{"as_of":"2026-08-15T15:50:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:4db147ffffeaa479f79d457cf9b1f2afd030db67abf62a708e357a3f750ff83c","coverage":[{"denominator":38,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":38,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T19:57:45.390072Z","state":"measured"},{"denominator":41,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":41,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-15T06:32:42.880941+00:00","state":"measured"},{"denominator":3,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":3,"source":"paper_references, paper_reference_links","source_observed_at":"2026-07-15T13:29:23.443771Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":1,"source":"arxiv_reference","source_observed_at":"2026-08-05T02:28:24.338817Z","state":"measured"}],"external_citation_measurements":[{"count":0,"observed_at":"2026-08-05T02:28:24.338817Z","source":"arxiv_reference"}],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2502.09974","last_updated":"2025-02-14T08:00:42Z","snapshot_observed_at":"2026-08-07T19:49:00.973991Z","submitted_at":"2025-02-14T08:00:42Z","title":"Has My System Prompt Been Used? Large Language Model Prompt Membership Inference","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.09974","snapshot_observed_at":"2026-07-15T13:29:23.443771Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2603.07086","last_updated":"2026-06-01T03:50:17Z","snapshot_observed_at":"2026-08-15T06:30:00.822025Z","submitted_at":"2026-03-07T07:48:10Z","title":"Multi-TAP: Multi-criteria Target Adaptive Persona Modeling for Cross-Domain Recommendation","version":2},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-07-15T13:29:23.443771Z"},"links":{"cited_paper":"/paper/2502.09974","citing_paper":"/paper/2603.07086"},"observation_digest":"sha256:7627cd3c18fc128377876159ad99499ba12eae75bd105cafc561ff2ca7ac02ae","observation_id":"ffc331d9-e4b9-4810-ba33-aa5a886c2bfc","resolution":{"observed_at":"2026-07-15T13:29:23.443771Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.09974","last_updated":"2025-02-14T08:00:42Z","snapshot_observed_at":"2026-08-07T19:49:00.973991Z","submitted_at":"2025-02-14T08:00:42Z","title":"Has My System Prompt Been Used? Large Language Model Prompt Membership Inference","version":1},"cited_work":{"arxiv_id":"2502.09974","doi":"10.48550/arxiv.2502.09974","metadata_source":"arxiv_reference","pith_arxiv_id":"2502.09974","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Has my system prompt been used? Large language model prompt membership inference.arXiv preprint arXiv:2502.09974","venue":"ArXiv.org","work_id":"a3b2608a-d600-4697-9fa6-3bca7340ccbb","year":2025},"citing_paper":{"arxiv_id":"2605.10794","last_updated":"2026-05-11T16:23:28Z","snapshot_observed_at":"2026-08-14T07:08:31.242420Z","submitted_at":"2026-05-11T16:23:28Z","title":"Can You Keep a Secret? Involuntary Information Leakage in Language Model Writing","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-05-12T04:02:44.816347Z"},"links":{"cited_paper":"/paper/2502.09974","citing_paper":"/paper/2605.10794"},"observation_digest":"sha256:61cbd4579245237050ff027b51014ecb9fa2fdf0b1a45f4cfd069bdeeae49387","observation_id":"50493d11-6f6f-479c-98a0-7e9393662d44","resolution":{"observed_at":"2026-05-12T06:41:42.293134Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2502.09974","last_updated":"2025-02-14T08:00:42Z","snapshot_observed_at":"2026-08-07T19:49:00.973991Z","submitted_at":"2025-02-14T08:00:42Z","title":"Has My System Prompt Been Used? Large Language Model Prompt Membership Inference","version":1},"cited_work":{"arxiv_id":"2502.09974","doi":"10.48550/arxiv.2502.09974","metadata_source":"arxiv_reference","pith_arxiv_id":"2502.09974","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Has my system prompt been used? Large language model prompt membership inference.arXiv preprint arXiv:2502.09974","venue":"ArXiv.org","work_id":"a3b2608a-d600-4697-9fa6-3bca7340ccbb","year":2025},"citing_paper":{"arxiv_id":"2606.07539","last_updated":"2026-04-29T17:39:36Z","snapshot_observed_at":"2026-08-02T12:30:34.186010Z","submitted_at":"2026-04-29T17:39:36Z","title":"Prompt Governance? On Governing Technologies Governed by Natural Language","version":1},"reference_index":185,"source":"pdf_text","source_observed_at":"2026-07-01T08:17:10.481202Z"},"links":{"cited_paper":"/paper/2502.09974","citing_paper":"/paper/2606.07539"},"observation_digest":"sha256:6ed8b5ebdb22dd926ee9099f3f79ac8b612b828c37df06950a06f15e91fc26e0","observation_id":"e79449e6-97f2-426c-988d-cbf74cbd93ab","resolution":{"observed_at":"2026-07-01T08:25:32.571899Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2502.09974/citation-record","integrity":"/paper/2502.09974/integrity","json":"/paper/2502.09974/citation-record.json","paper":"/paper/2502.09974"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2303.08774","last_updated":"2024-03-04T06:01:33Z","snapshot_observed_at":"2026-08-07T07:30:12.213965Z","submitted_at":"2023-03-15T17:15:04Z","title":"GPT-4 