{"as_of":"2026-08-11T13:51:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:2dc617d90662dfc4323dbe70fd0b18498705e042354b0487dcbde4f29bcc609e","coverage":[{"denominator":34,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":34,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-02T01:38:42.190666Z","state":"measured"},{"denominator":35,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":35,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-11T06:34:44.6726+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-08T00:51:38.000729Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"pith","source_observed_at":"2026-08-08T00:51:38.474275Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2607.14611","last_updated":"2026-07-16T06:13:48Z","snapshot_observed_at":"2026-08-06T21:11:50.222025Z","submitted_at":"2026-07-16T06:13:48Z","title":"Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems","version":1},"cited_work":{"arxiv_id":"2607.14611","doi":null,"metadata_source":"pith","pith_arxiv_id":"2607.14611","snapshot_observed_at":"2026-08-08T00:51:38.474275Z","title":"Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems","venue":"cs.CR","work_id":"e4839d66-2c69-40a7-9444-52d18c54d5e7","year":2026},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-09T21:23:14.109940Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:38.000729Z"},"links":{"cited_paper":"/paper/2607.14611","citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:f6716c43587f3c476763478deb16c998abafe67b1d73183483ea069e18dc2e25","observation_id":"d801fd05-9d4b-4757-9fb9-54ceb9d0c655","resolution":{"observed_at":"2026-08-08T00:51:38.479075Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2607.14611/citation-record","integrity":"/paper/2607.14611/integrity","json":"/paper/2607.14611/citation-record.json","paper":"/paper/2607.14611"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T01:38:39.415658Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.14611","last_updated":"2026-07-16T06:13:48Z","snapshot_observed_at":"2026-08-06T21:11:50.222025Z","submitted_at":"2026-07-16T06:13:48Z","title":"Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-02T01:38:39.415658Z"},"links":{"citing_paper":"/paper/2607.14611"},"observation_digest":"sha256:0a39851f18f058af53205aacbaa417bb1f587269f645cdaec9dbb5f0b4236c2b","observation_id":"394d86cd-4f2f-4a84-a769-1d9535ec6785","resolution":{"observed_at":"2026-08-02T01:38:39.415658Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T01:38:39.521573Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.14611","last_updated":"2026-07-16T06:13:48Z","snapshot_observed_at":"2026-08-06T21:11:50.222025Z","submitted_at":"2026-07-16T06:13:48Z","title":"Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-02T01:38:39.521573Z"},"links":{"citing_paper":"/paper/2607.14611"},"observation_digest":"sha256:fe3f9474e4d88a1dae8584636e44296cabe2acc017141c67496a939b503f2b2d","observation_id":"9c8f3deb-ec4a-46ee-8d40-e90d205af83b","resolution":{"observed_at":"2026-08-02T01:38:39.521573Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T01:38:39.576354Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.14611","last_updated":"2026-07-16T06:13:48Z","snapshot_observed_at":"2026-08-06T21:11:50.222025Z","submitted_at":"2026-07-16T06:13:48Z","title":"Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-02T01:38:39.576354Z"},"links":{"citing_paper":"/paper/2607.14611"},"observation_digest":"sha256:e5eaa7d588c0ab12705e64884fc10145a845412b8f29c1a6c3da574b00478b0b","observation_id":"1195f7af-dfc3-4b54-ac03-8d025b1709c9","resolution":{"observed_at":"2026-08-02T01:38:39.576354Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T01:38:39.650508Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.14611","last_updated":"2026-07-16T06:13:48Z","snapshot_observed_at":"2026-08-06T21:11:50.222025Z","submitted_at":"2026-07-16T06:13:48Z","title":"Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-02T01:38:39.650508Z"},"links":{"citing_paper":"/paper/2607.14611"},"observation_digest":"sha256:b85e4a6854f1605aa51308ee0f0f0b5f4991e0a249e9162c00c50a63336e7e1e","observation_id":"30357494-4087-4327-8c3d-5091fc4dc23a","resolution":{"observed_at":"2026-08-02T01:38:39.650508Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T01:38:39.714552Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.14611","last_updated":"2026-07-16T06:13:48Z","snapshot_observed_at":"2026-08-06T21:11:50.222025Z","submitted_at":"2026-07-16T06:13:48Z","title":"Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-02T01:38:39.714552Z"},"links":{"citing_paper":"/paper/2607.14611"},"observation_digest":"sha256:eb17a23c99b171d4e3a3b03efc226a6c2686f489b44c28267493dcd4cfabf5a0","observation_id":"e7178069-6458-4999-b2d8-a067566f20f6","resolution":{"observed_at":"2026-08-02T01:38:39.714552Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2107.03374","last_updated":"2021-07-14T17:16:02Z","snapshot_observed_at":"2026-08-08T11:58:24.516369Z","submitted_at":"2021-07-07T17:41:24Z","title":"Evaluating