{"as_of":"2026-08-12T07:39:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:9b5691eb0295930f321e05be51a7af1a01f0a1bd5409a25df9cdca0c7e87a39d","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":11,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":11,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-12T06:34:41.77262+00:00","state":"measured"},{"denominator":11,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":11,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T15:14:46.434090Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-04T20:00:07.866116Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2410.14479","last_updated":"2024-10-18T14:02:34Z","snapshot_observed_at":"2026-08-11T15:32:23.654656Z","submitted_at":"2024-10-18T14:02:34Z","title":"Backdoored Retrievers for Prompt Injection Attacks on Retrieval Augmented Generation of Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.14479","snapshot_observed_at":"2026-08-07T15:14:46.434090Z","title":"Backdoored retrievers for prompt injection attacks on retrieval-augmented generation","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.16014","last_updated":"2026-06-02T10:15:17Z","snapshot_observed_at":"2026-08-09T00:27:14.897803Z","submitted_at":"2025-05-21T20:57:16Z","title":"Ranking Free RAG: Replacing Re-ranking with Selection in RAG for Sensitive Domains","version":5},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-07T15:14:46.434090Z"},"links":{"cited_paper":"/paper/2410.14479","citing_paper":"/paper/2505.16014"},"observation_digest":"sha256:8b2e9c795e0b7b24c31844ccecfa733bb9bb81fefc2cc02b15823278cdd0880d","observation_id":"1d6661f3-e445-4b1e-ae63-a333c08723e9","resolution":{"observed_at":"2026-08-07T15:14:46.434090Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.14479","last_updated":"2024-10-18T14:02:34Z","snapshot_observed_at":"2026-08-11T15:32:23.654656Z","submitted_at":"2024-10-18T14:02:34Z","title":"Backdoored Retrievers for Prompt Injection Attacks on Retrieval Augmented Generation of Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.14479","snapshot_observed_at":"2026-08-06T16:34:04.853306Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.13169","last_updated":"2025-07-17T14:33:36Z","snapshot_observed_at":"2026-08-07T22:34:49.318621Z","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-06T16:34:04.853306Z"},"links":{"cited_paper":"/paper/2410.14479","citing_paper":"/paper/2507.13169"},"observation_digest":"sha256:f4f0c7ed008d0af78ac24a34053c962934e505b2f95c93ee0affc4662e13ce2b","observation_id":"fbe5eca5-fc2b-4390-98d2-c32b7d9b82ac","resolution":{"observed_at":"2026-08-06T16:34:04.853306Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.14479","last_updated":"2024-10-18T14:02:34Z","snapshot_observed_at":"2026-08-11T15:32:23.654656Z","submitted_at":"2024-10-18T14:02:34Z","title":"Backdoored Retrievers for Prompt Injection Attacks on Retrieval Augmented Generation of Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.14479","snapshot_observed_at":"2026-08-04T17:46:19.413492Z","title":"Backdoored retrievers for prompt injection attacks on retrieval augmented generation of large language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.10682","last_updated":"2025-09-12T20:26:16Z","snapshot_observed_at":"2026-08-09T23:59:45.617391Z","submitted_at":"2025-09-12T20:26:16Z","title":"LLM in the Middle: A Systematic Review of Threats and Mitigations to Real-World LLM-based Systems","version":1},"reference_index":164,"source":"pdf_text","source_observed_at":"2026-08-04T17:46:19.413492Z"},"links":{"cited_paper":"/paper/2410.14479","citing_paper":"/paper/2509.10682"},"observation_digest":"sha256:50ee2dbd764474a6eee9df0b7aeeb384132b512529d12ffb068a08955169d167","observation_id":"4ab79429-2090-4aff-a4b6-e11773c33e1e","resolution":{"observed_at":"2026-08-04T17:46:19.413492Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.14479","last_updated":"2024-10-18T14:02:34Z","snapshot_observed_at":"2026-08-11T15:32:23.654656Z","submitted_at":"2024-10-18T14:02:34Z","title":"Backdoored Retrievers for Prompt Injection Attacks on Retrieval Augmented Generation of Large Language Models","version":1},"cited_work":{"arxiv_id":"2410.14479","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2410.14479","snapshot_observed_at":"2026-07-04T20:00:07.866116Z","title":"and Teglia, Y","venue":null,"work_id":"ee51e02a-38d2-4c1e-85fe-d5c5a58a971b","year":2024},"citing_paper":{"arxiv_id":"2510.23883","last_updated":"2026-04-03T16:27:34Z","snapshot_observed_at":"2026-08-11T00:12:51.643027Z","submitted_at":"2025-10-27T21:48:11Z","title":"Agentic AI Security: Threats, Defenses, Evaluation, and Open Challenges","version":3},"reference_index":78,"source":"pdf_text","source_observed_at":"2026-05-18T03:42:10.703369Z"},"links":{"cited_paper":"/paper/2410.14479","citing_paper":"/paper/2510.23883"},"observation_digest":"sha256:fa8fa7ce884967f43466acfb73db351c8822f138d83fe6f8d01304714f0a2dbf","observation_id":"eb5cfe47-3687-45c3-85cf-979f647db8a6","resolution":{"observed_at":"2026-05-18T03:42:22.290794Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.14479","last_updated":"2024-10-18T14:02:34Z","snapshot_observed_at":"2026-08-11T15:32:23.654656Z","submitted_at":"2024-10-18T14:02:34Z","title":"Backdoored Retrievers for Prompt Injection Attacks on Retrieval Augmented Generation of Large Language Models","version":1},"cited_work":{"arxiv_id":"2410.14479","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2410.14479","snapshot_observed_at":"2026-07-04T20:00:07.866116Z","title":"and Teglia, Y","venue":null,"work_id":"ee51e02a-38d2-4c1e-85fe-d5c5a58a971b","year":2024},"citing_paper":{"arxiv_id":"2605.01782","last_updated":"2026-05-03T08:42:29Z","snapshot_observed_at":"2026-08-11T00:19:58.784231Z","submitted_at":"2026-05-03T08:42:29Z","title":"Needle-in-RAG: Prompt-Conditioned Character-Level Traceback of Poisoned Spans in Retrieved Evidence","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-05-10T14:52:32.202125Z"},"links":{"cited_paper":"/paper/2410.14479","citing_paper":"/paper/2605.01782"},"observation_digest":"sha256:68bdc1fda097f5939aa3bc68ed4feaec9fcb9f6b645fefb74473ea7d33ffafad","observation_id":"9b462944-fff8-420e-aa02-f5cdb23d2671","resolution":{"observed_at":"2026-05-11T11:31:00.697621Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.14479","last_updated":"2024-10-18T14:02:34Z","snapshot_observed_at":"2026-08-11T15:32:23.654656Z","submitted_at":"2024-10-18T14:02:34Z","title":"Backdoored Retrievers for Prompt Injection Attacks on Retrieval Augmented Generation of Large Language Models","version":1},"cited_work":{"arxiv_id":"2410.14479","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2410.14479","snapshot_observed_at":"2026-07-04T20:00:07.866116Z","title":"and Teglia, Y","venue":null,"work_id":"ee51e02a-38d2-4c1e-85fe-d5c5a58a971b","year":2024},"citing_paper":{"arxiv_id":"2605.08442","last_updated":"2026-08-04T05:00:15Z","snapshot_observed_at":"2026-08-11T11:59:38.004605Z","submitted_at":"2026-05-08T20:04:57Z","title":"Injection-Execution Dissociation: A Mechanistic Evaluation of Persistent Memory Attacks and Defenses in Stateful LLM Agents","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-05-12T01:19:06.063083Z"},"links":{"cited_paper":"/paper/2410.14479","citing_paper":"/paper/2605.08442"},"observation_digest":"sha256:d713e529fb49d4720e7352064c8103379aefd3a95f67de93e48da1d8293123d8","observation_id":"f043f691-4740-4383-b75b-439af701a9a5","resolution":{"observed_at":"2026-05-12T08:06:28.707130Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.14479","last_updated":"2024-10-18T14:02:34Z","snapshot_observed_at":"2026-08-11T15:32:23.654656Z","submitted_at":"2024-10-18T14:02:34Z","title":"Backdoored Retrievers for Prompt Injection Attacks on Retrieval Augmented Generation of Large Language Models","version":1},"cited_work":{"arxiv_id":"2410.14479","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2410.14479","snapshot_observed_at":"2026-07-04T20:00:07.866116Z","title":"and Teglia, Y","venue":null,"work_id":"ee51e02a-38d2-4c1e-85fe-d5c5a58a971b","year":2024},"citing_paper":{"arxiv_id":"2605.22041","last_updated":"2026-05-21T06:25:46Z","snapshot_observed_at":"2026-08-02T21:43:59.005437Z","submitted_at":"2026-05-21T06:25:46Z","title":"RADAR: Defending RAG Dynamically against Retrieval Corruption","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-05-22T05:58:03.701617Z"},"links":{"cited_paper":"/paper/2410.14479","citing_paper":"/paper/2605.22041"},"observation_digest":"sha256:be32802c7414d2ed0e7c0ec35f0ced7200fc509e676fd4379062aec8ca0ba749","observation_id":"4bc2fc6c-adb8-4cfd-a332-e3f4bd904f9b","resolution":{"observed_at":"2026-05-22T06:01:08.985261Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.14479","last_updated":"2024-10-18T14:02:34Z","snapshot_observed_at":"2026-08-11T15:32:23.654656Z","submitted_at":"2024-10-18T14:02:34Z","title":"Backdoored Retrievers for Prompt Injection Attacks on Retrieval Augmented Generation of Large Language Models","version":1},"cited_work":{"arxiv_id":"2410.14479","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2410.14479","snapshot_observed_at":"2026-07-04T20:00:07.866116Z","title":"and