{"as_of":"2026-08-10T00:30:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:f8e58d3271dae95d521cedb9c9c92b8e8f9b3a76e0be1189bf4a2a2586bdbf04","coverage":[{"denominator":29,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":29,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-08T12:07:35.990056Z","state":"measured"},{"denominator":29,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":29,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2608.05495/citation-record","integrity":"/paper/2608.05495/integrity","json":"/paper/2608.05495/citation-record.json","paper":"/paper/2608.05495"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2307.10490","last_updated":"2023-10-03T17:03:10Z","snapshot_observed_at":"2026-08-08T22:08:37.768137Z","submitted_at":"2023-07-19T23:03:20Z","title":"Abusing Images and Sounds for Indirect Instruction Injection in Multi-Modal LLMs","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.10490","snapshot_observed_at":"2026-08-08T12:07:35.853723Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.05495","last_updated":"2026-08-06T00:51:46Z","snapshot_observed_at":"2026-08-09T23:10:57.062777Z","submitted_at":"2026-08-06T00:51:46Z","title":"PromptShield Home: Ambient Multimodal Prompt Injection Defense for Smart-Home Agents","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-08T12:07:35.853723Z"},"links":{"cited_paper":"/paper/2307.10490","citing_paper":"/paper/2608.05495"},"observation_digest":"sha256:358ac8ab2b5ba7937aea824368c6609bfc31396cdca08db49b7e24c0db254b43","observation_id":"646d89a3-18e4-4702-a6e0-1f7169807a60","resolution":{"observed_at":"2026-08-08T12:07:35.853723Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1016/j.cmpb.2008","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T12:07:36.238281Z","title":null,"venue":null,"work_id":"f6382028-d096-4c2d-aa4c-bb4e60a85a7f","year":2008},"citing_paper":{"arxiv_id":"2608.05495","last_updated":"2026-08-06T00:51:46Z","snapshot_observed_at":"2026-08-09T23:10:57.062777Z","submitted_at":"2026-08-06T00:51:46Z","title":"PromptShield Home: Ambient Multimodal Prompt Injection Defense for Smart-Home Agents","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-08T12:07:35.859702Z"},"links":{"citing_paper":"/paper/2608.05495"},"observation_digest":"sha256:4f1678029d9baa39dd5078e446c9509b02b89100875e21f2c0d49646031122fd","observation_id":"ff8d04d3-23ab-4589-9c0b-88928b68cd32","resolution":{"observed_at":"2026-08-08T12:07:36.243276Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1038/s41467-024-55631-x","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T12:07:36.222266Z","title":"Wiest, Carolin V","venue":null,"work_id":"ec06e9d4-8928-4517-93cf-3a07aa0a37ab","year":2025},"citing_paper":{"arxiv_id":"2608.05495","last_updated":"2026-08-06T00:51:46Z","snapshot_observed_at":"2026-08-09T23:10:57.062777Z","submitted_at":"2026-08-06T00:51:46Z","title":"PromptShield Home: Ambient Multimodal Prompt Injection Defense for Smart-Home Agents","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-08T12:07:35.864836Z"},"links":{"citing_paper":"/paper/2608.05495"},"observation_digest":"sha256:f68ab20a7bad21ca781a905e4f0da1dfd594c307143cab09cf8c85365b479ea4","observation_id":"966f20a6-3d2c-4603-95bf-997c1da96c8c","resolution":{"observed_at":"2026-08-08T12:07:36.227275Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T12:07:37.567663Z","title":null,"venue":null,"work_id":"be2c5fe9-af2c-4196-b329-916b20ea0a8d","year":2023},"citing_paper":{"arxiv_id":"2608.05495","last_updated":"2026-08-06T00:51:46Z","snapshot_observed_at":"2026-08-09T23:10:57.062777Z","submitted_at":"2026-08-06T00:51:46Z","title":"PromptShield Home: Ambient Multimodal Prompt Injection Defense for Smart-Home Agents","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-08T12:07:35.869966Z"},"links":{"citing_paper":"/paper/2608.05495"},"observation_digest":"sha256:7a7e9a708b698a5fb30a348cad3731c0765da5d2c2b3346063840f164ae09004","observation_id":"28ac0d2d-0cc9-483d-aa25-61db76afa12e","resolution":{"observed_at":"2026-08-08T12:07:37.572875Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T12:07:35.875185Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.05495","last_updated":"2026-08-06T00:51:46Z","snapshot_observed_at":"2026-08-09T23:10:57.062777Z","submitted_at":"2026-08-06T00:51:46Z","title":"PromptShield