{"as_of":"2026-08-12T17:51:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:fcae6a6f415ac8f33949d406dc6a843717c07f40da177026d0086689f0f644a3","coverage":[{"denominator":25,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":25,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-11T04:15:54.074275Z","state":"measured"},{"denominator":25,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":25,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-12T06:34:41.77262+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2608.07808/citation-record","integrity":"/paper/2608.07808/integrity","json":"/paper/2608.07808/citation-record.json","paper":"/paper/2608.07808"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:15:56.778113Z","title":"Declassifying the Responsible Disclosure of the Prompt In- jection Attack Vulnerability of GPT-3","venue":null,"work_id":"191438e5-9e56-4432-8f0b-a48b14d0f127","year":2022},"citing_paper":{"arxiv_id":"2608.07808","last_updated":"2026-08-07T23:16:35Z","snapshot_observed_at":"2026-08-12T17:13:08.298058Z","submitted_at":"2026-08-07T23:16:35Z","title":"The Anatomy of a Prompt Injection: A Component Model for Structured Analysis","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-11T04:15:53.975217Z"},"links":{"citing_paper":"/paper/2608.07808"},"observation_digest":"sha256:e7c7c2b2d69f9dbdeca5b27c8a89de753f22ca244c9d687ad1f636dcf2aeaa62","observation_id":"18f9f91b-0542-4e25-a206-108e9c1be58f","resolution":{"observed_at":"2026-08-11T04:15:56.782150Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2209.02128","last_updated":"2022-09-05T20:29:17Z","snapshot_observed_at":"2026-08-09T15:15:59.049198Z","submitted_at":"2022-09-05T20:29:17Z","title":"Evaluating the Susceptibility of Pre-Trained Language Models via Handcrafted Adversarial Examples","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2209.02128","snapshot_observed_at":"2026-08-11T04:15:53.979753Z","title":"Evaluating the Susceptibility of Pre-Trained Language Models via Handcrafted Adversarial Examples","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2608.07808","last_updated":"2026-08-07T23:16:35Z","snapshot_observed_at":"2026-08-12T17:13:08.298058Z","submitted_at":"2026-08-07T23:16:35Z","title":"The Anatomy of a Prompt Injection: A Component Model for Structured Analysis","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-11T04:15:53.979753Z"},"links":{"cited_paper":"/paper/2209.02128","citing_paper":"/paper/2608.07808"},"observation_digest":"sha256:b13b1ad0687ceedf148b477f6d49942bf8bdf78e36aa151a1ec65fd351f5af17","observation_id":"3f4b0ba8-cdde-4cd3-9998-9d9b7c0c6ee1","resolution":{"observed_at":"2026-08-11T04:15:53.979753Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:15:56.765861Z","title":"Prompt injection attacks against GPT-3.https://simonwillison.net/2022/Sep/ 12/prompt-injection/, 12 September 2022","venue":null,"work_id":"e3000ccd-a50e-463b-93ad-659fc72ffe9d","year":2022},"citing_paper":{"arxiv_id":"2608.07808","last_updated":"2026-08-07T23:16:35Z","snapshot_observed_at":"2026-08-12T17:13:08.298058Z","submitted_at":"2026-08-07T23:16:35Z","title":"The Anatomy of a Prompt Injection: A Component Model for Structured Analysis","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-11T04:15:53.984409Z"},"links":{"citing_paper":"/paper/2608.07808"},"observation_digest":"sha256:75d59a8a36ab8c4f5cc800259bb1b65afe323aa4325d5ac7e7525ecbc07b0591","observation_id":"16de0781-5aef-485e-9815-392c3d90a636","resolution":{"observed_at":"2026-08-11T04:15:56.770925Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:15:56.753521Z","title":"Prompt injection and jailbreaking are not the same thing.https://simonwillison","venue":null,"work_id":"f814b468-babd-43bf-97a8-b0561b4ba54b","year":2024},"citing_paper":{"arxiv_id":"2608.07808","last_updated":"2026-08-07T23:16:35Z","snapshot_observed_at":"2026-08-12T17:13:08.298058Z","submitted_at":"2026-08-07T23:16:35Z","title":"The