{"as_of":"2026-08-14T12:21:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:61e2990c6f09853c5dba20d16daff1bf4d3ac3ebd40dd6183cc34ed8e400c1d0","coverage":[{"denominator":75,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":75,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T13:28:21.836925Z","state":"measured"},{"denominator":78,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":78,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-14T06:32:32.682623+00:00","state":"measured"},{"denominator":3,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":3,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-08T04:21:30.393348Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":1,"source":"arxiv_reference","source_observed_at":"2026-08-05T02:28:24.338817Z","state":"measured"}],"external_citation_measurements":[{"count":0,"observed_at":"2026-08-05T02:28:24.338817Z","source":"arxiv_reference"}],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"cited_work":{"arxiv_id":"2505.23817","doi":"10.48550/arxiv.2505.23817","metadata_source":"arxiv_reference","pith_arxiv_id":"2505.23817","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Hadi Amini, and Yanzhao Wu","venue":"arXiv (Cornell University)","work_id":"7a0b89ee-4669-4134-afa3-148e5a24a074","year":2025},"citing_paper":{"arxiv_id":"2605.28999","last_updated":"2026-05-27T18:56:19Z","snapshot_observed_at":"2026-07-06T23:38:27.990823Z","submitted_at":"2026-05-27T18:56:19Z","title":"Measuring Real-World Prompt Injection Attacks in LLM-based Resume Screening","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-06-29T11:16:52.024973Z"},"links":{"cited_paper":"/paper/2505.23817","citing_paper":"/paper/2605.28999"},"observation_digest":"sha256:a9e168a65326ffbc078e3477b31ea9dc5a4e867e793ca64551a427c15c8bb74f","observation_id":"251d89f7-920e-41a7-afd9-9004fc6ad39a","resolution":{"observed_at":"2026-06-29T11:23:21.304322Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"cited_work":{"arxiv_id":"2505.23817","doi":"10.48550/arxiv.2505.23817","metadata_source":"arxiv_reference","pith_arxiv_id":"2505.23817","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Hadi Amini, and Yanzhao Wu","venue":"arXiv (Cornell University)","work_id":"7a0b89ee-4669-4134-afa3-148e5a24a074","year":2025},"citing_paper":{"arxiv_id":"2606.07539","last_updated":"2026-04-29T17:39:36Z","snapshot_observed_at":"2026-08-02T12:30:34.186010Z","submitted_at":"2026-04-29T17:39:36Z","title":"Prompt Governance? On Governing Technologies Governed by Natural Language","version":1},"reference_index":77,"source":"pdf_text","source_observed_at":"2026-07-01T08:17:10.481202Z"},"links":{"cited_paper":"/paper/2505.23817","citing_paper":"/paper/2606.07539"},"observation_digest":"sha256:9c5b5b4725f6627db27e54d8412d021d8349a3a62ef778f4ff3aa0903b9e55a7","observation_id":"ca5f4bdd-cfe1-4b76-bd04-129b61282dfa","resolution":{"observed_at":"2026-07-01T08:25:32.638976Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.23817","snapshot_observed_at":"2026-08-08T04:21:30.393348Z","title":"System prompt extraction attacks and defenses in large language models,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.02995","last_updated":"2026-08-04T01:21:29Z","snapshot_observed_at":"2026-08-12T17:03:14.480196Z","submitted_at":"2026-08-04T01:21:29Z","title":"SparSEEty: Extracting Tokens from Sparsity-Exploiting LLM Serving Systems via Deterministic Side Channels","version":1},"reference_index":75,"source":"pdf_text","source_observed_at":"2026-08-08T04:21:30.393348Z"},"links":{"cited_paper":"/paper/2505.23817","citing_paper":"/paper/2608.02995"},"observation_digest":"sha256:b129a926a82e4c7e2ef8378d3901351f9e344269adb2c2efecff0ed64bb0646d","observation_id":"bd1c589c-65c5-4ad4-a46f-386c73719985","resolution":{"observed_at":"2026-08-08T04:21:30.393348Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2505.23817/citation-record","integrity":"/paper/2505.23817/integrity","json":"/paper/2505.23817/citation-record.json","paper":"/paper/2505.23817"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2303.08774","last_updated":"2024-03-04T06:01:33Z","snapshot_observed_at":"2026-08-07T07:30:12.213965Z","submitted_at":"2023-03-15T17:15:04Z","title":"GPT-4 Technical Report","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.08774","snapshot_observed_at":"2026-08-07T13:28:15.868481Z","title":"GPT-4 technical report","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:15.868481Z"},"links":{"cited_paper":"/paper/2303.08774","citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:ae3e94fa0be6859e5fdcdebb095b5a0d5380555298821679e2727d40f70f7637","observation_id":"904ae51b-c775-413c-b332-05ed7340ee58","resolution":{"observed_at":"2026-08-07T13:28:15.868481Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:29.059536Z","title":"Prompt leakage effect and mitigation strategies for multi-turn LLM applications","venue":null,"work_id":"766e421f-7b86-4699-a124-e9589ee4c270","year":2024},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:15.900195Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:f9068c118a2bad1eb4aa3c9b00a8d01f9c17bedf5e490b81a7a62d50df9482fd","observation_id":"3409a184-0836-489a-8886-b6fc5dffd51a","resolution":{"observed_at":"2026-08-07T13:28:29.131750Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:28.935321Z","title":"Harmful content generation","venue":null,"work_id":"060d3e40-fc8b-4be6-a932-c9963d38bb3e","year":2024},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:15.979603Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:3fac5599df7cd4178480ad95ba901bcb08d33fb08a48b6a98911aea2c2ba195c","observation_id":"68f541b0-139e-495c-ad6b-6eec07333f52","resolution":{"observed_at":"2026-08-07T13:28:28.982642Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2408.11865","last_updated":"2024-08-17T17:40:52Z","snapshot_observed_at":"2026-08-12T23:02:08.714691Z","submitted_at":"2024-08-17T17:40:52Z","title":"How Susceptible are LLMs to Influence in Prompts?","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.11865","snapshot_observed_at":"2026-08-07T13:28:16.031944Z","title":"How