{"as_of":"2026-08-09T13:52:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:cc1c2cb8a1bc22d200c1e86aa6b696580627c3417e399b07f8f5610803d5b4c9","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":23,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":23,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":23,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":23,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T11:59:26.298515Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":1,"source":"arxiv_reference","source_observed_at":"2026-08-05T02:28:24.338817Z","state":"measured"}],"external_citation_measurements":[{"count":8,"observed_at":"2026-08-05T02:28:24.338817Z","source":"arxiv_reference"}],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2311.01011","last_updated":"2023-11-02T06:13:36Z","snapshot_observed_at":"2026-07-06T16:42:04.139453Z","submitted_at":"2023-11-02T06:13:36Z","title":"Tensor Trust: Interpretable Prompt Injection Attacks from an Online Game","version":1},"cited_work":{"arxiv_id":"2311.01011","doi":"10.48550/arxiv.2311.01011","metadata_source":"arxiv_reference","pith_arxiv_id":"2311.01011","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"”Tensor trust: Interpretable prompt injection attacks from an online game.” arXiv preprint arXiv:2311.01011 (2023)","venue":"arXiv (Cornell University)","work_id":"2c485010-a490-4283-8a00-55d8996962a4","year":2023},"citing_paper":{"arxiv_id":"2403.10559","last_updated":"2026-04-21T03:03:43Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-03-14T06:51:26Z","title":"Generative Models and Connected and Automated Vehicles: A Survey in Exploring the Intersection of Transportation and AI","version":4},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-05-24T02:48:10.934475Z"},"links":{"cited_paper":"/paper/2311.01011","citing_paper":"/paper/2403.10559"},"observation_digest":"sha256:09b02fe7cfb593e54781a6cad5430212a8161322ddbc1202e2df3e71b73eaf07","observation_id":"f0d73d40-c8a6-4ba5-a8ec-8bf505f5eccb","resolution":{"observed_at":"2026-05-24T02:48:47.330084Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2311.01011","last_updated":"2023-11-02T06:13:36Z","snapshot_observed_at":"2026-07-06T16:42:04.139453Z","submitted_at":"2023-11-02T06:13:36Z","title":"Tensor Trust: Interpretable Prompt Injection Attacks from an Online Game","version":1},"cited_work":{"arxiv_id":"2311.01011","doi":"10.48550/arxiv.2311.01011","metadata_source":"arxiv_reference","pith_arxiv_id":"2311.01011","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"”Tensor trust: Interpretable prompt injection attacks from an online game.” arXiv preprint arXiv:2311.01011 (2023)","venue":"arXiv (Cornell University)","work_id":"2c485010-a490-4283-8a00-55d8996962a4","year":2023},"citing_paper":{"arxiv_id":"2406.13352","last_updated":"2024-11-24T22:04:23Z","snapshot_observed_at":"2026-07-06T18:33:32.806635Z","submitted_at":"2024-06-19T08:55:56Z","title":"AgentDojo: A Dynamic Environment to Evaluate Prompt Injection Attacks and Defenses for LLM Agents","version":3},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-05-13T06:35:13.331872Z"},"links":{"cited_paper":"/paper/2311.01011","citing_paper":"/paper/2406.13352"},"observation_digest":"sha256:39e1e986c760769d48f16f753ca40052d4119fc836047518e65de3e69f494d06","observation_id":"d629e88a-7f94-45c8-ac53-8a0ce87dc0db","resolution":{"observed_at":"2026-05-13T06:35:13.366955Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2311.01011","last_updated":"2023-11-02T06:13:36Z","snapshot_observed_at":"2026-07-06T16:42:04.139453Z","submitted_at":"2023-11-02T06:13:36Z","title":"Tensor