{"as_of":"2026-08-09T06:26:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:b438294574e1749e662406bd56efca93da7105524b693b814cfbf32ac55e3447","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":14,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":14,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":14,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":14,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T15:41:21.733238Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-04T10:49:46.745286Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2503.00061","last_updated":"2025-03-04T03:32:46Z","snapshot_observed_at":"2026-08-07T17:44:13.894740Z","submitted_at":"2025-02-27T04:04:50Z","title":"Adaptive Attacks Break Defenses Against Indirect Prompt Injection Attacks on LLM Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.00061","snapshot_observed_at":"2026-08-07T15:41:21.733238Z","title":"Adaptive attacks break defenses against indirect prompt injection attacks on llm agents","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.14289","last_updated":"2026-06-05T10:24:33Z","snapshot_observed_at":"2026-08-07T15:34:54.479489Z","submitted_at":"2025-05-20T12:41:05Z","title":"EVA: Evolving Semantic Adversaries for Red-Teaming GUI Agents Against Environmental Injection Attacks","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T15:41:21.733238Z"},"links":{"cited_paper":"/paper/2503.00061","citing_paper":"/paper/2505.14289"},"observation_digest":"sha256:034dbc07bb2006147f5fc7d10fe141ffb980ab513f6767820bff6330799e4a5b","observation_id":"8369a571-a0fd-49dc-a7f1-c3f6ce9a8943","resolution":{"observed_at":"2026-08-07T15:41:21.733238Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.00061","last_updated":"2025-03-04T03:32:46Z","snapshot_observed_at":"2026-08-07T17:44:13.894740Z","submitted_at":"2025-02-27T04:04:50Z","title":"Adaptive Attacks Break Defenses Against Indirect Prompt Injection Attacks on LLM Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.00061","snapshot_observed_at":"2026-08-06T23:01:04.689987Z","title":"S., and Kang, D","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.00052","last_updated":"2025-06-25T02:56:38Z","snapshot_observed_at":"2026-08-08T22:10:18.231261Z","submitted_at":"2025-06-25T02:56:38Z","title":"VSF-Med:A Vulnerability Scoring Framework for Medical Vision-Language Models","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-06T23:01:04.689987Z"},"links":{"cited_paper":"/paper/2503.00061","citing_paper":"/paper/2507.00052"},"observation_digest":"sha256:b27eed921fe40fa766c111187a176ef8954dbf910227da1954558ed3a5a94cbd","observation_id":"51ccba5c-0fd9-4e72-a5ab-81c28a9ee95a","resolution":{"observed_at":"2026-08-06T23:01:04.689987Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.00061","last_updated":"2025-03-04T03:32:46Z","snapshot_observed_at":"2026-08-07T17:44:13.894740Z","submitted_at":"2025-02-27T04:04:50Z","title":"Adaptive Attacks Break Defenses Against Indirect Prompt Injection Attacks on LLM Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.00061","snapshot_observed_at":"2026-08-06T15:52:56.834425Z","title":"Yiran Zhao, Wenyue Zheng, Tianle Cai, Do Xuan Long, Kenji Kawaguchi, Anirudh Goyal, and Michael Qizhe Shieh","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.14799","last_updated":"2025-07-20T03:10:13Z","snapshot_observed_at":"2026-08-06T23:52:08.348122Z","submitted_at":"2025-07-20T03:10:13Z","title":"Manipulating LLM Web Agents with Indirect Prompt Injection Attack via HTML Accessibility Tree","version":1},"reference_index":2025,"source":"pdf_text","source_observed_at":"2026-08-06T15:52:56.834425Z"},"links":{"cited_paper":"/paper/2503.00061","citing_paper":"/paper/2507.14799"},"observation_digest":"sha256:31ad2769d00b7837971e39a67902dbfdedd261843150bce759c2ec2981b37522","observation_id":"9ea67daa-1d07-4f90-9671-84575271cc77","resolution":{"observed_at":"2026-08-06T15:52:56.834425Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.00061","last_updated":"2025-03-04T03:32:46Z","snapshot_observed_at":"2026-08-07T17:44:13.894740Z","submitted_at":"2025-02-27T04:04:50Z","title":"Adaptive Attacks Break Defenses Against Indirect Prompt Injection Attacks on LLM Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.00061","snapshot_observed_at":"2026-08-06T12:44:21.855663Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.21504","last_updated":"2025-07-29T04:57:02Z","snapshot_observed_at":"2026-08-06T15:35:42.279155Z","submitted_at":"2025-07-29T04:57:02Z","title":"Evaluation