{"as_of":"2026-08-09T23:46:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:f5c5955f9dcf962cc188788099712759a81acabd77a863052592edb2002ec3c8","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":17,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":17,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":17,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":17,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-08T20:06:58.349652Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-04T08:29:41.300616Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2402.18649","last_updated":"2024-02-28T19:00:12Z","snapshot_observed_at":"2026-07-06T17:37:05.339368Z","submitted_at":"2024-02-28T19:00:12Z","title":"A New Era in LLM Security: Exploring Security Concerns in Real-World LLM-based Systems","version":1},"cited_work":{"arxiv_id":"2402.18649","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2402.18649","snapshot_observed_at":"2026-07-04T08:29:41.300616Z","title":"A new era in llm security: Exploring security con- cerns in real-world llm-based systems","venue":null,"work_id":"2d282690-8515-4ec5-85ac-d33b47cbe7a9","year":2024},"citing_paper":{"arxiv_id":"2409.10102","last_updated":"2026-05-16T07:15:07Z","snapshot_observed_at":"2026-08-04T19:12:49.508911Z","submitted_at":"2024-09-16T09:06:44Z","title":"Trustworthiness in Retrieval-Augmented Generation Systems: A Survey","version":2},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-05-23T21:08:11.787013Z"},"links":{"cited_paper":"/paper/2402.18649","citing_paper":"/paper/2409.10102"},"observation_digest":"sha256:89b936f8abd3dee65f11933a917f0810fb429bd1bb43ee274d91915372c0ce1f","observation_id":"a7cc5e31-d8ab-44dd-9ad4-67eae172a8f1","resolution":{"observed_at":"2026-05-23T21:08:25.912861Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.18649","last_updated":"2024-02-28T19:00:12Z","snapshot_observed_at":"2026-07-06T17:37:05.339368Z","submitted_at":"2024-02-28T19:00:12Z","title":"A New Era in LLM Security: Exploring Security Concerns in Real-World LLM-based Systems","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.18649","snapshot_observed_at":"2026-08-08T20:06:58.349652Z","title":"A new era in llm security: Exploring security concerns in real-world llm-based systems","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.05174","last_updated":"2025-06-10T18:13:09Z","snapshot_observed_at":"2026-08-08T19:58:38.598603Z","submitted_at":"2025-02-07T18:57:49Z","title":"MELON: Provable Defense Against Indirect Prompt Injection Attacks in AI Agents","version":4},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-08-08T20:06:58.349652Z"},"links":{"cited_paper":"/paper/2402.18649","citing_paper":"/paper/2502.05174"},"observation_digest":"sha256:b26bbd8bf3d85383fbef7b35abf19e70c6dea80db35088ea8014aef152b3fff5","observation_id":"3d187030-68c4-41d5-8272-38aaf24193f0","resolution":{"observed_at":"2026-08-08T20:06:58.349652Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.18649","last_updated":"2024-02-28T19:00:12Z","snapshot_observed_at":"2026-07-06T17:37:05.339368Z","submitted_at":"2024-02-28T19:00:12Z","title":"A New Era in LLM Security: Exploring Security Concerns in Real-World LLM-based Systems","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.18649","snapshot_observed_at":"2026-08-08T14:02:15.761686Z","title":"A new era in llm security: Exploring security concerns in real-world llm-based systems,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.07036","last_updated":"2025-03-10T18:14:34Z","snapshot_observed_at":"2026-08-09T18:18:34.090058Z","submitted_at":"2025-02-10T21:03:24Z","title":"Automated Consistency Analysis of LLMs","version":2},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-08T14:02:15.761686Z"},"links":{"cited_paper":"/paper/2402.18649","citing_paper":"/paper/2502.07036"},"observation_digest":"sha256:3df7e62c7dc208ce496d4bbb23d554023cd8a40935881fb1e6acf291ecc97907","observation_id":"76c0392d-66fc-4250-9027-b2b21b6a4a71","resolution":{"observed_at":"2026-08-08T14:02:15.761686Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.18649","last_updated":"2024-02-28T19:00:12Z","snapshot_observed_at":"2026-07-06T17:37:05.339368Z","submitted_at":"2024-02-28T19:00:12Z","title":"A