{"as_of":"2026-08-09T23:30:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:cddb45209019460da04a9c9551f9ea3be38f8df472b6d52d739167c33e41f352","coverage":[{"denominator":49,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":49,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-08T13:19:01.993333Z","state":"measured"},{"denominator":49,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":49,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2608.05430/citation-record","integrity":"/paper/2608.05430/integrity","json":"/paper/2608.05430/citation-record.json","paper":"/paper/2608.05430"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T13:19:02.973710Z","title":null,"venue":null,"work_id":"1c744188-515c-40d1-b1a4-eafbe03cb9c0","year":2025},"citing_paper":{"arxiv_id":"2608.05430","last_updated":"2026-08-05T21:44:44Z","snapshot_observed_at":"2026-08-09T23:10:49.394955Z","submitted_at":"2026-08-05T21:44:44Z","title":"Robust Context-Aware Detection of Malicious Instructions in Text","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-08T13:19:01.768672Z"},"links":{"citing_paper":"/paper/2608.05430"},"observation_digest":"sha256:55378c5ec09f759392be3d1afe06b29b1af2cb9326c5ec31e212b576b0a1a46a","observation_id":"00b45416-3be4-42ac-a9a6-334b88df35b8","resolution":{"observed_at":"2026-08-08T13:19:02.978132Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T13:19:02.959251Z","title":null,"venue":null,"work_id":"3f7296e6-c212-4e22-b83a-8b8c71bcf2dc","year":2026},"citing_paper":{"arxiv_id":"2608.05430","last_updated":"2026-08-05T21:44:44Z","snapshot_observed_at":"2026-08-09T23:10:49.394955Z","submitted_at":"2026-08-05T21:44:44Z","title":"Robust Context-Aware Detection of Malicious Instructions in Text","version":1},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-08T13:19:01.775363Z"},"links":{"citing_paper":"/paper/2608.05430"},"observation_digest":"sha256:6f3fb380f6d4439e848ce5cef253bb3abad381361e0e084bde4d172f7844a946","observation_id":"5a3c36ee-9235-4b33-b596-22f90349d76d","resolution":{"observed_at":"2026-08-08T13:19:02.963903Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2308.14132","last_updated":"2023-11-07T03:30:15Z","snapshot_observed_at":"2026-07-06T16:10:54.723336Z","submitted_at":"2023-08-27T15:20:06Z","title":"Detecting Language Model Attacks with Perplexity","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.14132","snapshot_observed_at":"2026-08-08T13:19:01.780365Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.05430","last_updated":"2026-08-05T21:44:44Z","snapshot_observed_at":"2026-08-09T23:10:49.394955Z","submitted_at":"2026-08-05T21:44:44Z","title":"Robust Context-Aware Detection of Malicious Instructions in Text","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-08T13:19:01.780365Z"},"links":{"cited_paper":"/paper/2308.14132","citing_paper":"/paper/2608.05430"},"observation_digest":"sha256:dfdbc5c9c1e06ab12b37e19fe7da18ccea721398a072411092a6c949463e572b","observation_id":"cceb3e4a-e04f-4c48-9184-72671f8595a9","resolution":{"observed_at":"2026-08-08T13:19:01.780365Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T13:19:02.944391Z","title":null,"venue":null,"work_id":"e8e1d67d-c1f0-4d17-8f05-2f8c89fd7289","year":2018},"citing_paper":{"arxiv_id":"2608.05430","last_updated":"2026-08-05T21:44:44Z","snapshot_observed_at":"2026-08-09T23:10:49.394955Z","submitted_at":"2026-08-05T21:44:44Z","title":"Robust Context-Aware Detection of Malicious Instructions in Text","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-08T13:19:01.785554Z"},"links":{"citing_paper":"/paper/2608.05430"},"observation_digest":"sha256:0f4ff14bc83bcaacd0ca830525929b9b15eb8834bd381e79d63af1aafd60fed0","observation_id":"1db4460f-7d61-44af-9b99-2c7c77c3b8d1","resolution":{"observed_at":"2026-08-08T13:19:02.949084Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2503.18813","last_updated":"2025-06-24T08:05:33Z","snapshot_observed_at":"2026-08-07T19:59:01.081751Z","submitted_at":"2025-03-24T15:54:10Z","title":"Defeating Prompt Injections by Design","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.18813","snapshot_observed_at":"2026-08-08T13:19:01.790313Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.05430","last_updated":"2026-08-05T21:44:44Z","snapshot_observed_at":"2026-08-09T23:10:49.394955Z","submitted_at":"2026-08-05T21:44:44Z","title":"Robust Context-Aware Detection of Malicious Instructions in Text","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-08T13:19:01.790313Z"},"links":{"cited_paper":"/paper/2503.18813","citing_paper":"/paper/2608.05430"},"observation_digest":"sha256:3737eef7daed11f585b8aab6885c19ed6d728da1ba3273469e17d320153b3540","observation_id":"fbeb19d2-509b-40a2-adfe-362820628e56","resolution":{"observed_at":"2026-08-08T13:19:01.790313Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T13:19:02.930252Z","title":null,"venue":null,"work_id":"b218e8ff-1209-43f0-a1df-7c29a13680d1","year":2024},"citing_paper":{"arxiv_id":"2608.05430","last_updated":"2026-08-05T21:44:44Z","snapshot_observed_at":"2026-08-09T23:10:49.394955Z","submitted_at":"2026-08-05T21:44:44Z","title":"Robust Context-Aware Detection of Malicious Instructions in