{"as_of":"2026-08-10T19:01:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:c28aab16a5e419d189e867c4d590ca423fdea011448efceec72c47b73593ef37","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":7,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":7,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-10T06:31:04.303077+00:00","state":"measured"},{"denominator":7,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":7,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-10T17:59:56.223948Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-06-30T19:15:00.898408Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2406.19234","last_updated":"2024-09-26T04:22:18Z","snapshot_observed_at":"2026-08-08T04:16:42.025194Z","submitted_at":"2024-06-27T14:58:38Z","title":"Generating Is Believing: Membership Inference Attacks against Retrieval-Augmented Generation","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.19234","snapshot_observed_at":"2026-08-10T17:59:56.223948Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2501.11759","last_updated":"2025-01-20T21:38:36Z","snapshot_observed_at":"2026-08-10T17:51:59.571528Z","submitted_at":"2025-01-20T21:38:36Z","title":"Poison-RAG: Adversarial Data Poisoning Attacks on Retrieval-Augmented Generation in Recommender Systems","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-10T17:59:56.223948Z"},"links":{"cited_paper":"/paper/2406.19234","citing_paper":"/paper/2501.11759"},"observation_digest":"sha256:5e8b85cf34d86d556d2de4a19d019cd13973641aa51d5a857bf3a16fa7bdb07a","observation_id":"861f9107-178a-4969-bd82-98030d876e98","resolution":{"observed_at":"2026-08-10T17:59:56.223948Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.19234","last_updated":"2024-09-26T04:22:18Z","snapshot_observed_at":"2026-08-08T04:16:42.025194Z","submitted_at":"2024-06-27T14:58:38Z","title":"Generating Is Believing: Membership Inference Attacks against Retrieval-Augmented Generation","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.19234","snapshot_observed_at":"2026-08-09T19:32:34.289445Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.00306","last_updated":"2025-06-30T16:37:59Z","snapshot_observed_at":"2026-08-09T19:25:57.015136Z","submitted_at":"2025-02-01T04:01:18Z","title":"Riddle Me This! Stealthy Membership Inference for Retrieval-Augmented Generation","version":2},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-09T19:32:34.289445Z"},"links":{"cited_paper":"/paper/2406.19234","citing_paper":"/paper/2502.00306"},"observation_digest":"sha256:88796df3bf067e3a36993fee62600167b450215e95eaad133d0f0ac79d03689f","observation_id":"3793c223-628b-40cb-b715-6d0e5cce7c9f","resolution":{"observed_at":"2026-08-09T19:32:34.289445Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.19234","last_updated":"2024-09-26T04:22:18Z","snapshot_observed_at":"2026-08-08T04:16:42.025194Z","submitted_at":"2024-06-27T14:58:38Z","title":"Generating Is Believing: Membership Inference Attacks against Retrieval-Augmented Generation","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.19234","snapshot_observed_at":"2026-08-05T20:31:47.945525Z","title":"Generating is believing: Membership inference attacks against retrieval-augmented generation","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.10404","last_updated":"2025-08-14T07:12:44Z","snapshot_observed_at":"2026-08-08T02:31:17.622343Z","submitted_at":"2025-08-14T07:12:44Z","title":"Layer-Wise Perturbations via Sparse Autoencoders for Adversarial Text Generation","version":1},"reference_index":164,"source":"pdf_text","source_observed_at":"2026-08-05T20:31:47.945525Z"},"links":{"cited_paper":"/paper/2406.19234","citing_paper":"/paper/2508.10404"},"observation_digest":"sha256:e7885e4e3a658fc0b1345583716e5ccc7c48b8fddca260e0ce04747902cfeb15","observation_id":"e54e5386-1802-4e81-ae85-d91c9e6caf87","resolution":{"observed_at":"2026-08-05T20:31:47.945525Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.19234","last_updated":"2024-09-26T04:22:18Z","snapshot_observed_at":"2026-08-08T04:16:42.025194Z","submitted_at":"2024-06-27T14:58:38Z","title":"Generating Is Believing: Membership Inference Attacks against Retrieval-Augmented Generation","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.19234","snapshot_observed_at":"2026-08-05T04:42:13.781882Z","title":"Seeing is believing: Black-box membership inference attacks against retrieval augmented generation.arXiv preprint arXiv:2406.19234, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.06026","last_updated":"2025-09-07T11:58:02Z","snapshot_observed_at":"2026-08-10T05:00:20.293460Z","submitted_at":"2025-09-07T11:58:02Z","title":"DCMI: A Differential Calibration Membership