Trust: Interpretable Prompt Injection Attacks from an Online Game","version":1},"cited_work":{"arxiv_id":"2311.01011","doi":"10.48550/arxiv.2311.01011","metadata_source":"arxiv_reference","pith_arxiv_id":"2311.01011","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"”Tensor trust: Interpretable prompt injection attacks from an online game.” arXiv preprint arXiv:2311.01011 (2023)","venue":"arXiv (Cornell University)","work_id":"2c485010-a490-4283-8a00-55d8996962a4","year":2023},"citing_paper":{"arxiv_id":"2410.02644","last_updated":"2025-05-30T03:50:33Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-10-03T16:30:47Z","title":"Agent Security Bench (ASB): Formalizing and Benchmarking Attacks and Defenses in LLM-based Agents","version":4},"reference_index":134,"source":"arxiv_source","source_observed_at":"2026-05-12T13:36:57.011451Z"},"links":{"cited_paper":"/paper/2311.01011","citing_paper":"/paper/2410.02644"},"observation_digest":"sha256:88eb73ceec21e4c20592ee7788f1352f889297f67a75e465a2290ee7aaeba6da","observation_id":"51473f95-fcc1-4c69-84ca-cb5a0967a77a","resolution":{"observed_at":"2026-05-12T13:36:57.179278Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2311.01011","last_updated":"2023-11-02T06:13:36Z","snapshot_observed_at":"2026-07-06T16:42:04.139453Z","submitted_at":"2023-11-02T06:13:36Z","title":"Tensor Trust: Interpretable Prompt Injection Attacks from an Online Game","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.01011","snapshot_observed_at":"2026-08-07T11:59:26.298515Z","title":"Tensor trust: Interpretable prompt injection attacks from an online game","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:26.298515Z"},"links":{"cited_paper":"/paper/2311.01011","citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:f02f6d148d2397f3ad6ddf72050c3397d0bb69bbf6fdfa22e12877c209dfc067","observation_id":"143a350b-7628-4b78-9856-7fb72f059a06","resolution":{"observed_at":"2026-08-07T11:59:26.298515Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.01011","last_updated":"2023-11-02T06:13:36Z","snapshot_observed_at":"2026-07-06T16:42:04.139453Z","submitted_at":"2023-11-02T06:13:36Z","title":"Tensor Trust: Interpretable Prompt Injection Attacks from an Online Game","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.01011","snapshot_observed_at":"2026-08-07T05:41:25.500880Z","title":"Tensor trust: Interpretable prompt injection attacks from an online game, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.07330","last_updated":"2025-06-09T00:11:06Z","snapshot_observed_at":"2026-08-08T01:51:03.511040Z","submitted_at":"2025-06-09T00:11:06Z","title":"JavelinGuard: Low-Cost Transformer Architectures for LLM Security","version":1},"reference_index":48,"source":"arxiv_source","source_observed_at":"2026-08-07T05:41:25.500880Z"},"links":{"cited_paper":"/paper/2311.01011","citing_paper":"/paper/2506.07330"},"observation_digest":"sha256:4e85b000b15deb4c949099a5d8605936563c8a8ffcc3f19f60913cb798f8ead1","observation_id":"b71b49a1-7392-4df8-80af-f4a4e28d0588","resolution":{"observed_at":"2026-08-07T05:41:25.500880Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.01011","last_updated":"2023-11-02T06:13:36Z","snapshot_observed_at":"2026-07-06T16:42:04.139453Z","submitted_at":"2023-11-02T06:13:36Z","title":"Tensor Trust: Interpretable Prompt Injection Attacks from an Online Game","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.01011","snapshot_observed_at":"2026-08-06T05:56:20.374600Z","title":"Tensor trust: Interpretable prompt injection attacks from an online