{"as_of":"2026-08-22T14:53:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:5d5ea27dc66e6b37a9c30b8dbaa94f9d13eab35e44cc75bd0eff50c0f246e8c8","coverage":[{"denominator":17,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":17,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T04:42:22.890490Z","state":"measured"},{"denominator":27,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":27,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-22T06:32:14.747728+00:00","state":"measured"},{"denominator":10,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":10,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-03T09:53:26.813252Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":1,"source":"arxiv_reference","source_observed_at":"2026-08-05T02:28:24.338817Z","state":"measured"}],"external_citation_measurements":[{"count":0,"observed_at":"2026-08-05T02:28:24.338817Z","source":"arxiv_reference"}],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2506.09956","last_updated":"2025-06-11T17:30:07Z","snapshot_observed_at":"2026-08-16T05:05:43.573600Z","submitted_at":"2025-06-11T17:30:07Z","title":"LLMail-Inject: A Dataset from a Realistic Adaptive Prompt Injection Challenge","version":1},"cited_work":{"arxiv_id":"2506.09956","doi":"10.48550/arxiv.2506.09956","metadata_source":"arxiv_reference","pith_arxiv_id":"2506.09956","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"2506.09956 , archivePrefix =","venue":"ArXiv.org","work_id":"bf53cb61-0d90-4b91-b30d-e0a378587ee6","year":2025},"citing_paper":{"arxiv_id":"2510.09093","last_updated":"2026-04-10T06:21:50Z","snapshot_observed_at":"2026-08-13T02:32:03.178399Z","submitted_at":"2025-10-10T07:39:01Z","title":"Exploiting Web Search Tools of AI Agents for Data Exfiltration","version":2},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-05-18T08:36:04.262528Z"},"links":{"cited_paper":"/paper/2506.09956","citing_paper":"/paper/2510.09093"},"observation_digest":"sha256:4012d6cca031e2bc9d84b3ef70357165930566131102b02452203ac8ba2e2a0b","observation_id":"8bd715d7-f7a0-4256-bfab-ab909c2459dd","resolution":{"observed_at":"2026-05-18T08:36:07.170207Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.09956","last_updated":"2025-06-11T17:30:07Z","snapshot_observed_at":"2026-08-16T05:05:43.573600Z","submitted_at":"2025-06-11T17:30:07Z","title":"LLMail-Inject: A Dataset from a Realistic Adaptive Prompt Injection Challenge","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.09956","snapshot_observed_at":"2026-08-03T09:53:26.813252Z","title":"Llmail-inject: A dataset from a realistic adaptive prompt injection challenge, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.12359","last_updated":"2026-01-18T11:33:35Z","snapshot_observed_at":"2026-08-18T04:07:42.540702Z","submitted_at":"2026-01-18T11:33:35Z","title":"Zero-Shot Embedding Drift Detection: A Lightweight Defense Against Prompt Injections in LLMs","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-03T09:53:26.813252Z"},"links":{"cited_paper":"/paper/2506.09956","citing_paper":"/paper/2601.12359"},"observation_digest":"sha256:eb30ffb85889a720820d1ab9d057bc422b955c55d1e0ad3c5d332c3c62f4fef6","observation_id":"292d39a3-b66a-4fb1-91aa-cf00bdc3ac89","resolution":{"observed_at":"2026-08-03T09:53:26.813252Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.09956","last_updated":"2025-06-11T17:30:07Z","snapshot_observed_at":"2026-08-16T05:05:43.573600Z","submitted_at":"2025-06-11T17:30:07Z","title":"LLMail-Inject: A Dataset from a Realistic Adaptive Prompt Injection Challenge","version":1},"cited_work":{"arxiv_id":"2506.09956","doi":"10.48550/arxiv.2506.09956","metadata_source":"arxiv_reference","pith_arxiv_id":"2506.09956","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"2506.09956 , archivePrefix =","venue":"ArXiv.org","work_id":"bf53cb61-0d90-4b91-b30d-e0a378587ee6","year":2025},"citing_paper":{"arxiv_id":"2605.07269","last_updated":"2026-05-08T05:34:28Z","snapshot_observed_at":"2026-07-06T23:19:41.053744Z","submitted_at":"2026-05-08T05:34:28Z","title":"MIPIAD: Multilingual Indirect Prompt Injection Attack Defense with Qwen -- TF-IDF Hybrid and Meta-Ensemble Learning","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-05-11T02:29:13.992357Z"},"links":{"cited_paper":"/paper/2506.09956","citing_paper":"/paper/2605.07269"},"observation_digest":"sha256:9140dbebe7a95f7c1676164564783d2b8e95f7c68288f944d4a8e062ac615acd","observation_id":"d87fb476-40d3-43b5-9864-1659db4bf32d","resolution":{"observed_at":"2026-05-11T02:30:54.974967Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.09956","last_updated":"2025-06-11T17:30:07Z","snapshot_observed_at":"2026-08-16T05:05:43.573600Z","submitted_at":"2025-06-11T17:30:07Z","title":"LLMail-Inject: A Dataset from a Realistic Adaptive Prompt Injection Challenge","version":1},"cited_work":{"arxiv_id":"2506.09956","doi":"10.48550/arxiv.2506.09956","metadata_source":"arxiv_reference","pith_arxiv_id":"2506.09956","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"2506.09956 , archivePrefix =","venue":"ArXiv.org","work_id":"bf53cb61-0d90-4b91-b30d-e0a378587ee6","year":2025},"citing_paper":{"arxiv_id":"2605.11868","last_updated":"2026-05-12T09:48:53Z","snapshot_observed_at":"2026-07-06T23:23:39.723268Z","submitted_at":"2026-05-12T09:48:53Z","title":"IPI-proxy: An Intercepting Proxy for Red-Teaming Web-Browsing AI Agents Against Indirect Prompt Injection","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-05-13T05:46:07.132408Z"},"links":{"cited_paper":"/paper/2506.09956","citing_paper":"/paper/2605.11868"},"observation_digest":"sha256:1e279f1f07898cb30808ad8556acea0d56db2303a00a4385f325bb8d42260964","observation_id":"3de885e2-27c1-49ec-991a-3daa8b98d825","resolution":{"observed_at":"2026-05-13T05:47:21.331273Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.09956","last_updated":"2025-06-11T17:30:07Z","snapshot_observed_at":"2026-08-16T05:05:43.573600Z","submitted_at":"2025-06-11T17:30:07Z","title":"LLMail-Inject: A Dataset from a Realistic Adaptive Prompt Injection Challenge","version":1},"cited_work":{"arxiv_id":"2506.09956","doi":"10.48550/arxiv.2506.09956","metadata_source":"arxiv_reference","pith_arxiv_id":"2506.09956","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"2506.09956 , archivePrefix =","venue":"ArXiv.org","work_id":"bf53cb61-0d90-4b91-b30d-e0a378587ee6","year":2025},"citing_paper":{"arxiv_id":"2605.19192","last_updated":"2026-05-20T21:49:08Z","snapshot_observed_at":"2026-08-03T06:06:31.296336Z","submitted_at":"2026-05-18T23:40:43Z","title":"Hallucination as Exploit: Evidence-Carrying Multimodal Agents","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-05-20T09:46:42.413501Z"},"links":{"cited_paper":"/paper/2506.09956","citing_paper":"/paper/2605.19192"},"observation_digest":"sha256:647ab6fa23a90b44dc005a037830dfeeb41f516e311d14ae36fdcfb8eff38295","observation_id":"97207919-4a37-43e6-854d-6c8ab4354425","resolution":{"observed_at":"2026-05-20T09:48:11.613289Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.09956","last_updated":"2025-06-11T17:30:07Z","snapshot_observed_at":"2026-08-16T05:05:43.573600Z","submitted_at":"2025-06-11T17:30:07Z","title":"LLMail-Inject: A Dataset from a Realistic Adaptive Prompt Injection Challenge","version":1},"cited_work":{"arxiv_id":"2506.09956","doi":"10.48550/arxiv.2506.09956","metadata_source":"arxiv_reference","pith_arxiv_id":"2506.09956","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"2506.09956 , archivePrefix =","venue":"ArXiv.org","work_id":"bf53cb61-0d90-4b91-b30d-e0a378587ee6","year":2025},"citing_paper":{"arxiv_id":"2605.19192","last_updated":"2026-05-20T21:49:08Z","snapshot_observed_at":"2026-08-03T06:06:31.296336Z","submitted_at":"2026-05-18T23:40:43Z","title":"Hallucination as Exploit: Evidence-Carrying Multimodal Agents","version":2},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-05-22T08:57:29.491043Z"},"links":{"cited_paper":"/paper/2506.09956","citing_paper":"/paper/2605.19192"},"observation_digest":"sha256:61277824b6aa99201ee73b86853cafcf12e61f42ef1e7ef1e87913f02a197ca8","observation_id":"a7576c63-1302-44cd-af45-633819c47b1d","resolution":{"observed_at":"2026-05-22T09:01:20.082441Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.09956","last_updated":"2025-06-11T17:30:07Z","snapshot_observed_at":"2026-08-16T05:05:43.573600Z","submitted_at":"2025-06-11T17:30:07Z","title":"LLMail-Inject: A Dataset from a Realistic Adaptive Prompt Injection Challenge","version":1},"cited_work":{"arxiv_id":"2506.09956","doi":"10.48550/arxiv.2506.09956","metadata_source":"arxiv_reference","pith_arxiv_id":"2506.09956","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"2506.09956 , archivePrefix =","venue":"ArXiv.org","work_id":"bf53cb61-0d90-4b91-b30d-e0a378587ee6","year":2025},"citing_paper":{"arxiv_id":"2606.02959","last_updated":"2026-06-01T23:29:58Z","snapshot_observed_at":"2026-08-13T05:09:28.234752Z","submitted_at":"2026-06-01T23:29:58Z","title":"Gate AI: LLM Security Benchmark Evaluation Methodology and Results","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-06-28T15:05:08.411286Z"},"links":{"cited_paper":"/paper/2506.09956","citing_paper":"/paper/2606.02959"},"observation_digest":"sha256:b0a34136d238dc0b99e10d2fe56afa3188de55f50a9dc48f867a847bb9f666d3","observation_id":"afc290ae-49c2-4930-85f2-90a9ec026692","resolution":{"observed_at":"2026-07-01T22:46:19.219188Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.09956","last_updated":"2025-06-11T17:30:07Z","snapshot_observed_at":"2026-08-16T05:05:43.573600Z","submitted_at":"2025-06-11T17:30:07Z","title":"LLMail-Inject: A Dataset from a Realistic Adaptive Prompt Injection Challenge","version":1},"cited_work":{"arxiv_id":"2506.09956","doi":"10.48550/arxiv.2506.09956","metadata_source":"arxiv_reference","pith_arxiv_id":"2506.09956","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"2506.09956 , archivePrefix =","venue":"ArXiv.org","work_id":"bf53cb61-0d90-4b91-b30d-e0a378587ee6","year":2025},"citing_paper":{"arxiv_id":"2606.10749","last_updated":"2026-06-09T12:01:07Z","snapshot_observed_at":"2026-08-14T19:50:49.492797Z","submitted_at":"2026-06-09T12:01:07Z","title":"Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-06-27T12:55:22.831264Z"},"links":{"cited_paper":"/paper/2506.09956","citing_paper":"/paper/2606.10749"},"observation_digest":"sha256:3c7f4f71b7d382a447b6017a0059ab6866189c999c2494fc2b955a5704080267","observation_id":"8230551b-af0c-437d-8d15-8bf36cbeea86","resolution":{"observed_at":"2026-06-27T13:10:57.016363Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.09956","last_updated":"2025-06-11T17:30:07Z","snapshot_observed_at":"2026-08-16T05:05:43.573600Z","submitted_at":"2025-06-11T17:30:07Z","title":"LLMail-Inject: A Dataset from a Realistic Adaptive Prompt Injection Challenge","version":1},"cited_work":{"arxiv_id":"2506.09956","doi":"10.48550/arxiv.2506.09956","metadata_source":"arxiv_reference","pith_arxiv_id":"2506.09956","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"2506.09956 , archivePrefix =","venue":"ArXiv.org","work_id":"bf53cb61-0d90-4b91-b30d-e0a378587ee6","year":2025},"citing_paper":{"arxiv_id":"2606.22659","last_updated":"2026-06-21T20:30:12Z","snapshot_observed_at":"2026-08-12T14:45:22.312522Z","submitted_at":"2026-06-21T20:30:12Z","title":"Confidently Wrong: Severity-Aware Calibration of Prompt-Injection Detectors under Attack