{"as_of":"2026-08-07T16:45:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:6cdadcbefacdea224acbde44d351d4a6511760808dbbdc964e3b15a957d6e4bd","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":7,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":7,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":7,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":7,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T11:24:03.477785Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":1,"source":"arxiv_reference","source_observed_at":"2026-08-05T02:28:24.338817Z","state":"measured"}],"external_citation_measurements":[{"count":1,"observed_at":"2026-08-05T02:28:24.338817Z","source":"arxiv_reference"}],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2502.12497","last_updated":"2026-07-09T13:05:41Z","snapshot_observed_at":"2026-07-12T23:18:37.267136Z","submitted_at":"2025-02-18T03:22:38Z","title":"Demystifying LLM Supply Chain Vulnerabilities in the Wild: Distribution, Root Cause, and Real-World Impact","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.12497","snapshot_observed_at":"2026-08-07T11:24:03.477785Z","title":"Sok: Understanding vulnerabilities in the large language model supply chain,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.02617","last_updated":"2025-06-03T08:34:01Z","snapshot_observed_at":"2026-08-07T13:13:09.422792Z","submitted_at":"2025-06-03T08:34:01Z","title":"Toward Understanding Bugs in Vector Database Management Systems","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-07T11:24:03.477785Z"},"links":{"cited_paper":"/paper/2502.12497","citing_paper":"/paper/2506.02617"},"observation_digest":"sha256:fbfbdd9ffb46d097d349265f8fe302b1fd6d4608ad09f6e50c531063d0b081be","observation_id":"8876e6b3-47af-4d5f-894c-95dc05d51b64","resolution":{"observed_at":"2026-08-07T11:24:03.477785Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.12497","last_updated":"2026-07-09T13:05:41Z","snapshot_observed_at":"2026-07-12T23:18:37.267136Z","submitted_at":"2025-02-18T03:22:38Z","title":"Demystifying LLM Supply Chain Vulnerabilities in the Wild: Distribution, Root Cause, and Real-World Impact","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.12497","snapshot_observed_at":"2026-08-06T19:12:22.978264Z","title":"Sok: Understanding vulnerabilities in the large language model supply chain,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.06323","last_updated":"2025-07-08T18:24:28Z","snapshot_observed_at":"2026-08-06T19:05:12.143746Z","submitted_at":"2025-07-08T18:24:28Z","title":"Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-06T19:12:22.978264Z"},"links":{"cited_paper":"/paper/2502.12497","citing_paper":"/paper/2507.06323"},"observation_digest":"sha256:ec8069d23accb3396606feaebaab677ae96ce0db46ae5dcdd575a7d0c5dd7c06","observation_id":"dd8f7104-56ce-4e61-99e2-8d72edd28033","resolution":{"observed_at":"2026-08-06T19:12:22.978264Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.12497","last_updated":"2026-07-09T13:05:41Z","snapshot_observed_at":"2026-07-12T23:18:37.267136Z","submitted_at":"2025-02-18T03:22:38Z","title":"Demystifying LLM Supply Chain Vulnerabilities in the Wild: Distribution, Root Cause, and Real-World Impact","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.12497","snapshot_observed_at":"2026-08-06T14:45:42.905342Z","title":"Large language model supply chain: A research agenda","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.18105","last_updated":"2025-07-24T05:30:54Z","snapshot_observed_at":"2026-08-06T14:36:17.225757Z","submitted_at":"2025-07-24T05:30:54Z","title":"Understanding the Supply Chain and Risks of Large Language Model Applications","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-06T14:45:42.905342Z"},"links":{"cited_paper":"/paper/2502.12497","citing_paper":"/paper/2507.18105"},"observation_digest":"sha256:579541db39d0afcd2542c26946a3b6661dc7eeb2f92759446ab0d0d73b234735","observation_id":"11cb1854-b4d5-43b9-a785-e7a5328efa16","resolution":{"observed_at":"2026-08-06T14:45:42.905342Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.12497","last_updated":"2026-07-09T13:05:41Z","snapshot_observed_at":"2026-07-12T23:18:37.267136Z","submitted_at":"2025-02-18T03:22:38Z","title":"Demystifying LLM Supply Chain Vulnerabilities in the Wild: Distribution, Root Cause, and Real-World Impact","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.12497","snapshot_observed_at":"2026-08-05T15:32:05.036028Z","title":"Sok: Understanding vulnerabilities in the large language model supply