{"as_of":"2026-08-07T21:26:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:ec7dca0700182a424733119a71c9cca7ae41ac9d7d8e0bc29631bb87c60e1d71","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":11,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":11,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":11,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":11,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T15:14:46.434090Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-04T20:00:07.866116Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2410.14479","last_updated":"2024-10-18T14:02:34Z","snapshot_observed_at":"2026-07-06T19:35:57.222956Z","submitted_at":"2024-10-18T14:02:34Z","title":"Backdoored Retrievers for Prompt Injection Attacks on Retrieval Augmented Generation of Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.14479","snapshot_observed_at":"2026-08-07T15:14:46.434090Z","title":"Backdoored retrievers for prompt injection attacks on retrieval-augmented generation","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.16014","last_updated":"2026-06-02T10:15:17Z","snapshot_observed_at":"2026-08-07T15:06:12.174579Z","submitted_at":"2025-05-21T20:57:16Z","title":"Ranking Free RAG: Replacing Re-ranking with Selection in RAG for Sensitive Domains","version":5},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-07T15:14:46.434090Z"},"links":{"cited_paper":"/paper/2410.14479","citing_paper":"/paper/2505.16014"},"observation_digest":"sha256:10816e16412e931de050a2c646434b4e3e4dc66076611a001abd9e98566588a9","observation_id":"1d6661f3-e445-4b1e-ae63-a333c08723e9","resolution":{"observed_at":"2026-08-07T15:14:46.434090Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.14479","last_updated":"2024-10-18T14:02:34Z","snapshot_observed_at":"2026-07-06T19:35:57.222956Z","submitted_at":"2024-10-18T14:02:34Z","title":"Backdoored Retrievers for Prompt Injection Attacks on Retrieval Augmented Generation of Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.14479","snapshot_observed_at":"2026-08-06T16:34:04.853306Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.13169","last_updated":"2025-07-17T14:33:36Z","snapshot_observed_at":"2026-08-06T16:26:27.439425Z","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-06T16:34:04.853306Z"},"links":{"cited_paper":"/paper/2410.14479","citing_paper":"/paper/2507.13169"},"observation_digest":"sha256:647fa48addb482226e46c439f2d843ec8b6d8642451883f861ce41921abe952a","observation_id":"fbe5eca5-fc2b-4390-98d2-c32b7d9b82ac","resolution":{"observed_at":"2026-08-06T16:34:04.853306Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.14479","last_updated":"2024-10-18T14:02:34Z","snapshot_observed_at":"2026-07-06T19:35:57.222956Z","submitted_at":"2024-10-18T14:02:34Z","title":"Backdoored Retrievers for Prompt Injection Attacks on Retrieval Augmented Generation of Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.14479","snapshot_observed_at":"2026-08-04T17:46:19.413492Z","title":"Backdoored retrievers for prompt injection attacks on retrieval augmented generation of large language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.10682","last_updated":"2025-09-12T20:26:16Z","snapshot_observed_at":"2026-08-04T21:00:53.508626Z","submitted_at":"2025-09-12T20:26:16Z","title":"LLM in the Middle: A Systematic Review of Threats and Mitigations to Real-World LLM-based Systems","version":1},"reference_index":164,"source":"pdf_text","source_observed_at":"2026-08-04T17:46:19.413492Z"},"links":{"cited_paper":"/paper/2410.14479","citing_paper":"/paper/2509.10682"},"observation_digest":"sha256:b985f1121b63428c93392f46698444464c0d9587e0474d49b2632859c4df6818","observation_id":"4ab79429-2090-4aff-a4b6-e11773c33e1e","resolution":{"observed_at":"2026-08-04T17:46:19.413492Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.14479","last_updated":"2024-10-18T14:02:34Z","snapshot_observed_at":"2026-07-06T19:35:57.222956Z","submitted_at":"2024-10-18T14:02:34Z","title":"Backdoored Retrievers for Prompt Injection Attacks on Retrieval Augmented Generation of Large Language Models","version":1},"cited_work":{"arxiv_id":"2410.14479","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2410.14479","snapshot_observed_at":"2026-07-04T20:00:07.866116Z","title":"and Teglia, Y","venue":null,"work_id":"ee51e02a-38d2-4c1e-85fe-d5c5a58a971b","year":2024},"citing_paper":{"arxiv_id":"2510.23883","last_updated":"2026-04-03T16:27:34Z","snapshot_observed_at":"2026-08-02T13:42:34.526072Z","submitted_at":"2025-10-27T21:48:11Z","title":"Agentic AI Security: Threats, Defenses, Evaluation, and Open