{"as_of":"2026-08-15T11:37:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:8c0274c50a390dded7a52915597df826b6361b469a10fe5e909d41491c306dff","coverage":[{"denominator":24,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":24,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-05T16:50:30.164447Z","state":"measured"},{"denominator":25,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":25,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-15T06:32:42.880941+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-05-16T20:35:26.913297Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-05-16T20:38:24.771300Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2508.19287","last_updated":"2025-08-25T05:20:11Z","snapshot_observed_at":"2026-08-15T02:52:38.634002Z","submitted_at":"2025-08-25T05:20:11Z","title":"Prompt-in-Content Attacks: Exploiting Uploaded Inputs to Hijack LLM Behavior","version":1},"cited_work":{"arxiv_id":"2508.19287","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2508.19287","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Prompt-in-content attacks: Exploiting uploaded inputs to hijack llm behavior","venue":null,"work_id":"804f96e1-8233-42c4-9f76-7ad855a74ce3","year":2025},"citing_paper":{"arxiv_id":"2512.20405","last_updated":"2026-04-14T22:31:30Z","snapshot_observed_at":"2026-08-15T05:43:24.607386Z","submitted_at":"2025-12-23T14:54:45Z","title":"ChatGPT: Excellent Paper! Accept It. Editor: Imposter Found! Review Rejected","version":3},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-05-16T20:35:26.913297Z"},"links":{"cited_paper":"/paper/2508.19287","citing_paper":"/paper/2512.20405"},"observation_digest":"sha256:37b65f4b0add1eca88fefb8c0ca4835763bcf06774a22818b209bd018b6789b5","observation_id":"8b997909-ea2a-4798-a6bb-7b9687af6c4d","resolution":{"observed_at":"2026-05-16T20:38:24.772785Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2508.19287/citation-record","integrity":"/paper/2508.19287/integrity","json":"/paper/2508.19287/citation-record.json","paper":"/paper/2508.19287"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:50:27.494758Z","title":"ACM transactions on intelligent systems and technology15(3), 1–45 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.19287","last_updated":"2025-08-25T05:20:11Z","snapshot_observed_at":"2026-08-15T02:52:38.634002Z","submitted_at":"2025-08-25T05:20:11Z","title":"Prompt-in-Content Attacks: Exploiting Uploaded Inputs to Hijack LLM Behavior","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-05T16:50:27.494758Z"},"links":{"citing_paper":"/paper/2508.19287"},"observation_digest":"sha256:2a5ca049d39c747d0f06ca529bff1a2f900b7a9ca627846218acf682b99e6cf8","observation_id":"51f4e2e7-c5d4-42f7-afdd-3afe1c2a4c52","resolution":{"observed_at":"2026-08-05T16:50:27.494758Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.01769","last_updated":"2024-11-21T23:39:12Z","snapshot_observed_at":"2026-08-15T02:51:59.637415Z","submitted_at":"2024-05-02T22:43:02Z","title":"A Survey on Large Language Models for Critical Societal Domains: Finance, Healthcare, and Law","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.01769","snapshot_observed_at":"2026-08-05T16:50:27.634779Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.19287","last_updated":"2025-08-25T05:20:11Z","snapshot_observed_at":"2026-08-15T02:52:38.634002Z","submitted_at":"2025-08-25T05:20:11Z","title":"Prompt-in-Content Attacks: Exploiting Uploaded Inputs to Hijack LLM Behavior","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-05T16:50:27.634779Z"},"links":{"cited_paper":"/paper/2405.01769","citing_paper":"/paper/2508.19287"},"observation_digest":"sha256:e1e05348789f52726eb6982bba6ee74a082d8d72ca6571186bda574cdfb28790","observation_id":"de5726b3-e7be-433a-93fa-166858f3d9f7","resolution":{"observed_at":"2026-08-05T16:50:27.634779Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:50:33.407037Z","title":"In: 2024 IEEE International Con- ference on Big