Typed states for the displayed outbound observations.
Source: paper_references, paper_reference_links, observed 2026-05-13T06:58:50.351078Z
Paper Citation Record · LEDGER
Defeating Prompt Injections by Design
As of 4 August 2026, this Paper Citation Record lists 100 of 229 outbound references and 100 inbound Pith citation observations for arXiv:2503.18813.
A citation records a reference. It does not transfer a finding from one paper to another.
Coverage vector
One-hop event checks from named stored sources.
Source: scholarly_work_events, retraction_status_cache, observed 2026-08-04T06:34:03.388597+00:00
Pith citing papers itemized under the disclosed page cap.
Source: paper_references, paper_reference_links, observed 2026-08-04T14:43:48.898809Z
A source-named dated measurement, never combined with another source.
Source: pith, observed 2026-07-10T12:27:04.207627Z
Reference resolution
100 of 229 outbound references displayed
- verified exact0
- verified fuzzy28
- unresolved69
- parse uncertain2
- malformed identifier1
- metadata mismatch0
External citation measurements
No source-named external measurement is stored.
Outbound references
Observation c867218b-8ba9-4e63-986a-e689cf883037 · outbound
This paper cites HH:MM" representing how many hours and minutes you have until the lunch.↩→ User Running the code gave the following error: Traceback (most recent call last): File.
Defeating Prompt Injections by Design HH:MM" representing how many hours and minutes you have until the lunch.↩→ User Running the code gave the following error: Traceback (most recent call last): File
Reference 7
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-05-13T06:58:50.498939Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation f28f57f0-48ed-4614-93af-6a46458c7f89 · outbound
This paper cites an unresolved cited work.
Defeating Prompt Injections by Design Unresolved cited work
Reference 8
- Resolution
- unresolved
- raw_fallback, observed 2026-05-13T06:58:50.504458Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 9d173110-6614-44bf-a2dc-f0c486c7bb30 · outbound
This paper cites an unresolved cited work.
Defeating Prompt Injections by Design Unresolved cited work
Reference 9
- Resolution
- unresolved
- raw_fallback, observed 2026-05-13T06:58:50.509377Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 46246e3a-8e82-4d6e-ba8e-aa5967c8240e · outbound
This paper cites an unresolved cited work.
Defeating Prompt Injections by Design Unresolved cited work
Reference 10
- Resolution
- unresolved
- raw_fallback, observed 2026-05-13T06:58:50.514672Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 8bde27b5-8cd0-4c5f-a55e-2aa4d30233c9 · outbound
This paper cites <stdin>", line 11, in <module> info = query_ai_assistant( ^^^^^^^^^^^^^^^^^^^^^^^^^^.
Defeating Prompt Injections by Design <stdin>", line 11, in <module> info = query_ai_assistant( ^^^^^^^^^^^^^^^^^^^^^^^^^^
Reference 11
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-05-13T06:58:50.519869Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation b2972e26-d7ff-4a35-b2b5-16cdb730dacf · outbound
This paper cites an unresolved cited work.
Defeating Prompt Injections by Design Unresolved cited work
Reference 12
- Resolution
- unresolved
- raw_fallback, observed 2026-05-13T06:58:50.524836Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 3550dadb-def8-438d-b394-4fab673a18cd · outbound
This paper cites an unresolved cited work.
Defeating Prompt Injections by Design Unresolved cited work
Reference 13
- Resolution
- unresolved
- raw_fallback, observed 2026-05-13T06:58:50.529571Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation edcf2aa5-05fe-47c2-95b5-3d2a3aea1c34 · outbound
This paper cites an unresolved cited work.
Defeating Prompt Injections by Design Unresolved cited work
Reference 14
- Resolution
- unresolved
- raw_fallback, observed 2026-05-13T06:58:50.534348Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation e480ad3e-b918-421b-b8ef-1b9f0e60a2cd · outbound
This paper cites <stdin>", line 2, in <module> info = query_ai_assistant( ^^^^^^^^^^^^^^^^^^^^^^^^^^.
