/paper/2405.13068"},"observation_digest":"sha256:8a278ef9f85a4b93dd27a20b57afaffe51d37e46d63e068fe784ef91535ac8d2","observation_id":"76a35090-ac06-45f3-bebe-71428fdbb667","resolution":{"observed_at":"2026-05-24T00:38:39.886255Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.08416","last_updated":"2024-02-13T12:40:39Z","snapshot_observed_at":"2026-07-06T17:29:25.794341Z","submitted_at":"2024-02-13T12:40:39Z","title":"Pandora: Jailbreak GPTs by Retrieval Augmented Generation Poisoning","version":1},"cited_work":{"arxiv_id":"2402.08416","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2402.08416","snapshot_observed_at":"2026-06-29T17:13:44.838916Z","title":"arXiv preprint arXiv:2402.08416 (2024)","venue":null,"work_id":"14fa15a0-2ed8-43dd-8375-65511e1f5a64","year":2024},"citing_paper":{"arxiv_id":"2407.04295","last_updated":"2024-08-30T11:57:47Z","snapshot_observed_at":"2026-08-04T23:34:13.332065Z","submitted_at":"2024-07-05T06:57:30Z","title":"Jailbreak Attacks and Defenses Against Large Language Models: A Survey","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-05-15T02:20:44.368219Z"},"links":{"cited_paper":"/paper/2402.08416","citing_paper":"/paper/2407.04295"},"observation_digest":"sha256:bc76e4c1df6be3aa4470ab1065760425976d6458aebfb915b11d95e9efd0131d","observation_id":"41028fd5-ec67-4a46-9bfa-e82f63d6cd5c","resolution":{"observed_at":"2026-05-15T02:20:44.602841Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.08416","last_updated":"2024-02-13T12:40:39Z","snapshot_observed_at":"2026-07-06T17:29:25.794341Z","submitted_at":"2024-02-13T12:40:39Z","title":"Pandora: Jailbreak GPTs by Retrieval Augmented Generation Poisoning","version":1},"cited_work":{"arxiv_id":"2402.08416","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2402.08416","snapshot_observed_at":"2026-06-29T17:13:44.838916Z","title":"arXiv preprint arXiv:2402.08416 (2024)","venue":null,"work_id":"14fa15a0-2ed8-43dd-8375-65511e1f5a64","year":2024},"citing_paper":{"arxiv_id":"2501.00309","last_updated":"2025-01-08T05:16:25Z","snapshot_observed_at":"2026-08-07T12:37:34.294206Z","submitted_at":"2024-12-31T06:59:35Z","title":"Retrieval-Augmented Generation with Graphs (GraphRAG)","version":2},"reference_index":79,"source":"pdf_text","source_observed_at":"2026-05-18T04:33:39.076517Z"},"links":{"cited_paper":"/paper/2402.08416","citing_paper":"/paper/2501.00309"},"observation_digest":"sha256:192f36feeb3ecb9c9c64512fb531335f79abb7f7f6af352bd2282d181bb7fcc4","observation_id":"7597fb98-1f29-4442-a811-80aad9b0ac2c","resolution":{"observed_at":"2026-05-18T04:33:39.502707Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.08416","last_updated":"2024-02-13T12:40:39Z","snapshot_observed_at":"2026-07-06T17:29:25.794341Z","submitted_at":"2024-02-13T12:40:39Z","title":"Pandora: Jailbreak GPTs by Retrieval Augmented Generation Poisoning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.08416","snapshot_observed_at":"2026-08-08T19:15:25.198060Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.06872","last_updated":"2025-02-08T06:50:47Z","snapshot_observed_at":"2026-08-08T19:10:42.419238Z","submitted_at":"2025-02-08T06:50:47Z","title":"Towards Trustworthy Retrieval Augmented Generation for Large Language Models: A Survey","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-08T19:15:25.198060Z"},"links":{"cited_paper":"/paper/2402.08416","citing_paper":"/paper/2502.06872"},"observation_digest":"sha256:844289d8ab74e714f21b6948743b45070cb45cf53f32b3c90b8e876339f2e90c","observation_id":"e539e416-aa02-4b49-84b2-0b60949bcbc6","resolution":{"observed_at":"2026-08-08T19:15:25.198060Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.08416","last_updated":"2024-02-13T12:40:39Z","snapshot_observed_at":"2026-07-06T17:29:25.794341Z","submitted_at":"2024-02-13T12:40:39Z","title":"Pandora: Jailbreak GPTs by Retrieval Augmented Generation Poisoning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.08416","snapshot_observed_at":"2026-08-07T15:41:04.331533Z","title":"Pandora: Jailbreak gpts by retrieval augmented generation poisoning.arXiv preprint arXiv:2402.08416, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.14215","last_updated":"2026-07-08T13:57:53Z","snapshot_observed_at":"2026-08-08T10:01:26.451368Z","submitted_at":"2025-05-20T11:21:40Z","title":"Safety