Shift","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-06-26T09:55:08.178751Z"},"links":{"cited_paper":"/paper/2506.09956","citing_paper":"/paper/2606.22659"},"observation_digest":"sha256:75e8e0ef45d0a530521a2c25ec37971d739d752dbc04ae2c52333637a338e699","observation_id":"eeab99f2-73e8-4017-9379-4f198eb426cd","resolution":{"observed_at":"2026-07-04T09:29:44.082630Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.09956","last_updated":"2025-06-11T17:30:07Z","snapshot_observed_at":"2026-08-16T05:05:43.573600Z","submitted_at":"2025-06-11T17:30:07Z","title":"LLMail-Inject: A Dataset from a Realistic Adaptive Prompt Injection Challenge","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.09956","snapshot_observed_at":"2026-07-31T23:24:19.497728Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.23999","last_updated":"2026-07-28T07:27:46Z","snapshot_observed_at":"2026-08-15T13:44:43.771184Z","submitted_at":"2026-07-27T04:51:20Z","title":"ContainmentBench: Trace-Based Evaluation of Post-Injection Containment in Tool-Using LLM Agents","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-07-31T23:24:19.497728Z"},"links":{"cited_paper":"/paper/2506.09956","citing_paper":"/paper/2607.23999"},"observation_digest":"sha256:ee9094d59a6739a4d37ffcb41da137ea86513527a666be11bf2ff285d1e848e6","observation_id":"aeac695c-9b02-4acc-84eb-a808e7344957","resolution":{"observed_at":"2026-07-31T23:24:19.497728Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2506.09956/citation-record","integrity":"/paper/2506.09956/integrity","json":"/paper/2506.09956/citation-record.json","paper":"/paper/2506.09956"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T04:42:23.070115Z","title":"With multiple emails, there will be a separator in between","venue":null,"work_id":"c83e7868-b140-48ea-9fbb-24c69406aacd","year":null},"citing_paper":{"arxiv_id":"2506.09956","last_updated":"2025-06-11T17:30:07Z","snapshot_observed_at":"2026-08-16T05:05:43.573600Z","submitted_at":"2025-06-11T17:30:07Z","title":"LLMail-Inject: A Dataset from a Realistic Adaptive Prompt Injection Challenge","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-07T04:42:22.839179Z"},"links":{"citing_paper":"/paper/2506.09956"},"observation_digest":"sha256:a239e4d62197a7dae3fe085192bf82f3f4761e3c89c5f368488b3327ee0c2219","observation_id":"3772e3ad-af59-430c-a5f5-c8e7bf0d9392","resolution":{"observed_at":"2026-08-07T04:42:23.073443Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T04:42:23.079433Z","title":"You are a language model that serves as a guardrail for another language model, LLMail, which functions as an email client for a user","venue":null,"work_id":"91aed65c-0315-4fed-b7b1-4de26d160b0b","year":null},"citing_paper":{"arxiv_id":"2506.09956","last_updated":"2025-06-11T17:30:07Z","snapshot_observed_at":"2026-08-16T05:05:43.573600Z","submitted_at":"2025-06-11T17:30:07Z","title":"LLMail-Inject: A Dataset from a Realistic Adaptive Prompt Injection Challenge","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-07T04:42:22.834943Z"},"links":{"citing_paper":"/paper/2506.09956"},"observation_digest":"sha256:cf0d55da9c56c53fb110fb1214242dbaeae051e0f85b5a81ac5973ed69ab8a2a","observation_id":"6e52d77c-7194-450d-bcf7-8aae0f758fb2","resolution":{"observed_at":"2026-08-07T04:42:23.083580Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T04:42:23.060817Z","title":null,"venue":null,"work_id":"c7ab027e-8b73-445a-bfab-3edf4e685b4d","year":null},"citing_paper":{"arxiv_id":"2506.09956","last_updated":"2025-06-11T17:30:07Z","snapshot_observed_at":"2026-08-16T05:05:43.573600Z","submitted_at":"2025-06-11T17:30:07Z","title":"LLMail-Inject: A Dataset from a Realistic Adaptive Prompt Injection