{"as_of":"2026-08-10T07:29:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:6b8becc3064c30f01cb73b81e7d2f2d31e3089a65917dafe121c781ec92513db","coverage":[{"denominator":19,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":19,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T15:07:29.257814Z","state":"measured"},{"denominator":19,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":19,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-10T06:31:04.303077+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2507.16773/citation-record","integrity":"/paper/2507.16773/integrity","json":"/paper/2507.16773/citation-record.json","paper":"/paper/2507.16773"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:07:26.934335Z","title":"A survey on evaluation of large language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.16773","last_updated":"2025-07-22T17:21:36Z","snapshot_observed_at":"2026-08-09T00:26:11.378062Z","submitted_at":"2025-07-22T17:21:36Z","title":"When LLMs Copy to Think: Uncovering Copy-Guided Attacks in Reasoning LLMs","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-06T15:07:26.934335Z"},"links":{"citing_paper":"/paper/2507.16773"},"observation_digest":"sha256:2306a218625c0b4257d8b49c6e89f8e34ed41b32cc14e81a76f234c43fd9f430","observation_id":"05201edc-d32f-405f-b174-b51f393d33f1","resolution":{"observed_at":"2026-08-06T15:07:26.934335Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:07:30.689089Z","title":"Cursor, 2025","venue":null,"work_id":"678df08e-7227-4b2e-b81b-4ca49c9d14fd","year":2025},"citing_paper":{"arxiv_id":"2507.16773","last_updated":"2025-07-22T17:21:36Z","snapshot_observed_at":"2026-08-09T00:26:11.378062Z","submitted_at":"2025-07-22T17:21:36Z","title":"When LLMs Copy to Think: Uncovering Copy-Guided Attacks in Reasoning LLMs","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-06T15:07:27.000230Z"},"links":{"citing_paper":"/paper/2507.16773"},"observation_digest":"sha256:6282571ca2cb1c4156a5763a042f13de5a8e4f8dc66de092814e4556a07fce43","observation_id":"a12be6dd-9f33-45b8-b1ed-67b5063f8f8a","resolution":{"observed_at":"2026-08-06T15:07:30.798122Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.14490","last_updated":"2024-05-23T12:24:38Z","snapshot_observed_at":"2026-08-08T19:13:55.492691Z","submitted_at":"2024-05-23T12:24:38Z","title":"Impact of Non-Standard Unicode Characters on Security and Comprehension in Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.14490","snapshot_observed_at":"2026-08-06T15:07:27.091221Z","title":"Impact of non-standard unicode characters on security and comprehension in large language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.16773","last_updated":"2025-07-22T17:21:36Z","snapshot_observed_at":"2026-08-09T00:26:11.378062Z","submitted_at":"2025-07-22T17:21:36Z","title":"When LLMs Copy to Think: Uncovering Copy-Guided Attacks in Reasoning LLMs","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-06T15:07:27.091221Z"},"links":{"cited_paper":"/paper/2405.14490","citing_paper":"/paper/2507.16773"},"observation_digest":"sha256:5dbf60f5c9e67ebeaa18964da7fe684baefad7e6002dbc9e256b4b7811276929","observation_id":"746a2c02-ab2c-4aad-a90d-0a0c23d668b1","resolution":{"observed_at":"2026-08-06T15:07:27.091221Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.18312","last_updated":"2024-05-06T09:16:15Z","snapshot_observed_at":"2026-08-10T07:06:41.381633Z","submitted_at":"2024-02-28T13:14:20Z","title":"How to think step-by-step: A mechanistic understanding of chain-of-thought reasoning","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.18312","snapshot_observed_at":"2026-08-06T15:07:27.204889Z","title":"How to think step-by-step: A mechanistic understanding of chain-of-thought reasoning","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.16773","last_updated":"2025-07-22T17:21:36Z","snapshot_observed_at":"2026-08-09T00:26:11.378062Z","submitted_at":"2025-07-22T17:21:36Z","title":"When