{"as_of":"2026-08-09T16:08:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:b1e5f23a048d93b1073c07694ca26c7a6df4f562da9d72f764363f911fad65ce","coverage":[{"denominator":59,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":59,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T18:32:44.393617Z","state":"measured"},{"denominator":67,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":67,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":8,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":8,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-05T15:26:33.475946Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-04T00:59:20.691622Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-09T06:15:46.568294Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2507.07974","snapshot_observed_at":"2026-08-05T15:26:33.475946Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.19870","last_updated":"2025-08-27T13:33:35Z","snapshot_observed_at":"2026-08-07T05:20:03.066438Z","submitted_at":"2025-08-27T13:33:35Z","title":"Secure Multi-LLM Agentic AI and Agentification for Edge General Intelligence by Zero-Trust: A Survey","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-05T15:26:33.475946Z"},"links":{"cited_paper":"/paper/2507.07974","citing_paper":"/paper/2508.19870"},"observation_digest":"sha256:696b99f8d90d8e45b45d93db048c3bc1c220af1f7db50bc0c9a8442791929495","observation_id":"00efaf60-b293-480a-b774-31e490f8f738","resolution":{"observed_at":"2026-08-05T15:26:33.475946Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-09T06:15:46.568294Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2507.07974","snapshot_observed_at":"2026-08-05T10:44:10.395605Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2509.03787","last_updated":"2025-09-04T00:45:58Z","snapshot_observed_at":"2026-08-08T11:14:03.361977Z","submitted_at":"2025-09-04T00:45:58Z","title":"Evaluating the Robustness of Retrieval-Augmented Generation to Adversarial Evidence in the Health Domain","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-05T10:44:10.395605Z"},"links":{"cited_paper":"/paper/2507.07974","citing_paper":"/paper/2509.03787"},"observation_digest":"sha256:125c52130d1a6c22e44b82c7bf5712fd5d60e9c37d92bb12828c314b639a473f","observation_id":"3759cf91-e76f-435b-a7b1-a60fb611481f","resolution":{"observed_at":"2026-08-05T10:44:10.395605Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-09T06:15:46.568294Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"cited_work":{"arxiv_id":"2507.07974","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2507.07974","snapshot_observed_at":"2026-07-04T00:59:20.691622Z","title":"Defending against prompt injection with a few defensive tokens","venue":null,"work_id":"4f729650-c7f8-4e91-b5ed-4250fe884098","year":2025},"citing_paper":{"arxiv_id":"2604.24118","last_updated":"2026-04-27T07:12:52Z","snapshot_observed_at":"2026-07-30T05:21:40.679953Z","submitted_at":"2026-04-27T07:12:52Z","title":"AgentVisor: Defending LLM Agents Against Prompt Injection via Semantic Virtualization","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-05-08T03:07:21.524834Z"},"links":{"cited_paper":"/paper/2507.07974","citing_paper":"/paper/2604.24118"},"observation_digest":"sha256:2653787b0c524eb073fd8f6d3ffd51cd907fc45ddbda44fd75fd0d4835b98550","observation_id":"38648840-d053-4eb0-be8d-b05dcf8a8c4b","resolution":{"observed_at":"2026-05-11T22:16:31.049398Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-09T06:15:46.568294Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"cited_work":{"arxiv_id":"2507.07974","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2507.07974","snapshot_observed_at":"2026-07-04T00:59:20.691622Z","title":"Defending against prompt injection with a few defensive tokens","venue":null,"work_id":"4f729650-c7f8-4e91-b5ed-4250fe884098","year":2025},"citing_paper":{"arxiv_id":"2605.00741","last_updated":"2026-05-01T15:42:54Z","snapshot_observed_at":"2026-08-08T14:23:25.943740Z","submitted_at":"2026-05-01T15:42:54Z","title":"Self-Adaptive Multi-Agent LLM-Based Security Pattern Selection for IoT Systems","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-05-09T19:04:48.453055Z"},"links":{"cited_paper":"/paper/2507.07974","citing_paper":"/paper/2605.00741"},"observation_digest":"sha256:4db68c0fad77cbd69150254994ddcc43eacf39565d5e4ef7d43730ce99ce25c3","observation_id":"8e49ae19-fc24-43d5-b9b2-3450b671cc89","resolution":{"observed_at":"2026-05-11T15:51:44.325861Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-09T06:15:46.568294Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"cited_work":{"arxiv_id":"2507.07974","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2507.07974","snapshot_observed_at":"2026-07-04T00:59:20.691622Z","title":"Defending against prompt injection with a few defensive tokens","venue":null,"work_id":"4f729650-c7f8-4e91-b5ed-4250fe884098","year":2025},"citing_paper":{"arxiv_id":"2605.18991","last_updated":"2026-05-20T17:25:38Z","snapshot_observed_at":"2026-07-06T23:29:47.081347Z","submitted_at":"2026-05-18T18:11:17Z","title":"Agent Security is a Systems