{"as_of":"2026-08-10T21:40:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:64bdad3af62e5da1f756f5e0c78ba9685fb108decd2973f95db7b0bbd71b7983","coverage":[{"denominator":48,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":48,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T15:32:53.004983Z","state":"measured"},{"denominator":50,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":50,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-10T06:31:04.303077+00:00","state":"measured"},{"denominator":2,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":2,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-05T04:56:25.081296Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-02T04:16:36.058442Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-10T10:33:47.408134Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2507.15613","snapshot_observed_at":"2026-08-05T04:56:25.081296Z","title":"Contextual Ambi- guity in LLM Prompt Processing,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2509.05883","last_updated":"2025-09-07T01:11:10Z","snapshot_observed_at":"2026-08-09T20:53:01.518962Z","submitted_at":"2025-09-07T01:11:10Z","title":"Multimodal Prompt Injection Attacks: Risks and Defenses for Modern LLMs","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-05T04:56:25.081296Z"},"links":{"cited_paper":"/paper/2507.15613","citing_paper":"/paper/2509.05883"},"observation_digest":"sha256:0f65fa64a1384b86b95adbd68f7788d0aadb60a80f71ea56835e6d6d7c58f106","observation_id":"5c84f511-aad6-438f-8964-9d05c9e93977","resolution":{"observed_at":"2026-08-05T04:56:25.081296Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-10T10:33:47.408134Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"cited_work":{"arxiv_id":"2507.15613","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2507.15613","snapshot_observed_at":"2026-07-02T04:16:36.058442Z","title":"Multi-stage prompt inference attacks on enterprise LLM systems","venue":null,"work_id":"a744b7d4-37a0-43ce-bc2f-bccf1aa2d83c","year":null},"citing_paper":{"arxiv_id":"2606.04141","last_updated":"2026-06-02T18:53:17Z","snapshot_observed_at":"2026-08-02T13:02:03.082813Z","submitted_at":"2026-06-02T18:53:17Z","title":"Caught in the Act(ivation): Toward Pre-Output and Multi-Turn Detection of Credential Exfiltration by LLM Agents","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-06-28T09:15:57.044886Z"},"links":{"cited_paper":"/paper/2507.15613","citing_paper":"/paper/2606.04141"},"observation_digest":"sha256:917fa6876d587b5b469d84d45c3c90ab25b89bb419cfa4ee4ae4773501a81e3d","observation_id":"94eacda7-0fc9-4d24-a743-f5ae4c40f4e2","resolution":{"observed_at":"2026-07-02T04:16:36.059865Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2507.15613/citation-record","integrity":"/paper/2507.15613/integrity","json":"/paper/2507.15613/citation-record.json","paper":"/paper/2507.15613"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:32:53.440110Z","title":"Perez and I","venue":null,"work_id":"156a48ca-5c42-4715-93a0-ee20d4ae05f1","year":2022},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-10T10:33:47.408134Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:50.647226Z"},"links":{"citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:2e3ad58a0da643da94ca42d151618cd8fe68e9a157921bc41d30afbb842d6c92","observation_id":"b4a63c9f-3b28-4fbe-a134-d2664b113ee1","resolution":{"observed_at":"2026-08-06T15:32:53.442679Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:32:53.432672Z","title":null,"venue":null,"work_id":"f6539150-6697-46a6-8a6e-27430167dc14","year":2023},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-10T10:33:47.408134Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:50.705705Z"},"links":{"citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:2be5d9009e5abd6d2dda648bd72a76118479aa1b0eaa8bce5db3f69d8854dcd4","observation_id":"b23d4ea1-00cf-4a25-b4da-b18125043c47","resolution":{"observed_at":"2026-08-06T15:32:53.435189Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2302.12173","last_updated":"2023-05-05T14:26:17Z","snapshot_observed_at":"2026-07-06T14:55:08.682906Z","submitted_at":"2023-02-23T17:14:38Z","title":"Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2302.12173","snapshot_observed_at":"2026-08-06T15:32:50.781317Z","title":"Greshake et