{"as_of":"2026-08-21T10:55:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:98ffb94c8945b578b2a00d968b42c62d4b0ea8030b1b5d613efd0a7783ac0677","coverage":[{"denominator":22,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":22,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-15T16:24:10.748194Z","state":"measured"},{"denominator":29,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":29,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-21T06:32:19.484+00:00","state":"measured"},{"denominator":7,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":7,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-02T05:58:01.260673Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-05T07:40:47.616845Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2509.10540","last_updated":"2025-09-06T04:06:01Z","snapshot_observed_at":"2026-08-15T16:20:14.110461Z","submitted_at":"2025-09-06T04:06:01Z","title":"EchoLeak: The First Real-World Zero-Click Prompt Injection Exploit in a Production LLM System","version":1},"cited_work":{"arxiv_id":"2509.10540","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2509.10540","snapshot_observed_at":"2026-07-05T07:40:47.616845Z","title":"Echoleak: The first real-world zero-click prompt injection exploit in a production llm system","venue":null,"work_id":"b24c4a96-110e-4543-9d5e-2888ebd77959","year":2025},"citing_paper":{"arxiv_id":"2605.03213","last_updated":"2026-05-07T16:46:43Z","snapshot_observed_at":"2026-08-19T04:50:05.742324Z","submitted_at":"2026-05-04T23:09:16Z","title":"When Agents Handle Secrets: A Survey of Confidential Computing for Agentic AI","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-05-07T02:12:30.086152Z"},"links":{"cited_paper":"/paper/2509.10540","citing_paper":"/paper/2605.03213"},"observation_digest":"sha256:3e903d5935b596edd82f7db9e0c99b6a50e08cbc507e9b200995120ea4bea400","observation_id":"275298e0-c703-4a89-8d2f-85421dbae657","resolution":{"observed_at":"2026-05-12T10:46:31.578307Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2509.10540","last_updated":"2025-09-06T04:06:01Z","snapshot_observed_at":"2026-08-15T16:20:14.110461Z","submitted_at":"2025-09-06T04:06:01Z","title":"EchoLeak: The First Real-World Zero-Click Prompt Injection Exploit in a Production LLM System","version":1},"cited_work":{"arxiv_id":"2509.10540","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2509.10540","snapshot_observed_at":"2026-07-05T07:40:47.616845Z","title":"Echoleak: The first real-world zero-click prompt injection exploit in a production llm system","venue":null,"work_id":"b24c4a96-110e-4543-9d5e-2888ebd77959","year":2025},"citing_paper":{"arxiv_id":"2605.03213","last_updated":"2026-05-07T16:46:43Z","snapshot_observed_at":"2026-08-19T04:50:05.742324Z","submitted_at":"2026-05-04T23:09:16Z","title":"When Agents Handle Secrets: A Survey of Confidential Computing for Agentic AI","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-05-08T17:56:09.884837Z"},"links":{"cited_paper":"/paper/2509.10540","citing_paper":"/paper/2605.03213"},"observation_digest":"sha256:06ed2eafebc0ed0c183532d896ecd4416c8913ebabf91af33b7fcc3582313aed","observation_id":"b6724033-57f4-47bf-9032-5e5d939d2b4f","resolution":{"observed_at":"2026-05-09T06:55:44.484453Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2509.10540","last_updated":"2025-09-06T04:06:01Z","snapshot_observed_at":"2026-08-15T16:20:14.110461Z","submitted_at":"2025-09-06T04:06:01Z","title":"EchoLeak: The First Real-World Zero-Click Prompt Injection Exploit in a Production LLM System","version":1},"cited_work":{"arxiv_id":"2509.10540","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2509.10540","snapshot_observed_at":"2026-07-05T07:40:47.616845Z","title":"Echoleak: The first real-world zero-click prompt injection exploit in a production llm system","venue":null,"work_id":"b24c4a96-110e-4543-9d5e-2888ebd77959","year":2025},"citing_paper":{"arxiv_id":"2605.11868","last_updated":"2026-05-12T09:48:53Z","snapshot_observed_at":"2026-07-06T23:23:39.723268Z","submitted_at":"2026-05-12T09:48:53Z","title":"IPI-proxy: An Intercepting Proxy for Red-Teaming Web-Browsing AI Agents Against Indirect Prompt Injection","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-05-13T05:46:07.132408Z"},"links":{"cited_paper":"/paper/2509.10540","citing_paper":"/paper/2605.11868"},"observation_digest":"sha256:765c2e53db7a3a72aab2428a9aeab488376419ca378ffbd95e571a5ef9fd5a5b","observation_id":"70b68a3b-0df5-460f-a703-5543dfa4674d","resolution":{"observed_at":"2026-05-13T05:47:21.306811Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2509.10540","last_updated":"2025-09-06T04:06:01Z","snapshot_observed_at":"2026-08-15T16:20:14.110461Z","submitted_at":"2025-09-06T04:06:01Z","title":"EchoLeak: The First Real-World Zero-Click Prompt Injection Exploit in a Production LLM System","version":1},"cited_work":{"arxiv_id":"2509.10540","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2509.10540","snapshot_observed_at":"2026-07-05T07:40:47.616845Z","title":"Echoleak: The first real-world zero-click prompt injection exploit in a production llm system","venue":null,"work_id":"b24c4a96-110e-4543-9d5e-2888ebd77959","year":2025},"citing_paper":{"arxiv_id":"2605.18133","last_updated":"2026-05-18T09:38:18Z","snapshot_observed_at":"2026-08-13T19:10:03.642585Z","submitted_at":"2026-05-18T09:38:18Z","title":"An Empirical Study of Privacy Leakage Chains via Prompt Injection in Black-Box Chatbot Environments","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-05-20T09:58:05.349147Z"},"links":{"cited_paper":"/paper/2509.10540","citing_paper":"/paper/2605.18133"},"observation_digest":"sha256:f594e67863f06b53a145ae8f51836f29dc2c95f2df50bd4a6d83d9b281bb3947","observation_id":"51f16092-5ff6-490d-bb3f-6e56f252d14c","resolution":{"observed_at":"2026-05-20T09:58:10.909078Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2509.10540","last_updated":"2025-09-06T04:06:01Z","snapshot_observed_at":"2026-08-15T16:20:14.110461Z","submitted_at":"2025-09-06T04:06:01Z","title":"EchoLeak: The First Real-World Zero-Click Prompt Injection Exploit in a Production LLM System","version":1},"cited_work":{"arxiv_id":"2509.10540","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2509.10540","snapshot_observed_at":"2026-07-05T07:40:47.616845Z","title":"Echoleak: The first real-world zero-click prompt injection exploit in a production llm system","venue":null,"work_id":"b24c4a96-110e-4543-9d5e-2888ebd77959","year":2025},"citing_paper":{"arxiv_id":"2605.27396","last_updated":"2026-04-21T15:43:57Z","snapshot_observed_at":"2026-08-15T22:45:27.609602Z","submitted_at":"2026-04-21T15:43:57Z","title":"Agentic Literacy Debt: A Structural Problem the AI Literacy Field Has Not Yet Named","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-07-05T07:32:42.676066Z"},"links":{"cited_paper":"/paper/2509.10540","citing_paper":"/paper/2605.27396"},"observation_digest":"sha256:21ec9c5ee664eb2bbc67f886b65c3fd77fa0110177cee7db82cf89b9c69e2577","observation_id":"3f061f6e-ef7f-4ca4-a908-6c4b723ab5d0","resolution":{"observed_at":"2026-07-05T07:40:47.618596Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2509.10540","last_updated":"2025-09-06T04:06:01Z","snapshot_observed_at":"2026-08-15T16:20:14.110461Z","submitted_at":"2025-09-06T04:06:01Z","title":"EchoLeak: The First Real-World Zero-Click Prompt Injection Exploit in a Production LLM System","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2509.10540","snapshot_observed_at":"2026-08-02T05:58:01.260673Z","title":"EchoLeak: The First Real-World Zero- Click Prompt Injection Exploit in a Production LLM System,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.14155","last_updated":"2026-07-14T18:56:38Z","snapshot_observed_at":"2026-08-18T12:33:16.032099Z","submitted_at":"2026-07-14T18:56:38Z","title":"Beyond Object Validation: Relational Conformance in Multi-Artifact Agent