Teglia, Y","venue":null,"work_id":"ee51e02a-38d2-4c1e-85fe-d5c5a58a971b","year":2024},"citing_paper":{"arxiv_id":"2606.09038","last_updated":"2026-06-08T05:10:05Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2026-06-08T05:10:05Z","title":"Personalization Meets Safety:Mechanisms,Risks,and Mitigations in Personalized LLMs","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-06-27T16:49:14.243931Z"},"links":{"cited_paper":"/paper/2410.14479","citing_paper":"/paper/2606.09038"},"observation_digest":"sha256:6d61e40d8a685582f62bf99e95b2cb97939d6c26bd1b3a649dcf696ba06321a5","observation_id":"5bf07e60-3649-47ad-a777-03809ed0b01d","resolution":{"observed_at":"2026-07-03T01:07:30.241514Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.14479","last_updated":"2024-10-18T14:02:34Z","snapshot_observed_at":"2026-08-11T15:32:23.654656Z","submitted_at":"2024-10-18T14:02:34Z","title":"Backdoored Retrievers for Prompt Injection Attacks on Retrieval Augmented Generation of Large Language Models","version":1},"cited_work":{"arxiv_id":"2410.14479","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2410.14479","snapshot_observed_at":"2026-07-04T20:00:07.866116Z","title":"and Teglia, Y","venue":null,"work_id":"ee51e02a-38d2-4c1e-85fe-d5c5a58a971b","year":2024},"citing_paper":{"arxiv_id":"2606.18310","last_updated":"2026-06-16T09:17:56Z","snapshot_observed_at":"2026-08-07T18:50:01.682045Z","submitted_at":"2026-06-16T09:17:56Z","title":"Conflict-Aware Retriever Editing for Knowledge Injection Attacks on LLM-Based RAG Systems","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-06-27T00:29:09.121399Z"},"links":{"cited_paper":"/paper/2410.14479","citing_paper":"/paper/2606.18310"},"observation_digest":"sha256:b16d47cd3713bd4fbcf6772d709abad77d2011eafde6c94883fca000d426b9f1","observation_id":"71b3e8ab-d0e1-4f78-9900-ac93c444346b","resolution":{"observed_at":"2026-07-03T21:28:59.086706Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.14479","last_updated":"2024-10-18T14:02:34Z","snapshot_observed_at":"2026-08-11T15:32:23.654656Z","submitted_at":"2024-10-18T14:02:34Z","title":"Backdoored Retrievers for Prompt Injection Attacks on Retrieval Augmented Generation of Large Language Models","version":1},"cited_work":{"arxiv_id":"2410.14479","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2410.14479","snapshot_observed_at":"2026-07-04T20:00:07.866116Z","title":"and Teglia, Y","venue":null,"work_id":"ee51e02a-38d2-4c1e-85fe-d5c5a58a971b","year":2024},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-06T23:51:47.345747Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"cited_paper":"/paper/2410.14479","citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:e501366aff97aa6fd9b6dff21c93f028c39ca83f71334a177013f29d0e11771c","observation_id":"1804f93f-2278-44c8-976e-d1911ae725ff","resolution":{"observed_at":"2026-07-04T20:00:07.867849Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.14479","last_updated":"2024-10-18T14:02:34Z","snapshot_observed_at":"2026-08-11T15:32:23.654656Z","submitted_at":"2024-10-18T14:02:34Z","title":"Backdoored Retrievers for Prompt Injection Attacks on Retrieval Augmented Generation of Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.14479","snapshot_observed_at":"2026-08-01T06:04:46.721338Z","title":"arXiv preprint arXiv:2410.14479 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.22024","last_updated":"2026-07-24T06:43:09Z","snapshot_observed_at":"2026-08-08T12:54:01.031419Z","submitted_at":"2026-07-24T06:43:09Z","title":"Agent Security Needs Redefinition through a Holistic Framework","version":1},"reference_index":293,"source":"arxiv_source","source_observed_at":"2026-08-01T06:04:46.721338Z"},"links":{"cited_paper":"/paper/2410.14479","citing_paper":"/paper/2607.22024"},"observation_digest":"sha256:7449508926e7c336a9bb39fcc105ac81f9b9299fb26be4e2ad3750f737fd69ef","observation_id":"8298ae29-1636-4963-a3be-37ef7b13a909","resolution":{"observed_at":"2026-08-01T06:04:46.721338Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2410.14479/citation-record","integrity":"/paper/2410.14479/integrity","json":"/paper/2410.14479/citation-record.json","paper":"/paper/2410.14479"},"outbound":[],"paper":{"arxiv_id":"2410.14479","last_updated":"2024-10-18T14:02:34Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-11T15:32:23.654656Z","submitted_at":"2024-10-18T14:02:34Z","title":"Backdoored Retrievers for Prompt Injection Attacks on Retrieval Augmented Generation of Large Language Models"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"thesis":"As of 12 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 11 inbound Pith citation observations for arXiv:2410.14479."}