Challenge","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T04:42:22.842863Z"},"links":{"citing_paper":"/paper/2506.09956"},"observation_digest":"sha256:7c63b698093163ec813588d53f537855ac812ce1262a3c6f05d85ec48cd63ea0","observation_id":"0cdde9f9-48a0-41fb-bb09-addea86aff29","resolution":{"observed_at":"2026-08-07T04:42:23.064037Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T04:42:23.051553Z","title":null,"venue":null,"work_id":"852c600f-e2e4-4561-a57f-d228d3f5d5f3","year":null},"citing_paper":{"arxiv_id":"2506.09956","last_updated":"2025-06-11T17:30:07Z","snapshot_observed_at":"2026-08-16T05:05:43.573600Z","submitted_at":"2025-06-11T17:30:07Z","title":"LLMail-Inject: A Dataset from a Realistic Adaptive Prompt Injection Challenge","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T04:42:22.846289Z"},"links":{"citing_paper":"/paper/2506.09956"},"observation_digest":"sha256:503b0eee83628007de8f5e721cf0d2aca2a6bcf29e59868445db16087ce8397d","observation_id":"f125bc83-ad94-48e1-a917-141bfcec9d99","resolution":{"observed_at":"2026-08-07T04:42:23.054666Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T04:42:23.041133Z","title":"Legitimate emails will have instructions or questions naturally fitting the corporate setting","venue":null,"work_id":"9bff8de0-8623-432d-b6be-08fba3fdf123","year":null},"citing_paper":{"arxiv_id":"2506.09956","last_updated":"2025-06-11T17:30:07Z","snapshot_observed_at":"2026-08-16T05:05:43.573600Z","submitted_at":"2025-06-11T17:30:07Z","title":"LLMail-Inject: A Dataset from a Realistic Adaptive Prompt Injection Challenge","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-07T04:42:22.849993Z"},"links":{"citing_paper":"/paper/2506.09956"},"observation_digest":"sha256:7cb8511d47274c06a79a72be24e6ad69d44296d65457c3028e46003764ec19d8","observation_id":"d43ee223-d3bd-4a10-ad4e-b9ff482738da","resolution":{"observed_at":"2026-08-07T04:42:23.045614Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T04:42:23.031798Z","title":null,"venue":null,"work_id":"ec751002-6210-403c-99ea-a0c3c0c42d44","year":null},"citing_paper":{"arxiv_id":"2506.09956","last_updated":"2025-06-11T17:30:07Z","snapshot_observed_at":"2026-08-16T05:05:43.573600Z","submitted_at":"2025-06-11T17:30:07Z","title":"LLMail-Inject: A Dataset from a Realistic Adaptive Prompt Injection Challenge","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T04:42:22.854362Z"},"links":{"citing_paper":"/paper/2506.09956"},"observation_digest":"sha256:0edfb540775119dfe9a228c2a6d201589da22df4bc02587daff84b0ea1d65226","observation_id":"0ec8504b-95cd-4126-8dda-86366b870c86","resolution":{"observed_at":"2026-08-07T04:42:23.034966Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T04:42:23.022237Z","title":null,"venue":null,"work_id":"aa9328a7-b4b8-4ea4-b60d-aec256262cfe","year":null},"citing_paper":{"arxiv_id":"2506.09956","last_updated":"2025-06-11T17:30:07Z","snapshot_observed_at":"2026-08-16T05:05:43.573600Z","submitted_at":"2025-06-11T17:30:07Z","title":"LLMail-Inject: A Dataset from a Realistic Adaptive Prompt Injection Challenge","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T04:42:22.858323Z"},"links":{"citing_paper":"/paper/2506.09956"},"observation_digest":"sha256:8935775343a65a90f504ac178579fbd80c6a15a5cf47a67802f40f0b8499fe39","observation_id":"0bb28e84-d808-406c-a580-03e967b9a073","resolution":{"observed_at":"2026-08-07T04:42:23.025539Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T04:42:23.012669Z","title":"external_email","venue":null,"work_id":"c5916320-cc8a-45a2-be67-81aedf1d46cb","year":null},"citing_paper":{"arxiv_id":"2506.09956","last_updated":"2025-06-11T17:30:07Z","snapshot_observed_at":"2026-08-16T05:05:43.573600Z","submitted_at":"2025-06-11T17:30:07Z","title":"LLMail-Inject: A Dataset from a Realistic Adaptive Prompt Injection