chain,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-05T15:32:04.135703Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:05.036028Z"},"links":{"cited_paper":"/paper/2502.12497","citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:1dd6f61f2259235b270fbecfe73f281172319325a662915c27ab57414d7f5d45","observation_id":"307a95c0-19f1-43c2-9231-f7d42fd937ce","resolution":{"observed_at":"2026-08-05T15:32:05.036028Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.12497","last_updated":"2026-07-09T13:05:41Z","snapshot_observed_at":"2026-07-12T23:18:37.267136Z","submitted_at":"2025-02-18T03:22:38Z","title":"Demystifying LLM Supply Chain Vulnerabilities in the Wild: Distribution, Root Cause, and Real-World Impact","version":2},"cited_work":{"arxiv_id":"2502.12497","doi":"10.48550/arxiv.2502.12497","metadata_source":"arxiv_reference","pith_arxiv_id":"2502.12497","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Sok: Understanding vulnerabilities in the large language model supply chain,","venue":"ArXiv.org","work_id":"c66d0dd2-3657-413d-ac76-6298653d8d6f","year":2025},"citing_paper":{"arxiv_id":"2604.16543","last_updated":"2026-04-17T02:31:09Z","snapshot_observed_at":"2026-07-06T23:03:52.631613Z","submitted_at":"2026-04-17T02:31:09Z","title":"Conjunctive Prompt Attacks in Multi-Agent LLM Systems","version":1},"reference_index":40,"source":"arxiv_source","source_observed_at":"2026-05-10T08:13:42.401992Z"},"links":{"cited_paper":"/paper/2502.12497","citing_paper":"/paper/2604.16543"},"observation_digest":"sha256:70c23659d32dc85d0f7c9b57eeda4e75731c4b5ff07d6ccea2097a0f69711f00","observation_id":"3e229a76-4825-498d-84e6-d969df0c3458","resolution":{"observed_at":"2026-07-10T01:19:37.869746Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2502.12497","last_updated":"2026-07-09T13:05:41Z","snapshot_observed_at":"2026-07-12T23:18:37.267136Z","submitted_at":"2025-02-18T03:22:38Z","title":"Demystifying LLM Supply Chain Vulnerabilities in the Wild: Distribution, Root Cause, and Real-World Impact","version":2},"cited_work":{"arxiv_id":"2502.12497","doi":"10.48550/arxiv.2502.12497","metadata_source":"arxiv_reference","pith_arxiv_id":"2502.12497","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Sok: Understanding vulnerabilities in the large language model supply chain,","venue":"ArXiv.org","work_id":"c66d0dd2-3657-413d-ac76-6298653d8d6f","year":2025},"citing_paper":{"arxiv_id":"2605.28893","last_updated":"2026-07-03T07:41:40Z","snapshot_observed_at":"2026-08-02T07:12:40.296167Z","submitted_at":"2026-05-27T08:11:37Z","title":"Towards Demystifying and Repairing LLM-in-the-Loop Vulnerabilities","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-06-29T11:21:33.012202Z"},"links":{"cited_paper":"/paper/2502.12497","citing_paper":"/paper/2605.28893"},"observation_digest":"sha256:133ce8c75c8e55f355ff943966ce03c639a6bb8411e4b2fa8d9af182bbfd9da3","observation_id":"c16fe48f-17a2-4a42-aa83-00a0a9cab8e8","resolution":{"observed_at":"2026-07-10T01:19:37.869746Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2502.12497","last_updated":"2026-07-09T13:05:41Z","snapshot_observed_at":"2026-07-12T23:18:37.267136Z","submitted_at":"2025-02-18T03:22:38Z","title":"Demystifying LLM Supply Chain Vulnerabilities in the Wild: Distribution, Root Cause, and Real-World Impact","version":2},"cited_work":{"arxiv_id":"2502.12497","doi":"10.48550/arxiv.2502.12497","metadata_source":"arxiv_reference","pith_arxiv_id":"2502.12497","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Sok: Understanding vulnerabilities in the large language model supply chain,","venue":"ArXiv.org","work_id":"c66d0dd2-3657-413d-ac76-6298653d8d6f","year":2025},"citing_paper":{"arxiv_id":"2607.01640","last_updated":"2026-07-02T03:11:41Z","snapshot_observed_at":"2026-08-01T03:50:51.103789Z","submitted_at":"2026-07-02T03:11:41Z","title":"AgentFlow: Building Agent Dependency Graphs for Static Analysis of Agent Programs","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-07-03T09:17:05.390905Z"},"links":{"cited_paper":"/paper/2502.12497","citing_paper":"/paper/2607.01640"},"observation_digest":"sha256:6876de2d5621feaf706aba2eabcb87e6fdbf793d6efdfa380b8bc2b63fd4d98b","observation_id":"ef51dc6c-bfcd-46ec-8585-9f81a1c0e330","resolution":{"observed_at":"2026-07-10T01:19:37.869746Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2502.12497/citation-record","integrity":"/paper/2502.12497/integrity","json":"/paper/2502.12497/citation-record.json","paper":"/paper/2502.12497"},"outbound":[],"paper":{"arxiv_id":"2502.12497","last_updated":"2026-07-09T13:05:41Z","latest_version":2,"primary_category":"cs.CR","snapshot_observed_at":"2026-07-12T23:18:37.267136Z","submitted_at":"2025-02-18T03:22:38Z","title":"Demystifying LLM Supply Chain Vulnerabilities in the Wild: Distribution, Root Cause, and Real-World Impact"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 7 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 7 inbound Pith citation observations for arXiv:2502.12497."}