susceptible are LLMs to influence in prompts? arXiv preprint arXiv:2408.11865, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:16.031944Z"},"links":{"cited_paper":"/paper/2408.11865","citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:24bca6200f40b0b5ebe784ec8939472261a25182efb9e0d7a10cedf7905981c3","observation_id":"cfbd207a-b95b-4558-9006-2464ad7c8d96","resolution":{"observed_at":"2026-08-07T13:28:16.031944Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:28.810947Z","title":"Large Language Models: A survey of their development, capabilities, and applications","venue":null,"work_id":"41098377-cfa4-4510-a283-6cf6797d9783","year":2024},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:16.088342Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:8ab6420ace192fcbfe6d84a2869710815cec2c5bc2aff933d78e6a153e168e7b","observation_id":"7e476f65-7f2c-43a4-a050-3de0463c1a4d","resolution":{"observed_at":"2026-08-07T13:28:28.856056Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:28.627451Z","title":"Introducing the next generation of Claude","venue":null,"work_id":"77c03eb0-51a1-47a7-9295-e2761a578961","year":2024},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:16.177647Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:bd7ab41b71c720d2aa879e1999ba54d6f6decc19c842ec50eb133a3607dc7edd","observation_id":"965523e6-8e41-4123-92a5-50e4aeec9dae","resolution":{"observed_at":"2026-08-07T13:28:28.708539Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:16.277338Z","title":"Language models are few-shot learners","venue":null,"work_id":null,"year":1901},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:16.277338Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:8c13be6bbd8182b5eef2a69a83ac8b8befe7d8416d0b375fddad3172d7103201","observation_id":"264951e0-35c1-4b96-af56-b6c3b95f317d","resolution":{"observed_at":"2026-08-07T13:28:16.277338Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:28.414804Z","title":"System prompt leakage","venue":null,"work_id":"8e119474-cbbf-4ea3-9859-396595fcb8ab","year":2024},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:16.375256Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:331b6e1dd6587a87b9dd7f2a2ae9f236e59735d4f57b1d10d0c568cfb34b177b","observation_id":"0c4c3386-82fd-4c9b-854e-d5ad2a8135df","resolution":{"observed_at":"2026-08-07T13:28:28.495951Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:28.260796Z","title":"Security and privacy challenges of Large Language Models: A survey","venue":null,"work_id":"09d6aa57-d429-41bd-8c70-5aea925da6d8","year":2025},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:16.449808Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:a5a1f534e4383453529cbe747c468930129bd9d65bfefd208e4a62abc0f03788","observation_id":"dacd04bf-49a9-4a19-93d6-1baad2ea8909","resolution":{"observed_at":"2026-08-07T13:28:28.302234Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:28.156813Z","title":"google/txgemma-9b-chat","venue":null,"work_id":"76f4cbd1-97c7-440f-aa30-2702f507c8ae","year":2024},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:16.516728Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:1db3e0cff1d91ba8ff0ed1f3c6561082d22d70ff526e8f3542c41384f434aaa2","observation_id":"18dc2fd6-bafc-438e-91d7-fb40e553749a","resolution":{"observed_at":"2026-08-07T13:28:28.192950Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:28.015776Z","title":"tiiuae/falcon3-7b-instruct","venue":null,"work_id":"7ddcb41c-28fe-4b23-a595-cd6db926dca7","year":2024},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:16.575634Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:d5ec7b82f155d4d6a49f8a3741dd4bf382ba22ea0ef5c16c6748859cc8eaf72f","observation_id":"a66f8d0c-2eef-45ec-ad8b-b91a03eae4d3","resolution":{"observed_at":"2026-08-07T13:28:28.100516Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:27.836274Z","title":"meta-llama/llama-3.1-8b-instruct","venue":null,"work_id":"5ec22c59-eb29-419e-9115-8429f196ff84","year":2024},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:16.612789Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:daf15f04648399e84b05376666bf93607cc9e007981dfe7d1ff168751daac38d","observation_id":"7aa40db5-8083-4292-be28-58c7902b7ceb","resolution":{"observed_at":"2026-08-07T13:28:27.940904Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2407.21783","last_updated":"2024-11-23T23:27:33Z","snapshot_observed_at":"2026-08-13T17:20:44.002518Z","submitted_at":"2024-07-31T17:54:27Z","title":"The Llama 3 Herd of Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.21783","snapshot_observed_at":"2026-08-07T13:28:16.664623Z","title":"The llama 3 herd of models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:16.664623Z"},"links":{"cited_paper":"/paper/2407.21783","citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:663d027c65fc25aa5e5e74e7bd536e108d45883f3b47cbb7afdefd7459b81674","observation_id":"16bd48d7-df57-4aea-b5b2-cc68ffca1bbd","resolution":{"observed_at":"2026-08-07T13:28:16.664623Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.14516","last_updated":"2025-03-28T15:40:49Z","snapshot_observed_at":"2026-08-12T22:20:02.504110Z","submitted_at":"2024-10-18T14:55:14Z","title":"Do LLMs \"know\" internally when they follow instructions?","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.14516","snapshot_observed_at":"2026-08-07T13:28:16.754755Z","title":"Do LLMs \"know\" internally when they follow instructions? arXiv preprint arXiv:2410.14516, 2024","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:16.754755Z"},"links":{"cited_paper":"/paper/2410.14516","citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:83b57688153a16ab61ebe1fa4d053cf1fd534d2c5314afabae237fe68115a27b","observation_id":"75d57d93-2ec7-4c25-8b8f-99fa28be6c03","resolution":{"observed_at":"2026-08-07T13:28:16.754755Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:27.712931Z","title":"LLM System Prompt Leakage: Prevention