Problem","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-05-20T09:02:59.719090Z"},"links":{"cited_paper":"/paper/2507.07974","citing_paper":"/paper/2605.18991"},"observation_digest":"sha256:304884754c7ecdb49d711e713fb775e7429a97a634fed66fb95eb1c70f932d2d","observation_id":"987c7af2-19bf-4a4d-864e-313c699e9eff","resolution":{"observed_at":"2026-05-20T09:03:09.853946Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-09T06:15:46.568294Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"cited_work":{"arxiv_id":"2507.07974","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2507.07974","snapshot_observed_at":"2026-07-04T00:59:20.691622Z","title":"Defending against prompt injection with a few defensive tokens","venue":null,"work_id":"4f729650-c7f8-4e91-b5ed-4250fe884098","year":2025},"citing_paper":{"arxiv_id":"2605.18991","last_updated":"2026-05-20T17:25:38Z","snapshot_observed_at":"2026-07-06T23:29:47.081347Z","submitted_at":"2026-05-18T18:11:17Z","title":"Agent Security is a Systems Problem","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-05-21T07:43:14.250188Z"},"links":{"cited_paper":"/paper/2507.07974","citing_paper":"/paper/2605.18991"},"observation_digest":"sha256:1122b414e6d1a07cee5ab38943bf2b4ef0268d8f1da474391802c9b5b9b0f061","observation_id":"600205e2-4a6b-4577-b4a7-3841a0de1d52","resolution":{"observed_at":"2026-05-21T07:44:02.915798Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-09T06:15:46.568294Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"cited_work":{"arxiv_id":"2507.07974","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2507.07974","snapshot_observed_at":"2026-07-04T00:59:20.691622Z","title":"Defending against prompt injection with a few defensive tokens","venue":null,"work_id":"4f729650-c7f8-4e91-b5ed-4250fe884098","year":2025},"citing_paper":{"arxiv_id":"2606.18673","last_updated":"2026-06-17T04:20:00Z","snapshot_observed_at":"2026-07-06T23:54:04.739534Z","submitted_at":"2026-06-17T04:20:00Z","title":"Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-06-26T20:47:36.337189Z"},"links":{"cited_paper":"/paper/2507.07974","citing_paper":"/paper/2606.18673"},"observation_digest":"sha256:2138a0e703bb56d4016105be1c99701f12232387b3e2bac3cdfdb0872c43e0c6","observation_id":"11510c15-b9e1-4dc5-8a0a-736bce17a901","resolution":{"observed_at":"2026-07-04T00:59:20.694798Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-09T06:15:46.568294Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2507.07974","snapshot_observed_at":"2026-08-01T14:11:22.395013Z","title":"Defending against prompt injection with a few defensivetokens,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.18847","last_updated":"2026-07-21T08:35:22Z","snapshot_observed_at":"2026-08-08T16:25:54.761610Z","submitted_at":"2026-07-21T08:35:22Z","title":"Data Leakage Prevention in Agentic Applications via Preemptive Hardening","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-01T14:11:22.395013Z"},"links":{"cited_paper":"/paper/2507.07974","citing_paper":"/paper/2607.18847"},"observation_digest":"sha256:cf063b7ed20d3a7e66769ebd413e16433abae11d811b17209e1e7b1856d03eeb","observation_id":"50c8ef7e-94ed-410f-aff7-75c78a20766e","resolution":{"observed_at":"2026-08-01T14:11:22.395013Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2507.07974/citation-record","integrity":"/paper/2507.07974/integrity","json":"/paper/2507.07974/citation-record.json","paper":"/paper/2507.07974"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2406.00799","last_updated":"2025-03-06T17:43:10Z","snapshot_observed_at":"2026-08-08T01:50:42.192362Z","submitted_at":"2024-06-02T16:53:21Z","title":"Get my drift? Catching LLM Task Drift with Activation Deltas","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00799","snapshot_observed_at":"2026-08-06T18:32:38.442495Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-09T06:15:46.568294Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:38.442495Z"},"links":{"cited_paper":"/paper/2406.00799","citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:85e26375ea3fe2ecab6a7d2181d20bb798ccf98a269bbd735e425b714757c594","observation_id":"70deac73-eb39-4506-8e14-af93fb311975","resolution":{"observed_at":"2026-08-06T18:32:38.442495Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.13161","last_updated":"2024-04-19T20:11:12Z","snapshot_observed_at":"2026-08-07T13:01:36.699787Z","submitted_at":"2024-04-19T20:11:12Z","title":"CyberSecEval 2: A Wide-Ranging Cybersecurity Evaluation Suite for Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.13161","snapshot_observed_at":"2026-08-06T18:32:38.557329Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-09T06:15:46.568294Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:38.557329Z"},"links":{"cited_paper":"/paper/2404.13161","citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:8537b2928fe6e87222c2e057687ad2c0cb76319db5f3b6e41de79c8029531177","observation_id":"2d84767a-0df9-4771-901c-ec6aef9c879b","resolution":{"observed_at":"2026-08-06T18:32:38.557329Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.06363","last_updated":"2024-09-25T19:48:39Z","snapshot_observed_at":"2026-07-06T17:27:58.440355Z","submitted_at":"2024-02-09T12:15:51Z","title":"StruQ: Defending Against Prompt Injection with Structured Queries","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.06363","snapshot_observed_at":"2026-08-06T18:32:38.700951Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-09T06:15:46.568294Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:38.700951Z"},"links":{"cited_paper":"/paper/2402.06363","citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:e25aa6afb794cc86fb009208a44d87b4f9a34e4a355767148c0ff613ea17a5b0","observation_id":"9ab0f8a5-2e4b-41a9-8917-1f35c561db7b","resolution":{"observed_at":"2026-08-06T18:32:38.700951Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05451","last_updated":"2025-07-03T05:45:41Z","snapshot_observed_at":"2026-08-09T06:23:57.503977Z","submitted_at":"2024-10-07T19:34:35Z","title":"SecAlign: Defending Against Prompt Injection with Preference Optimization","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.05451","snapshot_observed_at":"2026-08-06T18:32:38.828080Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-09T06:15:46.568294Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:38.828080Z"},"links":{"cited_paper":"/paper/2410.05451","citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:1bf54f0603781fcbfb4f3defd6ae33d04d05ef48600caca7eb3054165153d723","observation_id":"6ede77e6-208c-4571-8ddc-ee3fe5407b0c","resolution":{"observed_at":"2026-08-06T18:32:38.828080Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:38.970617Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-09T06:15:46.568294Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:38.970617Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:3d0f343510754cc22b4335acdd71e12f7eae6877b8da48f26ce69b46e0a59c0b","observation_id":"20f911fd-9d68-486c-ba8b-88f71854ef2a","resolution":{"observed_at":"2026-08-06T18:32:38.970617Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:39.094310Z","title":"Angelopoulos, Tianle Li, Dacheng Li, Banghua Zhu, Hao Zhang, Michael I","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-09T06:15:46.568294Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:39.094310Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:ae5ccc19bf56021b7907a6e769d3a784b582e2804b1d2d2ebe4ce8588afd67d9","observation_id":"8f31587f-0f4d-49f9-bcdc-333a23327ed0","resolution":{"observed_at":"2026-08-06T18:32:39.094310Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.18813","last_updated":"2025-06-24T08:05:33Z","snapshot_observed_at":"2026-08-07T19:59:01.081751Z","submitted_at":"2025-03-24T15:54:10Z","title":"Defeating Prompt Injections by Design","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.18813","snapshot_observed_at":"2026-08-06T18:32:39.188120Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-09T06:15:46.568294Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:39.188120Z"},"links":{"cited_paper":"/paper/2503.18813","citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:91c9867ee575ea69afc97563ed49558effcb257f3c1f9b49804a7a83fa96a81e","observation_id":"994bbd42-cfd1-4ab1-81a0-07436532cf7e","resolution":{"observed_at":"2026-08-06T18:32:39.188120Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"6122.36674","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:45.431506Z","title":null,"venue":null,"work_id":"e34981f3-46e2-41af-9a3d-7257b181dd58","year":2023},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-09T06:15:46.568294Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:39.419209Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:f54733b5c0504f6a86beb06b4c312394a5c326e478cb189d8726bfab51ac8288","observation_id":"de3f473a-91df-48b7-b18f-8f49a401832b","resolution":{"observed_at":"2026-08-06T18:32:45.517328Z","resolver_source":"raw_fallback","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:39.601601Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-09T06:15:46.568294Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:39.601601Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:6acc9d1b767b5bb78a11c5f167f13d53e54b1274e34dc4b44557f1dcddf6c7d7","observation_id":"8a34d255-a3de-41ca-87fb-87e6e020af5d","resolution":{"observed_at":"2026-08-06T18:32:39.601601Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2106.09685","last_updated":"2021-10-16T18:40:34Z","snapshot_observed_at":"2026-08-07T07:43:16.294957Z","submitted_at":"2021-06-17T17:37:18Z","title":"LoRA: Low-Rank Adaptation of Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2106.09685","snapshot_observed_at":"2026-08-06T18:32:39.724332Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-09T06:15:46.568294Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:39.724332Z"},"links":{"cited_paper":"/paper/2106.09685","citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:facd873115e3bbd3ce979a84fc3d2197a9664ca4b55b71766bdede187b20ad4a","observation_id":"d044c525-6379-4223-bbdb-d62c0e739627","resolution":{"observed_at":"2026-08-06T18:32:39.724332Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:49.948264Z","title":"Hsu, and Pin-Yu Chen","venue":null,"work_id":"b46443f2-fa1d-4bf6-83bc-5be146c21762","year":2025},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-09T06:15:46.568294Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:39.919502Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:f1240385cb0b88f335c9e23edf5b742de3be5e7952fbda4cf25068fb403e8668","observation_id":"b3b16656-f545-49ea-8283-cec467f7fd34","resolution":{"observed_at":"2026-08-06T18:32:50.101732Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:49.723004Z","title":"Joshi, Hanna Moazam, Heather Miller, Matei Zaharia, and Christopher