{"as_of":"2026-08-11T01:30:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:5d8828c6b800e81623a5d4191779cbedcfa4e7f8f7b3a058df2fc05896fe7359","coverage":[{"denominator":54,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":54,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-08T00:51:38.329320Z","state":"measured"},{"denominator":54,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":54,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-10T06:31:04.303077+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2608.04053/citation-record","integrity":"/paper/2608.04053/integrity","json":"/paper/2608.04053/citation-record.json","paper":"/paper/2608.04053"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:51:37.611450Z","title":"Proceedings of the 16th ACM workshop on artificial intelligence and security , pages=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-09T21:23:14.109940Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:37.611450Z"},"links":{"citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:8125bdd8cb60cd0d773dbcf626de3d5a72da5cc79b1563d71708aa1f7a10c14c","observation_id":"c1a08d5e-249b-4cee-ad4f-ef98be84eb49","resolution":{"observed_at":"2026-08-08T00:51:37.611450Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:51:37.618617Z","title":"arXiv preprint arXiv:2310.12815 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-09T21:23:14.109940Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:37.618617Z"},"links":{"citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:62286a9f8e7ac4b4a5dde1909e8c257eba46d07d8427b2397b61cb9a2f0b1f7b","observation_id":"4b3e5a4e-8767-40a4-bead-a944932a210a","resolution":{"observed_at":"2026-08-08T00:51:37.618617Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:51:37.623699Z","title":"Advances in Neural Information Processing Systems , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-09T21:23:14.109940Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:37.623699Z"},"links":{"citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:f8d47f1e830f1260be5ed6aa11b23b97d3016038fa453e72fd79349b71405a54","observation_id":"4a33352e-3d4f-4b9b-bb22-c841d0894878","resolution":{"observed_at":"2026-08-08T00:51:37.623699Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:51:39.431048Z","title":"2023 , publisher=","venue":null,"work_id":"df5eb10b-fac0-437f-a6fb-5167f9c9c80c","year":2023},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-09T21:23:14.109940Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:37.628827Z"},"links":{"citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:f878b96e1cfc2397416dd0dee1119edd024f3463002e540a8cced592cd7d0983","observation_id":"894a5520-b84a-4a30-bf27-6c2f65f1b38c","resolution":{"observed_at":"2026-08-08T00:51:39.436115Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:51:39.415581Z","title":"1979 , publisher=","venue":null,"work_id":"c92373d8-3561-4731-b409-901e4ce8162d","year":1979},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-09T21:23:14.109940Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:37.633813Z"},"links":{"citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:388d505238e0f9096c738cc3a3d35d0e932563a572435f034be760370b624798","observation_id":"3ef074bc-3fe7-4a43-add8-35ec6955cdb2","resolution":{"observed_at":"2026-08-08T00:51:39.420351Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:51:39.400309Z","title":"Cognitive linguistics: Basic readings , volume=","venue":null,"work_id":"69991d64-eecb-4df3-957d-d32b43657e35","year":null},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-09T21:23:14.109940Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:37.639319Z"},"links":{"citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:ac7271c6f4296a8fd5b10915b5fe1dd4591efd2feb9131f2a6f42de2eff78068","observation_id":"b46715fa-f411-41d6-a177-5aa962735f43","resolution":{"observed_at":"2026-08-08T00:51:39.405248Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:51:37.645030Z","title":"COLING 1998 Volume 1: The 17th International Conference on Computational Linguistics , year=","venue":null,"work_id":null,"year":1998},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-09T21:23:14.109940Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:37.645030Z"},"links":{"citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:2fef4f978e9be367dae2b48c9e296822a7bc2bd4594a19bdc82ba68029e487b6","observation_id":"b9cfb268-5d55-4867-8b14-5b8a6a8b73c6","resolution":{"observed_at":"2026-08-08T00:51:37.645030Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:51:39.374500Z","title":"Computational linguistics , volume=","venue":null,"work_id":"a5fe3cd1-b4d3-49cb-9ef3-b91f04b1edd8","year":null},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-09T21:23:14.109940Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:37.649931Z"},"links":{"citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:a522f32770aa2b3206952981da34e2b7b9148dcffa3e1bc72a2dc1cce378d077","observation_id":"bebb1eac-4183-4026-bf4d-d01a51e09ff7","resolution":{"observed_at":"2026-08-08T00:51:39.378992Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:51:37.654893Z","title":"arXiv preprint arXiv:2602.10453 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-09T21:23:14.109940Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:37.654893Z"},"links":{"citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:838a244aae5699cf2769c25b39d36701cb3d0b66d1a02e1232a9264d0526925c","observation_id":"32d5cf6b-aad8-48ca-818c-6829c5ee5222","resolution":{"observed_at":"2026-08-08T00:51:37.654893Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2605.03378","last_updated":"2026-07-08T15:04:28Z","snapshot_observed_at":"2026-08-02T02:34:38.609069Z","submitted_at":"2026-05-05T05:37:00Z","title":"ARGUS: Defending LLM Agents Against Context-Aware Prompt Injection","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2605.03378","snapshot_observed_at":"2026-08-08T00:51:37.660174Z","title":"arXiv preprint arXiv:2605.03378 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-09T21:23:14.109940Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:37.660174Z"},"links":{"cited_paper":"/paper/2605.03378","citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:c90b5c27e5e586bd55b74e3544c5c4d62d904ee337f1e665a3f02edf674f8a9c","observation_id":"2935a0e6-4709-47d7-ac0d-161fbe26b8ba","resolution":{"observed_at":"2026-08-08T00:51:37.660174Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2605.17324","last_updated":"2026-05-17T08:30:45Z","snapshot_observed_at":"2026-08-03T01:56:42.822957Z","submitted_at":"2026-05-17T08:30:45Z","title":"ASPI: Seeking Ambiguity Clarification Amplifies Prompt Injection Vulnerability in LLM Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2605.17324","snapshot_observed_at":"2026-08-08T00:51:37.665028Z","title":"arXiv preprint arXiv:2605.17324 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-09T21:23:14.109940Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:37.665028Z"},"links":{"cited_paper":"/paper/2605.17324","citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:f3df8eff0bd67c41eaccf9d60020204699c7f0328d06b213272649d213754946","observation_id":"02e19852-729f-42ad-a1c0-138a9dfdb0c2","resolution":{"observed_at":"2026-08-08T00:51:37.665028Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2605.17634","last_updated":"2026-05-17T19:55:39Z","snapshot_observed_at":"2026-08-06T17:10:02.723847Z","submitted_at":"2026-05-17T19:55:39Z","title":"AI Agents May Always Fall for Prompt Injections","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2605.17634","snapshot_observed_at":"2026-08-08T00:51:37.670066Z","title":"arXiv preprint arXiv:2605.17634 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-09T21:23:14.109940Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:37.670066Z"},"links":{"cited_paper":"/paper/2605.17634","citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:b6a7983b6658e43b968507866b36f6815f33b82bbd1b2e7e2b1a244822959f25","observation_id":"582e3146-39d0-4b06-af94-7e80afb8b2a0","resolution":{"observed_at":"2026-08-08T00:51:37.670066Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:51:37.674984Z","title":"arXiv preprint arXiv:2603.30016 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-09T21:23:14.109940Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:37.674984Z"},"links":{"citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:7eb8b7c2fdd8a613c2f5aefd878f8f225d1cde30f83fb71a49502bf63b0effed","observation_id":"86b0b2d8-f69e-4851-a12c-107eefb184e2","resolution":{"observed_at":"2026-08-08T00:51:37.674984Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:51:39.358905Z","title":", author=","venue":null,"work_id":"d700d372-f731-42c0-9809-db4bc76fbc44","year":null},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-09T21:23:14.109940Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:37.679629Z"},"links":{"citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:316819359038a0bd6b79a27436b2ffb1d827e2dfecb5cf75f4ade27a3b9f65d4","observation_id":"9abd683a-bc0e-48f3-af5b-0bb035571ee9","resolution":{"observed_at":"2026-08-08T00:51:39.363301Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:51:39.345124Z","title":"Cell , volume=","venue":null,"work_id":"f3e28de2-9ffb-4442-b79c-562360df2f21","year":1994},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-09T21:23:14.109940Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:37.684136Z"},"links":{"citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:510bc1986f89a11b45c9a1b137bf5ab74944c3b79314ef8f7324db3c9fcdbeeb","observation_id":"b85dc81d-2db4-48bb-92ec-ce2dddc8df8e","resolution":{"observed_at":"2026-08-08T00:51:39.349172Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:51:39.330839Z","title":"Nature reviews immunology , volume=","venue":null,"work_id":"6f88226b-c2c5-42dd-a3f0-bfc171583b46","year":2011},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-09T21:23:14.109940Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:37.689168Z"},"links":{"citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:b8c4c0ed0e72479438e6fd9407f39442fea3d1f1d804221122f4deef09e941d9","observation_id":"8eb58d32-700f-4758-b7d0-653f4efa27b6","resolution":{"observed_at":"2026-08-08T00:51:39.335327Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:51:39.315292Z","title":"2001 , publisher=","venue":null,"work_id":"76e21b13-d239-43fc-ab3e-6578e666f03d","year":2001},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-09T21:23:14.109940Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:37.694125Z"},"links":{"citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:28a6179525121580c336a50553bbabcd3ec3b139d724a6642412e86872be69b4","observation_id":"93ed84d7-e1b0-4428-a70f-da95f3a15af0","resolution":{"observed_at":"2026-08-08T00:51:39.320383Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:51:39.299809Z","title":"Nature Reviews Immunology , volume=","venue":null,"work_id":"41868c9c-ef7e-42e4-aa25-a070856b0d7c","year":2008},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-09T21:23:14.109940Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:37.699963Z"},"links":{"citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:c28bc1958e286105604afe62246f9b4859baab579e66e4a32674952df05d0043","observation_id":"e0428a09-a03b-435b-87af-50972660de2b","resolution":{"observed_at":"2026-08-08T00:51:39.304673Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.14720","last_updated":"2024-03-20T15:26:23Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-03-20T15:26:23Z","title":"Defending Against Indirect Prompt Injection Attacks With Spotlighting","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.14720","snapshot_observed_at":"2026-08-08T00:51:37.714887Z","title":"arXiv preprint arXiv:2403.14720 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-09T21:23:14.109940Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:37.714887Z"},"links":{"cited_paper":"/paper/2403.14720","citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:0f497b451fc35052917cfe54c8f43d37a119b7c020de8eb35d06cec9e9c5e3c2","observation_id":"8f6729bc-3625-4fe7-84a9-d66ff10787f5","resolution":{"observed_at":"2026-08-08T00:51:37.714887Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:51:37.746562Z","title":"Proceedings of the 31st ACM SIGKDD Conference on Knowledge Discovery and Data Mining V","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-09T21:23:14.109940Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:37.746562Z"},"links":{"citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:521836dae9846e7f3f2d9d2b474a1faebbf17d0bef8ea226ed3abd8875e98ccf","observation_id":"05ef34a5-fffb-4543-b307-4316c00ad664","resolution":{"observed_at":"2026-08-08T00:51:37.746562Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:51:37.762332Z","title":"Findings of the Association for Computational Linguistics: ACL 2024 , pages=","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-09T21:23:14.109940Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:37.762332Z"},"links":{"citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:201f05d2a350d4e6862044862f4b6502f7c6c6c7655de0b14ef3e5a8b6d7d29b","observation_id":"2ab931c8-f5a7-4ca2-beb5-a3a741613666","resolution":{"observed_at":"2026-08-08T00:51:37.762332Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:51:37.794068Z","title":"International Conference on Learning Representations , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-09T21:23:14.109940Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:37.794068Z"},"links":{"citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:534eee3ec8d1b5263e9e8997966952583ed66abd18ccc0efb8dbff269c52e197","observation_id":"d490315a-054e-4ab1-80b7-94ea57bc0c30","resolution":{"observed_at":"2026-08-08T00:51:37.794068Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.13208","last_updated":"2024-04-19T22:55:23Z","snapshot_observed_at":"2026-08-10T04:45:11.275468Z","submitted_at":"2024-04-19T22:55:23Z","title":"The