Technical Report","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.08774","snapshot_observed_at":"2026-08-07T19:57:45.153829Z","title":"Gpt-4 technical report","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.09974","last_updated":"2025-02-14T08:00:42Z","snapshot_observed_at":"2026-08-07T19:49:00.973991Z","submitted_at":"2025-02-14T08:00:42Z","title":"Has My System Prompt Been Used? Large Language Model Prompt Membership Inference","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-07T19:57:45.153829Z"},"links":{"cited_paper":"/paper/2303.08774","citing_paper":"/paper/2502.09974"},"observation_digest":"sha256:38dbc8747e4a10d7738676bf20050073d5e8754d1a68f266cbaa81c24c63c72a","observation_id":"a5915520-57a7-46bf-a077-e12edc0044ef","resolution":{"observed_at":"2026-08-07T19:57:45.153829Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T19:57:46.861169Z","title":"Claude 3 model family: Opus, sonnet, haiku","venue":null,"work_id":"658532e9-6789-4bd7-b5c6-fabbec54b3fe","year":2024},"citing_paper":{"arxiv_id":"2502.09974","last_updated":"2025-02-14T08:00:42Z","snapshot_observed_at":"2026-08-07T19:49:00.973991Z","submitted_at":"2025-02-14T08:00:42Z","title":"Has My System Prompt Been Used? Large Language Model Prompt Membership Inference","version":1},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-07T19:57:45.160088Z"},"links":{"citing_paper":"/paper/2502.09974"},"observation_digest":"sha256:29ea6e77bf1e496523f11fdb7766a6338fea56a00611aa72f8d3d545e74ecc61","observation_id":"73444117-ad15-4228-9e5b-6c55b3147ef2","resolution":{"observed_at":"2026-08-07T19:57:46.869990Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T19:57:46.829629Z","title":"Prompt library","venue":null,"work_id":"5354a557-2761-4e47-ae22-0b5d6d6a144e","year":2024},"citing_paper":{"arxiv_id":"2502.09974","last_updated":"2025-02-14T08:00:42Z","snapshot_observed_at":"2026-08-07T19:49:00.973991Z","submitted_at":"2025-02-14T08:00:42Z","title":"Has My System Prompt Been Used? Large Language Model Prompt Membership Inference","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-07T19:57:45.166153Z"},"links":{"citing_paper":"/paper/2502.09974"},"observation_digest":"sha256:2fd69d0aa773fa4b20c72da020f0655ad1efb473a59ed1f63175ae7586159b36","observation_id":"e37ac5f7-98e3-482c-9c4a-8805420bebde","resolution":{"observed_at":"2026-08-07T19:57:46.838297Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T19:57:45.172892Z","title":"Scalable membership inference attacks via quantile regression","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.09974","last_updated":"2025-02-14T08:00:42Z","snapshot_observed_at":"2026-08-07T19:49:00.973991Z","submitted_at":"2025-02-14T08:00:42Z","title":"Has My System Prompt Been Used? Large Language Model Prompt Membership Inference","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-07T19:57:45.172892Z"},"links":{"citing_paper":"/paper/2502.09974"},"observation_digest":"sha256:f9230339f3dab2b5fa9fd37f760f7dc3fa8f0b138d030f97acc3148a9e4142e7","observation_id":"b52c578a-3229-4b08-bfb2-b258d1e6d3b9","resolution":{"observed_at":"2026-08-07T19:57:45.172892Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T19:57:45.177940Z","title":"Membership inference attacks from first principles","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2502.09974","last_updated":"2025-02-14T08:00:42Z","snapshot_observed_at":"2026-08-07T19:49:00.973991Z","submitted_at":"2025-02-14T08:00:42Z","title":"Has My System Prompt Been Used? Large Language Model Prompt Membership Inference","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-07T19:57:45.177940Z"},"links":{"citing_paper":"/paper/2502.09974"},"observation_digest":"sha256:c9b6af077d36fb89cb24a3de84a3dd56939a70772c876fddd124adab48679b58","observation_id":"5bc8468b-dd2a-4134-b4ef-513483ccdce5","resolution":{"observed_at":"2026-08-07T19:57:45.177940Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.17120","last_updated":"2024-04-29T17:41:51Z","snapshot_observed_at":"2026-08-13T00:21:49.918422Z","submitted_at":"2024-04-26T02:29:26Z","title":"Talking Nonsense: Probing Large Language Models' Understanding of Adversarial Gibberish Inputs","version":2},"cited_work":{"arxiv_id":"2404.17120","doi":null,"metadata_source":"pith","pith_arxiv_id":"2404.17120","snapshot_observed_at":"2026-08-07T19:57:46.092792Z","title":"Talking Nonsense: Probing Large Language Models' Understanding of Adversarial Gibberish Inputs","venue":"cs.CL","work_id":"7e7acb66-abe4-4c40-a2c6-1351ed681eed","year":2024},"citing_paper":{"arxiv_id":"2502.09974","last_updated":"2025-02-14T08:00:42Z","snapshot_observed_at":"2026-08-07T19:49:00.973991Z","submitted_at":"2025-02-14T08:00:42Z","title":"Has My System Prompt Been Used? Large Language Model Prompt Membership Inference","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-07T19:57:45.183239Z"},"links":{"cited_paper":"/paper/2404.17120","citing_paper":"/paper/2502.09974"},"observation_digest":"sha256:5c867d1d7eb6c4e0419fae2a6609e85ab71ffdd9d0099a8a0b066ed9739aeda7","observation_id":"9fe14b01-8e3b-469a-bccb-e119f8d9a787","resolution":{"observed_at":"2026-08-07T19:57:46.100489Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T19:57:45.189544Z","title":"Are diffusion models vulnerable to membership inference attacks? In International Conference on Machine Learning, pp.