{"as_of":"2026-08-10T00:54:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:e7932805901a1cbc327ba07409f6d5c0dd4ba26e9eec5b5d36effd495ed607ad","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":46,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":46,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":46,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":46,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-08T20:57:43.488821Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-04T14:09:53.868428Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2403.04957","last_updated":"2024-03-07T23:46:20Z","snapshot_observed_at":"2026-08-08T04:50:42.660630Z","submitted_at":"2024-03-07T23:46:20Z","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models","version":1},"cited_work":{"arxiv_id":"2403.04957","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2403.04957","snapshot_observed_at":"2026-07-04T14:09:53.868428Z","title":"Automatic and universal prompt injection attacks against large language models","venue":null,"work_id":"0bf3ec19-0162-44f2-855f-1b7fdb565de2","year":2024},"citing_paper":{"arxiv_id":"2410.07283","last_updated":"2024-10-09T11:01:29Z","snapshot_observed_at":"2026-08-02T17:12:52.352951Z","submitted_at":"2024-10-09T11:01:29Z","title":"Prompt Infection: LLM-to-LLM Prompt Injection within Multi-Agent Systems","version":1},"reference_index":70,"source":"arxiv_source","source_observed_at":"2026-05-15T19:32:19.405615Z"},"links":{"cited_paper":"/paper/2403.04957","citing_paper":"/paper/2410.07283"},"observation_digest":"sha256:f9e171a9584fbef469d5fe0ef8af904fe4630beb035c573fd701a8aa23e4c906","observation_id":"00382ccd-a8c3-4c0f-9d44-dbd2cd791271","resolution":{"observed_at":"2026-05-15T19:32:19.765944Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04957","last_updated":"2024-03-07T23:46:20Z","snapshot_observed_at":"2026-08-08T04:50:42.660630Z","submitted_at":"2024-03-07T23:46:20Z","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.04957","snapshot_observed_at":"2026-08-08T20:57:43.488821Z","title":"Automatic and universal prompt injection attacks against large language mod- els","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.04951","last_updated":"2025-06-13T04:49:36Z","snapshot_observed_at":"2026-08-08T20:49:41.495000Z","submitted_at":"2025-02-07T14:15:46Z","title":"Unsafe LLM-Based Search: Quantitative Analysis and Mitigation of Safety Risks in AI Web Search","version":3},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-08T20:57:43.488821Z"},"links":{"cited_paper":"/paper/2403.04957","citing_paper":"/paper/2502.04951"},"observation_digest":"sha256:bafad405c5ce002ee132d788df653decb470b378d573698cd3089e560f4a3289","observation_id":"4e27f4c2-676e-4012-9ade-1c690c0c6c55","resolution":{"observed_at":"2026-08-08T20:57:43.488821Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04957","last_updated":"2024-03-07T23:46:20Z","snapshot_observed_at":"2026-08-08T04:50:42.660630Z","submitted_at":"2024-03-07T23:46:20Z","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models","version":1},"cited_work":{"arxiv_id":"2403.04957","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2403.04957","snapshot_observed_at":"2026-07-04T14:09:53.868428Z","title":"Automatic and universal prompt injection attacks against large language models","venue":null,"work_id":"0bf3ec19-0162-44f2-855f-1b7fdb565de2","year":2024},"citing_paper":{"arxiv_id":"2502.05206","last_updated":"2026-04-14T16:10:41Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-02-02T05:14:22Z","title":"Safety at Scale: A Comprehensive Survey of Large Model and Agent Safety","version":6},"reference_index":131,"source":"pdf_text","source_observed_at":"2026-05-23T04:39:04.591722Z"},"links":{"cited_paper":"/paper/2403.04957","citing_paper":"/paper/2502.05206"},"observation_digest":"sha256:d642489b4c69baca178bc570a5f50b8ebdb781794e025037dba6e8c8e0959476","observation_id":"f1eee7c9-bfff-4c8d-884b-262fe08e5200","resolution":{"observed_at":"2026-05-23T04:42:34.055523Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04957","last_updated":"2024-03-07T23:46:20Z","snapshot_observed_at":"2026-08-08T04:50:42.660630Z","submitted_at":"2024-03-07T23:46:20Z","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models","version":1},"cited_work":{"arxiv_id":"2403.04957","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2403.04957","snapshot_observed_at":"2026-07-04T14:09:53.868428Z","title":"Automatic and universal prompt injection attacks against large language models","venue":null,"work_id":"0bf3ec19-0162-44f2-855f-1b7fdb565de2","year":2024},"citing_paper":{"arxiv_id":"2504.11703","last_updated":"2026-05-14T02:36:38Z","snapshot_observed_at":"2026-07-06T21:10:09.129714Z","submitted_at":"2025-04-16T01:58:40Z","title":"Progent: Securing AI Agents with Privilege Control","version":3},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-05-22T21:09:51.782808Z"},"links":{"cited_paper":"/paper/2403.04957","citing_paper":"/paper/2504.11703"},"observation_digest":"sha256:ef353deffc9a0b8534b42a309a9ed423264f58adbc519e5d5412c1f3e4055e40","observation_id":"3b999406-817e-4c83-9279-6493d7118cf9","resolution":{"observed_at":"2026-05-22T21:12:08.509663Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04957","last_updated":"2024-03-07T23:46:20Z","snapshot_observed_at":"2026-08-08T04:50:42.660630Z","submitted_at":"2024-03-07T23:46:20Z","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models","version":1},"cited_work":{"arxiv_id":"2403.04957","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2403.04957","snapshot_observed_at":"2026-07-04T14:09:53.868428Z","title":"Automatic and universal prompt injection attacks against large language models","venue":null,"work_id":"0bf3ec19-0162-44f2-855f-1b7fdb565de2","year":2024},"citing_paper":{"arxiv_id":"2504.20472","last_updated":"2026-04-09T06:57:42Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-04-29T07:13:53Z","title":"Robustness via Referencing: Defending against Prompt Injection Attacks by Referencing the Executed