Home: Ambient Multimodal Prompt Injection Defense for Smart-Home Agents","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-08T12:07:35.875185Z"},"links":{"citing_paper":"/paper/2608.05495"},"observation_digest":"sha256:d659f05c8b1269d12b4c12d403932ffa4ba3f45ffc429755aed7402f20fde314","observation_id":"439b07e0-04d4-4650-9937-7f52cb25c4ce","resolution":{"observed_at":"2026-08-08T12:07:35.875185Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T12:07:37.550091Z","title":"2017.IoT fundamentals: Networking technologies, protocols, and use cases for the internet of things","venue":null,"work_id":"13495893-ed69-44f4-bae4-0fefd8047adf","year":2017},"citing_paper":{"arxiv_id":"2608.05495","last_updated":"2026-08-06T00:51:46Z","snapshot_observed_at":"2026-08-09T23:10:57.062777Z","submitted_at":"2026-08-06T00:51:46Z","title":"PromptShield Home: Ambient Multimodal Prompt Injection Defense for Smart-Home Agents","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-08T12:07:35.880075Z"},"links":{"citing_paper":"/paper/2608.05495"},"observation_digest":"sha256:85be032ba7e1b13a820c7f7840036ba7f39c1a34d5739162ac40bbf9df060d8c","observation_id":"ee173c15-7fb8-4401-a064-4889b7afb789","resolution":{"observed_at":"2026-08-08T12:07:37.555770Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2021.10221","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T12:07:37.399845Z","title":null,"venue":null,"work_id":"1a44e6f3-909c-46ee-8403-5ee206c94725","year":2021},"citing_paper":{"arxiv_id":"2608.05495","last_updated":"2026-08-06T00:51:46Z","snapshot_observed_at":"2026-08-09T23:10:57.062777Z","submitted_at":"2026-08-06T00:51:46Z","title":"PromptShield Home: Ambient Multimodal Prompt Injection Defense for Smart-Home Agents","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-08T12:07:35.885643Z"},"links":{"citing_paper":"/paper/2608.05495"},"observation_digest":"sha256:d78a3900e9edd87cfac7b7e22e2b5a4ba5fc3406cf2de152fad17f3f9f10016a","observation_id":"3cfebdda-c51a-4d6b-a9c9-1be4e20206a4","resolution":{"observed_at":"2026-08-08T12:07:37.407487Z","resolver_source":"raw_fallback","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.05499","last_updated":"2025-12-29T02:25:27Z","snapshot_observed_at":"2026-07-06T15:40:27.639368Z","submitted_at":"2023-06-08T18:43:11Z","title":"Prompt Injection attack against LLM-integrated Applications","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.05499","snapshot_observed_at":"2026-08-08T12:07:35.890440Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.05495","last_updated":"2026-08-06T00:51:46Z","snapshot_observed_at":"2026-08-09T23:10:57.062777Z","submitted_at":"2026-08-06T00:51:46Z","title":"PromptShield Home: Ambient Multimodal Prompt Injection Defense for Smart-Home Agents","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-08T12:07:35.890440Z"},"links":{"cited_paper":"/paper/2306.05499","citing_paper":"/paper/2608.05495"},"observation_digest":"sha256:876ac946402660587dd75d12404f758a3541c9d80e1ed32ec2c8d87f2cf28b97","observation_id":"13820eca-092c-48ee-810a-9d56a47a578c","resolution":{"observed_at":"2026-08-08T12:07:35.890440Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.48550/arxiv.2310.12815","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T12:07:36.186437Z","title":null,"venue":null,"work_id":"24b7b82a-6d26-49f1-a533-184e6590808a","year":2024},"citing_paper":{"arxiv_id":"2608.05495","last_updated":"2026-08-06T00:51:46Z","snapshot_observed_at":"2026-08-09T23:10:57.062777Z","submitted_at":"2026-08-06T00:51:46Z","title":"PromptShield Home: Ambient Multimodal Prompt Injection Defense for Smart-Home Agents","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-08T12:07:35.895709Z"},"links":{"citing_paper":"/paper/2608.05495"},"observation_digest":"sha256:60b385b8e24c45b17f93aa824f1b13552ab395ba5daa571917bbd50215601a28","observation_id":"4d1d0d88-661a-4906-abf9-cb5ecd00489e","resolution":{"observed_at":"2026-08-08T12:07:36.191405Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T12:07:35.900496Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.05495","last_updated":"2026-08-06T00:51:46Z","snapshot_observed_at":"2026-08-09T23:10:57.062777Z","submitted_at":"2026-08-06T00:51:46Z","title":"PromptShield