LLMs Copy to Think: Uncovering Copy-Guided Attacks in Reasoning LLMs","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-06T15:07:27.204889Z"},"links":{"cited_paper":"/paper/2402.18312","citing_paper":"/paper/2507.16773"},"observation_digest":"sha256:f5fecb0a09d8ed5a46e9c6c2e157e82d36f5d9a684ed6241e952f780ece086d2","observation_id":"3e4d6aac-1a30-475a-a933-55b99c5e6fc6","resolution":{"observed_at":"2026-08-06T15:07:27.204889Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.06514","last_updated":"2025-04-11T02:36:28Z","snapshot_observed_at":"2026-08-07T16:07:21.231398Z","submitted_at":"2025-04-09T01:25:27Z","title":"Missing Premise exacerbates Overthinking: Are Reasoning Models losing Critical Thinking Skill?","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.06514","snapshot_observed_at":"2026-08-06T15:07:27.303078Z","title":"Missing premise exacerbates overthinking: Are reasoning models losing critical thinking skill? arXiv preprint arXiv:2504.06514 , 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.16773","last_updated":"2025-07-22T17:21:36Z","snapshot_observed_at":"2026-08-09T00:26:11.378062Z","submitted_at":"2025-07-22T17:21:36Z","title":"When LLMs Copy to Think: Uncovering Copy-Guided Attacks in Reasoning LLMs","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-06T15:07:27.303078Z"},"links":{"cited_paper":"/paper/2504.06514","citing_paper":"/paper/2507.16773"},"observation_digest":"sha256:64573ab1ec6185c47fb6f0ed64e9409c35205ec67572fe902992953e16d1512e","observation_id":"bc01643b-1259-4b35-8ed3-4e1de14ba9b6","resolution":{"observed_at":"2026-08-06T15:07:27.303078Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:07:30.454830Z","title":"Github copilot, 2025","venue":null,"work_id":"0a2e8afd-b1ca-456c-a0cf-3e7fa2cb62c6","year":2025},"citing_paper":{"arxiv_id":"2507.16773","last_updated":"2025-07-22T17:21:36Z","snapshot_observed_at":"2026-08-09T00:26:11.378062Z","submitted_at":"2025-07-22T17:21:36Z","title":"When LLMs Copy to Think: Uncovering Copy-Guided Attacks in Reasoning LLMs","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-06T15:07:27.391937Z"},"links":{"citing_paper":"/paper/2507.16773"},"observation_digest":"sha256:0e24d8cf2153274d630c639e4d0eabf5b33a77c19fe9362d9f334cdc08608d7f","observation_id":"b1cc02ef-74c8-42b0-a8a3-5db8cd6af791","resolution":{"observed_at":"2026-08-06T15:07:30.535060Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:07:30.222484Z","title":"Not what you’ve signed up for: Com- promising real-world llm-integrated applications with indirect prompt injection","venue":null,"work_id":"ea4b0c8c-97b6-47ff-8086-1f176c49d000","year":2023},"citing_paper":{"arxiv_id":"2507.16773","last_updated":"2025-07-22T17:21:36Z","snapshot_observed_at":"2026-08-09T00:26:11.378062Z","submitted_at":"2025-07-22T17:21:36Z","title":"When LLMs Copy to Think: Uncovering Copy-Guided Attacks in Reasoning LLMs","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-06T15:07:27.564467Z"},"links":{"citing_paper":"/paper/2507.16773"},"observation_digest":"sha256:22035c158903aeb0153ffb3f51a03602000ca071b4b95a352d874f3618e30338","observation_id":"a35c2f4c-4dcd-4728-bd46-0ccd0d034b89","resolution":{"observed_at":"2026-08-06T15:07:30.335353Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2501.12948","last_updated":"2026-01-04T03:57:36Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-01-22T15:19:35Z","title":"DeepSeek-R1: Incentivizing Reasoning Capability in LLMs via Reinforcement Learning","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.12948","snapshot_observed_at":"2026-08-06T15:07:27.694945Z","title":"Deepseek-r1: Incentivizing reasoning capability in llms via reinforce- ment learning","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.16773","last_updated":"2025-07-22T17:21:36Z","snapshot_observed_at":"2026-08-09T00:26:11.378062Z","submitted_at":"2025-07-22T17:21:36Z","title":"When LLMs Copy to Think: Uncovering Copy-Guided Attacks in Reasoning LLMs","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-06T15:07:27.694945Z"},"links":{"cited_paper":"/paper/2501.12948","citing_paper":"/paper/2507.16773"},"observation_digest":"sha256:1724678138884a6399b0891f6c1b8759f38ff1ba10b2df26d65331b695757dc3","observation_id":"a20a5484-4423-4582-8ce3-44082c259dd8","resolution":{"observed_at":"2026-08-06T15:07:27.694945Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04642","last_updated":"2024-03-07T16:36:29Z","snapshot_observed_at":"2026-08-07T01:30:54.327974Z","submitted_at":"2024-03-07T16:36:29Z","title":"Teaching Large Language Models to Reason with Reinforcement Learning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.04642","snapshot_observed_at":"2026-08-06T15:07:27.843871Z","title":"Teaching large lan- guage models to reason with reinforcement learning","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.16773","last_updated":"2025-07-22T17:21:36Z","snapshot_observed_at":"2026-08-09T00:26:11.378062Z","submitted_at":"2025-07-22T17:21:36Z","title":"When LLMs Copy to Think: Uncovering Copy-Guided Attacks in Reasoning LLMs","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-06T15:07:27.843871Z"},"links":{"cited_paper":"/paper/2403.04642","citing_paper":"/paper/2507.16773"},"observation_digest":"sha256:28f62385fb648167e786946ee9d7f0afc92dc5da3c790c2ac18e501bb746c117","observation_id":"32d4999e-f949-4bcf-ba50-b84d03b796ca","resolution":{"observed_at":"2026-08-06T15:07:27.843871Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:07:30.013495Z","title":"Make a feint to the east while attacking in the west: Blinding llm-based code auditors with flashboom attacks","venue":null,"work_id":"7408c66a-f8b2-496d-8e48-247e76f3330c","year":2025},"citing_paper":{"arxiv_id":"2507.16773","last_updated":"2025-07-22T17:21:36Z","snapshot_observed_at":"2026-08-09T00:26:11.378062Z","submitted_at":"2025-07-22T17:21:36Z","title":"When LLMs Copy to Think: Uncovering Copy-Guided Attacks in Reasoning LLMs","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-06T15:07:27.952178Z"},"links":{"citing_paper":"/paper/2507.16773"},"observation_digest":"sha256:2bdc5665ddf7da96338656a648c3a53959148d53fc195c4060bde3ca4ef3c7cb","observation_id":"c597b790-18f1-4496-87ae-5d2a88545d13","resolution":{"observed_at":"2026-08-06T15:07:30.115723Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.13474","last_updated":"2025-04-18T05:32:47Z","snapshot_observed_at":"2026-08-07T16:01:15.024733Z","submitted_at":"2025-04-18T05:32:47Z","title":"Everything You Wanted to Know About LLM-based Vulnerability Detection But Were Afraid to Ask","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.13474","snapshot_observed_at":"2026-08-06T15:07:28.060649Z","title":"Everything you wanted to know about llm-based vulnerability detection but were afraid to ask","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.16773","last_updated":"2025-07-22T17:21:36Z","snapshot_observed_at":"2026-08-09T00:26:11.378062Z","submitted_at":"2025-07-22T17:21:36Z","title":"When LLMs Copy to Think: Uncovering Copy-Guided Attacks in Reasoning LLMs","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-06T15:07:28.060649Z"},"links":{"cited_paper":"/paper/2504.13474","citing_paper":"/paper/2507.16773"},"observation_digest":"sha256:e1e0bd9b4b966af970b453571369f37afa80d9ef7d0ce339fab4fc12774a64ff","observation_id":"fb395cd1-6a2a-4b09-a4ad-fc48e0b36391","resolution":{"observed_at":"2026-08-06T15:07:28.060649Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.15288","last_updated":"2025-04-18T04:46:00Z","snapshot_observed_at":"2026-07-06T19:36:32.581033Z","submitted_at":"2024-10-20T05:02:18Z","title":"If LLMs Would Just Look: Simple Line-by-line Checking Improves Vulnerability