Text","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-08T13:19:01.795522Z"},"links":{"citing_paper":"/paper/2608.05430"},"observation_digest":"sha256:81edae808c5896ddf8a69ded4b05cf638ed50080ce4b6741f4904ed2e2336fa3","observation_id":"6fbf970f-6d84-4d9c-9926-2e90b518577d","resolution":{"observed_at":"2026-08-08T13:19:02.934632Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T13:19:01.800720Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.05430","last_updated":"2026-08-05T21:44:44Z","snapshot_observed_at":"2026-08-09T23:10:49.394955Z","submitted_at":"2026-08-05T21:44:44Z","title":"Robust Context-Aware Detection of Malicious Instructions in Text","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-08T13:19:01.800720Z"},"links":{"citing_paper":"/paper/2608.05430"},"observation_digest":"sha256:ddf98d1cabb9ed3cc5ab0b85f6334dec9ceea9aba48e4124a64f83cc11750db6","observation_id":"edfa7a69-04c0-4f06-88f3-7be71cf7b4f5","resolution":{"observed_at":"2026-08-08T13:19:01.800720Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T13:19:02.915892Z","title":null,"venue":null,"work_id":"6a5046c7-c125-4340-b89c-1115a593b011","year":2018},"citing_paper":{"arxiv_id":"2608.05430","last_updated":"2026-08-05T21:44:44Z","snapshot_observed_at":"2026-08-09T23:10:49.394955Z","submitted_at":"2026-08-05T21:44:44Z","title":"Robust Context-Aware Detection of Malicious Instructions in Text","version":1},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-08T13:19:01.805141Z"},"links":{"citing_paper":"/paper/2608.05430"},"observation_digest":"sha256:88bd87a7ea3b823a9d4c772d333c9a265ee16010fa3eb24325a7d1c6c5ac27dd","observation_id":"80a44018-b10c-45e6-ae54-ae6b9c9db867","resolution":{"observed_at":"2026-08-08T13:19:02.920224Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.06261","last_updated":"2025-12-19T14:25:46Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-07-07T17:36:04Z","title":"Gemini 2.5: Pushing the Frontier with Advanced Reasoning, Multimodality, Long Context, and Next Generation Agentic Capabilities","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2507.06261","snapshot_observed_at":"2026-08-08T13:19:01.809538Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.05430","last_updated":"2026-08-05T21:44:44Z","snapshot_observed_at":"2026-08-09T23:10:49.394955Z","submitted_at":"2026-08-05T21:44:44Z","title":"Robust Context-Aware Detection of Malicious Instructions in Text","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-08T13:19:01.809538Z"},"links":{"cited_paper":"/paper/2507.06261","citing_paper":"/paper/2608.05430"},"observation_digest":"sha256:d4642e2cbbff641f2b254446546f610afd22cd1a4440762644d0b8113c225fd1","observation_id":"affce934-e3ea-4d3d-9802-3f070f02fa1e","resolution":{"observed_at":"2026-08-08T13:19:01.809538Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T13:19:02.901845Z","title":"J.; Shlens, J.; and Szegedy, C","venue":null,"work_id":"a5fa745a-3290-4750-b4ff-275563f40d8d","year":2015},"citing_paper":{"arxiv_id":"2608.05430","last_updated":"2026-08-05T21:44:44Z","snapshot_observed_at":"2026-08-09T23:10:49.394955Z","submitted_at":"2026-08-05T21:44:44Z","title":"Robust Context-Aware Detection of Malicious Instructions in Text","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-08T13:19:01.814499Z"},"links":{"citing_paper":"/paper/2608.05430"},"observation_digest":"sha256:000644c740a0983f3d2e8bf59a4e1805b5b41e57033ccd23d72e0a7b97523836","observation_id":"cf0f1d6d-e77d-4b1c-a1c7-57c21ca02740","resolution":{"observed_at":"2026-08-08T13:19:02.906142Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T13:19:02.885938Z","title":null,"venue":null,"work_id":"abafce4f-aed3-4f7b-a494-2bf5a23c95c8","year":2023},"citing_paper":{"arxiv_id":"2608.05430","last_updated":"2026-08-05T21:44:44Z","snapshot_observed_at":"2026-08-09T23:10:49.394955Z","submitted_at":"2026-08-05T21:44:44Z","title":"Robust Context-Aware Detection of Malicious Instructions in Text","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-08T13:19:01.819084Z"},"links":{"citing_paper":"/paper/2608.05430"},"observation_digest":"sha256:2d27c53ecebaa7ea084f046ffff1b69bf70cddf8e246ee1269ba2e048ea73880","observation_id":"8bb57aad-e48b-4aa7-b977-220e5adb6004","resolution":{"observed_at":"2026-08-08T13:19:02.891309Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.14720","last_updated":"2024-03-20T15:26:23Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-03-20T15:26:23Z","title":"Defending Against Indirect Prompt Injection Attacks With Spotlighting","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.14720","snapshot_observed_at":"2026-08-08T13:19:01.823667Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.05430","last_updated":"2026-08-05T21:44:44Z","snapshot_observed_at":"2026-08-09T23:10:49.394955Z","submitted_at":"2026-08-05T21:44:44Z","title":"Robust Context-Aware Detection of Malicious Instructions in Text","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-08T13:19:01.823667Z"},"links":{"cited_paper":"/paper/2403.14720","citing_paper":"/paper/2608.05430"},"observation_digest":"sha256:ff13cff1288ce78a1f620494e3ad976704a6f89bfbb7b19cd61b25955922d7e4","observation_id":"5177ebbf-e8c7-4ef7-84b4-1ed91dbe12c3","resolution":{"observed_at":"2026-08-08T13:19:01.823667Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.00348","last_updated":"2025-04-23T01:35:19Z","snapshot_observed_at":"2026-07-06T19:43:23.653382Z","submitted_at":"2024-11-01T04:05:59Z","title":"Attention Tracker: Detecting Prompt Injection Attacks in LLMs","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.00348","snapshot_observed_at":"2026-08-08T13:19:01.828427Z","title":"H.; and Chen, P.