Home: Ambient Multimodal Prompt Injection Defense for Smart-Home Agents","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-08T12:07:35.900496Z"},"links":{"citing_paper":"/paper/2608.05495"},"observation_digest":"sha256:4343f5fa54deeaa14d8ca75d61abd1e6b54cec6b02e35b132a54551990f14561","observation_id":"f3aea480-c23a-4480-ab1f-0a39cfd5b2aa","resolution":{"observed_at":"2026-08-08T12:07:35.900496Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T12:07:35.905386Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2608.05495","last_updated":"2026-08-06T00:51:46Z","snapshot_observed_at":"2026-08-09T23:10:57.062777Z","submitted_at":"2026-08-06T00:51:46Z","title":"PromptShield Home: Ambient Multimodal Prompt Injection Defense for Smart-Home Agents","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-08T12:07:35.905386Z"},"links":{"citing_paper":"/paper/2608.05495"},"observation_digest":"sha256:eb850a0e16779f643a4fe566b86a48b235c0a96234f07243b8471b40944587b2","observation_id":"25c7b0e8-77ca-46ce-9451-e08437df7f7a","resolution":{"observed_at":"2026-08-08T12:07:35.905386Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T12:07:37.531929Z","title":"Choquette-Choo, Milad Nasr, Chawin Sitawarin, Gena Gibson, Andreas Terzis, and John \"Four\" Flynn","venue":null,"work_id":"f91fb648-234f-481e-b1eb-9aa3133cd97d","year":null},"citing_paper":{"arxiv_id":"2608.05495","last_updated":"2026-08-06T00:51:46Z","snapshot_observed_at":"2026-08-09T23:10:57.062777Z","submitted_at":"2026-08-06T00:51:46Z","title":"PromptShield Home: Ambient Multimodal Prompt Injection Defense for Smart-Home Agents","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-08T12:07:35.910416Z"},"links":{"citing_paper":"/paper/2608.05495"},"observation_digest":"sha256:ca1ab97e449257f031bec5d983710b00443ecec478d6d3942332a850ef8337fe","observation_id":"f68e74f9-7dd8-490a-9583-b94d83e59ef3","resolution":{"observed_at":"2026-08-08T12:07:37.538116Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T12:07:35.920566Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.05495","last_updated":"2026-08-06T00:51:46Z","snapshot_observed_at":"2026-08-09T23:10:57.062777Z","submitted_at":"2026-08-06T00:51:46Z","title":"PromptShield Home: Ambient Multimodal Prompt Injection Defense for Smart-Home Agents","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-08T12:07:35.920566Z"},"links":{"citing_paper":"/paper/2608.05495"},"observation_digest":"sha256:348ae5b3f9d622e4943f388d2b734324a573dae672f5617cc24a8aebad610d94","observation_id":"a0ed537e-3a22-43cc-bb81-e96e32c961da","resolution":{"observed_at":"2026-08-08T12:07:35.920566Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T12:07:35.924756Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2608.05495","last_updated":"2026-08-06T00:51:46Z","snapshot_observed_at":"2026-08-09T23:10:57.062777Z","submitted_at":"2026-08-06T00:51:46Z","title":"PromptShield Home: Ambient Multimodal Prompt Injection Defense for Smart-Home Agents","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-08T12:07:35.924756Z"},"links":{"citing_paper":"/paper/2608.05495"},"observation_digest":"sha256:651b63ebbb382c4a417d2b96a4f3b058de5588dd24a35c8403f21c2e960ddfc8","observation_id":"9bad4706-8c1a-4f0d-becf-64fe2fbdf463","resolution":{"observed_at":"2026-08-08T12:07:35.924756Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T12:07:35.929046Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2608.05495","last_updated":"2026-08-06T00:51:46Z","snapshot_observed_at":"2026-08-09T23:10:57.062777Z","submitted_at":"2026-08-06T00:51:46Z","title":"PromptShield Home: Ambient Multimodal Prompt Injection Defense for Smart-Home