{"as_of":"2026-08-08T02:18:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:53e0af7a23b6e9cbd1d9f45b250b31689659d635ab1f18838476d52c6ffb0694","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":8,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":8,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":8,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":8,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T12:42:16.635079Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-05-23T04:42:34.024447Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2404.07234","last_updated":"2024-11-09T04:01:22Z","snapshot_observed_at":"2026-07-06T17:58:25.894552Z","submitted_at":"2024-04-06T06:17:10Z","title":"Goal-guided Generative Prompt Injection Attack on Large Language Models","version":4},"cited_work":{"arxiv_id":"2404.07234","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2404.07234","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Goal-guided generative prompt injection attack on large language models","venue":null,"work_id":"ad328943-30bb-4520-ab31-78f705c641da","year":2024},"citing_paper":{"arxiv_id":"2502.05206","last_updated":"2026-04-14T16:10:41Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-02-02T05:14:22Z","title":"Safety at Scale: A Comprehensive Survey of Large Model and Agent Safety","version":6},"reference_index":132,"source":"pdf_text","source_observed_at":"2026-05-23T04:39:04.591722Z"},"links":{"cited_paper":"/paper/2404.07234","citing_paper":"/paper/2502.05206"},"observation_digest":"sha256:19004061066d474dba5a7abd350d4cac39d89b0e9e483856a8c0a599f2fdbb92","observation_id":"dc7bafab-11b4-44f4-85b1-23c9474a078c","resolution":{"observed_at":"2026-05-23T04:42:34.027819Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.07234","last_updated":"2024-11-09T04:01:22Z","snapshot_observed_at":"2026-07-06T17:58:25.894552Z","submitted_at":"2024-04-06T06:17:10Z","title":"Goal-guided Generative Prompt Injection Attack on Large Language Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.07234","snapshot_observed_at":"2026-08-07T12:42:16.635079Z","title":"Goal-guided generative prompt injection attack on large language models.arXiv preprint arXiv:2404.07234, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:16.635079Z"},"links":{"cited_paper":"/paper/2404.07234","citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:ece449a658b514fe1d6e19a4acf884516f44ffb80802b042f7dff8abf01a17c7","observation_id":"4adf505c-776b-47ab-bae3-822d609394ca","resolution":{"observed_at":"2026-08-07T12:42:16.635079Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.07234","last_updated":"2024-11-09T04:01:22Z","snapshot_observed_at":"2026-07-06T17:58:25.894552Z","submitted_at":"2024-04-06T06:17:10Z","title":"Goal-guided Generative Prompt Injection Attack on Large Language Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.07234","snapshot_observed_at":"2026-08-06T15:48:58.642580Z","title":"Goal-guided Generative Prompt Injection Attack on Large Language Models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-06T15:39:43.732685Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-06T15:48:58.642580Z"},"links":{"cited_paper":"/paper/2404.07234","citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:3a96d44b73dbd342cbc8362bbe40fbcb861a02269564a6072b5a01648f70db24","observation_id":"91050d90-8900-4fe2-a68c-2446cd62a221","resolution":{"observed_at":"2026-08-06T15:48:58.642580Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.07234","last_updated":"2024-11-09T04:01:22Z","snapshot_observed_at":"2026-07-06T17:58:25.894552Z","submitted_at":"2024-04-06T06:17:10Z","title":"Goal-guided Generative Prompt Injection Attack on Large Language Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.07234","snapshot_observed_at":"2026-08-06T05:05:02.902587Z","title":"Goal- guided generative prompt injection attack on large language models","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2508.02312","last_updated":"2025-08-04T11:28:34Z","snapshot_observed_at":"2026-08-07T17:54:58.202973Z","submitted_at":"2025-08-04T11:28:34Z","title":"A Survey on Data Security in Large Language Models","version":1},"reference_index":76,"source":"pdf_text","source_observed_at":"2026-08-06T05:05:02.902587Z"},"links":{"cited_paper":"/paper/2404.07234","citing_paper":"/paper/2508.02312"},"observation_digest":"sha256:7ae3b1760ee809c3a781e5a268c9984db5e42dd1d81dcf6c2215cd126dbe9c26","observation_id":"33601c6c-39af-4503-bfa5-6df128abc4ba","resolution":{"observed_at":"2026-08-06T05:05:02.902587Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.07234","last_updated":"2024-11-09T04:01:22Z","snapshot_observed_at":"2026-07-06T17:58:25.894552Z","submitted_at":"2024-04-06T06:17:10Z","title":"Goal-guided