{"as_of":"2026-08-09T17:41:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:069e97a00e3a9175eea03ad40420207da44a4be3df9c2dd0b3e6a03dbc3696d4","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":15,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":15,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":15,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":15,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T05:56:20.345257Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-04T14:09:53.294873Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2402.17840","last_updated":"2024-10-06T21:25:41Z","snapshot_observed_at":"2026-08-06T11:51:24.278910Z","submitted_at":"2024-02-27T19:08:05Z","title":"Follow My Instruction and Spill the Beans: Scalable Data Extraction from Retrieval-Augmented Generation Systems","version":3},"cited_work":{"arxiv_id":"2402.17840","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2402.17840","snapshot_observed_at":"2026-07-04T14:09:53.294873Z","title":"Follow my instruction and spill the beans: Scalable data extraction from retrieval-augmented generation systems","venue":null,"work_id":"82fa8692-3738-4fbe-99b6-f0b895f49150","year":2024},"citing_paper":{"arxiv_id":"2409.10102","last_updated":"2026-05-16T07:15:07Z","snapshot_observed_at":"2026-08-04T19:12:49.508911Z","submitted_at":"2024-09-16T09:06:44Z","title":"Trustworthiness in Retrieval-Augmented Generation Systems: A Survey","version":2},"reference_index":151,"source":"pdf_text","source_observed_at":"2026-05-23T21:08:11.787013Z"},"links":{"cited_paper":"/paper/2402.17840","citing_paper":"/paper/2409.10102"},"observation_digest":"sha256:97716637864dbd51adab3c200f3a3637539f299c80ff348fceb52a8c00e3ad1f","observation_id":"eb136f9b-27dd-4de0-9a9a-d64e7d7c503b","resolution":{"observed_at":"2026-05-23T21:08:25.831705Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.17840","last_updated":"2024-10-06T21:25:41Z","snapshot_observed_at":"2026-08-06T11:51:24.278910Z","submitted_at":"2024-02-27T19:08:05Z","title":"Follow My Instruction and Spill the Beans: Scalable Data Extraction from Retrieval-Augmented Generation Systems","version":3},"cited_work":{"arxiv_id":"2402.17840","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2402.17840","snapshot_observed_at":"2026-07-04T14:09:53.294873Z","title":"Follow my instruction and spill the beans: Scalable data extraction from retrieval-augmented generation systems","venue":null,"work_id":"82fa8692-3738-4fbe-99b6-f0b895f49150","year":2024},"citing_paper":{"arxiv_id":"2502.05206","last_updated":"2026-04-14T16:10:41Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-02-02T05:14:22Z","title":"Safety at Scale: A Comprehensive Survey of Large Model and Agent Safety","version":6},"reference_index":213,"source":"pdf_text","source_observed_at":"2026-05-23T04:39:04.591722Z"},"links":{"cited_paper":"/paper/2402.17840","citing_paper":"/paper/2502.05206"},"observation_digest":"sha256:69c57071e415075eca7221352483985fc3a8362ea3004c830fb1a2514df8c534","observation_id":"0e0fe80d-bae9-4706-a593-4b28a0314dc6","resolution":{"observed_at":"2026-05-23T04:42:33.812297Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.17840","last_updated":"2024-10-06T21:25:41Z","snapshot_observed_at":"2026-08-06T11:51:24.278910Z","submitted_at":"2024-02-27T19:08:05Z","title":"Follow My Instruction and Spill the Beans: Scalable Data Extraction from Retrieval-Augmented Generation Systems","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.17840","snapshot_observed_at":"2026-08-06T05:56:20.345257Z","title":"Follow my instruction and spill the beans: Scalable data extraction from retrieval-augmented generation