Strategies","venue":null,"work_id":"7890522e-3857-420b-8146-a92a2f681d19","year":2025},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:16.852137Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:0f8c2a67e472c9b65847f60d1c66a31089b9ffe681792c716ed9a6f472c30cf5","observation_id":"b5911f80-068c-4bc2-abf7-15e1af6fae08","resolution":{"observed_at":"2026-08-07T13:28:27.768943Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:27.566584Z","title":"Pleak: Prompt Leaking Attacks against Large Language Model Applications","venue":null,"work_id":"8471bf87-30d4-4488-9cbb-3235e87b8813","year":2024},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:16.953127Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:88ffcecd7659ab8684ed5ed415df2614c93932eb9db87ac538ecd876ffc98eae","observation_id":"76c02757-bf5a-488a-ac44-e9e1ae5c7dae","resolution":{"observed_at":"2026-08-07T13:28:27.638262Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:27.471701Z","title":"ChatGPT roles","venue":null,"work_id":"03911ce5-08ca-4126-9be1-2a3188027ab0","year":2023},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:17.061404Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:2355c947349197ebf8f7c13b7abb7c232cecaefbe3b46d3ed66d50502ee6d4e2","observation_id":"2af08ee1-16db-402e-8136-758dd48bcbdc","resolution":{"observed_at":"2026-08-07T13:28:27.513060Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:27.309793Z","title":"Exploiting programmatic behavior of LLMs: Dual-use through standard security attacks","venue":null,"work_id":"ed3a98a0-dcb5-4243-9aba-139d1c940791","year":2024},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:17.160826Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:b21e2fa280b62727af57895f99c666ac5f44fcc6bfa1f1f78022db504ae5237b","observation_id":"a8932f52-8035-46bd-9b9c-30d2957f624b","resolution":{"observed_at":"2026-08-07T13:28:27.376292Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:27.114765Z","title":"What is a prompt injection attack? https://www.ibm.com/ think/topics/prompt-injection, 2024","venue":null,"work_id":"94ed1865-6116-4c77-aeee-455f4c8e1848","year":2024},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:17.266114Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:5838d2db195bc26b242c046dacc7b8f243f7307a57bda9326daed47ec2321f2a","observation_id":"9c6d2e89-f6f6-4b7a-b19b-2e82c88b1d99","resolution":{"observed_at":"2026-08-07T13:28:27.204619Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:27.016946Z","title":"Cosine similarity to determine similarity measure: Study case in online essay assessment","venue":null,"work_id":"47781a74-d8c5-4d3c-a7b9-2457816c8f51","year":2016},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:17.351731Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:a59e0f6a479b7aa7a4ab9ebd620c0bee5106dc302c688fa25f31f54745186246","observation_id":"7179ff40-a2b6-4f0f-8ae0-b42c81278ced","resolution":{"observed_at":"2026-08-07T13:28:27.067011Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2304.05197","last_updated":"2023-11-01T05:14:01Z","snapshot_observed_at":"2026-08-13T12:05:01.318814Z","submitted_at":"2023-04-11T13:05:04Z","title":"Multi-step Jailbreaking Privacy Attacks on ChatGPT","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2304.05197","snapshot_observed_at":"2026-08-07T13:28:17.454592Z","title":"Multi-step jailbreaking privacy attacks on ChatGPT","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:17.454592Z"},"links":{"cited_paper":"/paper/2304.05197","citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:a7564d9ecab899e6cc9a8878f043d4742dd3684be12aed78f91f1fdf74b0dca7","observation_id":"227d56cf-4a72-4ca8-954f-adc32a8a8f80","resolution":{"observed_at":"2026-08-07T13:28:17.454592Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:17.502752Z","title":"Rouge: A package for automatic evaluation of summaries","venue":null,"work_id":null,"year":2004},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:17.502752Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:8bede2f8b19220b66437e68a6163d7390a9686ab63a644cb0624fd60b15cf548","observation_id":"04c296ac-4f0e-4b54-8c69-ca54abaae151","resolution":{"observed_at":"2026-08-07T13:28:17.502752Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.04451","last_updated":"2024-03-20T21:34:56Z","snapshot_observed_at":"2026-08-06T02:57:30.438059Z","submitted_at":"2023-10-03T19:44:37Z","title":"AutoDAN: Generating Stealthy Jailbreak Prompts on Aligned Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.04451","snapshot_observed_at":"2026-08-07T13:28:17.560475Z","title":"AutoDAN: Generating stealthy jailbreak prompts on aligned Large Language Models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:17.560475Z"},"links":{"cited_paper":"/paper/2310.04451","citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:b896225b64c6053230c447c87552ffc622407950f768cbee02938f60c91f7592","observation_id":"30a345e2-d63f-489f-b53b-e898990292be","resolution":{"observed_at":"2026-08-07T13:28:17.560475Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2308.12833","last_updated":"2023-08-24T14:45:50Z","snapshot_observed_at":"2026-08-13T10:28:17.354837Z","submitted_at":"2023-08-24T14:45:50Z","title":"Use of LLMs for Illicit Purposes: Threats, Prevention Measures, and Vulnerabilities","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.12833","snapshot_observed_at":"2026-08-07T13:28:17.621783Z","title":"Use of LLMs for illicit purposes: Threats, prevention measures, and vulnerabilities","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:17.621783Z"},"links":{"cited_paper":"/paper/2308.12833","citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:213b14e65a6ed4ec51220de68a47fc44c63e9aef087066a217780ce0a06981c4","observation_id":"df8f36f9-83c9-4aec-85a8-5af897699b7f","resolution":{"observed_at":"2026-08-07T13:28:17.621783Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2308.13768","last_updated":"2023-08-26T05:20:58Z","snapshot_observed_at":"2026-08-13T10:27:19.556716Z","submitted_at":"2023-08-26T05:20:58Z","title":"Adversarial Fine-Tuning of Language Models: An Iterative Optimisation Approach for the Generation and Detection of