{"as_of":"2026-08-15T14:55:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:2265999dd930c20be0bd3abd49f4103222c60b4ed9388ec7d1c8b7e0e2777a13","coverage":[{"denominator":38,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":38,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T10:19:29.189081Z","state":"measured"},{"denominator":39,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":39,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-15T06:32:42.880941+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-06-29T06:34:52.596684Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-06-29T14:33:31.438836Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2506.05739","last_updated":"2025-06-06T04:50:57Z","snapshot_observed_at":"2026-08-14T19:11:05.887294Z","submitted_at":"2025-06-06T04:50:57Z","title":"To Protect the LLM Agent Against the Prompt Injection Attack with Polymorphic Prompt","version":1},"cited_work":{"arxiv_id":"2506.05739","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2506.05739","snapshot_observed_at":"2026-06-29T14:33:31.438836Z","title":"To protect the LLM agent against the prompt injection attack with polymorphic prompt assembling,","venue":null,"work_id":"318c548f-a507-44db-aa64-84bc095d44ce","year":2025},"citing_paper":{"arxiv_id":"2605.30534","last_updated":"2026-05-28T20:10:04Z","snapshot_observed_at":"2026-08-15T09:59:50.305697Z","submitted_at":"2026-05-28T20:10:04Z","title":"Strengthening Polymorphic Prompt Assembling: Dynamic Separator Generation Against Emerging Prompt Injection Attacks","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-06-29T06:34:52.596684Z"},"links":{"cited_paper":"/paper/2506.05739","citing_paper":"/paper/2605.30534"},"observation_digest":"sha256:d7d7912e17915485e3b9a8eb3a79cb6f8a03ee77efdf51268f44b38044e89161","observation_id":"f9f5549e-2dd7-45dd-860a-6858e7ce6e1a","resolution":{"observed_at":"2026-06-29T14:33:31.440394Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2506.05739/citation-record","integrity":"/paper/2506.05739/integrity","json":"/paper/2506.05739/citation-record.json","paper":"/paper/2506.05739"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2307.12488","last_updated":"2024-07-28T07:48:44Z","snapshot_observed_at":"2026-08-13T10:49:28.620450Z","submitted_at":"2023-07-24T02:38:24Z","title":"How Does Naming Affect LLMs on Code Analysis Tasks?","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.12488","snapshot_observed_at":"2026-08-07T10:19:25.445223Z","title":"Chatgpt for soft- ware security: Exploring the strengths and limitations of chatgpt in the security applications,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.05739","last_updated":"2025-06-06T04:50:57Z","snapshot_observed_at":"2026-08-14T19:11:05.887294Z","submitted_at":"2025-06-06T04:50:57Z","title":"To Protect the LLM Agent Against the Prompt Injection Attack with Polymorphic Prompt","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-07T10:19:25.445223Z"},"links":{"cited_paper":"/paper/2307.12488","citing_paper":"/paper/2506.05739"},"observation_digest":"sha256:48baaa95359ead52e0fecd71118ffcaf19f76eaa712cfc057f1b4711a8a71102","observation_id":"0649b10d-f881-454c-9e28-2c901c6b6628","resolution":{"observed_at":"2026-08-07T10:19:25.445223Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:19:33.097030Z","title":"Repair Is Nearly Generation: Multi- lingual Program Repair with LLMs,","venue":null,"work_id":"338b89e5-6611-4f73-8b9f-0c025579afef","year":2023},"citing_paper":{"arxiv_id":"2506.05739","last_updated":"2025-06-06T04:50:57Z","snapshot_observed_at":"2026-08-14T19:11:05.887294Z","submitted_at":"2025-06-06T04:50:57Z","title":"To Protect the LLM Agent Against the Prompt Injection Attack with Polymorphic Prompt","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-07T10:19:25.521645Z"},"links":{"citing_paper":"/paper/2506.05739"},"observation_digest":"sha256:411a8594d495a1c8db53cda81afeb549c10c0e42f4d23963aa9b71befe8e4462","observation_id":"e00af381-01fe-497c-a447-cbe3e9586384","resolution":{"observed_at":"2026-08-07T10:19:33.165141Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:19:32.926060Z","title":"Evaluating large language models for real-world vul- nerability repair in c/c++ code,","venue":null,"work_id":"76567139-6b4c-40b1-8fdf-31ae6e67a1d1","year":2024},"citing_paper":{"arxiv_id":"2506.05739","last_updated":"2025-06-06T04:50:57Z","snapshot_observed_at":"2026-08-14T19:11:05.887294Z","submitted_at":"2025-06-06T04:50:57Z","title":"To Protect the LLM Agent Against the Prompt Injection Attack with Polymorphic