systems","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.345257Z"},"links":{"cited_paper":"/paper/2402.17840","citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:ac7484c2ffecffbe3dfcbd4242cc3c0459568aea2338cce11cf49d7028bc7a69","observation_id":"17444477-7d41-4668-a3b1-4a5da87d1633","resolution":{"observed_at":"2026-08-06T05:56:20.345257Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.17840","last_updated":"2024-10-06T21:25:41Z","snapshot_observed_at":"2026-08-06T11:51:24.278910Z","submitted_at":"2024-02-27T19:08:05Z","title":"Follow My Instruction and Spill the Beans: Scalable Data Extraction from Retrieval-Augmented Generation Systems","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.17840","snapshot_observed_at":"2026-08-05T23:04:08.330954Z","title":"arXiv preprint arXiv:2402.17840","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2508.06087","last_updated":"2025-08-08T07:29:33Z","snapshot_observed_at":"2026-08-09T14:47:04.259501Z","submitted_at":"2025-08-08T07:29:33Z","title":"Adaptive Backtracking for Privacy Protection in Large Language Models","version":1},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-05T23:04:08.330954Z"},"links":{"cited_paper":"/paper/2402.17840","citing_paper":"/paper/2508.06087"},"observation_digest":"sha256:c7c61ff290eff855dccdc37953189ade575b9cb5646e9a13236d3b3c822dd060","observation_id":"b0aa6cb5-c1fd-4c7d-abd8-b154a883c3b1","resolution":{"observed_at":"2026-08-05T23:04:08.330954Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.17840","last_updated":"2024-10-06T21:25:41Z","snapshot_observed_at":"2026-08-06T11:51:24.278910Z","submitted_at":"2024-02-27T19:08:05Z","title":"Follow My Instruction and Spill the Beans: Scalable Data Extraction from Retrieval-Augmented Generation Systems","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.17840","snapshot_observed_at":"2026-08-05T20:31:48.352989Z","title":"Follow my instruction and spill the beans: Scalable data extraction from retrieval-augmented generation systems","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.10404","last_updated":"2025-08-14T07:12:44Z","snapshot_observed_at":"2026-08-08T02:31:17.622343Z","submitted_at":"2025-08-14T07:12:44Z","title":"Layer-Wise Perturbations via Sparse Autoencoders for Adversarial Text Generation","version":1},"reference_index":167,"source":"pdf_text","source_observed_at":"2026-08-05T20:31:48.352989Z"},"links":{"cited_paper":"/paper/2402.17840","citing_paper":"/paper/2508.10404"},"observation_digest":"sha256:b80c454be029cbee37073a67206a7558adf151ef614c0dc8dc1db1a492dae4dd","observation_id":"5a64ef3c-0887-4c1b-a35c-744093e28440","resolution":{"observed_at":"2026-08-05T20:31:48.352989Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.17840","last_updated":"2024-10-06T21:25:41Z","snapshot_observed_at":"2026-08-06T11:51:24.278910Z","submitted_at":"2024-02-27T19:08:05Z","title":"Follow My Instruction and Spill the Beans: Scalable Data Extraction from Retrieval-Augmented Generation Systems","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.17840","snapshot_observed_at":"2026-08-05T16:07:57.804090Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.18929","last_updated":"2025-08-26T11:16:14Z","snapshot_observed_at":"2026-08-08T04:39:39.188327Z","submitted_at":"2025-08-26T11:16:14Z","title":"Diverse And Private Synthetic Datasets Generation for RAG evaluation: A multi-agent framework","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-05T16:07:57.804090Z"},"links":{"cited_paper":"/paper/2402.17840","citing_paper":"/paper/2508.18929"},"observation_digest":"sha256:a3e2b40b58d341cf969d8fffc849defb822ce3fe0d33e3ede854277e05319237","observation_id":"0c28c9bf-1392-4aed-800f-40f214510039","resolution":{"observed_at":"2026-08-05T16:07:57.804090Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.17840","last_updated":"2024-10-06T21:25:41Z","snapshot_observed_at":"2026-08-06T11:51:24.278910Z","submitted_at":"2024-02-27T19:08:05Z","title":"Follow My Instruction and Spill the Beans: Scalable Data Extraction from Retrieval-Augmented Generation