Defeating Prompt Injections by Design <stdin>", line 2, in <module> info = query_ai_assistant( ^^^^^^^^^^^^^^^^^^^^^^^^^^
Reference 15
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-05-13T06:58:50.539008Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation f8f219ab-7f72-4e65-a922-fb7cb0235431 · outbound
This paper cites an unresolved cited work.
Defeating Prompt Injections by Design Unresolved cited work
Reference 16
- Resolution
- unresolved
- raw_fallback, observed 2026-05-13T06:58:50.542986Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 0fa77f84-7482-4a8f-99a5-c7f8435021da · outbound
This paper cites an unresolved cited work.
Defeating Prompt Injections by Design Unresolved cited work
Reference 17
- Resolution
- unresolved
- raw_fallback, observed 2026-05-13T06:58:50.546804Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 4068f28e-abda-4691-b141-8f1336fff6f8 · outbound
This paper cites an unresolved cited work.
Defeating Prompt Injections by Design Unresolved cited work
Reference 18
- Resolution
- unresolved
- raw_fallback, observed 2026-05-13T06:58:50.550808Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation ecbf7eec-bf71-4f58-bf2d-b1af11dcaab2 · outbound
This paper cites <stdin>", line 7, in <module> info = query_ai_assistant( ^^^^^^^^^^^^^^^^^^^^^^^^^^.
Defeating Prompt Injections by Design <stdin>", line 7, in <module> info = query_ai_assistant( ^^^^^^^^^^^^^^^^^^^^^^^^^^
Reference 19
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-05-13T06:58:50.554586Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 050743f6-89b9-4c7a-90d1-0085a56b62e8 · outbound
This paper cites an unresolved cited work.
Defeating Prompt Injections by Design Unresolved cited work
Reference 20
- Resolution
- unresolved
- raw_fallback, observed 2026-05-13T06:58:50.558106Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation e4c367b1-e5b5-45ef-b979-89b85a6b4844 · outbound
This paper cites an unresolved cited work.
Defeating Prompt Injections by Design Unresolved cited work
Reference 21
- Resolution
- unresolved
- raw_fallback, observed 2026-05-13T06:58:50.561107Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 9ac6e7ea-3f28-4d5c-9f7a-7b87f24e1954 · outbound
This paper cites "" + str([{.
Defeating Prompt Injections by Design "" + str([{
Reference 22
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-05-13T06:58:50.564485Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 20a328b4-db7a-42ae-93ba-bb7290ef6051 · outbound
This paper cites an unresolved cited work.
Defeating Prompt Injections by Design Unresolved cited work
Reference 23
- Resolution
- unresolved
- raw_fallback, observed 2026-05-13T06:58:50.567829Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 189f59ad-3ac1-407b-9b18-7855d6793f11 · outbound
This paper cites an unresolved cited work.
Defeating Prompt Injections by Design Unresolved cited work
Reference 24
- Resolution
- unresolved
- raw_fallback, observed 2026-05-13T06:58:50.570576Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 21132e11-938c-4cd1-97b0-b3005ed693ea · outbound
This paper cites an unresolved cited work.
Defeating Prompt Injections by Design Unresolved cited work
Reference 25
- Resolution
- unresolved
- raw_fallback, observed 2026-05-13T06:58:50.573304Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 8c598c99-0654-486a-962c-49085fa21603 · outbound
This paper cites <stdin>", line 1, in <module> info = query_ai_assistant( ^^^^^^^^^^^^^^^^^^^^^^^^^^.
Defeating Prompt Injections by Design <stdin>", line 1, in <module> info = query_ai_assistant( ^^^^^^^^^^^^^^^^^^^^^^^^^^
Reference 26
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-05-13T06:58:50.576988Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 81c1e420-adda-4148-a2c3-97d3dd3f527a · outbound
This paper cites an unresolved cited work.
Defeating Prompt Injections by Design Unresolved cited work
Reference 27
- Resolution
- unresolved
- raw_fallback, observed 2026-05-13T06:58:50.579663Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 8e43694c-eaa4-4002-bfa9-ccaabe95bf1e · outbound
This paper cites an unresolved cited work.
