{"as_of":"2026-08-10T03:11:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:f0fa8fc456e03d0e0b8998391fab47298ab66d476514e82ec3950fc9736bab25","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":10,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":10,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":10,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":10,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T11:02:03.866331Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-05-18T08:16:06.487287Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2504.14348","last_updated":"2025-07-27T10:12:52Z","snapshot_observed_at":"2026-08-07T21:52:02.659469Z","submitted_at":"2025-04-19T16:28:03Z","title":"Manipulating Multimodal Agents via Cross-Modal Prompt Injection","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.14348","snapshot_observed_at":"2026-08-07T11:02:03.866331Z","title":"Manipulating Multimodal Agents via Cross-Modal Prompt Injection.arXiv2025, arXiv:2504.14348","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.03683","last_updated":"2025-06-04T08:13:53Z","snapshot_observed_at":"2026-08-09T21:25:05.413505Z","submitted_at":"2025-06-04T08:13:53Z","title":"PRJ: Perception-Retrieval-Judgement for Generated Images","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T11:02:03.866331Z"},"links":{"cited_paper":"/paper/2504.14348","citing_paper":"/paper/2506.03683"},"observation_digest":"sha256:277eac2b5e9deac3c149ccbf88384250f27031b7f30d5049f29ef9a499d80b42","observation_id":"fa30f3e3-9f77-4155-84c1-e2aca42e085f","resolution":{"observed_at":"2026-08-07T11:02:03.866331Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.14348","last_updated":"2025-07-27T10:12:52Z","snapshot_observed_at":"2026-08-07T21:52:02.659469Z","submitted_at":"2025-04-19T16:28:03Z","title":"Manipulating Multimodal Agents via Cross-Modal Prompt Injection","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.14348","snapshot_observed_at":"2026-08-06T16:34:04.952025Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.13169","last_updated":"2025-07-17T14:33:36Z","snapshot_observed_at":"2026-08-07T22:34:49.318621Z","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-06T16:34:04.952025Z"},"links":{"cited_paper":"/paper/2504.14348","citing_paper":"/paper/2507.13169"},"observation_digest":"sha256:f944a9bdfaf2016e2cf802213d1286a136623e3530f6f800fc603135a45848ab","observation_id":"2a247095-3659-4852-b88a-22fed94a42b8","resolution":{"observed_at":"2026-08-06T16:34:04.952025Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.14348","last_updated":"2025-07-27T10:12:52Z","snapshot_observed_at":"2026-08-07T21:52:02.659469Z","submitted_at":"2025-04-19T16:28:03Z","title":"Manipulating Multimodal Agents via Cross-Modal Prompt Injection","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.14348","snapshot_observed_at":"2026-08-06T15:42:37.809088Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.17934","last_updated":"2025-07-21T04:30:50Z","snapshot_observed_at":"2026-08-09T14:47:58.585689Z","submitted_at":"2025-07-21T04:30:50Z","title":"Multimodal Fine-grained Reasoning for Post Quality Evaluation","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-06T15:42:37.809088Z"},"links":{"cited_paper":"/paper/2504.14348","citing_paper":"/paper/2507.17934"},"observation_digest":"sha256:b38488d73771a38c00011137e773bd92341b01259926db06408c796068e32cd0","observation_id":"47fbc2ab-ed6f-472e-9737-6e132ed1068d","resolution":{"observed_at":"2026-08-06T15:42:37.809088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.14348","last_updated":"2025-07-27T10:12:52Z","snapshot_observed_at":"2026-08-07T21:52:02.659469Z","submitted_at":"2025-04-19T16:28:03Z","title":"Manipulating Multimodal Agents via Cross-Modal Prompt Injection","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.14348","snapshot_observed_at":"2026-08-06T12:52:01.473903Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.21407","last_updated":"2025-08-30T06:01:56Z","snapshot_observed_at":"2026-08-09T23:09:17.424641Z","submitted_at":"2025-07-29T00:27:12Z","title":"Graph-Augmented