{"as_of":"2026-08-19T03:05:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:ee504540a8a56525155ce0622c31b16fff85a7e22fc2acad554b10f82138d155","coverage":[{"denominator":10,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":10,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-04T06:42:00.285346Z","state":"measured"},{"denominator":10,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":10,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-18T06:34:40.430872+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2512.06716/citation-record","integrity":"/paper/2512.06716/integrity","json":"/paper/2512.06716/citation-record.json","paper":"/paper/2512.06716"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T06:41:58.896423Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2512.06716","last_updated":"2026-08-02T09:20:06Z","snapshot_observed_at":"2026-08-19T01:36:54.000941Z","submitted_at":"2025-12-07T08:11:19Z","title":"SIEVE: Selective Integrity Verification and Escalation for Defending LLM Agents against Indirect Prompt Injection","version":3},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-04T06:41:58.896423Z"},"links":{"citing_paper":"/paper/2512.06716"},"observation_digest":"sha256:5323da050bc972b970d1694097f8014653a71b4ebb7794599443a8e96926315a","observation_id":"fe3a87cd-1c8a-429d-9c1c-5241ddf37dbd","resolution":{"observed_at":"2026-08-04T06:41:58.896423Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T06:41:59.041400Z","title":"- **Analyze**: For each strategy, briefly list its pros and cons based on the Guiding Principles (efficiency, robustness, etc.)","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2512.06716","last_updated":"2026-08-02T09:20:06Z","snapshot_observed_at":"2026-08-19T01:36:54.000941Z","submitted_at":"2025-12-07T08:11:19Z","title":"SIEVE: Selective Integrity Verification and Escalation for Defending LLM Agents against Indirect Prompt Injection","version":3},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-04T06:41:59.041400Z"},"links":{"citing_paper":"/paper/2512.06716"},"observation_digest":"sha256:e0b62784a3ecef61fd06c6296bc1d7684b8e1afb89199aae1af35c958f9262cc","observation_id":"1c764696-6875-45e5-a815-7fcd45d04832","resolution":{"observed_at":"2026-08-04T06:41:59.041400Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T06:41:59.190054Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2512.06716","last_updated":"2026-08-02T09:20:06Z","snapshot_observed_at":"2026-08-19T01:36:54.000941Z","submitted_at":"2025-12-07T08:11:19Z","title":"SIEVE: Selective Integrity Verification and Escalation for Defending LLM Agents against Indirect Prompt Injection","version":3},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-04T06:41:59.190054Z"},"links":{"citing_paper":"/paper/2512.06716"},"observation_digest":"sha256:ba3324e85308263b09c435fc92acbc288a94ba90741e1d5c61e1073513e9097b","observation_id":"346249a4-1b24-48df-a16b-a5e3dd9851e6","resolution":{"observed_at":"2026-08-04T06:41:59.190054Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T06:41:59.335183Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2512.06716","last_updated":"2026-08-02T09:20:06Z","snapshot_observed_at":"2026-08-19T01:36:54.000941Z","submitted_at":"2025-12-07T08:11:19Z","title":"SIEVE: Selective Integrity Verification and Escalation for Defending LLM Agents against Indirect Prompt Injection","version":3},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-04T06:41:59.335183Z"},"links":{"citing_paper":"/paper/2512.06716"},"observation_digest":"sha256:0868de7932d2872040eb247533a535c0c298936133b4bbf4d967ef1acf306cab","observation_id":"2df3b263-5675-4aa4-a8cc-7ab2ff429108","resolution":{"observed_at":"2026-08-04T06:41:59.335183Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T06:41:59.477037Z","title":"tomorrow","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2512.06716","last_updated":"2026-08-02T09:20:06Z","snapshot_observed_at":"2026-08-19T01:36:54.000941Z","submitted_at":"2025-12-07T08:11:19Z","title":"SIEVE: Selective Integrity Verification and Escalation for Defending LLM Agents against Indirect Prompt Injection","version":3},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-04T06:41:59.477037Z"},"links":{"citing_paper":"/paper/2512.06716"},"observation_digest":"sha256:2185e1c587b2dd5fea98f3b0b937dcd839fdce0d76b26346028f440fe482ecc0","observation_id":"93496ad7-61d6-428b-90f9-27fea2e4a325","resolution":{"observed_at":"2026-08-04T06:41:59.477037Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T06:41:59.619770Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2512.06716","last_updated":"2026-08-02T09:20:06Z","snapshot_observed_at":"2026-08-19T01:36:54.000941Z","submitted_at":"2025-12-07T08:11:19Z","title":"SIEVE: Selective Integrity Verification and Escalation for Defending LLM Agents against Indirect Prompt Injection","version":3},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-04T06:41:59.619770Z"},"links":{"citing_paper":"/paper/2512.06716"},"observation_digest":"sha256:8975e3a7b89aefb0750935fdd569d3bf45c8b23e696a495b4fa93546285e472a","observation_id":"4c89b09a-86b4-47f1-bf61-156f0e26f5b8","resolution":{"observed_at":"2026-08-04T06:41:59.619770Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T06:41:59.809980Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2512.06716","last_updated":"2026-08-02T09:20:06Z","snapshot_observed_at":"2026-08-19T01:36:54.000941Z","submitted_at":"2025-12-07T08:11:19Z","title":"SIEVE: Selective Integrity Verification and Escalation for Defending LLM Agents against Indirect Prompt Injection","version":3},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-04T06:41:59.809980Z"},"links":{"citing_paper":"/paper/2512.06716"},"observation_digest":"sha256:613f6ed9e2417ded48a8553b82942e9db409eaba131d4afb5e3694d36b598e78","observation_id":"5a9a3954-424a-45ca-9862-220728f51434","resolution":{"observed_at":"2026-08-04T06:41:59.809980Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T06:41:59.959859Z","title":"- Content:{triggering_content}","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2512.06716","last_updated":"2026-08-02T09:20:06Z","snapshot_observed_at":"2026-08-19T01:36:54.000941Z","submitted_at":"2025-12-07T08:11:19Z","title":"SIEVE: Selective Integrity Verification and Escalation for Defending LLM Agents against Indirect Prompt Injection","version":3},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-04T06:41:59.959859Z"},"links":{"citing_paper":"/paper/2512.06716"},"observation_digest":"sha256:f39f003c3686ab9b5f194e7418e2188ef3c29e37886259d3ca3ee9eea75469b2","observation_id":"e8841a8b-418c-4cb3-aed5-386c3825d542","resolution":{"observed_at":"2026-08-04T06:41:59.959859Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T06:42:00.104386Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2512.06716","last_updated":"2026-08-02T09:20:06Z","snapshot_observed_at":"2026-08-19T01:36:54.000941Z","submitted_at":"2025-12-07T08:11:19Z","title":"SIEVE: Selective Integrity Verification and Escalation for Defending LLM Agents against Indirect Prompt Injection","version":3},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-04T06:42:00.104386Z"},"links":{"citing_paper":"/paper/2512.06716"},"observation_digest":"sha256:8ee766da9a5e3834cae3805907466f93cce647af44ea26aeed6a89df4343dca5","observation_id":"73be9255-f811-4cd0-8b75-2de1841e7c51","resolution":{"observed_at":"2026-08-04T06:42:00.104386Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T06:42:00.285346Z","title":"reason\":","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2512.06716","last_updated":"2026-08-02T09:20:06Z","snapshot_observed_at":"2026-08-19T01:36:54.000941Z","submitted_at":"2025-12-07T08:11:19Z","title":"SIEVE: Selective Integrity Verification and Escalation for Defending LLM Agents against Indirect Prompt Injection","version":3},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-04T06:42:00.285346Z"},"links":{"citing_paper":"/paper/2512.06716"},"observation_digest":"sha256:6dfc3a4a3bae39c64229515a56fb26dea46f0503bce3d6bda98cb9895c515f0d","observation_id":"4e6bbe41-0429-437e-aee2-d69beca83fc0","resolution":{"observed_at":"2026-08-04T06:42:00.285346Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2512.06716","last_updated":"2026-08-02T09:20:06Z","latest_version":3,"primary_category":"cs.AI","snapshot_observed_at":"2026-08-19T01:36:54.000941Z","submitted_at":"2025-12-07T08:11:19Z","title":"SIEVE: Selective Integrity Verification and Escalation for Defending LLM Agents against Indirect Prompt Injection"},"reference_resolution":{"displayed":10,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":10,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":10},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"thesis":"As of 19 August 2026, this Paper Citation Record lists 10 of 10 outbound references and 0 inbound Pith citation observations for arXiv:2512.06716."}