Instruction","version":2},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-05-22T19:10:55.009810Z"},"links":{"cited_paper":"/paper/2403.04957","citing_paper":"/paper/2504.20472"},"observation_digest":"sha256:051de7da63b37d228e42857b923c79d790f0755c53e05277d02541d65a63fb17","observation_id":"a1da7caf-84ea-4269-be80-b8d459938655","resolution":{"observed_at":"2026-05-22T19:11:58.033623Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04957","last_updated":"2024-03-07T23:46:20Z","snapshot_observed_at":"2026-08-08T04:50:42.660630Z","submitted_at":"2024-03-07T23:46:20Z","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.04957","snapshot_observed_at":"2026-08-07T14:36:10.639064Z","title":"Automatic and universal prompt injection attacks against large language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.18333","last_updated":"2025-05-23T19:39:56Z","snapshot_observed_at":"2026-08-07T14:30:46.734293Z","submitted_at":"2025-05-23T19:39:56Z","title":"A Critical Evaluation of Defenses against Prompt Injection Attacks","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T14:36:10.639064Z"},"links":{"cited_paper":"/paper/2403.04957","citing_paper":"/paper/2505.18333"},"observation_digest":"sha256:b04995963a01f4245d1dd1dc87dacaf8f0e8a70a5cf4eb713f37bd93add0e15d","observation_id":"ba6ff266-a26c-450f-bec2-51e9c3c922a4","resolution":{"observed_at":"2026-08-07T14:36:10.639064Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04957","last_updated":"2024-03-07T23:46:20Z","snapshot_observed_at":"2026-08-08T04:50:42.660630Z","submitted_at":"2024-03-07T23:46:20Z","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.04957","snapshot_observed_at":"2026-08-07T12:42:13.656779Z","title":"Automatic and universal prompt injection attacks against large language models.arXiv preprint arXiv:2403.04957, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:13.656779Z"},"links":{"cited_paper":"/paper/2403.04957","citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:172d64858ca031480bb76d2f1dda6797f430a471675148a82d4682dc8fa09bb2","observation_id":"4ba3acef-79e5-48ee-86b5-c7196eac569b","resolution":{"observed_at":"2026-08-07T12:42:13.656779Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04957","last_updated":"2024-03-07T23:46:20Z","snapshot_observed_at":"2026-08-08T04:50:42.660630Z","submitted_at":"2024-03-07T23:46:20Z","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.04957","snapshot_observed_at":"2026-08-07T12:11:20.996876Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.05376","last_updated":"2025-06-09T05:48:22Z","snapshot_observed_at":"2026-08-07T12:39:09.825243Z","submitted_at":"2025-05-30T22:58:54Z","title":"A Red Teaming Roadmap Towards System-Level Safety","version":2},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-07T12:11:20.996876Z"},"links":{"cited_paper":"/paper/2403.04957","citing_paper":"/paper/2506.05376"},"observation_digest":"sha256:ed9a48e4dc4f8114d202f44cb76dcf8eb88f08583804f7b8998c82adc57bddd6","observation_id":"7342b699-7560-41fa-89d7-808daffcbee5","resolution":{"observed_at":"2026-08-07T12:11:20.996876Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04957","last_updated":"2024-03-07T23:46:20Z","snapshot_observed_at":"2026-08-08T04:50:42.660630Z","submitted_at":"2024-03-07T23:46:20Z","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.04957","snapshot_observed_at":"2026-08-07T05:41:25.442964Z","title":"Automatic and universal prompt injection attacks against large language models, 2024 a","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.07330","last_updated":"2025-06-09T00:11:06Z","snapshot_observed_at":"2026-08-08T01:51:03.511040Z","submitted_at":"2025-06-09T00:11:06Z","title":"JavelinGuard: Low-Cost Transformer Architectures for LLM Security","version":1},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-08-07T05:41:25.442964Z"},"links":{"cited_paper":"/paper/2403.04957","citing_paper":"/paper/2506.07330"},"observation_digest":"sha256:dfa62a4df6787690c4df5fdb1135cef1013a8cb2acd67481016b002560338df8","observation_id":"3afdebdd-3f5e-4b72-9cbc-eccb2bbb06a5","resolution":{"observed_at":"2026-08-07T05:41:25.442964Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04957","last_updated":"2024-03-07T23:46:20Z","snapshot_observed_at":"2026-08-08T04:50:42.660630Z","submitted_at":"2024-03-07T23:46:20Z","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models","version":1},"cited_work":{"arxiv_id":"2403.04957","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2403.04957","snapshot_observed_at":"2026-07-04T14:09:53.868428Z","title":"Automatic and universal prompt injection attacks against large language models","venue":null,"work_id":"0bf3ec19-0162-44f2-855f-1b7fdb565de2","year":2024},"citing_paper":{"arxiv_id":"2507.05660","last_updated":"2026-05-21T16:31:21Z","snapshot_observed_at":"2026-07-29T18:54:03.959574Z","submitted_at":"2025-07-08T04:40:09Z","title":"Optimus: A Robust Defense Framework for Mitigating Toxicity while Fine-Tuning Conversational AI","version":3},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-05-22T12:17:59.458633Z"},"links":{"cited_paper":"/paper/2403.04957","citing_paper":"/paper/2507.05660"},"observation_digest":"sha256:09249f8e4e4e97cebb86919c86befc5d798f43645aa5f27921235f61688a75dd","observation_id":"3b5a2a5e-fb16-4246-99ba-a541103270ef","resolution":{"observed_at":"2026-05-22T12:21:31.173740Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04957","last_updated":"2024-03-07T23:46:20Z","snapshot_observed_at":"2026-08-08T04:50:42.660630Z","submitted_at":"2024-03-07T23:46:20Z","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.04957","snapshot_observed_at":"2026-08-06T19:12:22.873103Z","title":"Automatic and universal prompt injection attacks against large