Problematic Content","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.13768","snapshot_observed_at":"2026-08-07T13:28:17.670309Z","title":"Adversarial fine-tuning of language models: An iterative optimisation approach for the generation and detection of problematic content","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:17.670309Z"},"links":{"cited_paper":"/paper/2308.13768","citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:5f1b166cfb4da9b888e606f54dc103384104287ce20d0079fe0305a5d994a197","observation_id":"24a3a16c-7ad3-457e-9e14-52f68f6040bb","resolution":{"observed_at":"2026-08-07T13:28:17.670309Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:26.819013Z","title":"GPT-4 System Card","venue":null,"work_id":"ba37decc-6e70-4b93-a932-d35da7435dfc","year":2023},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:17.714988Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:ee0302edbcd6615f02e405d4c038cb348955edf358ad4e01f0062230d37f2c5d","observation_id":"0c3d2a8e-a1ec-4e24-a3a3-2a45f0f9b91d","resolution":{"observed_at":"2026-08-07T13:28:26.876274Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:26.686420Z","title":"Introducing GPT-4.1 in the API","venue":null,"work_id":"16259527-4338-4bdd-af2a-547d5453f8e2","year":2025},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:17.770710Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:d8be55f08fe37b7c78e883f890a404711ec8ac5ac4a649be83d060702fd3e39a","observation_id":"bcdb0479-0497-4716-ac7c-f434048734fc","resolution":{"observed_at":"2026-08-07T13:28:26.760865Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2409.11026","last_updated":"2025-08-06T13:24:09Z","snapshot_observed_at":"2026-08-12T22:43:23.485630Z","submitted_at":"2024-09-17T09:43:29Z","title":"Prompt Obfuscation for Large Language Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.11026","snapshot_observed_at":"2026-08-07T13:28:17.822643Z","title":"Prompt obfuscation for large language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:17.822643Z"},"links":{"cited_paper":"/paper/2409.11026","citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:e884882310147a9c4e3b23f55100c544acd5ec90b9d8841c09b69411214d7c9c","observation_id":"5c86a944-cd53-4906-8dde-a15a4c7d60d9","resolution":{"observed_at":"2026-08-07T13:28:17.822643Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2211.09527","last_updated":"2022-11-17T13:43:20Z","snapshot_observed_at":"2026-07-06T14:19:47.424778Z","submitted_at":"2022-11-17T13:43:20Z","title":"Ignore Previous Prompt: Attack Techniques For Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2211.09527","snapshot_observed_at":"2026-08-07T13:28:17.896064Z","title":"Ignore previous prompt: Attack techniques for language models","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:17.896064Z"},"links":{"cited_paper":"/paper/2211.09527","citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:7d8eab56b315d176580cbeaa528ecd9e48d51a25fce93d1b06423f19c0fe849f","observation_id":"9b6fa092-b653-4055-9006-2a6a0a5eca04","resolution":{"observed_at":"2026-08-07T13:28:17.896064Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:26.553563Z","title":"Instruction defense","venue":null,"work_id":"810b509c-33ea-479a-b69f-7526b587ce04","year":2024},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:17.968777Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:1c8b732473a02f3a092b1f304ed171d9860261b674c2fa5e190e07c3345b4e57","observation_id":"38ed03f7-5671-439e-9928-0906af6f2d3a","resolution":{"observed_at":"2026-08-07T13:28:26.607229Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:26.431007Z","title":"Chatgpt roles","venue":null,"work_id":"eced84d8-a6b4-41fa-9724-a109e9089596","year":2024},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:18.024289Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:10ef945ec6c0ffb59fd46e6d0bdc9b83143b380a94291e9fc12c62ec14f60b97","observation_id":"677e49f2-382d-49d0-a7f4-736a24f30952","resolution":{"observed_at":"2026-08-07T13:28:26.472795Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.12959","last_updated":"2024-02-20T12:25:26Z","snapshot_observed_at":"2026-08-13T04:14:34.324443Z","submitted_at":"2024-02-20T12:25:26Z","title":"Prompt Stealing Attacks Against Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.12959","snapshot_observed_at":"2026-08-07T13:28:18.063710Z","title":"Prompt stealing attacks against large language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:18.063710Z"},"links":{"cited_paper":"/paper/2402.12959","citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:2963f2b94bfcd998be970a7c632ea55f92d7f887b0df0a93a0f087a1aee64f0d","observation_id":"e5ae70ec-8c69-4734-8707-9998edb73825","resolution":{"observed_at":"2026-08-07T13:28:18.063710Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.14539","last_updated":"2023-10-10T22:17:17Z","snapshot_observed_at":"2026-08-13T10:47:14.572503Z","submitted_at":"2023-07-26T23:11:15Z","title":"Jailbreak in pieces: Compositional Adversarial Attacks on Multi-Modal Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.14539","snapshot_observed_at":"2026-08-07T13:28:18.153671Z","title":"Jailbreak in pieces: Compositional adversarial attacks on multi-modal language models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:18.153671Z"},"links":{"cited_paper":"/paper/2307.14539","citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:4d9236f4ce63ecce673795a20536694396b83dac4e51b46c03f713a0a85e0b17","observation_id":"af023c88-0c17-4978-99fc-96cd4461ca92","resolution":{"observed_at":"2026-08-07T13:28:18.153671Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:26.284742Z","title":"Do Anything Now","venue":null,"work_id":"25a4d4e4-48cd-4523-82f9-bee479176a74","year":2024},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:18.218172Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:b0767ed96c0e00aeed15414c6394cbb9c7af855e60a06bb09eff67fe07b1eb50","observation_id":"2023e019-f348-4999-b99f-971ea631d18e","resolution":{"observed_at":"2026-08-07T13:28:26.323022Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2010.15980","last_updated":"2020-11-07T05:33:35Z","snapshot_observed_at":"2026-08-13T21:10:43.984813Z","submitted_at":"2020-10-29T22:54:00Z","title":"AutoPrompt: Eliciting Knowledge from Language Models with Automatically Generated Prompts","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2010.15980","snapshot_observed_at":"2026-08-07T13:28:18.283491Z","title":"AutoPrompt: Eliciting knowledge from language models with automatically generated prompts","venue":null,"work_id":null,"year":2010},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:18.283491Z"},"links":{"cited_paper":"/paper/2010.15980","citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:db654e0dbc4ed6c5e36840935acc7eb90f9ca2a6ef10e9849483f09a5f6d9752","observation_id":"deeb8f5a-a1c3-4b84-b42c-c29b0de78707","resolution":{"observed_at":"2026-08-07T13:28:18.283491Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.19572","last_updated":"2025-04-23T06:29:39Z","snapshot_observed_at":"2026-08-13T01:10:48.644090Z","submitted_at":"2024-10-25T14:07:53Z","title":"ChunkRAG: Novel LLM-Chunk Filtering Method for RAG Systems","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.19572","snapshot_observed_at":"2026-08-07T13:28:18.325891Z","title":"ChunkRAG: Novel LLM-Chunk Filtering Method for RAG Systems","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:18.325891Z"},"links":{"cited_paper":"/paper/2410.19572","citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:add1f8fed3cc5fa5c6a2eab4f1715fb62815f8d776c97b5486b491dfcca5b9db","observation_id":"f332e495-a5e7-459f-b185-e37b3f13fa49","resolution":{"observed_at":"2026-08-07T13:28:18.325891Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.11805","last_updated":"2025-05-09T21:04:06Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-12-19T02:39:27Z","title":"Gemini: A Family of Highly Capable Multimodal Models","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.11805","snapshot_observed_at":"2026-08-07T13:28:18.392685Z","title":"Gemini: a family of highly capable multimodal models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:18.392685Z"},"links":{"cited_paper":"/paper/2312.11805","citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:d65e69b573d694827913599310ff152cf6a9d3264972752170783537d2108110","observation_id":"733cf314-bd1b-42d2-887d-7732eb270e68","resolution":{"observed_at":"2026-08-07T13:28:18.392685Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:26.176024Z","title":"Falcon 3 family of open foundation models, December 2024","venue":null,"work_id":"bcbc69ef-42b0-4977-a523-3fd1ca3c0f2f","year":2024},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:18.448592Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:c4cb4e60198f1cac32c9c19ff80695855e0d7cd7d068cb57bb0787b5d2995885","observation_id":"a49f65a8-ab1e-4156-97c4-1d7f848a4cff","resolution":{"observed_at":"2026-08-07T13:28:26.207476Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.07242","last_updated":"2024-04-09T18:29:42Z","snapshot_observed_at":"2026-08-13T00:33:55.305590Z","submitted_at":"2024-04-09T18:29:42Z","title":"Sandwich attack: Multi-language Mixture Adaptive Attack on LLMs","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.07242","snapshot_observed_at":"2026-08-07T13:28:18.519058Z","title":"Sandwich attack: Multi-language mixture adaptive attack on LLMs","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:18.519058Z"},"links":{"cited_paper":"/paper/2404.07242","citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:e6daa65a31b2c69e48d897e09315fc790a3bc79baea020f9001955258011b148","observation_id":"161fb040-ee28-4bec-9480-cd9a8c4f7b3b","resolution":{"observed_at":"2026-08-07T13:28:18.519058Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:26.059050Z","title":"Synthetic Multilingual LLM Prompts: A synthetic multilingual prompt dataset for prompting llms","venue":null,"work_id":"f033d641-af72-4311-ad7d-fbc9cf22edd3","year":2024},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:18.590460Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:7144f0eb8aec8e71507007b83dadfbb74a500693ccdaf4b119523d6f78e9bd10","observation_id":"f905274b-f7b1-4004-95f6-a38bce22d580","resolution":{"observed_at":"2026-08-07T13:28:26.124131Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2401.00287","last_updated":"2023-12-30T17:37:06Z","snapshot_observed_at":"2026-08-14T05:01:48.146395Z","submitted_at":"2023-12-30T17:37:06Z","title":"The Art of Defending: A Systematic Evaluation and Analysis of LLM Defense Strategies on Safety and Over-Defensiveness","version":1},"cited_work":{"arxiv_id":"2401.00287","doi":null,"metadata_source":"pith","pith_arxiv_id":"2401.00287","snapshot_observed_at":"2026-08-07T13:28:22.268414Z","title":"The Art of Defending: A Systematic Evaluation and Analysis of LLM Defense Strategies on Safety and Over-Defensiveness","venue":"cs.CL","work_id":"0c80993a-06e5-434f-8fce-bdf53bb50a82","year":2023},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:18.665210Z"},"links":{"cited_paper":"/paper/2401.00287","citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:1d60efdb7a28d796a968c7b6aa0556c6c9b35cceba0a0cde20c3af82bfb2ee27","observation_id":"20202f5c-7b09-449a-bf81-997ce875bb6f","resolution":{"observed_at":"2026-08-07T13:28:22.318470Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:18.744733Z","title":"Attention is all you need","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:18.744733Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:46a6f154d49bc64197ef8f15538a6383ac3fc193d4c5b2be85f75cc1d74af8ea","observation_id":"c697ad06-cd63-4715-b734-3431039dbec4","resolution":{"observed_at":"2026-08-07T13:28:18.744733Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:25.903617Z","title":"Jaeger, Fan Zhang, Rory Pilgrim, Yossi Matias, Joelle Barral, David Fleet, and Shekoofeh