Generative Prompt Injection Attack on Large Language Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.07234","snapshot_observed_at":"2026-08-05T16:50:30.014754Z","title":"arXiv preprint arXiv:2404.07234 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.19287","last_updated":"2025-08-25T05:20:11Z","snapshot_observed_at":"2026-08-05T16:50:27.007109Z","submitted_at":"2025-08-25T05:20:11Z","title":"Prompt-in-Content Attacks: Exploiting Uploaded Inputs to Hijack LLM Behavior","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-05T16:50:30.014754Z"},"links":{"cited_paper":"/paper/2404.07234","citing_paper":"/paper/2508.19287"},"observation_digest":"sha256:35f2271d529cd0773da732b3009e74457438b1a52380caa2dccb21598d5752db","observation_id":"fc15fc42-8896-4481-8e38-5ef69530383c","resolution":{"observed_at":"2026-08-05T16:50:30.014754Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.07234","last_updated":"2024-11-09T04:01:22Z","snapshot_observed_at":"2026-07-06T17:58:25.894552Z","submitted_at":"2024-04-06T06:17:10Z","title":"Goal-guided Generative Prompt Injection Attack on Large Language Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.07234","snapshot_observed_at":"2026-08-05T04:56:25.024461Z","title":"Goal-guided Genera- tive Prompt Injection Attack on Large Language Models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.05883","last_updated":"2025-09-07T01:11:10Z","snapshot_observed_at":"2026-08-07T16:44:19.421345Z","submitted_at":"2025-09-07T01:11:10Z","title":"Multimodal Prompt Injection Attacks: Risks and Defenses for Modern LLMs","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-05T04:56:25.024461Z"},"links":{"cited_paper":"/paper/2404.07234","citing_paper":"/paper/2509.05883"},"observation_digest":"sha256:26ec672422ce70dcccebc78fb203324ab487de74fbfaed6e1c6f209bd0757c09","observation_id":"320562d3-da33-4971-873a-9a2b35969801","resolution":{"observed_at":"2026-08-05T04:56:25.024461Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.07234","last_updated":"2024-11-09T04:01:22Z","snapshot_observed_at":"2026-07-06T17:58:25.894552Z","submitted_at":"2024-04-06T06:17:10Z","title":"Goal-guided Generative Prompt Injection Attack on Large Language Models","version":4},"cited_work":{"arxiv_id":"2404.07234","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2404.07234","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Goal-guided generative prompt injection attack on large language models","venue":null,"work_id":"ad328943-30bb-4520-ab31-78f705c641da","year":2024},"citing_paper":{"arxiv_id":"2605.05846","last_updated":"2026-05-07T08:21:51Z","snapshot_observed_at":"2026-08-02T22:13:21.752885Z","submitted_at":"2026-05-07T08:21:51Z","title":"LoopTrap: Termination Poisoning Attacks on LLM Agents","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-05-08T09:25:11.059634Z"},"links":{"cited_paper":"/paper/2404.07234","citing_paper":"/paper/2605.05846"},"observation_digest":"sha256:e84d788c9b556d98f7ace18d05f56213e1881555a2142d814750ad6ff8cb8232","observation_id":"260ff9b3-f50e-479c-8776-3c21e8797206","resolution":{"observed_at":"2026-05-11T20:21:10.605747Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.07234","last_updated":"2024-11-09T04:01:22Z","snapshot_observed_at":"2026-07-06T17:58:25.894552Z","submitted_at":"2024-04-06T06:17:10Z","title":"Goal-guided Generative Prompt Injection Attack on Large Language Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.07234","snapshot_observed_at":"2026-08-01T08:37:35.393633Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.27373","last_updated":"2026-07-29T18:25:30Z","snapshot_observed_at":"2026-08-07T20:54:40.976131Z","submitted_at":"2026-07-29T18:25:30Z","title":"RoguePrompt: Dual-Layer Encoding for Self-Reconstruction to Circumvent LLM Moderation","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-01T08:37:35.393633Z"},"links":{"cited_paper":"/paper/2404.07234","citing_paper":"/paper/2607.27373"},"observation_digest":"sha256:40b00434f07d66bef70199662075194b54d7d48e2d6e54938a5618811fcc2c88","observation_id":"2fb13ad4-c364-47b5-a160-3161ae2959b5","resolution":{"observed_at":"2026-08-01T08:37:35.393633Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2404.07234/citation-record","integrity":"/paper/2404.07234/integrity","json":"/paper/2404.07234/citation-record.json","paper":"/paper/2404.07234"},"outbound":[],"paper":{"arxiv_id":"2404.07234","last_updated":"2024-11-09T04:01:22Z","latest_version":4,"primary_category":"cs.CR","snapshot_observed_at":"2026-07-06T17:58:25.894552Z","submitted_at":"2024-04-06T06:17:10Z","title":"Goal-guided Generative Prompt Injection Attack on Large Language Models"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 8 inbound Pith citation observations for arXiv:2404.07234."}