language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.06323","last_updated":"2025-07-08T18:24:28Z","snapshot_observed_at":"2026-08-06T19:05:12.143746Z","submitted_at":"2025-07-08T18:24:28Z","title":"Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-06T19:12:22.873103Z"},"links":{"cited_paper":"/paper/2403.04957","citing_paper":"/paper/2507.06323"},"observation_digest":"sha256:7e7ed9dd91364024a969e9f3f188526824562b7c02973d600fe70a4c352a0072","observation_id":"4941f215-fcae-4a57-a01e-eb1d0761141e","resolution":{"observed_at":"2026-08-06T19:12:22.873103Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04957","last_updated":"2024-03-07T23:46:20Z","snapshot_observed_at":"2026-08-08T04:50:42.660630Z","submitted_at":"2024-03-07T23:46:20Z","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.04957","snapshot_observed_at":"2026-08-06T18:32:40.695022Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-09T06:15:46.568294Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:40.695022Z"},"links":{"cited_paper":"/paper/2403.04957","citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:7a19789c16c4ad5fb82b4c57bb6ea16ba7fad9a64aefe80ef574a8b878232132","observation_id":"98b6a98b-c918-43b7-83b6-5e56d436e594","resolution":{"observed_at":"2026-08-06T18:32:40.695022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04957","last_updated":"2024-03-07T23:46:20Z","snapshot_observed_at":"2026-08-08T04:50:42.660630Z","submitted_at":"2024-03-07T23:46:20Z","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.04957","snapshot_observed_at":"2026-08-06T16:34:03.407180Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.13169","last_updated":"2025-07-17T14:33:36Z","snapshot_observed_at":"2026-08-07T22:34:49.318621Z","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-06T16:34:03.407180Z"},"links":{"cited_paper":"/paper/2403.04957","citing_paper":"/paper/2507.13169"},"observation_digest":"sha256:b8947baecdbddd03650441df9ac357b7441d29f1b80557f76318a0e42cbe0119","observation_id":"513e5f8c-0e6b-4d1c-aa3d-8110b7bcb807","resolution":{"observed_at":"2026-08-06T16:34:03.407180Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04957","last_updated":"2024-03-07T23:46:20Z","snapshot_observed_at":"2026-08-08T04:50:42.660630Z","submitted_at":"2024-03-07T23:46:20Z","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.04957","snapshot_observed_at":"2026-08-06T15:48:58.472087Z","title":"Auto- matic and Universal Prompt Injection Attacks Against Large Language Models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-09T07:51:23.800410Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-06T15:48:58.472087Z"},"links":{"cited_paper":"/paper/2403.04957","citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:0451ee5e33028cbce9e9a278e7373d960aa746c3a19a5034237c5ccdc6af2952","observation_id":"e7e68571-f96e-4f65-ada3-7426759e29b2","resolution":{"observed_at":"2026-08-06T15:48:58.472087Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04957","last_updated":"2024-03-07T23:46:20Z","snapshot_observed_at":"2026-08-08T04:50:42.660630Z","submitted_at":"2024-03-07T23:46:20Z","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.04957","snapshot_observed_at":"2026-08-06T15:32:52.654532Z","title":"Liu et al","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-09T23:09:16.910755Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:52.654532Z"},"links":{"cited_paper":"/paper/2403.04957","citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:b9929fa19938a6c4c7f7851783800bca2ea9d5c259623396b53a2056d8f22c85","observation_id":"f957c792-a18c-485a-860c-8f06ffec6b56","resolution":{"observed_at":"2026-08-06T15:32:52.654532Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04957","last_updated":"2024-03-07T23:46:20Z","snapshot_observed_at":"2026-08-08T04:50:42.660630Z","submitted_at":"2024-03-07T23:46:20Z","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.04957","snapshot_observed_at":"2026-08-06T14:45:42.873238Z","title":"Exploring the robustness of decision- level through adversarial attacks on llm-based embodied models","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.18105","last_updated":"2025-07-24T05:30:54Z","snapshot_observed_at":"2026-08-07T21:22:02.859315Z","submitted_at":"2025-07-24T05:30:54Z","title":"Understanding the Supply Chain and Risks of Large Language Model Applications","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-06T14:45:42.873238Z"},"links":{"cited_paper":"/paper/2403.04957","citing_paper":"/paper/2507.18105"},"observation_digest":"sha256:d2cb323f34fb3c252713f818fb5f99bc8b597a1c545e35b8e76987ed8eb5d65d","observation_id":"45f7d85a-76f8-497c-aeac-667ff1e2f1cb","resolution":{"observed_at":"2026-08-06T14:45:42.873238Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04957","last_updated":"2024-03-07T23:46:20Z","snapshot_observed_at":"2026-08-08T04:50:42.660630Z","submitted_at":"2024-03-07T23:46:20Z","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.04957","snapshot_observed_at":"2026-08-05T23:37:06.805902Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.05083","last_updated":"2025-08-07T07:09:26Z","snapshot_observed_at":"2026-08-05T23:36:56.150979Z","submitted_at":"2025-08-07T07:09:26Z","title":"MedMKEB: A Comprehensive Knowledge Editing Benchmark for Medical Multimodal Large Language Models","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-05T23:37:06.805902Z"},"links":{"cited_paper":"/paper/2403.04957","citing_paper":"/paper/2508.05083"},"observation_digest":"sha256:27eab14033ef3b2593a9847c68ad5adb9e3e99d8f5f1d7633d3cff5644f4fb05","observation_id":"1c9450e4-55e6-4820-8f2f-2751a9d8581c","resolution":{"observed_at":"2026-08-05T23:37:06.805902Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04957","last_updated":"2024-03-07T23:46:20Z","snapshot_observed_at":"2026-08-08T04:50:42.660630Z","submitted_at":"2024-03-07T23:46:20Z","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.04957","snapshot_observed_at":"2026-08-05T21:55:58.592723Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.07805","last_updated":"2025-08-11T09:45:02Z","snapshot_observed_at":"2026-08-07T10:05:08.818969Z","submitted_at":"2025-08-11T09:45:02Z","title":"Can You Trick the Grader? Adversarial Persuasion of LLM Judges","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-05T21:55:58.592723Z"},"links":{"cited_paper":"/paper/2403.04957","citing_paper":"/paper/2508.07805"},"observation_digest":"sha256:8ebd927faa1a4b919a7fa56886a8f92d6b25b29293cb0ce5ba7d02ad24af29ed","observation_id":"d38b6893-beb6-47fd-90cc-11869f761d5d","resolution":{"observed_at":"2026-08-05T21:55:58.592723Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04957","last_updated":"2024-03-07T23:46:20Z","snapshot_observed_at":"2026-08-08T04:50:42.660630Z","submitted_at":"2024-03-07T23:46:20Z","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.04957","snapshot_observed_at":"2026-08-05T20:31:33.469643Z","title":"Automatic