Data (BigData)","venue":null,"work_id":"58ae064f-906d-42bb-850f-69f7aac3466f","year":2024},"citing_paper":{"arxiv_id":"2508.19287","last_updated":"2025-08-25T05:20:11Z","snapshot_observed_at":"2026-08-15T02:52:38.634002Z","submitted_at":"2025-08-25T05:20:11Z","title":"Prompt-in-Content Attacks: Exploiting Uploaded Inputs to Hijack LLM Behavior","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-05T16:50:27.723080Z"},"links":{"citing_paper":"/paper/2508.19287"},"observation_digest":"sha256:0a606c16011b93c56b5e267d50187bc440cae149545efbc1db0dce7683fb95ae","observation_id":"2a63a6e7-42f6-4b35-aa27-26ada5b07f9c","resolution":{"observed_at":"2026-08-05T16:50:33.494758Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:50:33.201556Z","title":"ACM Computing Surveys57(6), 1–39 (2025)","venue":null,"work_id":"ff3abcc8-4474-48b2-ae94-9be153783248","year":2025},"citing_paper":{"arxiv_id":"2508.19287","last_updated":"2025-08-25T05:20:11Z","snapshot_observed_at":"2026-08-15T02:52:38.634002Z","submitted_at":"2025-08-25T05:20:11Z","title":"Prompt-in-Content Attacks: Exploiting Uploaded Inputs to Hijack LLM Behavior","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-05T16:50:27.794401Z"},"links":{"citing_paper":"/paper/2508.19287"},"observation_digest":"sha256:3de6c40bd1e04fe8e3f1a6eb0c8f9dbcd691f22277a4b79e3e3adf2bc9941c27","observation_id":"9425f9b0-6670-4106-ac45-82dab32a6e95","resolution":{"observed_at":"2026-08-05T16:50:33.273793Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:50:33.010407Z","title":"Cybersecurity 7(1), 70 (2024)","venue":null,"work_id":"cbbaddb5-a61c-442d-9f95-97b420375488","year":2024},"citing_paper":{"arxiv_id":"2508.19287","last_updated":"2025-08-25T05:20:11Z","snapshot_observed_at":"2026-08-15T02:52:38.634002Z","submitted_at":"2025-08-25T05:20:11Z","title":"Prompt-in-Content Attacks: Exploiting Uploaded Inputs to Hijack LLM Behavior","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-05T16:50:27.954346Z"},"links":{"citing_paper":"/paper/2508.19287"},"observation_digest":"sha256:70077e7a45416a270998601746a464f6892d81997a76609bde49f28f0746c48f","observation_id":"403147c1-9106-4219-b38b-f80faf053944","resolution":{"observed_at":"2026-08-05T16:50:33.091436Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.14720","last_updated":"2024-03-20T15:26:23Z","snapshot_observed_at":"2026-08-15T10:52:04.955270Z","submitted_at":"2024-03-20T15:26:23Z","title":"Defending Against Indirect Prompt Injection Attacks With Spotlighting","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.14720","snapshot_observed_at":"2026-08-05T16:50:28.069437Z","title":"arXiv preprint arXiv:2403.14720 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.19287","last_updated":"2025-08-25T05:20:11Z","snapshot_observed_at":"2026-08-15T02:52:38.634002Z","submitted_at":"2025-08-25T05:20:11Z","title":"Prompt-in-Content Attacks: Exploiting Uploaded Inputs to Hijack LLM Behavior","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-05T16:50:28.069437Z"},"links":{"cited_paper":"/paper/2403.14720","citing_paper":"/paper/2508.19287"},"observation_digest":"sha256:10ea9a4c0101a11f969c92a7ab7ee17f3023930ee64dd0056a85b55d894dff5d","observation_id":"feb22126-f6bb-44ed-8bc7-a351c3db93b0","resolution":{"observed_at":"2026-08-05T16:50:28.069437Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.12351","last_updated":"2024-02-23T19:22:58Z","snapshot_observed_at":"2026-08-13T05:20:42.459383Z","submitted_at":"2023-11-21T04:59:17Z","title":"Advancing Transformer Architecture in Long-Context Large Language Models: A Comprehensive Survey","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.12351","snapshot_observed_at":"2026-08-05T16:50:28.169744Z","title":"arXiv preprint arXiv:2311.12351 (2023)","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.19287","last_updated":"2025-08-25T05:20:11Z","snapshot_observed_at":"2026-08-15T02:52:38.634002Z","submitted_at":"2025-08-25T05:20:11Z","title":"Prompt-in-Content Attacks: Exploiting