Large Language Models Trained on Code","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2107.03374","snapshot_observed_at":"2026-08-02T01:38:39.871820Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.14611","last_updated":"2026-07-16T06:13:48Z","snapshot_observed_at":"2026-08-06T21:11:50.222025Z","submitted_at":"2026-07-16T06:13:48Z","title":"Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-02T01:38:39.871820Z"},"links":{"cited_paper":"/paper/2107.03374","citing_paper":"/paper/2607.14611"},"observation_digest":"sha256:809090cba5cd9b323da2f2e9e264435524034313f504e0ab39e3d8d4fc78168f","observation_id":"e09c0414-30e7-4e5b-bcf4-7604be4cd2eb","resolution":{"observed_at":"2026-08-02T01:38:39.871820Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T01:38:39.934981Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.14611","last_updated":"2026-07-16T06:13:48Z","snapshot_observed_at":"2026-08-06T21:11:50.222025Z","submitted_at":"2026-07-16T06:13:48Z","title":"Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-02T01:38:39.934981Z"},"links":{"citing_paper":"/paper/2607.14611"},"observation_digest":"sha256:49393872d19a07648ee0b4daaa7e3acd8fdfb00443b7c05d834e81c6feffe66a","observation_id":"3fb7ef7f-f33b-4ccf-8ff7-46233ac65399","resolution":{"observed_at":"2026-08-02T01:38:39.934981Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T01:38:39.993250Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.14611","last_updated":"2026-07-16T06:13:48Z","snapshot_observed_at":"2026-08-06T21:11:50.222025Z","submitted_at":"2026-07-16T06:13:48Z","title":"Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-02T01:38:39.993250Z"},"links":{"citing_paper":"/paper/2607.14611"},"observation_digest":"sha256:e999b09735e14611b9fa94129b89813357944338c1b4952e4851e55f52773b1f","observation_id":"78f2ebc9-791b-4d12-8c92-465b0bd53a96","resolution":{"observed_at":"2026-08-02T01:38:39.993250Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T01:38:40.031138Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.14611","last_updated":"2026-07-16T06:13:48Z","snapshot_observed_at":"2026-08-06T21:11:50.222025Z","submitted_at":"2026-07-16T06:13:48Z","title":"Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-02T01:38:40.031138Z"},"links":{"citing_paper":"/paper/2607.14611"},"observation_digest":"sha256:7e70672a0e3dd5f33bc09137427cfa925a51106a974512af96d5959b20a83141","observation_id":"6bd6e3fe-71ff-4f05-b71b-3a6de9c9a32b","resolution":{"observed_at":"2026-08-02T01:38:40.031138Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T01:38:40.141656Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.14611","last_updated":"2026-07-16T06:13:48Z","snapshot_observed_at":"2026-08-06T21:11:50.222025Z","submitted_at":"2026-07-16T06:13:48Z","title":"Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-02T01:38:40.141656Z"},"links":{"citing_paper":"/paper/2607.14611"},"observation_digest":"sha256:bd25bb09cfac6cb8a31f26cdc1aa774e5cb2907efd3d95fa36eb087f361c0b48","observation_id":"9cb6e3ee-b8ef-4778-b0df-6e2c108ef6ed","resolution":{"observed_at":"2026-08-02T01:38:40.141656Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T01:38:40.196448Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.14611","last_updated":"2026-07-16T06:13:48Z","snapshot_observed_at":"2026-08-06T21:11:50.222025Z","submitted_at":"2026-07-16T06:13:48Z","title":"Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-02T01:38:40.196448Z"},"links":{"citing_paper":"/paper/2607.14611"},"observation_digest":"sha256:fa2ebe7ab25c123b1b44333bcb3105a5d832f1675c44e3b604d9d3c2c43f89d7","observation_id":"7a0187c3-a05b-4925-981a-82559cbe96e6","resolution":{"observed_at":"2026-08-02T01:38:40.196448Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2512.13564","last_updated":"2026-01-13T09:33:57Z","snapshot_observed_at":"2026-08-06T08:27:07.254588Z","submitted_at":"2025-12-15T17:22:34Z","title":"Memory