game","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.374600Z"},"links":{"cited_paper":"/paper/2311.01011","citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:9677984ce4c754ef1a78caadff994e77c17c9ecc2a2bd5b50d90f0974470aa51","observation_id":"b8553c24-fc90-4633-9db7-1c66e6a638ba","resolution":{"observed_at":"2026-08-06T05:56:20.374600Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.01011","last_updated":"2023-11-02T06:13:36Z","snapshot_observed_at":"2026-07-06T16:42:04.139453Z","submitted_at":"2023-11-02T06:13:36Z","title":"Tensor Trust: Interpretable Prompt Injection Attacks from an Online Game","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.01011","snapshot_observed_at":"2026-08-04T22:01:57.960028Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:57.960028Z"},"links":{"cited_paper":"/paper/2311.01011","citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:7014a705850dc680598efe11c19285973f2264140ee42ad4666ded2f19712596","observation_id":"5c03889a-82f0-4b39-bf67-ea4dcf4822fe","resolution":{"observed_at":"2026-08-04T22:01:57.960028Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.01011","last_updated":"2023-11-02T06:13:36Z","snapshot_observed_at":"2026-07-06T16:42:04.139453Z","submitted_at":"2023-11-02T06:13:36Z","title":"Tensor Trust: Interpretable Prompt Injection Attacks from an Online Game","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.01011","snapshot_observed_at":"2026-08-04T10:22:08.545695Z","title":"Toyer, O","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2510.10271","last_updated":"2026-06-26T00:42:37Z","snapshot_observed_at":"2026-08-04T14:50:50.060411Z","submitted_at":"2025-10-11T16:14:56Z","title":"MetaBreak: Jailbreaking Online LLM Services via Special Token Manipulation","version":2},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-04T10:22:08.545695Z"},"links":{"cited_paper":"/paper/2311.01011","citing_paper":"/paper/2510.10271"},"observation_digest":"sha256:a6aa729149198f9224ca381439bc786acd0b96dc4a7af9c07edd4651671cb5a1","observation_id":"78279eed-d985-4b15-8846-15b52593e725","resolution":{"observed_at":"2026-08-04T10:22:08.545695Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.01011","last_updated":"2023-11-02T06:13:36Z","snapshot_observed_at":"2026-07-06T16:42:04.139453Z","submitted_at":"2023-11-02T06:13:36Z","title":"Tensor Trust: Interpretable Prompt Injection Attacks from an Online Game","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.01011","snapshot_observed_at":"2026-08-04T07:07:55.586337Z","title":"Tensor Trust : Interpretable prompt injection attacks from an online game, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2511.04694","last_updated":"2026-07-01T16:09:28Z","snapshot_observed_at":"2026-08-04T07:07:51.334462Z","submitted_at":"2025-10-30T22:13:31Z","title":"Reasoning Up the Instruction Ladder for Controllable Language Models","version":5},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-08-04T07:07:55.586337Z"},"links":{"cited_paper":"/paper/2311.01011","citing_paper":"/paper/2511.04694"},"observation_digest":"sha256:109b90ce5263bff2e27e8d637e673d8f05229368a7f962bbf2917faaa45337a4","observation_id":"10072e46-9cfd-43f8-941e-890405c024ae","resolution":{"observed_at":"2026-08-04T07:07:55.586337Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.01011","last_updated":"2023-11-02T06:13:36Z","snapshot_observed_at":"2026-07-06T16:42:04.139453Z","submitted_at":"2023-11-02T06:13:36Z","title":"Tensor Trust: Interpretable Prompt Injection Attacks from an Online Game","version":1},"cited_work":{"arxiv_id":"2311.01011","doi":"10.48550/arxiv.2311.01011","metadata_source":"arxiv_reference","pith_arxiv_id":"2311.01011","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"”Tensor