Instruction Hierarchy: Training LLMs to Prioritize Privileged Instructions","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.13208","snapshot_observed_at":"2026-08-08T00:51:37.823908Z","title":"arXiv preprint arXiv:2404.13208 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-09T21:23:14.109940Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:37.823908Z"},"links":{"cited_paper":"/paper/2404.13208","citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:e13a6775cc0e98b0a82113de4127a97a3cdbddb9a920b7eb6c9e7225cb8e1a06","observation_id":"34495cd4-29c6-4709-acd9-f46dac887518","resolution":{"observed_at":"2026-08-08T00:51:37.823908Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:51:37.871613Z","title":"34th USENIX Security Symposium (USENIX Security 25) , pages=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-09T21:23:14.109940Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:37.871613Z"},"links":{"citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:81b04c7e13811e50c650d2c46bb105159b87115395de3d65b1b7fe774b66b586","observation_id":"3dd1deef-7ff8-441c-802c-a9ed2d99f1ef","resolution":{"observed_at":"2026-08-08T00:51:37.871613Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05451","last_updated":"2025-07-03T05:45:41Z","snapshot_observed_at":"2026-08-09T06:23:57.503977Z","submitted_at":"2024-10-07T19:34:35Z","title":"SecAlign: Defending Against Prompt Injection with Preference Optimization","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.05451","snapshot_observed_at":"2026-08-08T00:51:37.929904Z","title":"arXiv preprint arXiv:2410.05451 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-09T21:23:14.109940Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:37.929904Z"},"links":{"cited_paper":"/paper/2410.05451","citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:b211d634f9486bdd7fe8d574c1243a49fe0055562d7c02ca44f150bf8832994c","observation_id":"7b9fdc99-be04-4fb2-98ee-3af458b5eefb","resolution":{"observed_at":"2026-08-08T00:51:37.929904Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:51:37.952670Z","title":"Proceedings of the 63rd Annual Meeting of the Association for Computational Linguistics (Volume 1: Long Papers) , pages=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-09T21:23:14.109940Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:37.952670Z"},"links":{"citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:ae94142be1c4fc2c83c315bad9cc76f1200c39115983e8e9aae687b02a945e3c","observation_id":"fe5ebd86-a78f-40d2-beba-35329adb2d5b","resolution":{"observed_at":"2026-08-08T00:51:37.952670Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:51:37.957326Z","title":"arXiv preprint arXiv:2505.06311 , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-09T21:23:14.109940Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:37.957326Z"},"links":{"citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:58e821cdaf288892d2a75c694a4cdee89d2ceadaa934188a2e6d675112881196","observation_id":"c7703e69-d818-4e43-a4a9-604291d154d5","resolution":{"observed_at":"2026-08-08T00:51:37.957326Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:51:37.961322Z","title":"Proceedings of the 63rd Annual Meeting of the Association for Computational Linguistics (Volume 1: Long Papers) , pages=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-09T21:23:14.109940Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:37.961322Z"},"links":{"citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:985c720afbc6ff4950dadcda0cd396ff43cc301e556e06b3454bf6f3203cc76f","observation_id":"07e53576-f1ec-4bab-983c-a3c25b1a8750","resolution":{"observed_at":"2026-08-08T00:51:37.961322Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.18813","last_updated":"2025-06-24T08:05:33Z","snapshot_observed_at":"2026-08-07T19:59:01.081751Z","submitted_at":"2025-03-24T15:54:10Z","title":"Defeating Prompt Injections by Design","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.18813","snapshot_observed_at":"2026-08-08T00:51:37.965215Z","title":"arXiv preprint arXiv:2503.18813 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-09T21:23:14.109940Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:37.965215Z"},"links":{"cited_paper":"/paper/2503.18813","citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:2016fb8578a049eb153cbe3dfa899cc570ff81bf2e74f7758e91c7430645fa04","observation_id":"7ced01fd-a73c-45fa-a69a-2c8e1cc9b532","resolution":{"observed_at":"2026-08-08T00:51:37.965215Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:51:39.223007Z","title":"Proceedings