{"as_of":"2026-08-07T12:51:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:b669e194e0a33e3c6c029b991e8f15412241e8a29642f455e6050ad1cd1419fa","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":13,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":13,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":13,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":13,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T04:15:38.974260Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-06-29T17:13:44.838916Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2402.08416","last_updated":"2024-02-13T12:40:39Z","snapshot_observed_at":"2026-07-06T17:29:25.794341Z","submitted_at":"2024-02-13T12:40:39Z","title":"Pandora: Jailbreak GPTs by Retrieval Augmented Generation Poisoning","version":1},"cited_work":{"arxiv_id":"2402.08416","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2402.08416","snapshot_observed_at":"2026-06-29T17:13:44.838916Z","title":"arXiv preprint arXiv:2402.08416 (2024)","venue":null,"work_id":"14fa15a0-2ed8-43dd-8375-65511e1f5a64","year":2024},"citing_paper":{"arxiv_id":"2405.13068","last_updated":"2026-04-18T08:25:50Z","snapshot_observed_at":"2026-08-04T20:18:53.393132Z","submitted_at":"2024-05-20T17:17:55Z","title":"Uncovering Logit Suppression Vulnerabilities in LLM Safety Alignment","version":4},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-05-24T00:38:36.992597Z"},"links":{"cited_paper":"/paper/2402.08416","citing_paper":"/paper/2405.13068"},"observation_digest":"sha256:08b2cdd6a47944ca8849283512f2ca82639b1268bd7f8144a05d12f817f85ef2","observation_id":"76a35090-ac06-45f3-bebe-71428fdbb667","resolution":{"observed_at":"2026-05-24T00:38:39.886255Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.08416","last_updated":"2024-02-13T12:40:39Z","snapshot_observed_at":"2026-07-06T17:29:25.794341Z","submitted_at":"2024-02-13T12:40:39Z","title":"Pandora: Jailbreak GPTs by Retrieval Augmented Generation Poisoning","version":1},"cited_work":{"arxiv_id":"2402.08416","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2402.08416","snapshot_observed_at":"2026-06-29T17:13:44.838916Z","title":"arXiv preprint arXiv:2402.08416 (2024)","venue":null,"work_id":"14fa15a0-2ed8-43dd-8375-65511e1f5a64","year":2024},"citing_paper":{"arxiv_id":"2407.04295","last_updated":"2024-08-30T11:57:47Z","snapshot_observed_at":"2026-08-04T23:34:13.332065Z","submitted_at":"2024-07-05T06:57:30Z","title":"Jailbreak Attacks and Defenses Against Large Language Models: A Survey","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-05-15T02:20:44.368219Z"},"links":{"cited_paper":"/paper/2402.08416","citing_paper":"/paper/2407.04295"},"observation_digest":"sha256:1932886c2341bcad62a30dd7bac8904b77484a7e3ffeb0a19553556a0d6d85b2","observation_id":"41028fd5-ec67-4a46-9bfa-e82f63d6cd5c","resolution":{"observed_at":"2026-05-15T02:20:44.602841Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.08416","last_updated":"2024-02-13T12:40:39Z","snapshot_observed_at":"2026-07-06T17:29:25.794341Z","submitted_at":"2024-02-13T12:40:39Z","title":"Pandora: Jailbreak GPTs by Retrieval Augmented Generation Poisoning","version":1},"cited_work":{"arxiv_id":"2402.08416","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2402.08416","snapshot_observed_at":"2026-06-29T17:13:44.838916Z","title":"arXiv preprint arXiv:2402.08416 (2024)","venue":null,"work_id":"14fa15a0-2ed8-43dd-8375-65511e1f5a64","year":2024},"citing_paper":{"arxiv_id":"2501.00309","last_updated":"2025-01-08T05:16:25Z","snapshot_observed_at":"2026-08-07T12:37:34.294206Z","submitted_at":"2024-12-31T06:59:35Z","title":"Retrieval-Augmented Generation with Graphs (GraphRAG)","version":2},"reference_index":79,"source":"pdf_text","source_observed_at":"2026-05-18T04:33:39.076517Z"},"links":{"cited_paper":"/paper/2402.08416","citing_paper":"/paper/2501.00309"},"observation_digest":"sha256:30b4c3a14ee6160e92864ac98919eefb79f96db11893e8e5457de11c549991bc","observation_id":"7597fb98-1f29-4442-a811-80aad9b0ac2c","resolution":{"observed_at":"2026-05-18T04:33:39.502707Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.08416","last_updated":"2024-02-13T12:40:39Z","snapshot_observed_at":"2026-07-06T17:29:25.794341Z","submitted_at":"2024-02-13T12:40:39Z","title":"Pandora: Jailbreak GPTs by Retrieval Augmented Generation Poisoning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.08416","snapshot_observed_at":"2026-08-07T04:15:38.974260Z","title":"Pandora: Jailbreak gpts by retrieval augmented generation poisoning,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.11415","last_updated":"2025-06-13T02:28:46Z","snapshot_observed_at":"2026-08-07T06:57:31.289956Z","submitted_at":"2025-06-13T02:28:46Z","title":"Bias Amplification in RAG: Poisoning Knowledge Retrieval to Steer LLMs","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-07T04:15:38.974260Z"},"links":{"cited_paper":"/paper/2402.08416","citing_paper":"/paper/2506.11415"},"observation_digest":"sha256:a373fe9d3d2dff508fe6e778f2e2e4ecadbbad388b9e4e510e3683536e5b6c8b","observation_id":"e36aa399-4b1a-4577-8e6e-33a9cf155af4","resolution":{"observed_at":"2026-08-07T04:15:38.974260Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.08416","last_updated":"2024-02-13T12:40:39Z","snapshot_observed_at":"2026-07-06T17:29:25.794341Z","submitted_at":"2024-02-13T12:40:39Z","title":"Pandora: Jailbreak GPTs by Retrieval Augmented Generation Poisoning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.08416","snapshot_observed_at":"2026-08-06T23:20:53.234749Z","title":"Pandora: Jailbreak GPTs by Retrieval Augmented Generation Poisoning.CoRR abs/2402.084162024","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.18543","last_updated":"2026-05-25T10:15:56Z","snapshot_observed_at":"2026-08-06T23:13:30.961405Z","submitted_at":"2025-06-23T11:53:31Z","title":"SoK: A Comprehensive Security Analysis of Jailbreak Resilience in GPT and DeepSeek Models","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-06T23:20:53.234749Z"},"links":{"cited_paper":"/paper/2402.08416","citing_paper":"/paper/2506.18543"},"observation_digest":"sha256:915b22b44f647b20695a3ebfd30d45daca2d54086ce4868429389907188aac74","observation_id":"1107255d-f51b-401a-841e-7976b9a6d564","resolution":{"observed_at":"2026-08-06T23:20:53.234749Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.08416","last_updated":"2024-02-13T12:40:39Z","snapshot_observed_at":"2026-07-06T17:29:25.794341Z","submitted_at":"2024-02-13T12:40:39Z","title":"Pandora: Jailbreak GPTs by Retrieval Augmented Generation Poisoning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.08416","snapshot_observed_at":"2026-08-06T19:37:31.553363Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.05093","last_updated":"2025-07-07T15:13:54Z","snapshot_observed_at":"2026-08-06T19:30:10.653271Z","submitted_at":"2025-07-07T15:13:54Z","title":"The Hidden Threat in Plain Text: Attacking RAG Data Loaders","version":1},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-06T19:37:31.553363Z"},"links":{"cited_paper":"/paper/2402.08416","citing_paper":"/paper/2507.05093"},"observation_digest":"sha256:9b7995d1bb0ec5a09db6e12755c04a988bc9c03405f44cd61d752df62b1e2737","observation_id":"9afd1635-3115-48aa-a96b-e33b63212e3e","resolution":{"observed_at":"2026-08-06T19:37:31.553363Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.08416","last_updated":"2024-02-13T12:40:39Z","snapshot_observed_at":"2026-07-06T17:29:25.794341Z","submitted_at":"2024-02-13T12:40:39Z","title":"Pandora: Jailbreak GPTs by Retrieval Augmented Generation Poisoning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.08416","snapshot_observed_at":"2026-08-05T20:31:47.622372Z","title":"Pandora: Jailbreak gpts by retrieval augmented generation poisoning","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.10404","last_updated":"2025-08-14T07:12:44Z","snapshot_observed_at":"2026-08-05T20:31:28.198027Z","submitted_at":"2025-08-14T07:12:44Z","title":"Layer-Wise Perturbations via Sparse Autoencoders for Adversarial Text