Prompt","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T10:19:25.701234Z"},"links":{"citing_paper":"/paper/2506.05739"},"observation_digest":"sha256:44c92884e92960ca8aaef15d6a3fc7f7d7cad2496e485833669f88999b86d4bc","observation_id":"1a18f318-faa0-418a-b15f-77f92f3464ad","resolution":{"observed_at":"2026-08-07T10:19:33.003046Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2211.09527","last_updated":"2022-11-17T13:43:20Z","snapshot_observed_at":"2026-08-15T06:26:47.552378Z","submitted_at":"2022-11-17T13:43:20Z","title":"Ignore Previous Prompt: Attack Techniques For Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2211.09527","snapshot_observed_at":"2026-08-07T10:19:25.879894Z","title":"Ignore previous prompt: Attack techniques for language models,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.05739","last_updated":"2025-06-06T04:50:57Z","snapshot_observed_at":"2026-08-14T19:11:05.887294Z","submitted_at":"2025-06-06T04:50:57Z","title":"To Protect the LLM Agent Against the Prompt Injection Attack with Polymorphic Prompt","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T10:19:25.879894Z"},"links":{"cited_paper":"/paper/2211.09527","citing_paper":"/paper/2506.05739"},"observation_digest":"sha256:e6c13adcd637d3120d66b22280e5540edbfea74c02a16b0c15e01e658c57a563","observation_id":"131add71-39e1-404f-99da-ec36a718da2e","resolution":{"observed_at":"2026-08-07T10:19:25.879894Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.06622","last_updated":"2024-06-07T15:37:15Z","snapshot_observed_at":"2026-08-12T23:47:46.663207Z","submitted_at":"2024-06-07T15:37:15Z","title":"Adversarial Tuning: Defending Against Jailbreak Attacks for LLMs","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.06622","snapshot_observed_at":"2026-08-07T10:19:26.049365Z","title":"Adversarial tuning: Defending against jailbreak attacks for llms,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.05739","last_updated":"2025-06-06T04:50:57Z","snapshot_observed_at":"2026-08-14T19:11:05.887294Z","submitted_at":"2025-06-06T04:50:57Z","title":"To Protect the LLM Agent Against the Prompt Injection Attack with Polymorphic Prompt","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-07T10:19:26.049365Z"},"links":{"cited_paper":"/paper/2406.06622","citing_paper":"/paper/2506.05739"},"observation_digest":"sha256:d4e9207dc64af80fb928fd96090b33edab40f095e59c5c255ccb801c3b9d3a7b","observation_id":"4cf7a326-7fb5-4c32-9a4e-b4b441dc7f5a","resolution":{"observed_at":"2026-08-07T10:19:26.049365Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.12773","last_updated":"2023-10-19T14:22:03Z","snapshot_observed_at":"2026-08-14T19:10:00.850271Z","submitted_at":"2023-10-19T14:22:03Z","title":"Safe RLHF: Safe Reinforcement Learning from Human Feedback","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.12773","snapshot_observed_at":"2026-08-07T10:19:26.179955Z","title":"Safe rlhf: Safe reinforcement learning from human feedback,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.05739","last_updated":"2025-06-06T04:50:57Z","snapshot_observed_at":"2026-08-14T19:11:05.887294Z","submitted_at":"2025-06-06T04:50:57Z","title":"To Protect the LLM Agent Against the Prompt Injection Attack with Polymorphic Prompt","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T10:19:26.179955Z"},"links":{"cited_paper":"/paper/2310.12773","citing_paper":"/paper/2506.05739"},"observation_digest":"sha256:b2736b421f176af61495faaeaa9fb36ef29464e2ae492a949985d958ef439242","observation_id":"7baee7c6-bd20-4af9-9ff4-c19d12886313","resolution":{"observed_at":"2026-08-07T10:19:26.179955Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:19:32.713736Z","title":"Training language models to follow instructions with human feedback,","venue":null,"work_id":"7cf74264-0b99-4fb1-8f14-148b4186653b","year":2022},"citing_paper":{"arxiv_id":"2506.05739","last_updated":"2025-06-06T04:50:57Z","snapshot_observed_at":"2026-08-14T19:11:05.887294Z","submitted_at":"2025-06-06T04:50:57Z","title":"To Protect the LLM Agent Against the Prompt Injection Attack with Polymorphic Prompt","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T10:19:26.350394Z"},"links":{"citing_paper":"/paper/2506.05739"},"observation_digest":"sha256:c5213372d5fb0d7cdfe35102ddbc6e226ceebb7dc123551335ff8e3f0598fab9","observation_id":"45b0e32c-199c-4331-bb9c-b0ebaf8c72fe","resolution":{"observed_at":"2026-08-07T10:19:32.804618Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.00888","last_updated":"2024-11-14T22:20:49Z","snapshot_observed_at":"2026-08-13T04:32:07.137910Z","submitted_at":"2024-01-30T04:00:54Z","title":"Security and Privacy Challenges of Large Language Models: A