Defeating Prompt Injections by Design Unresolved cited work
Reference 28
- Resolution
- unresolved
- raw_fallback, observed 2026-05-13T06:58:50.582983Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 7c24808b-6b60-465d-ae97-003a9d73c0f2 · outbound
This paper cites "" + ^^^^^^^^^^^^^^^^^^^^^^^^ str([{ ^^^^^^^^^^.
Defeating Prompt Injections by Design "" + ^^^^^^^^^^^^^^^^^^^^^^^^ str([{ ^^^^^^^^^^
Reference 29
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-05-13T06:58:50.586549Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation c2df7c0b-a285-4570-8cc1-e955a2589d21 · outbound
This paper cites an unresolved cited work.
Defeating Prompt Injections by Design Unresolved cited work
Reference 30
- Resolution
- unresolved
- raw_fallback, observed 2026-05-13T06:58:50.590151Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation c26eb560-e21e-46a0-a98c-e5b77f349c4b · outbound
This paper cites an unresolved cited work.
Defeating Prompt Injections by Design Unresolved cited work
Reference 31
- Resolution
- unresolved
- raw_fallback, observed 2026-05-13T06:58:50.594209Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation e7b793b3-1364-49ba-86da-f11f3656bfc8 · outbound
This paper cites <stdin>", line 10, in <module> info = query_ai_assistant( ^^^^^^^^^^^^^^^^^^^^^^^^^^.
Defeating Prompt Injections by Design <stdin>", line 10, in <module> info = query_ai_assistant( ^^^^^^^^^^^^^^^^^^^^^^^^^^
Reference 32
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-05-13T06:58:50.598060Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation d3912918-6ca2-4467-9342-04d5ff230daf · outbound
This paper cites an unresolved cited work.
Defeating Prompt Injections by Design Unresolved cited work
Reference 33
- Resolution
- unresolved
- raw_fallback, observed 2026-05-13T06:58:50.601920Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation e8141add-03bd-496d-a6d8-112bc12aecf1 · outbound
This paper cites an unresolved cited work.
Defeating Prompt Injections by Design Unresolved cited work
Reference 34
- Resolution
- unresolved
- raw_fallback, observed 2026-05-13T06:58:50.605136Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 04d3377f-3520-4863-b425-6aabfa03fd76 · outbound
This paper cites an unresolved cited work.
Defeating Prompt Injections by Design Unresolved cited work
Reference 35
- Resolution
- unresolved
- raw_fallback, observed 2026-05-13T06:58:50.608678Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 6416d9cf-e9c1-4016-828c-400ce23b8d94 · outbound
This paper cites <stdin>", line 15, in <module> info = query_ai_assistant( ^^^^^^^^^^^^^^^^^^^^^^^^^^.
Defeating Prompt Injections by Design <stdin>", line 15, in <module> info = query_ai_assistant( ^^^^^^^^^^^^^^^^^^^^^^^^^^
Reference 36
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-05-13T06:58:50.612119Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 359d75eb-a724-4ef3-9134-f7241a5d3097 · outbound
This paper cites an unresolved cited work.
Defeating Prompt Injections by Design Unresolved cited work
Reference 37
- Resolution
- unresolved
- raw_fallback, observed 2026-05-13T06:58:50.614921Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation b20985a1-7f3b-476d-9d58-372377ddec50 · outbound
This paper cites an unresolved cited work.
Defeating Prompt Injections by Design Unresolved cited work
Reference 38
- Resolution
- unresolved
- raw_fallback, observed 2026-05-13T06:58:50.618375Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 93fe1d4c-ed14-4853-87e7-9399f2a5f70b · outbound
This paper cites an unresolved cited work.
Defeating Prompt Injections by Design Unresolved cited work
Reference 39
- Resolution
- unresolved
- raw_fallback, observed 2026-05-13T06:58:50.621341Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 4d618217-dd4a-4b3f-ae11-0fab12050310 · outbound
This paper cites welcome".
Reference 40
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-05-13T06:58:50.624134Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation b14efa80-c180-4697-9886-6277e6ac4261 · outbound
This paper cites an unresolved cited work.