Large Language Model Agents: Current Progress and Future Prospects","version":2},"reference_index":54,"source":"arxiv_source","source_observed_at":"2026-08-06T12:52:01.473903Z"},"links":{"cited_paper":"/paper/2504.14348","citing_paper":"/paper/2507.21407"},"observation_digest":"sha256:70f3a719cd7cffc96edef4e398ba99d1a25133b66d6dd8d6f6a89d9368c28978","observation_id":"985a0ac5-07aa-41fc-9303-ff35510a7f03","resolution":{"observed_at":"2026-08-06T12:52:01.473903Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.14348","last_updated":"2025-07-27T10:12:52Z","snapshot_observed_at":"2026-08-07T21:52:02.659469Z","submitted_at":"2025-04-19T16:28:03Z","title":"Manipulating Multimodal Agents via Cross-Modal Prompt Injection","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.14348","snapshot_observed_at":"2026-08-04T23:49:33.164739Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2509.06350","last_updated":"2026-01-27T23:14:36Z","snapshot_observed_at":"2026-08-04T23:49:28.733609Z","submitted_at":"2025-09-08T05:45:37Z","title":"Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks?","version":2},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-04T23:49:33.164739Z"},"links":{"cited_paper":"/paper/2504.14348","citing_paper":"/paper/2509.06350"},"observation_digest":"sha256:df374a9bb3f7fe87ee125c690de842ff2c0c6a7261b543df49683608729914c5","observation_id":"6c994ed2-b110-4413-872c-248d9ce14731","resolution":{"observed_at":"2026-08-04T23:49:33.164739Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.14348","last_updated":"2025-07-27T10:12:52Z","snapshot_observed_at":"2026-08-07T21:52:02.659469Z","submitted_at":"2025-04-19T16:28:03Z","title":"Manipulating Multimodal Agents via Cross-Modal Prompt Injection","version":4},"cited_work":{"arxiv_id":"2504.14348","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2504.14348","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Manipulating multimodal agents via cross-modal prompt injection","venue":null,"work_id":"40d42e51-8a2d-406d-84a5-e2059d9282b3","year":2025},"citing_paper":{"arxiv_id":"2510.10073","last_updated":"2026-04-14T02:53:37Z","snapshot_observed_at":"2026-07-06T22:32:22.953630Z","submitted_at":"2025-10-11T07:18:12Z","title":"SecureWebArena: A Holistic Security Evaluation Benchmark for LVLM-based Web Agents","version":2},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-05-18T08:14:51.102085Z"},"links":{"cited_paper":"/paper/2504.14348","citing_paper":"/paper/2510.10073"},"observation_digest":"sha256:f17002773eab9b188787559e40e73a7b14335e0febccf733d357787a2f002d2b","observation_id":"17fd2714-c315-4cf1-b6a5-a2de4ea56449","resolution":{"observed_at":"2026-05-18T08:16:06.490295Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.14348","last_updated":"2025-07-27T10:12:52Z","snapshot_observed_at":"2026-08-07T21:52:02.659469Z","submitted_at":"2025-04-19T16:28:03Z","title":"Manipulating Multimodal Agents via Cross-Modal Prompt Injection","version":4},"cited_work":{"arxiv_id":"2504.14348","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2504.14348","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Manipulating multimodal agents via cross-modal prompt injection","venue":null,"work_id":"40d42e51-8a2d-406d-84a5-e2059d9282b3","year":2025},"citing_paper":{"arxiv_id":"2510.23883","last_updated":"2026-04-03T16:27:34Z","snapshot_observed_at":"2026-08-02T13:42:34.526072Z","submitted_at":"2025-10-27T21:48:11Z","title":"Agentic AI Security: Threats, Defenses, Evaluation, and Open Challenges","version":3},"reference_index":79,"source":"pdf_text","source_observed_at":"2026-05-18T03:42:10.703369Z"},"links":{"cited_paper":"/paper/2504.14348","citing_paper":"/paper/2510.23883"},"observation_digest":"sha256:ba9d31983c5bfb27fc083fe21b57530eef9b83adc89854db376e6cde1a64d098","observation_id":"b3090f75-8209-436a-ad65-5470229fabba","resolution":{"observed_at":"2026-05-18T03:42:22.021033Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.14348","last_updated":"2025-07-27T10:12:52Z","snapshot_observed_at":"2026-08-07T21:52:02.659469Z","submitted_at":"2025-04-19T16:28:03Z","title":"Manipulating