trust: Interpretable prompt injection attacks from an online game.” arXiv preprint arXiv:2311.01011 (2023)","venue":"arXiv (Cornell University)","work_id":"2c485010-a490-4283-8a00-55d8996962a4","year":2023},"citing_paper":{"arxiv_id":"2604.06247","last_updated":"2026-04-06T16:29:05Z","snapshot_observed_at":"2026-07-06T22:54:48.916799Z","submitted_at":"2026-04-06T16:29:05Z","title":"SALLIE: Safeguarding Against Latent Language & Image Exploits","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-05-10T19:04:46.426969Z"},"links":{"cited_paper":"/paper/2311.01011","citing_paper":"/paper/2604.06247"},"observation_digest":"sha256:28467cfd611364d0a55d427e22b65dd20c00411a6856c2344f86e9e12cd371ad","observation_id":"39bdd794-c5e6-473b-a16e-356f951ca5cd","resolution":{"observed_at":"2026-05-10T23:30:51.262802Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2311.01011","last_updated":"2023-11-02T06:13:36Z","snapshot_observed_at":"2026-07-06T16:42:04.139453Z","submitted_at":"2023-11-02T06:13:36Z","title":"Tensor Trust: Interpretable Prompt Injection Attacks from an Online Game","version":1},"cited_work":{"arxiv_id":"2311.01011","doi":"10.48550/arxiv.2311.01011","metadata_source":"arxiv_reference","pith_arxiv_id":"2311.01011","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"”Tensor trust: Interpretable prompt injection attacks from an online game.” arXiv preprint arXiv:2311.01011 (2023)","venue":"arXiv (Cornell University)","work_id":"2c485010-a490-4283-8a00-55d8996962a4","year":2023},"citing_paper":{"arxiv_id":"2604.10326","last_updated":"2026-04-11T19:19:05Z","snapshot_observed_at":"2026-07-06T22:59:01.129724Z","submitted_at":"2026-04-11T19:19:05Z","title":"Jailbreaking the Matrix: Nullspace Steering for Controlled Model Subversion","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-05-10T15:19:46.920899Z"},"links":{"cited_paper":"/paper/2311.01011","citing_paper":"/paper/2604.10326"},"observation_digest":"sha256:8844d9a9afc3d782777555bec10e3cdf6f5b00c935245b5776e0b5234326ac39","observation_id":"526694a7-2747-4715-8e7f-79a420bc1c55","resolution":{"observed_at":"2026-05-11T10:46:04.339281Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2311.01011","last_updated":"2023-11-02T06:13:36Z","snapshot_observed_at":"2026-07-06T16:42:04.139453Z","submitted_at":"2023-11-02T06:13:36Z","title":"Tensor Trust: Interpretable Prompt Injection Attacks from an Online Game","version":1},"cited_work":{"arxiv_id":"2311.01011","doi":"10.48550/arxiv.2311.01011","metadata_source":"arxiv_reference","pith_arxiv_id":"2311.01011","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"”Tensor trust: Interpretable prompt injection attacks from an online game.” arXiv preprint arXiv:2311.01011 (2023)","venue":"arXiv (Cornell University)","work_id":"2c485010-a490-4283-8a00-55d8996962a4","year":2023},"citing_paper":{"arxiv_id":"2604.17396","last_updated":"2026-04-19T11:59:58Z","snapshot_observed_at":"2026-08-01T18:23:32.699442Z","submitted_at":"2026-04-19T11:59:58Z","title":"Representation-Guided Parameter-Efficient LLM Unlearning","version":1},"reference_index":45,"source":"arxiv_source","source_observed_at":"2026-05-10T06:01:46.885030Z"},"links":{"cited_paper":"/paper/2311.01011","citing_paper":"/paper/2604.17396"},"observation_digest":"sha256:52b3e3e749986c69890f3ab4e7f558370af36a6955a4df5d189b10a486edf9b1","observation_id":"39ba00f4-2947-4a49-91fd-d7ceb65d3d01","resolution":{"observed_at":"2026-05-10T06:06:19.359492Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2311.01011","last_updated":"2023-11-02T06:13:36Z","snapshot_observed_at":"2026-07-06T16:42:04.139453Z","submitted_at":"2023-11-02T06:13:36Z","title":"Tensor