Azizi","venue":null,"work_id":"8eb54e8b-5355-4d76-8eee-a3ee49e6b553","year":2025},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:18.801028Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:af6a5b031ba5b39e81fb8cb7237917b2bc5320fe69e74f6feee95275a3f3955c","observation_id":"5e5ac694-5ff5-46f1-86c1-ab14a96b5bb0","resolution":{"observed_at":"2026-08-07T13:28:25.969480Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2502.10867","last_updated":"2025-02-15T17:52:11Z","snapshot_observed_at":"2026-08-10T15:22:19.026501Z","submitted_at":"2025-02-15T17:52:11Z","title":"A Tutorial on LLM Reasoning: Relevant Methods behind ChatGPT o1","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.10867","snapshot_observed_at":"2026-08-07T13:28:18.865072Z","title":"A tutorial on LLM reasoning: Relevant methods behind ChatGPT-o1","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:18.865072Z"},"links":{"cited_paper":"/paper/2502.10867","citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:02af93f48a034c5d92f9ef8020a888949bb3faafda2fb02d31b6bf277e77ad9e","observation_id":"b11abeee-d132-4cfb-aee1-84801f49987e","resolution":{"observed_at":"2026-08-07T13:28:18.865072Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.06737","last_updated":"2024-10-26T03:01:42Z","snapshot_observed_at":"2026-08-14T10:48:30.852631Z","submitted_at":"2024-06-10T18:57:22Z","title":"Raccoon: Prompt Extraction Benchmark of LLM-Integrated Applications","version":2},"cited_work":{"arxiv_id":"2406.06737","doi":null,"metadata_source":"pith","pith_arxiv_id":"2406.06737","snapshot_observed_at":"2026-08-07T13:28:22.032646Z","title":"Raccoon: Prompt Extraction Benchmark of LLM-Integrated Applications","venue":"cs.CR","work_id":"d40b0686-87b0-4e5c-a13b-c7c1ca4a70ef","year":2024},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:18.903915Z"},"links":{"cited_paper":"/paper/2406.06737","citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:e37888af475472e2b0baa6c022f0530aea225c87932ca5bc4a697ad2b7961743","observation_id":"a17c2539-2ea3-4a32-a41f-8417f4da89e1","resolution":{"observed_at":"2026-08-07T13:28:22.086452Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.16427","last_updated":"2023-12-07T14:39:22Z","snapshot_observed_at":"2026-08-13T05:40:55.154875Z","submitted_at":"2023-10-25T07:47:01Z","title":"PromptAgent: Strategic Planning with Language Models Enables Expert-level Prompt Optimization","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.16427","snapshot_observed_at":"2026-08-07T13:28:18.947368Z","title":"PromptAgent: Strategic Planning with Language Models Enables Expert-level Prompt Optimization","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:18.947368Z"},"links":{"cited_paper":"/paper/2310.16427","citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:ffa6ab25b668dded03a86c99ab289658a51fdf341110254411503045af3d5f59","observation_id":"46e94282-c291-43c0-9f6e-3e25aec7761d","resolution":{"observed_at":"2026-08-07T13:28:18.947368Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:25.793721Z","title":"Jailbroken: How does LLM safety training fail? Advances in Neural Information Processing Systems, 36:80079–80110, 2023","venue":null,"work_id":"ee8a58ab-2d9a-430d-8e05-02ea897843f9","year":2023},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:18.985934Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:8e3da36c28f616d0544ce5cc97a67d67efb1fc12d3ffd9b4614fea40d59110df","observation_id":"8b21fa52-71b6-4c68-adae-8f664e50b043","resolution":{"observed_at":"2026-08-07T13:28:25.824465Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:19.026388Z","title":"Chi, Quoc V","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:19.026388Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:17a903ad1291abd1bebbf1e1e9f64fd03c59c1226f52c7cce28026681c65260e","observation_id":"0ab4e036-2bb9-4db0-9aea-4e8a469bce3f","resolution":{"observed_at":"2026-08-07T13:28:19.026388Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.19200","last_updated":"2025-06-12T13:56:26Z","snapshot_observed_at":"2026-08-14T01:21:48.441200Z","submitted_at":"2024-02-29T14:30:28Z","title":"PRSA: Prompt Stealing Attacks against Real-World Prompt Services","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.19200","snapshot_observed_at":"2026-08-07T13:28:19.070717Z","title":"PRSA: PRompt Stealing Attacks against large language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:19.070717Z"},"links":{"cited_paper":"/paper/2402.19200","citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:290f395b10b48c891a8521485f4760d59a998c4e4c05a0d2c4e2d914f3b78878","observation_id":"e5db517b-63b3-4ad3-afef-fe7ff873368e","resolution":{"observed_at":"2026-08-07T13:28:19.070717Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.11538","last_updated":"2024-05-25T05:32:39Z","snapshot_observed_at":"2026-08-13T18:27:55.126435Z","submitted_at":"2023-11-20T04:56:46Z","title":"Assessing Prompt Injection Risks in 200+ Custom GPTs","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.11538","snapshot_observed_at":"2026-08-07T13:28:19.116843Z","title":"Assessing prompt injection risks in 200+ custom GPTs","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:19.116843Z"},"links":{"cited_paper":"/paper/2311.11538","citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:f5fb08c341293ce843b1e87733a667da4982d79e8e75322182813d395405e377","observation_id":"124fb2d1-84b4-4e2c-85d1-5f8a13c7549b","resolution":{"observed_at":"2026-08-07T13:28:19.116843Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.06865","last_updated":"2024-08-07T22:05:01Z","snapshot_observed_at":"2026-08-13T10:56:02.144814Z","submitted_at":"2023-07-13T16:15:08Z","title":"Effective Prompt Extraction from Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.06865","snapshot_observed_at":"2026-08-07T13:28:19.348303Z","title":"Effective prompt extraction from language models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:19.348303Z"},"links":{"cited_paper":"/paper/2307.06865","citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:0a500ecd1d00ab29a260bfe2d8099f4e1bdf14f4d306866404377ceef5fbdfea","observation_id":"781d88b3-dd71-4560-9cef-d771f702c936","resolution":{"observed_at":"2026-08-07T13:28:19.348303Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-08-12T09:06:50.363435Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-08-07T13:28:19.412839Z","title":"Universal