al","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-10T10:33:47.408134Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:50.781317Z"},"links":{"cited_paper":"/paper/2302.12173","citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:4705fcb2cf7253c6d118c8638f2f3a0c2c021b0c3f8f8aeee9613baba68640ac","observation_id":"811f48c9-a734-415a-a3fe-3b0bf032febc","resolution":{"observed_at":"2026-08-06T15:32:50.781317Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:32:53.425144Z","title":"Owasp top 10 for large language model applications, 2023","venue":null,"work_id":"a0aa8a0e-b44b-445f-9ce9-a82cd0208875","year":2023},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-10T10:33:47.408134Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:50.886430Z"},"links":{"citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:28e63c3daf6387ca4b912ec9ab359895833503308ce8fe701b16cf099ddd0310","observation_id":"e194ef1f-7791-4f8f-9f8c-f855edd836f4","resolution":{"observed_at":"2026-08-06T15:32:53.427742Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:32:53.417272Z","title":"Carlini et al","venue":null,"work_id":"2b4e064e-3251-48ee-84b6-617fe9869ebd","year":2021},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-10T10:33:47.408134Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:50.987164Z"},"links":{"citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:b6f7c17be2c2873cfa27119d95578d3be5d7c99c4e0cd76b57eb2517f16296ed","observation_id":"dbad5721-9df4-41d4-a6fb-9bdd0a90bde3","resolution":{"observed_at":"2026-08-06T15:32:53.420290Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:32:53.408759Z","title":"Shokri et al","venue":null,"work_id":"6fcee074-49a7-4277-99cf-bb38d31d3685","year":2017},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-10T10:33:47.408134Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:51.004463Z"},"links":{"citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:2ba3bd1483e6d51a2844c3934f46ac3d45175e4ceca27307c7d557a017251abc","observation_id":"247faf4b-0d5e-4f19-a57a-c72d9da7e93d","resolution":{"observed_at":"2026-08-06T15:32:53.411767Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.10169","last_updated":"2023-07-19T17:55:13Z","snapshot_observed_at":"2026-08-10T14:34:24.189939Z","submitted_at":"2023-07-19T17:55:13Z","title":"Challenges and Applications of Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.10169","snapshot_observed_at":"2026-08-06T15:32:51.106135Z","title":"Kaddour et al","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-10T10:33:47.408134Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:51.106135Z"},"links":{"cited_paper":"/paper/2307.10169","citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:74938e5085b968ef98221775880f4d6c5047fef3fa67277c50ff449b9814959c","observation_id":"120d88d0-ddce-4ec5-b2de-ec651730f150","resolution":{"observed_at":"2026-08-06T15:32:51.106135Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:32:53.400688Z","title":"Croisdale","venue":null,"work_id":"1c9d97ed-e0b5-4649-8c0a-6685c68f0931","year":2025},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-10T10:33:47.408134Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:51.233199Z"},"links":{"citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:72c4b9af32f2ff75ce8f0301896741a2634429fd8211a612e12f6b65db521b33","observation_id":"74d42618-241c-4c08-8723-cc2f70e0d580","resolution":{"observed_at":"2026-08-06T15:32:53.403504Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.09756","last_updated":"2023-10-15T06:51:03Z","snapshot_observed_at":"2026-07-06T16:33:18.143476Z","submitted_at":"2023-10-15T06:51:03Z","title":"New Benchmarks for Asian Facial Recognition Tasks: Face Classification with Large Foundation Models","version":1},"cited_work":{"arxiv_id":"2310.09756","doi":null,"metadata_source":"pith","pith_arxiv_id":"2310.09756","snapshot_observed_at":"2026-08-06T15:32:53.208730Z","title":"New Benchmarks for Asian Facial Recognition Tasks: Face Classification with Large Foundation Models","venue":"cs.CV","work_id":"83c0ef57-66da-418b-9e06-2dc8204c9605","year":2023},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-10T10:33:47.408134Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:51.397481Z"},"links":{"cited_paper":"/paper/2310.09756","citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:7903458b272b1583eb309535eecdcf89de5dffae641d8c3d985c7484f3d05c59","observation_id":"d72a479c-0c56-4d27-92b3-ff94fce15c1c","resolution":{"observed_at":"2026-08-06T15:32:53.211767Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:32:53.392918Z","title":"Gpt-4 system card, March 