Trust: Interpretable Prompt Injection Attacks from an Online Game","version":1},"cited_work":{"arxiv_id":"2311.01011","doi":"10.48550/arxiv.2311.01011","metadata_source":"arxiv_reference","pith_arxiv_id":"2311.01011","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"”Tensor trust: Interpretable prompt injection attacks from an online game.” arXiv preprint arXiv:2311.01011 (2023)","venue":"arXiv (Cornell University)","work_id":"2c485010-a490-4283-8a00-55d8996962a4","year":2023},"citing_paper":{"arxiv_id":"2604.23887","last_updated":"2026-05-12T22:23:22Z","snapshot_observed_at":"2026-08-06T06:35:27.092178Z","submitted_at":"2026-04-26T21:22:35Z","title":"Evaluation of Prompt Injection Defenses in Large Language Models","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-05-08T05:50:20.608166Z"},"links":{"cited_paper":"/paper/2311.01011","citing_paper":"/paper/2604.23887"},"observation_digest":"sha256:06ff1c1e36f8dabde51ad84d3892530aca4749d3092be733c238570974f5725a","observation_id":"59e7711c-e2f1-4770-8ed0-92b4b4c814b7","resolution":{"observed_at":"2026-05-11T21:21:12.067435Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2311.01011","last_updated":"2023-11-02T06:13:36Z","snapshot_observed_at":"2026-07-06T16:42:04.139453Z","submitted_at":"2023-11-02T06:13:36Z","title":"Tensor Trust: Interpretable Prompt Injection Attacks from an Online Game","version":1},"cited_work":{"arxiv_id":"2311.01011","doi":"10.48550/arxiv.2311.01011","metadata_source":"arxiv_reference","pith_arxiv_id":"2311.01011","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"”Tensor trust: Interpretable prompt injection attacks from an online game.” arXiv preprint arXiv:2311.01011 (2023)","venue":"arXiv (Cornell University)","work_id":"2c485010-a490-4283-8a00-55d8996962a4","year":2023},"citing_paper":{"arxiv_id":"2604.23887","last_updated":"2026-05-12T22:23:22Z","snapshot_observed_at":"2026-08-06T06:35:27.092178Z","submitted_at":"2026-04-26T21:22:35Z","title":"Evaluation of Prompt Injection Defenses in Large Language Models","version":2},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-05-14T21:05:23.800356Z"},"links":{"cited_paper":"/paper/2311.01011","citing_paper":"/paper/2604.23887"},"observation_digest":"sha256:f940edf9c70178b6e60242cdf8255bb12de027313805be063c7d1473a661ccaf","observation_id":"e107ed0c-088d-49f8-9409-92d132a994c7","resolution":{"observed_at":"2026-05-14T21:19:28.486598Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2311.01011","last_updated":"2023-11-02T06:13:36Z","snapshot_observed_at":"2026-07-06T16:42:04.139453Z","submitted_at":"2023-11-02T06:13:36Z","title":"Tensor Trust: Interpretable Prompt Injection Attacks from an Online Game","version":1},"cited_work":{"arxiv_id":"2311.01011","doi":"10.48550/arxiv.2311.01011","metadata_source":"arxiv_reference","pith_arxiv_id":"2311.01011","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"”Tensor trust: Interpretable prompt injection attacks from an online game.” arXiv preprint arXiv:2311.01011 (2023)","venue":"arXiv (Cornell University)","work_id":"2c485010-a490-4283-8a00-55d8996962a4","year":2023},"citing_paper":{"arxiv_id":"2604.24826","last_updated":"2026-04-27T15:44:32Z","snapshot_observed_at":"2026-08-02T20:22:57.334766Z","submitted_at":"2026-04-27T15:44:32Z","title":"A Comparative Evaluation of AI Agent Security Guardrails","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-05-08T02:45:51.022758Z"},"links":{"cited_paper":"/paper/2311.01011","citing_paper":"/paper/2604.24826"},"observation_digest":"sha256:d78707d2fe6e4a422bfe1d9926932e0b004d9316d9777a565379ec3a91959208","observation_id":"984cb9b8-92d1-48ef-9658-5114dd70c620","resolution":{"observed_at":"2026-05-11T22:26:14.788649Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2311.01011","last_updated":"2023-11-02T06:13:36Z","snapshot_observed_at":"2026-07-06T16:42:04.139453Z","submitted_at":"2023-11-02T06:13:36Z","title":"Tensor Trust: Interpretable Prompt Injection Attacks from an Online Game","version":1},"cited_work":{"arxiv_id":"2311.01011","doi":"10.48550/arxiv.2311.01011","metadata_source":"arxiv_reference","pith_arxiv_id":"2311.01011","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"”Tensor trust: Interpretable prompt injection attacks from an online game.” arXiv preprint arXiv:2311.01011 (2023)","venue":"arXiv (Cornell University)","work_id":"2c485010-a490-4283-8a00-55d8996962a4","year":2023},"citing_paper":{"arxiv_id":"2605.08646","last_updated":"2026-05-09T03:29:20Z","snapshot_observed_at":"2026-07-06T23:20:52.521341Z","submitted_at":"2026-05-09T03:29:20Z","title":"PAAC: Privacy-Aware Agentic Device-Cloud Collaboration","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-05-12T01:05:56.688392Z"},"links":{"cited_paper":"/paper/2311.01011","citing_paper":"/paper/2605.08646"},"observation_digest":"sha256:63bb0e3443a6d2d77bb89ae3b6b934459ccb7e2f922b0292587e45cc0ebf99a7","observation_id":"35d95809-b566-42fc-902c-9b0a9604d750","resolution":{"observed_at":"2026-05-12T08:31:23.752832Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2311.01011","last_updated":"2023-11-02T06:13:36Z","snapshot_observed_at":"2026-07-06T16:42:04.139453Z","submitted_at":"2023-11-02T06:13:36Z","title":"Tensor Trust: Interpretable Prompt Injection Attacks from an Online Game","version":1},"cited_work":{"arxiv_id":"2311.01011","doi":"10.48550/arxiv.2311.01011","metadata_source":"arxiv_reference","pith_arxiv_id":"2311.01011","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"”Tensor trust: Interpretable prompt injection attacks from an online game.” arXiv preprint arXiv:2311.01011 (2023)","venue":"arXiv (Cornell University)","work_id":"2c485010-a490-4283-8a00-55d8996962a4","year":2023},"citing_paper":{"arxiv_id":"2605.11868","last_updated":"2026-05-12T09:48:53Z","snapshot_observed_at":"2026-07-06T23:23:39.723268Z","submitted_at":"2026-05-12T09:48:53Z","title":"IPI-proxy: An Intercepting Proxy for Red-Teaming Web-Browsing AI Agents Against Indirect Prompt Injection","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-05-13T05:46:07.132408Z"},"links":{"cited_paper":"/paper/2311.01011","citing_paper":"/paper/2605.11868"},"observation_digest":"sha256:a791c9eb07486247ac50652fb1c5a93b3a9de118fcf470395858a06b68868e23","observation_id":"0d4bc74b-e705-43e2-90b4-530dca9e7a67","resolution":{"observed_at":"2026-05-13T05:47:21.300470Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2311.01011","last_updated":"2023-11-02T06:13:36Z","snapshot_observed_at":"2026-07-06T16:42:04.139453Z","submitted_at":"2023-11-02T06:13:36Z","title":"Tensor Trust: Interpretable Prompt Injection Attacks from an Online Game","version":1},"cited_work":{"arxiv_id":"2311.01011","doi":"10.48550/arxiv.2311.01011","metadata_source":"arxiv_reference","pith_arxiv_id":"2311.01011","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"”Tensor trust: Interpretable prompt injection attacks from an online game.” arXiv preprint arXiv:2311.01011 (2023)","venue":"arXiv (Cornell University)","work_id":"2c485010-a490-4283-8a00-55d8996962a4","year":2023},"citing_paper":{"arxiv_id":"2605.13471","last_updated":"2026-05-13T12:57:31Z","snapshot_observed_at":"2026-08-07T12:59:11.913128Z","submitted_at":"2026-05-13T12:57:31Z","title":"Sleeper