Defeating Prompt Injections by Design Unresolved cited work
Reference 41
- Resolution
- unresolved
- raw_fallback, observed 2026-05-13T06:58:50.626826Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 6ddc342a-d6e9-4c0b-9ac7-97f993d109f0 · outbound
This paper cites an unresolved cited work.
Defeating Prompt Injections by Design Unresolved cited work
Reference 42
- Resolution
- unresolved
- raw_fallback, observed 2026-05-13T06:58:50.630147Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 2a7d0c32-331e-4cf0-b966-62e84feddb59 · outbound
This paper cites an unresolved cited work.
Defeating Prompt Injections by Design Unresolved cited work
Reference 43
- Resolution
- unresolved
- raw_fallback, observed 2026-05-13T06:58:50.633008Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation fd8102ff-db7d-43d2-9460-a996412e70c6 · outbound
This paper cites <stdin>", line 13, in <module> info = query_ai_assistant( ^^^^^^^^^^^^^^^^^^^^^^^^^^.
Defeating Prompt Injections by Design <stdin>", line 13, in <module> info = query_ai_assistant( ^^^^^^^^^^^^^^^^^^^^^^^^^^
Reference 44
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-05-13T06:58:50.636918Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation bf0bcf6f-091b-4a95-92d7-5f8943232587 · outbound
This paper cites an unresolved cited work.
Defeating Prompt Injections by Design Unresolved cited work
Reference 45
- Resolution
- unresolved
- raw_fallback, observed 2026-05-13T06:58:50.639995Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 0ab50ffd-8062-4afd-9fad-4c46203d9490 · outbound
This paper cites an unresolved cited work.
Defeating Prompt Injections by Design Unresolved cited work
Reference 46
- Resolution
- unresolved
- raw_fallback, observed 2026-05-13T06:58:50.642905Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 902461a2-1617-4738-bd78-178c65c9f2ba · outbound
This paper cites an unresolved cited work.
Defeating Prompt Injections by Design Unresolved cited work
Reference 47
- Resolution
- unresolved
- raw_fallback, observed 2026-05-13T06:58:50.646020Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 322695f2-70d3-4b55-b0c5-fddedac71b07 · outbound
This paper cites an unresolved cited work.
Defeating Prompt Injections by Design Unresolved cited work
Reference 48
- Resolution
- unresolved
- raw_fallback, observed 2026-05-13T06:58:50.649059Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 6b9ce23e-ee00-413c-af16-4df7a8be2259 · outbound
This paper cites <stdin>", line 9, in <module> info = query_ai_assistant( ^^^^^^^^^^^^^^^^^^^^^^^^^^.
Defeating Prompt Injections by Design <stdin>", line 9, in <module> info = query_ai_assistant( ^^^^^^^^^^^^^^^^^^^^^^^^^^
Reference 49
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-05-13T06:58:50.653148Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation cd562f0a-2c53-442c-ae63-9683cded1975 · outbound
This paper cites an unresolved cited work.
Defeating Prompt Injections by Design Unresolved cited work
Reference 50
- Resolution
- unresolved
- raw_fallback, observed 2026-05-13T06:58:50.656481Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 17e2bd0e-2ffc-445e-b955-c81a1e46556e · outbound
This paper cites an unresolved cited work.
Defeating Prompt Injections by Design Unresolved cited work
Reference 51
- Resolution
- parse uncertain
- raw_fallback, observed 2026-05-13T06:58:50.659929Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation ec348766-71da-40c2-b928-a25ac5935fab · outbound
This paper cites "" + str(formatted_messages) +.
Defeating Prompt Injections by Design "" + str(formatted_messages) +
Reference 52
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-05-13T06:58:50.664147Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 035f3a59-d3aa-4104-bd37-611b3bc18fda · outbound
This paper cites an unresolved cited work.
Defeating Prompt Injections by Design Unresolved cited work
Reference 53
- Resolution
- unresolved
- raw_fallback, observed 2026-05-13T06:58:50.667420Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 8b6c1f15-d599-4c4b-af2c-20441ac93507 · outbound
This paper cites an unresolved cited work.
