{"as_of":"2026-08-06T17:25:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:003780b6171c3204da9f63b7021bb1563c0a310de72bb66ca3e61350149b9be0","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":4,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":4,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-06T06:34:29.942622+00:00","state":"measured"},{"denominator":4,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":4,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T16:34:04.667309Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-05-23T04:42:33.827526Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2404.17196","last_updated":"2024-04-26T07:11:18Z","snapshot_observed_at":"2026-07-06T18:05:59.538624Z","submitted_at":"2024-04-26T07:11:18Z","title":"Human-Imperceptible Retrieval Poisoning Attacks in LLM-Powered Applications","version":1},"cited_work":{"arxiv_id":"2404.17196","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2404.17196","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Human- imperceptible retrieval poisoning attacks in llm-powered applications","venue":null,"work_id":"af99674b-48ff-4384-b356-783b74a52afe","year":2024},"citing_paper":{"arxiv_id":"2502.05206","last_updated":"2026-04-14T16:10:41Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-02-02T05:14:22Z","title":"Safety at Scale: A Comprehensive Survey of Large Model and Agent Safety","version":6},"reference_index":155,"source":"pdf_text","source_observed_at":"2026-05-23T04:39:04.591722Z"},"links":{"cited_paper":"/paper/2404.17196","citing_paper":"/paper/2502.05206"},"observation_digest":"sha256:5833f605444e62afb393f685bf57085749f0a2fafbb1d6d24fe5a1bf65a231c7","observation_id":"8e1efca5-eb5a-4bbd-844a-a416b13b7bf2","resolution":{"observed_at":"2026-05-23T04:42:33.830584Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.17196","last_updated":"2024-04-26T07:11:18Z","snapshot_observed_at":"2026-07-06T18:05:59.538624Z","submitted_at":"2024-04-26T07:11:18Z","title":"Human-Imperceptible Retrieval Poisoning Attacks in LLM-Powered Applications","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.17196","snapshot_observed_at":"2026-08-06T16:34:04.667309Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.13169","last_updated":"2025-07-17T14:33:36Z","snapshot_observed_at":"2026-08-06T16:26:27.439425Z","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-06T16:34:04.667309Z"},"links":{"cited_paper":"/paper/2404.17196","citing_paper":"/paper/2507.13169"},"observation_digest":"sha256:279061eea0032ff33572dc19ffdd77fe0bcd7e69e58b2947caca7ad38617ddd8","observation_id":"fb31b710-e5d8-497a-9bb8-b335be88601d","resolution":{"observed_at":"2026-08-06T16:34:04.667309Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.17196","last_updated":"2024-04-26T07:11:18Z","snapshot_observed_at":"2026-07-06T18:05:59.538624Z","submitted_at":"2024-04-26T07:11:18Z","title":"Human-Imperceptible Retrieval Poisoning Attacks in LLM-Powered Applications","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.17196","snapshot_observed_at":"2026-08-05T20:31:47.179130Z","title":"Human- imperceptible retrieval poisoning attacks in llm-powered applications","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.10404","last_updated":"2025-08-14T07:12:44Z","snapshot_observed_at":"2026-08-05T20:31:28.198027Z","submitted_at":"2025-08-14T07:12:44Z","title":"Layer-Wise Perturbations via Sparse Autoencoders for Adversarial Text Generation","version":1},"reference_index":159,"source":"pdf_text","source_observed_at":"2026-08-05T20:31:47.179130Z"},"links":{"cited_paper":"/paper/2404.17196","citing_paper":"/paper/2508.10404"},"observation_digest":"sha256:d916acc7bdb955585096323783bf77e1a8510d573db6daed84b584b8dbdc4e96","observation_id":"ef2e4133-6a35-4bbc-9ad0-bd22aa77e724","resolution":{"observed_at":"2026-08-05T20:31:47.179130Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.17196","last_updated":"2024-04-26T07:11:18Z","snapshot_observed_at":"2026-07-06T18:05:59.538624Z","submitted_at":"2024-04-26T07:11:18Z","title":"Human-Imperceptible Retrieval Poisoning Attacks in LLM-Powered Applications","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.17196","snapshot_observed_at":"2026-08-05T22:07:42.380854Z","title":"arXiv:2404.17196 https://arxiv.org/abs/2404.17196","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-06T17:09:45.905481Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":78,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.380854Z"},"links":{"cited_paper":"/paper/2404.17196","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:e083b1d78f26f400996dfd3db42340ad76cfb1dd0d9413f1a23d070feac4f5b7","observation_id":"85c35185-f384-4a9f-8229-133d41cc3ed6","resolution":{"observed_at":"2026-08-05T22:07:42.380854Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2404.17196/citation-record","integrity":"/paper/2404.17196/integrity","json":"/paper/2404.17196/citation-record.json","paper":"/paper/2404.17196"},"outbound":[],"paper":{"arxiv_id":"2404.17196","last_updated":"2024-04-26T07:11:18Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-07-06T18:05:59.538624Z","submitted_at":"2024-04-26T07:11:18Z","title":"Human-Imperceptible Retrieval Poisoning Attacks in LLM-Powered Applications"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"thesis":"As of 6 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 4 inbound Pith citation observations for arXiv:2404.17196."}