{"as_of":"2026-08-20T04:45:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:0a1e3a388a6a42bc78f1a3f26a372b4a1ad0df4c07f643964544759f00b41467","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":12,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":12,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-19T06:32:44.657259+00:00","state":"measured"},{"denominator":12,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":12,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-16T04:38:39.612688Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-02T03:36:29.430748Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2410.21492","last_updated":"2024-11-25T20:37:40Z","snapshot_observed_at":"2026-08-16T13:05:13.356855Z","submitted_at":"2024-10-28T20:02:47Z","title":"FATH: Authentication-based Test-time Defense against Indirect Prompt Injection Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.21492","snapshot_observed_at":"2026-08-11T10:24:27.020630Z","title":"Morley Mao, Muhao Chen, and Chaowei Xiao","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.16682","last_updated":"2024-12-21T16:17:48Z","snapshot_observed_at":"2026-08-12T03:14:31.288757Z","submitted_at":"2024-12-21T16:17:48Z","title":"The Task Shield: Enforcing Task Alignment to Defend Against Indirect Prompt Injection in LLM Agents","version":1},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-08-11T10:24:27.020630Z"},"links":{"cited_paper":"/paper/2410.21492","citing_paper":"/paper/2412.16682"},"observation_digest":"sha256:9914b1d5b93150a03098e6ddcd2e47db8538f73aadac07aac6e7da89eb49a629","observation_id":"6bf1c9c8-fa8b-4ae4-afea-1f963c6ab16d","resolution":{"observed_at":"2026-08-11T10:24:27.020630Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.21492","last_updated":"2024-11-25T20:37:40Z","snapshot_observed_at":"2026-08-16T13:05:13.356855Z","submitted_at":"2024-10-28T20:02:47Z","title":"FATH: Authentication-based Test-time Defense against Indirect Prompt Injection Attacks","version":2},"cited_work":{"arxiv_id":"2410.21492","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2410.21492","snapshot_observed_at":"2026-07-02T03:36:29.430748Z","title":"Fath: Authentication-based test-time defense against indirect prompt injection attacks","venue":null,"work_id":"8992de48-a34f-4e64-842e-35d21f5221f3","year":2024},"citing_paper":{"arxiv_id":"2504.20472","last_updated":"2026-04-09T06:57:42Z","snapshot_observed_at":"2026-08-13T08:12:27.488850Z","submitted_at":"2025-04-29T07:13:53Z","title":"Robustness via Referencing: Defending against Prompt Injection Attacks by Referencing the Executed Instruction","version":2},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-05-22T19:10:55.009810Z"},"links":{"cited_paper":"/paper/2410.21492","citing_paper":"/paper/2504.20472"},"observation_digest":"sha256:791a0d84f1d7043b9be782e4bea90aade909b3473509dd618c1fb5999405a449","observation_id":"c87f6d80-ecd6-4359-8138-bc59447581fb","resolution":{"observed_at":"2026-05-22T19:11:58.077761Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.21492","last_updated":"2024-11-25T20:37:40Z","snapshot_observed_at":"2026-08-16T13:05:13.356855Z","submitted_at":"2024-10-28T20:02:47Z","title":"FATH: Authentication-based Test-time Defense against Indirect Prompt Injection Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.21492","snapshot_observed_at":"2026-08-16T04:38:39.612688Z","title":"Yuxin Wen, Neel Jain, John Kirchenbauer, Micah Goldblum, Jonas Geiping, and Tom Gold- stein","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.00843","last_updated":"2025-05-01T20:09:48Z","snapshot_observed_at":"2026-08-19T01:54:04.758285Z","submitted_at":"2025-05-01T20:09:48Z","title":"OET: Optimization-based prompt injection Evaluation