Systems","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.17840","snapshot_observed_at":"2026-08-04T15:17:39.473035Z","title":"Follow my instruction and spill the beans: Scalable data extraction from retrieval- augmented generation systems,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.20324","last_updated":"2026-06-04T17:26:56Z","snapshot_observed_at":"2026-08-07T20:32:31.507281Z","submitted_at":"2025-09-24T17:11:35Z","title":"RAG Security and Privacy: Formalizing the Threat Model and Attack Surface","version":2},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-04T15:17:39.473035Z"},"links":{"cited_paper":"/paper/2402.17840","citing_paper":"/paper/2509.20324"},"observation_digest":"sha256:9f12319c66a2a875a34aa73b44a17601df7042176d2d6b8a4df4e6d724b15811","observation_id":"b9eacf30-671b-48ff-9f6f-567352a2d5ce","resolution":{"observed_at":"2026-08-04T15:17:39.473035Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.17840","last_updated":"2024-10-06T21:25:41Z","snapshot_observed_at":"2026-08-06T11:51:24.278910Z","submitted_at":"2024-02-27T19:08:05Z","title":"Follow My Instruction and Spill the Beans: Scalable Data Extraction from Retrieval-Augmented Generation Systems","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.17840","snapshot_observed_at":"2026-08-03T03:04:47.828603Z","title":"Follow my instruction and spill the beans: Scalable data extraction from retrieval- augmented generation systems.arXiv preprint arXiv:2402.17840, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2602.09319","last_updated":"2026-06-08T20:08:22Z","snapshot_observed_at":"2026-08-09T10:44:09.914768Z","submitted_at":"2026-02-10T01:27:46Z","title":"Benchmarking Knowledge-Extraction Attack and Defense on Retrieval-Augmented Generation","version":3},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-03T03:04:47.828603Z"},"links":{"cited_paper":"/paper/2402.17840","citing_paper":"/paper/2602.09319"},"observation_digest":"sha256:f819af40272bc31f789a5f52c8d744496634a596bc0ad4128f483cedb8e1ac1e","observation_id":"b042ad2c-0f57-4529-9692-c6ba20eed438","resolution":{"observed_at":"2026-08-03T03:04:47.828603Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.17840","last_updated":"2024-10-06T21:25:41Z","snapshot_observed_at":"2026-08-06T11:51:24.278910Z","submitted_at":"2024-02-27T19:08:05Z","title":"Follow My Instruction and Spill the Beans: Scalable Data Extraction from Retrieval-Augmented Generation Systems","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.17840","snapshot_observed_at":"2026-07-13T17:49:06.893176Z","title":"arXiv preprint arXiv:2402.17840 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2603.26074","last_updated":"2026-05-28T05:26:21Z","snapshot_observed_at":"2026-08-08T03:23:24.146011Z","submitted_at":"2026-03-27T05:03:24Z","title":"Not All Entities are Created Equal: A Dynamic Anonymization Framework for Privacy-Preserving RAG","version":3},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-07-13T17:49:06.893176Z"},"links":{"cited_paper":"/paper/2402.17840","citing_paper":"/paper/2603.26074"},"observation_digest":"sha256:874e4b9b4800f03188851a7f0c412f2b776fb1cde7a198f33fcc124126b61b01","observation_id":"69295e96-351f-4d86-bba3-1ef80d339fdc","resolution":{"observed_at":"2026-07-13T17:49:06.893176Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.17840","last_updated":"2024-10-06T21:25:41Z","snapshot_observed_at":"2026-08-06T11:51:24.278910Z","submitted_at":"2024-02-27T19:08:05Z","title":"Follow My Instruction and Spill the Beans: Scalable Data Extraction from Retrieval-Augmented Generation Systems","version":3},"cited_work":{"arxiv_id":"2402.17840","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2402.17840","snapshot_observed_at":"2026-07-04T14:09:53.294873Z","title":"Follow my instruction and spill the beans: Scalable data extraction from retrieval-augmented generation