Paper Citation Record · LEDGER

Can LLMs Separate Instructions From Data? And What Do We Even Mean By That?

As of 9 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 10 inbound Pith citation observations for arXiv:2403.06833.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2403.06833 v3

Coverage vector

measured 0 of 0 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links

measured 10 of 10 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-08T06:32:00.761636+00:00

measured 10 of 10 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-08-07T23:56:00.156616Z

measured 1 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: arxiv_reference, observed 2026-08-05T02:28:24.338817Z

Reference resolution

0 of 0 outbound references displayed

verified exact0
verified fuzzy0
unresolved0
parse uncertain0
malformed identifier0
metadata mismatch0

External citation measurements

0
arxiv_reference, observed 2026-08-05T02:28:24.338817Z

Outbound references

No outbound reference observations are available for this paper version.

Pith citing papers

Observation 46fec84a-dbcb-4e7e-8d3f-a40d8fa35f43 · inbound

AgentDojo: A Dynamic Environment to Evaluate Prompt Injection Attacks and Defenses for LLM Agents cites this paper.

AgentDojo: A Dynamic Environment to Evaluate Prompt Injection Attacks and Defenses for LLM Agents Can LLMs Separate Instructions From Data? And What Do We Even Mean By That?

Reference 74

Resolution: verified exact; arxiv_id, observed 2026-05-13T06:35:13.544043Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

Observation b934316d-ab8c-426a-8d27-774b3c045fa5 · inbound

IHEval: Evaluating Language Models on Following the Instruction Hierarchy cites this paper.

IHEval: Evaluating Language Models on Following the Instruction Hierarchy Can LLMs Separate Instructions From Data? And What Do We Even Mean By That?

Reference 44

Resolution: unresolved; no resolver link, observed 2026-08-07T23:56:00.156616Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 9931e2ed-3a9e-4a01-b986-f997ec53af2a · inbound

Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution cites this paper.

Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution Can LLMs Separate Instructions From Data? And What Do We Even Mean By That?

Reference 53

Resolution: unresolved; no resolver link, observed 2026-08-07T11:59:27.808634Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 07c87b88-74f8-4aac-95e0-46bc0cd8a13b · inbound

Design Patterns for Securing LLM Agents against Prompt Injections cites this paper.

Design Patterns for Securing LLM Agents against Prompt Injections Can LLMs Separate Instructions From Data? And What Do We Even Mean By That?

Reference 19

Resolution: unresolved; no resolver link, observed 2026-08-07T05:06:15.330135Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 1860e671-b3b1-4376-86f6-9233a024b7b7 · inbound

LocalAlign: Enabling Generalizable Prompt Injection Defense via Generation of Near-Target Adversarial Examples for Alignment Training cites this paper.

LocalAlign: Enabling Generalizable Prompt Injection Defense via Generation of Near-Target Adversarial Examples for Alignment Training Can LLMs Separate Instructions From Data? And What Do We Even Mean By That?

Reference 53

Resolution: verified exact; arxiv_id, observed 2026-05-11T17:01:08.575344Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

Observation 130a24d2-66d5-4481-82cc-4aa1c32906cd · inbound

From AI-Generated Content to Agentic Action: Security and Safety Threats in Generative AI cites this paper.

From AI-Generated Content to Agentic Action: Security and Safety Threats in Generative AI Can LLMs Separate Instructions From Data? And What Do We Even Mean By That?

Reference 162

Resolution: verified exact; arxiv_id, observed 2026-05-20T18:08:50.640748Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

Observation b501d23f-8263-43ed-bbc8-2b0d0721a1b2 · inbound

Mitigating Adaptive Attacks against Reasoning Models with Activation Consistency Training cites this paper.

Mitigating Adaptive Attacks against Reasoning Models with Activation Consistency Training Can LLMs Separate Instructions From Data? And What Do We Even Mean By That?

Reference 23

Resolution: verified exact; arxiv_id, observed 2026-06-29T14:23:30.681903Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

Observation 7dc3e0b7-957e-4fc8-980f-5132d9fb617f · inbound

Consistency Training while Mitigating Obfuscation via Rate Matching cites this paper.

Consistency Training while Mitigating Obfuscation via Rate Matching Can LLMs Separate Instructions From Data? And What Do We Even Mean By That?

Reference 108

Resolution: metadata mismatch; arxiv_id, observed 2026-06-28T14:32:18.125469Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

Observation afa66361-b136-43dc-9398-0514501536dd · inbound

Discourse-Role Labels as Presentation-Time Variables for Context Use in Language Models cites this paper.

Discourse-Role Labels as Presentation-Time Variables for Context Use in Language Models Can LLMs Separate Instructions From Data? And What Do We Even Mean By That?

Reference 17

Resolution: metadata mismatch; arxiv_id, observed 2026-07-02T03:16:33.687686Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

Observation f36b374a-3905-4eb1-a4d7-50ce77a07eb9 · inbound

Security--Fidelity Tradeoffs: The Hidden Cost of Prompt Injection Defense cites this paper.

Security--Fidelity Tradeoffs: The Hidden Cost of Prompt Injection Defense Can LLMs Separate Instructions From Data? And What Do We Even Mean By That?

Reference 71

Resolution: verified exact; arxiv_id, observed 2026-07-01T01:45:13.802713Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.