and Benchmarking of LLM Agents: A Survey","version":1},"reference_index":113,"source":"pdf_text","source_observed_at":"2026-08-06T12:44:21.855663Z"},"links":{"cited_paper":"/paper/2503.00061","citing_paper":"/paper/2507.21504"},"observation_digest":"sha256:7962d44294cf0d9efeffceb7911ba384fe2aff94d4f60af7b5cd00a3a12ad81a","observation_id":"0a56cf42-0de8-4745-9800-6888724488e7","resolution":{"observed_at":"2026-08-06T12:44:21.855663Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.00061","last_updated":"2025-03-04T03:32:46Z","snapshot_observed_at":"2026-08-07T17:44:13.894740Z","submitted_at":"2025-02-27T04:04:50Z","title":"Adaptive Attacks Break Defenses Against Indirect Prompt Injection Attacks on LLM Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.00061","snapshot_observed_at":"2026-08-05T05:09:39.987143Z","title":"Adaptive attacks break defenses against indirect prompt injection attacks on llm agents.arXiv preprint arXiv:2503.00061, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2509.05755","last_updated":"2026-06-28T05:20:23Z","snapshot_observed_at":"2026-08-06T21:30:43.649885Z","submitted_at":"2025-09-06T15:48:49Z","title":"Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment","version":6},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-05T05:09:39.987143Z"},"links":{"cited_paper":"/paper/2503.00061","citing_paper":"/paper/2509.05755"},"observation_digest":"sha256:d7b0b8cbc79f1d3053bca422cfeaf20630806994b8b0fd10ebba48a6f4211b96","observation_id":"9acb4cc3-cf41-47ab-a028-ae5e1faf9068","resolution":{"observed_at":"2026-08-05T05:09:39.987143Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.00061","last_updated":"2025-03-04T03:32:46Z","snapshot_observed_at":"2026-08-07T17:44:13.894740Z","submitted_at":"2025-02-27T04:04:50Z","title":"Adaptive Attacks Break Defenses Against Indirect Prompt Injection Attacks on LLM Agents","version":2},"cited_work":{"arxiv_id":"2503.00061","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2503.00061","snapshot_observed_at":"2026-07-04T10:49:46.745286Z","title":"Adaptive Attacks Break Defenses Against Indirect Prompt Injection Attacks on LLM Agents","venue":null,"work_id":"56706c83-c9b2-4b3f-a2fe-9daaba055369","year":2025},"citing_paper":{"arxiv_id":"2603.12277","last_updated":"2026-06-27T01:09:30Z","snapshot_observed_at":"2026-08-02T21:46:08.650145Z","submitted_at":"2026-02-22T18:43:34Z","title":"Prompt Injection as Role Confusion","version":4},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-05-15T20:18:44.156726Z"},"links":{"cited_paper":"/paper/2503.00061","citing_paper":"/paper/2603.12277"},"observation_digest":"sha256:06282e9755d91a76164cc8f173d71b49e9adf539aab097ae12c048d1c9451ef9","observation_id":"aaefaa14-f0e5-4ae6-ae8c-704b169e0d45","resolution":{"observed_at":"2026-05-15T20:20:17.489468Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2503.00061","last_updated":"2025-03-04T03:32:46Z","snapshot_observed_at":"2026-08-07T17:44:13.894740Z","submitted_at":"2025-02-27T04:04:50Z","title":"Adaptive Attacks Break Defenses Against Indirect Prompt Injection Attacks on LLM Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.00061","snapshot_observed_at":"2026-08-02T21:46:13.122809Z","title":"Allowed content: Advice that describe methods of sabotage are permitted only when targeting electronic or software-based systems","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2603.12277","last_updated":"2026-06-27T01:09:30Z","snapshot_observed_at":"2026-08-02T21:46:08.650145Z","submitted_at":"2026-02-22T18:43:34Z","title":"Prompt Injection as Role Confusion","version":6},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-02T21:46:13.122809Z"},"links":{"cited_paper":"/paper/2503.00061","citing_paper":"/paper/2603.12277"},"observation_digest":"sha256:a8d0096e6f75b43d93f29cebd5b0e9b4a2f5f58e0f4270b31f21462784510969","observation_id":"4ba43b50-8c77-4efe-b4aa-401bbf253463","resolution":{"observed_at":"2026-08-02T21:46:13.122809Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.00061","last_updated":"2025-03-04T03:32:46Z","snapshot_observed_at":"2026-08-07T17:44:13.894740Z","submitted_at":"2025-02-27T04:04:50Z","title":"Adaptive Attacks Break Defenses Against Indirect Prompt Injection Attacks on LLM