Agents","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-08T12:07:35.929046Z"},"links":{"citing_paper":"/paper/2608.05495"},"observation_digest":"sha256:43a86292dadfbc102e390d77fb0d78729013303e51274a3fe202229017af2b76","observation_id":"b6605796-67ed-448b-be79-50dc32348709","resolution":{"observed_at":"2026-08-08T12:07:35.929046Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T12:07:35.933357Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05495","last_updated":"2026-08-06T00:51:46Z","snapshot_observed_at":"2026-08-09T23:10:57.062777Z","submitted_at":"2026-08-06T00:51:46Z","title":"PromptShield Home: Ambient Multimodal Prompt Injection Defense for Smart-Home Agents","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-08T12:07:35.933357Z"},"links":{"citing_paper":"/paper/2608.05495"},"observation_digest":"sha256:d41f0b3dc66cc4059a71d865857f2e1171b501683a2eff8fdea4fd5e822d5669","observation_id":"aec5c855-2176-4358-ad18-39901a974d7e","resolution":{"observed_at":"2026-08-08T12:07:35.933357Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1007/s00779-014-","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T12:07:36.041680Z","title":null,"venue":null,"work_id":"aa862e79-1881-43c7-8e19-ad8740190d74","year":2015},"citing_paper":{"arxiv_id":"2608.05495","last_updated":"2026-08-06T00:51:46Z","snapshot_observed_at":"2026-08-09T23:10:57.062777Z","submitted_at":"2026-08-06T00:51:46Z","title":"PromptShield Home: Ambient Multimodal Prompt Injection Defense for Smart-Home Agents","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-08T12:07:35.942536Z"},"links":{"citing_paper":"/paper/2608.05495"},"observation_digest":"sha256:524ff2fa6ab90e1dbd7a2f6e918ce6acc3bdfd451b22f6dddbee83acba36354d","observation_id":"6e0cc572-919d-4fd3-a6af-8ca3686707de","resolution":{"observed_at":"2026-08-08T12:07:36.047070Z","resolver_source":"doi_truncated","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2023.10386","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T12:07:36.849871Z","title":null,"venue":null,"work_id":"c43315db-4b46-455f-94ef-8b0cd7cf67b7","year":2023},"citing_paper":{"arxiv_id":"2608.05495","last_updated":"2026-08-06T00:51:46Z","snapshot_observed_at":"2026-08-09T23:10:57.062777Z","submitted_at":"2026-08-06T00:51:46Z","title":"PromptShield Home: Ambient Multimodal Prompt Injection Defense for Smart-Home Agents","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-08T12:07:35.947568Z"},"links":{"citing_paper":"/paper/2608.05495"},"observation_digest":"sha256:8f0f795b7a4a9013891cc6c9bc9f484944440ca17e3448b47c036fc7d2d1df37","observation_id":"e70985eb-90a8-4add-b2c5-872a847d5d3d","resolution":{"observed_at":"2026-08-08T12:07:36.858178Z","resolver_source":"raw_fallback","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T12:07:35.951958Z","title":"Edward Suh","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.05495","last_updated":"2026-08-06T00:51:46Z","snapshot_observed_at":"2026-08-09T23:10:57.062777Z","submitted_at":"2026-08-06T00:51:46Z","title":"PromptShield Home: Ambient Multimodal Prompt Injection Defense for Smart-Home Agents","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-08T12:07:35.951958Z"},"links":{"citing_paper":"/paper/2608.05495"},"observation_digest":"sha256:ab0817d2a679ea42cb69c56356a8c9549c234ddd9113d664c190cf14b76626e6","observation_id":"741060fc-6314-427b-befe-078c3b78bdfd","resolution":{"observed_at":"2026-08-08T12:07:35.951958Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T12:07:35.956234Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.05495","last_updated":"2026-08-06T00:51:46Z","snapshot_observed_at":"2026-08-09T23:10:57.062777Z","submitted_at":"2026-08-06T00:51:46Z","title":"PromptShield Home: Ambient Multimodal Prompt Injection Defense for Smart-Home Agents","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-08T12:07:35.956234Z"},"links":{"citing_paper":"/paper/2608.05495"},"observation_digest":"sha256:68c0cd32ac4ffc3ed9719cb29e999c35c4bd15f628f111566849e8d75029d798","observation_id":"8159b725-7acc-4aa0-b07d-db8322c7dd92","resolution":{"observed_at":"2026-08-08T12:07:35.956234Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T12:07:35.960420Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.05495","last_updated":"2026-08-06T00:51:46Z","snapshot_observed_at":"2026-08-09T23:10:57.062777Z","submitted_at":"2026-08-06T00:51:46Z","title":"PromptShield Home: Ambient Multimodal Prompt Injection Defense