New Era in LLM Security: Exploring Security Concerns in Real-World LLM-based Systems","version":1},"cited_work":{"arxiv_id":"2402.18649","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2402.18649","snapshot_observed_at":"2026-07-04T08:29:41.300616Z","title":"A new era in llm security: Exploring security con- cerns in real-world llm-based systems","venue":null,"work_id":"2d282690-8515-4ec5-85ac-d33b47cbe7a9","year":2024},"citing_paper":{"arxiv_id":"2504.11703","last_updated":"2026-05-14T02:36:38Z","snapshot_observed_at":"2026-07-06T21:10:09.129714Z","submitted_at":"2025-04-16T01:58:40Z","title":"Progent: Securing AI Agents with Privilege Control","version":3},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-05-22T21:09:51.782808Z"},"links":{"cited_paper":"/paper/2402.18649","citing_paper":"/paper/2504.11703"},"observation_digest":"sha256:ddf5b75545deb065393a0e54b82e8fa7d78bc8147eabf6aa4c0bcdfaf0ba464c","observation_id":"6dde291e-1b36-4b0b-a4f3-174d35fb60d5","resolution":{"observed_at":"2026-05-22T21:12:08.499599Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.18649","last_updated":"2024-02-28T19:00:12Z","snapshot_observed_at":"2026-07-06T17:37:05.339368Z","submitted_at":"2024-02-28T19:00:12Z","title":"A New Era in LLM Security: Exploring Security Concerns in Real-World LLM-based Systems","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.18649","snapshot_observed_at":"2026-08-07T10:19:35.285497Z","title":"arXiv preprint arXiv:2402.18649","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.06401","last_updated":"2025-06-06T02:40:42Z","snapshot_observed_at":"2026-08-09T09:20:46.645964Z","submitted_at":"2025-06-06T02:40:42Z","title":"Direct Behavior Optimization: Unlocking the Potential of Lightweight LLMs","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-07T10:19:35.285497Z"},"links":{"cited_paper":"/paper/2402.18649","citing_paper":"/paper/2506.06401"},"observation_digest":"sha256:af19b20e97527d29a057b89748ec8e22d44e0fa97f0a55d8a822d17120f3860f","observation_id":"8688fd6e-c713-4618-8bef-ff6bcb32303a","resolution":{"observed_at":"2026-08-07T10:19:35.285497Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.18649","last_updated":"2024-02-28T19:00:12Z","snapshot_observed_at":"2026-07-06T17:37:05.339368Z","submitted_at":"2024-02-28T19:00:12Z","title":"A New Era in LLM Security: Exploring Security Concerns in Real-World LLM-based Systems","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.18649","snapshot_observed_at":"2026-08-07T05:36:34.165591Z","title":"A new era in llm security: Exploring security concerns in real-world llm-based systems, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.07564","last_updated":"2025-06-11T03:14:10Z","snapshot_observed_at":"2026-08-08T13:02:06.235147Z","submitted_at":"2025-06-09T09:04:37Z","title":"SAFEFLOW: A Principled Protocol for Trustworthy and Transactional Autonomous Agent Systems","version":3},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-07T05:36:34.165591Z"},"links":{"cited_paper":"/paper/2402.18649","citing_paper":"/paper/2506.07564"},"observation_digest":"sha256:c5b837191a1c80b02245f10567a67d4af944ae88097f481623b7dd0a8f01a29d","observation_id":"36414a03-35c5-4a86-a167-64044d85995c","resolution":{"observed_at":"2026-08-07T05:36:34.165591Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.18649","last_updated":"2024-02-28T19:00:12Z","snapshot_observed_at":"2026-07-06T17:37:05.339368Z","submitted_at":"2024-02-28T19:00:12Z","title":"A New Era in LLM Security: Exploring Security Concerns in Real-World LLM-based Systems","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.18649","snapshot_observed_at":"2026-08-06T22:23:13.812550Z","title":"arXiv preprint arXiv:2402.18649 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":82,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:13.812550Z"},"links":{"cited_paper":"/paper/2402.18649","citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:0f18594a2d6ed76fdd86c50a188db13eae8fbe09ea10084e8dd70f1da18c2d07","observation_id":"c7c31459-26ba-4ccc-b81b-38289a286e9f","resolution":{"observed_at":"2026-08-06T22:23:13.812550Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.18649","last_updated":"2024-02-28T19:00:12Z","snapshot_observed_at":"2026-07-06T17:37:05.339368Z","submitted_at":"2024-02-28T19:00:12Z","title":"A