{"as_of":"2026-08-10T12:46:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:bb374eabcae973947052f8ec0e961050214506806554b136b8ab93986e253883","coverage":[{"denominator":39,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":39,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-04T22:01:57.994573Z","state":"measured"},{"denominator":39,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":39,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-10T06:31:04.303077+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2509.07617/citation-record","integrity":"/paper/2509.07617/integrity","json":"/paper/2509.07617/citation-record.json","paper":"/paper/2509.07617"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2406.00799","last_updated":"2025-03-06T17:43:10Z","snapshot_observed_at":"2026-08-08T01:50:42.192362Z","submitted_at":"2024-06-02T16:53:21Z","title":"Get my drift? Catching LLM Task Drift with Activation Deltas","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00799","snapshot_observed_at":"2026-08-04T22:01:55.817698Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:55.817698Z"},"links":{"cited_paper":"/paper/2406.00799","citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:3f91190dedeff6af42e07144728bfdc34132a7079c151f6d99798a68edb720dc","observation_id":"9e7d3ba7-4aad-4095-a7b5-3c73f2aaa80f","resolution":{"observed_at":"2026-08-04T22:01:55.817698Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1803.08375","last_updated":"2026-04-14T12:21:53Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2018-03-22T14:30:17Z","title":"Deep Learning using Rectified Linear Units (ReLU)","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1803.08375","snapshot_observed_at":"2026-08-04T22:01:55.919959Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:55.919959Z"},"links":{"cited_paper":"/paper/1803.08375","citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:c24b9c33c9b03b5b6104f3d46c08266d04c264542473f05755406c8afdcd995c","observation_id":"d6ab64dc-bf4c-4481-9660-41c25be777dc","resolution":{"observed_at":"2026-08-04T22:01:55.919959Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T22:01:58.408784Z","title":null,"venue":null,"work_id":"82f926b2-0634-4d7a-b53d-dbb26de5cce5","year":2023},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:55.983764Z"},"links":{"citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:acf85cf9f64e93a3c9e8eaec3d5ee0a9348bdf5e3e26b46509a50cfa2c23c02d","observation_id":"5f9d6298-8373-4f59-b50f-19a3726268f0","resolution":{"observed_at":"2026-08-04T22:01:58.411899Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T22:01:58.398849Z","title":null,"venue":null,"work_id":"e79e6df1-2782-46c5-8527-a0206609f3d5","year":2023},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:56.083669Z"},"links":{"citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:575a06fb10ac160652068b278f149af988eb7269c0da057296ed6bbe4e584582","observation_id":"0a00f070-2033-49c2-901d-74404f3f3537","resolution":{"observed_at":"2026-08-04T22:01:58.401937Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.06363","last_updated":"2024-09-25T19:48:39Z","snapshot_observed_at":"2026-07-06T17:27:58.440355Z","submitted_at":"2024-02-09T12:15:51Z","title":"StruQ: Defending Against Prompt Injection with Structured Queries","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.06363","snapshot_observed_at":"2026-08-04T22:01:56.130324Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:56.130324Z"},"links":{"cited_paper":"/paper/2402.06363","citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:b6c3025f2250972bc8438e807d905f8365cd4d76e211da22629ca8889a39beda","observation_id":"95186c93-b8d9-401a-87c5-4352a1e01ee7","resolution":{"observed_at":"2026-08-04T22:01:56.130324Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T22:01:58.389217Z","title":null,"venue":null,"work_id":"c744fe1a-b75d-4179-8d77-a08ad86ded6a","year":2023},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:56.245216Z"},"links":{"citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:193cebef91dd53bea3e833076cd7f3143492959bc211def3742a8c9529fdbe4f","observation_id":"00ef843a-ac58-470d-9626-abdf69b4025d","resolution":{"observed_at":"2026-08-04T22:01:58.392453Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T22:01:56.353635Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:56.353635Z"},"links":{"citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:29752a3b49e403a1d705f5c147962a6f84eb565582dda8bb29205cd4eaebd7d1","observation_id":"38da0cd8-dfd6-4a9f-88ea-80490161cbcd","resolution":{"observed_at":"2026-08-04T22:01:56.353635Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.21783","last_updated":"2024-11-23T23:27:33Z","snapshot_observed_at":"2026-07-06T18:55:11.576666Z","submitted_at":"2024-07-31T17:54:27Z","title":"The