{"as_of":"2026-08-09T19:33:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:cb5417821a755d22f1a101c3b019ec23dbe38b37fc9773afcf6ef11e3b529114","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":8,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":8,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":8,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":8,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T12:42:16.635079Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-05-23T04:42:34.024447Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2404.07234","last_updated":"2024-11-09T04:01:22Z","snapshot_observed_at":"2026-08-09T06:49:45.084464Z","submitted_at":"2024-04-06T06:17:10Z","title":"Goal-guided Generative Prompt Injection Attack on Large Language Models","version":4},"cited_work":{"arxiv_id":"2404.07234","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2404.07234","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Goal-guided generative prompt injection attack on large language models","venue":null,"work_id":"ad328943-30bb-4520-ab31-78f705c641da","year":2024},"citing_paper":{"arxiv_id":"2502.05206","last_updated":"2026-04-14T16:10:41Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-02-02T05:14:22Z","title":"Safety at Scale: A Comprehensive Survey of Large Model and Agent Safety","version":6},"reference_index":132,"source":"pdf_text","source_observed_at":"2026-05-23T04:39:04.591722Z"},"links":{"cited_paper":"/paper/2404.07234","citing_paper":"/paper/2502.05206"},"observation_digest":"sha256:762d8244a8893eb5d25dd163ebb14885a42f084399dad0d84f1a74548371b47d","observation_id":"dc7bafab-11b4-44f4-85b1-23c9474a078c","resolution":{"observed_at":"2026-05-23T04:42:34.027819Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.07234","last_updated":"2024-11-09T04:01:22Z","snapshot_observed_at":"2026-08-09T06:49:45.084464Z","submitted_at":"2024-04-06T06:17:10Z","title":"Goal-guided Generative Prompt Injection Attack on Large Language Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.07234","snapshot_observed_at":"2026-08-07T12:42:16.635079Z","title":"Goal-guided generative prompt injection attack on large language models.arXiv preprint arXiv:2404.07234, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:16.635079Z"},"links":{"cited_paper":"/paper/2404.07234","citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:39e6eea9908ceb9994774ebcd87f17141724ba2de0023628fcc9a69843549e3a","observation_id":"4adf505c-776b-47ab-bae3-822d609394ca","resolution":{"observed_at":"2026-08-07T12:42:16.635079Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.07234","last_updated":"2024-11-09T04:01:22Z","snapshot_observed_at":"2026-08-09T06:49:45.084464Z","submitted_at":"2024-04-06T06:17:10Z","title":"Goal-guided Generative Prompt Injection Attack on Large Language Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.07234","snapshot_observed_at":"2026-08-06T15:48:58.642580Z","title":"Goal-guided Generative Prompt Injection Attack on Large Language Models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-09T07:51:23.800410Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-06T15:48:58.642580Z"},"links":{"cited_paper":"/paper/2404.07234","citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:4c68d8f5c2690f7ecbfce6a69c575a7b8ff873bef5ab2ddff42f9a178d9915df","observation_id":"91050d90-8900-4fe2-a68c-2446cd62a221","resolution":{"observed_at":"2026-08-06T15:48:58.642580Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.07234","last_updated":"2024-11-09T04:01:22Z","snapshot_observed_at":"2026-08-09T06:49:45.084464Z","submitted_at":"2024-04-06T06:17:10Z","title":"Goal-guided Generative Prompt Injection Attack on Large Language Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.07234","snapshot_observed_at":"2026-08-06T05:05:02.902587Z","title":"Goal- guided generative prompt injection attack on large language models","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2508.02312","last_updated":"2025-08-04T11:28:34Z","snapshot_observed_at":"2026-08-07T17:54:58.202973Z","submitted_at":"2025-08-04T11:28:34Z","title":"A Survey on Data Security in Large Language Models","version":1},"reference_index":76,"source":"pdf_text","source_observed_at":"2026-08-06T05:05:02.902587Z"},"links":{"cited_paper":"/paper/2404.07234","citing_paper":"/paper/2508.02312"},"observation_digest":"sha256:d48a44eb11dfd633954069105063f6093f6126c49d2cf7e84af0281696dbc952","observation_id":"33601c6c-39af-4503-bfa5-6df128abc4ba","resolution":{"observed_at":"2026-08-06T05:05:02.902587Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.07234","last_updated":"2024-11-09T04:01:22Z","snapshot_observed_at":"2026-08-09T06:49:45.084464Z","submitted_at":"2024-04-06T06:17:10Z","title":"Goal-guided