Localization","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.15288","snapshot_observed_at":"2026-08-06T15:07:28.171464Z","title":"Attention is all you need for llm-based code vulnerability localization","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.16773","last_updated":"2025-07-22T17:21:36Z","snapshot_observed_at":"2026-08-09T00:26:11.378062Z","submitted_at":"2025-07-22T17:21:36Z","title":"When LLMs Copy to Think: Uncovering Copy-Guided Attacks in Reasoning LLMs","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-06T15:07:28.171464Z"},"links":{"cited_paper":"/paper/2410.15288","citing_paper":"/paper/2507.16773"},"observation_digest":"sha256:d2190a22cb8dff08654972d8378c58444cc8e7ee4b0b0d37a5e101570e4ec674","observation_id":"4c8095f4-b35c-40fa-8a9e-3d0625301e79","resolution":{"observed_at":"2026-08-06T15:07:28.171464Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:07:28.301024Z","title":"Formalizing and benchmarking prompt injection attacks and defenses","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.16773","last_updated":"2025-07-22T17:21:36Z","snapshot_observed_at":"2026-08-09T00:26:11.378062Z","submitted_at":"2025-07-22T17:21:36Z","title":"When LLMs Copy to Think: Uncovering Copy-Guided Attacks in Reasoning LLMs","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-06T15:07:28.301024Z"},"links":{"citing_paper":"/paper/2507.16773"},"observation_digest":"sha256:c60050115212b5c4ff6c6be5d07c03ade3c2bc42e455d30fbb7764105d3162ed","observation_id":"abf1e096-7edc-405b-b48a-cae1380f1281","resolution":{"observed_at":"2026-08-06T15:07:28.301024Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:07:29.871500Z","title":"o4-mini system card, 2025","venue":null,"work_id":"19d3853a-1fa7-4e53-82b7-8db1a3974b40","year":2025},"citing_paper":{"arxiv_id":"2507.16773","last_updated":"2025-07-22T17:21:36Z","snapshot_observed_at":"2026-08-09T00:26:11.378062Z","submitted_at":"2025-07-22T17:21:36Z","title":"When LLMs Copy to Think: Uncovering Copy-Guided Attacks in Reasoning LLMs","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-06T15:07:28.467709Z"},"links":{"citing_paper":"/paper/2507.16773"},"observation_digest":"sha256:4a5cbcdc784a528967ee28e59583e42cfd45bcfee8873d9175afc9181bf68dc3","observation_id":"817a8fe2-1522-4376-aadf-ccb49a530bc6","resolution":{"observed_at":"2026-08-06T15:07:29.919600Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2008.05828","last_updated":"2020-08-13T11:32:47Z","snapshot_observed_at":"2026-08-05T09:57:49.317953Z","submitted_at":"2020-08-13T11:32:47Z","title":"On the Importance of Local Information in Transformer Based Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2008.05828","snapshot_observed_at":"2026-08-06T15:07:28.675522Z","title":"On the importance of local information in transformer based models","venue":null,"work_id":null,"year":2008},"citing_paper":{"arxiv_id":"2507.16773","last_updated":"2025-07-22T17:21:36Z","snapshot_observed_at":"2026-08-09T00:26:11.378062Z","submitted_at":"2025-07-22T17:21:36Z","title":"When LLMs Copy to Think: Uncovering Copy-Guided Attacks in Reasoning LLMs","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-06T15:07:28.675522Z"},"links":{"cited_paper":"/paper/2008.05828","citing_paper":"/paper/2507.16773"},"observation_digest":"sha256:88deb366dfaafeced02a9f691346c735e8bd914e3c333799c4667f362c215c10","observation_id":"7fc41eee-d528-4f46-b65c-2bee35710940","resolution":{"observed_at":"2026-08-06T15:07:28.675522Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.16957","last_updated":"2025-05-22T17:36:33Z","snapshot_observed_at":"2026-08-09T00:25:53.983420Z","submitted_at":"2025-05-22T17:36:33Z","title":"Invisible Prompts, Visible Threats: Malicious Font Injection in External Resources for Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.16957","snapshot_observed_at":"2026-08-06T15:07:29.025940Z","title":"Invisible