Uploaded Inputs to Hijack LLM Behavior","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-05T16:50:28.169744Z"},"links":{"cited_paper":"/paper/2311.12351","citing_paper":"/paper/2508.19287"},"observation_digest":"sha256:02aa4de10d818c41aa66dfd3333839636fe3c9908b367bbd7c8df4b770587c0f","observation_id":"ff8cef0a-4330-4753-93d2-389d03bf037a","resolution":{"observed_at":"2026-08-05T16:50:28.169744Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:50:28.278771Z","title":"Learning and individual differences103, 102274 (2023)","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.19287","last_updated":"2025-08-25T05:20:11Z","snapshot_observed_at":"2026-08-15T02:52:38.634002Z","submitted_at":"2025-08-25T05:20:11Z","title":"Prompt-in-Content Attacks: Exploiting Uploaded Inputs to Hijack LLM Behavior","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-05T16:50:28.278771Z"},"links":{"citing_paper":"/paper/2508.19287"},"observation_digest":"sha256:ab803cecea6e0fe09e17f67c5e035c06ab4343450c4244fe439f5e23aeb1f588","observation_id":"3d5cf4f4-7742-48fa-bdb3-4c6ab5f5e6f6","resolution":{"observed_at":"2026-08-05T16:50:28.278771Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:50:32.712545Z","title":"Authorea Preprints (2024)","venue":null,"work_id":"6d77576f-9346-4498-9290-fcfcaae1b423","year":2024},"citing_paper":{"arxiv_id":"2508.19287","last_updated":"2025-08-25T05:20:11Z","snapshot_observed_at":"2026-08-15T02:52:38.634002Z","submitted_at":"2025-08-25T05:20:11Z","title":"Prompt-in-Content Attacks: Exploiting Uploaded Inputs to Hijack LLM Behavior","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-05T16:50:28.481789Z"},"links":{"citing_paper":"/paper/2508.19287"},"observation_digest":"sha256:0f36236d5ec81f46e8d656478fb44c9b394a3bb26cf22c75e1a6748e8959127a","observation_id":"c70fa357-aa86-4b2e-ac33-2bb0ded3bc52","resolution":{"observed_at":"2026-08-05T16:50:32.767031Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:50:32.572320Z","title":"AI Open (2024)","venue":null,"work_id":"817429ad-8d39-41bc-bea2-e98cb2f194ea","year":2024},"citing_paper":{"arxiv_id":"2508.19287","last_updated":"2025-08-25T05:20:11Z","snapshot_observed_at":"2026-08-15T02:52:38.634002Z","submitted_at":"2025-08-25T05:20:11Z","title":"Prompt-in-Content Attacks: Exploiting Uploaded Inputs to Hijack LLM Behavior","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-05T16:50:28.627107Z"},"links":{"citing_paper":"/paper/2508.19287"},"observation_digest":"sha256:1854efeaf5186246af0c9942e34e9bea0f91797a9d12e114c95b5991030f3487","observation_id":"e4a18588-d5ed-480c-846e-b7310ed07eb6","resolution":{"observed_at":"2026-08-05T16:50:32.644754Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:50:32.338938Z","title":"In: Proceedings of the Extended Abstracts of the CHI Conference on Human Factors in Computing Systems","venue":null,"work_id":"bb5f0e79-f777-4277-8df0-3d8eca87423c","year":2025},"citing_paper":{"arxiv_id":"2508.19287","last_updated":"2025-08-25T05:20:11Z","snapshot_observed_at":"2026-08-15T02:52:38.634002Z","submitted_at":"2025-08-25T05:20:11Z","title":"Prompt-in-Content Attacks: Exploiting Uploaded Inputs to Hijack LLM Behavior","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-05T16:50:28.690824Z"},"links":{"citing_paper":"/paper/2508.19287"},"observation_digest":"sha256:f093389426e4725b765e798eeea86642e87b51534cfe7634d942fc426a57396a","observation_id":"a5848cdb-b43b-41a8-93ca-942c2cec5a0f","resolution":{"observed_at":"2026-08-05T16:50:32.410186Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:50:31.985979Z","title":"Advances in Neural Information Processing Systems36, 4952–4984 (2023)","venue":null,"work_id":"59908352-b651-4258-bb4b-69da179e0259","year":2023},"citing_paper":{"arxiv_id":"2508.19287","last_updated":"2025-08-25T05:20:11Z","snapshot_observed_at":"2026-08-15T02:52:38.634002Z","submitted_at":"2025-08-25T05:20:11Z","title":"Prompt-in-Content Attacks: Exploiting Uploaded Inputs to Hijack LLM