Generative Prompt Injection Attack on Large Language Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.07234","snapshot_observed_at":"2026-08-05T16:50:30.014754Z","title":"arXiv preprint arXiv:2404.07234 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.19287","last_updated":"2025-08-25T05:20:11Z","snapshot_observed_at":"2026-08-09T06:50:20.259382Z","submitted_at":"2025-08-25T05:20:11Z","title":"Prompt-in-Content Attacks: Exploiting Uploaded Inputs to Hijack LLM Behavior","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-05T16:50:30.014754Z"},"links":{"cited_paper":"/paper/2404.07234","citing_paper":"/paper/2508.19287"},"observation_digest":"sha256:b28efb3769b283343c2f9881e59a16a8033308c3c3d2f1e0e9ec4e18a3d6411a","observation_id":"fc15fc42-8896-4481-8e38-5ef69530383c","resolution":{"observed_at":"2026-08-05T16:50:30.014754Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.07234","last_updated":"2024-11-09T04:01:22Z","snapshot_observed_at":"2026-08-09T06:49:45.084464Z","submitted_at":"2024-04-06T06:17:10Z","title":"Goal-guided Generative Prompt Injection Attack on Large Language Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.07234","snapshot_observed_at":"2026-08-05T04:56:25.024461Z","title":"Goal-guided Genera- tive Prompt Injection Attack on Large Language Models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.05883","last_updated":"2025-09-07T01:11:10Z","snapshot_observed_at":"2026-08-09T06:41:28.953311Z","submitted_at":"2025-09-07T01:11:10Z","title":"Multimodal Prompt Injection Attacks: Risks and Defenses for Modern LLMs","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-05T04:56:25.024461Z"},"links":{"cited_paper":"/paper/2404.07234","citing_paper":"/paper/2509.05883"},"observation_digest":"sha256:bd46ac825d6bcb0d200e2effe08c8b4c8d3d010df1fc6d4dbe711d70d5b508fd","observation_id":"320562d3-da33-4971-873a-9a2b35969801","resolution":{"observed_at":"2026-08-05T04:56:25.024461Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.07234","last_updated":"2024-11-09T04:01:22Z","snapshot_observed_at":"2026-08-09T06:49:45.084464Z","submitted_at":"2024-04-06T06:17:10Z","title":"Goal-guided Generative Prompt Injection Attack on Large Language Models","version":4},"cited_work":{"arxiv_id":"2404.07234","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2404.07234","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Goal-guided generative prompt injection attack on large language models","venue":null,"work_id":"ad328943-30bb-4520-ab31-78f705c641da","year":2024},"citing_paper":{"arxiv_id":"2605.05846","last_updated":"2026-05-07T08:21:51Z","snapshot_observed_at":"2026-08-02T22:13:21.752885Z","submitted_at":"2026-05-07T08:21:51Z","title":"LoopTrap: Termination Poisoning Attacks on LLM Agents","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-05-08T09:25:11.059634Z"},"links":{"cited_paper":"/paper/2404.07234","citing_paper":"/paper/2605.05846"},"observation_digest":"sha256:867d964c3354bcdbe0e766b2f24666773bc1556a35997163f41643827cb8c537","observation_id":"260ff9b3-f50e-479c-8776-3c21e8797206","resolution":{"observed_at":"2026-05-11T20:21:10.605747Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.07234","last_updated":"2024-11-09T04:01:22Z","snapshot_observed_at":"2026-08-09T06:49:45.084464Z","submitted_at":"2024-04-06T06:17:10Z","title":"Goal-guided Generative Prompt Injection Attack on Large Language Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.07234","snapshot_observed_at":"2026-08-01T08:37:35.393633Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.27373","last_updated":"2026-07-29T18:25:30Z","snapshot_observed_at":"2026-08-07T20:54:40.976131Z","submitted_at":"2026-07-29T18:25:30Z","title":"RoguePrompt: Dual-Layer Encoding for Self-Reconstruction to Circumvent LLM Moderation","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-01T08:37:35.393633Z"},"links":{"cited_paper":"/paper/2404.07234","citing_paper":"/paper/2607.27373"},"observation_digest":"sha256:fc6654c3d1b8fdb4a5d7a0dff8d99ebdeff530edda65b9523f36bcea363550bf","observation_id":"2fb13ad4-c364-47b5-a160-3161ae2959b5","resolution":{"observed_at":"2026-08-01T08:37:35.393633Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2404.07234/citation-record","integrity":"/paper/2404.07234/integrity","json":"/paper/2404.07234/citation-record.json","paper":"/paper/2404.07234"},"outbound":[],"paper":{"arxiv_id":"2404.07234","last_updated":"2024-11-09T04:01:22Z","latest_version":4,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-09T06:49:45.084464Z","submitted_at":"2024-04-06T06:17:10Z","title":"Goal-guided Generative Prompt Injection Attack on Large Language Models"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 8 inbound Pith citation observations for arXiv:2404.07234."}