for Smart-Home Agents","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-08T12:07:35.960420Z"},"links":{"citing_paper":"/paper/2608.05495"},"observation_digest":"sha256:762778ff58de92af045285ab5450686ee30c066ed875d7021fd586f10b919c4f","observation_id":"3d281f4f-7af4-4db2-9d67-ff2b0c9d12f0","resolution":{"observed_at":"2026-08-08T12:07:35.960420Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1016/j.sbspro.2012.04","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T12:07:36.023649Z","title":null,"venue":null,"work_id":"07f981c8-9009-4bf5-a237-79845da99093","year":2012},"citing_paper":{"arxiv_id":"2608.05495","last_updated":"2026-08-06T00:51:46Z","snapshot_observed_at":"2026-08-09T23:10:57.062777Z","submitted_at":"2026-08-06T00:51:46Z","title":"PromptShield Home: Ambient Multimodal Prompt Injection Defense for Smart-Home Agents","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-08T12:07:35.964757Z"},"links":{"citing_paper":"/paper/2608.05495"},"observation_digest":"sha256:134e47947de2d26fa0e40deeb5562f02582538f11735ca8514bbff5cd5e0094e","observation_id":"d04a1510-3779-44bf-89b9-bc3270f4825c","resolution":{"observed_at":"2026-08-08T12:07:36.029725Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T12:07:35.969620Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.05495","last_updated":"2026-08-06T00:51:46Z","snapshot_observed_at":"2026-08-09T23:10:57.062777Z","submitted_at":"2026-08-06T00:51:46Z","title":"PromptShield Home: Ambient Multimodal Prompt Injection Defense for Smart-Home Agents","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-08T12:07:35.969620Z"},"links":{"citing_paper":"/paper/2608.05495"},"observation_digest":"sha256:cb229b9cc762963a60739b170f2cd1a88c9fd78ee31b72d9df9a62184f295ea2","observation_id":"d5ae12d0-7d09-4149-8f96-51ec3f149787","resolution":{"observed_at":"2026-08-08T12:07:35.969620Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"6270.37602","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T12:07:36.428266Z","title":null,"venue":null,"work_id":"1e75977e-e2a9-4c21-aac9-1217f6756ad4","year":2025},"citing_paper":{"arxiv_id":"2608.05495","last_updated":"2026-08-06T00:51:46Z","snapshot_observed_at":"2026-08-09T23:10:57.062777Z","submitted_at":"2026-08-06T00:51:46Z","title":"PromptShield Home: Ambient Multimodal Prompt Injection Defense for Smart-Home Agents","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-08T12:07:35.974695Z"},"links":{"citing_paper":"/paper/2608.05495"},"observation_digest":"sha256:3058b6dc3212c9dfbe845b4a7d01cdd0e0e5221788bb98e3ee05e677eede1b6c","observation_id":"331d3f98-c503-40b3-bc7a-77be95bb89cf","resolution":{"observed_at":"2026-08-08T12:07:36.435846Z","resolver_source":"raw_fallback","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2414.37947","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T12:07:36.331585Z","title":null,"venue":null,"work_id":"1c9b14e4-4193-4a04-9b05-fa36ebdeefb8","year":2026},"citing_paper":{"arxiv_id":"2608.05495","last_updated":"2026-08-06T00:51:46Z","snapshot_observed_at":"2026-08-09T23:10:57.062777Z","submitted_at":"2026-08-06T00:51:46Z","title":"PromptShield Home: Ambient Multimodal Prompt Injection Defense for Smart-Home Agents","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-08T12:07:35.979580Z"},"links":{"citing_paper":"/paper/2608.05495"},"observation_digest":"sha256:4c9496c5c6e1d613026eeafd6f52c58c7022a248d4cc80559d33e35b186ec4ec","observation_id":"009ccc4b-e441-4fde-a4ce-df66ae929c1a","resolution":{"observed_at":"2026-08-08T12:07:36.339639Z","resolver_source":"raw_fallback","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2604.02623","last_updated":"2026-04-07T14:45:15Z","snapshot_observed_at":"2026-08-05T14:57:29.112440Z","submitted_at":"2026-04-03T01:25:12Z","title":"Poison Once, Exploit Forever: Environment-Injected Memory Poisoning Attacks on Web Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.02623","snapshot_observed_at":"2026-08-08T12:07:35.984734Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.05495","last_updated":"2026-08-06T00:51:46Z","snapshot_observed_at":"2026-08-09T23:10:57.062777Z","submitted_at":"2026-08-06T00:51:46Z","title":"PromptShield