-Y","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.05430","last_updated":"2026-08-05T21:44:44Z","snapshot_observed_at":"2026-08-09T23:10:49.394955Z","submitted_at":"2026-08-05T21:44:44Z","title":"Robust Context-Aware Detection of Malicious Instructions in Text","version":1},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-08T13:19:01.828427Z"},"links":{"cited_paper":"/paper/2411.00348","citing_paper":"/paper/2608.05430"},"observation_digest":"sha256:6a67c5140f66579c45a543693ba05a93bd947b963499d444fc700e660f51d00f","observation_id":"cdaa89bd-2b9c-4ff3-a50c-39c6a14e9f57","resolution":{"observed_at":"2026-08-08T13:19:01.828427Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.00614","last_updated":"2023-09-04T17:47:36Z","snapshot_observed_at":"2026-07-06T16:13:23.343694Z","submitted_at":"2023-09-01T17:59:44Z","title":"Baseline Defenses for Adversarial Attacks Against Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.00614","snapshot_observed_at":"2026-08-08T13:19:01.833098Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.05430","last_updated":"2026-08-05T21:44:44Z","snapshot_observed_at":"2026-08-09T23:10:49.394955Z","submitted_at":"2026-08-05T21:44:44Z","title":"Robust Context-Aware Detection of Malicious Instructions in Text","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-08T13:19:01.833098Z"},"links":{"cited_paper":"/paper/2309.00614","citing_paper":"/paper/2608.05430"},"observation_digest":"sha256:866aa12f655729f5d1cacf9481129f5067ba5635531d1c109d6b0c83038b0481","observation_id":"c8ebdeec-e522-4d24-b676-72801e4629ac","resolution":{"observed_at":"2026-08-08T13:19:01.833098Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T13:19:02.870157Z","title":null,"venue":null,"work_id":"f35275fc-e88e-4d45-8461-37d747566b6a","year":2025},"citing_paper":{"arxiv_id":"2608.05430","last_updated":"2026-08-05T21:44:44Z","snapshot_observed_at":"2026-08-09T23:10:49.394955Z","submitted_at":"2026-08-05T21:44:44Z","title":"Robust Context-Aware Detection of Malicious Instructions in Text","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-08T13:19:01.837978Z"},"links":{"citing_paper":"/paper/2608.05430"},"observation_digest":"sha256:8a45e1f57ddc152904fc53f2a61ac68037245c16d5f552494bf5e2eaec0b004d","observation_id":"1ad9e308-af3d-40fd-8bfb-05b15fbddcb9","resolution":{"observed_at":"2026-08-08T13:19:02.874878Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T13:19:02.855151Z","title":null,"venue":null,"work_id":"2fc31e11-00ef-427f-bcb7-195fba5d8f87","year":2018},"citing_paper":{"arxiv_id":"2608.05430","last_updated":"2026-08-05T21:44:44Z","snapshot_observed_at":"2026-08-09T23:10:49.394955Z","submitted_at":"2026-08-05T21:44:44Z","title":"Robust Context-Aware Detection of Malicious Instructions in Text","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-08T13:19:01.842300Z"},"links":{"citing_paper":"/paper/2608.05430"},"observation_digest":"sha256:456deda1b7df4a4245f347274740f83e990ac2c98ee5d4ec03aaed300ff605ea","observation_id":"1ebd43b4-692b-4701-8053-874de660a025","resolution":{"observed_at":"2026-08-08T13:19:02.859964Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T13:19:02.839863Z","title":null,"venue":null,"work_id":"5a81cfaa-25a7-4cfb-b202-ff8e1a7c1db2","year":2025},"citing_paper":{"arxiv_id":"2608.05430","last_updated":"2026-08-05T21:44:44Z","snapshot_observed_at":"2026-08-09T23:10:49.394955Z","submitted_at":"2026-08-05T21:44:44Z","title":"Robust Context-Aware Detection of Malicious Instructions in Text","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-08T13:19:01.846642Z"},"links":{"citing_paper":"/paper/2608.05430"},"observation_digest":"sha256:3c9e24e2dd7681f0f78d7ea294240adbf9540ee24eba2572530f3e9e9f69d0ff","observation_id":"be5150a3-d6a5-478a-80b6-34db6790a4ca","resolution":{"observed_at":"2026-08-08T13:19:02.844613Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T13:19:02.825365Z","title":null,"venue":null,"work_id":"a1c336e5-cf08-4dc3-8d80-ef319bfa40c8","year":2025},"citing_paper":{"arxiv_id":"2608.05430","last_updated":"2026-08-05T21:44:44Z","snapshot_observed_at":"2026-08-09T23:10:49.394955Z","submitted_at":"2026-08-05T21:44:44Z","title":"Robust Context-Aware Detection of Malicious Instructions in Text","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-08T13:19:01.851334Z"},"links":{"citing_paper":"/paper/2608.05430"},"observation_digest":"sha256:5343da6e13f461d5878476c03d69dac7a1a1677fed34052217f62b3443e17e51","observation_id":"b02a2063-c1dd-45f9-adf3-1f3ee6d0391f","resolution":{"observed_at":"2026-08-08T13:19:02.830027Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2602.03117","last_updated":"2026-05-07T07:42:14Z","snapshot_observed_at":"2026-07-06T22:44:18.875334Z","submitted_at":"2026-02-03T05:20:42Z","title":"AgentDyn: Are Your Agent Security Defenses Deployable in Real-World Dynamic Environments?","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2602.03117","snapshot_observed_at":"2026-08-08T13:19:01.855991Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.05430","last_updated":"2026-08-05T21:44:44Z","snapshot_observed_at":"2026-08-09T23:10:49.394955Z","submitted_at":"2026-08-05T21:44:44Z","title":"Robust