Releases","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-02T05:58:01.260673Z"},"links":{"cited_paper":"/paper/2509.10540","citing_paper":"/paper/2607.14155"},"observation_digest":"sha256:ce8513c6713ab3a5c4ef136ea0ae332c0a1da22794fb5861e7a0840f10250c40","observation_id":"9f25e6f0-4063-4064-a76d-0b1a2384dcd0","resolution":{"observed_at":"2026-08-02T05:58:01.260673Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2509.10540","last_updated":"2025-09-06T04:06:01Z","snapshot_observed_at":"2026-08-15T16:20:14.110461Z","submitted_at":"2025-09-06T04:06:01Z","title":"EchoLeak: The First Real-World Zero-Click Prompt Injection Exploit in a Production LLM System","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2509.10540","snapshot_observed_at":"2026-08-01T15:05:19.509390Z","title":"EchoLeak: The first real-world zero-click prompt injection exploit in a production LLM system,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.19433","last_updated":"2026-07-20T22:50:33Z","snapshot_observed_at":"2026-08-14T15:43:17.365888Z","submitted_at":"2026-07-20T22:50:33Z","title":"The Chronos Vulnerability: A Taxonomy of Temporal Persistence and Memory-Based Deception in Agentic AI","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-01T15:05:19.509390Z"},"links":{"cited_paper":"/paper/2509.10540","citing_paper":"/paper/2607.19433"},"observation_digest":"sha256:44779aaa6cf65f61658f1b0471454c30dc9721ee2f9a5eb6373c83dc969e3cfc","observation_id":"3bc24c1e-11f6-4de4-b241-7937b170c3f7","resolution":{"observed_at":"2026-08-01T15:05:19.509390Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2509.10540/citation-record","integrity":"/paper/2509.10540/integrity","json":"/paper/2509.10540/citation-record.json","paper":"/paper/2509.10540"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:24:10.965972Z","title":null,"venue":null,"work_id":"46b6aa2d-5563-443d-a531-3c433ba3e766","year":2025},"citing_paper":{"arxiv_id":"2509.10540","last_updated":"2025-09-06T04:06:01Z","snapshot_observed_at":"2026-08-15T16:20:14.110461Z","submitted_at":"2025-09-06T04:06:01Z","title":"EchoLeak: The First Real-World Zero-Click Prompt Injection Exploit in a Production LLM System","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-15T16:24:10.674806Z"},"links":{"citing_paper":"/paper/2509.10540"},"observation_digest":"sha256:7b1d6939237cc3fbf4ab99904a16e7559b6be3de3a5bb4afa327cf3fb7c9969d","observation_id":"5c885a38-10d9-4a3d-a711-20231b35541c","resolution":{"observed_at":"2026-08-15T16:24:10.969346Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:24:10.956636Z","title":null,"venue":null,"work_id":"7a3e0a49-ed0d-4ae9-aad1-8914d924a649","year":2025},"citing_paper":{"arxiv_id":"2509.10540","last_updated":"2025-09-06T04:06:01Z","snapshot_observed_at":"2026-08-15T16:20:14.110461Z","submitted_at":"2025-09-06T04:06:01Z","title":"EchoLeak: The First Real-World Zero-Click Prompt Injection Exploit in a Production LLM System","version":1},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-15T16:24:10.679163Z"},"links":{"citing_paper":"/paper/2509.10540"},"observation_digest":"sha256:470a87509f32c10f91f2f28ead35c158795027d07ba7efbe82290a981ed2e704","observation_id":"ce73e253-45e3-4089-9ec1-0bfa73eaf17a","resolution":{"observed_at":"2026-08-15T16:24:10.959957Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:24:10.947127Z","title":null,"venue":null,"work_id":"9f5d5469-24a2-467e-9afc-7704c02509e4","year":2025},"citing_paper":{"arxiv_id":"2509.10540","last_updated":"2025-09-06T04:06:01Z","snapshot_observed_at":"2026-08-15T16:20:14.110461Z","submitted_at":"2025-09-06T04:06:01Z","title":"EchoLeak: The First Real-World Zero-Click Prompt Injection Exploit in a Production LLM System","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-15T16:24:10.682559Z"},"links":{"citing_paper":"/paper/2509.10540"},"observation_digest":"sha256:30d22d0baaf2ea6e89c6d05e65a3c2a4eb0ab403d576b0983f3fa1b2622e475f","observation_id":"a3976f18-d369-4280-a352-51e960b89c92","resolution":{"observed_at":"2026-08-15T16:24:10.950739Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.10997","last_updated":"2024-03-27T09:16:57Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-12-18T07:47:33Z","title":"Retrieval-Augmented