2023","venue":null,"work_id":"f79104a8-0f0d-4fc5-bf30-c243619cc005","year":2023},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-10T10:33:47.408134Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:51.588116Z"},"links":{"citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:750aa793aa3e6f9bd8f84cac98ff030018f242fe83cf55d34f059aac4941a337","observation_id":"24c7cedd-d4cb-4de0-8142-5a71b6cf0666","resolution":{"observed_at":"2026-08-06T15:32:53.395577Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:32:53.385270Z","title":"Hung et al","venue":null,"work_id":"b441f61e-0d73-4dee-ab4b-10867c94a74b","year":2025},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-10T10:33:47.408134Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:51.753929Z"},"links":{"citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:3f30f2ddf6340e467d93e7ec696aa9e6894353114b0babee146951bb6d7225a2","observation_id":"41900801-b519-4580-902e-5c08c52093af","resolution":{"observed_at":"2026-08-06T15:32:53.387991Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:32:53.378110Z","title":"Tram` er et al","venue":null,"work_id":"b6261b8e-0943-49cc-9071-c5df50f9cb42","year":2016},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-10T10:33:47.408134Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:51.885952Z"},"links":{"citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:e8f83547bde5be99359c32d7ced5344c8e3a637edf09f52c7814ea0d8c0d48a0","observation_id":"74e7d46e-981b-4903-b145-70bf4181f9ee","resolution":{"observed_at":"2026-08-06T15:32:53.380497Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:32:53.370055Z","title":"Suo et al","venue":null,"work_id":"05b7b595-742e-4bb4-8dbe-1f1dd29efcaa","year":2024},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-10T10:33:47.408134Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:52.020541Z"},"links":{"citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:020961991925c61beee0c7fe7dd93e1f7f8590d3c62b15a09d627efe99b61b09","observation_id":"dd7ae18f-cc42-4291-b7eb-db5681c5951f","resolution":{"observed_at":"2026-08-06T15:32:53.373044Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2212.08073","last_updated":"2022-12-15T06:19:23Z","snapshot_observed_at":"2026-08-02T04:53:58.766070Z","submitted_at":"2022-12-15T06:19:23Z","title":"Constitutional AI: Harmlessness from AI Feedback","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2212.08073","snapshot_observed_at":"2026-08-06T15:32:52.190381Z","title":"Bai et al","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-10T10:33:47.408134Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:52.190381Z"},"links":{"cited_paper":"/paper/2212.08073","citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:293a88b3542bb6e4d93fd6cc8bb2c9c2b696814fb9e6a721b41823def0e9ebb0","observation_id":"bf833539-8aea-4d10-93e6-f3b3f338d8b1","resolution":{"observed_at":"2026-08-06T15:32:52.190381Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2209.07858","last_updated":"2022-11-22T19:12:57Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2022-08-23T23:37:14Z","title":"Red Teaming Language Models to Reduce Harms: Methods, Scaling Behaviors, and Lessons Learned","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2209.07858","snapshot_observed_at":"2026-08-06T15:32:52.315635Z","title":"Perez et al","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-10T10:33:47.408134Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:52.315635Z"},"links":{"cited_paper":"/paper/2209.07858","citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:6bc102649ac824a67f4b41b6cb68aec3c585c6012d8ecdc1e249a122c8931aab","observation_id":"a06151e3-371d-4afb-8723-0a423bd1d525","resolution":{"observed_at":"2026-08-06T15:32:52.315635Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:32:53.362640Z","title":null,"venue":null,"work_id":"4f70aad5-9e95-4979-be4d-fe515017ddb1","year":2023},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-10T10:33:47.408134Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:52.498378Z"},"links":{"citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:4ca8589b8e0c3c30b5bdcbf0d6895cf3bdc0bf86565b049d9a839c956663775c","observation_id":"3a262fd2-beb2-408d-a736-ed9f63823481","resolution":{"observed_at":"2026-08-06T15:32:53.365065Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04957","last_updated":"2024-03-07T23:46:20Z","snapshot_observed_at":"2026-08-08T04:50:42.660630Z","submitted_at":"2024-03-07T23:46:20Z","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.04957","snapshot_observed_at":"2026-08-06T15:32:52.654532Z","title":"Liu et