{"as_of":"2026-08-08T05:49:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:978589885aa605a58d7eb14d214336efccf550705e52fb56bd1373289d5cd4a9","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":12,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":12,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":12,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":12,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T14:36:12.778478Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-04T02:09:22.506605Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2307.06865","last_updated":"2024-08-07T22:05:01Z","snapshot_observed_at":"2026-08-07T22:01:02.608714Z","submitted_at":"2023-07-13T16:15:08Z","title":"Effective Prompt Extraction from Language Models","version":3},"cited_work":{"arxiv_id":"2307.06865","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2307.06865","snapshot_observed_at":"2026-07-04T02:09:22.506605Z","title":"Prompts should not be seen as secrets: Systematically measuring prompt extraction attack success","venue":null,"work_id":"33e44303-8d83-4688-a95b-13395c7b3180","year":2023},"citing_paper":{"arxiv_id":"2404.13208","last_updated":"2024-04-19T22:55:23Z","snapshot_observed_at":"2026-08-02T11:48:17.206729Z","submitted_at":"2024-04-19T22:55:23Z","title":"The Instruction Hierarchy: Training LLMs to Prioritize Privileged Instructions","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-05-12T10:59:30.728091Z"},"links":{"cited_paper":"/paper/2307.06865","citing_paper":"/paper/2404.13208"},"observation_digest":"sha256:bea1a4ff0060e79b1eb9798f3a51c0b36b86b770f6373da1691579e30614024e","observation_id":"4db456cc-9efe-49f5-a210-6165cfae99fd","resolution":{"observed_at":"2026-05-12T10:59:30.805076Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.06865","last_updated":"2024-08-07T22:05:01Z","snapshot_observed_at":"2026-08-07T22:01:02.608714Z","submitted_at":"2023-07-13T16:15:08Z","title":"Effective Prompt Extraction from Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.06865","snapshot_observed_at":"2026-08-07T14:36:12.778478Z","title":"Prompts should not be seen as secrets: Systematically measuring prompt extraction attack success","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.18333","last_updated":"2025-05-23T19:39:56Z","snapshot_observed_at":"2026-08-07T14:30:46.734293Z","submitted_at":"2025-05-23T19:39:56Z","title":"A Critical Evaluation of Defenses against Prompt Injection Attacks","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-07T14:36:12.778478Z"},"links":{"cited_paper":"/paper/2307.06865","citing_paper":"/paper/2505.18333"},"observation_digest":"sha256:afedcefb4096497390c314cfc37a086ec557b52b74b4d2c5848455cc8dcb9710","observation_id":"726465f1-fea4-48ee-aa54-e9212ed584aa","resolution":{"observed_at":"2026-08-07T14:36:12.778478Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.06865","last_updated":"2024-08-07T22:05:01Z","snapshot_observed_at":"2026-08-07T22:01:02.608714Z","submitted_at":"2023-07-13T16:15:08Z","title":"Effective Prompt Extraction from Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.06865","snapshot_observed_at":"2026-08-07T13:28:19.348303Z","title":"Effective prompt extraction from language models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:19.348303Z"},"links":{"cited_paper":"/paper/2307.06865","citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:1d7d2a0a6e592e60d2f8777a023f713ab4c4e0ef8ff6c331d55093394af7f865","observation_id":"781d88b3-dd71-4560-9cef-d771f702c936","resolution":{"observed_at":"2026-08-07T13:28:19.348303Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.06865","last_updated":"2024-08-07T22:05:01Z","snapshot_observed_at":"2026-08-07T22:01:02.608714Z","submitted_at":"2023-07-13T16:15:08Z","title":"Effective Prompt Extraction from Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.06865","snapshot_observed_at":"2026-08-07T10:54:53.607765Z","title":"Prompts should not be seen as secrets: Systematically measuring prompt extraction attack success","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.04036","last_updated":"2025-06-04T14:58:29Z","snapshot_observed_at":"2026-08-07T22:01:39.666653Z","submitted_at":"2025-06-04T14:58:29Z","title":"Privacy and Security Threat for OpenAI GPTs","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T10:54:53.607765Z"},"links":{"cited_paper":"/paper/2307.06865","citing_paper":"/paper/2506.04036"},"observation_digest":"sha256:5c607fd4292db5009aba1be789a5c428da03830b3c0a2bb817587055fdc9c703","observation_id":"b3dad23e-9e63-4c18-91ce-83eb66e6beb1","resolution":{"observed_at":"2026-08-07T10:54:53.607765Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.06865","last_updated":"2024-08-07T22:05:01Z","snapshot_observed_at":"2026-08-07T22:01:02.608714Z","submitted_at":"2023-07-13T16:15:08Z","title":"Effective