Anatomy of a Prompt Injection: A Component Model for Structured Analysis","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-11T04:15:53.988010Z"},"links":{"citing_paper":"/paper/2608.07808"},"observation_digest":"sha256:f729c194f7ca62966548b0ef1449522c80ea74095eced289e383206032d3f53e","observation_id":"807cc4d1-ad42-441b-a006-59122687a618","resolution":{"observed_at":"2026-08-11T04:15:56.758227Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.13169","last_updated":"2025-07-17T14:33:36Z","snapshot_observed_at":"2026-08-07T22:34:49.318621Z","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2507.13169","snapshot_observed_at":"2026-08-11T04:15:53.991771Z","title":"Prompt Injection 2.0: Hybrid AI Threats","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.07808","last_updated":"2026-08-07T23:16:35Z","snapshot_observed_at":"2026-08-12T17:13:08.298058Z","submitted_at":"2026-08-07T23:16:35Z","title":"The Anatomy of a Prompt Injection: A Component Model for Structured Analysis","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-11T04:15:53.991771Z"},"links":{"cited_paper":"/paper/2507.13169","citing_paper":"/paper/2608.07808"},"observation_digest":"sha256:fced73e48963379dab8c9f2438d046afa3a238d24e237499bef4a5d6cf3a1cae","observation_id":"3e6f750e-bd37-43e2-be17-717b63583de1","resolution":{"observed_at":"2026-08-11T04:15:53.991771Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2510.13893","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:15:56.573226Z","title":"Guarding the Guardrails: A Taxonomy-Driven Approach to Jailbreak Detection","venue":null,"work_id":"152e6011-34ae-4927-affa-179f2f642559","year":2026},"citing_paper":{"arxiv_id":"2608.07808","last_updated":"2026-08-07T23:16:35Z","snapshot_observed_at":"2026-08-12T17:13:08.298058Z","submitted_at":"2026-08-07T23:16:35Z","title":"The Anatomy of a Prompt Injection: A Component Model for Structured Analysis","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-11T04:15:53.996132Z"},"links":{"citing_paper":"/paper/2608.07808"},"observation_digest":"sha256:1efb85c50d5664c142bbde537aff911421841b540167a39ddba63727ed64c130","observation_id":"795f5a43-e11a-423f-94d4-342e47dd301f","resolution":{"observed_at":"2026-08-11T04:15:56.581488Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:15:56.741119Z","title":"Do Anything Now","venue":null,"work_id":"c6bee349-e495-4fa9-bae0-7238f8a7e13c","year":2024},"citing_paper":{"arxiv_id":"2608.07808","last_updated":"2026-08-07T23:16:35Z","snapshot_observed_at":"2026-08-12T17:13:08.298058Z","submitted_at":"2026-08-07T23:16:35Z","title":"The Anatomy of a Prompt Injection: A Component Model for Structured Analysis","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-11T04:15:54.000258Z"},"links":{"citing_paper":"/paper/2608.07808"},"observation_digest":"sha256:2b2909b2d11ba2c95bc61f37882719d7c13a4b1290849dda7e3419ef1cdfe5cc","observation_id":"f1610e89-e14a-4590-ad2e-ed2a3e4c7eac","resolution":{"observed_at":"2026-08-11T04:15:56.745574Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2311.08268","last_updated":"2024-04-07T03:04:10Z","snapshot_observed_at":"2026-08-11T18:59:58.005945Z","submitted_at":"2023-11-14T16:02:16Z","title":"A Wolf in Sheep's Clothing: Generalized Nested Jailbreak Prompts can Fool Large Language Models Easily","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.08268","snapshot_observed_at":"2026-08-11T04:15:54.007992Z","title":"A Wolf in Sheep’s Clothing: Generalized Nested Jailbreak Prompts Can Fool Large Language Models Easily","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.07808","last_updated":"2026-08-07T23:16:35Z","snapshot_observed_at":"2026-08-12T17:13:08.298058Z","submitted_at":"2026-08-07T23:16:35Z","title":"The Anatomy of a Prompt Injection: A Component Model for Structured