al","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-10T10:33:47.408134Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:52.654532Z"},"links":{"cited_paper":"/paper/2403.04957","citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:e571a3ba7a8eddd26a1b001ff8c2d01afb93bf5b9a0135bab093ac21275112c3","observation_id":"f957c792-a18c-485a-860c-8f06ffec6b56","resolution":{"observed_at":"2026-08-06T15:32:52.654532Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.06449","last_updated":"2024-01-10T08:53:59Z","snapshot_observed_at":"2026-07-06T15:53:27.324303Z","submitted_at":"2023-07-12T21:02:06Z","title":"Reynolds-number scaling of wall-pressure--velocity correlations in wall-bounded turbulence","version":2},"cited_work":{"arxiv_id":"2307.06449","doi":null,"metadata_source":"pith","pith_arxiv_id":"2307.06449","snapshot_observed_at":"2026-08-06T15:32:53.170157Z","title":"Reynolds-number scaling of wall-pressure--velocity correlations in wall-bounded turbulence","venue":"physics.flu-dyn","work_id":"fb250430-5669-44fc-ae2d-9eb2041f50d9","year":2023},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-10T10:33:47.408134Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:52.826416Z"},"links":{"cited_paper":"/paper/2307.06449","citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:55f037dc0e04377fbffba8290e73d59b427a036a9ee80e672b22cdebf4754732","observation_id":"9a2a53c4-34a4-4c0b-afac-9bc3a5864b0a","resolution":{"observed_at":"2026-08-06T15:32:53.173272Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:32:53.355020Z","title":"Hu et al","venue":null,"work_id":"73381845-115f-47e9-b7e2-6bbaab472324","year":2022},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-10T10:33:47.408134Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:52.831955Z"},"links":{"citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:4eca7e74e2e83f02db5f5410d4de63d5df1169749302bc7766a152351ff47e59","observation_id":"c8b3ffd9-ab3f-481d-b224-6ef4ed0c9e11","resolution":{"observed_at":"2026-08-06T15:32:53.357656Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2301.10226","last_updated":"2024-05-01T22:04:31Z","snapshot_observed_at":"2026-07-06T14:44:16.786216Z","submitted_at":"2023-01-24T18:52:59Z","title":"A Watermark for Large Language Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2301.10226","snapshot_observed_at":"2026-08-06T15:32:52.913067Z","title":"Kirchenbauer et al","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-10T10:33:47.408134Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:52.913067Z"},"links":{"cited_paper":"/paper/2301.10226","citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:d6116545ed88eecaf617260abf3a41591ecfb2f3c2285e3a2e6f1ef49d3eb914","observation_id":"3812fe2e-eb70-4505-8685-79eebb12c01a","resolution":{"observed_at":"2026-08-06T15:32:52.913067Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2111.09543","last_updated":"2023-03-24T09:17:17Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2021-11-18T06:48:00Z","title":"DeBERTaV3: Improving DeBERTa using ELECTRA-Style Pre-Training with Gradient-Disentangled Embedding Sharing","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2111.09543","snapshot_observed_at":"2026-08-06T15:32:52.916706Z","title":"He et al","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-10T10:33:47.408134Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:52.916706Z"},"links":{"cited_paper":"/paper/2111.09543","citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:f9e06184da60f3528e6cb2e475e7f55ef69963875e73bd1494b378f1b076fc50","observation_id":"2b065241-bd2b-4ff9-890b-ca4070de6e85","resolution":{"observed_at":"2026-08-06T15:32:52.916706Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.22770","last_updated":"2025-03-30T16:39:15Z","snapshot_observed_at":"2026-08-08T06:17:50.732965Z","submitted_at":"2024-10-30T07:39:42Z","title":"InjecGuard: Benchmarking and Mitigating Over-defense in Prompt Injection Guardrail Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.22770","snapshot_observed_at":"2026-08-06T15:32:52.920395Z","title":"Wang et al","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-10T10:33:47.408134Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:52.920395Z"},"links":{"cited_paper":"/paper/2410.22770","citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:9af8d0df3dad18d0d8e689f0b80f15f297c498e44af6a62603874725fa72f257","observation_id":"1d1e9437-1dc1-4d4b-8fbe-b90aeb12b0bd","resolution":{"observed_at":"2026-08-06T15:32:52.920395Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:32:53.347017Z","title":"Zunger et