\\ 8717--8730","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.09974","last_updated":"2025-02-14T08:00:42Z","snapshot_observed_at":"2026-08-07T19:49:00.973991Z","submitted_at":"2025-02-14T08:00:42Z","title":"Has My System Prompt Been Used? Large Language Model Prompt Membership Inference","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-07T19:57:45.189544Z"},"links":{"citing_paper":"/paper/2502.09974"},"observation_digest":"sha256:32a49d99d407e7dd92f886d0dfc41f15f7361e19c91121f473a103fb97b2f1c6","observation_id":"42d50396-3163-499c-aa6b-aa49685eee72","resolution":{"observed_at":"2026-08-07T19:57:45.189544Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.14020","last_updated":"2024-02-21T18:59:13Z","snapshot_observed_at":"2026-08-13T04:13:27.147849Z","submitted_at":"2024-02-21T18:59:13Z","title":"Coercing LLMs to do and reveal (almost) anything","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.14020","snapshot_observed_at":"2026-08-07T19:57:45.194846Z","title":"Coercing llms to do and reveal (almost) anything","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.09974","last_updated":"2025-02-14T08:00:42Z","snapshot_observed_at":"2026-08-07T19:49:00.973991Z","submitted_at":"2025-02-14T08:00:42Z","title":"Has My System Prompt Been Used? Large Language Model Prompt Membership Inference","version":1},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-07T19:57:45.194846Z"},"links":{"cited_paper":"/paper/2402.14020","citing_paper":"/paper/2502.09974"},"observation_digest":"sha256:d98e42971c1adc8f6c9165091b6a7fd89fdd963e57bdbc375912b9a9bea7c2ee","observation_id":"57b01058-6c8b-42c8-9043-01a0ba6bcd20","resolution":{"observed_at":"2026-08-07T19:57:45.194846Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T19:57:45.206647Z","title":"Permutation tests: a practical guide to resampling methods for testing hypotheses","venue":null,"work_id":null,"year":2013},"citing_paper":{"arxiv_id":"2502.09974","last_updated":"2025-02-14T08:00:42Z","snapshot_observed_at":"2026-08-07T19:49:00.973991Z","submitted_at":"2025-02-14T08:00:42Z","title":"Has My System Prompt Been Used? Large Language Model Prompt Membership Inference","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-07T19:57:45.206647Z"},"links":{"citing_paper":"/paper/2502.09974"},"observation_digest":"sha256:3ee4eb08273f13fa7557b9b66459c6348c3aae291e578c32e431a9063baad37f","observation_id":"912cab59-c2cb-42c8-89c5-eb658ed8d42f","resolution":{"observed_at":"2026-08-07T19:57:45.206647Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T19:57:45.213388Z","title":"Membership inference attacks on machine learning: A survey","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2502.09974","last_updated":"2025-02-14T08:00:42Z","snapshot_observed_at":"2026-08-07T19:49:00.973991Z","submitted_at":"2025-02-14T08:00:42Z","title":"Has My System Prompt Been Used? Large Language Model Prompt Membership Inference","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-07T19:57:45.213388Z"},"links":{"citing_paper":"/paper/2502.09974"},"observation_digest":"sha256:47030a9ee4959759b596a4f14eb644b2fee36966373a29aae7ce769bb95a7b79","observation_id":"f4231e8e-69b1-4cfc-b0b1-ecffb3ad4ef9","resolution":{"observed_at":"2026-08-07T19:57:45.213388Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.06823","last_updated":"2025-06-13T02:24:21Z","snapshot_observed_at":"2026-08-13T00:09:58.050980Z","submitted_at":"2024-05-10T21:52:34Z","title":"PLeak: Prompt Leaking Attacks against Large Language Model Applications","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.06823","snapshot_observed_at":"2026-08-07T19:57:45.219278Z","title":"Pleak: Prompt leaking attacks against large language model applications","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.09974","last_updated":"2025-02-14T08:00:42Z","snapshot_observed_at":"2026-08-07T19:49:00.973991Z","submitted_at":"2025-02-14T08:00:42Z","title":"Has My System Prompt Been Used? Large Language Model Prompt Membership Inference","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-07T19:57:45.219278Z"},"links":{"cited_paper":"/paper/2405.06823","citing_paper":"/paper/2502.09974"},"observation_digest":"sha256:cc59ec54b41a743b6264483029f7924b3e79a4fc0bca184ae1d74cc1704ba557","observation_id":"0388fcb9-a0b1-4a50-a96c-a80d0098869e","resolution":{"observed_at":"2026-08-07T19:57:45.219278Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T19:57:46.725092Z","title":"How to combine membership-inference attacks on multiple updated machine learning models","venue":null,"work_id":"4181de33-c449-4692-823e-18f2275f2b31","year":2023},"citing_paper":{"arxiv_id":"2502.09974","last_updated":"2025-02-14T08:00:42Z","snapshot_observed_at":"2026-08-07T19:49:00.973991Z","submitted_at":"2025-02-14T08:00:42Z","title":"Has