Generation","version":1},"reference_index":162,"source":"pdf_text","source_observed_at":"2026-08-05T20:31:47.622372Z"},"links":{"cited_paper":"/paper/2402.08416","citing_paper":"/paper/2508.10404"},"observation_digest":"sha256:0c5a4c82676ba57a1b9ecf17dedf5bf05e0852bc5ffaebdc9e31c23a53aec078","observation_id":"bf974f53-c949-4136-9f94-b7234b82c8f1","resolution":{"observed_at":"2026-08-05T20:31:47.622372Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.08416","last_updated":"2024-02-13T12:40:39Z","snapshot_observed_at":"2026-07-06T17:29:25.794341Z","submitted_at":"2024-02-13T12:40:39Z","title":"Pandora: Jailbreak GPTs by Retrieval Augmented Generation Poisoning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.08416","snapshot_observed_at":"2026-08-04T09:25:38.931982Z","title":"Pandora: Jailbreak gpts by retrieval augmented generation poisoning.CoRR, abs/2402.08416, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.15476","last_updated":"2026-07-04T04:20:15Z","snapshot_observed_at":"2026-08-06T02:45:04.316908Z","submitted_at":"2025-10-17T09:38:54Z","title":"SoK: Systematizing LLM Prompt Security: Taxonomies, Datasets, and Unified Evaluation of Attacks and Defenses","version":3},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-04T09:25:38.931982Z"},"links":{"cited_paper":"/paper/2402.08416","citing_paper":"/paper/2510.15476"},"observation_digest":"sha256:f42d5896dc7c592142bee9c0e1fff843fcf0f6c19d591ad3fbdd1c363dac3efd","observation_id":"5c0115b3-6007-4d3b-a37c-5413d25effe7","resolution":{"observed_at":"2026-08-04T09:25:38.931982Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.08416","last_updated":"2024-02-13T12:40:39Z","snapshot_observed_at":"2026-07-06T17:29:25.794341Z","submitted_at":"2024-02-13T12:40:39Z","title":"Pandora: Jailbreak GPTs by Retrieval Augmented Generation Poisoning","version":1},"cited_work":{"arxiv_id":"2402.08416","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2402.08416","snapshot_observed_at":"2026-06-29T17:13:44.838916Z","title":"arXiv preprint arXiv:2402.08416 (2024)","venue":null,"work_id":"14fa15a0-2ed8-43dd-8375-65511e1f5a64","year":2024},"citing_paper":{"arxiv_id":"2602.02280","last_updated":"2026-05-12T03:47:11Z","snapshot_observed_at":"2026-07-06T22:44:09.804048Z","submitted_at":"2026-02-02T16:20:51Z","title":"RACC: Representation-Aware Coverage Criteria for LLM Safety Testing","version":2},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-05-16T08:12:55.296932Z"},"links":{"cited_paper":"/paper/2402.08416","citing_paper":"/paper/2602.02280"},"observation_digest":"sha256:328de345dfc380b503cf2a78c884074df2c82f3bace79416c242f66e17519d36","observation_id":"fe96bbb9-79da-4d30-978f-b5dd30090a75","resolution":{"observed_at":"2026-05-16T08:17:36.591816Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.08416","last_updated":"2024-02-13T12:40:39Z","snapshot_observed_at":"2026-07-06T17:29:25.794341Z","submitted_at":"2024-02-13T12:40:39Z","title":"Pandora: Jailbreak GPTs by Retrieval Augmented Generation Poisoning","version":1},"cited_work":{"arxiv_id":"2402.08416","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2402.08416","snapshot_observed_at":"2026-06-29T17:13:44.838916Z","title":"arXiv preprint arXiv:2402.08416 (2024)","venue":null,"work_id":"14fa15a0-2ed8-43dd-8375-65511e1f5a64","year":2024},"citing_paper":{"arxiv_id":"2602.11327","last_updated":"2026-04-17T15:12:16Z","snapshot_observed_at":"2026-07-06T22:45:34.674215Z","submitted_at":"2026-02-11T19:58:23Z","title":"Security Threat Modeling for Emerging AI-Agent Protocols: A Comparative Analysis of MCP, A2A, Agora, and ANP","version":2},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-05-16T05:05:16.370606Z"},"links":{"cited_paper":"/paper/2402.08416","citing_paper":"/paper/2602.11327"},"observation_digest":"sha256:47d97ac2cb0e16066188588c39776bb9ce603f460474477299a8b4fa1b36b994","observation_id":"e05865fc-1e87-4455-acbf-b6010afb77ec","resolution":{"observed_at":"2026-05-16T05:07:20.731784Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.08416","last_updated":"2024-02-13T12:40:39Z","snapshot_observed_at":"2026-07-06T17:29:25.794341Z","submitted_at":"2024-02-13T12:40:39Z","title":"Pandora: Jailbreak GPTs by Retrieval Augmented Generation Poisoning","version":1},"cited_work":{"arxiv_id":"2402.08416","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2402.08416","snapshot_observed_at":"2026-06-29T17:13:44.838916Z","title":"arXiv preprint arXiv:2402.08416 (2024)","venue":null,"work_id":"14fa15a0-2ed8-43dd-8375-65511e1f5a64","year":2024},"citing_paper":{"arxiv_id":"2605.01782","last_updated":"2026-05-03T08:42:29Z","snapshot_observed_at":"2026-07-31T09:19:52.528360Z","submitted_at":"2026-05-03T08:42:29Z","title":"Needle-in-RAG: Prompt-Conditioned Character-Level Traceback of Poisoned Spans in Retrieved Evidence","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-05-10T14:52:32.202125Z"},"links":{"cited_paper":"/paper/2402.08416","citing_paper":"/paper/2605.01782"},"observation_digest":"sha256:fd4ebea6682c8da45a15616239e73c3a1b899f67518fe21e78bd0b3826817acc","observation_id":"355e2b38-4455-4318-a80b-1a8bd3588911","resolution":{"observed_at":"2026-05-11T11:31:00.538281Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.08416","last_updated":"2024-02-13T12:40:39Z","snapshot_observed_at":"2026-07-06T17:29:25.794341Z","submitted_at":"2024-02-13T12:40:39Z","title":"Pandora: Jailbreak GPTs by Retrieval Augmented Generation Poisoning","version":1},"cited_work":{"arxiv_id":"2402.08416","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2402.08416","snapshot_observed_at":"2026-06-29T17:13:44.838916Z","title":"arXiv preprint arXiv:2402.08416 (2024)","venue":null,"work_id":"14fa15a0-2ed8-43dd-8375-65511e1f5a64","year":2024},"citing_paper":{"arxiv_id":"2605.27157","last_updated":"2026-05-26T15:18:43Z","snapshot_observed_at":"2026-08-05T03:04:01.161346Z","submitted_at":"2026-05-26T15:18:43Z","title":"Detecting Is Not Resolving: The Monitoring Control Gap in Retrieval Augmented LLMs","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-06-29T17:06:46.379906Z"},"links":{"cited_paper":"/paper/2402.08416","citing_paper":"/paper/2605.27157"},"observation_digest":"sha256:72f55adae5d24be6cfe063e18dabc08163f4f168b3639cfa8adee9f35eded4fe","observation_id":"35a85860-ee89-4acd-a5b2-a18fa3be4e00","resolution":{"observed_at":"2026-06-29T17:13:44.840274Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.08416","last_updated":"2024-02-13T12:40:39Z","snapshot_observed_at":"2026-07-06T17:29:25.794341Z","submitted_at":"2024-02-13T12:40:39Z","title":"Pandora: Jailbreak GPTs by Retrieval Augmented Generation Poisoning","version":1},"cited_work":{"arxiv_id":"2402.08416","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2402.08416","snapshot_observed_at":"2026-06-29T17:13:44.838916Z","title":"arXiv preprint arXiv:2402.08416 (2024)","venue":null,"work_id":"14fa15a0-2ed8-43dd-8375-65511e1f5a64","year":2024},"citing_paper":{"arxiv_id":"2605.29224","last_updated":"2026-05-28T01:23:48Z","snapshot_observed_at":"2026-08-04T16:37:41.908246Z","submitted_at":"2026-05-28T01:23:48Z","title":"Relevance as a Vulnerability: How Web Retrieval Degrades Safety Alignment in LLM Agents","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-06-29T08:21:44.993917Z"},"links":{"cited_paper":"/paper/2402.08416","citing_paper":"/paper/2605.29224"},"observation_digest":"sha256:922348c3177516d606f9c56b6e8efbf4de05d5e76a85070f05904849dc7067a1","observation_id":"9ce64596-93c1-43b7-9abf-dcd01f04875f","resolution":{"observed_at":"2026-06-29T08:23:14.903619Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2402.08416/citation-record","integrity":"/paper/2402.08416/integrity","json":"/paper/2402.08416/citation-record.json","paper":"/paper/2402.08416"},"outbound":[],"paper":{"arxiv_id":"2402.08416","last_updated":"2024-02-13T12:40:39Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-07-06T17:29:25.794341Z","submitted_at":"2024-02-13T12:40:39Z","title":"Pandora: Jailbreak GPTs by Retrieval Augmented Generation Poisoning"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 7 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 13 inbound Pith citation observations for arXiv:2402.08416."}