Generation for Large Language Models: A Survey","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.10997","snapshot_observed_at":"2026-08-15T16:24:10.685949Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2509.10540","last_updated":"2025-09-06T04:06:01Z","snapshot_observed_at":"2026-08-15T16:20:14.110461Z","submitted_at":"2025-09-06T04:06:01Z","title":"EchoLeak: The First Real-World Zero-Click Prompt Injection Exploit in a Production LLM System","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-15T16:24:10.685949Z"},"links":{"cited_paper":"/paper/2312.10997","citing_paper":"/paper/2509.10540"},"observation_digest":"sha256:6af1a4b380b698336ac480dfed412d751da8b491c9641375c787914c0d950cb2","observation_id":"0a124ab0-16a6-41f5-8038-26de89b3cbf8","resolution":{"observed_at":"2026-08-15T16:24:10.685949Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2302.12173","last_updated":"2023-05-05T14:26:17Z","snapshot_observed_at":"2026-08-12T14:45:22.117576Z","submitted_at":"2023-02-23T17:14:38Z","title":"Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2302.12173","snapshot_observed_at":"2026-08-15T16:24:10.689830Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2509.10540","last_updated":"2025-09-06T04:06:01Z","snapshot_observed_at":"2026-08-15T16:20:14.110461Z","submitted_at":"2025-09-06T04:06:01Z","title":"EchoLeak: The First Real-World Zero-Click Prompt Injection Exploit in a Production LLM System","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-15T16:24:10.689830Z"},"links":{"cited_paper":"/paper/2302.12173","citing_paper":"/paper/2509.10540"},"observation_digest":"sha256:1326a226f90c0f76a13ecc6878857718691bd7ced5d40c04f324df0a4fa64f66","observation_id":"b1e35195-d99c-41b9-9099-d529b95e34aa","resolution":{"observed_at":"2026-08-15T16:24:10.689830Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:24:10.937466Z","title":null,"venue":null,"work_id":"e9802238-82a4-40be-b94c-24900bfe2083","year":2024},"citing_paper":{"arxiv_id":"2509.10540","last_updated":"2025-09-06T04:06:01Z","snapshot_observed_at":"2026-08-15T16:20:14.110461Z","submitted_at":"2025-09-06T04:06:01Z","title":"EchoLeak: The First Real-World Zero-Click Prompt Injection Exploit in a Production LLM System","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-15T16:24:10.693755Z"},"links":{"citing_paper":"/paper/2509.10540"},"observation_digest":"sha256:fdb6705746ce7297f67351c524902485cb121de8a2f0db44f3647621831d8316","observation_id":"636ee463-92ab-44cc-ace7-9ba3f456a4cb","resolution":{"observed_at":"2026-08-15T16:24:10.940804Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:24:10.928213Z","title":null,"venue":null,"work_id":"0f8ceb7c-343e-4e6d-8a52-1fce9f9e5a6c","year":2025},"citing_paper":{"arxiv_id":"2509.10540","last_updated":"2025-09-06T04:06:01Z","snapshot_observed_at":"2026-08-15T16:20:14.110461Z","submitted_at":"2025-09-06T04:06:01Z","title":"EchoLeak: The First Real-World Zero-Click Prompt Injection Exploit in a Production LLM System","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-15T16:24:10.697942Z"},"links":{"citing_paper":"/paper/2509.10540"},"observation_digest":"sha256:e2e212833b9f3eb81485b646f48fdd4e62ba402023c0255c74c3cc76a9dbbade","observation_id":"426934eb-129c-43b4-be4d-a7d3a61eb55d","resolution":{"observed_at":"2026-08-15T16:24:10.931812Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.02926","last_updated":"2025-02-27T02:22:07Z","snapshot_observed_at":"2026-08-16T15:02:52.363303Z","submitted_at":"2023-09-06T11:39:37Z","title":"Demystifying RCE Vulnerabilities in LLM-Integrated Apps","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.02926","snapshot_observed_at":"2026-08-15T16:24:10.701391Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2509.10540","last_updated":"2025-09-06T04:06:01Z","snapshot_observed_at":"2026-08-15T16:20:14.110461Z","submitted_at":"2025-09-06T04:06:01Z","title":"EchoLeak: The First Real-World Zero-Click Prompt Injection Exploit in a Production LLM System","version":1},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-15T16:24:10.701391Z"},"links":{"cited_paper":"/paper/2309.02926","citing_paper":"/paper/2509.10540"},"observation_digest":"sha256:21ed22f2545454daae5fda6c7561550350845e6e34e08feee163beca799f3fc1","observation_id":"84ab690a-6649-494d-b9dc-989f560e1ed6","resolution":{"observed_at":"2026-08-15T16:24:10.701391Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:24:10.918771Z","title":null,"venue":null,"work_id":"f301e3e3-9350-405c-8b5f-ed76ebd92bf4","year":2024},"citing_paper":{"arxiv_id":"2509.10540","last_updated":"2025-09-06T04:06:01Z","snapshot_observed_at":"2026-08-15T16:20:14.110461Z","submitted_at":"2025-09-06T04:06:01Z","title":"EchoLeak: The First Real-World Zero-Click Prompt Injection Exploit in a Production LLM System","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-15T16:24:10.705526Z"},"links":{"citing_paper":"/paper/2509.10540"},"observation_digest":"sha256:b88967fd36f80e24288fade3994bc707e518dc431d0102f999bd0a16bbb9a023","observation_id":"7e326775-99c0-4c53-9662-7f0d3fa53d0e","resolution":{"observed_at":"2026-08-15T16:24:10.922240Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:24:10.908536Z","title":null,"venue":null,"work_id":"be1042a9-5f1b-4d70-a9fe-427822fbf431","year":2025},"citing_paper":{"arxiv_id":"2509.10540","last_updated":"2025-09-06T04:06:01Z","snapshot_observed_at":"2026-08-15T16:20:14.110461Z","submitted_at":"2025-09-06T04:06:01Z","title":"EchoLeak: The First Real-World Zero-Click Prompt Injection Exploit in a Production LLM System","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-15T16:24:10.708581Z"},"links":{"citing_paper":"/paper/2509.10540"},"observation_digest":"sha256:19bc525f8aded0fa6007c503a4bf0eb58bc341315afd7942316f599526a75c35","observation_id":"c4a669ba-c2c2-42f9-9ffd-7575d240f7ec","resolution":{"observed_at":"2026-08-15T16:24:10.912080Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:24:10.897950Z","title":null,"venue":null,"work_id":"7398955f-9601-4dbc-a754-56ed07d089e1","year":2024},"citing_paper":{"arxiv_id":"2509.10540","last_updated":"2025-09-06T04:06:01Z","snapshot_observed_at":"2026-08-15T16:20:14.110461Z","submitted_at":"2025-09-06T04:06:01Z","title":"EchoLeak: The First Real-World Zero-Click Prompt Injection Exploit in a Production LLM System","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-15T16:24:10.711748Z"},"links":{"citing_paper":"/paper/2509.10540"},"observation_digest":"sha256:08716fa307aba924e74d858c10d76fdc34d872002841af563d342068d6b00c71","observation_id":"57eb8e35-500d-44e2-95d5-99c66cdbc561","resolution":{"observed_at":"2026-08-15T16:24:10.901212Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:24:10.888632Z","title":null,"venue":null,"work_id":"ee433746-cd91-4fbb-a9e9-b2608266b6b3","year":2025},"citing_paper":{"arxiv_id":"2509.10540","last_updated":"2025-09-06T04:06:01Z","snapshot_observed_at":"2026-08-15T16:20:14.110461Z","submitted_at":"2025-09-06T04:06:01Z","title":"EchoLeak: The First Real-World Zero-Click Prompt Injection Exploit in a Production LLM System","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-15T16:24:10.714937Z"},"links":{"citing_paper":"/paper/2509.10540"},"observation_digest":"sha256:bb72be2bf44794a3a522dbc4cf998cf685c3ecd63b96f167076efe8216db8c6b","observation_id":"9aa310ea-4e39-4d33-97d1-3711fecea852","resolution":{"observed_at":"2026-08-15T16:24:10.891863Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:24:10.879305Z","title":null,"venue":null,"work_id":"f8cf68af-718c-4747-a24e-1e5aaa9a1811","year":2025},"citing_paper":{"arxiv_id":"2509.10540","last_updated":"2025-09-06T04:06:01Z","snapshot_observed_at":"2026-08-15T16:20:14.110461Z","submitted_at":"2025-09-06T04:06:01Z","title":"EchoLeak: The First Real-World Zero-Click Prompt Injection Exploit in a Production LLM