My System Prompt Been Used? Large Language Model Prompt Membership Inference","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-07T19:57:45.228153Z"},"links":{"citing_paper":"/paper/2502.09974"},"observation_digest":"sha256:0b02ba4de5f6e3b357becb4d8ce8657492ed692c1049cbb9a7cae1affc400c8a","observation_id":"5f2b9d7e-ce28-468b-8316-a90269b4d193","resolution":{"observed_at":"2026-08-07T19:57:46.732178Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.06825","last_updated":"2023-10-10T17:54:58Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-10-10T17:54:58Z","title":"Mistral 7B","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.06825","snapshot_observed_at":"2026-08-07T19:57:45.235444Z","title":"Mistral 7b","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2502.09974","last_updated":"2025-02-14T08:00:42Z","snapshot_observed_at":"2026-08-07T19:49:00.973991Z","submitted_at":"2025-02-14T08:00:42Z","title":"Has My System Prompt Been Used? Large Language Model Prompt Membership Inference","version":1},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-07T19:57:45.235444Z"},"links":{"cited_paper":"/paper/2310.06825","citing_paper":"/paper/2502.09974"},"observation_digest":"sha256:20d7ab2026db31b63295f9d42cb9d20555c006b338a8579b2f881337615e5708","observation_id":"f6ee227e-62b1-4da2-b864-61ca9cfd09bf","resolution":{"observed_at":"2026-08-07T19:57:45.235444Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.04088","last_updated":"2024-01-08T18:47:34Z","snapshot_observed_at":"2026-08-13T19:43:49.936776Z","submitted_at":"2024-01-08T18:47:34Z","title":"Mixtral of Experts","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.04088","snapshot_observed_at":"2026-08-07T19:57:45.240722Z","title":"Mixtral of experts","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.09974","last_updated":"2025-02-14T08:00:42Z","snapshot_observed_at":"2026-08-07T19:49:00.973991Z","submitted_at":"2025-02-14T08:00:42Z","title":"Has My System Prompt Been Used? Large Language Model Prompt Membership Inference","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-07T19:57:45.240722Z"},"links":{"cited_paper":"/paper/2401.04088","citing_paper":"/paper/2502.09974"},"observation_digest":"sha256:851b434b0834e32f70dd82b6a84a00e6e835360c75c81d11785406fac2adad5a","observation_id":"da03eff9-718b-4657-95e3-84e7f9e33b62","resolution":{"observed_at":"2026-08-07T19:57:45.240722Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T19:57:45.246532Z","title":"Pre-train, prompt, and predict: A systematic survey of prompting methods in natural language processing","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.09974","last_updated":"2025-02-14T08:00:42Z","snapshot_observed_at":"2026-08-07T19:49:00.973991Z","submitted_at":"2025-02-14T08:00:42Z","title":"Has My System Prompt Been Used? Large Language Model Prompt Membership Inference","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-07T19:57:45.246532Z"},"links":{"citing_paper":"/paper/2502.09974"},"observation_digest":"sha256:100961839d86b71f9c8a55a5e5df34125ce52ce54017331e063c1f3bd628d716","observation_id":"b788aeee-ba3b-4221-994a-7fe717399ea2","resolution":{"observed_at":"2026-08-07T19:57:45.246532Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2104.10706","last_updated":"2021-04-21T18:12:18Z","snapshot_observed_at":"2026-08-11T21:23:50.114825Z","submitted_at":"2021-04-21T18:12:18Z","title":"Dataset Inference: Ownership Resolution in Machine Learning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2104.10706","snapshot_observed_at":"2026-08-07T19:57:45.251712Z","title":"Dataset inference: Ownership resolution in machine learning","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2502.09974","last_updated":"2025-02-14T08:00:42Z","snapshot_observed_at":"2026-08-07T19:49:00.973991Z","submitted_at":"2025-02-14T08:00:42Z","title":"Has My System Prompt Been Used? Large Language Model Prompt Membership Inference","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-07T19:57:45.251712Z"},"links":{"cited_paper":"/paper/2104.10706","citing_paper":"/paper/2502.09974"},"observation_digest":"sha256:5e7b85c0a3c22a81c9a90fd405205205075b6ce9024c044143ade74d0c3544dc","observation_id":"cf76bd98-6da9-4cd7-a9fa-04cd8643fcaf","resolution":{"observed_at":"2026-08-07T19:57:45.251712Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T19:57:46.685790Z","title":"Llm dataset inference: Did you train on my dataset?, 2024","venue":null,"work_id":"ec6bf4cb-2b2c-4b1b-8b41-8553f52c0fe2","year":2024},"citing_paper":{"arxiv_id":"2502.09974","last_updated":"2025-02-14T08:00:42Z","snapshot_observed_at":"2026-08-07T19:49:00.973991Z","submitted_at":"2025-02-14T08:00:42Z","title":"Has My System Prompt Been Used? Large Language Model Prompt Membership