prompts, visible threats: Malicious font injection in external resources for large language models","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.16773","last_updated":"2025-07-22T17:21:36Z","snapshot_observed_at":"2026-08-09T00:26:11.378062Z","submitted_at":"2025-07-22T17:21:36Z","title":"When LLMs Copy to Think: Uncovering Copy-Guided Attacks in Reasoning LLMs","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-06T15:07:29.025940Z"},"links":{"cited_paper":"/paper/2505.16957","citing_paper":"/paper/2507.16773"},"observation_digest":"sha256:02f92d575aa1991b8a374a2a031abdc53a2a919172efca5f11114da51ded483e","observation_id":"cbac1ab2-610e-4d79-b9be-2dc1ed8a3144","resolution":{"observed_at":"2026-08-06T15:07:29.025940Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:07:29.677263Z","title":"A survey on large language model (llm) security and privacy: The good, the bad, and the ugly","venue":null,"work_id":"3b7722fd-30b6-4830-a32a-27680bb142bd","year":2024},"citing_paper":{"arxiv_id":"2507.16773","last_updated":"2025-07-22T17:21:36Z","snapshot_observed_at":"2026-08-09T00:26:11.378062Z","submitted_at":"2025-07-22T17:21:36Z","title":"When LLMs Copy to Think: Uncovering Copy-Guided Attacks in Reasoning LLMs","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-06T15:07:29.123106Z"},"links":{"citing_paper":"/paper/2507.16773"},"observation_digest":"sha256:51a093dad495904d39c998113ab48d8863d0b64f547c99cbfb75b43c8809c424","observation_id":"f38c9759-2643-4c25-9676-9bdd527ce024","resolution":{"observed_at":"2026-08-06T15:07:29.788338Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:07:29.485769Z","title":"On large language models’ resilience to coercive interro- gation","venue":null,"work_id":"979439cf-2390-487c-9613-3f9045132c58","year":2024},"citing_paper":{"arxiv_id":"2507.16773","last_updated":"2025-07-22T17:21:36Z","snapshot_observed_at":"2026-08-09T00:26:11.378062Z","submitted_at":"2025-07-22T17:21:36Z","title":"When LLMs Copy to Think: Uncovering Copy-Guided Attacks in Reasoning LLMs","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-06T15:07:29.183857Z"},"links":{"citing_paper":"/paper/2507.16773"},"observation_digest":"sha256:428edd89c17e774d438b72b934fa4f0885c363ed7aba1c06e2bdbe83d20bd7b5","observation_id":"f7f3ea09-6238-4c21-bfb5-087bdff60e54","resolution":{"observed_at":"2026-08-06T15:07:29.569680Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-07-06T15:59:23.019044Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-08-06T15:07:29.257814Z","title":"Universal and transferable adversarial attacks on aligned language models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.16773","last_updated":"2025-07-22T17:21:36Z","snapshot_observed_at":"2026-08-09T00:26:11.378062Z","submitted_at":"2025-07-22T17:21:36Z","title":"When LLMs Copy to Think: Uncovering Copy-Guided Attacks in Reasoning LLMs","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-06T15:07:29.257814Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2507.16773"},"observation_digest":"sha256:56c666cc373b0e649f73b3a30b367949119c1f209ccddf35595e75aab7030ed4","observation_id":"2fc7540c-8fa6-4f35-9582-0abde34b4e65","resolution":{"observed_at":"2026-08-06T15:07:29.257814Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2507.16773","last_updated":"2025-07-22T17:21:36Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-09T00:26:11.378062Z","submitted_at":"2025-07-22T17:21:36Z","title":"When LLMs Copy to Think: Uncovering Copy-Guided Attacks in Reasoning LLMs"},"reference_resolution":{"displayed":19,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":12,"verified_exact":0,"verified_fuzzy":7},"total_outbound_references":19},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"thesis":"As of 10 August 2026, this Paper Citation Record lists 19 of 19 outbound references and 0 inbound Pith citation observations for arXiv:2507.16773."}