Channels and Provenance Gates: Persistent Prompt Injection in Always-on Autonomous AI Agents","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-05-14T18:21:06.872045Z"},"links":{"cited_paper":"/paper/2311.01011","citing_paper":"/paper/2605.13471"},"observation_digest":"sha256:5ef21a635489acf8ada8908908406ed76f07f6973626139dac5da3638cf9a0dd","observation_id":"48cb3bbc-1951-4ac0-aa21-f313eafe9be7","resolution":{"observed_at":"2026-05-14T18:22:33.624660Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2311.01011","last_updated":"2023-11-02T06:13:36Z","snapshot_observed_at":"2026-07-06T16:42:04.139453Z","submitted_at":"2023-11-02T06:13:36Z","title":"Tensor Trust: Interpretable Prompt Injection Attacks from an Online Game","version":1},"cited_work":{"arxiv_id":"2311.01011","doi":"10.48550/arxiv.2311.01011","metadata_source":"arxiv_reference","pith_arxiv_id":"2311.01011","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"”Tensor trust: Interpretable prompt injection attacks from an online game.” arXiv preprint arXiv:2311.01011 (2023)","venue":"arXiv (Cornell University)","work_id":"2c485010-a490-4283-8a00-55d8996962a4","year":2023},"citing_paper":{"arxiv_id":"2605.29251","last_updated":"2026-05-28T02:12:41Z","snapshot_observed_at":"2026-07-06T23:38:41.516603Z","submitted_at":"2026-05-28T02:12:41Z","title":"Provably Secure Agent Guardrail","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-06-29T07:43:17.593344Z"},"links":{"cited_paper":"/paper/2311.01011","citing_paper":"/paper/2605.29251"},"observation_digest":"sha256:039424be1e09890844483749011e6fce1072041a825a874d1cdbd81789ea2ca8","observation_id":"1a3ed555-9489-434a-83ab-605566dcd692","resolution":{"observed_at":"2026-06-29T07:53:14.261536Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2311.01011","last_updated":"2023-11-02T06:13:36Z","snapshot_observed_at":"2026-07-06T16:42:04.139453Z","submitted_at":"2023-11-02T06:13:36Z","title":"Tensor Trust: Interpretable Prompt Injection Attacks from an Online Game","version":1},"cited_work":{"arxiv_id":"2311.01011","doi":"10.48550/arxiv.2311.01011","metadata_source":"arxiv_reference","pith_arxiv_id":"2311.01011","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"”Tensor trust: Interpretable prompt injection attacks from an online game.” arXiv preprint arXiv:2311.01011 (2023)","venue":"arXiv (Cornell University)","work_id":"2c485010-a490-4283-8a00-55d8996962a4","year":2023},"citing_paper":{"arxiv_id":"2605.30521","last_updated":"2026-05-28T19:57:28Z","snapshot_observed_at":"2026-08-06T22:58:15.095145Z","submitted_at":"2026-05-28T19:57:28Z","title":"Evaluating using Mock Tool Calls to Quarantine Untrusted Prompt Inputs","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-06-29T07:29:36.706000Z"},"links":{"cited_paper":"/paper/2311.01011","citing_paper":"/paper/2605.30521"},"observation_digest":"sha256:e68ae7c017b7c0754d37b263c0f7a0c7cea38ff8d826a48e1e2fe197f81ee61b","observation_id":"e4e368db-bb0f-4d04-87df-9f997832e56f","resolution":{"observed_at":"2026-06-29T07:33:13.755760Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2311.01011","last_updated":"2023-11-02T06:13:36Z","snapshot_observed_at":"2026-07-06T16:42:04.139453Z","submitted_at":"2023-11-02T06:13:36Z","title":"Tensor Trust: Interpretable Prompt Injection Attacks from an Online Game","version":1},"cited_work":{"arxiv_id":"2311.01011","doi":"10.48550/arxiv.2311.01011","metadata_source":"arxiv_reference","pith_arxiv_id":"2311.01011","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"”Tensor trust: Interpretable prompt injection attacks