Inference","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-07T19:57:45.256983Z"},"links":{"citing_paper":"/paper/2502.09974"},"observation_digest":"sha256:0c3037200bab7272455df0854ced66603887262f53d9789cecdb11922224378f","observation_id":"0938692f-064b-4028-a630-96c1de52c741","resolution":{"observed_at":"2026-08-07T19:57:46.693289Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T19:57:45.263046Z","title":"Membership inference attacks against diffusion models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.09974","last_updated":"2025-02-14T08:00:42Z","snapshot_observed_at":"2026-08-07T19:49:00.973991Z","submitted_at":"2025-02-14T08:00:42Z","title":"Has My System Prompt Been Used? Large Language Model Prompt Membership Inference","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-07T19:57:45.263046Z"},"links":{"citing_paper":"/paper/2502.09974"},"observation_digest":"sha256:710916f02c7a0c075eed693d2caea583c9388d7f0a93877bfa56763a589c7aa7","observation_id":"10a41c23-e253-4b62-b6bd-8c4683ab42fd","resolution":{"observed_at":"2026-08-07T19:57:45.263046Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.13647","last_updated":"2023-11-22T19:04:04Z","snapshot_observed_at":"2026-08-13T05:19:25.839199Z","submitted_at":"2023-11-22T19:04:04Z","title":"Language Model Inversion","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.13647","snapshot_observed_at":"2026-08-07T19:57:45.269733Z","title":"Language model inversion","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.09974","last_updated":"2025-02-14T08:00:42Z","snapshot_observed_at":"2026-08-07T19:49:00.973991Z","submitted_at":"2025-02-14T08:00:42Z","title":"Has My System Prompt Been Used? Large Language Model Prompt Membership Inference","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-07T19:57:45.269733Z"},"links":{"cited_paper":"/paper/2311.13647","citing_paper":"/paper/2502.09974"},"observation_digest":"sha256:8f689e0dfe3b0ca9887c45b68dda788b32bfe19f7d5ad9f0443d6f58b5ce6a16","observation_id":"d81a65cc-5a94-45e5-a710-db7b0ea52a54","resolution":{"observed_at":"2026-08-07T19:57:45.269733Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T19:57:46.406197Z","title":"Application development using large language models","venue":null,"work_id":"11b1cd9a-4428-4385-9416-87d646c28727","year":2023},"citing_paper":{"arxiv_id":"2502.09974","last_updated":"2025-02-14T08:00:42Z","snapshot_observed_at":"2026-08-07T19:49:00.973991Z","submitted_at":"2025-02-14T08:00:42Z","title":"Has My System Prompt Been Used? Large Language Model Prompt Membership Inference","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-07T19:57:45.277340Z"},"links":{"citing_paper":"/paper/2502.09974"},"observation_digest":"sha256:b1d847b031617812d96860cae050e98c70a9e64aff93f187767581388bb1d318","observation_id":"f841a670-dbbc-43be-950d-537c59dd5d8e","resolution":{"observed_at":"2026-08-07T19:57:46.415803Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T19:57:46.379516Z","title":"Prompt engineering guide","venue":null,"work_id":"f50e39cb-e90e-4f53-ad5f-0e29d49bfafa","year":2023},"citing_paper":{"arxiv_id":"2502.09974","last_updated":"2025-02-14T08:00:42Z","snapshot_observed_at":"2026-08-07T19:49:00.973991Z","submitted_at":"2025-02-14T08:00:42Z","title":"Has My System Prompt Been Used? Large Language Model Prompt Membership Inference","version":1},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-07T19:57:45.283466Z"},"links":{"citing_paper":"/paper/2502.09974"},"observation_digest":"sha256:95e7d8b93b80d8bfd6ceddafe07f9ce3b285ba6463b9d7045eaf64f48390d124","observation_id":"fcc474c8-2db4-4a50-8181-e8b411371482","resolution":{"observed_at":"2026-08-07T19:57:46.388671Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1908.10084","last_updated":"2019-08-27T08:50:17Z","snapshot_observed_at":"2026-08-14T05:02:11.716316Z","submitted_at":"2019-08-27T08:50:17Z","title":"Sentence-BERT: Sentence Embeddings using Siamese BERT-Networks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1908.10084","snapshot_observed_at":"2026-08-07T19:57:45.289930Z","title":"Sentence-bert: Sentence embeddings using siamese bert-networks","venue":null,"work_id":null,"year":1908},"citing_paper":{"arxiv_id":"2502.09974","last_updated":"2025-02-14T08:00:42Z","snapshot_observed_at":"2026-08-07T19:49:00.973991Z","submitted_at":"2025-02-14T08:00:42Z","title":"Has My System Prompt Been Used? Large Language Model Prompt Membership Inference","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-07T19:57:45.289930Z"},"links":{"cited_paper":"/paper/1908.10084","citing_paper":"/paper/2502.09974"},"observation_digest":"sha256:6c7ac881b0224c3d5f61de7b1b3071b0b1180a1ecefaaa1510e137abc455e3cd","observation_id":"8d630b7e-de8d-4566-a013-e57cfa5a76b4","resolution":{"observed_at":"2026-08-07T19:57:45.289930Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T19:57:45.295559Z","title":"White-box vs black-box: Bayes optimal strategies for membership inference","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2502.09974","last_updated":"2025-02-14T08:00:42Z","snapshot_observed_at":"2026-08-07T19:49:00.973991Z","submitted_at":"2025-02-14T08:00:42Z","title":"Has My System Prompt Been Used? Large Language Model