{"as_of":"2026-08-10T05:41:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:da23a1c25e7754cf02e978a3bb45defb98a07893c87a1e9f4550ec53b5c85d42","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":7,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":7,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":7,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":7,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T11:24:03.477785Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":1,"source":"arxiv_reference","source_observed_at":"2026-08-05T02:28:24.338817Z","state":"measured"}],"external_citation_measurements":[{"count":1,"observed_at":"2026-08-05T02:28:24.338817Z","source":"arxiv_reference"}],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2502.12497","last_updated":"2026-07-09T13:05:41Z","snapshot_observed_at":"2026-08-07T18:10:20.660653Z","submitted_at":"2025-02-18T03:22:38Z","title":"Demystifying LLM Supply Chain Vulnerabilities in the Wild: Distribution, Root Cause, and Real-World Impact","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.12497","snapshot_observed_at":"2026-08-07T11:24:03.477785Z","title":"Sok: Understanding vulnerabilities in the large language model supply chain,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.02617","last_updated":"2025-06-03T08:34:01Z","snapshot_observed_at":"2026-08-07T13:13:09.422792Z","submitted_at":"2025-06-03T08:34:01Z","title":"Toward Understanding Bugs in Vector Database Management Systems","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-07T11:24:03.477785Z"},"links":{"cited_paper":"/paper/2502.12497","citing_paper":"/paper/2506.02617"},"observation_digest":"sha256:a08dcefad230236315e580e521deb18fb761177579688a72357330ced84b3a79","observation_id":"8876e6b3-47af-4d5f-894c-95dc05d51b64","resolution":{"observed_at":"2026-08-07T11:24:03.477785Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.12497","last_updated":"2026-07-09T13:05:41Z","snapshot_observed_at":"2026-08-07T18:10:20.660653Z","submitted_at":"2025-02-18T03:22:38Z","title":"Demystifying LLM Supply Chain Vulnerabilities in the Wild: Distribution, Root Cause, and Real-World Impact","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.12497","snapshot_observed_at":"2026-08-06T19:12:22.978264Z","title":"Sok: Understanding vulnerabilities in the large language model supply chain,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.06323","last_updated":"2025-07-08T18:24:28Z","snapshot_observed_at":"2026-08-06T19:05:12.143746Z","submitted_at":"2025-07-08T18:24:28Z","title":"Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-06T19:12:22.978264Z"},"links":{"cited_paper":"/paper/2502.12497","citing_paper":"/paper/2507.06323"},"observation_digest":"sha256:3a1bb73f0db1ad7cd800ddced536c5c70a8237c1559e178d277adfe713044dac","observation_id":"dd8f7104-56ce-4e61-99e2-8d72edd28033","resolution":{"observed_at":"2026-08-06T19:12:22.978264Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.12497","last_updated":"2026-07-09T13:05:41Z","snapshot_observed_at":"2026-08-07T18:10:20.660653Z","submitted_at":"2025-02-18T03:22:38Z","title":"Demystifying LLM Supply Chain Vulnerabilities in the Wild: Distribution, Root Cause, and Real-World Impact","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.12497","snapshot_observed_at":"2026-08-06T14:45:42.905342Z","title":"Large language model supply chain: A research agenda","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.18105","last_updated":"2025-07-24T05:30:54Z","snapshot_observed_at":"2026-08-07T21:22:02.859315Z","submitted_at":"2025-07-24T05:30:54Z","title":"Understanding the Supply Chain and Risks of Large Language Model Applications","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-06T14:45:42.905342Z"},"links":{"cited_paper":"/paper/2502.12497","citing_paper":"/paper/2507.18105"},"observation_digest":"sha256:e5c6526bc8ca4ad814dee046bf1d3e841dd650bb6a492c5317fb556fa319ba7f","observation_id":"11cb1854-b4d5-43b9-a785-e7a5328efa16","resolution":{"observed_at":"2026-08-06T14:45:42.905342Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.12497","last_updated":"2026-07-09T13:05:41Z","snapshot_observed_at":"2026-08-07T18:10:20.660653Z","submitted_at":"2025-02-18T03:22:38Z","title":"Demystifying LLM Supply Chain Vulnerabilities in the Wild: Distribution, Root Cause, and Real-World Impact","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.12497","snapshot_observed_at":"2026-08-05T15:32:05.036028Z","title":"Sok: Understanding vulnerabilities in the large language model supply