Home: Ambient Multimodal Prompt Injection Defense for Smart-Home Agents","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-08T12:07:35.984734Z"},"links":{"cited_paper":"/paper/2604.02623","citing_paper":"/paper/2608.05495"},"observation_digest":"sha256:8eb6bec8e89bb02bad0a4b861f31961f16dac88263f6514ad48a55b6f709727e","observation_id":"4e652a9f-657f-4ddb-8be6-e980271b9c16","resolution":{"observed_at":"2026-08-08T12:07:35.984734Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T12:07:37.504656Z","title":null,"venue":null,"work_id":"afca6ad3-a6bb-43ae-9d49-8d389efd94dc","year":2025},"citing_paper":{"arxiv_id":"2608.05495","last_updated":"2026-08-06T00:51:46Z","snapshot_observed_at":"2026-08-09T23:10:57.062777Z","submitted_at":"2026-08-06T00:51:46Z","title":"PromptShield Home: Ambient Multimodal Prompt Injection Defense for Smart-Home Agents","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-08T12:07:35.990056Z"},"links":{"citing_paper":"/paper/2608.05495"},"observation_digest":"sha256:b22556cc4b5c754858707322ddadaca2a663c116c78926a214680d9bc558853c","observation_id":"b3b09942-f851-43fe-9ecf-2eb55a7cab18","resolution":{"observed_at":"2026-08-08T12:07:37.510036Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.14534","last_updated":"2025-05-20T15:54:45Z","snapshot_observed_at":"2026-08-08T20:01:40.635798Z","submitted_at":"2025-05-20T15:54:45Z","title":"Lessons from Defending Gemini Against Indirect Prompt Injections","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.14534","snapshot_observed_at":"2026-08-08T12:07:35.915388Z","title":"arXiv:2505.14534 [cs.CR] https://arxiv.org/abs/2505.14534","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05495","last_updated":"2026-08-06T00:51:46Z","snapshot_observed_at":"2026-08-09T23:10:57.062777Z","submitted_at":"2026-08-06T00:51:46Z","title":"PromptShield Home: Ambient Multimodal Prompt Injection Defense for Smart-Home Agents","version":1},"reference_index":2025,"source":"pdf_text","source_observed_at":"2026-08-08T12:07:35.915388Z"},"links":{"cited_paper":"/paper/2505.14534","citing_paper":"/paper/2608.05495"},"observation_digest":"sha256:cfbca51583c8ef160d21bed0131ff11e3184bd2517c3529ddbffb486b6bbe145","observation_id":"e9fca53b-2c21-4477-87fe-efe692f2293d","resolution":{"observed_at":"2026-08-08T12:07:35.915388Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2605.03378","last_updated":"2026-07-08T15:04:28Z","snapshot_observed_at":"2026-08-02T02:34:38.609069Z","submitted_at":"2026-05-05T05:37:00Z","title":"ARGUS: Defending LLM Agents Against Context-Aware Prompt Injection","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2605.03378","snapshot_observed_at":"2026-08-08T12:07:35.937763Z","title":"arXiv:2605.03378 [cs.CR] https://arxiv.org/abs/2605.03378","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05495","last_updated":"2026-08-06T00:51:46Z","snapshot_observed_at":"2026-08-09T23:10:57.062777Z","submitted_at":"2026-08-06T00:51:46Z","title":"PromptShield Home: Ambient Multimodal Prompt Injection Defense for Smart-Home Agents","version":1},"reference_index":2026,"source":"pdf_text","source_observed_at":"2026-08-08T12:07:35.937763Z"},"links":{"cited_paper":"/paper/2605.03378","citing_paper":"/paper/2608.05495"},"observation_digest":"sha256:dbd94b2cfc67287e6810ea58402f57858cd02933953d845205759c125643db58","observation_id":"947b619d-fe32-40fd-b27b-1ca66e8b6c80","resolution":{"observed_at":"2026-08-08T12:07:35.937763Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2608.05495","last_updated":"2026-08-06T00:51:46Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-09T23:10:57.062777Z","submitted_at":"2026-08-06T00:51:46Z","title":"PromptShield Home: Ambient Multimodal Prompt Injection Defense for Smart-Home Agents"},"reference_resolution":{"displayed":29,"state_counts":{"malformed_identifier":4,"metadata_mismatch":4,"parse_uncertain":0,"unresolved":15,"verified_exact":4,"verified_fuzzy":2},"total_outbound_references":29},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 10 August 2026, this Paper Citation Record lists 29 of 29 outbound references and 0 inbound Pith citation observations for arXiv:2608.05495."}