Behavior","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-05T16:50:28.824029Z"},"links":{"citing_paper":"/paper/2508.19287"},"observation_digest":"sha256:94ee7695d86dd14ff477c14e2c43f8db789e51a710a988c24faa977cbe3e961e","observation_id":"3d6c04de-94bf-46a0-8d38-b9f81cb1466a","resolution":{"observed_at":"2026-08-05T16:50:32.093373Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04957","last_updated":"2024-03-07T23:46:20Z","snapshot_observed_at":"2026-08-13T00:59:41.384742Z","submitted_at":"2024-03-07T23:46:20Z","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.04957","snapshot_observed_at":"2026-08-05T16:50:28.896342Z","title":"arXiv preprint arXiv:2403.04957 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.19287","last_updated":"2025-08-25T05:20:11Z","snapshot_observed_at":"2026-08-15T02:52:38.634002Z","submitted_at":"2025-08-25T05:20:11Z","title":"Prompt-in-Content Attacks: Exploiting Uploaded Inputs to Hijack LLM Behavior","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-05T16:50:28.896342Z"},"links":{"cited_paper":"/paper/2403.04957","citing_paper":"/paper/2508.19287"},"observation_digest":"sha256:6ab480a9f0fc5b98e79a1db7a3eb515ba793202bc92cd4a3365d87f861926957","observation_id":"4b2a9e2e-c0a5-44ec-8b75-efc62a07db9b","resolution":{"observed_at":"2026-08-05T16:50:28.896342Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:50:31.697635Z","title":"In: 33rd USENIX Security Symposium (USENIX Security 24)","venue":null,"work_id":"6e2fbed7-9c18-4aa9-a47a-f67d04bbc43d","year":2024},"citing_paper":{"arxiv_id":"2508.19287","last_updated":"2025-08-25T05:20:11Z","snapshot_observed_at":"2026-08-15T02:52:38.634002Z","submitted_at":"2025-08-25T05:20:11Z","title":"Prompt-in-Content Attacks: Exploiting Uploaded Inputs to Hijack LLM Behavior","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-05T16:50:28.974766Z"},"links":{"citing_paper":"/paper/2508.19287"},"observation_digest":"sha256:959791320a722c1908cebb858158557ccdc3097266783ef7e2c4d28a4d510d3d","observation_id":"cde4d3ad-3e5c-4a5a-980c-90e767a3682e","resolution":{"observed_at":"2026-08-05T16:50:31.854751Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:50:31.351507Z","title":"International Journal of Open Information Technologies12(5), 39– 48 (2024)","venue":null,"work_id":"505207ba-eee7-4834-aed7-b762163d9153","year":2024},"citing_paper":{"arxiv_id":"2508.19287","last_updated":"2025-08-25T05:20:11Z","snapshot_observed_at":"2026-08-15T02:52:38.634002Z","submitted_at":"2025-08-25T05:20:11Z","title":"Prompt-in-Content Attacks: Exploiting Uploaded Inputs to Hijack LLM Behavior","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-05T16:50:29.059844Z"},"links":{"citing_paper":"/paper/2508.19287"},"observation_digest":"sha256:52dbf01ff66d6498f8ac5c2ab8a360573221a5e56de1b1bf1243c6d486c13cbe","observation_id":"82aeb5b6-db47-4b5d-bf7e-3e10af776f8b","resolution":{"observed_at":"2026-08-05T16:50:31.524753Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:50:31.045749Z","title":"Cluster Computing 27(1), 1–26 (2024)","venue":null,"work_id":"45707e78-810f-42be-b971-8adb36964e90","year":2024},"citing_paper":{"arxiv_id":"2508.19287","last_updated":"2025-08-25T05:20:11Z","snapshot_observed_at":"2026-08-15T02:52:38.634002Z","submitted_at":"2025-08-25T05:20:11Z","title":"Prompt-in-Content Attacks: Exploiting Uploaded Inputs to Hijack LLM Behavior","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-05T16:50:29.139588Z"},"links":{"citing_paper":"/paper/2508.19287"},"observation_digest":"sha256:3ed699dda0d43f77e9e4688a341889bcd6eadde4d19171a0d2a2dda12c0a836a","observation_id":"f8b6f0db-3eef-4e6d-8105-3ddec786ad55","resolution":{"observed_at":"2026-08-05T16:50:31.195817Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:50:30.856553Z","title":"Available at SSRN 5017385","venue":null,"work_id":"c65fa05a-3e5b-467d-86ec-3f0ebd16f977","year":null},"citing_paper":{"arxiv_id":"2508.19287","last_updated":"2025-08-25T05:20:11Z","snapshot_observed_at":"2026-08-15T02:52:38.634002Z","submitted_at":"2025-08-25T05:20:11Z","title":"Prompt-in-Content