Potts","venue":null,"work_id":"8e1270d8-e85e-4203-b6af-a447756b1a1a","year":2024},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-09T06:15:46.568294Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:40.067620Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:62e0b04991edbde8f43813957bde9ba743e166e7df22bb5f064f862173851993","observation_id":"c9248236-d609-4c9f-bd72-043c1d0accf3","resolution":{"observed_at":"2026-08-06T18:32:49.825978Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:49.638013Z","title":null,"venue":null,"work_id":"656f8e33-8123-43a6-93a8-f25a98013cfe","year":2023},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-09T06:15:46.568294Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:40.147230Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:fcf1006ce03eedaa79f0865599f4676b0f75d9de84cc064734aaff7f081a5749","observation_id":"428da68c-ebbc-4bca-8f4f-fa741a3ee5aa","resolution":{"observed_at":"2026-08-06T18:32:49.707217Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:40.224826Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-09T06:15:46.568294Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:40.224826Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:70942677de1f4682f5c1b2d6d595149dce01210189cddf0ee10c505fa6ad6132","observation_id":"355fe044-1d97-405f-9b69-d24229d21e0a","resolution":{"observed_at":"2026-08-06T18:32:40.224826Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:49.487355Z","title":"Hashimoto","venue":null,"work_id":"e8abab88-d42e-46e6-8d41-9f2ec531a23c","year":2023},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-09T06:15:46.568294Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:40.344624Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:dd421dc23a082ed2a773b53bdad1f4d467074e10a953f5f2aa19773aec49540b","observation_id":"b9b7a7aa-011d-4fed-8ba1-a1590d9eedfe","resolution":{"observed_at":"2026-08-06T18:32:49.575464Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:49.355292Z","title":null,"venue":null,"work_id":"f0fe41d0-74bf-4887-a321-234f9479c80f","year":2021},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-09T06:15:46.568294Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:40.439968Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:88051fa34523e40d796b9df2ca69a1d7d447586eda94dbf17f009c91b0c0a3bd","observation_id":"d4fc5046-9194-4df1-bf95-869d2c8a54fe","resolution":{"observed_at":"2026-08-06T18:32:49.420803Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2502.13141","last_updated":"2025-02-18T18:59:00Z","snapshot_observed_at":"2026-08-07T18:07:28.802660Z","submitted_at":"2025-02-18T18:59:00Z","title":"UniGuardian: A Unified Defense for Detecting Prompt Injection, Backdoor Attacks and Adversarial Attacks in Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.13141","snapshot_observed_at":"2026-08-06T18:32:40.613792Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-09T06:15:46.568294Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:40.613792Z"},"links":{"cited_paper":"/paper/2502.13141","citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:850338f75f62b12b10ea957c6888351089874827795ce23abae71e224adef59d","observation_id":"190efc79-74f7-4d83-a635-89f5c2bcb68a","resolution":{"observed_at":"2026-08-06T18:32:40.613792Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04957","last_updated":"2024-03-07T23:46:20Z","snapshot_observed_at":"2026-08-08T04:50:42.660630Z","submitted_at":"2024-03-07T23:46:20Z","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.04957","snapshot_observed_at":"2026-08-06T18:32:40.695022Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-09T06:15:46.568294Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:40.695022Z"},"links":{"cited_paper":"/paper/2403.04957","citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:7a19789c16c4ad5fb82b4c57bb6ea16ba7fad9a64aefe80ef574a8b878232132","observation_id":"98b6a98b-c918-43b7-83b6-5e56d436e594","resolution":{"observed_at":"2026-08-06T18:32:40.695022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:40.780835Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-09T06:15:46.568294Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:40.780835Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:abe975029b4d4080ab012e8f7695f2e5284fc498cbd93ca06f450aa742fd0d19","observation_id":"97f5d211-58eb-4eed-8bc9-2559a5cbf1b7","resolution":{"observed_at":"2026-08-06T18:32:40.780835Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:40.944988Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-09T06:15:46.568294Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:40.944988Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:a9d3c48258a69afc7deb4f4b62a0fcc27ed1a8744c7f92b4e1cfb054de7649d5","observation_id":"348a0822-5451-4ee3-a4e0-cd7ace13e17c","resolution":{"observed_at":"2026-08-06T18:32:40.944988Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:49.084502Z","title":null,"venue":null,"work_id":"b7b12468-5d94-4c44-8bb9-03f2095fd81e","year":2022},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-09T06:15:46.568294Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:41.026529Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:d7d64de2d30c13016cd9cdd3b4024f402afb29d76fe184968c8fcc9092a5b9f2","observation_id":"18e0109c-fb7f-4ce8-851a-86edff0d087d","resolution":{"observed_at":"2026-08-06T18:32:49.145765Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:48.960658Z","title":null,"venue":null,"work_id":"fe8daaa0-d6cc-42c5-a68b-430b3c8146ac","year":2024},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-09T06:15:46.568294Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:41.095949Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:a79b7acfcda6eac5fc9614d088dfef125e343d7c5383dbe61be2be3904872b0b","observation_id":"2003e6b8-6a4b-4646-b29a-455760a2f4d7","resolution":{"observed_at":"2026-08-06T18:32:49.019498Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:48.842311Z","title":null,"venue":null,"work_id":"1127974d-a645-4bbc-baff-aa5196e22204","year":2024},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-09T06:15:46.568294Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:41.159789Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:faa1c8381f1a700f0a69f04ab567be8bbc9213021f39bf47ad3080fa5cd6755f","observation_id":"7c37b11c-8886-413a-a66a-787f707d5dfc","resolution":{"observed_at":"2026-08-06T18:32:48.886048Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:48.727864Z","title":null,"venue":null,"work_id":"c35772ce-ff55-4ddb-b0ca-8e8d6071e5e3","year":2024},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-09T06:15:46.568294Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:41.262034Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:4bd45ee46e19bf3898ac2aed08a8dc02c79384202da8625c868afb7b639e3997","observation_id":"feb7ba66-ef8a-4906-9e5c-95035cfd8844","resolution":{"observed_at":"2026-08-06T18:32:48.768104Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:48.576149Z","title":null,"venue":null,"work_id":"fa1dbc83-be6f-4b34-80b4-b69ba434a5d4","year":2025},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-09T06:15:46.568294Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:41.321261Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:6142636f320935d68326ae8de5bd27401238927dc60ae10534e7e7a5762eb875","observation_id":"facda6f5-75d6-452c-a9d7-52b43619f143","resolution":{"observed_at":"2026-08-06T18:32:48.644595Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:48.418773Z","title":null,"venue":null,"work_id":"dcdf89ce-e0c7-4555-ba71-cab817dd1b58","year":2023},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-09T06:15:46.568294Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:41.399597Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:9d464c293b0ab730688c8728fe27a1e1c56af1255a1a78d4d6d33e96ed874a4e","observation_id":"05afec08-e036-489e-8b5e-63d70c2e5a72","resolution":{"observed_at":"2026-08-06T18:32:48.490841Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:41.457013Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-09T06:15:46.568294Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:41.457013Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:2d9dbde72bad55a1953370a2acff59c8c58c539d37e3f8336cc8c2c4e4ca65da","observation_id":"88ad8792-c823-40ff-99cc-0c4d3320fd9f","resolution":{"observed_at":"2026-08-06T18:32:41.457013Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:41.570906Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-09T06:15:46.568294Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:41.570906Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:a2a9fce83fdfe6532c01801bed9fd74120ef66a48db29c802246c964ca063da1","observation_id":"b56f6ca4-1ac9-4bde-aa6b-6b39ed4d4a73","resolution":{"observed_at":"2026-08-06T18:32:41.570906Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:48.319923Z","title":null,"venue":null,"work_id":"edcc1dc7-cd49-4b75-a6e3-7121748494d9","year":2024},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-09T06:15:46.568294Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:41.669619Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:a6fb54d13e09bf2fbd22241830895f3d417c41724bdc00978683c9c35b3d2fbd","observation_id":"efbb61b7-605f-4de8-a0ac-9fa53b136c3d","resolution":{"observed_at":"2026-08-06T18:32:48.360671Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:41.740788Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-09T06:15:46.568294Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:41.740788Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:cf6a220dce43a7839fa00a4bf6976fd533e16bf6d591527c2a07049c98bcb372","observation_id":"96e9f6bf-ed86-4970-86bc-a6a86a19c3a0","resolution":{"observed_at":"2026-08-06T18:32:41.740788Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:47.965079Z","title":null,"venue":null,"work_id":"e63e0e0c-c927-44c4-b745-0f01e69098b0","year":2025},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-09T06:15:46.568294Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:41.888137Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:2b36f6627d36314ec7375b57e5ced1b38901307ea6f9da0d19bb6c03bdad79f1","observation_id":"000820f1-964e-4176-a142-a1133e6a5280","resolution":{"observed_at":"2026-08-06T18:32:48.092532Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:47.734269Z","title":null,"venue":null,"work_id":"47415266-428d-4463-bf9d-8b025f969465","year":2023},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-09T06:15:46.568294Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:41.945512Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:b980c387e1177dacc557df149d7ea799f91ab365742b3d0d0eeeb3638012d654","observation_id":"1da3d644-8260-4e79-bc79-24662ce8a970","resolution":{"observed_at":"2026-08-06T18:32:47.843438Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:47.584567Z","title":null,"venue":null,"work_id":"322e0458-d299-4a6c-97d9-d3dbf71ae287","year":2024},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-09T06:15:46.568294Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:42.036261Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:c0b1ebe50cc2567c2ebd5394723ffc89524fecfdfd83af68f51994d7e22d893c