{"as_of":"2026-08-19T14:48:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:c0ef0465c83b77dd1a3249cecaf521143d1bee08bb610230a111507eb09d1506","coverage":[{"denominator":8,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":8,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-02T11:07:08.044674Z","state":"measured"},{"denominator":8,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":8,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-19T06:32:44.657259+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2606.17467/citation-record","integrity":"/paper/2606.17467/integrity","json":"/paper/2606.17467/citation-record.json","paper":"/paper/2606.17467"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2309.00614","last_updated":"2023-09-04T17:47:36Z","snapshot_observed_at":"2026-07-06T16:13:23.343694Z","submitted_at":"2023-09-01T17:59:44Z","title":"Baseline Defenses for Adversarial Attacks Against Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.00614","snapshot_observed_at":"2026-08-02T11:07:07.657788Z","title":"Yupei Liu, Yuqi Jia, Runpeng Geng, Jinyuan Jia, and Neil Zhenqiang Gong","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.17467","last_updated":"2026-07-21T14:56:46Z","snapshot_observed_at":"2026-08-14T11:34:19.660309Z","submitted_at":"2026-06-16T03:29:23Z","title":"PARSE: Provenance-Aware Retrieval Sanitization for Professional Domain LLM Agents","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-02T11:07:07.657788Z"},"links":{"cited_paper":"/paper/2309.00614","citing_paper":"/paper/2606.17467"},"observation_digest":"sha256:806418d51224abe8208a600b3985cdc562777d254bc16f29c0311778115723f7","observation_id":"592f3ea7-fc44-422d-8172-2daa9d727585","resolution":{"observed_at":"2026-08-02T11:07:07.657788Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T11:07:07.760381Z","title":"Preprint, arXiv:2310.12815","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.17467","last_updated":"2026-07-21T14:56:46Z","snapshot_observed_at":"2026-08-14T11:34:19.660309Z","submitted_at":"2026-06-16T03:29:23Z","title":"PARSE: Provenance-Aware Retrieval Sanitization for Professional Domain LLM Agents","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-02T11:07:07.760381Z"},"links":{"citing_paper":"/paper/2606.17467"},"observation_digest":"sha256:8674549e10f35f8e61a8fbc04cd7b9cdc3cc0ddb647f1a66d905db33708548d9","observation_id":"bb272f13-dfd3-4b2c-8333-cbf71bb84b4c","resolution":{"observed_at":"2026-08-02T11:07:07.760381Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2605.22001","last_updated":"2026-05-21T04:58:11Z","snapshot_observed_at":"2026-08-17T06:05:48.602127Z","submitted_at":"2026-05-21T04:58:11Z","title":"Blind Spots in the Guard: How Domain-Camouflaged Injection Attacks Evade Detection in Multi-Agent LLM Systems","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2605.22001","snapshot_observed_at":"2026-08-02T11:07:07.881761Z","title":"https:// ai.meta.com/research/publications/ llama-guard-3/","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.17467","last_updated":"2026-07-21T14:56:46Z","snapshot_observed_at":"2026-08-14T11:34:19.660309Z","submitted_at":"2026-06-16T03:29:23Z","title":"PARSE: Provenance-Aware Retrieval Sanitization for Professional Domain LLM Agents","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-02T11:07:07.881761Z"},"links":{"cited_paper":"/paper/2605.22001","citing_paper":"/paper/2606.17467"},"observation_digest":"sha256:eb70bb174be66b9807c48d1fde84bc6621fcb82158c51b8e64dcb1819b65eac4","observation_id":"31994e44-11ee-4eed-8214-a03018936177","resolution":{"observed_at":"2026-08-02T11:07:07.881761Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.06608","last_updated":"2025-02-26T18:59:01Z","snapshot_observed_at":"2026-08-13T23:11:34.204909Z","submitted_at":"2024-06-06T18:10:11Z","title":"The Prompt Report: A Systematic Survey of Prompt Engineering Techniques","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.06608","snapshot_observed_at":"2026-08-02T11:07:08.044674Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.17467","last_updated":"2026-07-21T14:56:46Z","snapshot_observed_at":"2026-08-14T11:34:19.660309Z","submitted_at":"2026-06-16T03:29:23Z","title":"PARSE: Provenance-Aware Retrieval Sanitization for Professional Domain LLM Agents","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-02T11:07:08.044674Z"},"links":{"cited_paper":"/paper/2406.06608","citing_paper":"/paper/2606.17467"},"observation_digest":"sha256:519d83a8b75e687565818183364d70104803de732da2480ef80fc28d20d7afcd","observation_id":"0dd43cb4-5c27-4514-89d9-bedc3a1febbf","resolution":{"observed_at":"2026-08-02T11:07:08.044674Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2211.09527","last_updated":"2022-11-17T13:43:20Z","snapshot_observed_at":"2026-08-18T00:11:55.170013Z","submitted_at":"2022-11-17T13:43:20Z","title":"Ignore