Attacks: Exploiting Uploaded Inputs to Hijack LLM Behavior","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-05T16:50:29.274754Z"},"links":{"citing_paper":"/paper/2508.19287"},"observation_digest":"sha256:262c9e5ab569ba84c9b7760f483e2c0704893e216654a3a7d3286a87d388367e","observation_id":"96a786cc-3e7a-40cb-bea5-4d75596676d6","resolution":{"observed_at":"2026-08-05T16:50:30.922498Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:50:30.711610Z","title":"In: 2024 Asia Pacific Signal and Information Processing Association Annual Summit and Conference (APSIPA ASC)","venue":null,"work_id":"44c36762-9e80-42f8-8d77-8ce7afeae248","year":2024},"citing_paper":{"arxiv_id":"2508.19287","last_updated":"2025-08-25T05:20:11Z","snapshot_observed_at":"2026-08-15T02:52:38.634002Z","submitted_at":"2025-08-25T05:20:11Z","title":"Prompt-in-Content Attacks: Exploiting Uploaded Inputs to Hijack LLM Behavior","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-05T16:50:29.420157Z"},"links":{"citing_paper":"/paper/2508.19287"},"observation_digest":"sha256:73f9acac2be50b17638232e5c811c8e30f47f0f56ad7b9fb923ac69147284f06","observation_id":"f37e7852-2c04-42ea-a321-2f6e4f3ebbb5","resolution":{"observed_at":"2026-08-05T16:50:30.774749Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.08833","last_updated":"2023-06-15T03:30:13Z","snapshot_observed_at":"2026-08-14T18:35:26.379914Z","submitted_at":"2023-06-15T03:30:13Z","title":"Safeguarding Crowdsourcing Surveys from ChatGPT with Prompt Injection","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.08833","snapshot_observed_at":"2026-08-05T16:50:29.576676Z","title":"arXiv preprint arXiv:2306.08833 (2023)","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.19287","last_updated":"2025-08-25T05:20:11Z","snapshot_observed_at":"2026-08-15T02:52:38.634002Z","submitted_at":"2025-08-25T05:20:11Z","title":"Prompt-in-Content Attacks: Exploiting Uploaded Inputs to Hijack LLM Behavior","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-05T16:50:29.576676Z"},"links":{"cited_paper":"/paper/2306.08833","citing_paper":"/paper/2508.19287"},"observation_digest":"sha256:04f41fbee7cf68f7471d5ec9a90f817d53da01bea8b81748e60442f4249b4bb5","observation_id":"93c46095-eab8-44ac-a4ca-608cc6f2cda2","resolution":{"observed_at":"2026-08-05T16:50:29.576676Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.21492","last_updated":"2024-11-25T20:37:40Z","snapshot_observed_at":"2026-08-14T13:20:40.963868Z","submitted_at":"2024-10-28T20:02:47Z","title":"FATH: Authentication-based Test-time Defense against Indirect Prompt Injection Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.21492","snapshot_observed_at":"2026-08-05T16:50:29.700036Z","title":"arXiv preprint arXiv:2410.21492 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.19287","last_updated":"2025-08-25T05:20:11Z","snapshot_observed_at":"2026-08-15T02:52:38.634002Z","submitted_at":"2025-08-25T05:20:11Z","title":"Prompt-in-Content Attacks: Exploiting Uploaded Inputs to Hijack LLM Behavior","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-05T16:50:29.700036Z"},"links":{"cited_paper":"/paper/2410.21492","citing_paper":"/paper/2508.19287"},"observation_digest":"sha256:63dca23a1c0f729e191dc9b2a5ad982048eaa0c76055209f7de14baeb514caea","observation_id":"72435f72-57a9-4523-bade-16d154b3f501","resolution":{"observed_at":"2026-08-05T16:50:29.700036Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.18649","last_updated":"2024-02-28T19:00:12Z","snapshot_observed_at":"2026-08-13T04:07:55.529174Z","submitted_at":"2024-02-28T19:00:12Z","title":"A New Era in LLM Security: Exploring Security Concerns in Real-World LLM-based Systems","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.18649","snapshot_observed_at":"2026-08-05T16:50:29.805387Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.19287","last_updated":"2025-08-25T05:20:11Z","snapshot_observed_at":"2026-08-15T02:52:38.634002Z","submitted_at":"2025-08-25T05:20:11Z","title":"Prompt-in-Content