","observation_id":"c389744f-a32a-419c-a020-dcaa75a4e240","resolution":{"observed_at":"2026-08-06T18:32:47.615215Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:42.150644Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-09T06:15:46.568294Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:42.150644Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:d671bbc20af14cc3cf95c5acaeff71656837a608197ab93dda5fa94a1d633e82","observation_id":"8afa656f-67a0-4830-852e-bc6aadb1f529","resolution":{"observed_at":"2026-08-06T18:32:42.150644Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:47.369782Z","title":null,"venue":null,"work_id":"0dd19ac7-25b8-4a2f-95d5-26a8e020c5bd","year":2024},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-09T06:15:46.568294Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:42.232639Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:0d15644996e1c2ae350cd2e5e9f2fe165ad3fdae32c6356ddf16885e0be26e1b","observation_id":"8f93350a-a74b-442c-979f-f06fbf61e616","resolution":{"observed_at":"2026-08-06T18:32:47.469220Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:47.208689Z","title":null,"venue":null,"work_id":"6bfbc6b3-bb9b-4835-bf57-68f16b2b1433","year":2024},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-09T06:15:46.568294Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:42.331638Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:667233a87efb4ff4835485689ebc74358ba866c5d47d9d77d25a87659e2160a7","observation_id":"7e49a9ca-1ddb-4af1-8f21-c4a43cb49d7c","resolution":{"observed_at":"2026-08-06T18:32:47.299636Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:46.996925Z","title":null,"venue":null,"work_id":"c7a73705-db17-4765-b1d9-9f9cd88ed844","year":null},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-09T06:15:46.568294Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:42.408237Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:6fd58781db4fced5147d74d6b61f126538a04957a20c08718708b9853e12976c","observation_id":"4d236274-ed7b-42ed-88a6-8e8dc36937c9","resolution":{"observed_at":"2026-08-06T18:32:47.095842Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.13208","last_updated":"2024-04-19T22:55:23Z","snapshot_observed_at":"2026-08-02T11:48:17.206729Z","submitted_at":"2024-04-19T22:55:23Z","title":"The Instruction Hierarchy: Training LLMs to Prioritize Privileged Instructions","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.13208","snapshot_observed_at":"2026-08-06T18:32:42.689401Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-09T06:15:46.568294Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:42.689401Z"},"links":{"cited_paper":"/paper/2404.13208","citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:8105ffb7c17478e9b8b265cf69c81b54469c6000212f6df06d28fc2ea72164b2","observation_id":"867c4399-a773-4c4f-b547-b044dae7e006","resolution":{"observed_at":"2026-08-06T18:32:42.689401Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:46.762040Z","title":null,"venue":null,"work_id":"b825fc2d-54cf-4482-ae65-c994fd7d90ee","year":2023},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-09T06:15:46.568294Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:42.758508Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:af646ae573da28c0812478bb4ac64d8100f452a4a0637c724fa0e4981c7cd854","observation_id":"f83284f0-90e2-4a1a-ba17-078112756859","resolution":{"observed_at":"2026-08-06T18:32:46.853657Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.06387","last_updated":"2024-05-25T07:01:15Z","snapshot_observed_at":"2026-08-06T13:25:52.403871Z","submitted_at":"2023-10-10T07:50:29Z","title":"Jailbreak and Guard Aligned Language Models with Only Few In-Context Demonstrations","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.06387","snapshot_observed_at":"2026-08-06T18:32:42.838856Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-09T06:15:46.568294Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:42.838856Z"},"links":{"cited_paper":"/paper/2310.06387","citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:59353ded321ff439dbbbabce0f832c28e0c1490b500fb41eda9b726f971611d2","observation_id":"c9e12c66-942d-4f13-b196-686c4bf8756d","resolution":{"observed_at":"2026-08-06T18:32:42.838856Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:46.511727Z","title":null,"venue":null,"work_id":"86d86708-a557-47d7-9796-2a4bc959be69","year":2022},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-09T06:15:46.568294Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:42.934138Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:d8a61d4671ed5d37980222eccf3021ab352fd15102f606f4fb5334f763d4fa81","observation_id":"a864402b-0509-43ec-81c8-2df92e7213b2","resolution":{"observed_at":"2026-08-06T18:32:46.641626Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2503.24370","last_updated":"2025-05-21T17:51:27Z","snapshot_observed_at":"2026-08-07T16:20:08.878901Z","submitted_at":"2025-03-31T17:50:13Z","title":"Effectively Controlling Reasoning Models through Thinking Intervention","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.24370","snapshot_observed_at":"2026-08-06T18:32:43.052649Z","title":"Wang, and Prateek