Prompt Membership Inference","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-07T19:57:45.295559Z"},"links":{"citing_paper":"/paper/2502.09974"},"observation_digest":"sha256:caaf1e8d359c2388c7dde020fe8276bcb1d703fbd066f6d879e0536aa5626ecd","observation_id":"1b927622-f645-4dac-b997-a13b9f5dfc6e","resolution":{"observed_at":"2026-08-07T19:57:45.295559Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1806.01246","last_updated":"2018-12-14T19:39:43Z","snapshot_observed_at":"2026-08-14T19:07:42.874279Z","submitted_at":"2018-06-04T17:38:42Z","title":"ML-Leaks: Model and Data Independent Membership Inference Attacks and Defenses on Machine Learning Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1806.01246","snapshot_observed_at":"2026-08-07T19:57:45.300578Z","title":"Ml-leaks: Model and data independent membership inference attacks and defenses on machine learning models","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2502.09974","last_updated":"2025-02-14T08:00:42Z","snapshot_observed_at":"2026-08-07T19:49:00.973991Z","submitted_at":"2025-02-14T08:00:42Z","title":"Has My System Prompt Been Used? Large Language Model Prompt Membership Inference","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-07T19:57:45.300578Z"},"links":{"cited_paper":"/paper/1806.01246","citing_paper":"/paper/2502.09974"},"observation_digest":"sha256:e330fcc97414c256328816923ec632a4ce0ad412daaed9de188738df7fe2c91d","observation_id":"b4f1a9b9-6565-4515-a690-6094aae04585","resolution":{"observed_at":"2026-08-07T19:57:45.300578Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.12959","last_updated":"2024-02-20T12:25:26Z","snapshot_observed_at":"2026-08-15T03:01:32.209163Z","submitted_at":"2024-02-20T12:25:26Z","title":"Prompt Stealing Attacks Against Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.12959","snapshot_observed_at":"2026-08-07T19:57:45.306008Z","title":"Prompt stealing attacks against large language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.09974","last_updated":"2025-02-14T08:00:42Z","snapshot_observed_at":"2026-08-07T19:49:00.973991Z","submitted_at":"2025-02-14T08:00:42Z","title":"Has My System Prompt Been Used? Large Language Model Prompt Membership Inference","version":1},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-07T19:57:45.306008Z"},"links":{"cited_paper":"/paper/2402.12959","citing_paper":"/paper/2502.09974"},"observation_digest":"sha256:b61d19f54636e47e57e3059119c39e9a5feb437bfc671afc1b2d5831b0dd4df4","observation_id":"d8b3626f-b44c-4f0d-934b-6b036d6cdb3c","resolution":{"observed_at":"2026-08-07T19:57:45.306008Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T19:57:45.311371Z","title":"Membership inference attacks against machine learning models","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2502.09974","last_updated":"2025-02-14T08:00:42Z","snapshot_observed_at":"2026-08-07T19:49:00.973991Z","submitted_at":"2025-02-14T08:00:42Z","title":"Has My System Prompt Been Used? Large Language Model Prompt Membership Inference","version":1},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-08-07T19:57:45.311371Z"},"links":{"citing_paper":"/paper/2502.09974"},"observation_digest":"sha256:cb790860e8fd30c30cb751851d5208d7d36f2cf0bb1445a8531697ec0ed9d384","observation_id":"cde82144-a971-4bbb-ba75-e9247eebcf66","resolution":{"observed_at":"2026-08-07T19:57:45.311371Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T19:57:46.300366Z","title":"Systematic evaluation of privacy risks of machine learning models","venue":null,"work_id":"4cc8e960-987b-4ab4-9504-87d6583f8765","year":2021},"citing_paper":{"arxiv_id":"2502.09974","last_updated":"2025-02-14T08:00:42Z","snapshot_observed_at":"2026-08-07T19:49:00.973991Z","submitted_at":"2025-02-14T08:00:42Z","title":"Has My System Prompt Been Used? Large Language Model Prompt Membership Inference","version":1},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-08-07T19:57:45.318639Z"},"links":{"citing_paper":"/paper/2502.09974"},"observation_digest":"sha256:c3de13f6adab61f6e8d004c6a3beb6d82ca147d2f2c1d5c9673f3a12beaa7460","observation_id":"405d7e19-dbfb-4ba3-aa8c-9b25819519dc","resolution":{"observed_at":"2026-08-07T19:57:46.311341Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.09288","last_updated":"2023-07-19T17:08:59Z","snapshot_observed_at":"2026-08-07T12:56:43.323460Z","submitted_at":"2023-07-18T14:31:57Z","title":"Llama 2: Open Foundation and Fine-Tuned Chat Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.09288","snapshot_observed_at":"2026-08-07T19:57:45.325891Z","title":"Llama 2: Open foundation and fine-tuned chat models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.09974","last_updated":"2025-02-14T08:00:42Z","snapshot_observed_at":"2026-08-07T19:49:00.973991Z","submitted_at":"2025-02-14T08:00:42Z","title":"Has My System Prompt Been Used? Large Language Model Prompt Membership