in the Age of AI Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2512.13564","snapshot_observed_at":"2026-08-02T01:38:40.249137Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.14611","last_updated":"2026-07-16T06:13:48Z","snapshot_observed_at":"2026-08-06T21:11:50.222025Z","submitted_at":"2026-07-16T06:13:48Z","title":"Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-02T01:38:40.249137Z"},"links":{"cited_paper":"/paper/2512.13564","citing_paper":"/paper/2607.14611"},"observation_digest":"sha256:e5f9096468f84cb97e5b049599b727ce1efdfc4e1d3c06e8559c91bc4706e192","observation_id":"64b6b926-0297-46c1-8c3f-bf2c3b1b5851","resolution":{"observed_at":"2026-08-02T01:38:40.249137Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2306.05499","last_updated":"2025-12-29T02:25:27Z","snapshot_observed_at":"2026-07-06T15:40:27.639368Z","submitted_at":"2023-06-08T18:43:11Z","title":"Prompt Injection attack against LLM-integrated Applications","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.05499","snapshot_observed_at":"2026-08-02T01:38:40.355319Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.14611","last_updated":"2026-07-16T06:13:48Z","snapshot_observed_at":"2026-08-06T21:11:50.222025Z","submitted_at":"2026-07-16T06:13:48Z","title":"Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-02T01:38:40.355319Z"},"links":{"cited_paper":"/paper/2306.05499","citing_paper":"/paper/2607.14611"},"observation_digest":"sha256:76eec835714bc43641f568c5b32319e7d0c3c6c9cedc3e808905aeb83eb6fe98","observation_id":"dd55892d-e96b-478a-a10d-47dd95cb148e","resolution":{"observed_at":"2026-08-02T01:38:40.355319Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T01:38:40.454209Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.14611","last_updated":"2026-07-16T06:13:48Z","snapshot_observed_at":"2026-08-06T21:11:50.222025Z","submitted_at":"2026-07-16T06:13:48Z","title":"Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-02T01:38:40.454209Z"},"links":{"citing_paper":"/paper/2607.14611"},"observation_digest":"sha256:667782788a34e67d841665beb2778e7677f8d2715c63ba98200a1ce16a9796a2","observation_id":"f9580984-538d-4053-828c-d590a223bed8","resolution":{"observed_at":"2026-08-02T01:38:40.454209Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.21460","last_updated":"2025-03-27T12:50:17Z","snapshot_observed_at":"2026-07-06T20:59:35.694800Z","submitted_at":"2025-03-27T12:50:17Z","title":"Large Language Model Agent: A Survey on Methodology, Applications and Challenges","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.21460","snapshot_observed_at":"2026-08-02T01:38:40.521080Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.14611","last_updated":"2026-07-16T06:13:48Z","snapshot_observed_at":"2026-08-06T21:11:50.222025Z","submitted_at":"2026-07-16T06:13:48Z","title":"Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-02T01:38:40.521080Z"},"links":{"cited_paper":"/paper/2503.21460","citing_paper":"/paper/2607.14611"},"observation_digest":"sha256:108df925428673235055c95e5c40f091a5ed277f14b9acaa61f5349e9354af34","observation_id":"c847647a-97bd-4df9-9810-67857c7bc19b","resolution":{"observed_at":"2026-08-02T01:38:40.521080Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T01:38:40.607618Z","title":"Schulhoff, Jamie Hayes, Michael Ilie, Juliette Pluto, Shuang Song, Harsh Chaudhari, Ilia Shumailov, Abhradeep Thakurta, Kai Yuanqing Xiao, Andreas Terzis, and Florian Tramèr","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.14611","last_updated":"2026-07-16T06:13:48Z","snapshot_observed_at":"2026-08-06T21:11:50.222025Z","submitted_at":"2026-07-16T06:13:48Z","title":"Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-02T01:38:40.607618Z"},"links":{"citing_paper":"/paper/2607.14611"},"observation_digest":"sha256:f3d142383ea15e874c6c356e643d0a3142befd9a20d93f64ca285745d4453b04","observation_id":"26ea6e2f-17e2-457d-b3da-81739546947d","resolution":{"observed_at":"2026-08-02T01:38:40.607618Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T01:38:40.744238Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.14611","last_updated":"2026-07-16T06:13:48Z","snapshot_observed_at":"2026-08-06T21:11:50.222025Z","submitted_at":"2026-07-16T06:13:48Z","title":"Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-02T01:38:40.744238Z"},"links":{"citing_paper":"/paper/2607.14611"},"observation_digest":"sha256:4b7dd7fa65447055f9852ab0fc04b9cfb70455bb5027d5e6f52583e153cdf04b","observation_id":"3eec05e3-8e76-4479-8025-8e899a0f10d9","resolution":{"observed_at":"2026-08-02T01:38:40.744238Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T01:38:40.835040Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.14611","last_updated":"2026-07-16T06:13:48Z","snapshot_observed_at":"2026-08-06T21:11:50.222025Z","submitted_at":"2026-07-16T06:13:48Z","title":"Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-02T01:38:40.835040Z"},"links":{"citing_paper":"/paper/2607.14611"},"observation_digest":"sha256:af6ab26e989c58414bab6b55fd23409d478d5cc8479d30179bcf6a591ab76bdc","observation_id":"fcff7774-b5a8-49d9-b04a-6cead1e34586","resolution":{"observed_at":"2026-08-02T01:38:40.835040Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T01:38:40.907392Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.14611","last_updated":"2026-07-16T06:13:48Z","snapshot_observed_at":"2026-08-06T21:11:50.222025Z","submitted_at":"2026-07-16T06:13:48Z","title":"Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-02T01:38:40.907392Z"},"links":{"citing_paper":"/paper/2607.14611"},"observation_digest":"sha256:c3f5c8e860c113d1af3c0895f27ba9ec13e2aee7670dd8113d4ca78c6cc0852d","observation_id":"2735e0bb-93ae-45bb-900a-ac93cf5b03fc","resolution":{"observed_at":"2026-08-02T01:38:40.907392Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T01:38:40.970352Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.14611","last_updated":"2026-07-16T06:13:48Z","snapshot_observed_at":"2026-08-06T21:11:50.222025Z","submitted_at":"2026-07-16T06:13:48Z","title":"Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-02T01:38:40.970352Z"},"links":{"citing_paper":"/paper/2607.14611"},"observation_digest":"sha256:fa9511a5735857cd4e831dff02b9a18145d8b7177a71591c36d057a29178c325","observation_id":"1e803452-bf98-489e-a7aa-97b23d136df6","resolution":{"observed_at":"2026-08-02T01:38:40.970352Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2211.09527","last_updated":"2022-11-17T13:43:20Z","snapshot_observed_at":"2026-07-06T14:19:47.424778Z","submitted_at":"2022-11-17T13:43:20Z","title":"Ignore Previous Prompt: Attack Techniques For Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2211.09527","snapshot_observed_at":"2026-08-02T01:38:41.015466Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.14611","last_updated":"2026-07-16T06:13:48Z","snapshot_observed_at":"2026-08-06T21:11:50.222025Z","submitted_at":"2026-07-16T06:13:48Z","title":"Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-02T01:38:41.015466Z"},"links":{"cited_paper":"/paper/2211.09527","citing_paper":"/paper/2607.14611"},"observation_digest":"sha256:f444f2a54da8f20587846b1b7e47b6781055688162bfe3c43e95d3a5a1de0e34","observation_id":"066cb70d-db21-4d78-83ed-edb8ff68ac79","resolution":{"observed_at":"2026-08-02T01:38:41.015466Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T01:38:41.114927Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.14611","last_updated":"2026-07-16T06:13:48Z","snapshot_observed_at":"2026-08-06T21:11:50.222025Z","submitted_at":"2026-07-16T06:13:48Z","title":"Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-02T01:38:41.114927Z"},"links":{"citing_paper":"/paper/2607.14611"},"observation_digest":"sha256:d1ab5fcce6c6940b02b8dcc8910d83d996790297d351ec3fa33609726e2303d7","observation_id":"4a4adbae-600e-47b7-9586-8649e8a1717e","resolution":{"observed_at":"2026-08-02T01:38:41.114927Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2605.11418","last_updated":"2026-05-12T02:11:54Z","snapshot_observed_at":"2026-07-06T23:23:16.461539Z","submitted_at":"2026-05-12T02:11:54Z","title":"Under the Hood of SKILL.md: Semantic Supply-chain Attacks on AI Agent Skill