{"as_of":"2026-08-09T03:56:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:11b61e74ace66814baef9d62e82075b358c3e25d3c916d193be200f53bfc2366","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":11,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":11,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":11,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":11,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T05:41:25.489612Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-05-22T19:11:58.025739Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2403.17710","last_updated":"2025-08-24T03:35:16Z","snapshot_observed_at":"2026-08-08T17:38:17.519859Z","submitted_at":"2024-03-26T13:58:00Z","title":"Optimization-based Prompt Injection Attack to LLM-as-a-Judge","version":5},"cited_work":{"arxiv_id":"2403.17710","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2403.17710","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Optimization-based prompt injection attack to llm-as-a-judge","venue":null,"work_id":"66710701-1037-49f4-9636-5d10324069fc","year":2024},"citing_paper":{"arxiv_id":"2412.05579","last_updated":"2024-12-10T05:49:12Z","snapshot_observed_at":"2026-07-31T01:42:39.468673Z","submitted_at":"2024-12-07T08:07:24Z","title":"LLMs-as-Judges: A Comprehensive Survey on LLM-based Evaluation Methods","version":2},"reference_index":203,"source":"pdf_text","source_observed_at":"2026-05-11T23:08:34.312466Z"},"links":{"cited_paper":"/paper/2403.17710","citing_paper":"/paper/2412.05579"},"observation_digest":"sha256:7c1a6853aa7d33f8ae298ca3107108a041e7a32fd446a9f59018dfff89996abf","observation_id":"6bfdfcaa-6878-4341-8eee-2f2b8a2b01b1","resolution":{"observed_at":"2026-05-11T23:08:34.701353Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.17710","last_updated":"2025-08-24T03:35:16Z","snapshot_observed_at":"2026-08-08T17:38:17.519859Z","submitted_at":"2024-03-26T13:58:00Z","title":"Optimization-based Prompt Injection Attack to LLM-as-a-Judge","version":5},"cited_work":{"arxiv_id":"2403.17710","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2403.17710","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Optimization-based prompt injection attack to llm-as-a-judge","venue":null,"work_id":"66710701-1037-49f4-9636-5d10324069fc","year":2024},"citing_paper":{"arxiv_id":"2504.20472","last_updated":"2026-04-09T06:57:42Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-04-29T07:13:53Z","title":"Robustness via Referencing: Defending against Prompt Injection Attacks by Referencing the Executed Instruction","version":2},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-05-22T19:10:55.009810Z"},"links":{"cited_paper":"/paper/2403.17710","citing_paper":"/paper/2504.20472"},"observation_digest":"sha256:991081e5c42beb2e6ab6343f9c3977cfcdb4adc84b308191b0e5b7a1872fc3ec","observation_id":"f64e0507-b88e-42d1-9295-8031abc02b86","resolution":{"observed_at":"2026-05-22T19:11:58.027376Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.17710","last_updated":"2025-08-24T03:35:16Z","snapshot_observed_at":"2026-08-08T17:38:17.519859Z","submitted_at":"2024-03-26T13:58:00Z","title":"Optimization-based Prompt Injection Attack to LLM-as-a-Judge","version":5},"cited_work":{"arxiv_id":"2403.17710","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2403.17710","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Optimization-based prompt injection attack to llm-as-a-judge","venue":null,"work_id":"66710701-1037-49f4-9636-5d10324069fc","year":2024},"citing_paper":{"arxiv_id":"2505.19237","last_updated":"2026-04-19T18:56:45Z","snapshot_observed_at":"2026-08-08T14:53:09.954970Z","submitted_at":"2025-05-25T17:26:28Z","title":"Sensorimotor Self-Recognition in Multimodal Large Language Model-Driven Robots","version":2},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-05-19T13:29:34.151546Z"},"links":{"cited_paper":"/paper/2403.17710","citing_paper":"/paper/2505.19237"},"observation_digest":"sha256:4fdb13c6ee54686ba6fa1dbd9879c36a1118f902773112160464b102be2f9d87","observation_id":"2098c671-f86d-457b-9fa8-5cb048c1aa00","resolution":{"observed_at":"2026-05-19T13:32:19.313605Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.17710","last_updated":"2025-08-24T03:35:16Z","snapshot_observed_at":"2026-08-08T17:38:17.519859Z","submitted_at":"2024-03-26T13:58:00Z","title":"Optimization-based Prompt Injection Attack to LLM-as-a-Judge","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.17710","snapshot_observed_at":"2026-08-07T05:41:25.489612Z","title":"Optimization-based prompt injection attack to