{"as_of":"2026-08-09T13:41:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:6c205524d20590f2eb2d9c33c31ee169f588324a0205ff00cec0638341f43066","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":17,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":17,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":17,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":17,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-08T12:17:45.934346Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":1,"source":"pith","source_observed_at":"2026-08-05T02:28:24.338817Z","state":"measured"}],"external_citation_measurements":[{"count":14,"observed_at":"2026-08-05T02:28:24.338817Z","source":"pith"}],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2209.02128","last_updated":"2022-09-05T20:29:17Z","snapshot_observed_at":"2026-08-04T07:20:43.897179Z","submitted_at":"2022-09-05T20:29:17Z","title":"Evaluating the Susceptibility of Pre-Trained Language Models via Handcrafted Adversarial Examples","version":1},"cited_work":{"arxiv_id":"2209.02128","doi":"10.48550/arxiv.2209.02128","metadata_source":"pith","pith_arxiv_id":"2209.02128","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Branch, Jonathan Rodriguez Cefalu, Jeremy McHugh, Leyla Hujer, Aditya Bahl, Daniel del Castillo Iglesias, Ron Heichman, and Ramesh Darwishi","venue":"cs.CL","work_id":"217a3646-c7b7-45c8-9527-b642d3952d7c","year":2022},"citing_paper":{"arxiv_id":"2211.09527","last_updated":"2022-11-17T13:43:20Z","snapshot_observed_at":"2026-07-06T14:19:47.424778Z","submitted_at":"2022-11-17T13:43:20Z","title":"Ignore Previous Prompt: Attack Techniques For Language Models","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-05-11T13:59:31.213830Z"},"links":{"cited_paper":"/paper/2209.02128","citing_paper":"/paper/2211.09527"},"observation_digest":"sha256:daa5b99136a299338177e846b5cc909b18a4ed966b0d17a9c621df6cef9b5a03","observation_id":"3b371387-9a4b-4daa-bf15-b41288df3b84","resolution":{"observed_at":"2026-05-11T13:59:31.513670Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2209.02128","last_updated":"2022-09-05T20:29:17Z","snapshot_observed_at":"2026-08-04T07:20:43.897179Z","submitted_at":"2022-09-05T20:29:17Z","title":"Evaluating the Susceptibility of Pre-Trained Language Models via Handcrafted Adversarial Examples","version":1},"cited_work":{"arxiv_id":"2209.02128","doi":"10.48550/arxiv.2209.02128","metadata_source":"pith","pith_arxiv_id":"2209.02128","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Branch, Jonathan Rodriguez Cefalu, Jeremy McHugh, Leyla Hujer, Aditya Bahl, Daniel del Castillo Iglesias, Ron Heichman, and Ramesh Darwishi","venue":"cs.CL","work_id":"217a3646-c7b7-45c8-9527-b642d3952d7c","year":2022},"citing_paper":{"arxiv_id":"2408.12935","last_updated":"2026-05-13T07:56:42Z","snapshot_observed_at":"2026-08-02T12:48:59.218457Z","submitted_at":"2024-08-23T09:33:48Z","title":"AI Safety Landscape for Large Language Models: Taxonomy, State-of-the-art, and Future Directions","version":4},"reference_index":76,"source":"pdf_text","source_observed_at":"2026-05-23T21:54:26.670284Z"},"links":{"cited_paper":"/paper/2209.02128","citing_paper":"/paper/2408.12935"},"observation_digest":"sha256:41c3f72b9f955e92411375cc7dada8e8e0cec1d626a9aab2cfb42cb2f4be3355","observation_id":"b09164d2-77c0-40e1-abe7-75189e1e4185","resolution":{"observed_at":"2026-05-23T21:55:50.365866Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2209.02128","last_updated":"2022-09-05T20:29:17Z","snapshot_observed_at":"2026-08-04T07:20:43.897179Z","submitted_at":"2022-09-05T20:29:17Z","title":"Evaluating the Susceptibility of Pre-Trained Language Models via Handcrafted Adversarial