of the 2025 Conference on Empirical Methods in Natural Language Processing , pages=","venue":null,"work_id":"95ca8543-2365-4875-8d78-37eb109a51fd","year":2025},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-09T21:23:14.109940Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:37.969782Z"},"links":{"citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:228205ff44476ef486f3999da274331d72dee4c8a13f53fa22547a76919b2086","observation_id":"d18945b4-3c30-4fa8-810d-b79398f3b125","resolution":{"observed_at":"2026-08-08T00:51:39.228097Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2603.10749","last_updated":"2026-06-10T06:18:26Z","snapshot_observed_at":"2026-07-14T23:21:58.266403Z","submitted_at":"2026-03-11T13:23:46Z","title":"AttriGuard: Defeating Indirect Prompt Injection in LLM Agents via Causal Attribution of Tool Invocations","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2603.10749","snapshot_observed_at":"2026-08-08T00:51:37.974114Z","title":"arXiv preprint arXiv:2603.10749 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-09T21:23:14.109940Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:37.974114Z"},"links":{"cited_paper":"/paper/2603.10749","citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:1f8bff9dee2825644de3be323b1be5ff2be648b7f92ea7b8598d5defbdf4db93","observation_id":"c62ddffa-b695-436b-8500-4d0a5c4801f0","resolution":{"observed_at":"2026-08-08T00:51:37.974114Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2605.15030","last_updated":"2026-05-14T16:26:27Z","snapshot_observed_at":"2026-07-06T23:26:23.179482Z","submitted_at":"2026-05-14T16:26:27Z","title":"WARD: Adversarially Robust Defense of Web Agents Against Prompt Injections","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2605.15030","snapshot_observed_at":"2026-08-08T00:51:37.981307Z","title":"arXiv preprint arXiv:2605.15030 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-09T21:23:14.109940Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:37.981307Z"},"links":{"cited_paper":"/paper/2605.15030","citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:14ad3c2dcd01142e363fdb65b94e34e62a74f4659cc69128d2e1c9f52374b70a","observation_id":"72c96f92-8b1e-4040-9215-c8648d3e6ac7","resolution":{"observed_at":"2026-08-08T00:51:37.981307Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:51:39.207256Z","title":"Advances in Neural Information Processing Systems , volume=","venue":null,"work_id":"0636de77-b0c6-4bd6-a0d1-5922641df955","year":null},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-09T21:23:14.109940Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:37.986131Z"},"links":{"citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:12a61a10949d2fcd0139b3dc39d005f18634ea42c7763fcc1ba51e5ca7a55570","observation_id":"da74870d-1909-42ba-9000-6df2350b0490","resolution":{"observed_at":"2026-08-08T00:51:39.212162Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:51:37.991251Z","title":"Advances in neural information processing systems , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-09T21:23:14.109940Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:37.991251Z"},"links":{"citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:8f6fa34663f981a7dd8deccab9e555d38847fb637a4b481bc23cf934152c3c7e","observation_id":"745b462d-90cc-44a6-a4a4-5265e703c768","resolution":{"observed_at":"2026-08-08T00:51:37.991251Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:51:37.995595Z","title":"Proceedings of the AAAI Conference on Artificial Intelligence , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-09T21:23:14.109940Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:37.995595Z"},"links":{"citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:3cd94301ee6bcbb92c7576ab66138c1d89db10816b211f21d945f252cfe7ad20","observation_id":"f6661a60-8c88-4ec3-8beb-ddacbe04c9ed","resolution":{"observed_at":"2026-08-08T00:51:37.995595Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2607.14611","last_updated":"2026-07-16T06:13:48Z","snapshot_observed_at":"2026-08-06T21:11:50.222025Z","submitted_at":"2026-07-16T06:13:48Z","title":"Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems","version":1},"cited_work":{"arxiv_id":"2607.14611","doi":null,"metadata_source":"pith","pith_arxiv_id":"2607.14611","snapshot_observed_at":"2026-08-08T00:51:38.474275Z","title":"Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems","venue":"cs.CR","work_id":"e4839d66-2c69-40a7-9444-52d18c54d5e7","year":2026},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-09T21:23:14.109940Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:38.000729Z"},"links":{"cited_paper":"/paper/2607.14611","citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:69e50b5880471e99f83850bac49c8c13329f8bab2bfdb226b75a7432b017d22d","observation_id":"d801fd05-9d4b-4757-9fb9-54ceb9d0c655","resolution":{"observed_at":"2026-08-08T00:51:38.479075Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2606.04329","last_updated":"2026-06-18T22:06:23Z","snapshot_observed_at":"2026-08-04T07:47:41.111384Z","submitted_at":"2026-06-03T01:04:13Z","title":"From