Context-Aware Detection of Malicious Instructions in Text","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-08T13:19:01.855991Z"},"links":{"cited_paper":"/paper/2602.03117","citing_paper":"/paper/2608.05430"},"observation_digest":"sha256:f82746bc7aaeea02babb779dfc0158825cbc67b91b55dd53c1bc87402e52e986","observation_id":"8a96be63-d1b0-4ee9-b1a7-fd1a6194d483","resolution":{"observed_at":"2026-08-08T13:19:01.855991Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04957","last_updated":"2024-03-07T23:46:20Z","snapshot_observed_at":"2026-08-08T04:50:42.660630Z","submitted_at":"2024-03-07T23:46:20Z","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.04957","snapshot_observed_at":"2026-08-08T13:19:01.860743Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.05430","last_updated":"2026-08-05T21:44:44Z","snapshot_observed_at":"2026-08-09T23:10:49.394955Z","submitted_at":"2026-08-05T21:44:44Z","title":"Robust Context-Aware Detection of Malicious Instructions in Text","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-08T13:19:01.860743Z"},"links":{"cited_paper":"/paper/2403.04957","citing_paper":"/paper/2608.05430"},"observation_digest":"sha256:223a25327d988e00f726b76043a495ae8b93bc0ed8763052f210dd2ad897279a","observation_id":"68e00c90-cd07-4567-a3dc-f7ffb980e559","resolution":{"observed_at":"2026-08-08T13:19:01.860743Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T13:19:02.810467Z","title":null,"venue":null,"work_id":"9a6f241b-4011-44fe-911d-08db49e25a58","year":2024},"citing_paper":{"arxiv_id":"2608.05430","last_updated":"2026-08-05T21:44:44Z","snapshot_observed_at":"2026-08-09T23:10:49.394955Z","submitted_at":"2026-08-05T21:44:44Z","title":"Robust Context-Aware Detection of Malicious Instructions in Text","version":1},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-08T13:19:01.865607Z"},"links":{"citing_paper":"/paper/2608.05430"},"observation_digest":"sha256:d61997453bfeb23b7fb7882cb00fd695ba7997007ab491435ec13ad81a9160a3","observation_id":"0dbffed8-05d2-4924-ac4f-8d53abbbd681","resolution":{"observed_at":"2026-08-08T13:19:02.815171Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2606.15057","last_updated":"2026-06-19T04:47:48Z","snapshot_observed_at":"2026-08-06T02:12:16.016081Z","submitted_at":"2026-06-13T02:09:08Z","title":"AutoDojo: Adaptive Black-Box Attacks Reveal the Limits of IPI Defenses and Task-Specification Effects in LLM Agents","version":2},"cited_work":{"arxiv_id":"2606.15057","doi":null,"metadata_source":"pith","pith_arxiv_id":"2606.15057","snapshot_observed_at":"2026-08-08T13:19:02.375448Z","title":"AutoDojo: Adaptive Black-Box Attacks Reveal the Limits of IPI Defenses and Task-Specification Effects in LLM Agents","venue":"cs.CR","work_id":"322d2d4c-eb97-4819-837b-b7f10fa76e92","year":2026},"citing_paper":{"arxiv_id":"2608.05430","last_updated":"2026-08-05T21:44:44Z","snapshot_observed_at":"2026-08-09T23:10:49.394955Z","submitted_at":"2026-08-05T21:44:44Z","title":"Robust Context-Aware Detection of Malicious Instructions in Text","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-08T13:19:01.869801Z"},"links":{"cited_paper":"/paper/2606.15057","citing_paper":"/paper/2608.05430"},"observation_digest":"sha256:7db70f20a0235fe054e8da9dfd08013d65827d4bf8c07a94af99dc8d98633f15","observation_id":"c663d612-7baa-440f-96de-f5d27e02fb17","resolution":{"observed_at":"2026-08-08T13:19:02.382573Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T13:19:01.874341Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2608.05430","last_updated":"2026-08-05T21:44:44Z","snapshot_observed_at":"2026-08-09T23:10:49.394955Z","submitted_at":"2026-08-05T21:44:44Z","title":"Robust Context-Aware Detection of Malicious Instructions in Text","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-08T13:19:01.874341Z"},"links":{"citing_paper":"/paper/2608.05430"},"observation_digest":"sha256:c19bb6a871bd589e0bc68ca3b2baf807cd018c4a7766ca737ded376f5db584f9","observation_id":"3f3010a5-d25a-48ed-b0a5-ab70bd2c4000","resolution":{"observed_at":"2026-08-08T13:19:01.874341Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T13:19:02.786623Z","title":null,"venue":null,"work_id":"9c05d5ac-869b-45c0-a462-54e4a21309f1","year":2025},"citing_paper":{"arxiv_id":"2608.05430","last_updated":"2026-08-05T21:44:44Z","snapshot_observed_at":"2026-08-09T23:10:49.394955Z","submitted_at":"2026-08-05T21:44:44Z","title":"Robust Context-Aware Detection of Malicious Instructions in Text","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-08T13:19:01.878746Z"},"links":{"citing_paper":"/paper/2608.05430"},"observation_digest":"sha256:229b508603341fa90a2101052038247436f4d48a1c236e5273572a96d2950db8","observation_id":"69ce246c-56d4-4e7b-9861-a5f16d123e76","resolution":{"observed_at":"2026-08-08T13:19:02.790882Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T13:19:02.770589Z","title":"M.; and Goodfellow, I","venue":null,"work_id":"4a5c9fa3-7575-4add-bfb4-6eba2c6e03f3","year":2017},"citing_paper":{"arxiv_id":"2608.05430","last_updated":"2026-08-05T21:44:44Z","snapshot_observed_at":"2026-08-09T23:10:49.394955Z","submitted_at":"2026-08-05T21:44:44Z","title":"Robust Context-Aware Detection