systems","venue":null,"work_id":"82fa8692-3738-4fbe-99b6-f0b895f49150","year":2024},"citing_paper":{"arxiv_id":"2604.09747","last_updated":"2026-04-10T07:22:11Z","snapshot_observed_at":"2026-07-06T22:58:34.504325Z","submitted_at":"2026-04-10T07:22:11Z","title":"ADAM: A Systematic Data Extraction Attack on Agent Memory via Adaptive Querying","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-05-10T17:57:59.918483Z"},"links":{"cited_paper":"/paper/2402.17840","citing_paper":"/paper/2604.09747"},"observation_digest":"sha256:556bfe513a033573584dc2be2bd1aff7d972e40a4ab4f8d08061ceacdb05dafb","observation_id":"96f781f4-4838-4c62-be3a-574b561abaf0","resolution":{"observed_at":"2026-05-11T05:45:57.588526Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.17840","last_updated":"2024-10-06T21:25:41Z","snapshot_observed_at":"2026-08-06T11:51:24.278910Z","submitted_at":"2024-02-27T19:08:05Z","title":"Follow My Instruction and Spill the Beans: Scalable Data Extraction from Retrieval-Augmented Generation Systems","version":3},"cited_work":{"arxiv_id":"2402.17840","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2402.17840","snapshot_observed_at":"2026-07-04T14:09:53.294873Z","title":"Follow my instruction and spill the beans: Scalable data extraction from retrieval-augmented generation systems","venue":null,"work_id":"82fa8692-3738-4fbe-99b6-f0b895f49150","year":2024},"citing_paper":{"arxiv_id":"2604.18231","last_updated":"2026-05-06T14:26:07Z","snapshot_observed_at":"2026-08-08T13:51:21.834089Z","submitted_at":"2026-04-20T13:13:31Z","title":"AgenTEE: Confidential LLM Agent Execution on Edge Devices","version":2},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-05-10T04:46:53.351566Z"},"links":{"cited_paper":"/paper/2402.17840","citing_paper":"/paper/2604.18231"},"observation_digest":"sha256:7e70c1648f500eb0b0ba9a8d45307d73d3d1544fc4ec3089b4d41821e4ccc660","observation_id":"c9704e42-bcf7-4780-9e1a-fa239453f45b","resolution":{"observed_at":"2026-05-10T11:40:19.388342Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.17840","last_updated":"2024-10-06T21:25:41Z","snapshot_observed_at":"2026-08-06T11:51:24.278910Z","submitted_at":"2024-02-27T19:08:05Z","title":"Follow My Instruction and Spill the Beans: Scalable Data Extraction from Retrieval-Augmented Generation Systems","version":3},"cited_work":{"arxiv_id":"2402.17840","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2402.17840","snapshot_observed_at":"2026-07-04T14:09:53.294873Z","title":"Follow my instruction and spill the beans: Scalable data extraction from retrieval-augmented generation systems","venue":null,"work_id":"82fa8692-3738-4fbe-99b6-f0b895f49150","year":2024},"citing_paper":{"arxiv_id":"2605.05818","last_updated":"2026-05-07T07:55:02Z","snapshot_observed_at":"2026-08-03T05:10:35.415279Z","submitted_at":"2026-05-07T07:55:02Z","title":"LeakDojo: Decoding the Leakage Threats of RAG Systems","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-05-08T09:28:51.867300Z"},"links":{"cited_paper":"/paper/2402.17840","citing_paper":"/paper/2605.05818"},"observation_digest":"sha256:606b562d09c9a071e9594fe3ecf9648711619cf5aaf64274a1d1c18a2af10281","observation_id":"e5b57ec6-c7d0-41b5-86ab-add5d411ffb7","resolution":{"observed_at":"2026-05-11T20:21:09.551420Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.17840","last_updated":"2024-10-06T21:25:41Z","snapshot_observed_at":"2026-08-06T11:51:24.278910Z","submitted_at":"2024-02-27T19:08:05Z","title":"Follow My Instruction and Spill the Beans: Scalable Data Extraction from Retrieval-Augmented Generation Systems","version":3},"cited_work":{"arxiv_id":"2402.17840","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2402.17840","snapshot_observed_at":"2026-07-04T14:09:53.294873Z","title":"Follow my instruction and spill the beans: Scalable data extraction from retrieval-augmented generation