Llama 3 Herd of Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.21783","snapshot_observed_at":"2026-08-04T22:01:56.478515Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:56.478515Z"},"links":{"cited_paper":"/paper/2407.21783","citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:f53bfb538dad12e5093d8fcb2aeb650a4a668a0b569b171207df13f0e502429f","observation_id":"77dc8b32-3aff-4b2e-9972-520977470a60","resolution":{"observed_at":"2026-08-04T22:01:56.478515Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T22:01:58.379781Z","title":null,"venue":null,"work_id":"86268bd5-dee1-4ce6-80c4-6e6ae6ae2bf1","year":2024},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:56.560318Z"},"links":{"citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:2af1e30a649da73d660711002d4a86d464f50414d275db075ee14ee12a397dfc","observation_id":"615f0075-f0b5-4842-bc74-5a38f43b3076","resolution":{"observed_at":"2026-08-04T22:01:58.383036Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T22:01:58.369795Z","title":null,"venue":null,"work_id":"a8844341-3bed-4b0b-b8f9-1c9f6295c745","year":2023},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:56.637975Z"},"links":{"citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:bf39c1f35f1e93cd379ab69e296d9d24e1a3ec67e1771411de1d90ceb35a808c","observation_id":"ff9c73df-5a20-4c82-8d99-113a15914304","resolution":{"observed_at":"2026-08-04T22:01:58.372887Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.04093","last_updated":"2024-06-06T14:10:12Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-06-06T14:10:12Z","title":"Scaling and evaluating sparse autoencoders","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.04093","snapshot_observed_at":"2026-08-04T22:01:56.733520Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:56.733520Z"},"links":{"cited_paper":"/paper/2406.04093","citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:31b053fd9cb0fba52e699a12dccff433bd1512fbe01d7f5477c75c94bf63325e","observation_id":"02e2de0e-b531-4308-b725-aa65e26cb1c5","resolution":{"observed_at":"2026-08-04T22:01:56.733520Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T22:01:58.359967Z","title":null,"venue":null,"work_id":"9c6bc63d-4aef-43ff-8e22-1814710e72c3","year":2023},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:56.817271Z"},"links":{"citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:74970b1ab254654e833748849401512360b09b5abc8daf6f0f9e78711a1f9918","observation_id":"50f7f826-a35f-481a-8063-e5e8f7fd9efc","resolution":{"observed_at":"2026-08-04T22:01:58.363333Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1912.03263","last_updated":"2020-09-15T15:40:19Z","snapshot_observed_at":"2026-08-10T09:55:18.633166Z","submitted_at":"2019-12-06T18:00:36Z","title":"Your Classifier is Secretly an Energy Based Model and You Should Treat it Like One","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1912.03263","snapshot_observed_at":"2026-08-04T22:01:56.912126Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:56.912126Z"},"links":{"cited_paper":"/paper/1912.03263","citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:61e68d0e43b27edc0e24ffd62eb9d71db6c4b9e0eec602f27a57b9f7f819422f","observation_id":"667c41ca-d484-43fa-a39c-a161d5fa0282","resolution":{"observed_at":"2026-08-04T22:01:56.912126Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T22:01:58.349752Z","title":null,"venue":null,"work_id":"35beaf47-4a8c-4401-818a-98ddffd34bd4","year":2024},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:56.975406Z"},"links":{"citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:23b9a6a75a0b32aa858aa004771e6171dafe8634254e9c760dc0e65ca286e9fe","observation_id":"cd607da8-c69e-45fe-9fd4-25764f8546c2","resolution":{"observed_at":"2026-08-04T22:01:58.353342Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T22:01:58.340213Z","title":null,"venue":null,"work_id":"78f4aca4-148c-4b27-9981-8eb9aa07fa63","year":2023},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:57.054596Z"},"links":{"citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:d9ed0b8a24018de7bba2d19f2050b07eaf15ad6d61643bca98e7f4f5dd1659b8","observation_id":"e455f78e-2f15-4f6d-97fa-ccb0cb8b7811","resolution":{"observed_at":"2026-08-04T22:01:58.343348Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T22:01:58.329502Z","title":null,"venue":null,"work_id":"3ef0f2f1-1e3c-4fd5-911b-4e716fd73b38","year":1977},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:57.131950Z"},"links":{"citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:1f67d60530478c14fb4edbba0828105110a68b94f9540c9a7651360e2e0a4498","observation_id":"7a5b27e1-938c-4fe5-bd44-6b240d99810e","resolution":{"observed_at":"2026-08-04T22:01:58.333116Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.07981","last_updated":"2024-09-02T21:29:04Z","snapshot_observed_at":"2026-08-04T11:08:33.781707Z","submitted_at":"2024-04-11T17:57:32Z","title":"Manipulating