Challenges","version":3},"reference_index":78,"source":"pdf_text","source_observed_at":"2026-05-18T03:42:10.703369Z"},"links":{"cited_paper":"/paper/2410.14479","citing_paper":"/paper/2510.23883"},"observation_digest":"sha256:947dc538d9c29fecfee412688b28e16c3959e23fb632e73fbb84da5d616d7b60","observation_id":"eb5cfe47-3687-45c3-85cf-979f647db8a6","resolution":{"observed_at":"2026-05-18T03:42:22.290794Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.14479","last_updated":"2024-10-18T14:02:34Z","snapshot_observed_at":"2026-07-06T19:35:57.222956Z","submitted_at":"2024-10-18T14:02:34Z","title":"Backdoored Retrievers for Prompt Injection Attacks on Retrieval Augmented Generation of Large Language Models","version":1},"cited_work":{"arxiv_id":"2410.14479","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2410.14479","snapshot_observed_at":"2026-07-04T20:00:07.866116Z","title":"and Teglia, Y","venue":null,"work_id":"ee51e02a-38d2-4c1e-85fe-d5c5a58a971b","year":2024},"citing_paper":{"arxiv_id":"2605.01782","last_updated":"2026-05-03T08:42:29Z","snapshot_observed_at":"2026-07-31T09:19:52.528360Z","submitted_at":"2026-05-03T08:42:29Z","title":"Needle-in-RAG: Prompt-Conditioned Character-Level Traceback of Poisoned Spans in Retrieved Evidence","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-05-10T14:52:32.202125Z"},"links":{"cited_paper":"/paper/2410.14479","citing_paper":"/paper/2605.01782"},"observation_digest":"sha256:d665e097a9ed4d13d3a0fcfc2aef707829433447845ad609538232d84602bf5b","observation_id":"9b462944-fff8-420e-aa02-f5cdb23d2671","resolution":{"observed_at":"2026-05-11T11:31:00.697621Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.14479","last_updated":"2024-10-18T14:02:34Z","snapshot_observed_at":"2026-07-06T19:35:57.222956Z","submitted_at":"2024-10-18T14:02:34Z","title":"Backdoored Retrievers for Prompt Injection Attacks on Retrieval Augmented Generation of Large Language Models","version":1},"cited_work":{"arxiv_id":"2410.14479","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2410.14479","snapshot_observed_at":"2026-07-04T20:00:07.866116Z","title":"and Teglia, Y","venue":null,"work_id":"ee51e02a-38d2-4c1e-85fe-d5c5a58a971b","year":2024},"citing_paper":{"arxiv_id":"2605.08442","last_updated":"2026-08-04T05:00:15Z","snapshot_observed_at":"2026-08-07T21:09:30.323567Z","submitted_at":"2026-05-08T20:04:57Z","title":"Injection-Execution Dissociation: A Mechanistic Evaluation of Persistent Memory Attacks and Defenses in Stateful LLM Agents","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-05-12T01:19:06.063083Z"},"links":{"cited_paper":"/paper/2410.14479","citing_paper":"/paper/2605.08442"},"observation_digest":"sha256:78210de4d068369560cf75f1e763d6cdf28a7bd5a9c8db5a8782b104cfbad577","observation_id":"f043f691-4740-4383-b75b-439af701a9a5","resolution":{"observed_at":"2026-05-12T08:06:28.707130Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.14479","last_updated":"2024-10-18T14:02:34Z","snapshot_observed_at":"2026-07-06T19:35:57.222956Z","submitted_at":"2024-10-18T14:02:34Z","title":"Backdoored Retrievers for Prompt Injection Attacks on Retrieval Augmented Generation of Large Language Models","version":1},"cited_work":{"arxiv_id":"2410.14479","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2410.14479","snapshot_observed_at":"2026-07-04T20:00:07.866116Z","title":"and Teglia, Y","venue":null,"work_id":"ee51e02a-38d2-4c1e-85fe-d5c5a58a971b","year":2024},"citing_paper":{"arxiv_id":"2605.22041","last_updated":"2026-05-21T06:25:46Z","snapshot_observed_at":"2026-08-02T21:43:59.005437Z","submitted_at":"2026-05-21T06:25:46Z","title":"RADAR: Defending RAG Dynamically against Retrieval Corruption","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-05-22T05:58:03.701617Z"},"links":{"cited_paper":"/paper/2410.14479","citing_paper":"/paper/2605.22041"},"observation_digest":"sha256:ea13eb1e12bb6c583be968674550ce66eb68e1b6b051071abde81b6aa2a3bc8b","observation_id":"4bc2fc6c-adb8-4cfd-a332-e3f4bd904f9b","resolution":{"observed_at":"2026-05-22T06:01:08.985261Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.14479","last_updated":"2024-10-18T14:02:34Z","snapshot_observed_at":"2026-07-06T19:35:57.222956Z","submitted_at":"2024-10-18T14:02:34Z","title":"Backdoored Retrievers for Prompt Injection Attacks on Retrieval Augmented Generation of Large Language Models","version":1},"cited_work":{"arxiv_id":"2410.14479","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2410.14479","snapshot_observed_at":"2026-07-04T20:00:07.866116Z","title":"and