and universal prompt injection attacks against large language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.10404","last_updated":"2025-08-14T07:12:44Z","snapshot_observed_at":"2026-08-08T02:31:17.622343Z","submitted_at":"2025-08-14T07:12:44Z","title":"Layer-Wise Perturbations via Sparse Autoencoders for Adversarial Text Generation","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-05T20:31:33.469643Z"},"links":{"cited_paper":"/paper/2403.04957","citing_paper":"/paper/2508.10404"},"observation_digest":"sha256:380111b661270635c0ba1b7edd14ab2676a41e79a45ee27491d19bb5bad9cf06","observation_id":"eb2ddbd0-6ab7-48b3-8a03-042e64e1955d","resolution":{"observed_at":"2026-08-05T20:31:33.469643Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04957","last_updated":"2024-03-07T23:46:20Z","snapshot_observed_at":"2026-08-08T04:50:42.660630Z","submitted_at":"2024-03-07T23:46:20Z","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.04957","snapshot_observed_at":"2026-08-05T18:48:51.940993Z","title":"Automatic and universal prompt injection attacks against large language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.15842","last_updated":"2025-08-19T18:20:38Z","snapshot_observed_at":"2026-08-07T08:36:52.541508Z","submitted_at":"2025-08-19T18:20:38Z","title":"Lexical Hints of Accuracy in LLM Reasoning Chains","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-05T18:48:51.940993Z"},"links":{"cited_paper":"/paper/2403.04957","citing_paper":"/paper/2508.15842"},"observation_digest":"sha256:5d2e41e011d42b7df6be1466ab0a7ad3b5df06d79f4a758b9b360a569295fecb","observation_id":"d7ec56af-1696-4abd-a490-5b82e13facb2","resolution":{"observed_at":"2026-08-05T18:48:51.940993Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04957","last_updated":"2024-03-07T23:46:20Z","snapshot_observed_at":"2026-08-08T04:50:42.660630Z","submitted_at":"2024-03-07T23:46:20Z","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.04957","snapshot_observed_at":"2026-08-05T16:24:26.741048Z","title":"Automatic and universal prompt injection attacks against large language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.741048Z"},"links":{"cited_paper":"/paper/2403.04957","citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:f42582d32d873fecae9a6189f842d838d116a107ac8bea4d9d45487ca50399d8","observation_id":"ded80d7c-1156-4ac7-8bdd-2c9422582adc","resolution":{"observed_at":"2026-08-05T16:24:26.741048Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04957","last_updated":"2024-03-07T23:46:20Z","snapshot_observed_at":"2026-08-08T04:50:42.660630Z","submitted_at":"2024-03-07T23:46:20Z","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.04957","snapshot_observed_at":"2026-08-05T16:50:28.896342Z","title":"arXiv preprint arXiv:2403.04957 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.19287","last_updated":"2025-08-25T05:20:11Z","snapshot_observed_at":"2026-08-09T06:50:20.259382Z","submitted_at":"2025-08-25T05:20:11Z","title":"Prompt-in-Content Attacks: Exploiting Uploaded Inputs to Hijack LLM Behavior","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-05T16:50:28.896342Z"},"links":{"cited_paper":"/paper/2403.04957","citing_paper":"/paper/2508.19287"},"observation_digest":"sha256:6bf621c2f8550ca040faaa3187b5db56581e6fe06a055046e45ea8ee519d55c8","observation_id":"4b2a9e2e-c0a5-44ec-8b75-efc62a07db9b","resolution":{"observed_at":"2026-08-05T16:50:28.896342Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04957","last_updated":"2024-03-07T23:46:20Z","snapshot_observed_at":"2026-08-08T04:50:42.660630Z","submitted_at":"2024-03-07T23:46:20Z","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.04957","snapshot_observed_at":"2026-08-04T21:33:58.308885Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.07941","last_updated":"2025-09-09T17:21:20Z","snapshot_observed_at":"2026-08-09T14:05:01.644916Z","submitted_at":"2025-09-09T17:21:20Z","title":"ImportSnare: Directed \"Code Manual\" Hijacking in Retrieval-Augmented Code Generation","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-04T21:33:58.308885Z"},"links":{"cited_paper":"/paper/2403.04957","citing_paper":"/paper/2509.07941"},"observation_digest":"sha256:0813622e06631f8e4083b4111845015ea087843da35b9b337740369ded52b972","observation_id":"d85bae77-58fc-4950-ab87-e716d349490f","resolution":{"observed_at":"2026-08-04T21:33:58.308885Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04957","last_updated":"2024-03-07T23:46:20Z","snapshot_observed_at":"2026-08-08T04:50:42.660630Z","submitted_at":"2024-03-07T23:46:20Z","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.04957","snapshot_observed_at":"2026-08-04T17:17:02.831895Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.11052","last_updated":"2025-09-14T02:40:00Z","snapshot_observed_at":"2026-08-09T03:37:46.518157Z","submitted_at":"2025-09-14T02:40:00Z","title":"Commenotes: Synthesizing Organic Comments to Support Community-Based Fact-Checking","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-04T17:17:02.831895Z"},"links":{"cited_paper":"/paper/2403.04957","citing_paper":"/paper/2509.11052"},"observation_digest":"sha256:a82eb343271fe7b3156e1370f8c8e350bf4172576dc9e6b4270f0269dc331fd8","observation_id":"103324b5-ece7-446e-8f47-f3e500560bf1","resolution":{"observed_at":"2026-08-04T17:17:02.831895Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04957","last_updated":"2024-03-07T23:46:20Z","snapshot_observed_at":"2026-08-08T04:50:42.660630Z","submitted_at":"2024-03-07T23:46:20Z","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.04957","snapshot_observed_at":"2026-08-04T12:45:26.210468Z","title":"Automatic and universal prompt injection attacks against large language models, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.02480","last_updated":"2026-05-27T22:55:59Z","snapshot_observed_at":"2026-08-09T10:13:00.774448Z","submitted_at":"2025-10-02T18:36:10Z","title":"Controlling the Risk of Corrupted Contexts for Language Models via