Defeating Prompt Injections by Design Unresolved cited work
Reference 54
- Resolution
- unresolved
- raw_fallback, observed 2026-05-13T06:58:50.671103Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation edf48133-0278-48cf-9f57-56765f078a6b · outbound
This paper cites an unresolved cited work.
Defeating Prompt Injections by Design Unresolved cited work
Reference 55
- Resolution
- unresolved
- raw_fallback, observed 2026-05-13T06:58:50.674363Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 8707ac3e-0898-4ed6-89c5-fdeda7d3e13d · outbound
This paper cites an unresolved cited work.
Defeating Prompt Injections by Design Unresolved cited work
Reference 56
- Resolution
- unresolved
- raw_fallback, observed 2026-05-13T06:58:50.678924Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 98e8a683-0ac0-4f65-a17d-3a007595fb0c · outbound
This paper cites 2024-05-15.
Defeating Prompt Injections by Design 2024-05-15
Reference 57
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-05-13T06:58:50.682840Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 29b68c42-61e4-4411-a872-30ba0d3a2993 · outbound
This paper cites an unresolved cited work.
Defeating Prompt Injections by Design Unresolved cited work
Reference 58
- Resolution
- unresolved
- raw_fallback, observed 2026-05-13T06:58:50.685877Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation fe3a470c-2354-4b6c-b752-9d4b53bdeb10 · outbound
This paper cites an unresolved cited work.
Defeating Prompt Injections by Design Unresolved cited work
Reference 59
- Resolution
- parse uncertain
- raw_fallback, observed 2026-05-13T06:58:50.689944Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 03dbcd75-b945-4ae4-8f87-0cf003cd2262 · outbound
This paper cites 2024-05-15.
Defeating Prompt Injections by Design 2024-05-15
Reference 60
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-05-13T06:58:50.695106Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 725f1c17-fbe5-4356-be66-760abae92637 · outbound
This paper cites an unresolved cited work.
Defeating Prompt Injections by Design Unresolved cited work
Reference 61
- Resolution
- unresolved
- raw_fallback, observed 2026-05-13T06:58:50.698986Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 3dd71021-88d7-41af-9172-106c715ae9fb · outbound
This paper cites an unresolved cited work.
Defeating Prompt Injections by Design Unresolved cited work
Reference 62
- Resolution
- unresolved
- raw_fallback, observed 2026-05-13T06:58:50.702132Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 6e68539c-09fe-497f-a9df-f4c06790d559 · outbound
This paper cites an unresolved cited work.
Defeating Prompt Injections by Design Unresolved cited work
Reference 63
- Resolution
- unresolved
- raw_fallback, observed 2026-05-13T06:58:50.705124Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 4bb9cd5a-9227-48fd-8bf2-a6e47e679494 · outbound
This paper cites HH:MM" representing how many hours and minutes you have until the lunch.↩→ User Running the code gave the following error: Traceback (most recent call last): File.
Defeating Prompt Injections by Design HH:MM" representing how many hours and minutes you have until the lunch.↩→ User Running the code gave the following error: Traceback (most recent call last): File
Reference 64
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-05-13T06:58:50.709830Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 4164650c-b405-4f78-988a-c527d466455e · outbound
This paper cites an unresolved cited work.
Defeating Prompt Injections by Design Unresolved cited work
Reference 65
- Resolution
- unresolved
- raw_fallback, observed 2026-05-13T06:58:50.720873Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 56bdfe28-9d2b-49b1-9bfd-984eff340cb1 · outbound
This paper cites an unresolved cited work.
Defeating Prompt Injections by Design Unresolved cited work
Reference 66
- Resolution
- unresolved
- raw_fallback, observed 2026-05-13T06:58:50.724284Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 37252567-905e-4b0f-989b-2cfc39754548 · outbound
This paper cites Please analyze this landlord notice and extract the new rent amount, effective date, and IBAN for payments. Here 's the notice:\n\n{file_content}.