Untrusted Input to Trusted Memory: A Systematic Study of Memory Poisoning Attacks in LLM Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2606.04329","snapshot_observed_at":"2026-08-08T00:51:38.005637Z","title":"arXiv preprint arXiv:2606.04329 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-09T21:23:14.109940Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:38.005637Z"},"links":{"cited_paper":"/paper/2606.04329","citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:39c34505fa1fee11483065ac86226e8fe04964a1a841c6d9961af0b9e75ffb56","observation_id":"6505e6ed-eef8-45a3-b4bb-c3f57943ffa5","resolution":{"observed_at":"2026-08-08T00:51:38.005637Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:51:39.172083Z","title":"Proceedings of 1994 IEEE computer society symposium on research in security and privacy , pages=","venue":null,"work_id":"e281037e-331d-4a60-a339-e0b4c6b45d9e","year":1994},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-09T21:23:14.109940Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":38,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:38.010644Z"},"links":{"citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:a44119b286eaedbc8aa5c037c6365e5106973d7926c09be084079b8e8aacf9ce","observation_id":"6eb49d64-cb4a-4920-a90d-566119b9c18b","resolution":{"observed_at":"2026-08-08T00:51:39.176703Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:51:39.157351Z","title":"Evolutionary computation , volume=","venue":null,"work_id":"eacc6343-9f95-4056-b057-16333b0f1807","year":2000},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-09T21:23:14.109940Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":39,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:38.015616Z"},"links":{"citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:0ae0ed24f6d7b5e8987bd720b3b2d9054554c0cfdc7c4f132b8c7a4a5e73bb5f","observation_id":"6f94bf15-a2e0-42e6-b075-815c48bc36a3","resolution":{"observed_at":"2026-08-08T00:51:39.162009Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2605.19328","last_updated":"2026-05-19T04:07:24Z","snapshot_observed_at":"2026-08-03T19:21:56.538777Z","submitted_at":"2026-05-19T04:07:24Z","title":"RoboJailBench: Benchmarking Adversarial Attacks and Defenses in Embodied Robotic Agents","version":1},"cited_work":{"arxiv_id":"2605.19328","doi":null,"metadata_source":"pith","pith_arxiv_id":"2605.19328","snapshot_observed_at":"2026-08-08T00:51:38.414689Z","title":"RoboJailBench: Benchmarking Adversarial Attacks and Defenses in Embodied Robotic Agents","venue":"cs.CR","work_id":"7f6f89c4-5394-49b8-a31d-18f6651dfd98","year":2026},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-09T21:23:14.109940Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":40,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:38.020287Z"},"links":{"cited_paper":"/paper/2605.19328","citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:cff670fa2139088ef359cccc4ebb79a45bc0f8b74d8f4e7093fe69670ac1b390","observation_id":"1cc48d7f-9be4-4d5a-9766-a4c34725e738","resolution":{"observed_at":"2026-08-08T00:51:38.424397Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:51:39.139430Z","title":"Advances in Neural Information Processing Systems , volume=","venue":null,"work_id":"fd59cc6c-a62c-497f-b1ff-f4119bf5051e","year":null},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-09T21:23:14.109940Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":41,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:38.025114Z"},"links":{"citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:7b4faca114ad9950bc8a0220695c1129e0b2fb633be4412c40ca44f7a711b5d3","observation_id":"382f9ef6-aeb8-4c3b-a806-a261aa8a7b1e","resolution":{"observed_at":"2026-08-08T00:51:39.144246Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2502.05174","last_updated":"2025-06-10T18:13:09Z","snapshot_observed_at":"2026-08-08T19:58:38.598603Z","submitted_at":"2025-02-07T18:57:49Z","title":"MELON: Provable Defense Against