Early-Exiting","version":3},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-08-04T12:45:26.210468Z"},"links":{"cited_paper":"/paper/2403.04957","citing_paper":"/paper/2510.02480"},"observation_digest":"sha256:db9f560a41b3c4878346cea6039ef558fd85041ade4c93fe54e748ab1e37c251","observation_id":"14425be5-c3c8-4b12-acd4-9417b8db1c98","resolution":{"observed_at":"2026-08-04T12:45:26.210468Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04957","last_updated":"2024-03-07T23:46:20Z","snapshot_observed_at":"2026-08-08T04:50:42.660630Z","submitted_at":"2024-03-07T23:46:20Z","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.04957","snapshot_observed_at":"2026-08-04T11:11:01.037174Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.06732","last_updated":"2026-06-28T18:43:51Z","snapshot_observed_at":"2026-08-09T10:05:32.053023Z","submitted_at":"2025-10-08T07:40:40Z","title":"Are LLMs Reliable Rankers? Rank Manipulation via Two-Stage Token Optimization","version":2},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-04T11:11:01.037174Z"},"links":{"cited_paper":"/paper/2403.04957","citing_paper":"/paper/2510.06732"},"observation_digest":"sha256:f9c5584dabf414da229dcf80aa843582b6def491ff83a10d727b1b922f9e02e1","observation_id":"12515d4d-d0d6-45fc-9506-a68163e66f91","resolution":{"observed_at":"2026-08-04T11:11:01.037174Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04957","last_updated":"2024-03-07T23:46:20Z","snapshot_observed_at":"2026-08-08T04:50:42.660630Z","submitted_at":"2024-03-07T23:46:20Z","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.04957","snapshot_observed_at":"2026-08-04T10:22:06.011277Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.10271","last_updated":"2026-06-26T00:42:37Z","snapshot_observed_at":"2026-08-04T14:50:50.060411Z","submitted_at":"2025-10-11T16:14:56Z","title":"MetaBreak: Jailbreaking Online LLM Services via Special Token Manipulation","version":2},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-04T10:22:06.011277Z"},"links":{"cited_paper":"/paper/2403.04957","citing_paper":"/paper/2510.10271"},"observation_digest":"sha256:983226d37c5ae43a6382ee15b70b198579faafa740580377b9d4a021d574c91c","observation_id":"35f62a36-f6d6-4b33-99c6-d55049917d54","resolution":{"observed_at":"2026-08-04T10:22:06.011277Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04957","last_updated":"2024-03-07T23:46:20Z","snapshot_observed_at":"2026-08-08T04:50:42.660630Z","submitted_at":"2024-03-07T23:46:20Z","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models","version":1},"cited_work":{"arxiv_id":"2403.04957","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2403.04957","snapshot_observed_at":"2026-07-04T14:09:53.868428Z","title":"Automatic and universal prompt injection attacks against large language models","venue":null,"work_id":"0bf3ec19-0162-44f2-855f-1b7fdb565de2","year":2024},"citing_paper":{"arxiv_id":"2510.23883","last_updated":"2026-04-03T16:27:34Z","snapshot_observed_at":"2026-08-02T13:42:34.526072Z","submitted_at":"2025-10-27T21:48:11Z","title":"Agentic AI Security: Threats, Defenses, Evaluation, and Open Challenges","version":3},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-05-18T03:42:10.703369Z"},"links":{"cited_paper":"/paper/2403.04957","citing_paper":"/paper/2510.23883"},"observation_digest":"sha256:524de26d4d0924db353667e4bc53a87990cbea3559de16c616af491b1f1bdcb9","observation_id":"ee967f60-f099-41ee-b92f-17942d1548d6","resolution":{"observed_at":"2026-05-18T03:42:22.009079Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04957","last_updated":"2024-03-07T23:46:20Z","snapshot_observed_at":"2026-08-08T04:50:42.660630Z","submitted_at":"2024-03-07T23:46:20Z","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models","version":1},"cited_work":{"arxiv_id":"2403.04957","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2403.04957","snapshot_observed_at":"2026-07-04T14:09:53.868428Z","title":"Automatic and universal prompt injection attacks against large language models","venue":null,"work_id":"0bf3ec19-0162-44f2-855f-1b7fdb565de2","year":2024},"citing_paper":{"arxiv_id":"2512.22753","last_updated":"2026-04-22T21:48:07Z","snapshot_observed_at":"2026-08-08T22:14:34.218223Z","submitted_at":"2025-12-28T02:55:49Z","title":"From Rookie to Expert: Manipulating LLMs for Automated Vulnerability Exploitation in Enterprise Software","version":2},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-05-16T20:02:47.746439Z"},"links":{"cited_paper":"/paper/2403.04957","citing_paper":"/paper/2512.22753"},"observation_digest":"sha256:8105fed8602e12ba828f6a08531aa588ea9f4bf6b6b1184bb2d5db2217a1506a","observation_id":"408154a8-f508-4367-afa4-048f18760781","resolution":{"observed_at":"2026-05-16T20:03:22.145931Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04957","last_updated":"2024-03-07T23:46:20Z","snapshot_observed_at":"2026-08-08T04:50:42.660630Z","submitted_at":"2024-03-07T23:46:20Z","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models","version":1},"cited_work":{"arxiv_id":"2403.04957","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2403.04957","snapshot_observed_at":"2026-07-04T14:09:53.868428Z","title":"Automatic and universal prompt injection attacks against large language models","venue":null,"work_id":"0bf3ec19-0162-44f2-855f-1b7fdb565de2","year":2024},"citing_paper":{"arxiv_id":"2604.15367","last_updated":"2026-05-01T15:12:59Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2026-04-15T01:55:40Z","title":"SoK: Security of Autonomous LLM Agents in Agentic Commerce","version":2},"reference_index":101,"source":"pdf_text","source_observed_at":"2026-05-10T13:55:48.290563Z"},"links":{"cited_paper":"/paper/2403.04957","citing_paper":"/paper/2604.15367"},"observation_digest":"sha256:6a0efcc11d6603f79e76318a002e229e6f5b19e6113b09ddf5f34c43dd757ac2","observation_id":"4526d02f-6b83-42d5-ab40-bc7dd1bbb73d","resolution":{"observed_at":"2026-05-10T14:00:29.387592Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04957","last_updated":"2024-03-07T23:46:20Z","snapshot_observed_at":"2026-08-08T04:50:42.660630Z","submitted_at":"2024-03-07T23:46:20Z","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models","version":1},"cited_work":{"arxiv_id":"2403.04957","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2403.04957","snapshot_observed_at":"2026-07-04T14:09:53.868428Z","title":"Automatic