llm-as-a-judge, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.07330","last_updated":"2025-06-09T00:11:06Z","snapshot_observed_at":"2026-08-08T01:51:03.511040Z","submitted_at":"2025-06-09T00:11:06Z","title":"JavelinGuard: Low-Cost Transformer Architectures for LLM Security","version":1},"reference_index":45,"source":"arxiv_source","source_observed_at":"2026-08-07T05:41:25.489612Z"},"links":{"cited_paper":"/paper/2403.17710","citing_paper":"/paper/2506.07330"},"observation_digest":"sha256:51e9c14622e6df122382a2edeca8c0073b1176601724dc13a5e2f95459bff5a3","observation_id":"f2c8128a-0674-4de9-b909-8351da0a6d26","resolution":{"observed_at":"2026-08-07T05:41:25.489612Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.17710","last_updated":"2025-08-24T03:35:16Z","snapshot_observed_at":"2026-08-08T17:38:17.519859Z","submitted_at":"2024-03-26T13:58:00Z","title":"Optimization-based Prompt Injection Attack to LLM-as-a-Judge","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.17710","snapshot_observed_at":"2026-08-06T16:24:30.569237Z","title":"Optimization-based prompt injection attack to llm-as-a-judge,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.13629","last_updated":"2025-07-18T03:41:18Z","snapshot_observed_at":"2026-08-07T10:03:57.005879Z","submitted_at":"2025-07-18T03:41:18Z","title":"Large Language Models in Cybersecurity: Applications, Vulnerabilities, and Defense Techniques","version":1},"reference_index":197,"source":"pdf_text","source_observed_at":"2026-08-06T16:24:30.569237Z"},"links":{"cited_paper":"/paper/2403.17710","citing_paper":"/paper/2507.13629"},"observation_digest":"sha256:2af41d632a4ebb2694db6ef9d07d4e68ca2ed941c87c8ec882be016bb52fe3b4","observation_id":"b3b0ed7e-1077-42ce-af8f-fc768d4b0a83","resolution":{"observed_at":"2026-08-06T16:24:30.569237Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.17710","last_updated":"2025-08-24T03:35:16Z","snapshot_observed_at":"2026-08-08T17:38:17.519859Z","submitted_at":"2024-03-26T13:58:00Z","title":"Optimization-based Prompt Injection Attack to LLM-as-a-Judge","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.17710","snapshot_observed_at":"2026-08-04T11:11:01.691786Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2510.06732","last_updated":"2026-06-28T18:43:51Z","snapshot_observed_at":"2026-08-04T11:10:58.904194Z","submitted_at":"2025-10-08T07:40:40Z","title":"Are LLMs Reliable Rankers? Rank Manipulation via Two-Stage Token Optimization","version":2},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-04T11:11:01.691786Z"},"links":{"cited_paper":"/paper/2403.17710","citing_paper":"/paper/2510.06732"},"observation_digest":"sha256:829c10d8898402ec9d3f80f95aac5f7bda156ae4c153b829d4ebe39a45a0cbba","observation_id":"43c54f97-c60d-4f3b-a363-079c37860a2f","resolution":{"observed_at":"2026-08-04T11:11:01.691786Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.17710","last_updated":"2025-08-24T03:35:16Z","snapshot_observed_at":"2026-08-08T17:38:17.519859Z","submitted_at":"2024-03-26T13:58:00Z","title":"Optimization-based Prompt Injection Attack to LLM-as-a-Judge","version":5},"cited_work":{"arxiv_id":"2403.17710","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2403.17710","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Optimization-based prompt injection attack to llm-as-a-judge","venue":null,"work_id":"66710701-1037-49f4-9636-5d10324069fc","year":2024},"citing_paper":{"arxiv_id":"2510.09093","last_updated":"2026-04-10T06:21:50Z","snapshot_observed_at":"2026-07-06T22:32:17.816175Z","submitted_at":"2025-10-10T07:39:01Z","title":"Exploiting Web Search Tools of AI Agents for Data Exfiltration","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-05-18T08:36:04.262528Z"},"links":{"cited_paper":"/paper/2403.17710","citing_paper":"/paper/2510.09093"},"observation_digest":"sha256:d00d799a9373364f0d05da8d2327bafaebf0daf2e7d4d321a937509422af7047","observation_id":"7af00cf1-f6f6-4f86-99bd-fe5385e3240b","resolution":{"observed_at":"2026-05-18T08:36:07.122645Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.17710","last_updated":"2025-08-24T03:35:16Z","snapshot_observed_at":"2026-08-08T17:38:17.519859Z","submitted_at":"2024-03-26T13:58:00Z","title":"Optimization-based Prompt Injection Attack to LLM-as-a-Judge","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.17710","snapshot_observed_at":"2026-07-13T12:52:49.101462Z","title":"Hung and K.