Agents","version":2},"cited_work":{"arxiv_id":"2503.00061","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2503.00061","snapshot_observed_at":"2026-07-04T10:49:46.745286Z","title":"Adaptive Attacks Break Defenses Against Indirect Prompt Injection Attacks on LLM Agents","venue":null,"work_id":"56706c83-c9b2-4b3f-a2fe-9daaba055369","year":2025},"citing_paper":{"arxiv_id":"2604.18248","last_updated":"2026-07-30T16:35:11Z","snapshot_observed_at":"2026-08-02T23:57:45.082199Z","submitted_at":"2026-04-20T13:27:05Z","title":"Beyond Pattern Matching: Seven Cross-Domain Techniques for Prompt Injection Detection","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-05-10T04:42:33.450658Z"},"links":{"cited_paper":"/paper/2503.00061","citing_paper":"/paper/2604.18248"},"observation_digest":"sha256:3dde94a775650189a214304dfbf2689f9ad116c604039fddf91de6478148e567","observation_id":"9a401447-f264-4022-b7b6-b7ad9e7d6c02","resolution":{"observed_at":"2026-05-10T11:55:21.361407Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2503.00061","last_updated":"2025-03-04T03:32:46Z","snapshot_observed_at":"2026-08-07T17:44:13.894740Z","submitted_at":"2025-02-27T04:04:50Z","title":"Adaptive Attacks Break Defenses Against Indirect Prompt Injection Attacks on LLM Agents","version":2},"cited_work":{"arxiv_id":"2503.00061","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2503.00061","snapshot_observed_at":"2026-07-04T10:49:46.745286Z","title":"Adaptive Attacks Break Defenses Against Indirect Prompt Injection Attacks on LLM Agents","venue":null,"work_id":"56706c83-c9b2-4b3f-a2fe-9daaba055369","year":2025},"citing_paper":{"arxiv_id":"2604.18248","last_updated":"2026-07-30T16:35:11Z","snapshot_observed_at":"2026-08-02T23:57:45.082199Z","submitted_at":"2026-04-20T13:27:05Z","title":"Beyond Pattern Matching: Seven Cross-Domain Techniques for Prompt Injection Detection","version":2},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-05-21T00:51:22.907932Z"},"links":{"cited_paper":"/paper/2503.00061","citing_paper":"/paper/2604.18248"},"observation_digest":"sha256:eeb3285b8700e692eed8e45bf27129e276fc78a3cba98f04a979aa8f296bfba4","observation_id":"2f46234b-ec34-4284-b0e3-1f5d923705b6","resolution":{"observed_at":"2026-05-21T00:53:53.069031Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2503.00061","last_updated":"2025-03-04T03:32:46Z","snapshot_observed_at":"2026-08-07T17:44:13.894740Z","submitted_at":"2025-02-27T04:04:50Z","title":"Adaptive Attacks Break Defenses Against Indirect Prompt Injection Attacks on LLM Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.00061","snapshot_observed_at":"2026-08-02T15:56:48.909336Z","title":"Adaptive Attacks Break Defenses Against Indirect Prompt Injection Attacks on LLM Agents","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.18248","last_updated":"2026-07-30T16:35:11Z","snapshot_observed_at":"2026-08-02T23:57:45.082199Z","submitted_at":"2026-04-20T13:27:05Z","title":"Beyond Pattern Matching: Seven Cross-Domain Techniques for Prompt Injection Detection","version":4},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-02T15:56:48.909336Z"},"links":{"cited_paper":"/paper/2503.00061","citing_paper":"/paper/2604.18248"},"observation_digest":"sha256:ded9edfa04beb080799670fa597f2ca0cb3186ae3b5472fa737a2234b2ada942","observation_id":"8a1698d4-9ac6-4d00-906b-66f0ce2ae004","resolution":{"observed_at":"2026-08-02T15:56:48.909336Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.00061","last_updated":"2025-03-04T03:32:46Z","snapshot_observed_at":"2026-08-07T17:44:13.894740Z","submitted_at":"2025-02-27T04:04:50Z","title":"Adaptive Attacks Break Defenses Against Indirect Prompt Injection Attacks on LLM Agents","version":2},"cited_work":{"arxiv_id":"2503.00061","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2503.00061","snapshot_observed_at":"2026-07-04T10:49:46.745286Z","title":"Adaptive Attacks Break Defenses Against Indirect Prompt Injection Attacks on LLM Agents","venue":null,"work_id":"56706c83-c9b2-4b3f-a2fe-9daaba055369","year":2025},"citing_paper":{"arxiv_id":"2606.00914","last_updated":"2026-05-30T22:43:23Z","snapshot_observed_at":"2026-07-06T23:41:34.459700Z","submitted_at":"2026-05-30T22:43:23Z","title":"Adversarial Feeds Steer LLM Agent Decisions Against Their