al","venue":null,"work_id":"04e6cd79-629c-42d9-8ca0-2a1cf8402207","year":2024},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-10T10:33:47.408134Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:52.923463Z"},"links":{"citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:52a35d872a7d619b953a3a54ec7ac99cbc59c1032d608fec9039d5466ed8f3a8","observation_id":"15601a8c-0ac4-4805-8173-6c556c2eb8e2","resolution":{"observed_at":"2026-08-06T15:32:53.349752Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:32:53.339032Z","title":"Yi et al","venue":null,"work_id":"f68e8c8f-52d8-4bb2-bf08-7ab17e6efade","year":2023},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-10T10:33:47.408134Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:52.926401Z"},"links":{"citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:bc6579ef412e704f12b91b2507c04316e9de59e6391921830fa44bd556f28d89","observation_id":"62ce073e-110c-453e-8ef4-85b59ab1d0ef","resolution":{"observed_at":"2026-08-06T15:32:53.341628Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:32:53.330527Z","title":"Chen et al","venue":null,"work_id":"a170153d-6450-4527-8da7-2805f15334ab","year":2024},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-10T10:33:47.408134Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:52.929863Z"},"links":{"citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:42c0e669500181ca4552938da7e45162276a5fa21d2454a033317d5743c9461c","observation_id":"9f8d875c-a7b1-4b4a-becd-d243c4c05c55","resolution":{"observed_at":"2026-08-06T15:32:53.333459Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2308.01217","last_updated":"2023-08-02T15:22:00Z","snapshot_observed_at":"2026-07-06T16:01:41.830509Z","submitted_at":"2023-08-02T15:22:00Z","title":"TeachCLIP: Multi-Grained Teaching for Efficient Text-to-Video Retrieval","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.01217","snapshot_observed_at":"2026-08-06T15:32:52.933233Z","title":"Abdelnabi et al","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-10T10:33:47.408134Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:52.933233Z"},"links":{"cited_paper":"/paper/2308.01217","citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:a4c0e585ebc3bd4e45eef2647aeee766cc51447b3e30862ce69a8dbde344aeed","observation_id":"07cf0b9b-4a72-4b8a-8f8e-677aa2c419cd","resolution":{"observed_at":"2026-08-06T15:32:52.933233Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:32:53.320725Z","title":"Pasquini et al","venue":null,"work_id":"670f65f9-43dc-4e5c-9c6d-2e59f17f993a","year":2024},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-10T10:33:47.408134Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:52.936767Z"},"links":{"citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:5ed34b1ae6184417bfaa80f026e7d651b18c97917fea80cb4194ac95c8e1af69","observation_id":"208383d3-cf43-4c41-900d-dd0c78314151","resolution":{"observed_at":"2026-08-06T15:32:53.323886Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2311.09827","last_updated":"2024-02-29T08:20:07Z","snapshot_observed_at":"2026-07-06T16:48:33.164024Z","submitted_at":"2023-11-16T11:52:22Z","title":"Cognitive Overload: Jailbreaking Large Language Models with Overloaded Logical Thinking","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.09827","snapshot_observed_at":"2026-08-06T15:32:52.940158Z","title":"Yan et al","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-10T10:33:47.408134Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:52.940158Z"},"links":{"cited_paper":"/paper/2311.09827","citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:527dc7ed353ae4092de9b7293ff87495fb6fbfa66e04eb05bee754b4a9a1be54","observation_id":"b181fb95-3c71-4bb5-ba49-d95a4459d76d","resolution":{"observed_at":"2026-08-06T15:32:52.940158Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.07663","last_updated":"2025-03-28T09:12:46Z","snapshot_observed_at":"2026-08-10T01:20:37.920453Z","submitted_at":"2023-09-14T12:27:17Z","title":"High-dimensional Asymptotics of VAEs: Threshold of Posterior Collapse and Dataset-Size Dependence of Rate-Distortion Curve","version":2},"cited_work":{"arxiv_id":"2309.07663","doi":null,"metadata_source":"pith","pith_arxiv_id":"2309.07663","snapshot_observed_at":"2026-08-06T15:32:53.117605Z","title":"High-dimensional Asymptotics of VAEs: Threshold of Posterior Collapse and Dataset-Size Dependence of Rate-Distortion