and universal prompt injection attacks against large language models","venue":null,"work_id":"0bf3ec19-0162-44f2-855f-1b7fdb565de2","year":2024},"citing_paper":{"arxiv_id":"2604.24118","last_updated":"2026-04-27T07:12:52Z","snapshot_observed_at":"2026-07-30T05:21:40.679953Z","submitted_at":"2026-04-27T07:12:52Z","title":"AgentVisor: Defending LLM Agents Against Prompt Injection via Semantic Virtualization","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-05-08T03:07:21.524834Z"},"links":{"cited_paper":"/paper/2403.04957","citing_paper":"/paper/2604.24118"},"observation_digest":"sha256:99de7927b845eef804c40a814c364c5622f688437b906d67394d23d810cd803d","observation_id":"0758cb4a-9c1a-4ce4-84da-61f3390ff217","resolution":{"observed_at":"2026-05-11T22:16:30.268382Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04957","last_updated":"2024-03-07T23:46:20Z","snapshot_observed_at":"2026-08-08T04:50:42.660630Z","submitted_at":"2024-03-07T23:46:20Z","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models","version":1},"cited_work":{"arxiv_id":"2403.04957","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2403.04957","snapshot_observed_at":"2026-07-04T14:09:53.868428Z","title":"Automatic and universal prompt injection attacks against large language models","venue":null,"work_id":"0bf3ec19-0162-44f2-855f-1b7fdb565de2","year":2024},"citing_paper":{"arxiv_id":"2604.28157","last_updated":"2026-04-30T17:43:24Z","snapshot_observed_at":"2026-07-06T23:13:29.310140Z","submitted_at":"2026-04-30T17:43:24Z","title":"FlashRT: Towards Computationally and Memory Efficient Red-Teaming for Prompt Injection and Knowledge Corruption","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-05-07T06:49:56.316472Z"},"links":{"cited_paper":"/paper/2403.04957","citing_paper":"/paper/2604.28157"},"observation_digest":"sha256:95359723770e9ca66b0e3b86a48d04ec3c7e913e1bb6b20d653f72cf083d2ded","observation_id":"ba91c73c-6ae4-49b0-a59a-86a788265c5b","resolution":{"observed_at":"2026-05-12T10:16:28.309477Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04957","last_updated":"2024-03-07T23:46:20Z","snapshot_observed_at":"2026-08-08T04:50:42.660630Z","submitted_at":"2024-03-07T23:46:20Z","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models","version":1},"cited_work":{"arxiv_id":"2403.04957","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2403.04957","snapshot_observed_at":"2026-07-04T14:09:53.868428Z","title":"Automatic and universal prompt injection attacks against large language models","venue":null,"work_id":"0bf3ec19-0162-44f2-855f-1b7fdb565de2","year":2024},"citing_paper":{"arxiv_id":"2605.05846","last_updated":"2026-05-07T08:21:51Z","snapshot_observed_at":"2026-08-02T22:13:21.752885Z","submitted_at":"2026-05-07T08:21:51Z","title":"LoopTrap: Termination Poisoning Attacks on LLM Agents","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-05-08T09:25:11.059634Z"},"links":{"cited_paper":"/paper/2403.04957","citing_paper":"/paper/2605.05846"},"observation_digest":"sha256:cf553e96fe549422cc888a29e7a5ac1221be31a8cd3c2172967504baedc5c1ae","observation_id":"fc59cb35-51f7-43e1-b7e6-15f75d0971a1","resolution":{"observed_at":"2026-05-11T20:21:10.453091Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04957","last_updated":"2024-03-07T23:46:20Z","snapshot_observed_at":"2026-08-08T04:50:42.660630Z","submitted_at":"2024-03-07T23:46:20Z","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models","version":1},"cited_work":{"arxiv_id":"2403.04957","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2403.04957","snapshot_observed_at":"2026-07-04T14:09:53.868428Z","title":"Automatic and universal prompt injection attacks against large language models","venue":null,"work_id":"0bf3ec19-0162-44f2-855f-1b7fdb565de2","year":2024},"citing_paper":{"arxiv_id":"2605.11514","last_updated":"2026-05-12T04:35:57Z","snapshot_observed_at":"2026-08-09T15:49:14.628912Z","submitted_at":"2026-05-12T04:35:57Z","title":"FlowSteer: Prompt-Only Workflow Steering Exposes Planning-Time Vulnerabilities in Multi-Agent LLM Systems","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-05-13T01:57:31.681480Z"},"links":{"cited_paper":"/paper/2403.04957","citing_paper":"/paper/2605.11514"},"observation_digest":"sha256:b3c327601ac0cd6123734eaaecdd83ed2c8285305ec82418824960d2402610e0","observation_id":"74ef6be6-1a74-4257-a403-458a4761f635","resolution":{"observed_at":"2026-05-13T02:07:08.987404Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04957","last_updated":"2024-03-07T23:46:20Z","snapshot_observed_at":"2026-08-08T04:50:42.660630Z","submitted_at":"2024-03-07T23:46:20Z","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models","version":1},"cited_work":{"arxiv_id":"2403.04957","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2403.04957","snapshot_observed_at":"2026-07-04T14:09:53.868428Z","title":"Automatic and universal prompt injection attacks against large language models","venue":null,"work_id":"0bf3ec19-0162-44f2-855f-1b7fdb565de2","year":2024},"citing_paper":{"arxiv_id":"2605.16090","last_updated":"2026-05-15T15:47:41Z","snapshot_observed_at":"2026-08-08T23:04:25.950675Z","submitted_at":"2026-05-15T15:47:41Z","title":"A Cross-Modal Prompt Injection Attack against Large Vision-Language Models with Image-Only Perturbation","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-05-20T17:20:54.445007Z"},"links":{"cited_paper":"/paper/2403.04957","citing_paper":"/paper/2605.16090"},"observation_digest":"sha256:d49e9bfd94c19e9bf5ece68537ed68d8f070d9d8d6b99e302e45492b5ea9dced","observation_id":"53a783df-662d-4544-bc55-0476f227bbd4","resolution":{"observed_at":"2026-05-20T17:23:36.817531Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04957","last_updated":"2024-03-07T23:46:20Z","snapshot_observed_at":"2026-08-08T04:50:42.660630Z","submitted_at":"2024-03-07T23:46:20Z","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models","version":1},"cited_work":{"arxiv_id":"2403.04957","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2403.04957","snapshot_observed_at":"2026-07-04T14:09:53.868428Z","title":"Automatic