System","version":1},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-15T16:24:10.718881Z"},"links":{"citing_paper":"/paper/2509.10540"},"observation_digest":"sha256:3d28a54b38ced430ff41a9e832d0693ff6df4b2dde0a799c54e4c8289d2d04cb","observation_id":"63f04b8e-d8ef-4b1c-83bd-750839415f2b","resolution":{"observed_at":"2026-08-15T16:24:10.882533Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:24:10.869209Z","title":null,"venue":null,"work_id":"6092872e-130b-410d-b4ed-4eac8ccb22aa","year":2025},"citing_paper":{"arxiv_id":"2509.10540","last_updated":"2025-09-06T04:06:01Z","snapshot_observed_at":"2026-08-15T16:20:14.110461Z","submitted_at":"2025-09-06T04:06:01Z","title":"EchoLeak: The First Real-World Zero-Click Prompt Injection Exploit in a Production LLM System","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-15T16:24:10.722288Z"},"links":{"citing_paper":"/paper/2509.10540"},"observation_digest":"sha256:82c94bf6d0b74fa54ddb18091ce9e312aefe021bb593256c4dead11844fc7ad8","observation_id":"f98a4acd-1243-4f95-912a-12fd5374ed2c","resolution":{"observed_at":"2026-08-15T16:24:10.872773Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:24:10.859067Z","title":null,"venue":null,"work_id":"cee1832b-6c5a-40a2-90de-b204cb38b584","year":2025},"citing_paper":{"arxiv_id":"2509.10540","last_updated":"2025-09-06T04:06:01Z","snapshot_observed_at":"2026-08-15T16:20:14.110461Z","submitted_at":"2025-09-06T04:06:01Z","title":"EchoLeak: The First Real-World Zero-Click Prompt Injection Exploit in a Production LLM System","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-15T16:24:10.725173Z"},"links":{"citing_paper":"/paper/2509.10540"},"observation_digest":"sha256:914ee2cc7bb9602257c4e6c3839034c3a2d571e788fc30f47fc909124fcda37d","observation_id":"91eb3464-cafc-473d-8e83-1a631401644b","resolution":{"observed_at":"2026-08-15T16:24:10.862750Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2211.09527","last_updated":"2022-11-17T13:43:20Z","snapshot_observed_at":"2026-08-18T00:11:55.170013Z","submitted_at":"2022-11-17T13:43:20Z","title":"Ignore Previous Prompt: Attack Techniques For Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2211.09527","snapshot_observed_at":"2026-08-15T16:24:10.728527Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2509.10540","last_updated":"2025-09-06T04:06:01Z","snapshot_observed_at":"2026-08-15T16:20:14.110461Z","submitted_at":"2025-09-06T04:06:01Z","title":"EchoLeak: The First Real-World Zero-Click Prompt Injection Exploit in a Production LLM System","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-15T16:24:10.728527Z"},"links":{"cited_paper":"/paper/2211.09527","citing_paper":"/paper/2509.10540"},"observation_digest":"sha256:134e9584f2bcc59d4c1d63a5a2055fe60604fd88b7a0a1cec4bd075217cfdce5","observation_id":"2d72034b-faee-467b-aee6-770efe41f2e8","resolution":{"observed_at":"2026-08-15T16:24:10.728527Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:24:10.850039Z","title":null,"venue":null,"work_id":"876b7144-b619-4dd6-abaa-ed7fa542d138","year":2025},"citing_paper":{"arxiv_id":"2509.10540","last_updated":"2025-09-06T04:06:01Z","snapshot_observed_at":"2026-08-15T16:20:14.110461Z","submitted_at":"2025-09-06T04:06:01Z","title":"EchoLeak: The First Real-World Zero-Click Prompt Injection Exploit in a Production LLM System","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-15T16:24:10.731986Z"},"links":{"citing_paper":"/paper/2509.10540"},"observation_digest":"sha256:e4dfd19f95fb6f56a18529442c180180e99c3feb9d39e354dd63444971de36db","observation_id":"3b3867d6-5673-42e7-a83e-a554e5cc2255","resolution":{"observed_at":"2026-08-15T16:24:10.853011Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:24:10.840543Z","title":null,"venue":null,"work_id":"248a5246-2d9d-486b-81b4-cf0ddc159a7b","year":2024},"citing_paper":{"arxiv_id":"2509.10540","last_updated":"2025-09-06T04:06:01Z","snapshot_observed_at":"2026-08-15T16:20:14.110461Z","submitted_at":"2025-09-06T04:06:01Z","title":"EchoLeak: The First Real-World Zero-Click Prompt Injection Exploit in a Production LLM