{"as_of":"2026-08-13T17:48:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:c6f91e4e79c9e98064d65e7ea2fa5680e3c4c33f28dc0aabd70caa5bc0912172","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":17,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":17,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-13T06:32:02.005865+00:00","state":"measured"},{"denominator":17,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":17,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T05:25:42.450138Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":1,"source":"arxiv_reference","source_observed_at":"2026-08-05T02:28:24.338817Z","state":"measured"}],"external_citation_measurements":[{"count":0,"observed_at":"2026-08-05T02:28:24.338817Z","source":"arxiv_reference"}],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2505.04806","last_updated":"2025-05-13T05:36:34Z","snapshot_observed_at":"2026-08-10T18:28:30.534231Z","submitted_at":"2025-05-07T21:15:40Z","title":"Red Teaming the Mind of the Machine: A Systematic Evaluation of Prompt Injection and Jailbreak Vulnerabilities in LLMs","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.04806","snapshot_observed_at":"2026-08-07T05:25:42.450138Z","title":"Red Teaming the Mind of the Machine: A Systematic Evalua- tion of Prompt Injection and Jailbreak Vulnerabilities in LLMs","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.07974","last_updated":"2025-06-09T17:49:04Z","snapshot_observed_at":"2026-08-10T18:29:23.994791Z","submitted_at":"2025-06-09T17:49:04Z","title":"Exposing Hidden Backdoors in NFT Smart Contracts: A Static Security Analysis of Rug Pull Patterns","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-07T05:25:42.450138Z"},"links":{"cited_paper":"/paper/2505.04806","citing_paper":"/paper/2506.07974"},"observation_digest":"sha256:98739c61ac31b09b76042c8847304ec696880817836092c8b9ad5ade0aac18e7","observation_id":"04941d1a-7427-48ec-a832-4c17fd59af40","resolution":{"observed_at":"2026-08-07T05:25:42.450138Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.04806","last_updated":"2025-05-13T05:36:34Z","snapshot_observed_at":"2026-08-10T18:28:30.534231Z","submitted_at":"2025-05-07T21:15:40Z","title":"Red Teaming the Mind of the Machine: A Systematic Evaluation of Prompt Injection and Jailbreak Vulnerabilities in LLMs","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.04806","snapshot_observed_at":"2026-08-06T21:34:45.015831Z","title":"Red teaming the mind of the machine: A systematic evaluation of prompt injection and jailbreak vulnerabilities in llms,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-13T14:41:10.298151Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":99,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:45.015831Z"},"links":{"cited_paper":"/paper/2505.04806","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:5571b194686d8169cabfbc508a03f3da8a96622dc5bcb2d07eadcab7f31bda73","observation_id":"b4282a96-6bb9-4961-b94c-0cb55c1f85d4","resolution":{"observed_at":"2026-08-06T21:34:45.015831Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.04806","last_updated":"2025-05-13T05:36:34Z","snapshot_observed_at":"2026-08-10T18:28:30.534231Z","submitted_at":"2025-05-07T21:15:40Z","title":"Red Teaming the Mind of the Machine: A Systematic Evaluation of Prompt Injection and Jailbreak Vulnerabilities in LLMs","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.04806","snapshot_observed_at":"2026-08-06T19:56:05.267094Z","title":"Pathadeet al., Red teaming the mind of the machine: Asystematicevaluationofpromptinjectionandjailbreak vulnerabilities in LLMs, arXiv preprint arXiv:2505.04806 (2025)","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.08014","last_updated":"2025-07-06T08:41:30Z","snapshot_observed_at":"2026-08-06T19:48:50.296360Z","submitted_at":"2025-07-06T08:41:30Z","title":"Mass-Scale Analysis of In-the-Wild Conversations Reveals Complexity Bounds on LLM Jailbreaking","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-06T19:56:05.267094Z"},"links":{"cited_paper":"/paper/2505.04806","citing_paper":"/paper/2507.08014"},"observation_digest":"sha256:bbd7b6f6311a8f982e899b6bd82e2850eaf231ef765a66693a2b632825a6decd","observation_id":"f06f63dd-10ab-4e04-a6d4-df2ba5aebb24","resolution":{"observed_at":"2026-08-06T19:56:05.267094Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.04806","last_updated":"2025-05-13T05:36:34Z","snapshot_observed_at":"2026-08-10T18:28:30.534231Z","submitted_at":"2025-05-07T21:15:40Z","title":"Red Teaming the Mind of the Machine: A Systematic Evaluation of Prompt Injection and Jailbreak Vulnerabilities in LLMs","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.04806","snapshot_observed_at":"2026-08-05T11:00:38.221707Z","title":"Red teaming the mind of the machine: A systematic evaluation of prompt injection and jailbreak vulnerabilities in llms","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2509.03383","last_updated":"2025-09-03T15:00:28Z","snapshot_observed_at":"2026-08-13T07:48:38.416146Z","submitted_at":"2025-09-03T15:00:28Z","title":"ANNIE: Be Careful of Your Robots","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-05T11:00:38.221707Z"},"links":{"cited_paper":"/paper/2505.04806","citing_paper":"/paper/2509.03383"},"observation_digest":"sha256:fb044e8a6c4876c03cca197c810d8a9336fed5162052d8366d30798ee099d874","observation_id":"f9984e62-8605-4ef4-8134-5a73f9b6d88a","resolution":{"observed_at":"2026-08-05T11:00:38.221707Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.04806","last_updated":"2025-05-13T05:36:34Z","snapshot_observed_at":"2026-08-10T18:28:30.534231Z","submitted_at":"2025-05-07T21:15:40Z","title":"Red Teaming the Mind of the Machine: A Systematic Evaluation of Prompt Injection and Jailbreak Vulnerabilities in LLMs","version":2},"cited_work":{"arxiv_id":"2505.04806","doi":"10.48550/arxiv.2505.04806","metadata_source":"arxiv_reference","pith_arxiv_id":"2505.04806","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2505.04806 , year=","venue":"ArXiv.org","work_id":"8c37b5cc-babf-49e8-a3f7-f1da999127bc","year":2025},"citing_paper":{"arxiv_id":"2512.21110","last_updated":"2026-04-24T20:27:34Z","snapshot_observed_at":"2026-08-13T01:23:04.938311Z","submitted_at":"2025-12-24T11:15:57Z","title":"Beyond Context: Large Language Models' Failure to Grasp Users' Intent","version":3},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-05-16T20:09:25.827452Z"},"links":{"cited_paper":"/paper/2505.04806","citing_paper":"/paper/2512.21110"},"observation_digest":"sha256:4db73f462991c08ec7dfc1627b889dca1825eb6941768b383d6849422ad9ec50","observation_id":"4915318a-e3b8-4ea4-8341-f944fe4a7c5b","resolution":{"observed_at":"2026-05-16T20:11:13.575849Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.04806","last_updated":"2025-05-13T05:36:34Z","snapshot_observed_at":"2026-08-10T18:28:30.534231Z","submitted_at":"2025-05-07T21:15:40Z","title":"Red Teaming the Mind of the Machine: A Systematic Evaluation of Prompt Injection and Jailbreak Vulnerabilities in LLMs","version":2},"cited_work":{"arxiv_id":"2505.04806","doi":"10.48550/arxiv.2505.04806","metadata_source":"arxiv_reference","pith_arxiv_id":"2505.04806","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2505.04806 , year=","venue":"ArXiv.org","work_id":"8c37b5cc-babf-49e8-a3f7-f1da999127bc","year":2025},"citing_paper":{"arxiv_id":"2601.22569","last_updated":"2026-05-18T21:06:40Z","snapshot_observed_at":"2026-08-13T03:30:35.924436Z","submitted_at":"2026-01-30T05:10:16Z","title":"Whispers