and universal prompt injection attacks against large language models","venue":null,"work_id":"0bf3ec19-0162-44f2-855f-1b7fdb565de2","year":2024},"citing_paper":{"arxiv_id":"2605.26497","last_updated":"2026-05-26T03:20:23Z","snapshot_observed_at":"2026-07-06T23:36:20.072253Z","submitted_at":"2026-05-26T03:20:23Z","title":"Aligning Provenance with Authorization: A Dual-Graph Defense for LLM Agents","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-06-29T17:36:40.290498Z"},"links":{"cited_paper":"/paper/2403.04957","citing_paper":"/paper/2605.26497"},"observation_digest":"sha256:cf7bd38197a16192d86cd799139c08c5f92d9b0454e310b13d0cfab962470953","observation_id":"9ac646db-f3bd-4e33-9b9d-5b0397533efe","resolution":{"observed_at":"2026-06-29T18:03:48.480356Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04957","last_updated":"2024-03-07T23:46:20Z","snapshot_observed_at":"2026-08-08T04:50:42.660630Z","submitted_at":"2024-03-07T23:46:20Z","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models","version":1},"cited_work":{"arxiv_id":"2403.04957","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2403.04957","snapshot_observed_at":"2026-07-04T14:09:53.868428Z","title":"Automatic and universal prompt injection attacks against large language models","venue":null,"work_id":"0bf3ec19-0162-44f2-855f-1b7fdb565de2","year":2024},"citing_paper":{"arxiv_id":"2605.28999","last_updated":"2026-05-27T18:56:19Z","snapshot_observed_at":"2026-07-06T23:38:27.990823Z","submitted_at":"2026-05-27T18:56:19Z","title":"Measuring Real-World Prompt Injection Attacks in LLM-based Resume Screening","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-06-29T11:16:52.024973Z"},"links":{"cited_paper":"/paper/2403.04957","citing_paper":"/paper/2605.28999"},"observation_digest":"sha256:6eaed14cae5c50b7a214f0a0422a435fb2da4d5bb3d71b6f4deb0fba59bd8470","observation_id":"8fbe5b62-e271-4ffb-ac7d-91a3974b8609","resolution":{"observed_at":"2026-06-29T11:23:21.322899Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04957","last_updated":"2024-03-07T23:46:20Z","snapshot_observed_at":"2026-08-08T04:50:42.660630Z","submitted_at":"2024-03-07T23:46:20Z","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models","version":1},"cited_work":{"arxiv_id":"2403.04957","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2403.04957","snapshot_observed_at":"2026-07-04T14:09:53.868428Z","title":"Automatic and universal prompt injection attacks against large language models","venue":null,"work_id":"0bf3ec19-0162-44f2-855f-1b7fdb565de2","year":2024},"citing_paper":{"arxiv_id":"2606.12737","last_updated":"2026-06-10T22:57:02Z","snapshot_observed_at":"2026-07-06T23:51:35.904251Z","submitted_at":"2026-06-10T22:57:02Z","title":"PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections","version":1},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-06-27T08:56:12.882653Z"},"links":{"cited_paper":"/paper/2403.04957","citing_paper":"/paper/2606.12737"},"observation_digest":"sha256:cf1f7ad81d312aff7d766dc8d4aa8071864becf05ee903c95b6a4deb3f3b647b","observation_id":"dd1de3f3-e303-4ea7-a748-b0fb390096e8","resolution":{"observed_at":"2026-07-03T12:38:07.281630Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04957","last_updated":"2024-03-07T23:46:20Z","snapshot_observed_at":"2026-08-08T04:50:42.660630Z","submitted_at":"2024-03-07T23:46:20Z","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models","version":1},"cited_work":{"arxiv_id":"2403.04957","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2403.04957","snapshot_observed_at":"2026-07-04T14:09:53.868428Z","title":"Automatic and universal prompt injection attacks against large language models","venue":null,"work_id":"0bf3ec19-0162-44f2-855f-1b7fdb565de2","year":2024},"citing_paper":{"arxiv_id":"2606.15057","last_updated":"2026-06-19T04:47:48Z","snapshot_observed_at":"2026-08-06T02:12:16.016081Z","submitted_at":"2026-06-13T02:09:08Z","title":"AutoDojo: Adaptive Black-Box Attacks Reveal the Limits of IPI Defenses and Task-Specification Effects in LLM Agents","version":2},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-06-27T04:57:54.827932Z"},"links":{"cited_paper":"/paper/2403.04957","citing_paper":"/paper/2606.15057"},"observation_digest":"sha256:510bcdadfa318ff909fb51d145203530a6e347c8737d442b222e7abd1c3f2621","observation_id":"a0547398-f7d4-412f-b5f7-ad90e615975f","resolution":{"observed_at":"2026-07-03T16:48:40.535730Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04957","last_updated":"2024-03-07T23:46:20Z","snapshot_observed_at":"2026-08-08T04:50:42.660630Z","submitted_at":"2024-03-07T23:46:20Z","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models","version":1},"cited_work":{"arxiv_id":"2403.04957","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2403.04957","snapshot_observed_at":"2026-07-04T14:09:53.868428Z","title":"Automatic and universal prompt injection attacks against large language models","venue":null,"work_id":"0bf3ec19-0162-44f2-855f-1b7fdb565de2","year":2024},"citing_paper":{"arxiv_id":"2606.27287","last_updated":"2026-06-25T17:04:51Z","snapshot_observed_at":"2026-08-02T15:51:42.031350Z","submitted_at":"2026-06-25T17:04:51Z","title":"Prompt Injection in Automated R\\'esum\\'e Screening with Large Language Models: Single and Multi-Injection Settings","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-06-26T04:23:37.914215Z"},"links":{"cited_paper":"/paper/2403.04957","citing_paper":"/paper/2606.27287"},"observation_digest":"sha256:a5bc45f4d705cce56e16cef03f1cb0b90735ef315b189e70e3a472fcf04f6aaa","observation_id":"113ff2ba-f2ac-41fe-be99-ea424581b7b6","resolution":{"observed_at":"2026-07-04T14:09:53.870010Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04957","last_updated":"2024-03-07T23:46:20Z","snapshot_observed_at":"2026-08-08T04:50:42.660630Z","submitted_at":"2024-03-07T23:46:20Z","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.04957","snapshot_observed_at":"2026-07-14T13:02:42.673767Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.10269","last_updated":"2026-07-11T11:56:05Z","snapshot_observed_at":"2026-08-06T13:53:30.569509Z","submitted_at":"2026-07-11T11:56:05Z","title":"Devil