{"as_of":"2026-08-12T05:21:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:e52b1a8936a98d08ba7a1fa2b73ac353e033957df24b55f8f94c5ebfe9ad3781","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":8,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":8,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-11T06:34:44.6726+00:00","state":"measured"},{"denominator":8,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":8,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-11T10:24:26.983523Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":1,"source":"arxiv_reference","source_observed_at":"2026-08-05T02:28:24.338817Z","state":"measured"}],"external_citation_measurements":[{"count":0,"observed_at":"2026-08-05T02:28:24.338817Z","source":"arxiv_reference"}],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2312.17673","last_updated":"2024-01-08T19:11:26Z","snapshot_observed_at":"2026-08-11T18:53:57.726869Z","submitted_at":"2023-12-29T16:37:53Z","title":"Jatmo: Prompt Injection Defense by Task-Specific Finetuning","version":2},"cited_work":{"arxiv_id":"2312.17673","doi":"10.48550/arxiv.2312.17673","metadata_source":"arxiv_reference","pith_arxiv_id":"2312.17673","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Jatmo: Prompt Injection Defense by Task-Specific Finetuning","venue":"arXiv (Cornell University)","work_id":"d7db2aa4-9e11-42d4-868a-8a37841e1fbd","year":2023},"citing_paper":{"arxiv_id":"2402.06922","last_updated":"2026-04-21T14:06:34Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-02-10T11:07:24Z","title":"Whispers in the Machine: Confidentiality in Agentic Systems","version":5},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-05-24T03:59:03.972043Z"},"links":{"cited_paper":"/paper/2312.17673","citing_paper":"/paper/2402.06922"},"observation_digest":"sha256:6008dfea78d882c08d4aad3f0648a09e9733fe77e017d1fc78615819894bf8fb","observation_id":"98381078-75c3-47e9-9849-130803caca27","resolution":{"observed_at":"2026-05-24T04:03:53.941638Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.17673","last_updated":"2024-01-08T19:11:26Z","snapshot_observed_at":"2026-08-11T18:53:57.726869Z","submitted_at":"2023-12-29T16:37:53Z","title":"Jatmo: Prompt Injection Defense by Task-Specific Finetuning","version":2},"cited_work":{"arxiv_id":"2312.17673","doi":"10.48550/arxiv.2312.17673","metadata_source":"arxiv_reference","pith_arxiv_id":"2312.17673","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Jatmo: Prompt Injection Defense by Task-Specific Finetuning","venue":"arXiv (Cornell University)","work_id":"d7db2aa4-9e11-42d4-868a-8a37841e1fbd","year":2023},"citing_paper":{"arxiv_id":"2403.10559","last_updated":"2026-04-21T03:03:43Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-03-14T06:51:26Z","title":"Generative Models and Connected and Automated Vehicles: A Survey in Exploring the Intersection of Transportation and AI","version":4},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-05-24T02:48:10.934475Z"},"links":{"cited_paper":"/paper/2312.17673","citing_paper":"/paper/2403.10559"},"observation_digest":"sha256:e5a91dfc5c2ebc95e29ceb71f4ca584981b81b955d5ec7dd39816fc0eaa94c39","observation_id":"b08d6cdf-4b04-4e06-a5b4-09e88b279c79","resolution":{"observed_at":"2026-05-24T02:48:47.357004Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.17673","last_updated":"2024-01-08T19:11:26Z","snapshot_observed_at":"2026-08-11T18:53:57.726869Z","submitted_at":"2023-12-29T16:37:53Z","title":"Jatmo: Prompt Injection Defense by Task-Specific Finetuning","version":2},"cited_work":{"arxiv_id":"2312.17673","doi":"10.48550/arxiv.2312.17673","metadata_source":"arxiv_reference","pith_arxiv_id":"2312.17673","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Jatmo: Prompt Injection Defense by Task-Specific Finetuning","venue":"arXiv (Cornell University)","work_id":"d7db2aa4-9e11-42d4-868a-8a37841e1fbd","year":2023},"citing_paper":{"arxiv_id":"2410.07283","last_updated":"2024-10-09T11:01:29Z","snapshot_observed_at":"2026-08-11T20:32:18.138792Z","submitted_at":"2024-10-09T11:01:29Z","title":"Prompt Infection: LLM-to-LLM Prompt Injection within Multi-Agent Systems","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-05-15T19:32:19.405615Z"},"links":{"cited_paper":"/paper/2312.17673","citing_paper":"/paper/2410.07283"},"observation_digest":"sha256:aed4547e2b686aad2f9661ab7c3f293093505e3a53d331193fb3599e108cc0af","observation_id":"08c210f2-ad1a-4c34-868b-87fa69bc339d","resolution":{"observed_at":"2026-05-15T19:32:19.593391Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.17673","last_updated":"2024-01-08T19:11:26Z","snapshot_observed_at":"2026-08-11T18:53:57.726869Z","submitted_at":"2023-12-29T16:37:53Z","title":"Jatmo: Prompt Injection Defense by Task-Specific Finetuning","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.17673","snapshot_observed_at":"2026-08-11T10:24:26.983523Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.16682","last_updated":"2024-12-21T16:17:48Z","snapshot_observed_at":"2026-08-12T03:14:31.288757Z","submitted_at":"2024-12-21T16:17:48Z","title":"The Task Shield: Enforcing Task Alignment to Defend Against Indirect Prompt Injection in LLM Agents","version":1},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-11T10:24:26.983523Z"},"links":{"cited_paper":"/paper/2312.17673","citing_paper":"/paper/2412.16682"},"observation_digest":"sha256:af13cb4e42207bfeff3031cebff94e9fbb5a64125cda2dc08c1413f34b2dd790","observation_id":"746e4891-1d42-4be8-8177-c845af83407e","resolution":{"observed_at":"2026-08-11T10:24:26.983523Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.17673","last_updated":"2024-01-08T19:11:26Z","snapshot_observed_at":"2026-08-11T18:53:57.726869Z","submitted_at":"2023-12-29T16:37:53Z","title":"Jatmo: Prompt Injection Defense by Task-Specific Finetuning","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.17673","snapshot_observed_at":"2026-08-10T14:38:10.756911Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2501.15145","last_updated":"2025-04-12T02:58:59Z","snapshot_observed_at":"2026-08-11T19:46:34.722732Z","submitted_at":"2025-01-25T09:03:19Z","title":"PromptShield: Deployable Detection for Prompt Injection Attacks","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-10T14:38:10.756911Z"},"links":{"cited_paper":"/paper/2312.17673","citing_paper":"/paper/2501.15145"},"observation_digest":"sha256:0e4773e56bb53fb09dfdc18e32bdaa54cf6a3d0bc5d799d513e908b2e651e4e1","observation_id":"cd390d15-0022-45d2-88a3-f93878cbf92f","resolution":{"observed_at":"2026-08-10T14:38:10.756911Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.17673","last_updated":"2024-01-08T19:11:26Z","snapshot_observed_at":"2026-08-11T18:53:57.726869Z","submitted_at":"2023-12-29T16:37:53Z","title":"Jatmo: Prompt Injection Defense by Task-Specific Finetuning","version":2},"cited_work":{"arxiv_id":"2312.17673","doi":"10.48550/arxiv.2312.17673","metadata_source":"arxiv_reference","pith_arxiv_id":"2312.17673","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Jatmo: Prompt Injection Defense by Task-Specific Finetuning","venue":"arXiv (Cornell University)","work_id":"d7db2aa4-9e11-42d4-868a-8a37841e1fbd","year":2023},"citing_paper":{"arxiv_id":"2502.05206","last_updated":"2026-04-14T16:10:41Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-02-02T05:14:22Z","title":"Safety