Large Language Models to Increase Product Visibility","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.07981","snapshot_observed_at":"2026-08-04T22:01:57.245660Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:57.245660Z"},"links":{"cited_paper":"/paper/2404.07981","citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:769832b05d3b93c9fecfab6c943427c5b6404a884e49558dd02476410e16173e","observation_id":"e3cdba70-e1a0-47fa-aff9-ea91c3760c6e","resolution":{"observed_at":"2026-08-04T22:01:57.245660Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.22770","last_updated":"2025-03-30T16:39:15Z","snapshot_observed_at":"2026-08-08T06:17:50.732965Z","submitted_at":"2024-10-30T07:39:42Z","title":"InjecGuard: Benchmarking and Mitigating Over-defense in Prompt Injection Guardrail Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.22770","snapshot_observed_at":"2026-08-04T22:01:57.303234Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:57.303234Z"},"links":{"cited_paper":"/paper/2410.22770","citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:6c23ed5f3b35c26e4b3b603347eac5f33c4893737d7e7ea7e41fe1dbacda8853","observation_id":"20ed6250-4fe4-49a9-8648-c3bbcd5cfde3","resolution":{"observed_at":"2026-08-04T22:01:57.303234Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.04451","last_updated":"2024-03-20T21:34:56Z","snapshot_observed_at":"2026-08-06T02:57:30.438059Z","submitted_at":"2023-10-03T19:44:37Z","title":"AutoDAN: Generating Stealthy Jailbreak Prompts on Aligned Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.04451","snapshot_observed_at":"2026-08-04T22:01:57.377362Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:57.377362Z"},"links":{"cited_paper":"/paper/2310.04451","citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:3968378319085fab6d2c92a54141a82c4213e19ada7e196aab1ffa28af4b122a","observation_id":"d30553a2-b272-43cd-a8f6-0e38b6ead490","resolution":{"observed_at":"2026-08-04T22:01:57.377362Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T22:01:58.317820Z","title":null,"venue":null,"work_id":"6c27a46c-4eeb-4062-94f4-c7187ad5648f","year":2019},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:57.451340Z"},"links":{"citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:b5023a76483c206c5bc236384512f2c40aa196d1f46756b9e7644e5d0be836da","observation_id":"477d6527-d241-4363-8c25-7eab01b014c1","resolution":{"observed_at":"2026-08-04T22:01:58.321463Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.18653/v1/2022.acl-long.31","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":null,"venue":"Proceedings of the 60th Annual Meeting of the Association for Computational Linguistics (Volume 1: Long Papers)","work_id":"34b208e7-c6a5-49a1-8ae5-09524610d4bc","year":2022},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:57.489600Z"},"links":{"citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:5f2e79b00d053dda92d1ccdeecf30f4b959965f66fc96c4dc99553b2d405110b","observation_id":"21142ff4-51b4-48be-8900-0a21b46ec4c2","resolution":{"observed_at":"2026-08-04T22:01:58.125977Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T22:01:58.306610Z","title":null,"venue":null,"work_id":"e9e6c134-b7a2-42a1-9a73-4137c995d684","year":2023},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:57.617024Z"},"links":{"citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:72985a7785ef6280d471431e4f8421d2fe8b479ce891aa77876aea9880e0fb85","observation_id":"70069888-8a48-4925-a62b-b0d6e2a97fc8","resolution":{"observed_at":"2026-08-04T22:01:58.309970Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T22:01:58.295788Z","title":null,"venue":null,"work_id":"fce0a732-44df-4a8b-9f94-aff1a241100f","year":2024},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:57.729077Z"},"links":{"citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:75da7979537ad7717afe265f5d6dc8f21757299a51f25848550333c3e0433ead","observation_id":"05b1ac4a-92d6-4488-8f1a-7d8bdc384174","resolution":{"observed_at":"2026-08-04T22:01:58.299156Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"9932.36947","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T22:01:58.237934Z","title":null,"venue":null,"work_id":"5631cf8b-72ff-4e6a-8783-545f4c0b0dc3","year":2024},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:57.801630Z"},"links":{"citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:45e8b4eb5e6b612dfde06a5a39f694979982cc8b768ae090cc6efba0064eccd2","observation_id":"0680734a-96b0-4b7f-acd9-0a59e99ccea0","resolution":{"observed_at":"2026-08-04T22:01:58.243483Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.13459","last_updated":"2025-05-29T14:42:38Z","snapshot_observed_at":"2026-08-04T11:15:46.100317Z","submitted_at":"2024-02-21T01:30:03Z","title":"Learning