systems","venue":null,"work_id":"82fa8692-3738-4fbe-99b6-f0b895f49150","year":2024},"citing_paper":{"arxiv_id":"2605.27825","last_updated":"2026-05-27T01:31:40Z","snapshot_observed_at":"2026-08-02T19:56:32.199762Z","submitted_at":"2026-05-27T01:31:40Z","title":"MRMMIA: Membership Inference Attacks on Memory in Chat Agents","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-06-29T12:04:53.511344Z"},"links":{"cited_paper":"/paper/2402.17840","citing_paper":"/paper/2605.27825"},"observation_digest":"sha256:852adafde737a8d27a10cdd250928ac9714ba4aac9758c24bae000b9044b0065","observation_id":"1e85ccc1-133f-43e9-85bf-8040f309db6d","resolution":{"observed_at":"2026-06-29T12:13:27.029082Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.17840","last_updated":"2024-10-06T21:25:41Z","snapshot_observed_at":"2026-08-06T11:51:24.278910Z","submitted_at":"2024-02-27T19:08:05Z","title":"Follow My Instruction and Spill the Beans: Scalable Data Extraction from Retrieval-Augmented Generation Systems","version":3},"cited_work":{"arxiv_id":"2402.17840","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2402.17840","snapshot_observed_at":"2026-07-04T14:09:53.294873Z","title":"Follow my instruction and spill the beans: Scalable data extraction from retrieval-augmented generation systems","venue":null,"work_id":"82fa8692-3738-4fbe-99b6-f0b895f49150","year":2024},"citing_paper":{"arxiv_id":"2606.26627","last_updated":"2026-06-25T05:44:18Z","snapshot_observed_at":"2026-08-02T09:36:56.612724Z","submitted_at":"2026-06-25T05:44:18Z","title":"Agents That Know Too Much: A Data-Centric Survey of Privacy in LLM Agents","version":1},"reference_index":94,"source":"pdf_text","source_observed_at":"2026-06-26T04:29:16.386339Z"},"links":{"cited_paper":"/paper/2402.17840","citing_paper":"/paper/2606.26627"},"observation_digest":"sha256:afa6c53adf0f90793cb701e3ff6da278963c5771c9ca1cc976e7ec18a99949b6","observation_id":"720e2610-6a40-476d-8d25-45faf0dbb618","resolution":{"observed_at":"2026-07-04T14:09:53.296987Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.17840","last_updated":"2024-10-06T21:25:41Z","snapshot_observed_at":"2026-08-06T11:51:24.278910Z","submitted_at":"2024-02-27T19:08:05Z","title":"Follow My Instruction and Spill the Beans: Scalable Data Extraction from Retrieval-Augmented Generation Systems","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.17840","snapshot_observed_at":"2026-07-30T22:03:09.921668Z","title":"Follow my instruction and spill the beans: Scalable data extraction from retrieval-augmented generation systems.arXiv preprint arXiv:2402.17840, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.23444","last_updated":"2026-07-26T03:51:20Z","snapshot_observed_at":"2026-08-02T21:53:05.560611Z","submitted_at":"2026-07-26T03:51:20Z","title":"Isolated but Exposed: Persistence-Based Memory Extraction Attack on LLM Agents","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-07-30T22:03:09.921668Z"},"links":{"cited_paper":"/paper/2402.17840","citing_paper":"/paper/2607.23444"},"observation_digest":"sha256:6514c79ac5aa0cc6a560194c74cf9488c5dc5b39f5baa480e5bda826ea15041f","observation_id":"481294e0-57d9-480b-b4b1-ffdf9cc66245","resolution":{"observed_at":"2026-07-30T22:03:09.921668Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2402.17840/citation-record","integrity":"/paper/2402.17840/integrity","json":"/paper/2402.17840/citation-record.json","paper":"/paper/2402.17840"},"outbound":[],"paper":{"arxiv_id":"2402.17840","last_updated":"2024-10-06T21:25:41Z","latest_version":3,"primary_category":"cs.CL","snapshot_observed_at":"2026-08-06T11:51:24.278910Z","submitted_at":"2024-02-27T19:08:05Z","title":"Follow My Instruction and Spill the Beans: Scalable Data Extraction from Retrieval-Augmented Generation Systems"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 15 inbound Pith citation observations for arXiv:2402.17840."}