Examples","version":1},"cited_work":{"arxiv_id":"2209.02128","doi":"10.48550/arxiv.2209.02128","metadata_source":"pith","pith_arxiv_id":"2209.02128","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Branch, Jonathan Rodriguez Cefalu, Jeremy McHugh, Leyla Hujer, Aditya Bahl, Daniel del Castillo Iglesias, Ron Heichman, and Ramesh Darwishi","venue":"cs.CL","work_id":"217a3646-c7b7-45c8-9527-b642d3952d7c","year":2022},"citing_paper":{"arxiv_id":"2412.05579","last_updated":"2024-12-10T05:49:12Z","snapshot_observed_at":"2026-07-31T01:42:39.468673Z","submitted_at":"2024-12-07T08:07:24Z","title":"LLMs-as-Judges: A Comprehensive Survey on LLM-based Evaluation Methods","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-05-11T23:08:34.312466Z"},"links":{"cited_paper":"/paper/2209.02128","citing_paper":"/paper/2412.05579"},"observation_digest":"sha256:f0a0b9800e8ab935ce983f754d5f0ebf5968f0b94f66c0569969d4f5a8ff0f08","observation_id":"400de984-0bc0-444f-b11c-c0fd607fec89","resolution":{"observed_at":"2026-05-11T23:08:36.051473Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2209.02128","last_updated":"2022-09-05T20:29:17Z","snapshot_observed_at":"2026-08-04T07:20:43.897179Z","submitted_at":"2022-09-05T20:29:17Z","title":"Evaluating the Susceptibility of Pre-Trained Language Models via Handcrafted Adversarial Examples","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2209.02128","snapshot_observed_at":"2026-08-08T12:17:45.934346Z","title":"J., Cefalu, J","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2502.07586","last_updated":"2025-02-11T14:34:05Z","snapshot_observed_at":"2026-08-09T07:26:06.994955Z","submitted_at":"2025-02-11T14:34:05Z","title":"We Can't Understand AI Using our Existing Vocabulary","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-08T12:17:45.934346Z"},"links":{"cited_paper":"/paper/2209.02128","citing_paper":"/paper/2502.07586"},"observation_digest":"sha256:e66cd28228f023f9cc457b92adea1bcbb9cdb9000e437fd5a315fc63dc65b2da","observation_id":"5133694b-32a6-4655-9724-0916febd92b5","resolution":{"observed_at":"2026-08-08T12:17:45.934346Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2209.02128","last_updated":"2022-09-05T20:29:17Z","snapshot_observed_at":"2026-08-04T07:20:43.897179Z","submitted_at":"2022-09-05T20:29:17Z","title":"Evaluating the Susceptibility of Pre-Trained Language Models via Handcrafted Adversarial Examples","version":1},"cited_work":{"arxiv_id":"2209.02128","doi":"10.48550/arxiv.2209.02128","metadata_source":"pith","pith_arxiv_id":"2209.02128","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Branch, Jonathan Rodriguez Cefalu, Jeremy McHugh, Leyla Hujer, Aditya Bahl, Daniel del Castillo Iglesias, Ron Heichman, and Ramesh Darwishi","venue":"cs.CL","work_id":"217a3646-c7b7-45c8-9527-b642d3952d7c","year":2022},"citing_paper":{"arxiv_id":"2504.19793","last_updated":"2025-08-24T03:28:21Z","snapshot_observed_at":"2026-08-01T07:24:09.967062Z","submitted_at":"2025-04-28T13:36:43Z","title":"Prompt Injection Attack to Tool Selection in LLM Agents","version":3},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-05-16T17:08:28.933831Z"},"links":{"cited_paper":"/paper/2209.02128","citing_paper":"/paper/2504.19793"},"observation_digest":"sha256:cb693d65c256b60e1b393d70745fc6708b5538ba410f31297a0d53833eb6076f","observation_id":"1d69e912-7acc-42a2-9b0f-8509d1ed22e5","resolution":{"observed_at":"2026-05-16T17:08:29.093089Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2209.02128","last_updated":"2022-09-05T20:29:17Z","snapshot_observed_at":"2026-08-04T07:20:43.897179Z","submitted_at":"2022-09-05T20:29:17Z","title":"Evaluating the Susceptibility of Pre-Trained Language Models via Handcrafted