at Scale: A Comprehensive Survey of Large Model and Agent Safety","version":6},"reference_index":139,"source":"pdf_text","source_observed_at":"2026-05-23T04:39:04.591722Z"},"links":{"cited_paper":"/paper/2312.17673","citing_paper":"/paper/2502.05206"},"observation_digest":"sha256:6d56609b19387e7fae1004317801bb3956759a047ecd38cbf676a4f123c7ee7e","observation_id":"7510a630-62b5-402e-9f75-f60b61c7a285","resolution":{"observed_at":"2026-05-23T04:42:33.841880Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.17673","last_updated":"2024-01-08T19:11:26Z","snapshot_observed_at":"2026-08-11T18:53:57.726869Z","submitted_at":"2023-12-29T16:37:53Z","title":"Jatmo: Prompt Injection Defense by Task-Specific Finetuning","version":2},"cited_work":{"arxiv_id":"2312.17673","doi":"10.48550/arxiv.2312.17673","metadata_source":"arxiv_reference","pith_arxiv_id":"2312.17673","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Jatmo: Prompt Injection Defense by Task-Specific Finetuning","venue":"arXiv (Cornell University)","work_id":"d7db2aa4-9e11-42d4-868a-8a37841e1fbd","year":2023},"citing_paper":{"arxiv_id":"2504.20472","last_updated":"2026-04-09T06:57:42Z","snapshot_observed_at":"2026-08-11T00:18:02.376995Z","submitted_at":"2025-04-29T07:13:53Z","title":"Robustness via Referencing: Defending against Prompt Injection Attacks by Referencing the Executed Instruction","version":2},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-05-22T19:10:55.009810Z"},"links":{"cited_paper":"/paper/2312.17673","citing_paper":"/paper/2504.20472"},"observation_digest":"sha256:3fd867d5d2d88b859b9510c7500bef67564b49686ee8921c5c2d51cbda6148d0","observation_id":"3d6ae72f-94cc-469c-ad36-ca0158b5db6d","resolution":{"observed_at":"2026-05-22T19:11:58.002568Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.17673","last_updated":"2024-01-08T19:11:26Z","snapshot_observed_at":"2026-08-11T18:53:57.726869Z","submitted_at":"2023-12-29T16:37:53Z","title":"Jatmo: Prompt Injection Defense by Task-Specific Finetuning","version":2},"cited_work":{"arxiv_id":"2312.17673","doi":"10.48550/arxiv.2312.17673","metadata_source":"arxiv_reference","pith_arxiv_id":"2312.17673","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Jatmo: Prompt Injection Defense by Task-Specific Finetuning","venue":"arXiv (Cornell University)","work_id":"d7db2aa4-9e11-42d4-868a-8a37841e1fbd","year":2023},"citing_paper":{"arxiv_id":"2604.17562","last_updated":"2026-04-19T18:02:21Z","snapshot_observed_at":"2026-08-11T13:57:18.489866Z","submitted_at":"2026-04-19T18:02:21Z","title":"SafeAgent: A Runtime Protection Architecture for Agentic Systems","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-05-10T06:06:49.717091Z"},"links":{"cited_paper":"/paper/2312.17673","citing_paper":"/paper/2604.17562"},"observation_digest":"sha256:cbfce2893cb5547bc7e265e115905c3a24a03390b494c2d35e025cdc9b713848","observation_id":"34808008-a7a6-4776-9be1-c4d12fe4c027","resolution":{"observed_at":"2026-05-10T06:11:20.538767Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2312.17673/citation-record","integrity":"/paper/2312.17673/integrity","json":"/paper/2312.17673/citation-record.json","paper":"/paper/2312.17673"},"outbound":[],"paper":{"arxiv_id":"2312.17673","last_updated":"2024-01-08T19:11:26Z","latest_version":2,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-11T18:53:57.726869Z","submitted_at":"2023-12-29T16:37:53Z","title":"Jatmo: Prompt Injection Defense by Task-Specific Finetuning"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"thesis":"As of 12 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 8 inbound Pith citation observations for arXiv:2312.17673."}