Toolkit","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-16T04:38:39.612688Z"},"links":{"cited_paper":"/paper/2410.21492","citing_paper":"/paper/2505.00843"},"observation_digest":"sha256:0d7bab9494ce597ea317ec9c357aea457dd10e053aac95e452b827f1b0d40022","observation_id":"cada5f55-9ebe-44ae-a3a8-28c3dd4facc8","resolution":{"observed_at":"2026-08-16T04:38:39.612688Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.21492","last_updated":"2024-11-25T20:37:40Z","snapshot_observed_at":"2026-08-16T13:05:13.356855Z","submitted_at":"2024-10-28T20:02:47Z","title":"FATH: Authentication-based Test-time Defense against Indirect Prompt Injection Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.21492","snapshot_observed_at":"2026-08-07T14:55:02.348905Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.16957","last_updated":"2025-05-22T17:36:33Z","snapshot_observed_at":"2026-08-13T22:05:39.605697Z","submitted_at":"2025-05-22T17:36:33Z","title":"Invisible Prompts, Visible Threats: Malicious Font Injection in External Resources for Large Language Models","version":1},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-08-07T14:55:02.348905Z"},"links":{"cited_paper":"/paper/2410.21492","citing_paper":"/paper/2505.16957"},"observation_digest":"sha256:4ea12f469ec2b62589ff36c1578d651affdcc0263e550190ae7bc8641b797a54","observation_id":"5c0a7958-eeb6-4f45-b64c-8e0c8cf347e9","resolution":{"observed_at":"2026-08-07T14:55:02.348905Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.21492","last_updated":"2024-11-25T20:37:40Z","snapshot_observed_at":"2026-08-16T13:05:13.356855Z","submitted_at":"2024-10-28T20:02:47Z","title":"FATH: Authentication-based Test-time Defense against Indirect Prompt Injection Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.21492","snapshot_observed_at":"2026-08-05T16:50:29.700036Z","title":"arXiv preprint arXiv:2410.21492 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.19287","last_updated":"2025-08-25T05:20:11Z","snapshot_observed_at":"2026-08-19T23:40:36.241737Z","submitted_at":"2025-08-25T05:20:11Z","title":"Prompt-in-Content Attacks: Exploiting Uploaded Inputs to Hijack LLM Behavior","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-05T16:50:29.700036Z"},"links":{"cited_paper":"/paper/2410.21492","citing_paper":"/paper/2508.19287"},"observation_digest":"sha256:cca421990710cc941680a30811a505cc7edd408993da13e7301b40510283102b","observation_id":"72435f72-57a9-4523-bade-16d154b3f501","resolution":{"observed_at":"2026-08-05T16:50:29.700036Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.21492","last_updated":"2024-11-25T20:37:40Z","snapshot_observed_at":"2026-08-16T13:05:13.356855Z","submitted_at":"2024-10-28T20:02:47Z","title":"FATH: Authentication-based Test-time Defense against Indirect Prompt Injection Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.21492","snapshot_observed_at":"2026-08-04T18:34:49.999392Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.09912","last_updated":"2025-09-12T00:57:50Z","snapshot_observed_at":"2026-08-16T14:33:08.027198Z","submitted_at":"2025-09-12T00:57:50Z","title":"When Your Reviewer is an LLM: Biases, Divergence, and Prompt Injection Risks in Peer Review","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-04T18:34:49.999392Z"},"links":{"cited_paper":"/paper/2410.21492","citing_paper":"/paper/2509.09912"},"observation_digest":"sha256:1ae0d51da8178641fbbddcbbdffcdd8fdb606703f05ef80fcc706597e07c4366","observation_id":"d0a85a14-9a2d-4910-b7d8-059143f27d9e","resolution":{"observed_at":"2026-08-04T18:34:49.999392Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.21492","last_updated":"2024-11-25T20:37:40Z","snapshot_observed_at":"2026-08-16T13:05:13.356855Z","submitted_at":"2024-10-28T20:02:47Z","title":"FATH: Authentication-based Test-time Defense against Indirect Prompt Injection Attacks","version":2},"cited_work":{"arxiv_id":"2410.21492","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2410.21492","snapshot_observed_at":"2026-07-02T03:36:29.430748Z","title":"Fath: Authentication-based test-time defense against indirect prompt injection attacks","venue":null,"work_id":"8992de48-a34f-4e64-842e-35d21f5221f3","year":2024},"citing_paper":{"arxiv_id":"2605.09033","last_updated":"2026-05-15T08:27:09Z","snapshot_observed_at":"2026-08-12T12:32:19.148646Z","submitted_at":"2026-05-09T16:16:41Z","title":"ShadowMerge: A Novel Poisoning Attack on Graph-Based Agent Memory via Relation-Channel Conflicts","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-05-12T02:27:03.154390Z"},"links":{"cited_paper":"/paper/2410.21492","citing_paper":"/paper/2605.09033"},"observation_digest":"sha256:38d01e7a7add98f8c229b85d5780e43fa0e936eda4e32e194e29358fc02b69a7","observation_id":"6cdb928a-94ae-44a8-ad14-1536a96538b3","resolution":{"observed_at":"2026-05-12T07:37:06.002197Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.21492","last_updated":"2024-11-25T20:37:40Z","snapshot_observed_at":"2026-08-16T13:05:13.356855Z","submitted_at":"2024-10-28T20:02:47Z","title":"FATH: Authentication-based Test-time Defense against Indirect Prompt Injection Attacks","version":2},"cited_work":{"arxiv_id":"2410.21492","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2410.21492","snapshot_observed_at":"2026-07-02T03:36:29.430748Z","title":"Fath: Authentication-based test-time defense against indirect prompt injection attacks","venue":null,"work_id":"8992de48-a34f-4e64-842e-35d21f5221f3","year":2024},"citing_paper":{"arxiv_id":"2605.09033","last_updated":"2026-05-15T08:27:09Z","snapshot_observed_at":"2026-08-12T12:32:19.148646Z","submitted_at":"2026-05-09T16:16:41Z","title":"ShadowMerge: A Novel Poisoning Attack on Graph-Based Agent Memory via Relation-Channel Conflicts","version":2},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-05-15T06:09:36.338641Z"},"links":{"cited_paper":"/paper/2410.21492","citing_paper":"/paper/2605.09033"},"observation_digest":"sha256:5818919580166d398a53c9fb8258b6d0c043d8e18165d0af73d712b522811b1d","observation_id":"007e1fad-0401-460d-84b2-cb7832ce2349","resolution":{"observed_at":"2026-05-15T06:09:49.279552Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.21492","last_updated":"2024-11-25T20:37:40Z","snapshot_observed_at":"2026-08-16T13:05:13.356855Z","submitted_at":"2024-10-28T20:02:47Z","title":"FATH: Authentication-based Test-time Defense against Indirect Prompt Injection Attacks","version":2},"cited_work":{"arxiv_id":"2410.21492","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2410.21492","snapshot_observed_at":"2026-07-02T03:36:29.430748Z","title":"Fath: Authentication-based test-time defense against indirect prompt injection attacks","venue":null,"work_id":"8992de48-a34f-4e64-842e-35d21f5221f3","year":2024},"citing_paper":{"arxiv_id":"2605.09033","last_updated":"2026-05-15T08:27:09Z","snapshot_observed_at":"2026-08-12T12:32:19.148646Z","submitted_at":"2026-05-09T16:16:41Z","title":"ShadowMerge: A Novel Poisoning Attack on Graph-Based Agent Memory via Relation-Channel Conflicts","version":3},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-05-19T17:38:45.919637Z"},"links":{"cited_paper":"/paper/2410.21492","citing_paper":"/paper/2605.09033"},"observation_digest":"sha256:75a28c58c023302bf345190be8dde7772c8579bdf71cacb74e38f02b8d531677","observation_id":"ee4ed52d-818f-40ca-a906-552f0fe8eaa8","resolution":{"observed_at":"2026-05-19T17:42:42.402704Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.21492","last_updated":"2024-11-25T20:37:40Z","snapshot_observed_at":"2026-08-16T13:05:13.356855Z","submitted_at":"2024-10-28T20:02:47Z","title":"FATH: Authentication-based Test-time Defense against Indirect Prompt Injection Attacks","version":2},"cited_work":{"arxiv_id":"2410.21492","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2410.21492","snapshot_observed_at":"2026-07-02T03:36:29.430748Z","title":"Fath: Authentication-based test-time defense against indirect prompt injection attacks","venue":null,"work_id":"8992de48-a34f-4e64-842e-35d21f5221f3","year":2024},"citing_paper":{"arxiv_id":"2605.24309","last_updated":"2026-05-23T00:36:48Z","snapshot_observed_at":"2026-08-16T21:16:05.326638Z","submitted_at":"2026-05-23T00:36:48Z","title":"Reframing LLM Agent Security as an Agent-Human Interaction Problem","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-06-30T13:52:06.272229Z"},"links":{"cited_paper":"/paper/2410.21492","citing_paper":"/paper/2605.24309"},"observation_digest":"sha256:81b4ca02ad970d117731270b9359881a940917a582674f29d0a5a31ce936b1d4","observation_id":"1f5cda3a-c231-4cee-812c-6c44cf2312f3","resolution":{"observed_at":"2026-06-30T13:54:43.898531Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.21492","last_updated":"2024-11-25T20:37:40Z","snapshot_observed_at":"2026-08-16T13:05:13.356855Z","submitted_at":"2024-10-28T20:02:47Z","title":"FATH: Authentication-based Test-time Defense against Indirect Prompt Injection Attacks","version":2},"cited_work":{"arxiv_id":"2410.21492","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2410.21492","snapshot_observed_at":"2026-07-02T03:36:29.430748Z","title":"Fath: Authentication-based test-time defense against indirect prompt injection attacks","venue":null,"work_id":"8992de48-a34f-4e64-842e-35d21f5221f3","year":2024},"citing_paper":{"arxiv_id":"2606.03136","last_updated":"2026-06-02T04:24:20Z","snapshot_observed_at":"2026-08-12T19:19:36.319585Z","submitted_at":"2026-06-02T04:24:20Z","title":"PsychoPass: Geometric Profiling of Multi-Turn Adversarial LLM Conversations","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-06-28T09:55:56.227335Z"},"links":{"cited_paper":"/paper/2410.21492","citing_paper":"/paper/2606.03136"},"observation_digest":"sha256:a9ce13adcb33e136381343fd3455801d0588f143b4a6b9d6962eae3e22bf2de8","observation_id":"4f00d062-dbec-43d4-9c22-0c6d5fae5c37","resolution":{"observed_at":"2026-07-02T03:36:29.432618Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.21492","last_updated":"2024-11-25T20:37:40Z","snapshot_observed_at":"2026-08-16T13:05:13.356855Z","submitted_at":"2024-10-28T20:02:47Z","title":"FATH: Authentication-based Test-time Defense against Indirect Prompt Injection Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.21492","snapshot_observed_at":"2026-08-01T22:55:47.310471Z","title":"Fath: Authentication-based test- time defense against indirect prompt injection attacks,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.15596","last_updated":"2026-08-10T02:18:19Z","snapshot_observed_at":"2026-08-13T23:29:00.063873Z","submitted_at":"2026-07-17T03:44:05Z","title":"From Neural Intent to Cryptographic Authorization: Securing AI-Driven Enterprise Workflows","version":2},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-01T22:55:47.310471Z"},"links":{"cited_paper":"/paper/2410.21492","citing_paper":"/paper/2607.15596"},"observation_digest":"sha256:a32cc0af34e634d918c0728b2b88baa21f4002cab38519c0c6c22d1926e5cdba","observation_id":"21459da8-9121-43c4-a26c-e3b1f91bf2bd","resolution":{"observed_at":"2026-08-01T22:55:47.310471Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2410.21492/citation-record","integrity":"/paper/2410.21492/integrity","json":"/paper/2410.21492/citation-record.json","paper":"/paper/2410.21492"},"outbound":[],"paper":{"arxiv_id":"2410.21492","last_updated":"2024-11-25T20:37:40Z","latest_version":2,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-16T13:05:13.356855Z","submitted_at":"2024-10-28T20:02:47Z","title":"FATH: Authentication-based Test-time Defense against Indirect Prompt Injection Attacks"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"thesis":"As of 20 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 12 inbound Pith citation observations for arXiv:2410.21492."}