in the Lens: Analyzing and Defending Physical Prompt Injection Against Vision-Language Models on Wearable Devices","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-07-14T13:02:42.673767Z"},"links":{"cited_paper":"/paper/2403.04957","citing_paper":"/paper/2607.10269"},"observation_digest":"sha256:0c713e16fc8681af97a21612ddde37a3fcc96d6e512243af2fce49a74f1e2837","observation_id":"032d25df-0e38-490a-aeff-8a46e75190c9","resolution":{"observed_at":"2026-07-14T13:02:42.673767Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04957","last_updated":"2024-03-07T23:46:20Z","snapshot_observed_at":"2026-08-08T04:50:42.660630Z","submitted_at":"2024-03-07T23:46:20Z","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.04957","snapshot_observed_at":"2026-08-01T22:55:46.994600Z","title":"Automatic and universal prompt injection attacks against large language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.15596","last_updated":"2026-07-23T05:16:37Z","snapshot_observed_at":"2026-08-04T19:26:11.022242Z","submitted_at":"2026-07-17T03:44:05Z","title":"From Neural Intent to Cryptographic Authorization: Securing AI-Driven Enterprise Workflows","version":2},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-01T22:55:46.994600Z"},"links":{"cited_paper":"/paper/2403.04957","citing_paper":"/paper/2607.15596"},"observation_digest":"sha256:4cc432d54bff949e9aa72dc34530312d063c55b9a4b9d9f6075d8fa26dc81bfd","observation_id":"9916d3ed-d2d1-4b3a-9855-7df8b8338b03","resolution":{"observed_at":"2026-08-01T22:55:46.994600Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04957","last_updated":"2024-03-07T23:46:20Z","snapshot_observed_at":"2026-08-08T04:50:42.660630Z","submitted_at":"2024-03-07T23:46:20Z","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.04957","snapshot_observed_at":"2026-08-01T12:54:34.702508Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.19292","last_updated":"2026-07-21T17:02:37Z","snapshot_observed_at":"2026-08-09T18:07:49.749835Z","submitted_at":"2026-07-21T17:02:37Z","title":"The safety failures we are not instrumenting: a perspective on hidden safety-critical challenges in modern AI systems","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-01T12:54:34.702508Z"},"links":{"cited_paper":"/paper/2403.04957","citing_paper":"/paper/2607.19292"},"observation_digest":"sha256:fa0bb29fd49b5ce992b51e88ec3c4a6333fb16dd997b5c4cbdaf515014e2918b","observation_id":"e01e3bc2-893a-4045-b634-0ad6af8f1353","resolution":{"observed_at":"2026-08-01T12:54:34.702508Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04957","last_updated":"2024-03-07T23:46:20Z","snapshot_observed_at":"2026-08-08T04:50:42.660630Z","submitted_at":"2024-03-07T23:46:20Z","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.04957","snapshot_observed_at":"2026-08-05T00:25:59.525435Z","title":"Automatic and universal prompt injection attacks against large language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.00747","last_updated":"2026-08-04T16:20:03Z","snapshot_observed_at":"2026-08-07T23:11:48.110574Z","submitted_at":"2026-08-01T16:31:00Z","title":"When Prompts Control Robots: Prompt Injection Attacks in Multi-Agent Robotic Systems","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-05T00:25:59.525435Z"},"links":{"cited_paper":"/paper/2403.04957","citing_paper":"/paper/2608.00747"},"observation_digest":"sha256:a74f9f7bf65cdabce594258b7362c2060d4761794ac6d5ef61490477aa54fc01","observation_id":"e8fef1f8-3d84-47fb-ad9c-b4e362f19cb2","resolution":{"observed_at":"2026-08-05T00:25:59.525435Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04957","last_updated":"2024-03-07T23:46:20Z","snapshot_observed_at":"2026-08-08T04:50:42.660630Z","submitted_at":"2024-03-07T23:46:20Z","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.04957","snapshot_observed_at":"2026-08-05T04:17:02.594840Z","title":"Automatic and universal prompt injection attacks against large language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.00747","last_updated":"2026-08-04T16:20:03Z","snapshot_observed_at":"2026-08-07T23:11:48.110574Z","submitted_at":"2026-08-01T16:31:00Z","title":"When Prompts Control Robots: Prompt Injection Attacks in Multi-Agent Robotic Systems","version":2},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-05T04:17:02.594840Z"},"links":{"cited_paper":"/paper/2403.04957","citing_paper":"/paper/2608.00747"},"observation_digest":"sha256:e442a664a8c2bd8a0ba612062362b7d2a08e0328b5e876227e4c9532533a1354","observation_id":"7b3561d9-29b1-40cc-91cb-e557b307c12c","resolution":{"observed_at":"2026-08-05T04:17:02.594840Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04957","last_updated":"2024-03-07T23:46:20Z","snapshot_observed_at":"2026-08-08T04:50:42.660630Z","submitted_at":"2024-03-07T23:46:20Z","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.04957","snapshot_observed_at":"2026-08-08T13:19:01.860743Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.05430","last_updated":"2026-08-05T21:44:44Z","snapshot_observed_at":"2026-08-09T23:10:49.394955Z","submitted_at":"2026-08-05T21:44:44Z","title":"Robust Context-Aware Detection of Malicious Instructions in Text","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-08T13:19:01.860743Z"},"links":{"cited_paper":"/paper/2403.04957","citing_paper":"/paper/2608.05430"},"observation_digest":"sha256:223a25327d988e00f726b76043a495ae8b93bc0ed8763052f210dd2ad897279a","observation_id":"68e00c90-cd07-4567-a3dc-f7ffb980e559","resolution":{"observed_at":"2026-08-08T13:19:01.860743Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2403.04957/citation-record","integrity":"/paper/2403.04957/integrity","json":"/paper/2403.04957/citation-record.json","paper":"/paper/2403.04957"},"outbound":[],"paper":{"arxiv_id":"2403.04957","last_updated":"2024-03-07T23:46:20Z","latest_version":1,"primary_category":"cs.AI","snapshot_observed_at":"2026-08-08T04:50:42.660630Z","submitted_at":"2024-03-07T23:46:20Z","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 10 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 46 inbound Pith citation observations for arXiv:2403.04957."}