Prompt Extraction from Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.06865","snapshot_observed_at":"2026-08-07T05:42:38.779335Z","title":"Effective prompt extraction from language models.arXiv preprint arXiv:2307.06865, 2023b","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.07440","last_updated":"2025-06-09T05:33:28Z","snapshot_observed_at":"2026-08-07T21:40:46.271523Z","submitted_at":"2025-06-09T05:33:28Z","title":"Federated In-Context Learning: Iterative Refinement for Improved Answer Quality","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-07T05:42:38.779335Z"},"links":{"cited_paper":"/paper/2307.06865","citing_paper":"/paper/2506.07440"},"observation_digest":"sha256:63c25fc75a3f5093c8010cbeddf9dcb57a945a7ce3ba631dbc5e8ff509f08be4","observation_id":"56c55de3-6bd7-488f-9404-b8f277e4f2f1","resolution":{"observed_at":"2026-08-07T05:42:38.779335Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.06865","last_updated":"2024-08-07T22:05:01Z","snapshot_observed_at":"2026-08-07T22:01:02.608714Z","submitted_at":"2023-07-13T16:15:08Z","title":"Effective Prompt Extraction from Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.06865","snapshot_observed_at":"2026-08-06T21:50:30.639123Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T21:22:15.440551Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":102,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:30.639123Z"},"links":{"cited_paper":"/paper/2307.06865","citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:071b1aa3c99d27d594ae72873acedf50f7dd151f82f2467390f9babd5ff24d17","observation_id":"0c396fbc-a2e3-4865-937a-7b29a1f4bee4","resolution":{"observed_at":"2026-08-06T21:50:30.639123Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.06865","last_updated":"2024-08-07T22:05:01Z","snapshot_observed_at":"2026-08-07T22:01:02.608714Z","submitted_at":"2023-07-13T16:15:08Z","title":"Effective Prompt Extraction from Language Models","version":3},"cited_work":{"arxiv_id":"2307.06865","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2307.06865","snapshot_observed_at":"2026-07-04T02:09:22.506605Z","title":"Prompts should not be seen as secrets: Systematically measuring prompt extraction attack success","venue":null,"work_id":"33e44303-8d83-4688-a95b-13395c7b3180","year":2023},"citing_paper":{"arxiv_id":"2604.09443","last_updated":"2026-04-14T15:04:47Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2026-04-10T16:00:04Z","title":"Many-Tier Instruction Hierarchy in LLM Agents","version":3},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-05-10T17:15:10.392678Z"},"links":{"cited_paper":"/paper/2307.06865","citing_paper":"/paper/2604.09443"},"observation_digest":"sha256:c9a52a83ee0ed7318264b05ac94473cb1759f1712b581500b54e8017fed3a755","observation_id":"37b968f7-a4bb-4b4a-b8ab-a89b36422804","resolution":{"observed_at":"2026-05-11T07:16:01.772646Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.06865","last_updated":"2024-08-07T22:05:01Z","snapshot_observed_at":"2026-08-07T22:01:02.608714Z","submitted_at":"2023-07-13T16:15:08Z","title":"Effective Prompt Extraction from Language Models","version":3},"cited_work":{"arxiv_id":"2307.06865","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2307.06865","snapshot_observed_at":"2026-07-04T02:09:22.506605Z","title":"Prompts should not be seen as secrets: Systematically measuring prompt extraction attack success","venue":null,"work_id":"33e44303-8d83-4688-a95b-13395c7b3180","year":2023},"citing_paper":{"arxiv_id":"2605.28999","last_updated":"2026-05-27T18:56:19Z","snapshot_observed_at":"2026-07-06T23:38:27.990823Z","submitted_at":"2026-05-27T18:56:19Z","title":"Measuring Real-World Prompt Injection Attacks in LLM-based Resume Screening","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-06-29T11:16:52.024973Z"},"links":{"cited_paper":"/paper/2307.06865","citing_paper":"/paper/2605.28999"},"observation_digest":"sha256:5784674f3f8939afa18301dabcf9dbd23831350b3944f89396fc3d6dcaaea577","observation_id":"e6eb5e7c-4031-4342-9e42-e72258efb3d9","resolution":{"observed_at":"2026-06-29T11:23:21.336479Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.06865","last_updated":"2024-08-07T22:05:01Z","snapshot_observed_at":"2026-08-07T22:01:02.608714Z","submitted_at":"2023-07-13T16:15:08Z","title":"Effective Prompt Extraction from Language Models","version":3},"cited_work":{"arxiv_id":"2307.06865","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2307.06865","snapshot_observed_at":"2026-07-04T02:09:22.506605Z","title":"Prompts should not be seen as secrets: Systematically