New Era in LLM Security: Exploring Security Concerns in Real-World LLM-based Systems","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.18649","snapshot_observed_at":"2026-08-06T14:45:42.907822Z","title":"A new era in llm security: Exploring security concerns in real-world llm-based systems.arXiv preprint arXiv:2402.18649,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.18105","last_updated":"2025-07-24T05:30:54Z","snapshot_observed_at":"2026-08-07T21:22:02.859315Z","submitted_at":"2025-07-24T05:30:54Z","title":"Understanding the Supply Chain and Risks of Large Language Model Applications","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-06T14:45:42.907822Z"},"links":{"cited_paper":"/paper/2402.18649","citing_paper":"/paper/2507.18105"},"observation_digest":"sha256:5f6b58985627c8e2f3e899289003a6b41491e1e3f3a510d3e8b9332fecbbc0a3","observation_id":"59a94714-65be-4576-ba57-7918469c847a","resolution":{"observed_at":"2026-08-06T14:45:42.907822Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.18649","last_updated":"2024-02-28T19:00:12Z","snapshot_observed_at":"2026-07-06T17:37:05.339368Z","submitted_at":"2024-02-28T19:00:12Z","title":"A New Era in LLM Security: Exploring Security Concerns in Real-World LLM-based Systems","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.18649","snapshot_observed_at":"2026-08-05T16:50:29.805387Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.19287","last_updated":"2025-08-25T05:20:11Z","snapshot_observed_at":"2026-08-09T06:50:20.259382Z","submitted_at":"2025-08-25T05:20:11Z","title":"Prompt-in-Content Attacks: Exploiting Uploaded Inputs to Hijack LLM Behavior","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-05T16:50:29.805387Z"},"links":{"cited_paper":"/paper/2402.18649","citing_paper":"/paper/2508.19287"},"observation_digest":"sha256:1864488ec7f35df95761423e601a4658d33422add1f8ffb474ebe49b07ba788e","observation_id":"4ed72736-4654-47a2-8294-25c22ec8fd0e","resolution":{"observed_at":"2026-08-05T16:50:29.805387Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.18649","last_updated":"2024-02-28T19:00:12Z","snapshot_observed_at":"2026-07-06T17:37:05.339368Z","submitted_at":"2024-02-28T19:00:12Z","title":"A New Era in LLM Security: Exploring Security Concerns in Real-World LLM-based Systems","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.18649","snapshot_observed_at":"2026-08-05T14:57:12.945857Z","title":"A new era in llm security: Exploring security concerns in real-world llm-based systems, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.20766","last_updated":"2025-08-28T13:22:33Z","snapshot_observed_at":"2026-08-07T12:38:42.068471Z","submitted_at":"2025-08-28T13:22:33Z","title":"Turning the Spell Around: Lightweight Alignment Amplification via Rank-One Safety Injection","version":1},"reference_index":53,"source":"arxiv_source","source_observed_at":"2026-08-05T14:57:12.945857Z"},"links":{"cited_paper":"/paper/2402.18649","citing_paper":"/paper/2508.20766"},"observation_digest":"sha256:612dba18750b1753f2a19165777e3758a1cda960cd551636213ab394bad5cca3","observation_id":"55d8626b-c077-46ae-b78c-1ecdbeb34004","resolution":{"observed_at":"2026-08-05T14:57:12.945857Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.18649","last_updated":"2024-02-28T19:00:12Z","snapshot_observed_at":"2026-07-06T17:37:05.339368Z","submitted_at":"2024-02-28T19:00:12Z","title":"A New Era in LLM Security: Exploring Security Concerns in Real-World LLM-based Systems","version":1},"cited_work":{"arxiv_id":"2402.18649","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2402.18649","snapshot_observed_at":"2026-07-04T08:29:41.300616Z","title":"A new era in llm security: Exploring security con- cerns in real-world llm-based systems","venue":null,"work_id":"2d282690-8515-4ec5-85ac-d33b47cbe7a9","year":2024},"citing_paper":{"arxiv_id":"2510.21236","last_updated":"2026-04-24T09:59:19Z","snapshot_observed_at":"2026-07-06T22:33:58.663508Z","submitted_at":"2025-10-24T08:10:36Z","title":"AgentBound: Securing Execution Boundaries of AI