Survey","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.00888","snapshot_observed_at":"2026-08-07T10:19:26.510759Z","title":"Security and privacy challenges of large language models: A survey,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.05739","last_updated":"2025-06-06T04:50:57Z","snapshot_observed_at":"2026-08-14T19:11:05.887294Z","submitted_at":"2025-06-06T04:50:57Z","title":"To Protect the LLM Agent Against the Prompt Injection Attack with Polymorphic Prompt","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-07T10:19:26.510759Z"},"links":{"cited_paper":"/paper/2402.00888","citing_paper":"/paper/2506.05739"},"observation_digest":"sha256:c27170a3efdf9484f46b777f3ae54ee49c878e65d9eaa66c98f06e651ea0c7e5","observation_id":"47741064-91e7-4d67-ab2a-e61c9f05b7f6","resolution":{"observed_at":"2026-08-07T10:19:26.510759Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2306.05499","last_updated":"2025-12-29T02:25:27Z","snapshot_observed_at":"2026-07-06T15:40:27.639368Z","submitted_at":"2023-06-08T18:43:11Z","title":"Prompt Injection attack against LLM-integrated Applications","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.05499","snapshot_observed_at":"2026-08-07T10:19:26.602943Z","title":"Prompt injection attack against llm-integrated applications,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.05739","last_updated":"2025-06-06T04:50:57Z","snapshot_observed_at":"2026-08-14T19:11:05.887294Z","submitted_at":"2025-06-06T04:50:57Z","title":"To Protect the LLM Agent Against the Prompt Injection Attack with Polymorphic Prompt","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T10:19:26.602943Z"},"links":{"cited_paper":"/paper/2306.05499","citing_paper":"/paper/2506.05739"},"observation_digest":"sha256:bcdbf20f09f9ad235851b3605d260aea25bc89c5ea0b60cc3b5463c7633fa598","observation_id":"274ad45c-598b-49a1-80be-6d60cbf83b65","resolution":{"observed_at":"2026-08-07T10:19:26.602943Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.01318","last_updated":"2024-10-31T22:26:40Z","snapshot_observed_at":"2026-08-11T16:28:21.917686Z","submitted_at":"2024-03-28T02:44:02Z","title":"JailbreakBench: An Open Robustness Benchmark for Jailbreaking Large Language Models","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.01318","snapshot_observed_at":"2026-08-07T10:19:26.737973Z","title":"Jailbreakbench: An open robustness benchmark for jailbreaking large language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.05739","last_updated":"2025-06-06T04:50:57Z","snapshot_observed_at":"2026-08-14T19:11:05.887294Z","submitted_at":"2025-06-06T04:50:57Z","title":"To Protect the LLM Agent Against the Prompt Injection Attack with Polymorphic Prompt","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T10:19:26.737973Z"},"links":{"cited_paper":"/paper/2404.01318","citing_paper":"/paper/2506.05739"},"observation_digest":"sha256:772e91b4b6ac8836becaa18705ca466f596096d43f274e414b23bcbf678a53a8","observation_id":"0e037b44-6e8d-436d-84f2-70ab36640d69","resolution":{"observed_at":"2026-08-07T10:19:26.737973Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:19:32.560418Z","title":"Adversarial Prompting in LLMs,","venue":null,"work_id":"55d6c3ff-5c0b-42a1-8185-05ae7c59d6ac","year":2023},"citing_paper":{"arxiv_id":"2506.05739","last_updated":"2025-06-06T04:50:57Z","snapshot_observed_at":"2026-08-14T19:11:05.887294Z","submitted_at":"2025-06-06T04:50:57Z","title":"To Protect the LLM Agent Against the Prompt Injection Attack with Polymorphic Prompt","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T10:19:26.828202Z"},"links":{"citing_paper":"/paper/2506.05739"},"observation_digest":"sha256:0ec9aa54808957dd1b7a3b58afac4ebff22d061d349970230ceb9ffba7d2db1b","observation_id":"26009b1c-491e-4704-98fe-6318e07a0af2","resolution":{"observed_at":"2026-08-07T10:19:32.627984Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2407.04295","last_updated":"2024-08-30T11:57:47Z","snapshot_observed_at":"2026-08-12T17:45:10.384900Z","submitted_at":"2024-07-05T06:57:30Z","title":"Jailbreak Attacks and Defenses Against Large Language Models: A Survey","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.04295","snapshot_observed_at":"2026-08-07T10:19:26.977002Z","title":"Jailbreak attacks and defenses against large language models: A survey,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.05739","last_updated":"2025-06-06T04:50:57Z","snapshot_observed_at":"2026-08-14T19:11:05.887294Z","submitted_at":"2025-06-06T04:50:57Z","title":"To Protect the LLM Agent Against the Prompt Injection Attack with Polymorphic