to Poison Large Language Models for Downstream Manipulation","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.13459","snapshot_observed_at":"2026-08-04T22:01:57.897642Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:57.897642Z"},"links":{"cited_paper":"/paper/2402.13459","citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:e24617dac9ffd57ba7d8021b0b05e05bec21f6fb7951717c54c7f6847f2edfcd","observation_id":"7df2670b-84c2-462a-ad8a-6f489e28d981","resolution":{"observed_at":"2026-08-04T22:01:57.897642Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T22:01:58.285550Z","title":null,"venue":null,"work_id":"2fdd8760-4156-4c76-a6cc-ff906479ddb7","year":2022},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:57.949819Z"},"links":{"citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:708ab6db9b98cdd13674d24601ef862329b20bdf59678880a62c9b5718d983df","observation_id":"fd6a3044-0fc5-47a7-98a7-e120ecf444ca","resolution":{"observed_at":"2026-08-04T22:01:58.288781Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T22:01:58.274790Z","title":null,"venue":null,"work_id":"59acd994-7d6a-4d2e-87ab-3d0227140378","year":2023},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:57.953121Z"},"links":{"citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:8d57c0a8f2b37f6e31e6fd07aec5689dcceec92b8f73e3e5bdb2919d28b84718","observation_id":"98f36526-371a-4be9-b39c-4917f899150c","resolution":{"observed_at":"2026-08-04T22:01:58.278618Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2101.03288","last_updated":"2021-02-17T19:20:09Z","snapshot_observed_at":"2026-08-07T02:28:23.454003Z","submitted_at":"2021-01-09T04:51:31Z","title":"How to Train Your Energy-Based Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2101.03288","snapshot_observed_at":"2026-08-04T22:01:57.956628Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:57.956628Z"},"links":{"cited_paper":"/paper/2101.03288","citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:25cf29ca6a2303b888c694879bef69e3d7673edaa7e23e71b22032b8322a1006","observation_id":"b5688f6c-e99b-4249-b4f8-8b53afd838f1","resolution":{"observed_at":"2026-08-04T22:01:57.956628Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.01011","last_updated":"2023-11-02T06:13:36Z","snapshot_observed_at":"2026-07-06T16:42:04.139453Z","submitted_at":"2023-11-02T06:13:36Z","title":"Tensor Trust: Interpretable Prompt Injection Attacks from an Online Game","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.01011","snapshot_observed_at":"2026-08-04T22:01:57.960028Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:57.960028Z"},"links":{"cited_paper":"/paper/2311.01011","citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:7014a705850dc680598efe11c19285973f2264140ee42ad4666ded2f19712596","observation_id":"5c03889a-82f0-4b39-bf67-ea4dcf4822fe","resolution":{"observed_at":"2026-08-04T22:01:57.960028Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.01605","last_updated":"2024-09-06T18:17:07Z","snapshot_observed_at":"2026-08-09T15:49:58.734883Z","submitted_at":"2024-08-02T23:47:27Z","title":"CYBERSECEVAL 3: Advancing the Evaluation of Cybersecurity Risks and Capabilities in Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.01605","snapshot_observed_at":"2026-08-04T22:01:57.963907Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:57.963907Z"},"links":{"cited_paper":"/paper/2408.01605","citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:e8ac3a119c52ebf5dc0026165ed62f25d21a446d8c154a0b3698a429931d0f40","observation_id":"4502b85a-9c97-4b32-aa88-126b77fc5c4c","resolution":{"observed_at":"2026-08-04T22:01:57.963907Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.10671","last_updated":"2024-09-10T13:25:53Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-07-15T12:35:42Z","title":"Qwen2 Technical Report","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.10671","snapshot_observed_at":"2026-08-04T22:01:57.967318Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:57.967318Z"},"links":{"cited_paper":"/paper/2407.10671","citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:2187d0a168d7a090ab3ee782dbd21d565738eb2850073981e59c97e79656e0c7","observation_id":"280b6d50-c2de-43ec-ac3e-117263adcf6a","resolution":{"observed_at":"2026-08-04T22:01:57.967318Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.15115","last_updated":"2025-01-03T02:18:21Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-12-19T17:56:09Z","title":"Qwen2.5 Technical