Agents","version":3},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-05-18T05:12:23.542793Z"},"links":{"cited_paper":"/paper/2402.18649","citing_paper":"/paper/2510.21236"},"observation_digest":"sha256:3deeb60e4b2940afb37710e1b34446ac15e136892d6ab93b11d52c11d7e46925","observation_id":"e2d44e16-15a8-4721-90a7-ced579650d26","resolution":{"observed_at":"2026-05-18T05:15:54.510960Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.18649","last_updated":"2024-02-28T19:00:12Z","snapshot_observed_at":"2026-07-06T17:37:05.339368Z","submitted_at":"2024-02-28T19:00:12Z","title":"A New Era in LLM Security: Exploring Security Concerns in Real-World LLM-based Systems","version":1},"cited_work":{"arxiv_id":"2402.18649","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2402.18649","snapshot_observed_at":"2026-07-04T08:29:41.300616Z","title":"A new era in llm security: Exploring security con- cerns in real-world llm-based systems","venue":null,"work_id":"2d282690-8515-4ec5-85ac-d33b47cbe7a9","year":2024},"citing_paper":{"arxiv_id":"2510.23883","last_updated":"2026-04-03T16:27:34Z","snapshot_observed_at":"2026-08-02T13:42:34.526072Z","submitted_at":"2025-10-27T21:48:11Z","title":"Agentic AI Security: Threats, Defenses, Evaluation, and Open Challenges","version":3},"reference_index":220,"source":"pdf_text","source_observed_at":"2026-05-18T03:42:10.703369Z"},"links":{"cited_paper":"/paper/2402.18649","citing_paper":"/paper/2510.23883"},"observation_digest":"sha256:a6cd11ad698e28e68f9d7b7ff6d0043cfb0709791fde3e0334f96a2b5d285a11","observation_id":"d4667967-0768-4dd2-918f-996ecdde8df0","resolution":{"observed_at":"2026-05-18T03:42:22.057538Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.18649","last_updated":"2024-02-28T19:00:12Z","snapshot_observed_at":"2026-07-06T17:37:05.339368Z","submitted_at":"2024-02-28T19:00:12Z","title":"A New Era in LLM Security: Exploring Security Concerns in Real-World LLM-based Systems","version":1},"cited_work":{"arxiv_id":"2402.18649","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2402.18649","snapshot_observed_at":"2026-07-04T08:29:41.300616Z","title":"A new era in llm security: Exploring security con- cerns in real-world llm-based systems","venue":null,"work_id":"2d282690-8515-4ec5-85ac-d33b47cbe7a9","year":2024},"citing_paper":{"arxiv_id":"2604.05987","last_updated":"2026-04-07T15:15:12Z","snapshot_observed_at":"2026-07-06T22:54:34.877944Z","submitted_at":"2026-04-07T15:15:12Z","title":"Flowr -- Scaling Up Retail Supply Chain Operations Through Agentic AI in Large Scale Supermarket Chains","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-05-10T19:29:30.436621Z"},"links":{"cited_paper":"/paper/2402.18649","citing_paper":"/paper/2604.05987"},"observation_digest":"sha256:7d36022fd55714a9fa336d55c825593bad2079a9b4051b7dc846b32f731b649f","observation_id":"a3144196-0953-437f-b15b-d614347c9294","resolution":{"observed_at":"2026-05-10T22:55:49.242222Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.18649","last_updated":"2024-02-28T19:00:12Z","snapshot_observed_at":"2026-07-06T17:37:05.339368Z","submitted_at":"2024-02-28T19:00:12Z","title":"A New Era in LLM Security: Exploring Security Concerns in Real-World LLM-based Systems","version":1},"cited_work":{"arxiv_id":"2402.18649","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2402.18649","snapshot_observed_at":"2026-07-04T08:29:41.300616Z","title":"A new era in llm security: Exploring security con- cerns in real-world llm-based systems","venue":null,"work_id":"2d282690-8515-4ec5-85ac-d33b47cbe7a9","year":2024},"citing_paper":{"arxiv_id":"2604.19844","last_updated":"2026-04-21T11:27:30Z","snapshot_observed_at":"2026-07-31T22:27:19.281459Z","submitted_at":"2026-04-21T11:27:30Z","title":"If you're waiting for a sign... that might not be it! Mitigating Trust Boundary Confusion from Visual Injections on Vision-Language Agentic Systems","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-05-10T02:54:35.336251Z"},"links":{"cited_paper":"/paper/2402.18649","citing_paper":"/paper/2604.19844"},"observation_digest":"sha256:5e0b791410fc1ad52fadfaece03e100eef9561a5eeb61810c8b8d315cf18c3ce","observation_id":"1f66cdd2-7aac-4ead-8680-430f6e2f7587","resolution":{"observed_at":"2026-05-11T12:51:02.621593Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.18649","last_updated":"2024-02-28T19:00:12Z","snapshot_observed_at":"2026-07-06T17:37:05.339368Z","submitted_at":"2024-02-28T19:00:12Z","title":"A