Degradation in AI Agents","version":3},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-07T15:41:04.331533Z"},"links":{"cited_paper":"/paper/2402.08416","citing_paper":"/paper/2505.14215"},"observation_digest":"sha256:6639036ce8ff26620211ed8387469a05309b225d0538335eed95e850aac51c2c","observation_id":"04ed2002-8dfd-4663-a791-e137b884dddc","resolution":{"observed_at":"2026-08-07T15:41:04.331533Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.08416","last_updated":"2024-02-13T12:40:39Z","snapshot_observed_at":"2026-07-06T17:29:25.794341Z","submitted_at":"2024-02-13T12:40:39Z","title":"Pandora: Jailbreak GPTs by Retrieval Augmented Generation Poisoning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.08416","snapshot_observed_at":"2026-08-07T04:15:38.974260Z","title":"Pandora: Jailbreak gpts by retrieval augmented generation poisoning,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.11415","last_updated":"2025-06-13T02:28:46Z","snapshot_observed_at":"2026-08-07T23:47:33.467619Z","submitted_at":"2025-06-13T02:28:46Z","title":"Bias Amplification in RAG: Poisoning Knowledge Retrieval to Steer LLMs","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-07T04:15:38.974260Z"},"links":{"cited_paper":"/paper/2402.08416","citing_paper":"/paper/2506.11415"},"observation_digest":"sha256:9faa8c78f88e23978dd77434ff9dc0aa7ef8790185f4cad80d042ced33938726","observation_id":"e36aa399-4b1a-4577-8e6e-33a9cf155af4","resolution":{"observed_at":"2026-08-07T04:15:38.974260Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.08416","last_updated":"2024-02-13T12:40:39Z","snapshot_observed_at":"2026-07-06T17:29:25.794341Z","submitted_at":"2024-02-13T12:40:39Z","title":"Pandora: Jailbreak GPTs by Retrieval Augmented Generation Poisoning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.08416","snapshot_observed_at":"2026-08-06T23:20:53.234749Z","title":"Pandora: Jailbreak GPTs by Retrieval Augmented Generation Poisoning.CoRR abs/2402.084162024","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.18543","last_updated":"2026-05-25T10:15:56Z","snapshot_observed_at":"2026-08-08T08:35:45.497926Z","submitted_at":"2025-06-23T11:53:31Z","title":"SoK: A Comprehensive Security Analysis of Jailbreak Resilience in GPT and DeepSeek Models","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-06T23:20:53.234749Z"},"links":{"cited_paper":"/paper/2402.08416","citing_paper":"/paper/2506.18543"},"observation_digest":"sha256:0407fa9fe3406e37294ba11fb66b9ffe676189d213be8b86777a642317475ba0","observation_id":"1107255d-f51b-401a-841e-7976b9a6d564","resolution":{"observed_at":"2026-08-06T23:20:53.234749Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.08416","last_updated":"2024-02-13T12:40:39Z","snapshot_observed_at":"2026-07-06T17:29:25.794341Z","submitted_at":"2024-02-13T12:40:39Z","title":"Pandora: Jailbreak GPTs by Retrieval Augmented Generation Poisoning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.08416","snapshot_observed_at":"2026-08-06T19:37:31.553363Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.05093","last_updated":"2025-07-07T15:13:54Z","snapshot_observed_at":"2026-08-08T07:09:09.000323Z","submitted_at":"2025-07-07T15:13:54Z","title":"The Hidden Threat in Plain Text: Attacking RAG Data Loaders","version":1},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-06T19:37:31.553363Z"},"links":{"cited_paper":"/paper/2402.08416","citing_paper":"/paper/2507.05093"},"observation_digest":"sha256:d3e82bb481270766909b4375d72e03609c38e6f4136bde5b4e171aca6c3d3946","observation_id":"9afd1635-3115-48aa-a96b-e33b63212e3e","resolution":{"observed_at":"2026-08-06T19:37:31.553363Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.08416","last_updated":"2024-02-13T12:40:39Z","snapshot_observed_at":"2026-07-06T17:29:25.794341Z","submitted_at":"2024-02-13T12:40:39Z","title":"Pandora: Jailbreak GPTs by Retrieval Augmented Generation Poisoning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.08416","snapshot_observed_at":"2026-08-05T20:31:47.622372Z","title":"Pandora: Jailbreak gpts by retrieval augmented generation