Indirect Prompt Injection Attacks in AI Agents","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.05174","snapshot_observed_at":"2026-08-08T00:51:38.030612Z","title":"arXiv preprint arXiv:2502.05174 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-09T21:23:14.109940Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":42,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:38.030612Z"},"links":{"cited_paper":"/paper/2502.05174","citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:5d7f82163b123b8347e9e1867f65b925fc327bea6340abfd6d62a78b8af1d9a3","observation_id":"7de49ffb-9ea8-48b1-bdce-4bda27c3e421","resolution":{"observed_at":"2026-08-08T00:51:38.030612Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2602.03117","last_updated":"2026-05-07T07:42:14Z","snapshot_observed_at":"2026-07-06T22:44:18.875334Z","submitted_at":"2026-02-03T05:20:42Z","title":"AgentDyn: Are Your Agent Security Defenses Deployable in Real-World Dynamic Environments?","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2602.03117","snapshot_observed_at":"2026-08-08T00:51:38.035754Z","title":"arXiv preprint arXiv:2602.03117 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-09T21:23:14.109940Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":43,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:38.035754Z"},"links":{"cited_paper":"/paper/2602.03117","citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:6ec930db98dc2ee9187f4852d36aa12308982bd57103744f5ee9da830debc7d3","observation_id":"8fbc69ab-959d-4f68-824b-0e6139c66aa5","resolution":{"observed_at":"2026-08-08T00:51:38.035754Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:51:39.124273Z","title":"Advances in Neural Information Processing Systems , volume=","venue":null,"work_id":"f4f7278e-5a42-466e-8500-788163b94650","year":null},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-09T21:23:14.109940Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":44,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:38.040635Z"},"links":{"citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:72f1bde726c1869f321e2d3ada567d72187b6e0157f81baa112109cfe2493545","observation_id":"14e5b9cc-5cd1-4520-9590-2338957aec5c","resolution":{"observed_at":"2026-08-08T00:51:39.129160Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:51:39.108521Z","title":"Proceedings of the 2025 Conference on Empirical Methods in Natural Language Processing , pages=","venue":null,"work_id":"361d2da7-dc49-43a8-8d08-305078e06036","year":2025},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-09T21:23:14.109940Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":45,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:38.045364Z"},"links":{"citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:ec65b1972435616dc0737a85cdbf37cef7e64d8aefc4314b33f803d783e7e37d","observation_id":"a5c53926-f165-4fa2-a303-7d23b127f2d5","resolution":{"observed_at":"2026-08-08T00:51:39.113483Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:51:39.093039Z","title":"Advances in Neural Information Processing Systems , volume=","venue":null,"work_id":"7fb0c4b5-25af-4e78-b834-99aacb981012","year":null},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-09T21:23:14.109940Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":46,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:38.050277Z"},"links":{"citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:3c1f7c9138a41f15dd3553116274dde3db3103e8c6fe167827f7af21dee4e6bf","observation_id":"a1b4839f-e8eb-4914-bf98-8cae6d7c3b45","resolution":{"observed_at":"2026-08-08T00:51:39.097842Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1909.12434","last_updated":"2020-02-14T22:32:46Z","snapshot_observed_at":"2026-07-06T08:25:01.425019Z","submitted_at":"2019-09-26T23:25:25Z","title":"Learning the Difference that Makes a Difference with Counterfactually-Augmented Data","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1909.12434","snapshot_observed_at":"2026-08-08T00:51:38.137037Z","title":"arXiv preprint arXiv:1909.12434 , year=","venue":null,"work_id":null,"year":1909},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-09T21:23:14.109940Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":47,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:38.137037Z"},"links":{"cited_paper":"/paper/1909.12434","citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:100741de3f930adb4ab395f78498106a52c7a74c9efb3143ead2ab71d5f53466","observation_id":"8f650b8c-8254-4e30-aa96-52f647d32886","resolution":{"observed_at":"2026-08-08T00:51:38.137037Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:51:39.077607Z","title":"Nature