Prompt","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T10:19:26.977002Z"},"links":{"cited_paper":"/paper/2407.04295","citing_paper":"/paper/2506.05739"},"observation_digest":"sha256:4465767b00bc4c30f2fd3c4066c9d693d78dcdb447717da8caa47ce2c66f0821","observation_id":"bfae5d97-6b45-440f-a63b-d4395614c408","resolution":{"observed_at":"2026-08-07T10:19:26.977002Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:19:32.410668Z","title":"Prompt Injection: A Comprehensive Guide,","venue":null,"work_id":"4c9d083c-7ca5-44eb-84da-72fb25817134","year":2024},"citing_paper":{"arxiv_id":"2506.05739","last_updated":"2025-06-06T04:50:57Z","snapshot_observed_at":"2026-08-14T19:11:05.887294Z","submitted_at":"2025-06-06T04:50:57Z","title":"To Protect the LLM Agent Against the Prompt Injection Attack with Polymorphic Prompt","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T10:19:27.094083Z"},"links":{"citing_paper":"/paper/2506.05739"},"observation_digest":"sha256:116ff458082f869d4f25fb0f35beb02b2b5cc807f5f78fb5c84c1ccf2861ecee","observation_id":"bdba7935-8599-4b6a-b737-0ce10d3b098e","resolution":{"observed_at":"2026-08-07T10:19:32.473632Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2407.03234","last_updated":"2024-08-06T11:15:00Z","snapshot_observed_at":"2026-08-15T12:57:48.409782Z","submitted_at":"2024-07-03T16:03:42Z","title":"Self-Evaluation as a Defense Against Adversarial Attacks on LLMs","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.03234","snapshot_observed_at":"2026-08-07T10:19:27.248071Z","title":"Self-evaluation as a defense against adversarial attacks on llms,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.05739","last_updated":"2025-06-06T04:50:57Z","snapshot_observed_at":"2026-08-14T19:11:05.887294Z","submitted_at":"2025-06-06T04:50:57Z","title":"To Protect the LLM Agent Against the Prompt Injection Attack with Polymorphic Prompt","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-07T10:19:27.248071Z"},"links":{"cited_paper":"/paper/2407.03234","citing_paper":"/paper/2506.05739"},"observation_digest":"sha256:4f4dc6a020a2542cdd9270ec73223a328568ef5dcbd5186e46834f6cac2c8c2d","observation_id":"abe78824-f39b-45df-9ce0-ec3ffd45b8a9","resolution":{"observed_at":"2026-08-07T10:19:27.248071Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:19:27.389402Z","title":"Formalizing and benchmarking prompt injection attacks and defenses,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.05739","last_updated":"2025-06-06T04:50:57Z","snapshot_observed_at":"2026-08-14T19:11:05.887294Z","submitted_at":"2025-06-06T04:50:57Z","title":"To Protect the LLM Agent Against the Prompt Injection Attack with Polymorphic Prompt","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T10:19:27.389402Z"},"links":{"citing_paper":"/paper/2506.05739"},"observation_digest":"sha256:112e718ad836b13c298c9efbd32196869edc9d7a2cbdeaad3f7e059aa71fdad5","observation_id":"45b0194a-561d-43d9-8c08-6267c1a28bc2","resolution":{"observed_at":"2026-08-07T10:19:27.389402Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:19:32.211296Z","title":"Prompt injection attacks against gpt- 3,","venue":null,"work_id":"1325af17-a384-4a11-8f92-1da031ae01ab","year":2022},"citing_paper":{"arxiv_id":"2506.05739","last_updated":"2025-06-06T04:50:57Z","snapshot_observed_at":"2026-08-14T19:11:05.887294Z","submitted_at":"2025-06-06T04:50:57Z","title":"To Protect the LLM Agent Against the Prompt Injection Attack with Polymorphic Prompt","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T10:19:27.566690Z"},"links":{"citing_paper":"/paper/2506.05739"},"observation_digest":"sha256:35669e01c78ded2c80f0740e729bde599b107dcb62b64a17e722024999a35421","observation_id":"96ab407a-8a48-4913-b7da-bcf187ffe516","resolution":{"observed_at":"2026-08-07T10:19:32.298393Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.00898","last_updated":"2024-01-31T19:52:00Z","snapshot_observed_at":"2026-08-14T08:03:14.777575Z","submitted_at":"2024-01-31T19:52:00Z","title":"An Early Categorization of Prompt Injection Attacks on Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.00898","snapshot_observed_at":"2026-08-07T10:19:27.647166Z","title":"An early categorization of prompt injection attacks on large language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.05739","last_updated":"2025-06-06T04:50:57Z","snapshot_observed_at":"2026-08-14T19:11:05.887294Z","submitted_at":"2025-06-06T04:50:57Z","title":"To Protect the LLM Agent Against the Prompt Injection Attack with Polymorphic