Teglia, Y","venue":null,"work_id":"ee51e02a-38d2-4c1e-85fe-d5c5a58a971b","year":2024},"citing_paper":{"arxiv_id":"2606.09038","last_updated":"2026-06-08T05:10:05Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2026-06-08T05:10:05Z","title":"Personalization Meets Safety:Mechanisms,Risks,and Mitigations in Personalized LLMs","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-06-27T16:49:14.243931Z"},"links":{"cited_paper":"/paper/2410.14479","citing_paper":"/paper/2606.09038"},"observation_digest":"sha256:ed3eb23323dc1411ee9dda6d066623fc0681cb82c0a171ccb33d31973b07fda5","observation_id":"5bf07e60-3649-47ad-a777-03809ed0b01d","resolution":{"observed_at":"2026-07-03T01:07:30.241514Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.14479","last_updated":"2024-10-18T14:02:34Z","snapshot_observed_at":"2026-07-06T19:35:57.222956Z","submitted_at":"2024-10-18T14:02:34Z","title":"Backdoored Retrievers for Prompt Injection Attacks on Retrieval Augmented Generation of Large Language Models","version":1},"cited_work":{"arxiv_id":"2410.14479","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2410.14479","snapshot_observed_at":"2026-07-04T20:00:07.866116Z","title":"and Teglia, Y","venue":null,"work_id":"ee51e02a-38d2-4c1e-85fe-d5c5a58a971b","year":2024},"citing_paper":{"arxiv_id":"2606.18310","last_updated":"2026-06-16T09:17:56Z","snapshot_observed_at":"2026-08-07T18:50:01.682045Z","submitted_at":"2026-06-16T09:17:56Z","title":"Conflict-Aware Retriever Editing for Knowledge Injection Attacks on LLM-Based RAG Systems","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-06-27T00:29:09.121399Z"},"links":{"cited_paper":"/paper/2410.14479","citing_paper":"/paper/2606.18310"},"observation_digest":"sha256:b196c69e8f57a5c848da462c53de3c4492abd3d470998c5e8232eaf300163184","observation_id":"71b3e8ab-d0e1-4f78-9900-ac93c444346b","resolution":{"observed_at":"2026-07-03T21:28:59.086706Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.14479","last_updated":"2024-10-18T14:02:34Z","snapshot_observed_at":"2026-07-06T19:35:57.222956Z","submitted_at":"2024-10-18T14:02:34Z","title":"Backdoored Retrievers for Prompt Injection Attacks on Retrieval Augmented Generation of Large Language Models","version":1},"cited_work":{"arxiv_id":"2410.14479","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2410.14479","snapshot_observed_at":"2026-07-04T20:00:07.866116Z","title":"and Teglia, Y","venue":null,"work_id":"ee51e02a-38d2-4c1e-85fe-d5c5a58a971b","year":2024},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-06T23:51:47.345747Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"cited_paper":"/paper/2410.14479","citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:9e174260c8f5a90f87b95ad34fd9633b31ff52acd9df3e94d84592044e0ab641","observation_id":"1804f93f-2278-44c8-976e-d1911ae725ff","resolution":{"observed_at":"2026-07-04T20:00:07.867849Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.14479","last_updated":"2024-10-18T14:02:34Z","snapshot_observed_at":"2026-07-06T19:35:57.222956Z","submitted_at":"2024-10-18T14:02:34Z","title":"Backdoored Retrievers for Prompt Injection Attacks on Retrieval Augmented Generation of Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.14479","snapshot_observed_at":"2026-08-01T06:04:46.721338Z","title":"arXiv preprint arXiv:2410.14479 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.22024","last_updated":"2026-07-24T06:43:09Z","snapshot_observed_at":"2026-08-06T15:37:49.497100Z","submitted_at":"2026-07-24T06:43:09Z","title":"Agent Security Needs Redefinition through a Holistic Framework","version":1},"reference_index":293,"source":"arxiv_source","source_observed_at":"2026-08-01T06:04:46.721338Z"},"links":{"cited_paper":"/paper/2410.14479","citing_paper":"/paper/2607.22024"},"observation_digest":"sha256:1470f84a02787d49940a5ba82eeaf64e74d1cafe40bc13730c89c1edaf2243ef","observation_id":"8298ae29-1636-4963-a3be-37ef7b13a909","resolution":{"observed_at":"2026-08-01T06:04:46.721338Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2410.14479/citation-record","integrity":"/paper/2410.14479/integrity","json":"/paper/2410.14479/citation-record.json","paper":"/paper/2410.14479"},"outbound":[],"paper":{"arxiv_id":"2410.14479","last_updated":"2024-10-18T14:02:34Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-07-06T19:35:57.222956Z","submitted_at":"2024-10-18T14:02:34Z","title":"Backdoored Retrievers for Prompt Injection Attacks on Retrieval Augmented Generation of Large Language Models"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 7 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 11 inbound Pith citation observations for arXiv:2410.14479."}