Analysis","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-11T04:15:54.007992Z"},"links":{"cited_paper":"/paper/2311.08268","citing_paper":"/paper/2608.07808"},"observation_digest":"sha256:81edf0e2bd828f1a13dff75238331d8140ffa0eb2b5b033bce0f98d2cdabdc77","observation_id":"120d8d3f-1836-4188-a090-5fb9de627d79","resolution":{"observed_at":"2026-08-11T04:15:54.007992Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:15:54.012075Z","title":"Adversarial Machine Learning: A Taxonomy and Terminology of Attacks and Mitigations","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.07808","last_updated":"2026-08-07T23:16:35Z","snapshot_observed_at":"2026-08-12T17:13:08.298058Z","submitted_at":"2026-08-07T23:16:35Z","title":"The Anatomy of a Prompt Injection: A Component Model for Structured Analysis","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-11T04:15:54.012075Z"},"links":{"citing_paper":"/paper/2608.07808"},"observation_digest":"sha256:f4d60afc0160b0cc1915f80fe50b414402fe1603586e3abd6fa7645e3eb2dc9c","observation_id":"2d5a5605-1dba-4f7d-819a-21dde29b984d","resolution":{"observed_at":"2026-08-11T04:15:54.012075Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:15:56.727899Z","title":"OWASP Top 10 for Large Language Model Appli- cations (Version 2025), released 18 November 2024","venue":null,"work_id":"0e18fa79-f6df-4dc4-a717-7c4201c60417","year":2025},"citing_paper":{"arxiv_id":"2608.07808","last_updated":"2026-08-07T23:16:35Z","snapshot_observed_at":"2026-08-12T17:13:08.298058Z","submitted_at":"2026-08-07T23:16:35Z","title":"The Anatomy of a Prompt Injection: A Component Model for Structured Analysis","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-11T04:15:54.016231Z"},"links":{"citing_paper":"/paper/2608.07808"},"observation_digest":"sha256:7792d1104975f3295a72dc06b97eb12bda4b717f1644fd2cdda4bca447a26c21","observation_id":"86bf491b-a323-4d6f-a478-d4eccbfa8e58","resolution":{"observed_at":"2026-08-11T04:15:56.732361Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.05499","last_updated":"2025-12-29T02:25:27Z","snapshot_observed_at":"2026-07-06T15:40:27.639368Z","submitted_at":"2023-06-08T18:43:11Z","title":"Prompt Injection attack against LLM-integrated Applications","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.05499","snapshot_observed_at":"2026-08-11T04:15:54.020127Z","title":"Prompt Injection Attack against LLM-Integrated Applications","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.07808","last_updated":"2026-08-07T23:16:35Z","snapshot_observed_at":"2026-08-12T17:13:08.298058Z","submitted_at":"2026-08-07T23:16:35Z","title":"The Anatomy of a Prompt Injection: A Component Model for Structured Analysis","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-11T04:15:54.020127Z"},"links":{"cited_paper":"/paper/2306.05499","citing_paper":"/paper/2608.07808"},"observation_digest":"sha256:5e17ab341778de1eb964ab76ba559b081e16c8ce47197642fc5f67f5bf888499","observation_id":"a5920229-351b-4e1f-bac8-e4c2618b8e7a","resolution":{"observed_at":"2026-08-11T04:15:54.020127Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:15:54.024689Z","title":"The Promptware Kill Chain: How Prompt Injections Gradually Evolved Into a Multistep Malware Delivery Mechanism","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.07808","last_updated":"2026-08-07T23:16:35Z","snapshot_observed_at":"2026-08-12T17:13:08.298058Z","submitted_at":"2026-08-07T23:16:35Z","title":"The Anatomy of a Prompt Injection: A Component Model for Structured Analysis","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-11T04:15:54.024689Z"},"links":{"citing_paper":"/paper/2608.07808"},"observation_digest":"sha256:0581a038b4d4f220d0ddabdcbc1165fc05d0021abca8bab1510e7f465c2d3521","observation_id":"269fc590-447d-485c-be80-5d8171ea1431","resolution":{"observed_at":"2026-08-11T04:15:54.024689Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:15:56.715937Z","title":"Breaking Down EchoLeak, the First