from an online game.” arXiv preprint arXiv:2311.01011 (2023)","venue":"arXiv (Cornell University)","work_id":"2c485010-a490-4283-8a00-55d8996962a4","year":2023},"citing_paper":{"arxiv_id":"2606.04141","last_updated":"2026-06-02T18:53:17Z","snapshot_observed_at":"2026-08-02T13:02:03.082813Z","submitted_at":"2026-06-02T18:53:17Z","title":"Caught in the Act(ivation): Toward Pre-Output and Multi-Turn Detection of Credential Exfiltration by LLM Agents","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-06-28T09:15:57.044886Z"},"links":{"cited_paper":"/paper/2311.01011","citing_paper":"/paper/2606.04141"},"observation_digest":"sha256:8b52c59a852e632f6706aa0b5dc7306d2d44c75647b350961c12003554b3d359","observation_id":"93a37971-8fc0-4dff-9f1c-01821804ba7c","resolution":{"observed_at":"2026-07-02T04:16:36.022333Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2311.01011","last_updated":"2023-11-02T06:13:36Z","snapshot_observed_at":"2026-07-06T16:42:04.139453Z","submitted_at":"2023-11-02T06:13:36Z","title":"Tensor Trust: Interpretable Prompt Injection Attacks from an Online Game","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.01011","snapshot_observed_at":"2026-08-01T00:29:36.409779Z","title":"arXiv preprint arXiv:2311.01011 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26228","last_updated":"2026-07-28T20:06:31Z","snapshot_observed_at":"2026-08-03T03:27:54.562622Z","submitted_at":"2026-07-28T20:06:31Z","title":"Steering Instruction Hierarchies at Inference Time","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-01T00:29:36.409779Z"},"links":{"cited_paper":"/paper/2311.01011","citing_paper":"/paper/2607.26228"},"observation_digest":"sha256:240cb263e8751d9d9aa5a0024c3bfe7c084ba3a60fee284f8793f9b29c885bed","observation_id":"25def97d-8005-4c05-93a2-295855a21966","resolution":{"observed_at":"2026-08-01T00:29:36.409779Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.01011","last_updated":"2023-11-02T06:13:36Z","snapshot_observed_at":"2026-07-06T16:42:04.139453Z","submitted_at":"2023-11-02T06:13:36Z","title":"Tensor Trust: Interpretable Prompt Injection Attacks from an Online Game","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.01011","snapshot_observed_at":"2026-08-03T16:32:05.653882Z","title":"Tensor trust: Interpretable prompt injection attacks from an online game.arXiv preprint arXiv:2311.01011,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.28959","last_updated":"2026-07-31T02:26:04Z","snapshot_observed_at":"2026-08-08T11:30:35.233810Z","submitted_at":"2026-07-31T02:26:04Z","title":"Efficient LLM Adversarial Training via Low-Rank Defense and Circuit-Guided Surrogates","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-03T16:32:05.653882Z"},"links":{"cited_paper":"/paper/2311.01011","citing_paper":"/paper/2607.28959"},"observation_digest":"sha256:c4a58a6b9c6bf1649999d090ed4364b3c312fd546c3d641549be3e2b9909ec13","observation_id":"2b339f4c-fdf9-465f-bbfb-7c52b605216c","resolution":{"observed_at":"2026-08-03T16:32:05.653882Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2311.01011/citation-record","integrity":"/paper/2311.01011/integrity","json":"/paper/2311.01011/citation-record.json","paper":"/paper/2311.01011"},"outbound":[],"paper":{"arxiv_id":"2311.01011","last_updated":"2023-11-02T06:13:36Z","latest_version":1,"primary_category":"cs.LG","snapshot_observed_at":"2026-07-06T16:42:04.139453Z","submitted_at":"2023-11-02T06:13:36Z","title":"Tensor Trust: Interpretable Prompt Injection Attacks from an Online Game"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 23 inbound Pith citation observations for arXiv:2311.01011."}