Mittal","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-09T06:15:46.568294Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:43.052649Z"},"links":{"cited_paper":"/paper/2503.24370","citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:3ccfbf836ce4fba28c75de140e65213ae63fa3609949a8fb82d16ece7fbb464d","observation_id":"a5d52f40-3e11-4152-9fb8-299456b639b5","resolution":{"observed_at":"2026-08-06T18:32:43.052649Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:46.376057Z","title":null,"venue":null,"work_id":"7111cb6c-2e3e-4065-a225-0cd297fa589c","year":null},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-09T06:15:46.568294Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:43.161456Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:01ba54477c461e35226863b1f6ca07ecf33607db7a7566e975dc83739b505fcb","observation_id":"d4a4b962-fc63-4324-a86c-92b825238805","resolution":{"observed_at":"2026-08-06T18:32:46.454818Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.12148","last_updated":"2023-12-19T13:31:24Z","snapshot_observed_at":"2026-07-06T17:05:19.007669Z","submitted_at":"2023-12-19T13:31:24Z","title":"Parameter-Efficient Fine-Tuning Methods for Pretrained Language Models: A Critical Review and Assessment","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.12148","snapshot_observed_at":"2026-08-06T18:32:43.351303Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-09T06:15:46.568294Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:43.351303Z"},"links":{"cited_paper":"/paper/2312.12148","citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:7f7b2f8b7d7ef5de393b5074359b26376175161aa98ec2e4431e4f97e2923574","observation_id":"4cc98494-dc94-4d14-93b6-57ebe08457f8","resolution":{"observed_at":"2026-08-06T18:32:43.351303Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"purl/1045146","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:44.872543Z","title":null,"venue":null,"work_id":"a5fd7a9f-7e53-47b0-94c2-47a7813645ba","year":2023},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-09T06:15:46.568294Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:43.484876Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:49d8389e55bb846ffaf10856140b15009f092073990d346d3fbbe767d9451f69","observation_id":"44091a2a-b161-497a-9274-e95abd611087","resolution":{"observed_at":"2026-08-06T18:32:44.934779Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:43.568449Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-09T06:15:46.568294Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:43.568449Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:2598e527027576c31fc7ac7150996b38ce866d79fb95940a261dca573d0b84df","observation_id":"4300d97a-a3de-4ba7-8848-02d04f2f26a3","resolution":{"observed_at":"2026-08-06T18:32:43.568449Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:46.171522Z","title":null,"venue":null,"work_id":"69c63f9f-4436-4e0a-8577-e45390bcb4ed","year":2025},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-09T06:15:46.568294Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:43.659972Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:4b669d4dc2ec44920e849dbf9879dab1c6ca6c884602241b13a6608ba1843855","observation_id":"3b493c9e-0051-4249-a6c6-ed4abde381fe","resolution":{"observed_at":"2026-08-06T18:32:46.272189Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.09102","last_updated":"2025-03-01T19:06:35Z","snapshot_observed_at":"2026-08-04T17:29:52.046121Z","submitted_at":"2024-10-09T12:52:41Z","title":"Instructional Segment Embedding: Improving LLM Safety with Instruction Hierarchy","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.09102","snapshot_observed_at":"2026-08-06T18:32:43.260092Z","title":"In International Conference on Learning Representations (ICLR)","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-09T06:15:46.568294Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:43.260092Z"},"links":{"cited_paper":"/paper/2410.09102","citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:91ad0d4436b671f25fa0cfd0a596ea5cdb64d4acc1ba2379efe43d9758353583","observation_id":"801daeeb-141b-498e-8cb4-1a6a8f010be0","resolution":{"observed_at":"2026-08-06T18:32:43.260092Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:43.883708Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-09T06:15:46.568294Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:43.883708Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:a985d45cb1161cb587d5bf383acc5aab33cd0ea17744b78bbef15a4cf8dcac83","observation_id":"88fb5da2-d55e-4fa5-ab23-6409cdd89dd6","resolution":{"observed_at":"2026-08-06T18:32:43.883708Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.14778/3611540","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:44.554884Z","title":null,"venue":null,"work_id":"27f2bdd1-a523-4d33-a5c0-2e75a0f3fa99","year":2023},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-09T06:15:46.568294Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:44.005067Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:4c83edec7382ac1f561f106e049be52cd3377012cd4edcac9938a9eef92978a3","observation_id":"cc820dbf-8668-48ed-9fb4-e5843a2f0afc","resolution":{"observed_at":"2026-08-06T18:32:44.628903Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2401.18018","last_updated":"2024-06-03T06:52:58Z","snapshot_observed_at":"2026-07-06T17:23:14.388964Z","submitted_at":"2024-01-31T17:28:24Z","title":"On Prompt-Driven Safeguarding for Large