of Wealth: Red-Teaming Google's Agent Payments Protocol via Prompt Injection","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-05-21T15:18:58.274360Z"},"links":{"cited_paper":"/paper/2505.04806","citing_paper":"/paper/2601.22569"},"observation_digest":"sha256:44693d89dbb3ede115daf53e8d6ee96ebf01b90845ca255c9400a05ba848fba4","observation_id":"267ac4c7-1726-48ad-87cc-fe52b623d097","resolution":{"observed_at":"2026-05-21T15:20:17.397162Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.04806","last_updated":"2025-05-13T05:36:34Z","snapshot_observed_at":"2026-08-10T18:28:30.534231Z","submitted_at":"2025-05-07T21:15:40Z","title":"Red Teaming the Mind of the Machine: A Systematic Evaluation of Prompt Injection and Jailbreak Vulnerabilities in LLMs","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.04806","snapshot_observed_at":"2026-07-13T14:38:58.879673Z","title":"Available: https://arxiv.org/abs/2505.04806","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2604.01039","last_updated":"2026-08-12T02:25:54Z","snapshot_observed_at":"2026-08-13T17:32:50.621245Z","submitted_at":"2026-04-01T15:45:56Z","title":"Evaluation and Hardening of LLM System Instructions Against Extraction via Encoding Attacks","version":2},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-07-13T14:38:58.879673Z"},"links":{"cited_paper":"/paper/2505.04806","citing_paper":"/paper/2604.01039"},"observation_digest":"sha256:2e630bbef879c02fa3590415b8f236c9114ce5a0b2dfb3604f99f11a4f3ed455","observation_id":"acb0caf6-b910-471d-bc89-14b628f3f354","resolution":{"observed_at":"2026-07-13T14:38:58.879673Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.04806","last_updated":"2025-05-13T05:36:34Z","snapshot_observed_at":"2026-08-10T18:28:30.534231Z","submitted_at":"2025-05-07T21:15:40Z","title":"Red Teaming the Mind of the Machine: A Systematic Evaluation of Prompt Injection and Jailbreak Vulnerabilities in LLMs","version":2},"cited_work":{"arxiv_id":"2505.04806","doi":"10.48550/arxiv.2505.04806","metadata_source":"arxiv_reference","pith_arxiv_id":"2505.04806","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2505.04806 , year=","venue":"ArXiv.org","work_id":"8c37b5cc-babf-49e8-a3f7-f1da999127bc","year":2025},"citing_paper":{"arxiv_id":"2604.19657","last_updated":"2026-04-21T16:45:30Z","snapshot_observed_at":"2026-08-13T13:06:09.080226Z","submitted_at":"2026-04-21T16:45:30Z","title":"An AI Agent Execution Environment to Safeguard User Data","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-05-10T02:14:40.639143Z"},"links":{"cited_paper":"/paper/2505.04806","citing_paper":"/paper/2604.19657"},"observation_digest":"sha256:f3a1a8fe17987613388850b8953dccd2e81e4b271de12ebdc62465be305fede1","observation_id":"8658f980-8186-4615-b11b-930412589c82","resolution":{"observed_at":"2026-05-11T13:11:05.891404Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.04806","last_updated":"2025-05-13T05:36:34Z","snapshot_observed_at":"2026-08-10T18:28:30.534231Z","submitted_at":"2025-05-07T21:15:40Z","title":"Red Teaming the Mind of the Machine: A Systematic Evaluation of Prompt Injection and Jailbreak Vulnerabilities in LLMs","version":2},"cited_work":{"arxiv_id":"2505.04806","doi":"10.48550/arxiv.2505.04806","metadata_source":"arxiv_reference","pith_arxiv_id":"2505.04806","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2505.04806 , year=","venue":"ArXiv.org","work_id":"8c37b5cc-babf-49e8-a3f7-f1da999127bc","year":2025},"citing_paper":{"arxiv_id":"2605.08876","last_updated":"2026-08-02T00:52:12Z","snapshot_observed_at":"2026-08-13T16:47:43.025150Z","submitted_at":"2026-05-09T10:55:11Z","title":"OTora: A Unified Red Teaming Framework for Reasoning-Level Denial-of-Service in LLM Agents","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-05-12T01:57:22.554881Z"},"links":{"cited_paper":"/paper/2505.04806","citing_paper":"/paper/2605.08876"},"observation_digest":"sha256:8df6e4ecd3358e3e7f45012432d5532752ff50f56bdad22c30904d051ba1058c","observation_id":"d42c1592-e1ca-42eb-8b34-26f2a22ef125","resolution":{"observed_at":"2026-05-12T07:46:28.112736Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.04806","last_updated":"2025-05-13T05:36:34Z","snapshot_observed_at":"2026-08-10T18:28:30.534231Z","submitted_at":"2025-05-07T21:15:40Z","title":"Red Teaming the Mind of the Machine: A Systematic Evaluation of Prompt Injection and Jailbreak Vulnerabilities in LLMs","version":2},"cited_work":{"arxiv_id":"2505.04806","doi":"10.48550/arxiv.2505.04806","metadata_source":"arxiv_reference","pith_arxiv_id":"2505.04806","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2505.04806 , year=","venue":"ArXiv.org","work_id":"8c37b5cc-babf-49e8-a3f7-f1da999127bc","year":2025},"citing_paper":{"arxiv_id":"2605.08876","last_updated":"2026-08-02T00:52:12Z","snapshot_observed_at":"2026-08-13T16:47:43.025150Z","submitted_at":"2026-05-09T10:55:11Z","title":"OTora: A Unified Red Teaming Framework for Reasoning-Level Denial-of-Service in LLM Agents","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-06-30T22:52:54.684185Z"},"links":{"cited_paper":"/paper/2505.04806","citing_paper":"/paper/2605.08876"},"observation_digest":"sha256:419fa7e538de2776620e488ce0057aba38914ed83d6651f474f03f0a8920ea09","observation_id":"f3b68ddf-f963-4730-90a3-b625018c5aa8","resolution":{"observed_at":"2026-07-01T13:45:45.437788Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.04806","last_updated":"2025-05-13T05:36:34Z","snapshot_observed_at":"2026-08-10T18:28:30.534231Z","submitted_at":"2025-05-07T21:15:40Z","title":"Red Teaming the Mind of the Machine: A Systematic Evaluation of Prompt Injection and Jailbreak Vulnerabilities in LLMs","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.04806","snapshot_observed_at":"2026-08-04T05:17:31.221017Z","title":"OpenAI API Documentation","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2605.08876","last_updated":"2026-08-02T00:52:12Z","snapshot_observed_at":"2026-08-13T16:47:43.025150Z","submitted_at":"2026-05-09T10:55:11Z","title":"OTora: A Unified Red Teaming Framework for Reasoning-Level Denial-of-Service in LLM Agents","version":3},"reference_index":2023,"source":"pdf_text","source_observed_at":"2026-08-04T05:17:31.221017Z"},"links":{"cited_paper":"/paper/2505.04806","citing_paper":"/paper/2605.08876"},"observation_digest":"sha256:513f27dd40ea6de3726f3977715859c02708fc4784d74d46daa2a1239a01bde2","observation_id":"ec7cb2de-065f-4dac-865f-71bd54ed6d78","resolution":{"observed_at":"2026-08-04T05:17:31.221017Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.04806","last_updated":"2025-05-13T05:36:34Z","snapshot_observed_at":"2026-08-10T18:28:30.534231Z","submitted_at":"2025-05-07T21:15:40Z","title":"Red Teaming the Mind of the Machine: A Systematic Evaluation of Prompt Injection and Jailbreak Vulnerabilities in LLMs","version":2},"cited_work":{"arxiv_id":"2505.04806","doi":"10.48550/arxiv.2505.04806","metadata_source":"arxiv_reference","pith_arxiv_id":"2505.04806","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2505.04806 , year=","venue":"ArXiv.org","work_id":"8c37b5cc-babf-49e8-a3f7-f1da999127bc","year":2025},"citing_paper":{"arxiv_id":"2605.23723","last_updated":"2026-05-22T15:03:13Z","snapshot_observed_at":"2026-08-06T20:38:36.463625Z","submitted_at":"2026-05-22T15:03:13Z","title":"MemAudit: Post-hoc Auditing of Poisoned Agent Memory via Causal Attribution and Structural Anomaly Detection","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-05-25T04:05:15.708438Z"},"links":{"cited_paper":"/paper/2505.04806","citing_paper":"/paper/2605.23723"},"observation_digest":"sha256:e38b87dbc01896170792f378b8b71e362a764842176e35835e07bb40bf03bad3","observation_id":"fde27398-675a-4de3-a358-7073ae7f9a9e","resolution":{"observed_at":"2026-05-25T04:05:20.411461Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.04806","last_updated":"2025-05-13T05:36:34Z","snapshot_observed_at":"2026-08-10T18:28:30.534231Z","submitted_at":"2025-05-07T21:15:40Z","title":"Red Teaming the Mind of the Machine: A Systematic Evaluation of Prompt Injection and Jailbreak Vulnerabilities in LLMs","version":2},"cited_work":{"arxiv_id":"2505.04806","doi":"10.48550/arxiv.2505.04806","metadata_source":"arxiv_reference","pith_arxiv_id":"2505.04806","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2505.04806 , year=","venue":"ArXiv.org","work_id":"8c37b5cc-babf-49e8-a3f7-f1da999127bc","year":2025},"citing_paper":{"arxiv_id":"2605.26999","last_updated":"2026-05-26T13:19:25Z","snapshot_observed_at":"2026-08-08T09:09:26.193483Z","submitted_at":"2026-05-26T13:19:25Z","title":"Prompt Injection Detection is Regime-Dependent: A Deployment-Aware Evaluation with Interpretable Structural Signals","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-06-29T18:41:03.566306Z"},"links":{"cited_paper":"/paper/2505.04806","citing_paper":"/paper/2605.26999"},"observation_digest":"sha256:a19a11da3b4d09cb5a992221a767dde209edddbfb4bb4c39bb69ba44bf5a41b6","observation_id":"c6f664a5-4dfe-4664-a750-3302e263781a","resolution":{"observed_at":"2026-06-29T18:43:50.228134Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.04806","last_updated":"2025-05-13T05:36:34Z","snapshot_observed_at":"2026-08-10T18:28:30.534231Z","submitted_at":"2025-05-07T21:15:40Z","title":"Red Teaming the Mind of the Machine: A Systematic Evaluation of Prompt Injection and Jailbreak Vulnerabilities in LLMs","version":2},"cited_work":{"arxiv_id":"2505.04806","doi":"10.48550/arxiv.2505.04806","metadata_source":"arxiv_reference","pith_arxiv_id":"2505.04806","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2505.04806 , year=","venue":"ArXiv.org","work_id":"8c37b5cc-babf-49e8-a3f7-f1da999127bc","year":2025},"citing_paper":{"arxiv_id":"2605.30096","last_updated":"2026-05-28T15:39:43Z","snapshot_observed_at":"2026-08-08T19:27:59.265761Z","submitted_at":"2026-05-28T15:39:43Z","title":"How Reliable Are AI Attackers Against a Fixed Vulnerable Target? A 400-Run Empirical Study of LLM Penetration Testing Consistency","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-06-29T06:53:48.841077Z"},"links":{"cited_paper":"/paper/2505.04806","citing_paper":"/paper/2605.30096"},"observation_digest":"sha256:6fcb9fe5fbdd8c40a6133aa3afcad54b5d5b6ccbc0f8be62e76af11139801615","observation_id":"a81e95ba-693a-486a-ac6d-7d77d24d1de0","resolution":{"observed_at":"2026-06-29T14:13:30.554033Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.04806","last_updated":"2025-05-13T05:36:34Z","snapshot_observed_at":"2026-08-10T18:28:30.534231Z","submitted_at":"2025-05-07T21:15:40Z","title":"Red Teaming the Mind of the Machine: A Systematic Evaluation of Prompt Injection and Jailbreak Vulnerabilities in LLMs","version":2},"cited_work":{"arxiv_id":"2505.04806","doi":"10.48550/arxiv.2505.04806","metadata_source":"arxiv_reference","pith_arxiv_id":"2505.04806","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2505.04806 , year=","venue":"ArXiv.org","work_id":"8c37b5cc-babf-49e8-a3f7-f1da999127bc","year":2025},"citing_paper":{"arxiv_id":"2606.27027","last_updated":"2026-06-25T13:35:28Z","snapshot_observed_at":"2026-08-13T15:40:00.166221Z","submitted_at":"2026-06-25T13:35:28Z","title":"ShareLock: A Stealthy Multi-Tool Threshold Poisoning Attack Against MCP","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-06-26T04:07:14.506108Z"},"links":{"cited_paper":"/paper/2505.04806","citing_paper":"/paper/2606.27027"},"observation_digest":"sha256:d1f0e184b6808b241e78a56839901df734633b34c3c97810325d7e2978b9a925","observation_id":"d21b7dbd-c8a7-487e-ae3a-4a75b3def877","resolution":{"observed_at":"2026-07-04T14:19:54.253542Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.04806","last_updated":"2025-05-13T05:36:34Z","snapshot_observed_at":"2026-08-10T18:28:30.534231Z","submitted_at":"2025-05-07T21:15:40Z","title":"Red Teaming the Mind of the Machine: A Systematic Evaluation of Prompt Injection and Jailbreak Vulnerabilities in LLMs","version":2},"cited_work":{"arxiv_id":"2505.04806","doi":"10.48550/arxiv.2505.04806","metadata_source":"arxiv_reference","pith_arxiv_id":"2505.04806","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2505.04806 , year=","venue":"ArXiv.org","work_id":"8c37b5cc-babf-49e8-a3f7-f1da999127bc","year":2025},"citing_paper":{"arxiv_id":"2607.02072","last_updated":"2026-07-06T14:17:36Z","snapshot_observed_at":"2026-08-07T11:32:07.307879Z","submitted_at":"2026-07-02T12:07:00Z","title":"kNNGuard: Turning LLM Hidden Activations into a Training-Free Configurable Guardrail","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-07-03T17:03:06.656045Z"},"links":{"cited_paper":"/paper/2505.04806","citing_paper":"/paper/2607.02072"},"observation_digest":"sha256:dbb6afa5ed5b0f0fe807f33607278cebeced02cc0ac9dc9b3c4afd20313c41e1","observation_id":"c137ff90-863f-4cee-a111-6f3369f719e1","resolution":{"observed_at":"2026-07-03T17:08:42.782288Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.04806","last_updated":"2025-05-13T05:36:34Z","snapshot_observed_at":"2026-08-10T18:28:30.534231Z","submitted_at":"2025-05-07T21:15:40Z","title":"Red Teaming the Mind of the Machine: A Systematic Evaluation of Prompt Injection and Jailbreak Vulnerabilities in LLMs","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.04806","snapshot_observed_at":"2026-07-12T08:27:42.250470Z","title":"arXiv preprint arXiv:2505.04806 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.02072","last_updated":"2026-07-06T14:17:36Z","snapshot_observed_at":"2026-08-07T11:32:07.307879Z","submitted_at":"2026-07-02T12:07:00Z","title":"kNNGuard: Turning LLM Hidden Activations into a Training-Free Configurable Guardrail","version":2},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-07-12T08:27:42.250470Z"},"links":{"cited_paper":"/paper/2505.04806","citing_paper":"/paper/2607.02072"},"observation_digest":"sha256:59897491043507feed50b0361e79dcc19a10b64bd73b3bc88b8a471d059b64fa","observation_id":"73024db3-e914-4cc7-90d6-c919535614fb","resolution":{"observed_at":"2026-07-12T08:27:42.250470Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2505.04806/citation-record","integrity":"/paper/2505.04806/integrity","json":"/paper/2505.04806/citation-record.json","paper":"/paper/2505.04806"},"outbound":[],"paper":{"arxiv_id":"2505.04806","last_updated":"2025-05-13T05:36:34Z","latest_version":2,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-10T18:28:30.534231Z","submitted_at":"2025-05-07T21:15:40Z","title":"Red Teaming the Mind of the Machine: A Systematic Evaluation of Prompt Injection and Jailbreak Vulnerabilities in LLMs"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"thesis":"As of 13 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 17 inbound Pith citation observations for arXiv:2505.04806."}