Prompt","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-07T10:19:27.647166Z"},"links":{"cited_paper":"/paper/2402.00898","citing_paper":"/paper/2506.05739"},"observation_digest":"sha256:79cf235b52d83a5d275a9c38f8abaeec42f27bd01f7ea68285bbf5115352223a","observation_id":"b8587df2-1373-4b61-ae40-16046a07e868","resolution":{"observed_at":"2026-08-07T10:19:27.647166Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2308.07702","last_updated":"2024-03-14T02:07:11Z","snapshot_observed_at":"2026-08-13T10:34:21.427952Z","submitted_at":"2023-08-15T11:08:30Z","title":"Better Zero-Shot Reasoning with Role-Play Prompting","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.07702","snapshot_observed_at":"2026-08-07T10:19:27.745795Z","title":"Better zero-shot reasoning with role-play prompting,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.05739","last_updated":"2025-06-06T04:50:57Z","snapshot_observed_at":"2026-08-14T19:11:05.887294Z","submitted_at":"2025-06-06T04:50:57Z","title":"To Protect the LLM Agent Against the Prompt Injection Attack with Polymorphic Prompt","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T10:19:27.745795Z"},"links":{"cited_paper":"/paper/2308.07702","citing_paper":"/paper/2506.05739"},"observation_digest":"sha256:bc7147e42d1a458b71a4b169031aef75936788292b747582d32eddd63bf57956","observation_id":"e0a259b1-25a2-45b8-9082-ea88c08fdef6","resolution":{"observed_at":"2026-08-07T10:19:27.745795Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:19:32.054252Z","title":"Lakera pint benchmark,","venue":null,"work_id":"7bfda203-8731-466b-876e-2009025ef28a","year":2025},"citing_paper":{"arxiv_id":"2506.05739","last_updated":"2025-06-06T04:50:57Z","snapshot_observed_at":"2026-08-14T19:11:05.887294Z","submitted_at":"2025-06-06T04:50:57Z","title":"To Protect the LLM Agent Against the Prompt Injection Attack with Polymorphic Prompt","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-07T10:19:27.850498Z"},"links":{"citing_paper":"/paper/2506.05739"},"observation_digest":"sha256:b287d661e6aae2b2b983091f3408b69948aa9000b51e01dfe682c9e83cf31265","observation_id":"e58c5703-b5c2-48b3-9d39-2d17cd797252","resolution":{"observed_at":"2026-08-07T10:19:32.120677Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:19:31.863260Z","title":"Lakera guard,","venue":null,"work_id":"0da80a19-f707-42b4-9d15-83ca31e7a893","year":2024},"citing_paper":{"arxiv_id":"2506.05739","last_updated":"2025-06-06T04:50:57Z","snapshot_observed_at":"2026-08-14T19:11:05.887294Z","submitted_at":"2025-06-06T04:50:57Z","title":"To Protect the LLM Agent Against the Prompt Injection Attack with Polymorphic Prompt","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-07T10:19:27.913862Z"},"links":{"citing_paper":"/paper/2506.05739"},"observation_digest":"sha256:bfb30c90895ae0cd5a32307c63cbbd643522084848889f4aae650464ff13613b","observation_id":"500c2f87-c31b-4e10-9d1c-90c022980452","resolution":{"observed_at":"2026-08-07T10:19:31.932251Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:19:31.684946Z","title":"Amazon bedrock guardrails,","venue":null,"work_id":"67bad729-90d9-482b-8889-e92e16cb4493","year":2024},"citing_paper":{"arxiv_id":"2506.05739","last_updated":"2025-06-06T04:50:57Z","snapshot_observed_at":"2026-08-14T19:11:05.887294Z","submitted_at":"2025-06-06T04:50:57Z","title":"To Protect the LLM Agent Against the Prompt Injection Attack with Polymorphic Prompt","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T10:19:28.005174Z"},"links":{"citing_paper":"/paper/2506.05739"},"observation_digest":"sha256:59c893bb6118981a7252f4e8b08e309399aef961a9ada100baad4fe89ad965b1","observation_id":"a0b7df2b-7ab4-4cb2-82e0-12e05a47fa72","resolution":{"observed_at":"2026-08-07T10:19:31.774757Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:19:31.524323Z","title":"deberta-v3-base-prompt-injection-v2,","venue":null,"work_id":"dbc24512-d787-48f8-a130-84a11ac51b3d","year":2024},"citing_paper":{"arxiv_id":"2506.05739","last_updated":"2025-06-06T04:50:57Z","snapshot_observed_at":"2026-08-14T19:11:05.887294Z","submitted_at":"2025-06-06T04:50:57Z","title":"To Protect the LLM Agent Against the Prompt Injection Attack with Polymorphic Prompt","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-07T10:19:28.131590Z"},"links":{"citing_paper":"/paper/2506.05739"},"observation_digest":"sha256:e5b7493209cc64620dccc73800f8e3e9d99072c45d665a0c1a9ddfbcb597e0bc","observation_id":"32122546-539e-4fd2-bf09-6d0a96c12ef7","resolution":{"observed_at":"2026-08-07T10:19:31.609448Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:19:31.313861Z","title":"Prompt-guard-86m,","venue":null,"work_id":"45d4fb50-b8b5-434d-b18b-62bf6ecb2245","year":2024},"citing_paper":{"arxiv_id":"2506.05739","last_updated":"2025-06-06T04:50:57Z","snapshot_observed_at":"2026-08-14T19:11:05.887294Z","submitted_at":"2025-06-06T04:50:57Z","title":"To