New Era in LLM Security: Exploring Security Concerns in Real-World LLM-based Systems","version":1},"cited_work":{"arxiv_id":"2402.18649","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2402.18649","snapshot_observed_at":"2026-07-04T08:29:41.300616Z","title":"A new era in llm security: Exploring security con- cerns in real-world llm-based systems","venue":null,"work_id":"2d282690-8515-4ec5-85ac-d33b47cbe7a9","year":2024},"citing_paper":{"arxiv_id":"2605.08460","last_updated":"2026-05-08T20:27:23Z","snapshot_observed_at":"2026-07-06T23:20:43.010758Z","submitted_at":"2026-05-08T20:27:23Z","title":"When Child Inherits: Modeling and Exploiting Subagent Spawn in Multi-Agent Networks","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-05-12T01:20:55.221345Z"},"links":{"cited_paper":"/paper/2402.18649","citing_paper":"/paper/2605.08460"},"observation_digest":"sha256:c626cdbcbc888b356c6fb242eaf9afa4ce0db1b40ee0b574a7de00fb9e50025b","observation_id":"820988f0-8ae3-453e-9c22-3882c32a2873","resolution":{"observed_at":"2026-05-12T08:01:33.180826Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.18649","last_updated":"2024-02-28T19:00:12Z","snapshot_observed_at":"2026-07-06T17:37:05.339368Z","submitted_at":"2024-02-28T19:00:12Z","title":"A New Era in LLM Security: Exploring Security Concerns in Real-World LLM-based Systems","version":1},"cited_work":{"arxiv_id":"2402.18649","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2402.18649","snapshot_observed_at":"2026-07-04T08:29:41.300616Z","title":"A new era in llm security: Exploring security con- cerns in real-world llm-based systems","venue":null,"work_id":"2d282690-8515-4ec5-85ac-d33b47cbe7a9","year":2024},"citing_paper":{"arxiv_id":"2606.22153","last_updated":"2026-06-20T17:22:36Z","snapshot_observed_at":"2026-08-09T01:03:02.688087Z","submitted_at":"2026-06-20T17:22:36Z","title":"$\\pi$-RAG: Oblivious Retrieval via Semantic Quantization and Transcendental Addressing for Large Language Models","version":1},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-06-26T11:42:58.442012Z"},"links":{"cited_paper":"/paper/2402.18649","citing_paper":"/paper/2606.22153"},"observation_digest":"sha256:de4d9d69b8f1be7fccf73917064e7c68b2d2a0e4f39576ff018f8efc83b0568a","observation_id":"b08f3fd9-84d6-4ad5-a97f-a9e0253e7f12","resolution":{"observed_at":"2026-07-04T08:29:41.302116Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.18649","last_updated":"2024-02-28T19:00:12Z","snapshot_observed_at":"2026-07-06T17:37:05.339368Z","submitted_at":"2024-02-28T19:00:12Z","title":"A New Era in LLM Security: Exploring Security Concerns in Real-World LLM-based Systems","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.18649","snapshot_observed_at":"2026-08-01T20:20:08.453334Z","title":"A new era in LLM security: Exploring security concerns in real-world LLM-based systems, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.16660","last_updated":"2026-07-18T06:30:12Z","snapshot_observed_at":"2026-08-01T20:19:55.361428Z","submitted_at":"2026-07-18T06:30:12Z","title":"How Do You Choose Your AI Component? An Interview Study of Secure AI Integration in Practice","version":1},"reference_index":112,"source":"pdf_text","source_observed_at":"2026-08-01T20:20:08.453334Z"},"links":{"cited_paper":"/paper/2402.18649","citing_paper":"/paper/2607.16660"},"observation_digest":"sha256:c9e057f31e4d21c891aa2348436c15130d50c3b833d1c88d4fcd83d21d865b65","observation_id":"3bd1a248-d855-40ae-9b1c-9f0b1fcec988","resolution":{"observed_at":"2026-08-01T20:20:08.453334Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2402.18649/citation-record","integrity":"/paper/2402.18649/integrity","json":"/paper/2402.18649/citation-record.json","paper":"/paper/2402.18649"},"outbound":[],"paper":{"arxiv_id":"2402.18649","last_updated":"2024-02-28T19:00:12Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-07-06T17:37:05.339368Z","submitted_at":"2024-02-28T19:00:12Z","title":"A New Era in LLM Security: Exploring Security Concerns in Real-World LLM-based Systems"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 17 inbound Pith citation observations for arXiv:2402.18649."}