Attacks: Exploiting Uploaded Inputs to Hijack LLM Behavior","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-05T16:50:29.805387Z"},"links":{"cited_paper":"/paper/2402.18649","citing_paper":"/paper/2508.19287"},"observation_digest":"sha256:cd5ee330ed5291b4002560dbddf716af0f1f97a479d71d713fd9d3de782cd206","observation_id":"4ed72736-4654-47a2-8294-25c22ec8fd0e","resolution":{"observed_at":"2026-08-05T16:50:29.805387Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.14197","last_updated":"2025-01-27T08:51:16Z","snapshot_observed_at":"2026-08-13T04:57:11.531306Z","submitted_at":"2023-12-21T01:08:39Z","title":"Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.14197","snapshot_observed_at":"2026-08-05T16:50:29.954752Z","title":"arXiv preprint arXiv:2312.14197 (2023)","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.19287","last_updated":"2025-08-25T05:20:11Z","snapshot_observed_at":"2026-08-15T02:52:38.634002Z","submitted_at":"2025-08-25T05:20:11Z","title":"Prompt-in-Content Attacks: Exploiting Uploaded Inputs to Hijack LLM Behavior","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-05T16:50:29.954752Z"},"links":{"cited_paper":"/paper/2312.14197","citing_paper":"/paper/2508.19287"},"observation_digest":"sha256:732dc289e18b73a1f238416b63ede3757c836bd26e797fbc74f3714691053557","observation_id":"f3cba737-1295-4552-94ac-1eadc91f1413","resolution":{"observed_at":"2026-08-05T16:50:29.954752Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.07234","last_updated":"2024-11-09T04:01:22Z","snapshot_observed_at":"2026-08-13T15:14:16.421770Z","submitted_at":"2024-04-06T06:17:10Z","title":"Goal-guided Generative Prompt Injection Attack on Large Language Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.07234","snapshot_observed_at":"2026-08-05T16:50:30.014754Z","title":"arXiv preprint arXiv:2404.07234 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.19287","last_updated":"2025-08-25T05:20:11Z","snapshot_observed_at":"2026-08-15T02:52:38.634002Z","submitted_at":"2025-08-25T05:20:11Z","title":"Prompt-in-Content Attacks: Exploiting Uploaded Inputs to Hijack LLM Behavior","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-05T16:50:30.014754Z"},"links":{"cited_paper":"/paper/2404.07234","citing_paper":"/paper/2508.19287"},"observation_digest":"sha256:4182ba0ad371fef256a318fbf7258adf94cbd937427652f22f30e2d2e6783912","observation_id":"fc15fc42-8896-4481-8e38-5ef69530383c","resolution":{"observed_at":"2026-08-05T16:50:30.014754Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:50:30.445433Z","title":null,"venue":null,"work_id":"8e1b7c5e-eb08-4296-b483-19ea91a71956","year":2024},"citing_paper":{"arxiv_id":"2508.19287","last_updated":"2025-08-25T05:20:11Z","snapshot_observed_at":"2026-08-15T02:52:38.634002Z","submitted_at":"2025-08-25T05:20:11Z","title":"Prompt-in-Content Attacks: Exploiting Uploaded Inputs to Hijack LLM Behavior","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-05T16:50:30.164447Z"},"links":{"citing_paper":"/paper/2508.19287"},"observation_digest":"sha256:308775da7a57ebdc5d208d23cdfc374424cdc08ad98bab4e5a68853f6686b7fe","observation_id":"0e909c49-7e05-45ab-9c3e-2c0063b2b161","resolution":{"observed_at":"2026-08-05T16:50:30.574959Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2508.19287","last_updated":"2025-08-25T05:20:11Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-15T02:52:38.634002Z","submitted_at":"2025-08-25T05:20:11Z","title":"Prompt-in-Content Attacks: Exploiting Uploaded Inputs to Hijack LLM Behavior"},"reference_resolution":{"displayed":24,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":12,"verified_exact":0,"verified_fuzzy":12},"total_outbound_references":24},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"thesis":"As of 15 August 2026, this Paper Citation Record lists 24 of 24 outbound references and 1 inbound Pith citation observation for arXiv:2508.19287."}