Curve","venue":"stat.ML","work_id":"fdbaaba4-18c8-4559-9e23-0a5a04abf1ea","year":2023},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-10T10:33:47.408134Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:52.942923Z"},"links":{"cited_paper":"/paper/2309.07663","citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:2d1632b463c220fa03af809ee8fde90471010cefe06621ea4285b413262ebb59","observation_id":"f1a01522-250d-455a-ac06-eeafecb878b6","resolution":{"observed_at":"2026-08-06T15:32:53.121198Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:32:53.311001Z","title":"Mei et al","venue":null,"work_id":"61bb58fa-65be-45fa-9406-6b7c7b8c94ae","year":2024},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-10T10:33:47.408134Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:52.946560Z"},"links":{"citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:c35517c6fd4a762332ba152d0feacad3d44c2cafa3cbe3002447847cb9a702b7","observation_id":"f09b2d7a-60fd-474c-b874-db0d6cd17805","resolution":{"observed_at":"2026-08-06T15:32:53.314199Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:32:53.302221Z","title":"Li et al","venue":null,"work_id":"63f53f12-3c79-49ee-b839-bdd6ab49b241","year":2022},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-10T10:33:47.408134Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:52.949711Z"},"links":{"citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:e3c2dd5d795d11f5e46f7cd487a61b98d135ff175918149e6149d32201b22f01","observation_id":"4216d0ed-3974-467d-9cb6-29309360d774","resolution":{"observed_at":"2026-08-06T15:32:53.304671Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:32:53.293929Z","title":"Abadi et al","venue":null,"work_id":"a047e21c-98fb-4dd7-ac54-7d7c44d7834e","year":2016},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-10T10:33:47.408134Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:52.952845Z"},"links":{"citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:fb8ea877780a65861a0326f8dbfad1116b03eb5a83930ebac63b4fd3f3676959","observation_id":"01d350cf-dc1e-450a-bb33-57e14f163577","resolution":{"observed_at":"2026-08-06T15:32:53.296677Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:32:53.286121Z","title":"Fredrikson, S","venue":null,"work_id":"1da59b65-0e9b-41b9-9e2d-2ba0c9acdd8d","year":2015},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-10T10:33:47.408134Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:52.956423Z"},"links":{"citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:de2809ba6db91c013b3ff3bba06c939f6744bee592686b95297248b3ff55f2cd","observation_id":"02a109db-3aa2-4543-8758-05b0dc2e76db","resolution":{"observed_at":"2026-08-06T15:32:53.288620Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.02483","last_updated":"2023-07-05T17:58:10Z","snapshot_observed_at":"2026-08-08T18:11:45.725753Z","submitted_at":"2023-07-05T17:58:10Z","title":"Jailbroken: How Does LLM Safety Training Fail?","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.02483","snapshot_observed_at":"2026-08-06T15:32:52.959226Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-10T10:33:47.408134Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:52.959226Z"},"links":{"cited_paper":"/paper/2307.02483","citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:a4ca11e0aa0d34b018b0069d2e408953392eee757070241197a39591c0196e2e","observation_id":"9b29683d-7c26-4889-9548-c6e9960069ca","resolution":{"observed_at":"2026-08-06T15:32:52.959226Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-07-06T15:59:23.019044Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-08-06T15:32:52.962454Z","title":"Zou et al","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-10T10:33:47.408134Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:52.962454Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:1dde2e5be0ed36113e91a8bb4a08deb6acad80e2a2ab7191c756472ea352d168","observation_id":"4109fe61-1555-4a87-afec-b2619bbd29d4","resolution":{"observed_at":"2026-08-06T15:32:52.962454Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.02533","last_updated":"2023-09-05T19:02:43Z","snapshot_observed_at":"2026-08-10T09:43:43.492551Z","submitted_at":"2023-09-05T19:02:43Z","title":"Euclidean wormholes in two-dimensional CFTs from quantum chaos and number theory","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.02533","snapshot_observed_at":"2026-08-06T15:32:52.966171Z","title":"Hines et al","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-10T10:33:47.408134Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:52.966171Z"},"links":{"cited_paper":"/paper/2309.02533","citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:3471ff5f1cda1f6ed6007ab9f644bd9af0847ec8c4baf7e40681d39ef4b8252c","observation_id":"dcdc4561-48d7-4efa-9d15-3c096663ec9a","resolution":{"observed_at":"2026-08-06T15:32:52.966171Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:32:53.278018Z","title":"Ouyang