Protect the LLM Agent Against the Prompt Injection Attack with Polymorphic Prompt","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-07T10:19:28.214660Z"},"links":{"citing_paper":"/paper/2506.05739"},"observation_digest":"sha256:77fe97cbfb2f244476154295cd00ab182e81e804dc59c31320b9dbf769b08a86","observation_id":"558f4c3e-8610-458e-813a-a0b1ce25db54","resolution":{"observed_at":"2026-08-07T10:19:31.400317Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:19:31.145720Z","title":"deberta-v3-base-prompt-injection,","venue":null,"work_id":"e3ab2250-e441-4a4d-be5a-3204c11e02ab","year":2024},"citing_paper":{"arxiv_id":"2506.05739","last_updated":"2025-06-06T04:50:57Z","snapshot_observed_at":"2026-08-14T19:11:05.887294Z","submitted_at":"2025-06-06T04:50:57Z","title":"To Protect the LLM Agent Against the Prompt Injection Attack with Polymorphic Prompt","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-07T10:19:28.295069Z"},"links":{"citing_paper":"/paper/2506.05739"},"observation_digest":"sha256:7d0361aee4e39b728b328c7a323015b4c2deba7f64f635e62a68e857ae12f860","observation_id":"bf94cae6-80c4-4d2b-b631-fbef783bcb0c","resolution":{"observed_at":"2026-08-07T10:19:31.206818Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:19:30.947765Z","title":"Jailbreak detection in azure ai content safety,","venue":null,"work_id":"477f02d4-e617-4378-8efa-c80a21e4d318","year":2024},"citing_paper":{"arxiv_id":"2506.05739","last_updated":"2025-06-06T04:50:57Z","snapshot_observed_at":"2026-08-14T19:11:05.887294Z","submitted_at":"2025-06-06T04:50:57Z","title":"To Protect the LLM Agent Against the Prompt Injection Attack with Polymorphic Prompt","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-07T10:19:28.406950Z"},"links":{"citing_paper":"/paper/2506.05739"},"observation_digest":"sha256:04a07ddc46910370268869c7c04a01e81398ae074b5eace2d291a894dc0fcfe1","observation_id":"33d26895-6d97-408e-b2a4-db4629d80590","resolution":{"observed_at":"2026-08-07T10:19:31.063676Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:19:30.859310Z","title":"Langkit,","venue":null,"work_id":"b3b9b309-820e-4352-9646-321f54f2d5f0","year":2024},"citing_paper":{"arxiv_id":"2506.05739","last_updated":"2025-06-06T04:50:57Z","snapshot_observed_at":"2026-08-14T19:11:05.887294Z","submitted_at":"2025-06-06T04:50:57Z","title":"To Protect the LLM Agent Against the Prompt Injection Attack with Polymorphic Prompt","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-07T10:19:28.479974Z"},"links":{"citing_paper":"/paper/2506.05739"},"observation_digest":"sha256:9059791c81cb95833de10d263555f283613fc1a620da8e2d5c21f30c49437be6","observation_id":"45c6ec60-6a61-4521-971c-5940c0e0831e","resolution":{"observed_at":"2026-08-07T10:19:30.900752Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:19:30.600051Z","title":"Hyperion,","venue":null,"work_id":"2eb3d6f5-5386-4f94-b857-3ee9fba69464","year":2024},"citing_paper":{"arxiv_id":"2506.05739","last_updated":"2025-06-06T04:50:57Z","snapshot_observed_at":"2026-08-14T19:11:05.887294Z","submitted_at":"2025-06-06T04:50:57Z","title":"To Protect the LLM Agent Against the Prompt Injection Attack with Polymorphic Prompt","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-07T10:19:28.518088Z"},"links":{"citing_paper":"/paper/2506.05739"},"observation_digest":"sha256:09fbb059a7f5ae03a817f31d1a593fd8446128950eea91f063e049e486b026e3","observation_id":"ac9fb702-1e5d-4f88-865f-1eb06f38ddf9","resolution":{"observed_at":"2026-08-07T10:19:30.716482Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:19:30.384086Z","title":"distilbert-prompt-injection,","venue":null,"work_id":"1a46899e-a8f9-4b5f-9bbb-427d86ae9547","year":2024},"citing_paper":{"arxiv_id":"2506.05739","last_updated":"2025-06-06T04:50:57Z","snapshot_observed_at":"2026-08-14T19:11:05.887294Z","submitted_at":"2025-06-06T04:50:57Z","title":"To Protect the LLM Agent Against the Prompt Injection Attack with Polymorphic Prompt","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-07T10:19:28.622804Z"},"links":{"citing_paper":"/paper/2506.05739"},"observation_digest":"sha256:7c65c31b76ff3d8eae233b33c166a38fab3f546518f99607ab2f6c9870e02b52","observation_id":"eb8735e1-7ae1-4dfa-98ab-e2737ffc901b","resolution":{"observed_at":"2026-08-07T10:19:30.453066Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:19:30.206315Z","title":"deepset/deberta-v3-base-injection,","venue":null,"work_id":"9108b1d2-beb8-43d4-ac7c-9837304042bb","year":2024},"citing_paper":{"arxiv_id":"2506.05739","last_updated":"2025-06-06T04:50:57Z","snapshot_observed_at":"2026-08-14T19:11:05.887294Z","submitted_at":"2025-06-06T04:50:57Z","title":"To