Paper Citation Record · LEDGER

LLMail-Inject: A Dataset from a Realistic Adaptive Prompt Injection Challenge

As of 22 August 2026, this Paper Citation Record lists 17 of 17 outbound references and 10 inbound Pith citation observations for arXiv:2506.09956.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2506.09956 v1

Coverage vector

measured 17 of 17 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-07T04:42:22.890490Z

measured 27 of 27 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-22T06:32:14.747728+00:00

measured 10 of 10 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-08-03T09:53:26.813252Z

measured 1 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: arxiv_reference, observed 2026-08-05T02:28:24.338817Z

Reference resolution

17 of 17 outbound references displayed

verified exact0
verified fuzzy6
unresolved11
parse uncertain0
malformed identifier0
metadata mismatch0

External citation measurements

0
arxiv_reference, observed 2026-08-05T02:28:24.338817Z

Outbound references

Observation 3772e3ad-af59-430c-a5f5-c8e7bf0d9392 · outbound

This paper cites With multiple emails, there will be a separator in between.

LLMail-Inject: A Dataset from a Realistic Adaptive Prompt Injection Challenge With multiple emails, there will be a separator in between

Reference 1

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T04:42:23.073443Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 6e52d77c-7194-450d-bcf7-8aae0f758fb2 · outbound

This paper cites You are a language model that serves as a guardrail for another language model, LLMail, which functions as an email client for a user.

LLMail-Inject: A Dataset from a Realistic Adaptive Prompt Injection Challenge You are a language model that serves as a guardrail for another language model, LLMail, which functions as an email client for a user

Reference 2

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T04:42:23.083580Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 0cdde9f9-48a0-41fb-bb09-addea86aff29 · outbound

This paper cites an unresolved cited work.

LLMail-Inject: A Dataset from a Realistic Adaptive Prompt Injection Challenge Unresolved cited work

Reference 3

Resolution: unresolved; raw_fallback, observed 2026-08-07T04:42:23.064037Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation f125bc83-ad94-48e1-a917-141bfcec9d99 · outbound

This paper cites an unresolved cited work.

LLMail-Inject: A Dataset from a Realistic Adaptive Prompt Injection Challenge Unresolved cited work

Reference 4

Resolution: unresolved; raw_fallback, observed 2026-08-07T04:42:23.054666Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation d43ee223-d3bd-4a10-ad4e-b9ff482738da · outbound

This paper cites Legitimate emails will have instructions or questions naturally fitting the corporate setting.

LLMail-Inject: A Dataset from a Realistic Adaptive Prompt Injection Challenge Legitimate emails will have instructions or questions naturally fitting the corporate setting

Reference 5

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T04:42:23.045614Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 0ec8504b-95cd-4126-8dda-86366b870c86 · outbound

This paper cites an unresolved cited work.

LLMail-Inject: A Dataset from a Realistic Adaptive Prompt Injection Challenge Unresolved cited work

Reference 6

Resolution: unresolved; raw_fallback, observed 2026-08-07T04:42:23.034966Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 0bb28e84-d808-406c-a580-03e967b9a073 · outbound

This paper cites an unresolved cited work.

LLMail-Inject: A Dataset from a Realistic Adaptive Prompt Injection Challenge Unresolved cited work

Reference 7

Resolution: unresolved; raw_fallback, observed 2026-08-07T04:42:23.025539Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation d669e438-930a-4fc8-9fb4-ccc17a7abe84 · outbound

This paper cites external_email.

LLMail-Inject: A Dataset from a Realistic Adaptive Prompt Injection Challenge external_email

Reference 8

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T04:42:23.015995Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 126797f1-32c4-446a-930f-01de5c704351 · outbound

This paper cites an unresolved cited work.

LLMail-Inject: A Dataset from a Realistic Adaptive Prompt Injection Challenge Unresolved cited work

Reference 9

Resolution: unresolved; raw_fallback, observed 2026-08-07T04:42:23.006240Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 015a6d72-10b7-437c-88b2-4c6cad38d3d1 · outbound

This paper cites an unresolved cited work.

LLMail-Inject: A Dataset from a Realistic Adaptive Prompt Injection Challenge Unresolved cited work

Reference 10

Resolution: unresolved; raw_fallback, observed 2026-08-07T04:42:22.996317Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 9c4c40ea-8fda-47dc-95eb-92896a2fd526 · outbound

This paper cites an unresolved cited work.

LLMail-Inject: A Dataset from a Realistic Adaptive Prompt Injection Challenge Unresolved cited work

Reference 11

Resolution: unresolved; raw_fallback, observed 2026-08-07T04:42:22.984991Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation f8b9fcc6-7908-4207-970b-745e82ddefd7 · outbound

This paper cites external_email.

LLMail-Inject: A Dataset from a Realistic Adaptive Prompt Injection Challenge external_email

Reference 12

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T04:42:22.974414Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 611a3cd4-59c0-4108-991d-e667df464554 · outbound

This paper cites an unresolved cited work.

LLMail-Inject: A Dataset from a Realistic Adaptive Prompt Injection Challenge Unresolved cited work

Reference 13

Resolution: unresolved; raw_fallback, observed 2026-08-07T04:42:22.964189Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation c1296c29-8d62-4a3b-a411-3ba4e73f39f3 · outbound

This paper cites an unresolved cited work.

LLMail-Inject: A Dataset from a Realistic Adaptive Prompt Injection Challenge Unresolved cited work

Reference 14

Resolution: unresolved; raw_fallback, observed 2026-08-07T04:42:22.954222Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 598800bd-5463-4730-a635-293402d306de · outbound

This paper cites an unresolved cited work.