et al","venue":null,"work_id":"4309c88d-4b21-48cd-9afa-0a39784da0ef","year":2022},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-10T10:33:47.408134Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:52.968959Z"},"links":{"citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:49e465f0e64c2f45479b24a6674877504c8d2b09d275593d4f02471edc221eda","observation_id":"13b022e9-03bc-4def-a597-23fa12a6ccb8","resolution":{"observed_at":"2026-08-06T15:32:53.280818Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.03684","last_updated":"2024-06-11T19:02:52Z","snapshot_observed_at":"2026-07-06T16:28:22.350574Z","submitted_at":"2023-10-05T17:01:53Z","title":"SmoothLLM: Defending Large Language Models Against Jailbreaking Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.03684","snapshot_observed_at":"2026-08-06T15:32:52.971916Z","title":"Robey, E","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-10T10:33:47.408134Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:52.971916Z"},"links":{"cited_paper":"/paper/2310.03684","citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:94bc035987381403c30dc62992e9596df943c2ff2dd4968a662f9a0299f8ad7c","observation_id":"07aa1d07-7f0d-4ee7-9c0b-aeaf8b99491b","resolution":{"observed_at":"2026-08-06T15:32:52.971916Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.00844","last_updated":"2024-07-18T16:05:55Z","snapshot_observed_at":"2026-08-06T06:01:54.621799Z","submitted_at":"2023-12-01T06:04:49Z","title":"Sparse Beats Dense: Rethinking Supervision in Radar-Camera Depth Completion","version":3},"cited_work":{"arxiv_id":"2312.00844","doi":null,"metadata_source":"pith","pith_arxiv_id":"2312.00844","snapshot_observed_at":"2026-08-06T15:32:53.072631Z","title":"Sparse Beats Dense: Rethinking Supervision in Radar-Camera Depth Completion","venue":"cs.CV","work_id":"b0378ace-373d-4f05-9095-5ec0030fd143","year":2023},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-10T10:33:47.408134Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:52.975304Z"},"links":{"cited_paper":"/paper/2312.00844","citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:c6cbc67dbf5bc3d53eeea9d74c92c56f4a22afb3285a00cd407e4170824136f8","observation_id":"bb0c5946-792b-4bbb-9ad1-c6e90b53311b","resolution":{"observed_at":"2026-08-06T15:32:53.076320Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1606.06565","last_updated":"2016-07-25T17:23:29Z","snapshot_observed_at":"2026-07-06T05:00:46.434335Z","submitted_at":"2016-06-21T13:37:05Z","title":"Concrete Problems in AI Safety","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1606.06565","snapshot_observed_at":"2026-08-06T15:32:52.978666Z","title":"Amodei et al","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-10T10:33:47.408134Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:52.978666Z"},"links":{"cited_paper":"/paper/1606.06565","citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:8c6cc72ce3313c35f62e928d27d2381528c3c67db0b2012d77f13b7e4d0ada0f","observation_id":"9125885e-8f06-4cef-9e92-4c795ff438e2","resolution":{"observed_at":"2026-08-06T15:32:52.978666Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2302.04761","last_updated":"2023-02-09T16:49:57Z","snapshot_observed_at":"2026-07-06T14:50:07.491434Z","submitted_at":"2023-02-09T16:49:57Z","title":"Toolformer: Language Models Can Teach Themselves to Use Tools","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2302.04761","snapshot_observed_at":"2026-08-06T15:32:52.981843Z","title":"Schick et al","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-10T10:33:47.408134Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:52.981843Z"},"links":{"cited_paper":"/paper/2302.04761","citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:1f7dfcfaa7e36ed8c81d249021a80aacdf2e5788ab979c8ae496428fc3540daf","observation_id":"dd19912b-cba3-4fbd-bb97-7c2d6ba92b4e","resolution":{"observed_at":"2026-08-06T15:32:52.981843Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:32:53.269816Z","title":"Yu et