Language Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.18018","snapshot_observed_at":"2026-08-06T18:32:44.096157Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-09T06:15:46.568294Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:44.096157Z"},"links":{"cited_paper":"/paper/2401.18018","citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:d949aef2475a432a140b7dd40af06c9f4dc11d6d066366499f6dfe4e31c45676","observation_id":"c46fd5ac-48fa-416e-9127-e34bc783e919","resolution":{"observed_at":"2026-08-06T18:32:44.096157Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:45.869451Z","title":null,"venue":null,"work_id":"abacf174-9ebf-4bac-8722-f55c765b7ec8","year":2024},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-09T06:15:46.568294Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:44.205547Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:57493ea4642dae18a19e7e1edfd38735cc889e1a512a4b2eb11d819b744deab3","observation_id":"b16a4cff-df7b-45c4-b353-ac8a73dbace6","resolution":{"observed_at":"2026-08-06T18:32:45.998508Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:43.769570Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-09T06:15:46.568294Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:43.769570Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:e935253fec6be4fe5346568e65485aa6dedb082da42598a5aaa9c361bd0311a9","observation_id":"9a8b2c99-4ef4-43db-a997-d9e4e979a834","resolution":{"observed_at":"2026-08-06T18:32:43.769570Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:45.732756Z","title":null,"venue":null,"work_id":"4fae8832-bb92-4415-b09c-51da05f6248f","year":2025},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-09T06:15:46.568294Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:44.393617Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:613f3f9195890b217e85e8b3bcdf072532802e447894f0d5fe5d51eb0b70bd22","observation_id":"1426ba8a-b9b4-4876-9c84-1f51bfb9f8b0","resolution":{"observed_at":"2026-08-06T18:32:45.802563Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-07-06T15:59:23.019044Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-08-06T18:32:44.285307Z","title":"Zico Kolter, and Matt Fredrikson","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-09T06:15:46.568294Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:44.285307Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:7da7a0dbb163a837895ecf6e01d795a96057a4c7c3ff610c05cf51fe27571eb0","observation_id":"aad169b6-04a0-46ca-8be5-38d353ad6935","resolution":{"observed_at":"2026-08-06T18:32:44.285307Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:48.192449Z","title":"Gradient Descent","venue":null,"work_id":"c9d949c4-c5b1-43d6-a1c8-839907d1cad5","year":2023},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-09T06:15:46.568294Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":2023,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:41.817195Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:da5b9698cddd284815b139c1692e3397cd4e1af9d8e2553d4f613466074734e0","observation_id":"6c142056-0b66-43b3-823d-5cbd2bcf3fdf","resolution":{"observed_at":"2026-08-06T18:32:48.260383Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:49.187377Z","title":"In USENIX Security Symposium","venue":null,"work_id":"a38d2621-d540-4c1e-8aff-8f04bc8c81d6","year":null},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-09T06:15:46.568294Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:40.851785Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:d95966262b10637acd700b1ec1315adb2bb9ab3a254ced649ecfb4d4a911772a","observation_id":"7ee63721-9ed8-45a9-9bac-9df37a85cb02","resolution":{"observed_at":"2026-08-06T18:32:49.277372Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.14534","last_updated":"2025-05-20T15:54:45Z","snapshot_observed_at":"2026-08-08T20:01:40.635798Z","submitted_at":"2025-05-20T15:54:45Z","title":"Lessons from Defending Gemini Against Indirect Prompt Injections","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.14534","snapshot_observed_at":"2026-08-06T18:32:42.517641Z","title":"arXiv preprint arXiv:2505.14534 (2025)","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-09T06:15:46.568294Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":2025,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:42.517641Z"},"links":{"cited_paper":"/paper/2505.14534","citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:753b6f1404f949c422825f2c78eb5cc41fa7da94cbfee6a46c017519cb397539","observation_id":"c58efc40-5b68-4eab-a800-cf3ad0497923","resolution":{"observed_at":"2026-08-06T18:32:42.517641Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:40.529016Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-09T06:15:46.568294Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":4597,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:40.529016Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:61483a430008bded60489b06456f8fd278cead90eab3151f782515a1eb30f70f","observation_id":"d1664658-9e36-4c25-b524-7ff79a2ecfcc","resolution":{"observed_at":"2026-08-06T18:32:40.529016Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","latest_version":2,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-09T06:15:46.568294Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens"},"reference_resolution":{"displayed":59,"state_counts":{"malformed_identifier":1,"metadata_mismatch":1,"parse_uncertain":0,"unresolved":50,"verified_exact":2,"verified_fuzzy":5},"total_outbound_references":59},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 59 of 59 outbound references and 8 inbound Pith citation observations for arXiv:2507.07974."}