Adversarial Examples","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2209.02128","snapshot_observed_at":"2026-08-07T12:35:30.932818Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2505.24613","last_updated":"2025-05-30T14:04:30Z","snapshot_observed_at":"2026-08-08T07:31:58.850783Z","submitted_at":"2025-05-30T14:04:30Z","title":"When Harry Meets Superman: The Role of The Interlocutor in Persona-Based Dialogue Generation","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:30.932818Z"},"links":{"cited_paper":"/paper/2209.02128","citing_paper":"/paper/2505.24613"},"observation_digest":"sha256:2f3956ff9f1d9aacab24e708c00ad74d6d8beebc4d16225623a1e8efd3090ee7","observation_id":"855e88f4-4878-4a85-8dd6-6fccab50405a","resolution":{"observed_at":"2026-08-07T12:35:30.932818Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2209.02128","last_updated":"2022-09-05T20:29:17Z","snapshot_observed_at":"2026-08-04T07:20:43.897179Z","submitted_at":"2022-09-05T20:29:17Z","title":"Evaluating the Susceptibility of Pre-Trained Language Models via Handcrafted Adversarial Examples","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2209.02128","snapshot_observed_at":"2026-08-06T16:34:03.088522Z","title":"J., et al","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.13169","last_updated":"2025-07-17T14:33:36Z","snapshot_observed_at":"2026-08-07T22:34:49.318621Z","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-06T16:34:03.088522Z"},"links":{"cited_paper":"/paper/2209.02128","citing_paper":"/paper/2507.13169"},"observation_digest":"sha256:c5f70317f1fb0fbbdcb0b12316f9c60c35f0b1eb43d0606926e4bb2db6aab904","observation_id":"e22e7f76-32cd-4cb3-869f-3183830e0afa","resolution":{"observed_at":"2026-08-06T16:34:03.088522Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2209.02128","last_updated":"2022-09-05T20:29:17Z","snapshot_observed_at":"2026-08-04T07:20:43.897179Z","submitted_at":"2022-09-05T20:29:17Z","title":"Evaluating the Susceptibility of Pre-Trained Language Models via Handcrafted Adversarial Examples","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2209.02128","snapshot_observed_at":"2026-08-06T17:35:47.982288Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.14202","last_updated":"2025-07-14T17:41:12Z","snapshot_observed_at":"2026-08-08T03:22:49.699348Z","submitted_at":"2025-07-14T17:41:12Z","title":"PRM-Free Security Alignment of Large Models via Red Teaming and Adversarial Training","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-06T17:35:47.982288Z"},"links":{"cited_paper":"/paper/2209.02128","citing_paper":"/paper/2507.14202"},"observation_digest":"sha256:79d8746bb1e819b96e1833855dd801c60624a56e4236ca06eecb4788af01323b","observation_id":"bafa7bb3-a8c0-48c3-884f-7ca91f77b74e","resolution":{"observed_at":"2026-08-06T17:35:47.982288Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2209.02128","last_updated":"2022-09-05T20:29:17Z","snapshot_observed_at":"2026-08-04T07:20:43.897179Z","submitted_at":"2022-09-05T20:29:17Z","title":"Evaluating the Susceptibility of Pre-Trained Language Models via Handcrafted Adversarial Examples","version":1},"cited_work":{"arxiv_id":"2209.02128","doi":"10.48550/arxiv.2209.02128","metadata_source":"pith","pith_arxiv_id":"2209.02128","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Branch, Jonathan Rodriguez Cefalu, Jeremy McHugh, Leyla Hujer, Aditya Bahl, Daniel del Castillo Iglesias, Ron Heichman, and Ramesh Darwishi","venue":"cs.CL","work_id":"217a3646-c7b7-45c8-9527-b642d3952d7c","year":2022},"citing_paper":{"arxiv_id":"2508.03793","last_updated":"2026-04-17T19:17:37Z","snapshot_observed_at":"2026-07-06T22:08:21.728198Z","submitted_at":"2025-08-05T17:56:51Z","title":"AttnTrace: Contextual Attribution of Prompt Injection and Knowledge Corruption","version":3},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-05-19T00:33:53.280563Z"},"links":{"cited_paper":"/paper/2209.02128","citing_paper":"/paper/2508.03793"},"observation_digest":"sha256:a96363ea5d23b8e3d34fc504d8ae3f328abb98f774e9c0e987579aa64bc641ac","observation_id":"91a560c7-7186-400c-9d30-87b807293a25","resolution":{"observed_at":"2026-05-19T00:36:56.393395Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2209.02128","last_updated":"2022-09-05T20:29:17Z","snapshot_observed_at":"2026-08-04T07:20:43.897179Z","submitted_at":"2022-09-05T20:29:17Z","title":"Evaluating the Susceptibility of Pre-Trained Language Models via Handcrafted Adversarial Examples","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2209.02128","snapshot_observed_at":"2026-08-04T09:39:01.380118Z","title":"org/abs/2209.02128","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2510.14365","last_updated":"2026-05-28T06:29:20Z","snapshot_observed_at":"2026-08-07T19:47:51.731687Z","submitted_at":"2025-10-16T06:59:58Z","title":"Understanding the Ability of LLMs to Handle Character-Level Perturbation","version":4},"reference_index":2022,"source":"pdf_text","source_observed_at":"2026-08-04T09:39:01.380118Z"},"links":{"cited_paper":"/paper/2209.02128","citing_paper":"/paper/2510.14365"},"observation_digest":"sha256:3ab7f42c19c79370418556457ca0188ca2ed31a2f5f00fd7eea06a1c2ffd09f9","observation_id":"f6ce3dee-7837-4aa8-a3e7-531ae16abb05","resolution":{"observed_at":"2026-08-04T09:39:01.380118Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2209.02128","last_updated":"2022-09-05T20:29:17Z","snapshot_observed_at":"2026-08-04T07:20:43.897179Z","submitted_at":"2022-09-05T20:29:17Z","title":"Evaluating the Susceptibility of Pre-Trained Language Models via Handcrafted Adversarial Examples","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2209.02128","snapshot_observed_at":"2026-08-04T08:06:09.274751Z","title":"Evaluating the susceptibility of pre-trained language models via handcrafted adversarial examples.arXiv preprint arXiv:2209.02128, 2022","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2510.22963","last_updated":"2026-06-19T20:25:06Z","snapshot_observed_at":"2026-08-04T08:06:05.944327Z","submitted_at":"2025-10-27T03:37:41Z","title":"When Compression Becomes an Attack Surface: Black-Box Attacks on Prompt-Compressed LLM Agents","version":4},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-04T08:06:09.274751Z"},"links":{"cited_paper":"/paper/2209.02128","citing_paper":"/paper/2510.22963"},"observation_digest":"sha256:66738153a3ec9dfc69b73e5d7b2a25d32174b896ce4359d84e0eb4cbc4f31e5d","observation_id":"56e31609-71b5-469c-889b-6f73139d5999","resolution":{"observed_at":"2026-08-04T08:06:09.274751Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2209.02128","last_updated":"2022-09-05T20:29:17Z","snapshot_observed_at":"2026-08-04T07:20:43.897179Z","submitted_at":"2022-09-05T20:29:17Z","title":"Evaluating the Susceptibility of Pre-Trained Language Models via Handcrafted Adversarial Examples","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2209.02128","snapshot_observed_at":"2026-08-04T07:06:37.731914Z","title":"Evaluating the susceptibility of pre-trained language models via handcrafted adversarial examples.arXiv preprint arXiv:2209.02128, 2022","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-07T23:25:01.868478Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:37.731914Z"},"links":{"cited_paper":"/paper/2209.02128","citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:4a90521d3a3e0e70aa9f884147ca8d8626cf38b3a393ac28e3f541569771327c","observation_id":"c9883fca-74ed-41df-ad2e-2ea9cc0eb131","resolution":{"observed_at":"2026-08-04T07:06:37.731914Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2209.02128","last_updated":"2022-09-05T20:29:17Z","snapshot_observed_at":"2026-08-04T07:20:43.897179Z","submitted_at":"2022-09-05T20:29:17Z","title":"Evaluating