Registry","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2605.11418","snapshot_observed_at":"2026-08-02T01:38:41.268672Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.14611","last_updated":"2026-07-16T06:13:48Z","snapshot_observed_at":"2026-08-06T21:11:50.222025Z","submitted_at":"2026-07-16T06:13:48Z","title":"Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-02T01:38:41.268672Z"},"links":{"cited_paper":"/paper/2605.11418","citing_paper":"/paper/2607.14611"},"observation_digest":"sha256:8712ffbfb2d3d36198a7d66555831c37a6877a43e8792610be5987717340303e","observation_id":"120890a6-00de-4eb5-b551-833ab6fbd565","resolution":{"observed_at":"2026-08-02T01:38:41.268672Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T01:38:41.358239Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.14611","last_updated":"2026-07-16T06:13:48Z","snapshot_observed_at":"2026-08-06T21:11:50.222025Z","submitted_at":"2026-07-16T06:13:48Z","title":"Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-02T01:38:41.358239Z"},"links":{"citing_paper":"/paper/2607.14611"},"observation_digest":"sha256:a743270fb44694c61d678c7c769b63e39ee6509980523c727871d9ecfc05068a","observation_id":"248f53ce-28ff-4691-ab9c-ff5177047dfe","resolution":{"observed_at":"2026-08-02T01:38:41.358239Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T01:38:41.437486Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.14611","last_updated":"2026-07-16T06:13:48Z","snapshot_observed_at":"2026-08-06T21:11:50.222025Z","submitted_at":"2026-07-16T06:13:48Z","title":"Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-02T01:38:41.437486Z"},"links":{"citing_paper":"/paper/2607.14611"},"observation_digest":"sha256:ef50ecdc8ba6b151194df841b7432d7af7cf503c4021e0352d2e37f71edc20ad","observation_id":"4679481d-b57b-4e5a-905f-e358d2ec715e","resolution":{"observed_at":"2026-08-02T01:38:41.437486Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T01:38:41.580691Z","title":"2025.OpenClaw: Your own personal AI assistant","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.14611","last_updated":"2026-07-16T06:13:48Z","snapshot_observed_at":"2026-08-06T21:11:50.222025Z","submitted_at":"2026-07-16T06:13:48Z","title":"Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-02T01:38:41.580691Z"},"links":{"citing_paper":"/paper/2607.14611"},"observation_digest":"sha256:0abde4406f5758e7adf601ac4a25bf5c0e1dd2c2347be28dc3cb66b065ab66ba","observation_id":"abd51365-523c-48a1-abe9-29d460eb10bc","resolution":{"observed_at":"2026-08-02T01:38:41.580691Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2604.20006","last_updated":"2026-04-21T21:31:01Z","snapshot_observed_at":"2026-07-06T23:06:31.110859Z","submitted_at":"2026-04-21T21:31:01Z","title":"From Recall to Forgetting: Benchmarking Long-Term Memory for Personalized Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.20006","snapshot_observed_at":"2026-08-02T01:38:41.621430Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.14611","last_updated":"2026-07-16T06:13:48Z","snapshot_observed_at":"2026-08-06T21:11:50.222025Z","submitted_at":"2026-07-16T06:13:48Z","title":"Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-02T01:38:41.621430Z"},"links":{"cited_paper":"/paper/2604.20006","citing_paper":"/paper/2607.14611"},"observation_digest":"sha256:1ea5f846cd4ca752a8a42821eb72d6601aecb60febf22ab96482c29f6e86842c","observation_id":"db277dd7-70f5-480d-938b-0c441fda82d1","resolution":{"observed_at":"2026-08-02T01:38:41.621430Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T01:38:41.708295Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.14611","last_updated":"2026-07-16T06:13:48Z","snapshot_observed_at":"2026-08-06T21:11:50.222025Z","submitted_at":"2026-07-16T06:13:48Z","title":"Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-02T01:38:41.708295Z"},"links":{"citing_paper":"/paper/2607.14611"},"observation_digest":"sha256:c84920a752cb1fac5b5cb0d4f57b75a84e20a7d3aabd1c777c04412b03842cba","observation_id":"26d71db8-b615-4e38-a6d2-2ba28dd7cc2c","resolution":{"observed_at":"2026-08-02T01:38:41.708295Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T01:38:41.834300Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.14611","last_updated":"2026-07-16T06:13:48Z","snapshot_observed_at":"2026-08-06T21:11:50.222025Z","submitted_at":"2026-07-16T06:13:48Z","title":"Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-02T01:38:41.834300Z"},"links":{"citing_paper":"/paper/2607.14611"},"observation_digest":"sha256:0a9ef64d8568177982896a6bba5934cbe503aec84741ea71e93707e59911a0a6","observation_id":"e26f733f-8ec2-4e2a-9324-a2c87c4d29d6","resolution":{"observed_at":"2026-08-02T01:38:41.834300Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2210.03629","last_updated":"2023-03-10T01:00:17Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2022-10-06T01:00:32Z","title":"ReAct: Synergizing Reasoning and Acting in Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2210.03629","snapshot_observed_at":"2026-08-02T01:38:41.970171Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.14611","last_updated":"2026-07-16T06:13:48Z","snapshot_observed_at":"2026-08-06T21:11:50.222025Z","submitted_at":"2026-07-16T06:13:48Z","title":"Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-02T01:38:41.970171Z"},"links":{"cited_paper":"/paper/2210.03629","citing_paper":"/paper/2607.14611"},"observation_digest":"sha256:180b64b729305fb97114198e8b80a403691291d0f2fa2a7831ae39157de7d49e","observation_id":"2bafec05-d8ec-4987-b00d-777246fdff5a","resolution":{"observed_at":"2026-08-02T01:38:41.970171Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T01:38:42.059223Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.14611","last_updated":"2026-07-16T06:13:48Z","snapshot_observed_at":"2026-08-06T21:11:50.222025Z","submitted_at":"2026-07-16T06:13:48Z","title":"Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-02T01:38:42.059223Z"},"links":{"citing_paper":"/paper/2607.14611"},"observation_digest":"sha256:4f6428dc7b4b9eccb192039173af5e79a5acbb870095de35865fec694069f4cc","observation_id":"d2186340-4102-428b-9b91-bf40d13d5d75","resolution":{"observed_at":"2026-08-02T01:38:42.059223Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2510.09023","last_updated":"2025-10-10T05:51:04Z","snapshot_observed_at":"2026-08-03T03:11:42.084785Z","submitted_at":"2025-10-10T05:51:04Z","title":"The Attacker Moves Second: Stronger Adaptive Attacks Bypass Defenses Against Llm Jailbreaks and Prompt Injections","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2510.09023","snapshot_observed_at":"2026-08-02T01:38:40.675882Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.14611","last_updated":"2026-07-16T06:13:48Z","snapshot_observed_at":"2026-08-06T21:11:50.222025Z","submitted_at":"2026-07-16T06:13:48Z","title":"Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems","version":1},"reference_index":2025,"source":"pdf_text","source_observed_at":"2026-08-02T01:38:40.675882Z"},"links":{"cited_paper":"/paper/2510.09023","citing_paper":"/paper/2607.14611"},"observation_digest":"sha256:9c9ddf7c35be72c8cf38c36206f5fae750f182e173ab99676266689b1a6acc37","observation_id":"bea4b5e2-8de0-43ac-87d5-07bc2f5d1ff0","resolution":{"observed_at":"2026-08-02T01:38:40.675882Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T01:38:39.812264Z","title":"A vailable at SSRN 6377518(2026)","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.14611","last_updated":"2026-07-16T06:13:48Z","snapshot_observed_at":"2026-08-06T21:11:50.222025Z","submitted_at":"2026-07-16T06:13:48Z","title":"Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems","version":1},"reference_index":2026,"source":"pdf_text","source_observed_at":"2026-08-02T01:38:39.812264Z"},"links":{"citing_paper":"/paper/2607.14611"},"observation_digest":"sha256:86538b93a76eef1fe20bbd3187aa9d0a788f7638b7ec10631493c8b8eae32fdd","observation_id":"dbd711fe-8c21-41f4-b20c-ab848d07c292","resolution":{"observed_at":"2026-08-02T01:38:39.812264Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T01:38:42.190666Z","title":"I'm not sure about X -- want me to check ?","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2607.14611","last_updated":"2026-07-16T06:13:48Z","snapshot_observed_at":"2026-08-06T21:11:50.222025Z","submitted_at":"2026-07-16T06:13:48Z","title":"Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems","version":1},"reference_index":3248,"source":"pdf_text","source_observed_at":"2026-08-02T01:38:42.190666Z"},"links":{"citing_paper":"/paper/2607.14611"},"observation_digest":"sha256:571f25ea757b749faf76f482fc447bd95d5605684ff486c9d9a5acbe4cca0e72","observation_id":"2cffee07-7596-421d-8724-c0b6a24f58a8","resolution":{"observed_at":"2026-08-02T01:38:42.190666Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2607.14611","last_updated":"2026-07-16T06:13:48Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-06T21:11:50.222025Z","submitted_at":"2026-07-16T06:13:48Z","title":"Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems"},"reference_resolution":{"displayed":34,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":34,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":34},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"thesis":"As of 11 August 2026, this Paper Citation Record lists 34 of 34 outbound references and 1 inbound Pith citation observation for arXiv:2607.14611."}