Inference Attack Against Retrieval-Augmented Generation","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-05T04:42:13.781882Z"},"links":{"cited_paper":"/paper/2406.19234","citing_paper":"/paper/2509.06026"},"observation_digest":"sha256:959af9b3b452d8ce435bd246d81a767c9181b9aa8393813fea5eb0dcdabe397f","observation_id":"6d7b528c-8a3f-4b71-be1a-436769a0dfaa","resolution":{"observed_at":"2026-08-05T04:42:13.781882Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.19234","last_updated":"2024-09-26T04:22:18Z","snapshot_observed_at":"2026-08-08T04:16:42.025194Z","submitted_at":"2024-06-27T14:58:38Z","title":"Generating Is Believing: Membership Inference Attacks against Retrieval-Augmented Generation","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.19234","snapshot_observed_at":"2026-08-04T12:43:26.148453Z","title":"Seeing is believing: Black-box membership inference attacks against retrieval augmented generation,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.02964","last_updated":"2026-07-07T08:30:10Z","snapshot_observed_at":"2026-08-07T04:04:00.776435Z","submitted_at":"2025-10-03T12:53:45Z","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","version":2},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-04T12:43:26.148453Z"},"links":{"cited_paper":"/paper/2406.19234","citing_paper":"/paper/2510.02964"},"observation_digest":"sha256:64e98c82d176df54c10912d3586635943279440c7adf46728db91b494187cb0a","observation_id":"18f01f0d-a2e3-4327-b619-fe96eb09dcfc","resolution":{"observed_at":"2026-08-04T12:43:26.148453Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.19234","last_updated":"2024-09-26T04:22:18Z","snapshot_observed_at":"2026-08-08T04:16:42.025194Z","submitted_at":"2024-06-27T14:58:38Z","title":"Generating Is Believing: Membership Inference Attacks against Retrieval-Augmented Generation","version":2},"cited_work":{"arxiv_id":"2406.19234","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2406.19234","snapshot_observed_at":"2026-06-30T19:15:00.898408Z","title":"Available: https://arxiv.org/abs/2406.19234","venue":null,"work_id":"edd6bdba-dd82-4da9-be08-fffb3488c2aa","year":2024},"citing_paper":{"arxiv_id":"2605.17034","last_updated":"2026-05-31T12:30:31Z","snapshot_observed_at":"2026-08-02T05:43:36.249122Z","submitted_at":"2026-05-16T15:08:31Z","title":"Privacy Policy Enforcement Guardrails for Data-Sensitive Retrieval-Augmented Generation","version":2},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-06-30T19:08:11.737229Z"},"links":{"cited_paper":"/paper/2406.19234","citing_paper":"/paper/2605.17034"},"observation_digest":"sha256:ced40820ad778e1f211bbcb0c71c2414dc84faed02885a9853e122b6cd099c8e","observation_id":"d61fc400-0081-4f70-8c3e-99214b7bff84","resolution":{"observed_at":"2026-06-30T19:15:00.899909Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.19234","last_updated":"2024-09-26T04:22:18Z","snapshot_observed_at":"2026-08-08T04:16:42.025194Z","submitted_at":"2024-06-27T14:58:38Z","title":"Generating Is Believing: Membership Inference Attacks against Retrieval-Augmented Generation","version":2},"cited_work":{"arxiv_id":"2406.19234","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2406.19234","snapshot_observed_at":"2026-06-30T19:15:00.898408Z","title":"Available: https://arxiv.org/abs/2406.19234","venue":null,"work_id":"edd6bdba-dd82-4da9-be08-fffb3488c2aa","year":2024},"citing_paper":{"arxiv_id":"2605.27825","last_updated":"2026-05-27T01:31:40Z","snapshot_observed_at":"2026-08-02T19:56:32.199762Z","submitted_at":"2026-05-27T01:31:40Z","title":"MRMMIA: Membership Inference Attacks on Memory in Chat Agents","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-06-29T12:04:53.511344Z"},"links":{"cited_paper":"/paper/2406.19234","citing_paper":"/paper/2605.27825"},"observation_digest":"sha256:29d9ae1f0db7c1b1ecd0e56116b899fc8d47e580efdc4748c021b08f1eb79cbf","observation_id":"7b44707e-e7fd-4a57-84bd-8e5a905d12ce","resolution":{"observed_at":"2026-06-29T12:13:27.045249Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2406.19234/citation-record","integrity":"/paper/2406.19234/integrity","json":"/paper/2406.19234/citation-record.json","paper":"/paper/2406.19234"},"outbound":[],"paper":{"arxiv_id":"2406.19234","last_updated":"2024-09-26T04:22:18Z","latest_version":2,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-08T04:16:42.025194Z","submitted_at":"2024-06-27T14:58:38Z","title":"Generating Is Believing: Membership Inference Attacks against Retrieval-Augmented Generation"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"thesis":"As of 10 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 7 inbound Pith citation observations for arXiv:2406.19234."}