Zero-Click AI Vulnerability Enabling Data Exfiltration from Microsoft 365 Copilot","venue":null,"work_id":"7446a8b1-e281-42e3-94f0-9c406c5efa11","year":2025},"citing_paper":{"arxiv_id":"2608.07808","last_updated":"2026-08-07T23:16:35Z","snapshot_observed_at":"2026-08-12T17:13:08.298058Z","submitted_at":"2026-08-07T23:16:35Z","title":"The Anatomy of a Prompt Injection: A Component Model for Structured Analysis","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-11T04:15:54.028857Z"},"links":{"citing_paper":"/paper/2608.07808"},"observation_digest":"sha256:d434e0fdd0cf96507015030b1ddc884e43608589a583a2b7236ab7b98065b5f9","observation_id":"3f3ab5cc-b5b2-47e8-a055-0a856ffe09fb","resolution":{"observed_at":"2026-08-11T04:15:56.719690Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.00898","last_updated":"2024-01-31T19:52:00Z","snapshot_observed_at":"2026-08-06T01:29:20.953609Z","submitted_at":"2024-01-31T19:52:00Z","title":"An Early Categorization of Prompt Injection Attacks on Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.00898","snapshot_observed_at":"2026-08-11T04:15:54.032865Z","title":"An Early Categorization of Prompt Injection Attacks on Large Language Models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.07808","last_updated":"2026-08-07T23:16:35Z","snapshot_observed_at":"2026-08-12T17:13:08.298058Z","submitted_at":"2026-08-07T23:16:35Z","title":"The Anatomy of a Prompt Injection: A Component Model for Structured Analysis","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-11T04:15:54.032865Z"},"links":{"cited_paper":"/paper/2402.00898","citing_paper":"/paper/2608.07808"},"observation_digest":"sha256:c14fd67dceee60dee90d72a34a311d16f02fd4c5b84edc2cd2378b8bf1553a88","observation_id":"b874e385-5546-464d-8b84-52e97bf6bcf4","resolution":{"observed_at":"2026-08-11T04:15:54.032865Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:15:56.704150Z","title":"Prompt injection is not SQL injection (it may be worse)","venue":null,"work_id":"b25fcb6a-3a57-4029-a64f-ab892d9ef334","year":2025},"citing_paper":{"arxiv_id":"2608.07808","last_updated":"2026-08-07T23:16:35Z","snapshot_observed_at":"2026-08-12T17:13:08.298058Z","submitted_at":"2026-08-07T23:16:35Z","title":"The Anatomy of a Prompt Injection: A Component Model for Structured Analysis","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-11T04:15:54.037606Z"},"links":{"citing_paper":"/paper/2608.07808"},"observation_digest":"sha256:634c2fb03278a026bfad6457a4c360df2fd163c15a1ac6e325af4ab909286e3a","observation_id":"f6b10693-8132-4306-9f02-f5d053178666","resolution":{"observed_at":"2026-08-11T04:15:56.708415Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:15:56.692539Z","title":"NIST Phish Scale User Guide","venue":null,"work_id":"63296eb1-c33e-4004-878b-369f4049d931","year":2023},"citing_paper":{"arxiv_id":"2608.07808","last_updated":"2026-08-07T23:16:35Z","snapshot_observed_at":"2026-08-12T17:13:08.298058Z","submitted_at":"2026-08-07T23:16:35Z","title":"The Anatomy of a Prompt Injection: A Component Model for Structured Analysis","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-11T04:15:54.041426Z"},"links":{"citing_paper":"/paper/2608.07808"},"observation_digest":"sha256:f792e15e7442e99c000a1e11d8f4f2e5001250ed36055ba2f85624085e9c2694","observation_id":"ab5b6bf0-43af-4079-a84e-b4133241469b","resolution":{"observed_at":"2026-08-11T04:15:56.696467Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:15:56.679697Z","title":"In the Wild: Malware Prototype with Embedded Prompt Injection","venue":null,"work_id":"a0c19886-6582-4539-86b5-335b482ca4fc","year":2025},"citing_paper":{"arxiv_id":"2608.07808","last_updated":"2026-08-07T23:16:35Z","snapshot_observed_at":"2026-08-12T17:13:08.298058Z","submitted_at":"2026-08-07T23:16:35Z","title":"The Anatomy of a Prompt Injection: A Component Model for Structured