Reviews Immunology , volume=","venue":null,"work_id":"6282c535-36f1-4da6-ba81-fea720ae0fe4","year":2024},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-09T21:23:14.109940Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":48,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:38.244604Z"},"links":{"citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:4012723930d51bb805c2ae2b5beb20ccccfc64ac7c6377c44a3ca3720849a878","observation_id":"4735b575-dc32-433f-8dcd-65651b913ca9","resolution":{"observed_at":"2026-08-08T00:51:39.082495Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:51:38.294260Z","title":"Advances in Neural Information Processing Systems , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-09T21:23:14.109940Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":49,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:38.294260Z"},"links":{"citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:3e4ba28ef17722cae73f06c6fd25270e4364be7e2cba032e30f99f7640e40d09","observation_id":"d759868f-e9fa-423f-8039-7221a047f22a","resolution":{"observed_at":"2026-08-08T00:51:38.294260Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:51:38.299467Z","title":"Advances in Neural Information Processing Systems , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-09T21:23:14.109940Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":50,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:38.299467Z"},"links":{"citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:e1c4e3a488becdd39b0d4ba882e2fcc8bf12022a48d6e0d06866575a8bfb04ff","observation_id":"f3bd20f7-47c5-4345-a8b5-8e8f935fef14","resolution":{"observed_at":"2026-08-08T00:51:38.299467Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:51:38.308366Z","title":"Advances in Neural Information Processing Systems , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-09T21:23:14.109940Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":51,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:38.308366Z"},"links":{"citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:26e235302e63d527f082e9af1ad05298d77ce865af51eb0b7e5cbe187e2faba7","observation_id":"8d8d6198-e465-40d9-948e-6fa5a235305d","resolution":{"observed_at":"2026-08-08T00:51:38.308366Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:51:38.315243Z","title":"Advances in neural information processing systems , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-09T21:23:14.109940Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":52,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:38.315243Z"},"links":{"citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:4a9c4ed0994c88c32c1ad0343206be5628c300990b8e641d096937b60e490430","observation_id":"8eb8cb3e-7a6c-42bc-a75e-7e87d569ae52","resolution":{"observed_at":"2026-08-08T00:51:38.315243Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:51:39.023400Z","title":"Advances in Neural Information Processing Systems , volume=","venue":null,"work_id":"cc513b7e-8bff-44cc-bd7a-bf7494136488","year":null},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-09T21:23:14.109940Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":53,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:38.322578Z"},"links":{"citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:a26d17197615b626532ff9c7f927cbba2e341065a02d9fa6cb1dc87b47e3519d","observation_id":"b45d935c-d224-4154-99d4-6233b2190184","resolution":{"observed_at":"2026-08-08T00:51:39.027749Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:51:38.329320Z","title":"2026 , howpublished=","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-09T21:23:14.109940Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":54,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:38.329320Z"},"links":{"citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:4e82b8f54189b84b9b523001a6dde00fcc35119e61562b26f122b17731c5de63","observation_id":"fffbdab5-ae42-47be-9db3-0b826bd61072","resolution":{"observed_at":"2026-08-08T00:51:38.329320Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-09T21:23:14.109940Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection"},"reference_resolution":{"displayed":54,"state_counts":{"malformed_identifier":0,"metadata_mismatch":2,"parse_uncertain":0,"unresolved":33,"verified_exact":0,"verified_fuzzy":19},"total_outbound_references":54},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"thesis":"As of 11 August 2026, this Paper Citation Record lists 54 of 54 outbound references and 0 inbound Pith citation observations for arXiv:2608.04053."}