-W","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2604.03598","last_updated":"2026-04-04T05:49:30Z","snapshot_observed_at":"2026-07-13T12:52:48.858079Z","submitted_at":"2026-04-04T05:49:30Z","title":"AttackEval: A Systematic Empirical Study of Prompt Injection Attack Effectiveness Against Large Language Models","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-07-13T12:52:49.101462Z"},"links":{"cited_paper":"/paper/2403.17710","citing_paper":"/paper/2604.03598"},"observation_digest":"sha256:1b9a8ca674eca946d81e5fda1902106d1c09f4347ebfa71f99d4c25aeca547ae","observation_id":"02fa4595-357a-476a-9454-8ca4ad1f55eb","resolution":{"observed_at":"2026-07-13T12:52:49.101462Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.17710","last_updated":"2025-08-24T03:35:16Z","snapshot_observed_at":"2026-08-08T17:38:17.519859Z","submitted_at":"2024-03-26T13:58:00Z","title":"Optimization-based Prompt Injection Attack to LLM-as-a-Judge","version":5},"cited_work":{"arxiv_id":"2403.17710","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2403.17710","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Optimization-based prompt injection attack to llm-as-a-judge","venue":null,"work_id":"66710701-1037-49f4-9636-5d10324069fc","year":2024},"citing_paper":{"arxiv_id":"2604.10134","last_updated":"2026-04-11T09:59:46Z","snapshot_observed_at":"2026-07-06T22:58:51.931478Z","submitted_at":"2026-04-11T09:59:46Z","title":"PlanGuard: Defending Agents against Indirect Prompt Injection via Planning-based Consistency Verification","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-05-10T16:19:09.341399Z"},"links":{"cited_paper":"/paper/2403.17710","citing_paper":"/paper/2604.10134"},"observation_digest":"sha256:7e8530b5649aac9adc0be9c5e7dc07dd2a23fb1160c28f4d48200de69b0772d3","observation_id":"9ed5f9f9-9fc1-4aed-8053-5d2bf2c3b883","resolution":{"observed_at":"2026-05-11T09:01:00.131680Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.17710","last_updated":"2025-08-24T03:35:16Z","snapshot_observed_at":"2026-08-08T17:38:17.519859Z","submitted_at":"2024-03-26T13:58:00Z","title":"Optimization-based Prompt Injection Attack to LLM-as-a-Judge","version":5},"cited_work":{"arxiv_id":"2403.17710","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2403.17710","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Optimization-based prompt injection attack to llm-as-a-judge","venue":null,"work_id":"66710701-1037-49f4-9636-5d10324069fc","year":2024},"citing_paper":{"arxiv_id":"2604.13602","last_updated":"2026-04-15T08:11:34Z","snapshot_observed_at":"2026-07-06T23:01:32.542040Z","submitted_at":"2026-04-15T08:11:34Z","title":"Reward Hacking in the Era of Large Models: Mechanisms, Emergent Misalignment, Challenges","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-05-10T13:58:53.430492Z"},"links":{"cited_paper":"/paper/2403.17710","citing_paper":"/paper/2604.13602"},"observation_digest":"sha256:9bfd5a86984c2da2af8c249f05d9079714fb610cff0da0ffb0ad0b761045efa1","observation_id":"86fc1c45-3c36-47f3-a419-05fce5e23709","resolution":{"observed_at":"2026-05-10T14:00:28.498933Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.17710","last_updated":"2025-08-24T03:35:16Z","snapshot_observed_at":"2026-08-08T17:38:17.519859Z","submitted_at":"2024-03-26T13:58:00Z","title":"Optimization-based Prompt Injection Attack to LLM-as-a-Judge","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.17710","snapshot_observed_at":"2026-08-03T00:55:26.952468Z","title":"arXiv preprint arXiv:2403.17710 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.28636","last_updated":"2026-05-19T13:56:13Z","snapshot_observed_at":"2026-08-06T00:38:04.006327Z","submitted_at":"2026-05-19T13:56:13Z","title":"Chain-of-Models: Cross-Model Auditing for Bias-Robust LLM Judges","version":1},"reference_index":90,"source":"arxiv_source","source_observed_at":"2026-08-03T00:55:26.952468Z"},"links":{"cited_paper":"/paper/2403.17710","citing_paper":"/paper/2607.28636"},"observation_digest":"sha256:116c01bef06359aafe6d1c446057608fd800b19d72e2372e96778abb245798db","observation_id":"e5527692-1c5d-4cb8-ae47-5f9d38ec1d8a","resolution":{"observed_at":"2026-08-03T00:55:26.952468Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2403.17710/citation-record","integrity":"/paper/2403.17710/integrity","json":"/paper/2403.17710/citation-record.json","paper":"/paper/2403.17710"},"outbound":[],"paper":{"arxiv_id":"2403.17710","last_updated":"2025-08-24T03:35:16Z","latest_version":5,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-08T17:38:17.519859Z","submitted_at":"2024-03-26T13:58:00Z","title":"Optimization-based Prompt Injection Attack to LLM-as-a-Judge"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 11 inbound Pith citation observations for arXiv:2403.17710."}