Analysis","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-11T04:15:54.045200Z"},"links":{"citing_paper":"/paper/2608.07808"},"observation_digest":"sha256:316cb45cee832c4a6a0cb1572b1ccb4f70f2eeb0c11ebdac53ff0ce2e5788e9e","observation_id":"04b8c06a-7741-481c-bf2c-909fd14be758","resolution":{"observed_at":"2026-08-11T04:15:56.683999Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-08-12T09:06:50.363435Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-08-11T04:15:54.049384Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.07808","last_updated":"2026-08-07T23:16:35Z","snapshot_observed_at":"2026-08-12T17:13:08.298058Z","submitted_at":"2026-08-07T23:16:35Z","title":"The Anatomy of a Prompt Injection: A Component Model for Structured Analysis","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-11T04:15:54.049384Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2608.07808"},"observation_digest":"sha256:cdae0fdefe76eef60a67d7132ba73dc14f8c4bd8f6044b80541ab1e7675bee1d","observation_id":"549b2043-cea3-4bb0-bba3-046fb3af7781","resolution":{"observed_at":"2026-08-11T04:15:54.049384Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.01833","last_updated":"2025-02-26T13:41:41Z","snapshot_observed_at":"2026-08-03T07:26:39.431128Z","submitted_at":"2024-04-02T10:45:49Z","title":"Great, Now Write an Article About That: The Crescendo Multi-Turn LLM Jailbreak Attack","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.01833","snapshot_observed_at":"2026-08-11T04:15:54.053419Z","title":"Great, Now Write an Article About That: The Crescendo Multi-Turn LLM Jailbreak Attack","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.07808","last_updated":"2026-08-07T23:16:35Z","snapshot_observed_at":"2026-08-12T17:13:08.298058Z","submitted_at":"2026-08-07T23:16:35Z","title":"The Anatomy of a Prompt Injection: A Component Model for Structured Analysis","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-11T04:15:54.053419Z"},"links":{"cited_paper":"/paper/2404.01833","citing_paper":"/paper/2608.07808"},"observation_digest":"sha256:c5fefd802063dc5bb219182809a54f355ddb39e12cbf6ea1a06998df3489f716","observation_id":"923da724-b7fb-4db6-bd9e-aaf4d68207a3","resolution":{"observed_at":"2026-08-11T04:15:54.053419Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:15:56.667100Z","title":"Many-shot Jailbreaking","venue":null,"work_id":"142e180c-7f8e-41c4-b52e-c8fd9cfbd4a8","year":2024},"citing_paper":{"arxiv_id":"2608.07808","last_updated":"2026-08-07T23:16:35Z","snapshot_observed_at":"2026-08-12T17:13:08.298058Z","submitted_at":"2026-08-07T23:16:35Z","title":"The Anatomy of a Prompt Injection: A Component Model for Structured Analysis","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-11T04:15:54.057615Z"},"links":{"citing_paper":"/paper/2608.07808"},"observation_digest":"sha256:836a95fb8305605765cc6e66f31579118d432f13f0178bed77419a1d368cec5c","observation_id":"b026ca45-2577-4f52-9794-1eb075049a14","resolution":{"observed_at":"2026-08-11T04:15:56.671075Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:15:56.653595Z","title":"STIX Version 2.1","venue":null,"work_id":"0110fd17-5136-44f4-acb4-fba1f77810ef","year":2021},"citing_paper":{"arxiv_id":"2608.07808","last_updated":"2026-08-07T23:16:35Z","snapshot_observed_at":"2026-08-12T17:13:08.298058Z","submitted_at":"2026-08-07T23:16:35Z","title":"The Anatomy of a Prompt Injection: A Component Model for Structured Analysis","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-11T04:15:54.062319Z"},"links":{"citing_paper":"/paper/2608.07808"},"observation_digest":"sha256:f9f0b1efaa2df49e01993316d0ff147def15e32f80b862b8d4b05b6298a6c91b","observation_id":"d4785464-1ff1-4958-b08a-b6aa6401bfa6","resolution":{"observed_at":"2026-08-11T04:15:56.657712Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:15:56.640751Z","title":"TAXII Version 