Defaults","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-06-28T18:18:52.472535Z"},"links":{"cited_paper":"/paper/2503.00061","citing_paper":"/paper/2606.00914"},"observation_digest":"sha256:f470a966b5ad5be911cac5df02a89b593c2b962e741d765ad0aa564fcafa16c6","observation_id":"44b2861b-6791-41e5-a7f2-f7cb2cfe1322","resolution":{"observed_at":"2026-06-28T20:52:38.007689Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2503.00061","last_updated":"2025-03-04T03:32:46Z","snapshot_observed_at":"2026-08-07T17:44:13.894740Z","submitted_at":"2025-02-27T04:04:50Z","title":"Adaptive Attacks Break Defenses Against Indirect Prompt Injection Attacks on LLM Agents","version":2},"cited_work":{"arxiv_id":"2503.00061","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2503.00061","snapshot_observed_at":"2026-07-04T10:49:46.745286Z","title":"Adaptive Attacks Break Defenses Against Indirect Prompt Injection Attacks on LLM Agents","venue":null,"work_id":"56706c83-c9b2-4b3f-a2fe-9daaba055369","year":2025},"citing_paper":{"arxiv_id":"2606.23277","last_updated":"2026-06-22T12:54:04Z","snapshot_observed_at":"2026-08-02T06:21:16.386788Z","submitted_at":"2026-06-22T12:54:04Z","title":"GIF: Locally Sound Geometric Information Flow Control for LLMs","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-06-26T08:24:49.908288Z"},"links":{"cited_paper":"/paper/2503.00061","citing_paper":"/paper/2606.23277"},"observation_digest":"sha256:302c96f8003159ad8a2b02a7866ec64a1b4ae95a547f74b4b2ffc0bf2f8f6dad","observation_id":"7b3c326f-5f17-4e07-b878-cf799d84a27a","resolution":{"observed_at":"2026-07-04T10:49:46.746919Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2503.00061","last_updated":"2025-03-04T03:32:46Z","snapshot_observed_at":"2026-08-07T17:44:13.894740Z","submitted_at":"2025-02-27T04:04:50Z","title":"Adaptive Attacks Break Defenses Against Indirect Prompt Injection Attacks on LLM Agents","version":2},"cited_work":{"arxiv_id":"2503.00061","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2503.00061","snapshot_observed_at":"2026-07-04T10:49:46.745286Z","title":"Adaptive Attacks Break Defenses Against Indirect Prompt Injection Attacks on LLM Agents","venue":null,"work_id":"56706c83-c9b2-4b3f-a2fe-9daaba055369","year":2025},"citing_paper":{"arxiv_id":"2606.30783","last_updated":"2026-06-29T18:11:17Z","snapshot_observed_at":"2026-08-08T22:30:38.879886Z","submitted_at":"2026-06-29T18:11:17Z","title":"Security--Fidelity Tradeoffs: The Hidden Cost of Prompt Injection Defense","version":1},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-07-01T01:44:07.700127Z"},"links":{"cited_paper":"/paper/2503.00061","citing_paper":"/paper/2606.30783"},"observation_digest":"sha256:e0a5f00da067f1b66227026e981d415a69a74d3e079110c2cd60d5559809a7fc","observation_id":"a693f6b7-cb2a-490e-9059-1d37a9adb93a","resolution":{"observed_at":"2026-07-01T12:45:44.903048Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2503.00061","last_updated":"2025-03-04T03:32:46Z","snapshot_observed_at":"2026-08-07T17:44:13.894740Z","submitted_at":"2025-02-27T04:04:50Z","title":"Adaptive Attacks Break Defenses Against Indirect Prompt Injection Attacks on LLM Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.00061","snapshot_observed_at":"2026-07-31T04:54:36.195909Z","title":"Adaptive attacks break defenses against indirect prompt injection attacks on LLM agents","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.24964","last_updated":"2026-07-27T18:13:28Z","snapshot_observed_at":"2026-08-07T06:05:15.080571Z","submitted_at":"2026-07-27T18:13:28Z","title":"ALIBI: Adaptive Agentic Attacks on LLM-Based Vulnerability Detectors via Adversarial Code Comments","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-07-31T04:54:36.195909Z"},"links":{"cited_paper":"/paper/2503.00061","citing_paper":"/paper/2607.24964"},"observation_digest":"sha256:0251fff4b93252233e2d1f54fae966ffd0e3bb6617cbfc4d4927167c38c02fd2","observation_id":"c508a3db-130b-452a-958d-286fec2ad66b","resolution":{"observed_at":"2026-07-31T04:54:36.195909Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2503.00061/citation-record","integrity":"/paper/2503.00061/integrity","json":"/paper/2503.00061/citation-record.json","paper":"/paper/2503.00061"},"outbound":[],"paper":{"arxiv_id":"2503.00061","last_updated":"2025-03-04T03:32:46Z","latest_version":2,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-07T17:44:13.894740Z","submitted_at":"2025-02-27T04:04:50Z","title":"Adaptive Attacks Break Defenses Against Indirect Prompt Injection Attacks on LLM Agents"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 14 inbound Pith citation observations for arXiv:2503.00061."}