Inference","version":1},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-08-07T19:57:45.325891Z"},"links":{"cited_paper":"/paper/2307.09288","citing_paper":"/paper/2502.09974"},"observation_digest":"sha256:93b0e07884c1b2f6214e884773ced40f940875c22a5ead42e3557689ccb3b274","observation_id":"68b8b138-d5db-4981-8100-618f201cb0a0","resolution":{"observed_at":"2026-08-07T19:57:45.325891Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2210.10750","last_updated":"2023-06-01T12:30:35Z","snapshot_observed_at":"2026-08-13T14:01:48.309822Z","submitted_at":"2022-10-19T17:46:50Z","title":"Canary in a Coalmine: Better Membership Inference with Ensembled Adversarial Queries","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2210.10750","snapshot_observed_at":"2026-08-07T19:57:45.331840Z","title":"Canary in a coalmine: Better membership inference with ensembled adversarial queries","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2502.09974","last_updated":"2025-02-14T08:00:42Z","snapshot_observed_at":"2026-08-07T19:49:00.973991Z","submitted_at":"2025-02-14T08:00:42Z","title":"Has My System Prompt Been Used? Large Language Model Prompt Membership Inference","version":1},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-08-07T19:57:45.331840Z"},"links":{"cited_paper":"/paper/2210.10750","citing_paper":"/paper/2502.09974"},"observation_digest":"sha256:fc390b5163bbed6e9e2cb060be1ea33f06fed965ce7dde956ee4a805e0540c28","observation_id":"3b3a0c4f-d025-49f9-b776-92464e3ede97","resolution":{"observed_at":"2026-08-07T19:57:45.331840Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T19:57:46.264538Z","title":"Hard prompts made easy: Gradient-based discrete optimization for prompt tuning and discovery","venue":null,"work_id":"9c52a751-500b-4937-aab6-2dd48b7eefb3","year":2024},"citing_paper":{"arxiv_id":"2502.09974","last_updated":"2025-02-14T08:00:42Z","snapshot_observed_at":"2026-08-07T19:49:00.973991Z","submitted_at":"2025-02-14T08:00:42Z","title":"Has My System Prompt Been Used? Large Language Model Prompt Membership Inference","version":1},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-08-07T19:57:45.337903Z"},"links":{"citing_paper":"/paper/2502.09974"},"observation_digest":"sha256:f0a6b4e609e161033476babd205d27835bc3ded6981c5c12a643d772d2e3300b","observation_id":"d9b52a6c-4cb1-41f9-bdb0-c6fb79f335ea","resolution":{"observed_at":"2026-08-07T19:57:46.274629Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.19200","last_updated":"2025-06-12T13:56:26Z","snapshot_observed_at":"2026-08-14T01:21:48.441200Z","submitted_at":"2024-02-29T14:30:28Z","title":"PRSA: Prompt Stealing Attacks against Real-World Prompt Services","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.19200","snapshot_observed_at":"2026-08-07T19:57:45.342844Z","title":"Prsa: Prompt reverse stealing attacks against large language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.09974","last_updated":"2025-02-14T08:00:42Z","snapshot_observed_at":"2026-08-07T19:49:00.973991Z","submitted_at":"2025-02-14T08:00:42Z","title":"Has My System Prompt Been Used? Large Language Model Prompt Membership Inference","version":1},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-08-07T19:57:45.342844Z"},"links":{"cited_paper":"/paper/2402.19200","citing_paper":"/paper/2502.09974"},"observation_digest":"sha256:6667b019e776948a02b0ff4ec312508c0627e56e06a4c4133027bb4fb3d54ab3","observation_id":"0c8a7a63-0a66-484f-85bd-729cc3d791cf","resolution":{"observed_at":"2026-08-07T19:57:45.342844Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T19:57:46.235993Z","title":"Privacy risk in machine learning: Analyzing the connection to overfitting","venue":null,"work_id":"9f1cae0d-bd3f-4bbd-bdfc-4f527824aff4","year":2018},"citing_paper":{"arxiv_id":"2502.09974","last_updated":"2025-02-14T08:00:42Z","snapshot_observed_at":"2026-08-07T19:49:00.973991Z","submitted_at":"2025-02-14T08:00:42Z","title":"Has My System Prompt Been Used? Large Language Model Prompt Membership Inference","version":1},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-08-07T19:57:45.347845Z"},"links":{"citing_paper":"/paper/2502.09974"},"observation_digest":"sha256:3fede6c76a89eac98b18c81f99439ba06be253d282e54532118fdd3f2592b02f","observation_id":"e80e620f-b54f-4624-9a0c-868113c21ba8","resolution":{"observed_at":"2026-08-07T19:57:46.243823Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2303.08493","last_updated":"2023-03-15T10:05:29Z","snapshot_observed_at":"2026-08-13T12:24:16.788176Z","submitted_at":"2023-03-15T10:05:29Z","title":"Impact of magnetization and hyperfine field distribution on high magnetoelectric coupling strength in BaTiO$_3$-BiFeO$_3$ multilayers","version":1},"cited_work":{"arxiv_id":"2303.08493","doi":null,"metadata_source":"pith","pith_arxiv_id":"2303.08493","snapshot_observed_at":"2026-08-07T19:57:45.631606Z","title":"Impact of magnetization and hyperfine field distribution on high magnetoelectric coupling strength in BaTiO$_3$-BiFeO$_3$ multilayers","venue":"cond-mat.mtrl-sci","work_id":"54810712-ee44-47a9-9860-c26a88640b8c","year":2023},"citing_paper":{"arxiv_id":"2502.09974","last_updated":"2025-02-14T08:00:42Z","snapshot_observed_at":"2026-08-07T19:49:00.973991Z","submitted_at":"2025-02-14T08:00:42Z","title":"Has