Protect the LLM Agent Against the Prompt Injection Attack with Polymorphic Prompt","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-07T10:19:28.682887Z"},"links":{"citing_paper":"/paper/2506.05739"},"observation_digest":"sha256:96a050f041ec49f93d240985611dfc78d7ff8311b4d4e6d0d40dddc70e07816c","observation_id":"7c7281b8-4d39-4244-9f8d-1b1cb2ffca47","resolution":{"observed_at":"2026-08-07T10:19:30.287872Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:19:30.037810Z","title":"setfit-prompt-injection-minilm-l3-v2,","venue":null,"work_id":"2b7467c8-3215-4aa1-a2ed-b8544613ee84","year":2024},"citing_paper":{"arxiv_id":"2506.05739","last_updated":"2025-06-06T04:50:57Z","snapshot_observed_at":"2026-08-14T19:11:05.887294Z","submitted_at":"2025-06-06T04:50:57Z","title":"To Protect the LLM Agent Against the Prompt Injection Attack with Polymorphic Prompt","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-07T10:19:28.720904Z"},"links":{"citing_paper":"/paper/2506.05739"},"observation_digest":"sha256:1faaaa25487b137964a0ba638d74a25ac0b200bb88bd54da6a7f6369b7404e81","observation_id":"0afe1ba4-9550-4ca1-95fe-40353059ef9d","resolution":{"observed_at":"2026-08-07T10:19:30.103815Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2409.19521","last_updated":"2024-09-29T02:35:38Z","snapshot_observed_at":"2026-08-12T22:35:19.734240Z","submitted_at":"2024-09-29T02:35:38Z","title":"GenTel-Safe: A Unified Benchmark and Shielding Framework for Defending Against Prompt Injection Attacks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.19521","snapshot_observed_at":"2026-08-07T10:19:28.764757Z","title":"Gentel-safe: A unified benchmark and shielding frame- work for defending against prompt injection attacks,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.05739","last_updated":"2025-06-06T04:50:57Z","snapshot_observed_at":"2026-08-14T19:11:05.887294Z","submitted_at":"2025-06-06T04:50:57Z","title":"To Protect the LLM Agent Against the Prompt Injection Attack with Polymorphic Prompt","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-07T10:19:28.764757Z"},"links":{"cited_paper":"/paper/2409.19521","citing_paper":"/paper/2506.05739"},"observation_digest":"sha256:1c317bba74f87c5388d8d51ae4ce7d9a40abdb8a1aa20d5c6e95a4af0ac08ca7","observation_id":"1603b887-b505-4a34-8d6e-dbdfaf762a35","resolution":{"observed_at":"2026-08-07T10:19:28.764757Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:19:29.944868Z","title":"Hyperion,","venue":null,"work_id":"2d2e5036-8cc2-44b5-a6fa-e77253ea335d","year":2024},"citing_paper":{"arxiv_id":"2506.05739","last_updated":"2025-06-06T04:50:57Z","snapshot_observed_at":"2026-08-14T19:11:05.887294Z","submitted_at":"2025-06-06T04:50:57Z","title":"To Protect the LLM Agent Against the Prompt Injection Attack with Polymorphic Prompt","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-07T10:19:28.809662Z"},"links":{"citing_paper":"/paper/2506.05739"},"observation_digest":"sha256:4eed51c7a060821807ddccfef0c8af933a02db17c372cc10863eca26dd089926","observation_id":"5debd830-fed0-465a-82e6-9663f7ce0a6f","resolution":{"observed_at":"2026-08-07T10:19:29.979847Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:19:29.850428Z","title":"Whylabs langkit,","venue":null,"work_id":"eff243ae-7468-450d-bf00-2a5b782dd179","year":2024},"citing_paper":{"arxiv_id":"2506.05739","last_updated":"2025-06-06T04:50:57Z","snapshot_observed_at":"2026-08-14T19:11:05.887294Z","submitted_at":"2025-06-06T04:50:57Z","title":"To Protect the LLM Agent Against the Prompt Injection Attack with Polymorphic Prompt","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-07T10:19:28.876771Z"},"links":{"citing_paper":"/paper/2506.05739"},"observation_digest":"sha256:6de2256b3483edba0093a44b1164d4a1cc9076e43f36b7fc1aff3c4c0b0baa9c","observation_id":"0790fb08-a6b7-4c05-9399-4a2322168d67","resolution":{"observed_at":"2026-08-07T10:19:29.897487Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:19:29.758526Z","title":"Baseline defenses for adversarial attacks against aligned language models,","venue":null,"work_id":"567de07e-5463-4dd1-8848-d318b4a7f257","year":null},"citing_paper":{"arxiv_id":"2506.05739","last_updated":"2025-06-06T04:50:57Z","snapshot_observed_at":"2026-08-14T19:11:05.887294Z","submitted_at":"2025-06-06T04:50:57Z","title":"To Protect the LLM Agent Against the Prompt Injection Attack with Polymorphic