Previous Prompt: Attack Techniques For Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2211.09527","snapshot_observed_at":"2026-08-02T11:07:07.956789Z","title":"Preprint, arXiv:2211.09527","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.17467","last_updated":"2026-07-21T14:56:46Z","snapshot_observed_at":"2026-08-14T11:34:19.660309Z","submitted_at":"2026-06-16T03:29:23Z","title":"PARSE: Provenance-Aware Retrieval Sanitization for Professional Domain LLM Agents","version":2},"reference_index":2022,"source":"pdf_text","source_observed_at":"2026-08-02T11:07:07.956789Z"},"links":{"cited_paper":"/paper/2211.09527","citing_paper":"/paper/2606.17467"},"observation_digest":"sha256:3414783152a289ec032fda0aca43397c9ae47ec9d3902441cdb4ca4614cab974","observation_id":"538a620d-b81b-4d4c-b1c6-dd2469c8395a","resolution":{"observed_at":"2026-08-02T11:07:07.956789Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.06674","last_updated":"2023-12-07T19:40:50Z","snapshot_observed_at":"2026-08-14T15:42:19.849118Z","submitted_at":"2023-12-07T19:40:50Z","title":"Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversations","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.06674","snapshot_observed_at":"2026-08-02T11:07:07.582414Z","title":"Neel Jain, Avi Schwarzschild, Yuxin Wen, Gowthami Somepalli, John Kirchenbauer, Ping-yeh Chiang, Micah Goldblum, Tom Goldstein, and Jonas Geip- ing","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.17467","last_updated":"2026-07-21T14:56:46Z","snapshot_observed_at":"2026-08-14T11:34:19.660309Z","submitted_at":"2026-06-16T03:29:23Z","title":"PARSE: Provenance-Aware Retrieval Sanitization for Professional Domain LLM Agents","version":2},"reference_index":2023,"source":"pdf_text","source_observed_at":"2026-08-02T11:07:07.582414Z"},"links":{"cited_paper":"/paper/2312.06674","citing_paper":"/paper/2606.17467"},"observation_digest":"sha256:cfd36ac7a74171e09b99f590aea2842d338013af261edc9fd49b840794172aec","observation_id":"e531fa75-a6fb-415f-8cf9-ae14824f03fb","resolution":{"observed_at":"2026-08-02T11:07:07.582414Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.14197","last_updated":"2025-01-27T08:51:16Z","snapshot_observed_at":"2026-08-16T18:17:43.393858Z","submitted_at":"2023-12-21T01:08:39Z","title":"Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.14197","snapshot_observed_at":"2026-08-02T11:07:07.442032Z","title":"Hakan Inan, Kartikeya Upasani, Jianfeng Chi, Rashi Rungta, Krithika Iyer, Yuning Mao, Michael Tontchev, Qing Hu, Brian Fuller, Davide Testuggine, and Madian Khabsa","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.17467","last_updated":"2026-07-21T14:56:46Z","snapshot_observed_at":"2026-08-14T11:34:19.660309Z","submitted_at":"2026-06-16T03:29:23Z","title":"PARSE: Provenance-Aware Retrieval Sanitization for Professional Domain LLM Agents","version":2},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-02T11:07:07.442032Z"},"links":{"cited_paper":"/paper/2312.14197","citing_paper":"/paper/2606.17467"},"observation_digest":"sha256:bfa226e74650032700e55a89ce8ec5702eae633dbf293614619b4f87883f530b","observation_id":"317cc991-7106-429f-8973-67bdeb1617af","resolution":{"observed_at":"2026-08-02T11:07:07.442032Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T11:07:07.283971Z","title":"Preprint, arXiv:2510.08829","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.17467","last_updated":"2026-07-21T14:56:46Z","snapshot_observed_at":"2026-08-14T11:34:19.660309Z","submitted_at":"2026-06-16T03:29:23Z","title":"PARSE: Provenance-Aware Retrieval Sanitization for Professional Domain LLM Agents","version":2},"reference_index":2025,"source":"pdf_text","source_observed_at":"2026-08-02T11:07:07.283971Z"},"links":{"citing_paper":"/paper/2606.17467"},"observation_digest":"sha256:39e64be05b3406362206ae222e72f232ccde7a6092f90c78759f8c319c3d16c5","observation_id":"e587a4f2-6137-49b9-add2-3647679d16e0","resolution":{"observed_at":"2026-08-02T11:07:07.283971Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2606.17467","last_updated":"2026-07-21T14:56:46Z","latest_version":2,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-14T11:34:19.660309Z","submitted_at":"2026-06-16T03:29:23Z","title":"PARSE: Provenance-Aware Retrieval Sanitization for Professional Domain LLM Agents"},"reference_resolution":{"displayed":8,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":8,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":8},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"thesis":"As of 19 August 2026, this Paper Citation Record lists 8 of 8 outbound references and 0 inbound Pith citation observations for arXiv:2606.17467."}