Challenge","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-07T04:42:22.861498Z"},"links":{"citing_paper":"/paper/2506.09956"},"observation_digest":"sha256:cd80ef8d1faeef723449dc11e6a42e9eaab29e21e68cf23e4003010475373028","observation_id":"d669e438-930a-4fc8-9fb4-ccc17a7abe84","resolution":{"observed_at":"2026-08-07T04:42:23.015995Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T04:42:23.002760Z","title":null,"venue":null,"work_id":"307a666d-4a37-461a-ae6f-a2355130014f","year":null},"citing_paper":{"arxiv_id":"2506.09956","last_updated":"2025-06-11T17:30:07Z","snapshot_observed_at":"2026-08-16T05:05:43.573600Z","submitted_at":"2025-06-11T17:30:07Z","title":"LLMail-Inject: A Dataset from a Realistic Adaptive Prompt Injection Challenge","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T04:42:22.864752Z"},"links":{"citing_paper":"/paper/2506.09956"},"observation_digest":"sha256:469a4b858e7749dc95da02c90bb2e6dfd205b83edf53d82cce43e5d153757faf","observation_id":"126797f1-32c4-446a-930f-01de5c704351","resolution":{"observed_at":"2026-08-07T04:42:23.006240Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T04:42:22.992848Z","title":null,"venue":null,"work_id":"f83d8411-f3b3-48f7-8573-74968d592619","year":null},"citing_paper":{"arxiv_id":"2506.09956","last_updated":"2025-06-11T17:30:07Z","snapshot_observed_at":"2026-08-16T05:05:43.573600Z","submitted_at":"2025-06-11T17:30:07Z","title":"LLMail-Inject: A Dataset from a Realistic Adaptive Prompt Injection Challenge","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T04:42:22.867804Z"},"links":{"citing_paper":"/paper/2506.09956"},"observation_digest":"sha256:d0bba8b9cccda2735404df8c5e433a9bf8d3688953ad8225d8ce3230ae255eab","observation_id":"015a6d72-10b7-437c-88b2-4c6cad38d3d1","resolution":{"observed_at":"2026-08-07T04:42:22.996317Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T04:42:22.981237Z","title":null,"venue":null,"work_id":"39f692eb-2e8d-4337-9250-36f3e47241f8","year":null},"citing_paper":{"arxiv_id":"2506.09956","last_updated":"2025-06-11T17:30:07Z","snapshot_observed_at":"2026-08-16T05:05:43.573600Z","submitted_at":"2025-06-11T17:30:07Z","title":"LLMail-Inject: A Dataset from a Realistic Adaptive Prompt Injection Challenge","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T04:42:22.870858Z"},"links":{"citing_paper":"/paper/2506.09956"},"observation_digest":"sha256:444244004b0bc4c38b01cda389f2afc17e0043111da34fd654d6d9975d707f50","observation_id":"9c4c40ea-8fda-47dc-95eb-92896a2fd526","resolution":{"observed_at":"2026-08-07T04:42:22.984991Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T04:42:22.971182Z","title":"external_email","venue":null,"work_id":"90bb766a-74ea-4777-81d9-9c297e5c06a1","year":null},"citing_paper":{"arxiv_id":"2506.09956","last_updated":"2025-06-11T17:30:07Z","snapshot_observed_at":"2026-08-16T05:05:43.573600Z","submitted_at":"2025-06-11T17:30:07Z","title":"LLMail-Inject: A Dataset from a Realistic Adaptive Prompt Injection Challenge","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T04:42:22.874151Z"},"links":{"citing_paper":"/paper/2506.09956"},"observation_digest":"sha256:6564b630c2e1934e04335f5b38c62621afe5e358f2b23a3e95190c19138d96b7","observation_id":"f8b9fcc6-7908-4207-970b-745e82ddefd7","resolution":{"observed_at":"2026-08-07T04:42:22.974414Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T04:42:22.960666Z","title":null,"venue":null,"work_id":"3a21a8ed-beba-4e6f-b829-76c718ca0a0a","year":null},"citing_paper":{"arxiv_id":"2506.09956","last_updated":"2025-06-11T17:30:07Z","snapshot_observed_at":"2026-08-16T05:05:43.573600Z","submitted_at":"2025-06-11T17:30:07Z","title":"LLMail-Inject: A Dataset from a Realistic Adaptive Prompt Injection