of Malicious Instructions in Text","version":1},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-08T13:19:01.883163Z"},"links":{"citing_paper":"/paper/2608.05430"},"observation_digest":"sha256:d38764489d9c043c75a06be07936cb6474dce2f54c85bc4975c70ca6c9d7ead1","observation_id":"cd6539a2-c066-4c9b-9964-be6bc39d4e80","resolution":{"observed_at":"2026-08-08T13:19:02.776580Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2510.09023","last_updated":"2025-10-10T05:51:04Z","snapshot_observed_at":"2026-08-03T03:11:42.084785Z","submitted_at":"2025-10-10T05:51:04Z","title":"The Attacker Moves Second: Stronger Adaptive Attacks Bypass Defenses Against Llm Jailbreaks and Prompt Injections","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2510.09023","snapshot_observed_at":"2026-08-08T13:19:01.887835Z","title":"V.; Hayes, J.; Ilie, M.; Pluto, J.; Song, S.; Chaudhari, H.; Shumailov, I.; Thakurta, A.; Xiao, K","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.05430","last_updated":"2026-08-05T21:44:44Z","snapshot_observed_at":"2026-08-09T23:10:49.394955Z","submitted_at":"2026-08-05T21:44:44Z","title":"Robust Context-Aware Detection of Malicious Instructions in Text","version":1},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-08-08T13:19:01.887835Z"},"links":{"cited_paper":"/paper/2510.09023","citing_paper":"/paper/2608.05430"},"observation_digest":"sha256:7fd3aeec71f94fa5bb428868b05be8203e331321962c632d706d6eb64e51c01e","observation_id":"6b94d4bd-a57c-4a41-89d5-849e6c6a359d","resolution":{"observed_at":"2026-08-08T13:19:01.887835Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T13:19:02.756487Z","title":null,"venue":null,"work_id":"153aab0d-591c-4b9c-9b11-83b0f633352b","year":2024},"citing_paper":{"arxiv_id":"2608.05430","last_updated":"2026-08-05T21:44:44Z","snapshot_observed_at":"2026-08-09T23:10:49.394955Z","submitted_at":"2026-08-05T21:44:44Z","title":"Robust Context-Aware Detection of Malicious Instructions in Text","version":1},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-08-08T13:19:01.892419Z"},"links":{"citing_paper":"/paper/2608.05430"},"observation_digest":"sha256:3a9da760c6915b970bb3abc39c3c29c67a4b9ddae4cb1ce1dcc3d2259f6af1df","observation_id":"fdf9ae2f-6256-4dbe-a219-fd5c8829f348","resolution":{"observed_at":"2026-08-08T13:19:02.761105Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T13:19:02.742773Z","title":null,"venue":null,"work_id":"1b34a11b-58db-43ab-8275-5dc940b525e6","year":2016},"citing_paper":{"arxiv_id":"2608.05430","last_updated":"2026-08-05T21:44:44Z","snapshot_observed_at":"2026-08-09T23:10:49.394955Z","submitted_at":"2026-08-05T21:44:44Z","title":"Robust Context-Aware Detection of Malicious Instructions in Text","version":1},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-08-08T13:19:01.896850Z"},"links":{"citing_paper":"/paper/2608.05430"},"observation_digest":"sha256:53366f3e5320b60cc1c811df3793e993202cac1418ccf1d585f3c7754c74dd9f","observation_id":"fe333dba-377c-4cb0-862a-e3c833ec5ede","resolution":{"observed_at":"2026-08-08T13:19:02.747298Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.11703","last_updated":"2026-05-14T02:36:38Z","snapshot_observed_at":"2026-07-06T21:10:09.129714Z","submitted_at":"2025-04-16T01:58:40Z","title":"Progent: Securing AI Agents with Privilege Control","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.11703","snapshot_observed_at":"2026-08-08T13:19:01.901166Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.05430","last_updated":"2026-08-05T21:44:44Z","snapshot_observed_at":"2026-08-09T23:10:49.394955Z","submitted_at":"2026-08-05T21:44:44Z","title":"Robust Context-Aware Detection of Malicious Instructions in Text","version":1},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-08-08T13:19:01.901166Z"},"links":{"cited_paper":"/paper/2504.11703","citing_paper":"/paper/2608.05430"},"observation_digest":"sha256:cdb7ec2ab13f10aee6faaf2ba263d10cff176b24900df2d32e70a97aa56d55cd","observation_id":"14d30dc6-4d25-44cf-ae78-24543efe326a","resolution":{"observed_at":"2026-08-08T13:19:01.901166Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2409.10173","last_updated":"2024-09-19T11:21:24Z","snapshot_observed_at":"2026-07-06T19:15:56.947205Z","submitted_at":"2024-09-16T11:10:29Z","title":"jina-embeddings-v3: Multilingual Embeddings With Task LoRA","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.10173","snapshot_observed_at":"2026-08-08T13:19:01.906091Z","title":"K.; G \\\"u nther, M.; Wang, B.; Krimmel, M.; Wang, F.; Mastrapas, G.; Koukounas, A.; Wang, N.; and Xiao, H","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.05430","last_updated":"2026-08-05T21:44:44Z","snapshot_observed_at":"2026-08-09T23:10:49.394955Z","submitted_at":"2026-08-05T21:44:44Z","title":"Robust Context-Aware Detection of Malicious Instructions in Text","version":1},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-08-08T13:19:01.906091Z"},"links":{"cited_paper":"/paper/2409.10173","citing_paper":"/paper/2608.05430"},"observation_digest":"sha256:7ad52f57e42023fa1dde7c47e159a21c12284972a80abecffbb50d38c67de202","observation_id":"f8c83a41-010b-49ae-b824-b2922b921efd","resolution":{"observed_at":"2026-08-08T13:19:01.906091Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T13:19:02.728622Z","title":null,"venue":null,"work_id":"03286831-ef24-4745-82de-1c377585c9d9","year":2019},"citing_paper":{"arxiv_id":"2608.05430","last_updated":"2026-08-05T21:44:44Z","snapshot_observed_at":"2026-08-09T23:10:49.394955Z","submitted_at":"2026-08-05T21:44:44Z","title":"Robust