the Susceptibility of Pre-Trained Language Models via Handcrafted Adversarial Examples","version":1},"cited_work":{"arxiv_id":"2209.02128","doi":"10.48550/arxiv.2209.02128","metadata_source":"pith","pith_arxiv_id":"2209.02128","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Branch, Jonathan Rodriguez Cefalu, Jeremy McHugh, Leyla Hujer, Aditya Bahl, Daniel del Castillo Iglesias, Ron Heichman, and Ramesh Darwishi","venue":"cs.CL","work_id":"217a3646-c7b7-45c8-9527-b642d3952d7c","year":2022},"citing_paper":{"arxiv_id":"2604.28157","last_updated":"2026-04-30T17:43:24Z","snapshot_observed_at":"2026-07-06T23:13:29.310140Z","submitted_at":"2026-04-30T17:43:24Z","title":"FlashRT: Towards Computationally and Memory Efficient Red-Teaming for Prompt Injection and Knowledge Corruption","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-05-07T06:49:56.316472Z"},"links":{"cited_paper":"/paper/2209.02128","citing_paper":"/paper/2604.28157"},"observation_digest":"sha256:990896570a0c05f6c62ec266d153952eed68f748e84eb82ac3c78994f1a1e59b","observation_id":"6e929543-4e48-476f-b833-dc77c494f57b","resolution":{"observed_at":"2026-05-12T10:16:28.274248Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2209.02128","last_updated":"2022-09-05T20:29:17Z","snapshot_observed_at":"2026-08-04T07:20:43.897179Z","submitted_at":"2022-09-05T20:29:17Z","title":"Evaluating the Susceptibility of Pre-Trained Language Models via Handcrafted Adversarial Examples","version":1},"cited_work":{"arxiv_id":"2209.02128","doi":"10.48550/arxiv.2209.02128","metadata_source":"pith","pith_arxiv_id":"2209.02128","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Branch, Jonathan Rodriguez Cefalu, Jeremy McHugh, Leyla Hujer, Aditya Bahl, Daniel del Castillo Iglesias, Ron Heichman, and Ramesh Darwishi","venue":"cs.CL","work_id":"217a3646-c7b7-45c8-9527-b642d3952d7c","year":2022},"citing_paper":{"arxiv_id":"2605.00460","last_updated":"2026-05-01T06:51:58Z","snapshot_observed_at":"2026-07-06T23:13:52.304925Z","submitted_at":"2026-05-01T06:51:58Z","title":"CleanBase: Detecting Malicious Documents in RAG Knowledge Databases","version":1},"reference_index":42,"source":"arxiv_source","source_observed_at":"2026-05-09T19:41:49.394967Z"},"links":{"cited_paper":"/paper/2209.02128","citing_paper":"/paper/2605.00460"},"observation_digest":"sha256:6e5c2f181db76ad723447dc7aa7a314d616de2ebb74dd27b0518aed8a146772b","observation_id":"0a69e0fd-be78-42c9-95cb-676c2fb79dae","resolution":{"observed_at":"2026-05-11T15:31:22.315397Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2209.02128","last_updated":"2022-09-05T20:29:17Z","snapshot_observed_at":"2026-08-04T07:20:43.897179Z","submitted_at":"2022-09-05T20:29:17Z","title":"Evaluating the Susceptibility of Pre-Trained Language Models via Handcrafted Adversarial Examples","version":1},"cited_work":{"arxiv_id":"2209.02128","doi":"10.48550/arxiv.2209.02128","metadata_source":"pith","pith_arxiv_id":"2209.02128","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Branch, Jonathan Rodriguez Cefalu, Jeremy McHugh, Leyla Hujer, Aditya Bahl, Daniel del Castillo Iglesias, Ron Heichman, and Ramesh Darwishi","venue":"cs.CL","work_id":"217a3646-c7b7-45c8-9527-b642d3952d7c","year":2022},"citing_paper":{"arxiv_id":"2605.16090","last_updated":"2026-05-15T15:47:41Z","snapshot_observed_at":"2026-08-08T23:04:25.950675Z","submitted_at":"2026-05-15T15:47:41Z","title":"A