2.1","venue":null,"work_id":"c1e1b894-4809-48f5-ad63-8184cd32ace0","year":2021},"citing_paper":{"arxiv_id":"2608.07808","last_updated":"2026-08-07T23:16:35Z","snapshot_observed_at":"2026-08-12T17:13:08.298058Z","submitted_at":"2026-08-07T23:16:35Z","title":"The Anatomy of a Prompt Injection: A Component Model for Structured Analysis","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-11T04:15:54.066028Z"},"links":{"citing_paper":"/paper/2608.07808"},"observation_digest":"sha256:5d37ab152aff7d1a3b3e9fbe48214711a413713a81ff2753a151366a74b385ea","observation_id":"bad3fc36-6766-4841-b70f-3bb5e02ae1bc","resolution":{"observed_at":"2026-08-11T04:15:56.645031Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:15:56.627704Z","title":"MITRE ATLAS (Adversarial Threat Landscape for Artificial- Intelligence Systems).https://atlas.mitre.org/","venue":null,"work_id":"12b40e75-6d74-4648-a885-600ad4303ef4","year":null},"citing_paper":{"arxiv_id":"2608.07808","last_updated":"2026-08-07T23:16:35Z","snapshot_observed_at":"2026-08-12T17:13:08.298058Z","submitted_at":"2026-08-07T23:16:35Z","title":"The Anatomy of a Prompt Injection: A Component Model for Structured Analysis","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-11T04:15:54.069912Z"},"links":{"citing_paper":"/paper/2608.07808"},"observation_digest":"sha256:a135003786590a03eda97fb7ebc2f50f0bb0ac618730078b87cfd35b38ca9718","observation_id":"dea7947e-5ef7-4687-b2f1-1c7a0faf0c71","resolution":{"observed_at":"2026-08-11T04:15:56.632219Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:15:56.614669Z","title":"MITRE ATT&CK.https://attack.mitre.org/ 14","venue":null,"work_id":"88c123df-10af-4d02-8930-9d3921c3958c","year":null},"citing_paper":{"arxiv_id":"2608.07808","last_updated":"2026-08-07T23:16:35Z","snapshot_observed_at":"2026-08-12T17:13:08.298058Z","submitted_at":"2026-08-07T23:16:35Z","title":"The Anatomy of a Prompt Injection: A Component Model for Structured Analysis","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-11T04:15:54.074275Z"},"links":{"citing_paper":"/paper/2608.07808"},"observation_digest":"sha256:2bcb60e736f04577660dd529c9d767b16dc64ff3d9ff01a3abdb7d4669faf1f8","observation_id":"7a6997fc-6032-40b6-9bb4-a7f87d1b3f10","resolution":{"observed_at":"2026-08-11T04:15:56.619232Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2308.03825","last_updated":"2024-05-15T12:06:31Z","snapshot_observed_at":"2026-07-06T16:03:34.432602Z","submitted_at":"2023-08-07T16:55:20Z","title":"\"Do Anything Now\": Characterizing and Evaluating In-The-Wild Jailbreak Prompts on Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.03825","snapshot_observed_at":"2026-08-11T04:15:54.003944Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.07808","last_updated":"2026-08-07T23:16:35Z","snapshot_observed_at":"2026-08-12T17:13:08.298058Z","submitted_at":"2026-08-07T23:16:35Z","title":"The Anatomy of a Prompt Injection: A Component Model for Structured Analysis","version":1},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-11T04:15:54.003944Z"},"links":{"cited_paper":"/paper/2308.03825","citing_paper":"/paper/2608.07808"},"observation_digest":"sha256:72baa1f4b525bc49532002400974bb2ff93e4c840850fdb91ae4ebe8a11a1785","observation_id":"a95b24a9-b5d5-43bf-9687-fb757cefe83a","resolution":{"observed_at":"2026-08-11T04:15:54.003944Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2608.07808","last_updated":"2026-08-07T23:16:35Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-12T17:13:08.298058Z","submitted_at":"2026-08-07T23:16:35Z","title":"The Anatomy of a Prompt Injection: A Component Model for Structured Analysis"},"reference_resolution":{"displayed":25,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":10,"verified_exact":1,"verified_fuzzy":14},"total_outbound_references":25},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"thesis":"As of 12 August 2026, this Paper Citation Record lists 25 of 25 outbound references and 0 inbound Pith citation observations for arXiv:2608.07808."}