Context-Aware Detection of Malicious Instructions in Text","version":1},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-08-08T13:19:01.910874Z"},"links":{"citing_paper":"/paper/2608.05430"},"observation_digest":"sha256:f7f31fa42e3e83e62e8d6182aa12a36c902b3014971950743956e10feb6b0ffd","observation_id":"65823a14-5690-4ec0-b00a-5f3a2b37fb0d","resolution":{"observed_at":"2026-08-08T13:19:02.732920Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T13:19:02.714795Z","title":null,"venue":null,"work_id":"5f153627-b272-489b-a011-301823fafee6","year":2019},"citing_paper":{"arxiv_id":"2608.05430","last_updated":"2026-08-05T21:44:44Z","snapshot_observed_at":"2026-08-09T23:10:49.394955Z","submitted_at":"2026-08-05T21:44:44Z","title":"Robust Context-Aware Detection of Malicious Instructions in Text","version":1},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-08-08T13:19:01.915158Z"},"links":{"citing_paper":"/paper/2608.05430"},"observation_digest":"sha256:6966b0d908fdff0b6acb279041d507927570c33c48c5d722d0ab3ccba0aa3875","observation_id":"4eea3dda-5479-41f6-a3e7-560aaf95b775","resolution":{"observed_at":"2026-08-08T13:19:02.719416Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T13:19:02.700385Z","title":null,"venue":null,"work_id":"da372896-e5dc-4b5d-93e7-3e700504fc2f","year":2018},"citing_paper":{"arxiv_id":"2608.05430","last_updated":"2026-08-05T21:44:44Z","snapshot_observed_at":"2026-08-09T23:10:49.394955Z","submitted_at":"2026-08-05T21:44:44Z","title":"Robust Context-Aware Detection of Malicious Instructions in Text","version":1},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-08-08T13:19:01.919685Z"},"links":{"citing_paper":"/paper/2608.05430"},"observation_digest":"sha256:5ac9cbc7b9847000651aab0743684999da07ae47ec86b28ae5adacb1c88a2c34","observation_id":"10566495-4a8b-45f4-9ae0-53efb7cc3616","resolution":{"observed_at":"2026-08-08T13:19:02.704750Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T13:19:01.924408Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.05430","last_updated":"2026-08-05T21:44:44Z","snapshot_observed_at":"2026-08-09T23:10:49.394955Z","submitted_at":"2026-08-05T21:44:44Z","title":"Robust Context-Aware Detection of Malicious Instructions in Text","version":1},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-08-08T13:19:01.924408Z"},"links":{"citing_paper":"/paper/2608.05430"},"observation_digest":"sha256:7e6087f94935f43f87f81f67d4b686b7ac5ac8b4acfa77f096b3f03d38cc6210","observation_id":"97c01cf0-b292-44a3-8164-7a1a28c1796a","resolution":{"observed_at":"2026-08-08T13:19:01.924408Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T13:19:01.928777Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.05430","last_updated":"2026-08-05T21:44:44Z","snapshot_observed_at":"2026-08-09T23:10:49.394955Z","submitted_at":"2026-08-05T21:44:44Z","title":"Robust Context-Aware Detection of Malicious Instructions in Text","version":1},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-08-08T13:19:01.928777Z"},"links":{"citing_paper":"/paper/2608.05430"},"observation_digest":"sha256:6bc0d089c2a57547f9cceab7ea838ec0dafc20f08581ca22d21db19b1b976c02","observation_id":"7da20fe5-fb7d-4a2a-9d55-a2aa931e0f6f","resolution":{"observed_at":"2026-08-08T13:19:01.928777Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T13:19:02.685022Z","title":null,"venue":null,"work_id":"38164eb1-19b6-437d-a862-6382f003216c","year":2018},"citing_paper":{"arxiv_id":"2608.05430","last_updated":"2026-08-05T21:44:44Z","snapshot_observed_at":"2026-08-09T23:10:49.394955Z","submitted_at":"2026-08-05T21:44:44Z","title":"Robust Context-Aware Detection of Malicious Instructions in Text","version":1},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-08-08T13:19:01.933088Z"},"links":{"citing_paper":"/paper/2608.05430"},"observation_digest":"sha256:5ff0c27f28bc4ff435a2ab2720ae7c7e0802d048259da222759c15068b2ecef1","observation_id":"e48cc7fc-9ed8-45f8-b04d-933e3849b960","resolution":{"observed_at":"2026-08-08T13:19:02.689545Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T13:19:02.670494Z","title":null,"venue":null,"work_id":"537201e1-d17e-4e51-8f32-c2121c6f1b37","year":2020},"citing_paper":{"arxiv_id":"2608.05430","last_updated":"2026-08-05T21:44:44Z","snapshot_observed_at":"2026-08-09T23:10:49.394955Z","submitted_at":"2026-08-05T21:44:44Z","title":"Robust Context-Aware Detection of Malicious Instructions in Text","version":1},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-08-08T13:19:01.937424Z"},"links":{"citing_paper":"/paper/2608.05430"},"observation_digest":"sha256:0671bd68b995ae76c6830946a67c081947d1046fa3ab4db181415ea0229571fd","observation_id":"06681960-8f85-4cc4-aae0-24e1cfcef12a","resolution":{"observed_at":"2026-08-08T13:19:02.674993Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2409.19091","last_updated":"2024-10-10T15:29:07Z","snapshot_observed_at":"2026-08-07T14:13:29.342572Z","submitted_at":"2024-09-27T18:41:58Z","title":"System-Level Defense against Indirect Prompt Injection Attacks: An Information Flow Control