chain,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-05T15:32:04.135703Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:05.036028Z"},"links":{"cited_paper":"/paper/2502.12497","citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:3278013fd4ffd6132841fcd3c9f82aeb6dab8e83fd96ddb718edf7641197f60c","observation_id":"307a95c0-19f1-43c2-9231-f7d42fd937ce","resolution":{"observed_at":"2026-08-05T15:32:05.036028Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.12497","last_updated":"2026-07-09T13:05:41Z","snapshot_observed_at":"2026-08-07T18:10:20.660653Z","submitted_at":"2025-02-18T03:22:38Z","title":"Demystifying LLM Supply Chain Vulnerabilities in the Wild: Distribution, Root Cause, and Real-World Impact","version":2},"cited_work":{"arxiv_id":"2502.12497","doi":"10.48550/arxiv.2502.12497","metadata_source":"arxiv_reference","pith_arxiv_id":"2502.12497","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Sok: Understanding vulnerabilities in the large language model supply chain,","venue":"ArXiv.org","work_id":"c66d0dd2-3657-413d-ac76-6298653d8d6f","year":2025},"citing_paper":{"arxiv_id":"2604.16543","last_updated":"2026-04-17T02:31:09Z","snapshot_observed_at":"2026-07-06T23:03:52.631613Z","submitted_at":"2026-04-17T02:31:09Z","title":"Conjunctive Prompt Attacks in Multi-Agent LLM Systems","version":1},"reference_index":40,"source":"arxiv_source","source_observed_at":"2026-05-10T08:13:42.401992Z"},"links":{"cited_paper":"/paper/2502.12497","citing_paper":"/paper/2604.16543"},"observation_digest":"sha256:87c5559a33d516d7336e843805414d844f7357f517e6ecd2c1cd2d95819f619d","observation_id":"3e229a76-4825-498d-84e6-d969df0c3458","resolution":{"observed_at":"2026-07-10T01:19:37.869746Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2502.12497","last_updated":"2026-07-09T13:05:41Z","snapshot_observed_at":"2026-08-07T18:10:20.660653Z","submitted_at":"2025-02-18T03:22:38Z","title":"Demystifying LLM Supply Chain Vulnerabilities in the Wild: Distribution, Root Cause, and Real-World Impact","version":2},"cited_work":{"arxiv_id":"2502.12497","doi":"10.48550/arxiv.2502.12497","metadata_source":"arxiv_reference","pith_arxiv_id":"2502.12497","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Sok: Understanding vulnerabilities in the large language model supply chain,","venue":"ArXiv.org","work_id":"c66d0dd2-3657-413d-ac76-6298653d8d6f","year":2025},"citing_paper":{"arxiv_id":"2605.28893","last_updated":"2026-07-03T07:41:40Z","snapshot_observed_at":"2026-08-02T07:12:40.296167Z","submitted_at":"2026-05-27T08:11:37Z","title":"Towards Demystifying and Repairing LLM-in-the-Loop Vulnerabilities","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-06-29T11:21:33.012202Z"},"links":{"cited_paper":"/paper/2502.12497","citing_paper":"/paper/2605.28893"},"observation_digest":"sha256:9fba10a4b059ec3b5de1eaa36fa87a3c0e0503887d34ba2eaeab8d168cd35f30","observation_id":"c16fe48f-17a2-4a42-aa83-00a0a9cab8e8","resolution":{"observed_at":"2026-07-10T01:19:37.869746Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2502.12497","last_updated":"2026-07-09T13:05:41Z","snapshot_observed_at":"2026-08-07T18:10:20.660653Z","submitted_at":"2025-02-18T03:22:38Z","title":"Demystifying LLM Supply Chain Vulnerabilities in the Wild: Distribution, Root Cause, and Real-World Impact","version":2},"cited_work":{"arxiv_id":"2502.12497","doi":"10.48550/arxiv.2502.12497","metadata_source":"arxiv_reference","pith_arxiv_id":"2502.12497","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Sok: Understanding vulnerabilities in the large language model supply chain,","venue":"ArXiv.org","work_id":"c66d0dd2-3657-413d-ac76-6298653d8d6f","year":2025},"citing_paper":{"arxiv_id":"2607.01640","last_updated":"2026-07-02T03:11:41Z","snapshot_observed_at":"2026-08-08T15:39:09.903032Z","submitted_at":"2026-07-02T03:11:41Z","title":"AgentFlow: Building Agent Dependency Graphs for Static Analysis of Agent Programs","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-07-03T09:17:05.390905Z"},"links":{"cited_paper":"/paper/2502.12497","citing_paper":"/paper/2607.01640"},"observation_digest":"sha256:59c7e75f58dc921e0db036e6833ace8f2e5066157009278c7d90b5e78985fd06","observation_id":"ef51dc6c-bfcd-46ec-8585-9f81a1c0e330","resolution":{"observed_at":"2026-07-10T01:19:37.869746Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2502.12497/citation-record","integrity":"/paper/2502.12497/integrity","json":"/paper/2502.12497/citation-record.json","paper":"/paper/2502.12497"},"outbound":[],"paper":{"arxiv_id":"2502.12497","last_updated":"2026-07-09T13:05:41Z","latest_version":2,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-07T18:10:20.660653Z","submitted_at":"2025-02-18T03:22:38Z","title":"Demystifying LLM Supply Chain Vulnerabilities in the Wild: Distribution, Root Cause, and Real-World Impact"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 10 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 7 inbound Pith citation observations for arXiv:2502.12497."}