{"as_of":"2026-08-20T06:19:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:89fcabf23b3d598fb3d93bb7bb7534ed2ff2d035c3aa5ad97ed318039fc4baba","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":5,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":5,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-19T06:32:44.657259+00:00","state":"measured"},{"denominator":5,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":5,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-15T23:23:39.954343Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":1,"source":"arxiv_reference","source_observed_at":"2026-08-05T02:28:24.338817Z","state":"measured"}],"external_citation_measurements":[{"count":0,"observed_at":"2026-08-05T02:28:24.338817Z","source":"arxiv_reference"}],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2406.18122","last_updated":"2024-06-26T07:21:02Z","snapshot_observed_at":"2026-08-16T13:39:32.496515Z","submitted_at":"2024-06-26T07:21:02Z","title":"Poisoned LangChain: Jailbreak LLMs by LangChain","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.18122","snapshot_observed_at":"2026-08-08T19:15:25.643204Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.06872","last_updated":"2025-02-08T06:50:47Z","snapshot_observed_at":"2026-08-16T08:10:55.902848Z","submitted_at":"2025-02-08T06:50:47Z","title":"Towards Trustworthy Retrieval Augmented Generation for Large Language Models: A Survey","version":1},"reference_index":187,"source":"pdf_text","source_observed_at":"2026-08-08T19:15:25.643204Z"},"links":{"cited_paper":"/paper/2406.18122","citing_paper":"/paper/2502.06872"},"observation_digest":"sha256:39a7a927defeba28ae438fe2f6f4498659b03da5abfbd0b80bf20d2ce43ddb36","observation_id":"32210139-1d73-4a6f-9763-1f73d4151df8","resolution":{"observed_at":"2026-08-08T19:15:25.643204Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.18122","last_updated":"2024-06-26T07:21:02Z","snapshot_observed_at":"2026-08-16T13:39:32.496515Z","submitted_at":"2024-06-26T07:21:02Z","title":"Poisoned LangChain: Jailbreak LLMs by LangChain","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.18122","snapshot_observed_at":"2026-08-15T23:23:39.954343Z","title":"”Poisoned LangChain: Jailbreak LLMs by LangChain.” arXiv preprint arXiv:2406.18122 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.04806","last_updated":"2025-05-13T05:36:34Z","snapshot_observed_at":"2026-08-16T21:53:39.240862Z","submitted_at":"2025-05-07T21:15:40Z","title":"Red Teaming the Mind of the Machine: A Systematic Evaluation of Prompt Injection and Jailbreak Vulnerabilities in LLMs","version":2},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-15T23:23:39.954343Z"},"links":{"cited_paper":"/paper/2406.18122","citing_paper":"/paper/2505.04806"},"observation_digest":"sha256:0ee9040e27f45299a7e595e0cb516763e98d05c9a3e8f091ad2c09147b734b82","observation_id":"909188c5-1b7a-43a9-96ee-eae7748e2c36","resolution":{"observed_at":"2026-08-15T23:23:39.954343Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.18122","last_updated":"2024-06-26T07:21:02Z","snapshot_observed_at":"2026-08-16T13:39:32.496515Z","submitted_at":"2024-06-26T07:21:02Z","title":"Poisoned LangChain: Jailbreak LLMs by LangChain","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.18122","snapshot_observed_at":"2026-08-04T09:25:57.489185Z","title":"Poisoned langchain: Jailbreak llms by langchain.CoRR, abs/2406.18122, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.15476","last_updated":"2026-07-04T04:20:15Z","snapshot_observed_at":"2026-08-14T22:20:04.981358Z","submitted_at":"2025-10-17T09:38:54Z","title":"SoK: Systematizing LLM Prompt Security: Taxonomies, Datasets, and Unified Evaluation of Attacks and Defenses","version":3},"reference_index":195,"source":"pdf_text","source_observed_at":"2026-08-04T09:25:57.489185Z"},"links":{"cited_paper":"/paper/2406.18122","citing_paper":"/paper/2510.15476"},"observation_digest":"sha256:44041701aaee876238f904d5013659b7928150927d6e6de69f9c0771986ed36a","observation_id":"da2b7745-bfdd-46b8-9f57-883379a4e22f","resolution":{"observed_at":"2026-08-04T09:25:57.489185Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.18122","last_updated":"2024-06-26T07:21:02Z","snapshot_observed_at":"2026-08-16T13:39:32.496515Z","submitted_at":"2024-06-26T07:21:02Z","title":"Poisoned LangChain: Jailbreak LLMs by LangChain","version":1},"cited_work":{"arxiv_id":"2406.18122","doi":"10.48550/arxiv.2406.18122","metadata_source":"arxiv_reference","pith_arxiv_id":"2406.18122","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"doi:10.48550/arXiv.2406.18122","venue":"arXiv (Cornell University)","work_id":"74ec7bea-c26f-4ace-adc5-2d5d5c27b3ae","year":2024},"citing_paper":{"arxiv_id":"2605.12916","last_updated":"2026-05-13T02:44:08Z","snapshot_observed_at":"2026-08-12T20:45:55.131165Z","submitted_at":"2026-05-13T02:44:08Z","title":"SHM-Agents: A Generalist-Specialist Integrated Agent System for Structural Health Monitoring","version":1},"reference_index":45,"source":"arxiv_source","source_observed_at":"2026-06-30T21:50:07.617384Z"},"links":{"cited_paper":"/paper/2406.18122","citing_paper":"/paper/2605.12916"},"observation_digest":"sha256:86def89fa16c8583ad6c026af0ca54ef15ddf2e77cc8f6ffdc42cca643a8d45c","observation_id":"81f83170-55cb-43cd-ba14-e3f27992da2d","resolution":{"observed_at":"2026-06-30T21:55:04.909273Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.18122","last_updated":"2024-06-26T07:21:02Z","snapshot_observed_at":"2026-08-16T13:39:32.496515Z","submitted_at":"2024-06-26T07:21:02Z","title":"Poisoned LangChain: Jailbreak LLMs by LangChain","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.18122","snapshot_observed_at":"2026-07-30T12:03:28.959083Z","title":"Poisoned","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.23804","last_updated":"2026-08-10T14:40:35Z","snapshot_observed_at":"2026-08-13T23:40:25.799293Z","submitted_at":"2026-07-26T19:06:29Z","title":"How Context Attribution Handles What the Model Already Knows","version":1},"reference_index":184,"source":"arxiv_source","source_observed_at":"2026-07-30T12:03:28.959083Z"},"links":{"cited_paper":"/paper/2406.18122","citing_paper":"/paper/2607.23804"},"observation_digest":"sha256:ae2a18a2521d0987685527690c349d36304f4c2ef094817599303f59d5c8358f","observation_id":"609ee892-9836-41a3-b62e-49644f4475fa","resolution":{"observed_at":"2026-07-30T12:03:28.959083Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2406.18122/citation-record","integrity":"/paper/2406.18122/integrity","json":"/paper/2406.18122/citation-record.json","paper":"/paper/2406.18122"},"outbound":[],"paper":{"arxiv_id":"2406.18122","last_updated":"2024-06-26T07:21:02Z","latest_version":1,"primary_category":"cs.CL","snapshot_observed_at":"2026-08-16T13:39:32.496515Z","submitted_at":"2024-06-26T07:21:02Z","title":"Poisoned LangChain: Jailbreak LLMs by LangChain"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"thesis":"As of 20 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 5 inbound Pith citation observations for arXiv:2406.18122."}