Perspective","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.19091","snapshot_observed_at":"2026-08-08T13:19:01.941819Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.05430","last_updated":"2026-08-05T21:44:44Z","snapshot_observed_at":"2026-08-09T23:10:49.394955Z","submitted_at":"2026-08-05T21:44:44Z","title":"Robust Context-Aware Detection of Malicious Instructions in Text","version":1},"reference_index":38,"source":"arxiv_source","source_observed_at":"2026-08-08T13:19:01.941819Z"},"links":{"cited_paper":"/paper/2409.19091","citing_paper":"/paper/2608.05430"},"observation_digest":"sha256:afda4f671f863cb98081a0d37b8e61cf231d18b2ffec20dc25f6b3e673b7eb24","observation_id":"800d17ce-a4ae-4001-9acb-dd365d732cda","resolution":{"observed_at":"2026-08-08T13:19:01.941819Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T13:19:02.655288Z","title":null,"venue":null,"work_id":"8a1fc823-441a-4415-a1e5-2137c2db4f95","year":2020},"citing_paper":{"arxiv_id":"2608.05430","last_updated":"2026-08-05T21:44:44Z","snapshot_observed_at":"2026-08-09T23:10:49.394955Z","submitted_at":"2026-08-05T21:44:44Z","title":"Robust Context-Aware Detection of Malicious Instructions in Text","version":1},"reference_index":39,"source":"arxiv_source","source_observed_at":"2026-08-08T13:19:01.946760Z"},"links":{"citing_paper":"/paper/2608.05430"},"observation_digest":"sha256:e6c478dc5a8d1d8456ad43fb79da9294efd90d4357e312fe3d84ab27af6453b3","observation_id":"1185f445-b692-450f-8d58-28052d4fa52a","resolution":{"observed_at":"2026-08-08T13:19:02.660546Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T13:19:02.639925Z","title":null,"venue":null,"work_id":"6d52bd4e-642d-4eba-b31e-1c2d8f45e1d1","year":2025},"citing_paper":{"arxiv_id":"2608.05430","last_updated":"2026-08-05T21:44:44Z","snapshot_observed_at":"2026-08-09T23:10:49.394955Z","submitted_at":"2026-08-05T21:44:44Z","title":"Robust Context-Aware Detection of Malicious Instructions in Text","version":1},"reference_index":40,"source":"arxiv_source","source_observed_at":"2026-08-08T13:19:01.951246Z"},"links":{"citing_paper":"/paper/2608.05430"},"observation_digest":"sha256:174afb56aebc47531f792592fd07296963e6a5d25490e9f192f6bdcccfb75911","observation_id":"8aa0289c-c8a7-4b0f-846c-9dc0e005b665","resolution":{"observed_at":"2026-08-08T13:19:02.644950Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.09388","last_updated":"2025-05-14T13:41:34Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-05-14T13:41:34Z","title":"Qwen3 Technical Report","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.09388","snapshot_observed_at":"2026-08-08T13:19:01.955751Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.05430","last_updated":"2026-08-05T21:44:44Z","snapshot_observed_at":"2026-08-09T23:10:49.394955Z","submitted_at":"2026-08-05T21:44:44Z","title":"Robust Context-Aware Detection of Malicious Instructions in Text","version":1},"reference_index":41,"source":"arxiv_source","source_observed_at":"2026-08-08T13:19:01.955751Z"},"links":{"cited_paper":"/paper/2505.09388","citing_paper":"/paper/2608.05430"},"observation_digest":"sha256:05ed8ab4d56e78a2a0ea35352a477cb0bd7fb67dc496ebc5b44fd2f6ea9464f7","observation_id":"68f16609-0c3c-4cc7-bd5b-274a7318ae4c","resolution":{"observed_at":"2026-08-08T13:19:01.955751Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.14197","last_updated":"2025-01-27T08:51:16Z","snapshot_observed_at":"2026-07-06T17:06:45.522731Z","submitted_at":"2023-12-21T01:08:39Z","title":"Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.14197","snapshot_observed_at":"2026-08-08T13:19:01.961178Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.05430","last_updated":"2026-08-05T21:44:44Z","snapshot_observed_at":"2026-08-09T23:10:49.394955Z","submitted_at":"2026-08-05T21:44:44Z","title":"Robust Context-Aware Detection of Malicious Instructions in Text","version":1},"reference_index":42,"source":"arxiv_source","source_observed_at":"2026-08-08T13:19:01.961178Z"},"links":{"cited_paper":"/paper/2312.14197","citing_paper":"/paper/2608.05430"},"observation_digest":"sha256:60c8a54ac9663d2aa7c09ec93f8372376678ff238ba7837dae8679d70541aba0","observation_id":"6bc4f208-44ae-4ffd-991b-98915cc36574","resolution":{"observed_at":"2026-08-08T13:19:01.961178Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T13:19:02.624402Z","title":"S.; and Kang, D","venue":null,"work_id":"619e5a7f-b3a1-4337-81b5-40358335da28","year":2025},"citing_paper":{"arxiv_id":"2608.05430","last_updated":"2026-08-05T21:44:44Z","snapshot_observed_at":"2026-08-09T23:10:49.394955Z","submitted_at":"2026-08-05T21:44:44Z","title":"Robust Context-Aware Detection of Malicious Instructions in Text","version":1},"reference_index":43,"source":"arxiv_source","source_observed_at":"2026-08-08T13:19:01.965930Z"},"links":{"citing_paper":"/paper/2608.05430"},"observation_digest":"sha256:fbfdf245cca9b9a70cc5df2c61dd476142894e50b33821322ad9205d020ccc88","observation_id":"c2ba51b3-284a-4523-baaf-e6418f5b5562","resolution":{"observed_at":"2026-08-08T13:19:02.628997Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T13:19:02.608985Z","title":null,"venue":null,"work_id":"886706f3-93c8-4a9d-85ff-f600bc26c9a3","year":2024},"citing_paper":{"arxiv_id":"2608.05430","last_updated":"2026-08-05T21:44:44Z","snapshot_observed_at":"2026-08-09T23:10:49.394955Z","submitted_at":"2026-08-05T21:44:44Z","title":"Robust