measuring prompt extraction attack success","venue":null,"work_id":"33e44303-8d83-4688-a95b-13395c7b3180","year":2023},"citing_paper":{"arxiv_id":"2606.03344","last_updated":"2026-06-02T08:54:37Z","snapshot_observed_at":"2026-08-02T15:32:07.510420Z","submitted_at":"2026-06-02T08:54:37Z","title":"RogueMerge: Robust and Unified Attacks against LLM Model Merging","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-06-28T10:05:10.309553Z"},"links":{"cited_paper":"/paper/2307.06865","citing_paper":"/paper/2606.03344"},"observation_digest":"sha256:e79cb56295dc2e077ebff0986af27db1d149700ac59365cfcd52f15bd9e52f60","observation_id":"9bcd56b2-be73-4510-a139-d55e28d555e6","resolution":{"observed_at":"2026-07-02T03:26:28.971990Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.06865","last_updated":"2024-08-07T22:05:01Z","snapshot_observed_at":"2026-08-07T22:01:02.608714Z","submitted_at":"2023-07-13T16:15:08Z","title":"Effective Prompt Extraction from Language Models","version":3},"cited_work":{"arxiv_id":"2307.06865","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2307.06865","snapshot_observed_at":"2026-07-04T02:09:22.506605Z","title":"Prompts should not be seen as secrets: Systematically measuring prompt extraction attack success","venue":null,"work_id":"33e44303-8d83-4688-a95b-13395c7b3180","year":2023},"citing_paper":{"arxiv_id":"2606.18673","last_updated":"2026-06-17T04:20:00Z","snapshot_observed_at":"2026-07-06T23:54:04.739534Z","submitted_at":"2026-06-17T04:20:00Z","title":"Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-06-26T20:47:36.337189Z"},"links":{"cited_paper":"/paper/2307.06865","citing_paper":"/paper/2606.18673"},"observation_digest":"sha256:c1c3b33ccbee8e3b8269df3dbc41d856645721062cdad3f204b31d4d93cb5cb9","observation_id":"d9cc16ba-6afd-4338-9490-5bb763ea5a77","resolution":{"observed_at":"2026-07-04T00:59:20.721166Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.06865","last_updated":"2024-08-07T22:05:01Z","snapshot_observed_at":"2026-08-07T22:01:02.608714Z","submitted_at":"2023-07-13T16:15:08Z","title":"Effective Prompt Extraction from Language Models","version":3},"cited_work":{"arxiv_id":"2307.06865","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2307.06865","snapshot_observed_at":"2026-07-04T02:09:22.506605Z","title":"Prompts should not be seen as secrets: Systematically measuring prompt extraction attack success","venue":null,"work_id":"33e44303-8d83-4688-a95b-13395c7b3180","year":2023},"citing_paper":{"arxiv_id":"2606.19660","last_updated":"2026-06-17T23:59:57Z","snapshot_observed_at":"2026-08-07T10:37:02.059075Z","submitted_at":"2026-06-17T23:59:57Z","title":"A Layered Security Framework Against Prompt Injection in RAG-Based Chatbots","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-06-26T20:00:14.036515Z"},"links":{"cited_paper":"/paper/2307.06865","citing_paper":"/paper/2606.19660"},"observation_digest":"sha256:2706167b9b244e0cc31f221d5255a288cbfe9a97e3413c00b0b51e961895b9fb","observation_id":"506729e8-1c85-4b38-b5f1-45d4fa7531fa","resolution":{"observed_at":"2026-07-04T02:09:22.508194Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.06865","last_updated":"2024-08-07T22:05:01Z","snapshot_observed_at":"2026-08-07T22:01:02.608714Z","submitted_at":"2023-07-13T16:15:08Z","title":"Effective Prompt Extraction from Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.06865","snapshot_observed_at":"2026-07-11T08:31:36.099368Z","title":"Effective prompt extraction from language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.05120","last_updated":"2026-07-06T14:07:49Z","snapshot_observed_at":"2026-08-05T18:00:12.068331Z","submitted_at":"2026-07-06T14:07:49Z","title":"Agent Data Injection Attacks are Realistic Threats to AI Agents","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-07-11T08:31:36.099368Z"},"links":{"cited_paper":"/paper/2307.06865","citing_paper":"/paper/2607.05120"},"observation_digest":"sha256:9d88bb925b0c9d7cf17b0e1d17213554c391357da33ae91c31d2a62548f34719","observation_id":"e8475828-cbb4-4a10-93df-e90e0ecbd824","resolution":{"observed_at":"2026-07-11T08:31:36.099368Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2307.06865/citation-record","integrity":"/paper/2307.06865/integrity","json":"/paper/2307.06865/citation-record.json","paper":"/paper/2307.06865"},"outbound":[],"paper":{"arxiv_id":"2307.06865","last_updated":"2024-08-07T22:05:01Z","latest_version":3,"primary_category":"cs.CL","snapshot_observed_at":"2026-08-07T22:01:02.608714Z","submitted_at":"2023-07-13T16:15:08Z","title":"Effective Prompt Extraction from Language Models"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 12 inbound Pith citation observations for arXiv:2307.06865."}