Multimodal Agents via Cross-Modal Prompt Injection","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.14348","snapshot_observed_at":"2026-08-02T08:55:49.141115Z","title":"https://arxiv.org/html/2504.14348v1","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19396","last_updated":"2026-08-02T14:07:20Z","snapshot_observed_at":"2026-08-09T02:34:30.861611Z","submitted_at":"2026-07-03T14:24:26Z","title":"CrackedPDFs: A Controlled Benchmark for Hidden Prompt Injection in PDFs","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-02T08:55:49.141115Z"},"links":{"cited_paper":"/paper/2504.14348","citing_paper":"/paper/2607.19396"},"observation_digest":"sha256:1f9235638ea901f9c0ca9dce3866484c6ede31aaccc3bc737f9f5eef102a1810","observation_id":"e87d6b9c-7ad8-445a-9149-17b16da3537b","resolution":{"observed_at":"2026-08-02T08:55:49.141115Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.14348","last_updated":"2025-07-27T10:12:52Z","snapshot_observed_at":"2026-08-07T21:52:02.659469Z","submitted_at":"2025-04-19T16:28:03Z","title":"Manipulating Multimodal Agents via Cross-Modal Prompt Injection","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.14348","snapshot_observed_at":"2026-08-04T04:34:33.210622Z","title":"https://arxiv.org/html/2504.14348v1","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19396","last_updated":"2026-08-02T14:07:20Z","snapshot_observed_at":"2026-08-09T02:34:30.861611Z","submitted_at":"2026-07-03T14:24:26Z","title":"CrackedPDFs: A Controlled Benchmark for Hidden Prompt Injection in PDFs","version":2},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-04T04:34:33.210622Z"},"links":{"cited_paper":"/paper/2504.14348","citing_paper":"/paper/2607.19396"},"observation_digest":"sha256:fd761dc3fda219441ed47d0d5a5b871b90306147501d74c66276b9c1957beb60","observation_id":"d655a8ad-6a58-4b7d-98d6-ddb8635af7b3","resolution":{"observed_at":"2026-08-04T04:34:33.210622Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.14348","last_updated":"2025-07-27T10:12:52Z","snapshot_observed_at":"2026-08-07T21:52:02.659469Z","submitted_at":"2025-04-19T16:28:03Z","title":"Manipulating Multimodal Agents via Cross-Modal Prompt Injection","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.14348","snapshot_observed_at":"2026-08-01T06:04:46.726071Z","title":"arXiv preprint arXiv:2504.14348 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.22024","last_updated":"2026-07-24T06:43:09Z","snapshot_observed_at":"2026-08-08T12:54:01.031419Z","submitted_at":"2026-07-24T06:43:09Z","title":"Agent Security Needs Redefinition through a Holistic Framework","version":1},"reference_index":294,"source":"arxiv_source","source_observed_at":"2026-08-01T06:04:46.726071Z"},"links":{"cited_paper":"/paper/2504.14348","citing_paper":"/paper/2607.22024"},"observation_digest":"sha256:b72e70c836227e54b6f23dad9908786647d6de00fd58ba648b3dc377fc80139d","observation_id":"ba1048b2-f49c-4347-bf86-b6ea76ff35b8","resolution":{"observed_at":"2026-08-01T06:04:46.726071Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2504.14348/citation-record","integrity":"/paper/2504.14348/integrity","json":"/paper/2504.14348/citation-record.json","paper":"/paper/2504.14348"},"outbound":[],"paper":{"arxiv_id":"2504.14348","last_updated":"2025-07-27T10:12:52Z","latest_version":4,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-07T21:52:02.659469Z","submitted_at":"2025-04-19T16:28:03Z","title":"Manipulating Multimodal Agents via Cross-Modal Prompt Injection"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 10 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 10 inbound Pith citation observations for arXiv:2504.14348."}