LLMail-Inject: A Dataset from a Realistic Adaptive Prompt Injection Challenge Unresolved cited work

Reference 15

Resolution: unresolved; raw_fallback, observed 2026-08-07T04:42:22.943955Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 9b394b26-3ad2-4925-9053-817dc28de794 · outbound

This paper cites an unresolved cited work.

LLMail-Inject: A Dataset from a Realistic Adaptive Prompt Injection Challenge Unresolved cited work

Reference 16

Resolution: unresolved; raw_fallback, observed 2026-08-07T04:42:22.933483Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 6d167a25-0e07-47fc-a2a0-0e122429b03a · outbound

This paper cites analysis.

LLMail-Inject: A Dataset from a Realistic Adaptive Prompt Injection Challenge analysis

Reference 17

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T04:42:22.922570Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Pith citing papers

Observation 8bd715d7-f7a0-4256-bfab-ab909c2459dd · inbound

Exploiting Web Search Tools of AI Agents for Data Exfiltration cites this paper.

Exploiting Web Search Tools of AI Agents for Data Exfiltration LLMail-Inject: A Dataset from a Realistic Adaptive Prompt Injection Challenge

Reference 21

Resolution: metadata mismatch; arxiv_id, observed 2026-05-18T08:36:07.170207Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 292d39a3-b66a-4fb1-91aa-cf00bdc3ac89 · inbound

Zero-Shot Embedding Drift Detection: A Lightweight Defense Against Prompt Injections in LLMs cites this paper.

Zero-Shot Embedding Drift Detection: A Lightweight Defense Against Prompt Injections in LLMs LLMail-Inject: A Dataset from a Realistic Adaptive Prompt Injection Challenge

Reference 25

Resolution: unresolved; no resolver link, observed 2026-08-03T09:53:26.813252Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation d87fb476-40d3-43b5-9864-1659db4bf32d · inbound

MIPIAD: Multilingual Indirect Prompt Injection Attack Defense with Qwen -- TF-IDF Hybrid and Meta-Ensemble Learning cites this paper.

MIPIAD: Multilingual Indirect Prompt Injection Attack Defense with Qwen -- TF-IDF Hybrid and Meta-Ensemble Learning LLMail-Inject: A Dataset from a Realistic Adaptive Prompt Injection Challenge

Reference 1

Resolution: metadata mismatch; arxiv_id, observed 2026-05-11T02:30:54.974967Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 3de885e2-27c1-49ec-991a-3daa8b98d825 · inbound

IPI-proxy: An Intercepting Proxy for Red-Teaming Web-Browsing AI Agents Against Indirect Prompt Injection cites this paper.

IPI-proxy: An Intercepting Proxy for Red-Teaming Web-Browsing AI Agents Against Indirect Prompt Injection LLMail-Inject: A Dataset from a Realistic Adaptive Prompt Injection Challenge

Reference 13

Resolution: metadata mismatch; arxiv_id, observed 2026-05-13T05:47:21.331273Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 97207919-4a37-43e6-854d-6c8ab4354425 · inbound

Hallucination as Exploit: Evidence-Carrying Multimodal Agents cites this paper.

Hallucination as Exploit: Evidence-Carrying Multimodal Agents LLMail-Inject: A Dataset from a Realistic Adaptive Prompt Injection Challenge

Reference 15

Resolution: verified exact; arxiv_id, observed 2026-05-20T09:48:11.613289Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation a7576c63-1302-44cd-af45-633819c47b1d · inbound

Hallucination as Exploit: Evidence-Carrying Multimodal Agents cites this paper.

Hallucination as Exploit: Evidence-Carrying Multimodal Agents LLMail-Inject: A Dataset from a Realistic Adaptive Prompt Injection Challenge

Reference 15

Resolution: verified exact; arxiv_id, observed 2026-05-22T09:01:20.082441Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation afc290ae-49c2-4930-85f2-90a9ec026692 · inbound

Gate AI: LLM Security Benchmark Evaluation Methodology and Results cites this paper.

Gate AI: LLM Security Benchmark Evaluation Methodology and Results LLMail-Inject: A Dataset from a Realistic Adaptive Prompt Injection Challenge

Reference 9

Resolution: verified exact; arxiv_id, observed 2026-07-01T22:46:19.219188Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 8230551b-af0c-437d-8d15-8bf36cbeea86 · inbound

Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation cites this paper.

Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation LLMail-Inject: A Dataset from a Realistic Adaptive Prompt Injection Challenge

Reference 1

Resolution: verified exact; arxiv_id, observed 2026-06-27T13:10:57.016363Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation eeab99f2-73e8-4017-9379-4f198eb426cd · inbound

Confidently Wrong: Severity-Aware Calibration of Prompt-Injection Detectors under Attack Shift cites this paper.

Confidently Wrong: Severity-Aware Calibration of Prompt-Injection Detectors under Attack Shift LLMail-Inject: A Dataset from a Realistic Adaptive Prompt Injection Challenge

Reference 18

Resolution: verified exact; arxiv_id, observed 2026-07-04T09:29:44.082630Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation aeac695c-9b02-4acc-84eb-a808e7344957 · inbound

ContainmentBench: Trace-Based Evaluation of Post-Injection Containment in Tool-Using LLM Agents cites this paper.

ContainmentBench: Trace-Based Evaluation of Post-Injection Containment in Tool-Using LLM Agents LLMail-Inject: A Dataset from a Realistic Adaptive Prompt Injection Challenge

Reference 1

Resolution: unresolved; no resolver link, observed 2026-07-31T23:24:19.497728Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.