poisoning","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.10404","last_updated":"2025-08-14T07:12:44Z","snapshot_observed_at":"2026-08-08T02:31:17.622343Z","submitted_at":"2025-08-14T07:12:44Z","title":"Layer-Wise Perturbations via Sparse Autoencoders for Adversarial Text Generation","version":1},"reference_index":162,"source":"pdf_text","source_observed_at":"2026-08-05T20:31:47.622372Z"},"links":{"cited_paper":"/paper/2402.08416","citing_paper":"/paper/2508.10404"},"observation_digest":"sha256:eecb06556ab6db79c195a8c4d327221eba7bd8dbfef1a9b9ac45947655a70688","observation_id":"bf974f53-c949-4136-9f94-b7234b82c8f1","resolution":{"observed_at":"2026-08-05T20:31:47.622372Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.08416","last_updated":"2024-02-13T12:40:39Z","snapshot_observed_at":"2026-07-06T17:29:25.794341Z","submitted_at":"2024-02-13T12:40:39Z","title":"Pandora: Jailbreak GPTs by Retrieval Augmented Generation Poisoning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.08416","snapshot_observed_at":"2026-08-04T09:25:38.931982Z","title":"Pandora: Jailbreak gpts by retrieval augmented generation poisoning.CoRR, abs/2402.08416, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.15476","last_updated":"2026-07-04T04:20:15Z","snapshot_observed_at":"2026-08-06T02:45:04.316908Z","submitted_at":"2025-10-17T09:38:54Z","title":"SoK: Systematizing LLM Prompt Security: Taxonomies, Datasets, and Unified Evaluation of Attacks and Defenses","version":3},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-04T09:25:38.931982Z"},"links":{"cited_paper":"/paper/2402.08416","citing_paper":"/paper/2510.15476"},"observation_digest":"sha256:f42d5896dc7c592142bee9c0e1fff843fcf0f6c19d591ad3fbdd1c363dac3efd","observation_id":"5c0115b3-6007-4d3b-a37c-5413d25effe7","resolution":{"observed_at":"2026-08-04T09:25:38.931982Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.08416","last_updated":"2024-02-13T12:40:39Z","snapshot_observed_at":"2026-07-06T17:29:25.794341Z","submitted_at":"2024-02-13T12:40:39Z","title":"Pandora: Jailbreak GPTs by Retrieval Augmented Generation Poisoning","version":1},"cited_work":{"arxiv_id":"2402.08416","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2402.08416","snapshot_observed_at":"2026-06-29T17:13:44.838916Z","title":"arXiv preprint arXiv:2402.08416 (2024)","venue":null,"work_id":"14fa15a0-2ed8-43dd-8375-65511e1f5a64","year":2024},"citing_paper":{"arxiv_id":"2602.02280","last_updated":"2026-05-12T03:47:11Z","snapshot_observed_at":"2026-07-06T22:44:09.804048Z","submitted_at":"2026-02-02T16:20:51Z","title":"RACC: Representation-Aware Coverage Criteria for LLM Safety Testing","version":2},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-05-16T08:12:55.296932Z"},"links":{"cited_paper":"/paper/2402.08416","citing_paper":"/paper/2602.02280"},"observation_digest":"sha256:2549867a060d55af391dd24af5ddb99a0e11a31ae4c31869afa412d91323aa4a","observation_id":"fe96bbb9-79da-4d30-978f-b5dd30090a75","resolution":{"observed_at":"2026-05-16T08:17:36.591816Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.08416","last_updated":"2024-02-13T12:40:39Z","snapshot_observed_at":"2026-07-06T17:29:25.794341Z","submitted_at":"2024-02-13T12:40:39Z","title":"Pandora: Jailbreak GPTs by Retrieval Augmented Generation Poisoning","version":1},"cited_work":{"arxiv_id":"2402.08416","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2402.08416","snapshot_observed_at":"2026-06-29T17:13:44.838916Z","title":"arXiv preprint arXiv:2402.08416 (2024)","venue":null,"work_id":"14fa15a0-2ed8-43dd-8375-65511e1f5a64","year":2024},"citing_paper":{"arxiv_id":"2602.11327","last_updated":"2026-04-17T15:12:16Z","snapshot_observed_at":"2026-08-07T20:18:19.353329Z","submitted_at":"2026-02-11T19:58:23Z","title":"Security Threat Modeling for Emerging AI-Agent Protocols: A Comparative Analysis of MCP, A2A, Agora, and ANP","version":2},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-05-16T05:05:16.370606Z"},"links":{"cited_paper":"/paper/2402.08416","citing_paper":"/paper/2602.11327"},"observation_digest":"sha256:f79baeecb6deb8469afcfe73d6bec532579b0594b4774d8df0c5258080b946ea","observation_id":"e05865fc-1e87-4455-acbf-b6010afb77ec","resolution":{"observed_at":"2026-05-16T05:07:20.731784Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.08416","last_updated":"2024-02-13T12:40:39Z","snapshot_observed_at":"2026-07-06T17:29:25.794341Z","submitted_at":"2024-02-13T12:40:39Z","title":"Pandora: Jailbreak GPTs by Retrieval Augmented Generation Poisoning","version":1},"cited_work":{"arxiv_id":"2402.08416","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2402.08416","snapshot_observed_at":"2026-06-29T17:13:44.838916Z","title":"arXiv preprint arXiv:2402.08416 (2024)","venue":null,"work_id":"14fa15a0-2ed8-43dd-8375-65511e1f5a64","year":2024},"citing_paper":{"arxiv_id":"2605.01782","last_updated":"2026-05-03T08:42:29Z","snapshot_observed_at":"2026-07-31T09:19:52.528360Z","submitted_at":"2026-05-03T08:42:29Z","title":"Needle-in-RAG: Prompt-Conditioned Character-Level Traceback of Poisoned Spans in Retrieved Evidence","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-05-10T14:52:32.202125Z"},"links":{"cited_paper":"/paper/2402.08416","citing_paper":"/paper/2605.01782"},"observation_digest":"sha256:c311a502b073d13116a4a91dd357317bbd42c4390e26bd59f523d8f57376c8a4","observation_id":"355e2b38-4455-4318-a80b-1a8bd3588911","resolution":{"observed_at":"2026-05-11T11:31:00.538281Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.08416","last_updated":"2024-02-13T12:40:39Z","snapshot_observed_at":"2026-07-06T17:29:25.794341Z","submitted_at":"2024-02-13T12:40:39Z","title":"Pandora: Jailbreak GPTs by Retrieval Augmented Generation Poisoning","version":1},"cited_work":{"arxiv_id":"2402.08416","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2402.08416","snapshot_observed_at":"2026-06-29T17:13:44.838916Z","title":"arXiv preprint arXiv:2402.08416 (2024)","venue":null,"work_id":"14fa15a0-2ed8-43dd-8375-65511e1f5a64","year":2024},"citing_paper":{"arxiv_id":"2605.27157","last_updated":"2026-05-26T15:18:43Z","snapshot_observed_at":"2026-08-05T03:04:01.161346Z","submitted_at":"2026-05-26T15:18:43Z","title":"Detecting Is Not Resolving: The Monitoring Control Gap in Retrieval Augmented LLMs","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-06-29T17:06:46.379906Z"},"links":{"cited_paper":"/paper/2402.08416","citing_paper":"/paper/2605.27157"},"observation_digest":"sha256:a057f67070bdfdf46d0e6873d00743292d63cb466b99e73deb62e88702b228a7","observation_id":"35a85860-ee89-4acd-a5b2-a18fa3be4e00","resolution":{"observed_at":"2026-06-29T17:13:44.840274Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.08416","last_updated":"2024-02-13T12:40:39Z","snapshot_observed_at":"2026-07-06T17:29:25.794341Z","submitted_at":"2024-02-13T12:40:39Z","title":"Pandora: Jailbreak GPTs by Retrieval Augmented Generation Poisoning","version":1},"cited_work":{"arxiv_id":"2402.08416","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2402.08416","snapshot_observed_at":"2026-06-29T17:13:44.838916Z","title":"arXiv preprint arXiv:2402.08416 (2024)","venue":null,"work_id":"14fa15a0-2ed8-43dd-8375-65511e1f5a64","year":2024},"citing_paper":{"arxiv_id":"2605.29224","last_updated":"2026-05-28T01:23:48Z","snapshot_observed_at":"2026-08-07T14:56:32.214775Z","submitted_at":"2026-05-28T01:23:48Z","title":"Relevance as a Vulnerability: How Web Retrieval Degrades Safety Alignment in LLM Agents","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-06-29T08:21:44.993917Z"},"links":{"cited_paper":"/paper/2402.08416","citing_paper":"/paper/2605.29224"},"observation_digest":"sha256:4cd60802e3bedc1376f25cbf45d3382434cf9631e4a0d68ea3a6e50106ed836f","observation_id":"9ce64596-93c1-43b7-9abf-dcd01f04875f","resolution":{"observed_at":"2026-06-29T08:23:14.903619Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2402.08416/citation-record","integrity":"/paper/2402.08416/integrity","json":"/paper/2402.08416/citation-record.json","paper":"/paper/2402.08416"},"outbound":[],"paper":{"arxiv_id":"2402.08416","last_updated":"2024-02-13T12:40:39Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-07-06T17:29:25.794341Z","submitted_at":"2024-02-13T12:40:39Z","title":"Pandora: Jailbreak GPTs by Retrieval Augmented Generation Poisoning"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 15 inbound Pith citation observations for arXiv:2402.08416."}