and transferable adversarial attacks on aligned language models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:19.412839Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:b7afbf69dcf82259b30adcec07cb3b314cfbbf93de4ae4caf9480fae1ece5e57","observation_id":"96a6d877-eb7d-4835-b925-670b7a99df8b","resolution":{"observed_at":"2026-08-07T13:28:19.412839Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:25.624752Z","title":null,"venue":null,"work_id":"f5b26ee4-f693-497f-b176-d780d8cec222","year":null},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:19.459146Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:43450403ba725968f5776b1ef711889c0c786296bb748a5fffe66d17c3ab4876","observation_id":"ad724349-2791-4445-a72a-bba6b4973ef2","resolution":{"observed_at":"2026-08-07T13:28:25.684677Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:25.426960Z","title":null,"venue":null,"work_id":"8826fdd5-5547-475c-ba62-2edc97f2574a","year":null},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:19.514744Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:ef21f1ef0a9f5b60cc219b69e99d2a59f4249e7b60f7b775d508d5fec505e1f5","observation_id":"4b7f047d-32cb-4252-b07d-17108b202edd","resolution":{"observed_at":"2026-08-07T13:28:25.481335Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:25.320167Z","title":null,"venue":null,"work_id":"6e1bddad-b876-47b3-a4ca-156b44afce11","year":null},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:19.535097Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:e377351d8a9168a303c99cc34fd966f7bbbee63447c0f4255ba52b901e6ac8e5","observation_id":"f1d80ebf-f31f-4434-9239-cda6326d87f2","resolution":{"observed_at":"2026-08-07T13:28:25.352312Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:25.174746Z","title":null,"venue":null,"work_id":"423efe02-fa77-45d8-9225-16a358c20bfc","year":null},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:19.559491Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:e716166d2667fd339537389abfc13a4689dbf978824fc73f84cbf1e36a2a2e9f","observation_id":"e5efa0c1-a192-4d91-9ca1-b2c4bdcea925","resolution":{"observed_at":"2026-08-07T13:28:25.240899Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:24.902032Z","title":null,"venue":null,"work_id":"6eaa3a16-e06c-4022-b338-2d0b25d7cbf1","year":null},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:19.597777Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:03e582c313efe9ceb326eeb3b55bc47805fd47a7c20c82f07cd93058ba080173","observation_id":"112a6624-9438-4064-9c8d-1242c9606e33","resolution":{"observed_at":"2026-08-07T13:28:25.004742Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:24.312861Z","title":null,"venue":null,"work_id":"694e94a2-4745-4bd8-9093-2b4e4a0adac5","year":null},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:19.799751Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:fddf759535549cdc8a2bbce8517f7d3ccb7da6bc1a2da20a97e04ca099a6ed52","observation_id":"0e24d379-fe6c-4048-8617-3882ca4d789a","resolution":{"observed_at":"2026-08-07T13:28:24.368087Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:24.206155Z","title":null,"venue":null,"work_id":"1389d498-38d0-46ec-9f91-23351424cf13","year":null},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:20.272135Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:2d1dc7dfab26585cd065a6864a3f979a2fcf1c4ecaf4b390e9cc92651f0b3aba","observation_id":"05b4b0ec-1184-4dbe-a6e6-16df576fa242","resolution":{"observed_at":"2026-08-07T13:28:24.249124Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:24.718494Z","title":null,"venue":null,"work_id":"1d343fae-98da-460b-aa34-7975aa0f1749","year":null},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:20.313708Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:1cb88e9b3a1c0974e07f0c5c8ef5a0c0426fc766bb27dcf7679c569be259757b","observation_id":"4636bb8f-0887-4d16-b81b-7481343fe74b","resolution":{"observed_at":"2026-08-07T13:28:24.754740Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:24.629099Z","title":null,"venue":null,"work_id":"b5be4137-cfb7-48cc-9214-fa55ee5035df","year":null},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:20.378429Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:adedf8c5adad35cb337c41ae3035c912b10a88ab78f867402cf7140ca78e5a11","observation_id":"0f419749-771d-4eb5-88b1-45a926006581","resolution":{"observed_at":"2026-08-07T13:28:24.652428Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:24.543972Z","title":null,"venue":null,"work_id":"f9211d74-a9a0-4582-bb75-c0a919af802c","year":null},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:20.438241Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:e73f17963921e60baef0857d005d5bf9a7137ba7f871d5daebb3270c5031f28d","observation_id":"206ea9a2-8a80-4f34-8ce8-f9a2219720f3","resolution":{"observed_at":"2026-08-07T13:28:24.567738Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:24.405657Z","title":null,"venue":null,"work_id":"cc8ee7a8-272d-4138-8a33-2c97f67af0bc","year":null},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:20.525454Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:ff6c58e200150fe2cff7da46b5a3d0611ccad6074ff98d239716b296958b9b06","observation_id":"e2d401d4-ed19-4ca2-b78f-c2ba443c1373","resolution":{"observed_at":"2026-08-07T13:28:24.481390Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:24.070646Z","title":null,"venue":null,"work_id":"ee67dd5a-507a-4268-aba5-0a9e138db4b1","year":null},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:20.604031Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:8126058195492c763a63f41cd8579d194fb9fb4227a00d566dda60a98369db5c","observation_id":"9db4b0c9-d81d-43a2-b158-2ce8661f3a8b","resolution":{"observed_at":"2026-08-07T13:28:24.138677Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:23.695857Z","title":null,"venue":null,"work_id":"f386aaaf-ad23-4fe8-a1bc-d713a9b3ef7f","year":null},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":75,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