Context-Aware Detection of Malicious Instructions in Text","version":1},"reference_index":44,"source":"arxiv_source","source_observed_at":"2026-08-08T13:19:01.970326Z"},"links":{"citing_paper":"/paper/2608.05430"},"observation_digest":"sha256:baaf3f4da01cd2cbb15d5de6ef1be6c705ef50dfa0cf62cd5664796d615f7350","observation_id":"5531010b-58b9-4256-b556-57cfd6d5c81e","resolution":{"observed_at":"2026-08-08T13:19:02.613835Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T13:19:02.594162Z","title":null,"venue":null,"work_id":"2f175d71-6d0f-4bfe-8c41-55b297562d43","year":2025},"citing_paper":{"arxiv_id":"2608.05430","last_updated":"2026-08-05T21:44:44Z","snapshot_observed_at":"2026-08-09T23:10:49.394955Z","submitted_at":"2026-08-05T21:44:44Z","title":"Robust Context-Aware Detection of Malicious Instructions in Text","version":1},"reference_index":45,"source":"arxiv_source","source_observed_at":"2026-08-08T13:19:01.975091Z"},"links":{"citing_paper":"/paper/2608.05430"},"observation_digest":"sha256:830318ee828c834ca82af51b5a4f8458f92cd3b53476f27267483282d3f43a71","observation_id":"d9b07ef2-c7d2-4ab8-8e65-54e485bba285","resolution":{"observed_at":"2026-08-08T13:19:02.598797Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T13:19:02.578234Z","title":"P.; El Ghaoui, L.; and Jordan, M","venue":null,"work_id":"8a51c805-5764-4b2f-877f-3c39713df5b5","year":2019},"citing_paper":{"arxiv_id":"2608.05430","last_updated":"2026-08-05T21:44:44Z","snapshot_observed_at":"2026-08-09T23:10:49.394955Z","submitted_at":"2026-08-05T21:44:44Z","title":"Robust Context-Aware Detection of Malicious Instructions in Text","version":1},"reference_index":46,"source":"arxiv_source","source_observed_at":"2026-08-08T13:19:01.979713Z"},"links":{"citing_paper":"/paper/2608.05430"},"observation_digest":"sha256:bbd01458e656dfd55966d9d89a5c248c3691b41b7731c7e35fd8098d7f501f08","observation_id":"98136e34-56d3-4adb-8f0e-aa5742b7066b","resolution":{"observed_at":"2026-08-08T13:19:02.583424Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T13:19:02.562258Z","title":null,"venue":null,"work_id":"c1edc2f6-d58d-4753-92a6-1e2caeafa5a8","year":2020},"citing_paper":{"arxiv_id":"2608.05430","last_updated":"2026-08-05T21:44:44Z","snapshot_observed_at":"2026-08-09T23:10:49.394955Z","submitted_at":"2026-08-05T21:44:44Z","title":"Robust Context-Aware Detection of Malicious Instructions in Text","version":1},"reference_index":47,"source":"arxiv_source","source_observed_at":"2026-08-08T13:19:01.984220Z"},"links":{"citing_paper":"/paper/2608.05430"},"observation_digest":"sha256:5b9403d1d66b87db8ccf3ce7d9d3bfb096f3946d90ea021b1b54f3ff73ae2e4e","observation_id":"18f10ad8-832d-4831-b0c5-6184be0fcf3f","resolution":{"observed_at":"2026-08-08T13:19:02.567006Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2502.05174","last_updated":"2025-06-10T18:13:09Z","snapshot_observed_at":"2026-08-08T19:58:38.598603Z","submitted_at":"2025-02-07T18:57:49Z","title":"MELON: Provable Defense Against Indirect Prompt Injection Attacks in AI Agents","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.05174","snapshot_observed_at":"2026-08-08T13:19:01.988614Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.05430","last_updated":"2026-08-05T21:44:44Z","snapshot_observed_at":"2026-08-09T23:10:49.394955Z","submitted_at":"2026-08-05T21:44:44Z","title":"Robust Context-Aware Detection of Malicious Instructions in Text","version":1},"reference_index":48,"source":"arxiv_source","source_observed_at":"2026-08-08T13:19:01.988614Z"},"links":{"cited_paper":"/paper/2502.05174","citing_paper":"/paper/2608.05430"},"observation_digest":"sha256:1d28196f617462298db52f08b9cefa5b50d57c494fdc221d0b277864fef8b013","observation_id":"f4992c41-56f8-4f5f-aa4a-0a8bde72ae61","resolution":{"observed_at":"2026-08-08T13:19:01.988614Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-07-06T15:59:23.019044Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-08-08T13:19:01.993333Z","title":"Z.; and Fredrikson, M","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.05430","last_updated":"2026-08-05T21:44:44Z","snapshot_observed_at":"2026-08-09T23:10:49.394955Z","submitted_at":"2026-08-05T21:44:44Z","title":"Robust Context-Aware Detection of Malicious Instructions in Text","version":1},"reference_index":49,"source":"arxiv_source","source_observed_at":"2026-08-08T13:19:01.993333Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2608.05430"},"observation_digest":"sha256:4d6cc246ebc037cdaebce6737b96d6e0249f03f27ce5e4fd30bdcf76533b7ea6","observation_id":"422f9bf1-f6f8-475f-bcbd-48ef3a62c19e","resolution":{"observed_at":"2026-08-08T13:19:01.993333Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2608.05430","last_updated":"2026-08-05T21:44:44Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-09T23:10:49.394955Z","submitted_at":"2026-08-05T21:44:44Z","title":"Robust Context-Aware Detection of Malicious Instructions in Text"},"reference_resolution":{"displayed":49,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":44,"verified_exact":1,"verified_fuzzy":4},"total_outbound_references":49},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 49 of 49 outbound references and 0 inbound Pith citation observations for arXiv:2608.05430."}