System","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-15T16:24:10.734986Z"},"links":{"citing_paper":"/paper/2509.10540"},"observation_digest":"sha256:cdc520f4eae48ea46d5382eb9c1e56cb40a74eb042d8e6cec799b4429acbc7ec","observation_id":"f297e76c-0bb4-4dbf-935a-5f8c5a23181b","resolution":{"observed_at":"2026-08-15T16:24:10.843913Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:24:10.830528Z","title":null,"venue":null,"work_id":"acce4f2f-a616-42d7-9d22-3bf2bae0ace5","year":2025},"citing_paper":{"arxiv_id":"2509.10540","last_updated":"2025-09-06T04:06:01Z","snapshot_observed_at":"2026-08-15T16:20:14.110461Z","submitted_at":"2025-09-06T04:06:01Z","title":"EchoLeak: The First Real-World Zero-Click Prompt Injection Exploit in a Production LLM System","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-15T16:24:10.738074Z"},"links":{"citing_paper":"/paper/2509.10540"},"observation_digest":"sha256:59669e3ea61adb0e5d56dcc5b6e7bc7766d05193788e89c0ca0c83b91c4eb6b3","observation_id":"32fd2328-0a4d-4623-a6e1-c50a0b215d05","resolution":{"observed_at":"2026-08-15T16:24:10.833934Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:24:10.819599Z","title":null,"venue":null,"work_id":"3929b1f8-dcb7-4582-ba91-8e720ff7999c","year":2023},"citing_paper":{"arxiv_id":"2509.10540","last_updated":"2025-09-06T04:06:01Z","snapshot_observed_at":"2026-08-15T16:20:14.110461Z","submitted_at":"2025-09-06T04:06:01Z","title":"EchoLeak: The First Real-World Zero-Click Prompt Injection Exploit in a Production LLM System","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-15T16:24:10.741126Z"},"links":{"citing_paper":"/paper/2509.10540"},"observation_digest":"sha256:6eaf5128b311c7208ac419fccb955eddbd707763e60a35707fbfe20b2003b7ff","observation_id":"2ea223b8-c3c4-4bc1-a71a-64c96f87a859","resolution":{"observed_at":"2026-08-15T16:24:10.823673Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:24:10.744447Z","title":", \" * write output.state after.block = add.period write newline","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.10540","last_updated":"2025-09-06T04:06:01Z","snapshot_observed_at":"2026-08-15T16:20:14.110461Z","submitted_at":"2025-09-06T04:06:01Z","title":"EchoLeak: The First Real-World Zero-Click Prompt Injection Exploit in a Production LLM System","version":1},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-15T16:24:10.744447Z"},"links":{"citing_paper":"/paper/2509.10540"},"observation_digest":"sha256:c98093d607d093b5fd622ce03c8de5b6234233dcebe0515c1708c2153aa36b73","observation_id":"393b7542-0c94-45e4-9fa1-5f168877724c","resolution":{"observed_at":"2026-08-15T16:24:10.744447Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:24:10.748194Z","title":"write newline","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.10540","last_updated":"2025-09-06T04:06:01Z","snapshot_observed_at":"2026-08-15T16:20:14.110461Z","submitted_at":"2025-09-06T04:06:01Z","title":"EchoLeak: The First Real-World Zero-Click Prompt Injection Exploit in a Production LLM System","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-15T16:24:10.748194Z"},"links":{"citing_paper":"/paper/2509.10540"},"observation_digest":"sha256:6378d3d7335817bb67b37148d8e33254ca6aef817465efbe7503189f33b9da20","observation_id":"ef77bbcd-4b92-4564-8dd7-0ca58eba198f","resolution":{"observed_at":"2026-08-15T16:24:10.748194Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2509.10540","last_updated":"2025-09-06T04:06:01Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-15T16:20:14.110461Z","submitted_at":"2025-09-06T04:06:01Z","title":"EchoLeak: The First Real-World Zero-Click Prompt Injection Exploit in a Production LLM System"},"reference_resolution":{"displayed":22,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":22,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":22},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"thesis":"As of 21 August 2026, this Paper Citation Record lists 22 of 22 outbound references and 7 inbound Pith citation observations for arXiv:2509.10540."}