Report","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.15115","snapshot_observed_at":"2026-08-04T22:01:57.970596Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:57.970596Z"},"links":{"cited_paper":"/paper/2412.15115","citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:fed79a9603036ce6031a51dcfe59ae87ecdfba521b72e0936fd9f363a44f1904","observation_id":"cd0fbbd3-0e73-425b-88f5-91a4dadc7053","resolution":{"observed_at":"2026-08-04T22:01:57.970596Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.10253","last_updated":"2024-06-27T16:01:27Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-09-19T02:19:48Z","title":"GPTFUZZER: Red Teaming Large Language Models with Auto-Generated Jailbreak Prompts","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.10253","snapshot_observed_at":"2026-08-04T22:01:57.973925Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:57.973925Z"},"links":{"cited_paper":"/paper/2309.10253","citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:f9e6313e0fff04d613e637ed2618ff391a97526f9107b435ffd8be2478882e9b","observation_id":"f0b328ce-df6a-40d1-b004-bfb33ed4605e","resolution":{"observed_at":"2026-08-04T22:01:57.973925Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2409.14729","last_updated":"2025-04-03T23:03:17Z","snapshot_observed_at":"2026-08-10T05:47:23.875539Z","submitted_at":"2024-09-23T06:08:32Z","title":"PROMPTFUZZ: Harnessing Fuzzing Techniques for Robust Testing of Prompt Injection in LLMs","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.14729","snapshot_observed_at":"2026-08-04T22:01:57.977055Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:57.977055Z"},"links":{"cited_paper":"/paper/2409.14729","citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:e2f6cd362fc39743e1651a8cc0c34742211b87180a29daf02a8d40a57f2fb59b","observation_id":"c548b889-4ab8-4ee0-9675-7a7956461aad","resolution":{"observed_at":"2026-08-04T22:01:57.977055Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T22:01:57.980607Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:57.980607Z"},"links":{"citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:b5689e2f5518266662ce6b55e9a09964a3b8bd67262fbc5df6bf8f776eb15e95","observation_id":"3beca988-30d5-4a49-bd65-fa341b2d39b8","resolution":{"observed_at":"2026-08-04T22:01:57.980607Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.01405","last_updated":"2025-03-03T06:14:14Z","snapshot_observed_at":"2026-07-06T16:26:38.284922Z","submitted_at":"2023-10-02T17:59:07Z","title":"Representation Engineering: A Top-Down Approach to AI Transparency","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.01405","snapshot_observed_at":"2026-08-04T22:01:57.984138Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:57.984138Z"},"links":{"cited_paper":"/paper/2310.01405","citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:04e71abb23b1bf0684638b8e448cf81ac293c2c0d90d77c586dd09105b3d3a5d","observation_id":"12e1d92e-2d6c-4c91-8270-315a322e8e54","resolution":{"observed_at":"2026-08-04T22:01:57.984138Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-07-06T15:59:23.019044Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-08-04T22:01:57.987780Z","title":"Zico Kolter, and Matt Fredrikson","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:57.987780Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:796ad4958060a9414191e567235857e3796cd9ff06caf4901bb618927fdfaf64","observation_id":"e07732de-3b93-4f69-8ef2-1125ada131a8","resolution":{"observed_at":"2026-08-04T22:01:57.987780Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T22:01:57.991183Z","title":"online\" 'onlinestring :=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":38,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:57.991183Z"},"links":{"citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:382c579c9a88d854e11cc8617fef8d55040f4bb8be5cd7a981dcd4c4c19ff4de","observation_id":"44405e95-71fb-4270-8b49-cf5294d2baf2","resolution":{"observed_at":"2026-08-04T22:01:57.991183Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T22:01:57.994573Z","title":"write newline","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":39,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:57.994573Z"},"links":{"citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:ea44ff6fca8f24df18ca8a6fd0c7eef44bc4cc2ff6bd04dfc1fcf03e24f0be13","observation_id":"cbfd15c2-da4c-4369-9bcc-7989144050b7","resolution":{"observed_at":"2026-08-04T22:01:57.994573Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","latest_version":1,"primary_category":"cs.AI","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling"},"reference_resolution":{"displayed":39,"state_counts":{"malformed_identifier":0,"metadata_mismatch":1,"parse_uncertain":0,"unresolved":37,"verified_exact":1,"verified_fuzzy":0},"total_outbound_references":39},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"thesis":"As of 10 August 2026, this Paper Citation Record lists 39 of 39 outbound references and 0 inbound Pith citation observations for arXiv:2509.07617."}