al","venue":null,"work_id":"d2a76b42-8438-4ba4-8319-197e580153d0","year":2022},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-10T10:33:47.408134Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:52.985606Z"},"links":{"citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:d8ab2d05082e765292a6fb8a67f6e648171d1528ea14ad9d9220b692d9f73332","observation_id":"85a494ae-b898-4bf0-a286-17e7812dea0e","resolution":{"observed_at":"2026-08-06T15:32:53.272393Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:32:53.261435Z","title":"Carlini, C","venue":null,"work_id":"7d59293b-1329-41cc-879d-8a7bfb653d0a","year":2019},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-10T10:33:47.408134Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:52.988643Z"},"links":{"citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:dde19945cb634f05abefa776ee611358a3497067ee8e9132e1917c6079853cc8","observation_id":"38a105dc-00a1-46d5-bc57-38d3a8ed63dc","resolution":{"observed_at":"2026-08-06T15:32:53.264306Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:32:53.253151Z","title":"Christ, N","venue":null,"work_id":"fee3fc61-c8de-40f6-8c7a-351043891650","year":2023},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-10T10:33:47.408134Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:52.991614Z"},"links":{"citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:e4a3090e3db647b4fa294252b672c4deed1d4607f4f0eccb7b3b3f33e26e2d92","observation_id":"2d8c85e9-3451-43b7-940c-7b5e44967d53","resolution":{"observed_at":"2026-08-06T15:32:53.255991Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.14275","last_updated":"2024-04-22T15:23:30Z","snapshot_observed_at":"2026-08-09T20:30:57.648609Z","submitted_at":"2024-04-22T15:23:30Z","title":"Maximally informative feature selection using Information Imbalance: Application to COVID-19 severity prediction","version":1},"cited_work":{"arxiv_id":"2404.14275","doi":null,"metadata_source":"pith","pith_arxiv_id":"2404.14275","snapshot_observed_at":"2026-08-06T15:32:53.040484Z","title":"Maximally informative feature selection using Information Imbalance: Application to COVID-19 severity prediction","venue":"stat.ME","work_id":"e67fb0f0-b4cc-4bc0-a347-baccf44f0381","year":2024},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-10T10:33:47.408134Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:52.995131Z"},"links":{"cited_paper":"/paper/2404.14275","citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:11dd7bb72b96e7038a2fcda29484a70ed91211870220c593431363ba9be9f33a","observation_id":"35ebc8ed-2a4c-47dc-bfe9-186f2b81c14f","resolution":{"observed_at":"2026-08-06T15:32:53.045480Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:32:53.244940Z","title":null,"venue":null,"work_id":"ea69e6f9-1fb8-4187-81e7-cc99050b5ec7","year":2020},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-10T10:33:47.408134Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:52.998615Z"},"links":{"citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:ce1444fe76b2177a5bffa2dea2c6f285ccfc74ff625e1012a335a20f470f4d1d","observation_id":"812d94ce-84f2-40c9-b750-bee4fb0d38fb","resolution":{"observed_at":"2026-08-06T15:32:53.247491Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.10997","last_updated":"2024-03-27T09:16:57Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-12-18T07:47:33Z","title":"Retrieval-Augmented Generation for Large Language Models: A Survey","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.10997","snapshot_observed_at":"2026-08-06T15:32:53.001587Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-10T10:33:47.408134Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:53.001587Z"},"links":{"cited_paper":"/paper/2312.10997","citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:2c18f70bd57a45f4ab95755051615a28644f0835d396b4d8b084d9eabc7cdcef","observation_id":"009e2619-68a5-4076-b102-3baa4b95fe53","resolution":{"observed_at":"2026-08-06T15:32:53.001587Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:32:53.236115Z","title":"Li et al","venue":null,"work_id":"482f4106-b9a6-430f-90ef-c59ad0f11c14","year":2024},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-10T10:33:47.408134Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:53.004983Z"},"links":{"citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:1995aa456b59b9d75105f0d2c19864db484494328c13e3437622314f7e766775","observation_id":"a1c5f3ec-bd9a-4116-813c-e4e5505b98e8","resolution":{"observed_at":"2026-08-06T15:32:53.239583Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-10T10:33:47.408134Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems"},"reference_resolution":{"displayed":48,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":20,"verified_exact":5,"verified_fuzzy":23},"total_outbound_references":48},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"thesis":"As of 10 August 2026, this Paper Citation Record lists 48 of 48 outbound references and 2 inbound Pith citation observations for arXiv:2507.15613."}