:20.868122Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:6c9bf757489c424f91fdf2e10e925588ce641e21574ced74c4c97f09997c65a8","observation_id":"fec12599-a0f0-42d3-8239-3ff42fe44287","resolution":{"observed_at":"2026-08-07T13:28:23.743851Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:23.557758Z","title":null,"venue":null,"work_id":"5a812449-54cf-4937-8ccb-fb34f36cef35","year":null},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":78,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:21.029745Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:977758f7da68be7e817ce4a50579bed3a74266c929b20c9051b465a25bbe5e10","observation_id":"26ae3c3f-e162-4bf5-8978-e41add032e12","resolution":{"observed_at":"2026-08-07T13:28:23.620538Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:23.935778Z","title":null,"venue":null,"work_id":"c3a1ec14-f5d3-419a-96bf-43cab25ac36d","year":null},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":79,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:21.104448Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:38f7e285e7d4ac248f0201df9f836cb75a1572017443e46ac971b4fd3678232e","observation_id":"38312853-8305-4986-adf4-2b02e19d0cff","resolution":{"observed_at":"2026-08-07T13:28:23.972893Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:23.833632Z","title":null,"venue":null,"work_id":"628d9f60-7c23-45ad-b4f7-026492a559c5","year":null},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":80,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:21.146753Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:e1c5eb61e237b8046e8ac26313fc8eb586fff9b7303f7e5ba5e23a10a5d10277","observation_id":"2217e8b5-27fa-4bc7-a6b4-75dea27232f5","resolution":{"observed_at":"2026-08-07T13:28:23.883772Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:23.441103Z","title":"I am a travel assistant, I share travel tips, destination ………","venue":null,"work_id":"4a89615d-11ff-467d-904d-b468745adb24","year":null},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":81,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:21.182542Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:de1a5c534622f6ea4e739f0263ce8f9e2e9c1f0dee27eda108ad8ebed9e60198","observation_id":"4901a84e-f253-4d88-8547-5d1f6f88807f","resolution":{"observed_at":"2026-08-07T13:28:23.499537Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:22.918997Z","title":"I am a travel assistant, I share travel tips, destination ………","venue":null,"work_id":"133374a2-ac18-4b11-8f6e-edb3aaa675da","year":null},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":85,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:21.336827Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:3ce5b1c15c6488c38cab36caa79c46bdadf752e515e56fae58988cadfe415ba8","observation_id":"690fcd5e-5a83-476e-82ac-e922141c337c","resolution":{"observed_at":"2026-08-07T13:28:22.963529Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:22.860385Z","title":"I am a travel assistant, I share travel tips, destination ………","venue":null,"work_id":"1e74e094-0a84-4561-af5f-fe69c90b1477","year":null},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":89,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:21.538928Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:f87964eda4fe3f5b4cb0dabcccc2bafc73839d2b07ffe6b967eb4fe2219afcd9","observation_id":"6701a554-ac23-4d94-ad4b-aee539d2b8b9","resolution":{"observed_at":"2026-08-07T13:28:22.895554Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:23.310035Z","title":null,"venue":null,"work_id":"d41a4586-2a19-42fd-841f-cef01a10c2e9","year":null},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":90,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:21.632440Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:9022c1dab66217931cc89fa716598b9158caf2da18a034095396568832f9372e","observation_id":"6f5257d0-2f65-4810-a6e7-52e4ab7c0740","resolution":{"observed_at":"2026-08-07T13:28:23.396384Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:23.184815Z","title":null,"venue":null,"work_id":"f8c95f19-0789-4ff2-893b-7302edf2b76d","year":null},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":91,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:21.693289Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:d323483528df592815bf5d6604689e245b560f3f769812c0334565c2e21121f0","observation_id":"8dca8632-4df4-4356-b763-d7e41c1a45dd","resolution":{"observed_at":"2026-08-07T13:28:23.239059Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:23.025559Z","title":null,"venue":null,"work_id":"31a976d6-3987-4d38-b946-b31d8c239b6d","year":null},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":92,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:21.744743Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:6ae7b184bee90fa14fd24913f2f91e867af5494ea535c80b3237d43f0bf740dc","observation_id":"2fc0da6c-d258-43ce-ab8c-6d84c8c6faa8","resolution":{"observed_at":"2026-08-07T13:28:23.100624Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:22.711686Z","title":"I am a travel assistant, I share travel tips, destination ………","venue":null,"work_id":"aa9832d4-1e60-49a1-9914-a6b707d27d68","year":2000},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":93,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:21.836925Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:af8f85f02d4205d5cdaff33f6d4ae1142d8d8e67367fe899795b9452d9f82d09","observation_id":"50491108-12ad-4053-90d3-10d70fe146bb","resolution":{"observed_at":"2026-08-07T13:28:22.787794Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-13T05:36:46.464750Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models"},"reference_resolution":{"displayed":75,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":45,"verified_exact":2,"verified_fuzzy":28},"total_outbound_references":75},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"thesis":"As of 14 August 2026, this Paper Citation Record lists 75 of 75 outbound references and 3 inbound Pith citation observations for arXiv:2505.23817."}