My System Prompt Been Used? Large Language Model Prompt Membership Inference","version":1},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-08-07T19:57:45.353566Z"},"links":{"cited_paper":"/paper/2303.08493","citing_paper":"/paper/2502.09974"},"observation_digest":"sha256:003e6a5a8a26da3e33ac7aa470726a9f70152b1f53b51209811c04e84f809372","observation_id":"b2ed7c43-8647-4889-9e32-e1d25d249fba","resolution":{"observed_at":"2026-08-07T19:57:45.640895Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-08-12T09:06:50.363435Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-08-07T19:57:45.360695Z","title":"Universal and transferable adversarial attacks on aligned language models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.09974","last_updated":"2025-02-14T08:00:42Z","snapshot_observed_at":"2026-08-07T19:49:00.973991Z","submitted_at":"2025-02-14T08:00:42Z","title":"Has My System Prompt Been Used? Large Language Model Prompt Membership Inference","version":1},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-08-07T19:57:45.360695Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2502.09974"},"observation_digest":"sha256:512c9c2b05a15f1d57b576bcc710107418d45c7f0a2d588d4684ea4e45ee17c1","observation_id":"a25b558b-5980-4dd0-8d31-a722df714560","resolution":{"observed_at":"2026-08-07T19:57:45.360695Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T19:57:45.368194Z","title":"write newline","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2502.09974","last_updated":"2025-02-14T08:00:42Z","snapshot_observed_at":"2026-08-07T19:49:00.973991Z","submitted_at":"2025-02-14T08:00:42Z","title":"Has My System Prompt Been Used? Large Language Model Prompt Membership Inference","version":1},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-08-07T19:57:45.368194Z"},"links":{"citing_paper":"/paper/2502.09974"},"observation_digest":"sha256:85942a2983acb737de0f4ed0391a8520abb80e784bdc4e6f84eacba072589180","observation_id":"2f4aa47f-601f-4f22-881d-a244eeae7528","resolution":{"observed_at":"2026-08-07T19:57:45.368194Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T19:57:45.375929Z","title":"@esa (Ref","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2502.09974","last_updated":"2025-02-14T08:00:42Z","snapshot_observed_at":"2026-08-07T19:49:00.973991Z","submitted_at":"2025-02-14T08:00:42Z","title":"Has My System Prompt Been Used? Large Language Model Prompt Membership Inference","version":1},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-08-07T19:57:45.375929Z"},"links":{"citing_paper":"/paper/2502.09974"},"observation_digest":"sha256:aa3348bad93a7c90c46effe55ccc560d63c6f3b3cd894f7a455db20675bf4016","observation_id":"e92931d5-8736-4c9e-98c4-7a785fd2796f","resolution":{"observed_at":"2026-08-07T19:57:45.375929Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T19:57:45.381616Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2502.09974","last_updated":"2025-02-14T08:00:42Z","snapshot_observed_at":"2026-08-07T19:49:00.973991Z","submitted_at":"2025-02-14T08:00:42Z","title":"Has My System Prompt Been Used? Large Language Model Prompt Membership Inference","version":1},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-08-07T19:57:45.381616Z"},"links":{"citing_paper":"/paper/2502.09974"},"observation_digest":"sha256:1ae0a2cc111adcbd28421ed3b71b5069fd182b35c65df325ec3b7e648e397d50","observation_id":"5ea70251-1fae-4cb3-b671-9906970440a8","resolution":{"observed_at":"2026-08-07T19:57:45.381616Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T19:57:45.390072Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2502.09974","last_updated":"2025-02-14T08:00:42Z","snapshot_observed_at":"2026-08-07T19:49:00.973991Z","submitted_at":"2025-02-14T08:00:42Z","title":"Has My System Prompt Been Used? Large Language Model Prompt Membership Inference","version":1},"reference_index":38,"source":"arxiv_source","source_observed_at":"2026-08-07T19:57:45.390072Z"},"links":{"citing_paper":"/paper/2502.09974"},"observation_digest":"sha256:2105225da7bea45dfcea0074ff020f925b223f33c56dc77cceb393018ee7ec0b","observation_id":"9df5a443-8637-4ad5-acc9-f6c0532126ac","resolution":{"observed_at":"2026-08-07T19:57:45.390072Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2502.09974","last_updated":"2025-02-14T08:00:42Z","latest_version":1,"primary_category":"cs.AI","snapshot_observed_at":"2026-08-07T19:49:00.973991Z","submitted_at":"2025-02-14T08:00:42Z","title":"Has My System Prompt Been Used? Large Language Model Prompt Membership Inference"},"reference_resolution":{"displayed":38,"state_counts":{"malformed_identifier":0,"metadata_mismatch":1,"parse_uncertain":0,"unresolved":27,"verified_exact":1,"verified_fuzzy":9},"total_outbound_references":38},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"thesis":"As of 15 August 2026, this Paper Citation Record lists 38 of 38 outbound references and 3 inbound Pith citation observations for arXiv:2502.09974."}