Challenge","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T04:42:22.877315Z"},"links":{"citing_paper":"/paper/2506.09956"},"observation_digest":"sha256:ae97532427bbbd5dc225fa3e4f3f251c084da7b29d0b7958348be98a5f9f70f3","observation_id":"611a3cd4-59c0-4108-991d-e667df464554","resolution":{"observed_at":"2026-08-07T04:42:22.964189Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T04:42:22.950805Z","title":null,"venue":null,"work_id":"a3b483d3-87c9-4074-94d4-58bcd15c10db","year":null},"citing_paper":{"arxiv_id":"2506.09956","last_updated":"2025-06-11T17:30:07Z","snapshot_observed_at":"2026-08-16T05:05:43.573600Z","submitted_at":"2025-06-11T17:30:07Z","title":"LLMail-Inject: A Dataset from a Realistic Adaptive Prompt Injection Challenge","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-07T04:42:22.881003Z"},"links":{"citing_paper":"/paper/2506.09956"},"observation_digest":"sha256:1e9305c2e327bbc3b457d81b083ebd030923a7b7ee701df7bbb71ea9b2fd16b5","observation_id":"c1296c29-8d62-4a3b-a411-3ba4e73f39f3","resolution":{"observed_at":"2026-08-07T04:42:22.954222Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T04:42:22.940566Z","title":null,"venue":null,"work_id":"c605dc6e-70a0-4b67-b5b8-f98545a943d5","year":null},"citing_paper":{"arxiv_id":"2506.09956","last_updated":"2025-06-11T17:30:07Z","snapshot_observed_at":"2026-08-16T05:05:43.573600Z","submitted_at":"2025-06-11T17:30:07Z","title":"LLMail-Inject: A Dataset from a Realistic Adaptive Prompt Injection Challenge","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T04:42:22.884301Z"},"links":{"citing_paper":"/paper/2506.09956"},"observation_digest":"sha256:d787828ee81f964920ec328d1b29faa6c17c36aa7ba0d25d204d7b28c885fb81","observation_id":"598800bd-5463-4730-a635-293402d306de","resolution":{"observed_at":"2026-08-07T04:42:22.943955Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T04:42:22.930098Z","title":null,"venue":null,"work_id":"dd239cf5-835f-466b-bc6d-37c582045929","year":null},"citing_paper":{"arxiv_id":"2506.09956","last_updated":"2025-06-11T17:30:07Z","snapshot_observed_at":"2026-08-16T05:05:43.573600Z","submitted_at":"2025-06-11T17:30:07Z","title":"LLMail-Inject: A Dataset from a Realistic Adaptive Prompt Injection Challenge","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T04:42:22.887371Z"},"links":{"citing_paper":"/paper/2506.09956"},"observation_digest":"sha256:9bd3c51e4b5cccc571d9e73b508d205be5b8bf8f4aad0977af91256feae0ab33","observation_id":"9b394b26-3ad2-4925-9053-817dc28de794","resolution":{"observed_at":"2026-08-07T04:42:22.933483Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T04:42:22.917952Z","title":"analysis","venue":null,"work_id":"52fc56a2-a943-447b-b746-011d364dadc9","year":2025},"citing_paper":{"arxiv_id":"2506.09956","last_updated":"2025-06-11T17:30:07Z","snapshot_observed_at":"2026-08-16T05:05:43.573600Z","submitted_at":"2025-06-11T17:30:07Z","title":"LLMail-Inject: A Dataset from a Realistic Adaptive Prompt Injection Challenge","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-07T04:42:22.890490Z"},"links":{"citing_paper":"/paper/2506.09956"},"observation_digest":"sha256:3d08961af3e78d2e7de3ae4670bbab6a47ebd873b792b263e68346a3bfc5df90","observation_id":"6d167a25-0e07-47fc-a2a0-0e122429b03a","resolution":{"observed_at":"2026-08-07T04:42:22.922570Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2506.09956","last_updated":"2025-06-11T17:30:07Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-16T05:05:43.573600Z","submitted_at":"2025-06-11T17:30:07Z","title":"LLMail-Inject: A Dataset from a Realistic Adaptive Prompt Injection Challenge"},"reference_resolution":{"displayed":17,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":11,"verified_exact":0,"verified_fuzzy":6},"total_outbound_references":17},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"thesis":"As of 22 August 2026, this Paper Citation Record lists 17 of 17 outbound references and 10 inbound Pith citation observations for arXiv:2506.09956."}