Prompt","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-07T10:19:28.928523Z"},"links":{"citing_paper":"/paper/2506.05739"},"observation_digest":"sha256:2853896e89688fe6acbf9afb9180c4b5b7ac995566f1d1e8d679c806eead639f","observation_id":"108b383e-74e9-4d8f-96c8-25e9dfffed09","resolution":{"observed_at":"2026-08-07T10:19:29.801080Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.13236","last_updated":"2024-10-17T05:40:54Z","snapshot_observed_at":"2026-08-15T12:00:10.531103Z","submitted_at":"2024-10-17T05:40:54Z","title":"SPIN: Self-Supervised Prompt INjection","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.13236","snapshot_observed_at":"2026-08-07T10:19:29.037606Z","title":"Spin: Self-supervised prompt injection,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.05739","last_updated":"2025-06-06T04:50:57Z","snapshot_observed_at":"2026-08-14T19:11:05.887294Z","submitted_at":"2025-06-06T04:50:57Z","title":"To Protect the LLM Agent Against the Prompt Injection Attack with Polymorphic Prompt","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-07T10:19:29.037606Z"},"links":{"cited_paper":"/paper/2410.13236","citing_paper":"/paper/2506.05739"},"observation_digest":"sha256:f9e97f2868cf36104c8908a5ee0fc2450289bd6b342255aa503822f911aca8bd","observation_id":"3c8fb94b-4777-46e7-94ff-26744ae080af","resolution":{"observed_at":"2026-08-07T10:19:29.037606Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.00459","last_updated":"2025-08-02T13:44:03Z","snapshot_observed_at":"2026-08-12T22:09:52.586424Z","submitted_at":"2024-11-01T09:14:21Z","title":"Defense Against Prompt Injection Attack by Leveraging Attack Techniques","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.00459","snapshot_observed_at":"2026-08-07T10:19:29.117892Z","title":"Defense against prompt injection attack by leveraging attack techniques,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.05739","last_updated":"2025-06-06T04:50:57Z","snapshot_observed_at":"2026-08-14T19:11:05.887294Z","submitted_at":"2025-06-06T04:50:57Z","title":"To Protect the LLM Agent Against the Prompt Injection Attack with Polymorphic Prompt","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-07T10:19:29.117892Z"},"links":{"cited_paper":"/paper/2411.00459","citing_paper":"/paper/2506.05739"},"observation_digest":"sha256:22cb7d9020184065ea9a5cef3faff8cb19c5446973d2ca111a4910508aa5d3d0","observation_id":"2f2592d3-4b80-4756-bf2a-7f45da7bafdc","resolution":{"observed_at":"2026-08-07T10:19:29.117892Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:19:29.540720Z","title":"Promptshield: Deployable detection for prompt in- jection attacks,","venue":null,"work_id":"1afdc326-4cd9-45b7-994a-dc7f16011a69","year":2025},"citing_paper":{"arxiv_id":"2506.05739","last_updated":"2025-06-06T04:50:57Z","snapshot_observed_at":"2026-08-14T19:11:05.887294Z","submitted_at":"2025-06-06T04:50:57Z","title":"To Protect the LLM Agent Against the Prompt Injection Attack with Polymorphic Prompt","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-07T10:19:29.189081Z"},"links":{"citing_paper":"/paper/2506.05739"},"observation_digest":"sha256:17a2e04583339d67018fb5a948f96401200342e682d351d0b16657ce6925331c","observation_id":"8e62fd7b-6eb0-491e-bc52-fff747fe3892","resolution":{"observed_at":"2026-08-07T10:19:29.616807Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:19:29.679340Z","title":"Available: https://arxiv.org/abs/2309","venue":null,"work_id":"8df9975b-97a6-417c-a28e-f7ccac5ba170","year":null},"citing_paper":{"arxiv_id":"2506.05739","last_updated":"2025-06-06T04:50:57Z","snapshot_observed_at":"2026-08-14T19:11:05.887294Z","submitted_at":"2025-06-06T04:50:57Z","title":"To Protect the LLM Agent Against the Prompt Injection Attack with Polymorphic Prompt","version":1},"reference_index":2023,"source":"pdf_text","source_observed_at":"2026-08-07T10:19:28.980854Z"},"links":{"citing_paper":"/paper/2506.05739"},"observation_digest":"sha256:436abd7451651a0adfcee8894afa7af09265ef615773601f62f74122e8082a3d","observation_id":"aca54fdb-28d2-4006-a64f-b22406a03e97","resolution":{"observed_at":"2026-08-07T10:19:29.713100Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2506.05739","last_updated":"2025-06-06T04:50:57Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-14T19:11:05.887294Z","submitted_at":"2025-06-06T04:50:57Z","title":"To Protect the LLM Agent Against the Prompt Injection Attack with Polymorphic Prompt"},"reference_resolution":{"displayed":38,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":15,"verified_exact":0,"verified_fuzzy":23},"total_outbound_references":38},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"thesis":"As of 15 August 2026, this Paper Citation Record lists 38 of 38 outbound references and 1 inbound Pith citation observation for arXiv:2506.05739."}