Cross-Modal Prompt Injection Attack against Large Vision-Language Models with Image-Only Perturbation","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-05-20T17:20:54.445007Z"},"links":{"cited_paper":"/paper/2209.02128","citing_paper":"/paper/2605.16090"},"observation_digest":"sha256:60187edcb5ce5788c2edf08fb929685d77ad9461347ccd93ad062e2dbd6a2dcd","observation_id":"1a1da855-d24a-4493-88b8-c5d664d5a10c","resolution":{"observed_at":"2026-05-20T17:23:36.828570Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2209.02128","last_updated":"2022-09-05T20:29:17Z","snapshot_observed_at":"2026-08-04T07:20:43.897179Z","submitted_at":"2022-09-05T20:29:17Z","title":"Evaluating the Susceptibility of Pre-Trained Language Models via Handcrafted Adversarial Examples","version":1},"cited_work":{"arxiv_id":"2209.02128","doi":"10.48550/arxiv.2209.02128","metadata_source":"pith","pith_arxiv_id":"2209.02128","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Branch, Jonathan Rodriguez Cefalu, Jeremy McHugh, Leyla Hujer, Aditya Bahl, Daniel del Castillo Iglesias, Ron Heichman, and Ramesh Darwishi","venue":"cs.CL","work_id":"217a3646-c7b7-45c8-9527-b642d3952d7c","year":2022},"citing_paper":{"arxiv_id":"2606.19660","last_updated":"2026-06-17T23:59:57Z","snapshot_observed_at":"2026-08-08T17:16:02.859263Z","submitted_at":"2026-06-17T23:59:57Z","title":"A Layered Security Framework Against Prompt Injection in RAG-Based Chatbots","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-06-26T20:00:14.036515Z"},"links":{"cited_paper":"/paper/2209.02128","citing_paper":"/paper/2606.19660"},"observation_digest":"sha256:7ce6f7ce67c932ef5e5880c89ccd74cc88567b501105cc2184805cf4060265fe","observation_id":"702a6ae5-8464-4dc9-83a3-9c99b9aef69a","resolution":{"observed_at":"2026-07-04T02:09:22.505482Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2209.02128","last_updated":"2022-09-05T20:29:17Z","snapshot_observed_at":"2026-08-04T07:20:43.897179Z","submitted_at":"2022-09-05T20:29:17Z","title":"Evaluating the Susceptibility of Pre-Trained Language Models via Handcrafted Adversarial Examples","version":1},"cited_work":{"arxiv_id":"2209.02128","doi":"10.48550/arxiv.2209.02128","metadata_source":"pith","pith_arxiv_id":"2209.02128","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Branch, Jonathan Rodriguez Cefalu, Jeremy McHugh, Leyla Hujer, Aditya Bahl, Daniel del Castillo Iglesias, Ron Heichman, and Ramesh Darwishi","venue":"cs.CL","work_id":"217a3646-c7b7-45c8-9527-b642d3952d7c","year":2022},"citing_paper":{"arxiv_id":"2607.05189","last_updated":"2026-07-06T15:08:58Z","snapshot_observed_at":"2026-07-09T23:18:22.372649Z","submitted_at":"2026-07-06T15:08:58Z","title":"When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-07-08T00:18:55.016013Z"},"links":{"cited_paper":"/paper/2209.02128","citing_paper":"/paper/2607.05189"},"observation_digest":"sha256:94213a8c8856125045b97e9efd5e1832690979bf862699f5ec098a77a711b7ec","observation_id":"2f0d4c74-f8ba-4420-9d4d-45d24f478537","resolution":{"observed_at":"2026-07-08T00:24:22.468806Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2209.02128/citation-record","integrity":"/paper/2209.02128/integrity","json":"/paper/2209.02128/citation-record.json","paper":"/paper/2209.02128"},"outbound":[],"paper":{"arxiv_id":"2209.02128","last_updated":"2022-09-05T20:29:17Z","latest_version":1,"primary_category":"cs.CL","snapshot_observed_at":"2026-08-04T07:20:43.897179Z","submitted_at":"2022-09-05T20:29:17Z","title":"Evaluating the Susceptibility of Pre-Trained Language Models via Handcrafted Adversarial Examples"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 17 inbound Pith citation observations for arXiv:2209.02128."}