{"as_of":"2026-08-08T11:15:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:1d55f6e9e5d8b9160caed6d5182d54efa1845c77e4e844ee6dca2c026ef14b69","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":4,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":4,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":4,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":4,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T05:59:32.596342Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-05-18T05:25:54.491694Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2303.02242","last_updated":"2023-08-22T02:34:19Z","snapshot_observed_at":"2026-07-06T14:58:33.391195Z","submitted_at":"2023-03-03T22:19:22Z","title":"TrojText: Test-time Invisible Textual Trojan Insertion","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.02242","snapshot_observed_at":"2026-08-07T05:59:32.596342Z","title":"Tuan Anh Nguyen and Anh Tran","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.06518","last_updated":"2025-06-06T20:32:43Z","snapshot_observed_at":"2026-08-07T05:52:43.506241Z","submitted_at":"2025-06-06T20:32:43Z","title":"A Systematic Review of Poisoning Attacks Against Large Language Models","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-07T05:59:32.596342Z"},"links":{"cited_paper":"/paper/2303.02242","citing_paper":"/paper/2506.06518"},"observation_digest":"sha256:4b2ac55a00f72533f5ca778a2b298c468ff7bbd4f3fa567e89a11fd96f1a6298","observation_id":"ec6694a2-35fb-4077-b2dd-9af6fa42d624","resolution":{"observed_at":"2026-08-07T05:59:32.596342Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2303.02242","last_updated":"2023-08-22T02:34:19Z","snapshot_observed_at":"2026-07-06T14:58:33.391195Z","submitted_at":"2023-03-03T22:19:22Z","title":"TrojText: Test-time Invisible Textual Trojan Insertion","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.02242","snapshot_observed_at":"2026-08-05T05:59:28.734338Z","title":"arXiv:2303.02242","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.04615","last_updated":"2025-09-04T18:59:07Z","snapshot_observed_at":"2026-08-08T07:38:10.301418Z","submitted_at":"2025-09-04T18:59:07Z","title":"Breaking to Build: A Threat Model of Prompt-Based Attacks for Securing LLMs","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-05T05:59:28.734338Z"},"links":{"cited_paper":"/paper/2303.02242","citing_paper":"/paper/2509.04615"},"observation_digest":"sha256:fdcb0e03dddff704f0313a2173bc4ffb46f13123174123f624f0585b6a2dc7d7","observation_id":"daeb5318-2729-4486-a055-f242a92723be","resolution":{"observed_at":"2026-08-05T05:59:28.734338Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2303.02242","last_updated":"2023-08-22T02:34:19Z","snapshot_observed_at":"2026-07-06T14:58:33.391195Z","submitted_at":"2023-03-03T22:19:22Z","title":"TrojText: Test-time Invisible Textual Trojan Insertion","version":2},"cited_work":{"arxiv_id":"2303.02242","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2303.02242","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Trojtext: Test-time invisible textual trojan insertion","venue":null,"work_id":"4244f95f-e31e-49f5-b59c-3fe580b3615a","year":2023},"citing_paper":{"arxiv_id":"2510.18333","last_updated":"2026-04-21T04:19:09Z","snapshot_observed_at":"2026-07-06T22:33:39.148066Z","submitted_at":"2025-10-21T06:34:51Z","title":"Position: LLM Watermarking Should Align Stakeholders' Incentives for Practical Adoption","version":2},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-05-18T05:24:25.622071Z"},"links":{"cited_paper":"/paper/2303.02242","citing_paper":"/paper/2510.18333"},"observation_digest":"sha256:13a8e03ee337f22e40e0474780af17dc0914e6dacb91ad9700faad28680e2d07","observation_id":"533f7303-ce39-4c71-818d-8a239b913b1e","resolution":{"observed_at":"2026-05-18T05:25:54.494188Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2303.02242","last_updated":"2023-08-22T02:34:19Z","snapshot_observed_at":"2026-07-06T14:58:33.391195Z","submitted_at":"2023-03-03T22:19:22Z","title":"TrojText: Test-time Invisible Textual Trojan Insertion","version":2},"cited_work":{"arxiv_id":"2303.02242","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2303.02242","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Trojtext: Test-time invisible textual trojan insertion","venue":null,"work_id":"4244f95f-e31e-49f5-b59c-3fe580b3615a","year":2023},"citing_paper":{"arxiv_id":"2604.16543","last_updated":"2026-04-17T02:31:09Z","snapshot_observed_at":"2026-07-06T23:03:52.631613Z","submitted_at":"2026-04-17T02:31:09Z","title":"Conjunctive Prompt Attacks in Multi-Agent LLM Systems","version":1},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-05-10T08:13:42.401992Z"},"links":{"cited_paper":"/paper/2303.02242","citing_paper":"/paper/2604.16543"},"observation_digest":"sha256:8db0f6a59e72d6f86921b7df7b0cc2bbaff298fe760077cb37f9510309ba714d","observation_id":"9d0c4b51-68db-4759-8908-a7aae499b586","resolution":{"observed_at":"2026-05-10T08:17:37.699247Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2303.02242/citation-record","integrity":"/paper/2303.02242/integrity","json":"/paper/2303.02242/citation-record.json","paper":"/paper/2303.02242"},"outbound":[],"paper":{"arxiv_id":"2303.02242","last_updated":"2023-08-22T02:34:19Z","latest_version":2,"primary_category":"cs.CL","snapshot_observed_at":"2026-07-06T14:58:33.391195Z","submitted_at":"2023-03-03T22:19:22Z","title":"TrojText: Test-time Invisible Textual Trojan Insertion"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 4 inbound Pith citation observations for arXiv:2303.02242."}