Defeating Prompt Injections by Design Please analyze this landlord notice and extract the new rent amount, effective date, and IBAN for payments. Here 's the notice:\n\n{file_content}
Reference 67
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-05-13T06:58:50.727988Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 9e75cb59-15c0-4803-8673-941656b7d97b · outbound
This paper cites an unresolved cited work.
Defeating Prompt Injections by Design Unresolved cited work
Reference 68
- Resolution
- unresolved
- raw_fallback, observed 2026-05-13T06:58:50.731471Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 0c41aedf-5e06-442c-a855-fd77197cb701 · outbound
This paper cites an unresolved cited work.
Defeating Prompt Injections by Design Unresolved cited work
Reference 69
- Resolution
- unresolved
- raw_fallback, observed 2026-05-13T06:58:50.735112Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 651f8ff1-3129-4148-922d-558ba0dd3c65 · outbound
This paper cites an unresolved cited work.
Defeating Prompt Injections by Design Unresolved cited work
Reference 70
- Resolution
- unresolved
- raw_fallback, observed 2026-05-13T06:58:50.738676Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 4fd5e920-53dc-45c6-8a8a-04dfcd2f2466 · outbound
This paper cites an unresolved cited work.
Defeating Prompt Injections by Design Unresolved cited work
Reference 71
- Resolution
- unresolved
- raw_fallback, observed 2026-05-13T06:58:50.742759Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 992243fc-1977-4c8e-8200-7ef5d44aea2d · outbound
This paper cites <stdin>", line 11, in <module> try: ^^^^ rent_info = query_ai_assistant( ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ f.
Defeating Prompt Injections by Design <stdin>", line 11, in <module> try: ^^^^ rent_info = query_ai_assistant( ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ f
Reference 72
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-05-13T06:58:50.746980Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 50e49bc7-2097-46bd-9714-792e6557305c · outbound
This paper cites an unresolved cited work.
Defeating Prompt Injections by Design Unresolved cited work
Reference 73
- Resolution
- unresolved
- raw_fallback, observed 2026-05-13T06:58:50.750147Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 13650eb7-c602-4689-b639-868d17ce6eea · outbound
This paper cites an unresolved cited work.
Defeating Prompt Injections by Design Unresolved cited work
Reference 74
- Resolution
- unresolved
- raw_fallback, observed 2026-05-13T06:58:50.754191Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation fa6aa388-a863-479c-beee-a827b184b28a · outbound
This paper cites an unresolved cited work.
Defeating Prompt Injections by Design Unresolved cited work
Reference 75
- Resolution
- unresolved
- raw_fallback, observed 2026-05-13T06:58:50.757915Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 72843747-faaf-4056-b556-0438e75258ba · outbound
This paper cites <stdin>", line 2, in <module> rent_info = query_ai_assistant( ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ f.
Defeating Prompt Injections by Design <stdin>", line 2, in <module> rent_info = query_ai_assistant( ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ f
Reference 76
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-05-13T06:58:50.762804Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation fc19fea0-2431-4c00-9976-35936d503bd2 · outbound
This paper cites No scheduled rent payment found.
Defeating Prompt Injections by Design No scheduled rent payment found
Reference 79
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-05-13T06:58:50.766540Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 1352f3ae-0995-4e41-b38d-8707f93b1895 · outbound
This paper cites No scheduled rent payment found.
Defeating Prompt Injections by Design No scheduled rent payment found
Reference 82
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-05-13T06:58:50.771760Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation cea6f462-3531-4a75-addb-d829156ea873 · outbound
This paper cites an unresolved cited work.
Defeating Prompt Injections by Design Unresolved cited work
Reference 83
- Resolution
- unresolved
- raw_fallback, observed 2026-05-13T06:58:50.775197Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation a901ad6c-9c3e-46e1-9f0d-01b597dd9dd1 · outbound
This paper cites an unresolved cited work.
Defeating Prompt Injections by Design Unresolved cited work
Reference 84
- Resolution
- unresolved
- raw_fallback, observed 2026-05-13T06:58:50.778204Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation e02c1a66-211e-40fa-bbc9-757ee01ce000 · outbound
This paper cites Updated rent payment.
Defeating Prompt Injections by Design Updated rent payment
Reference 85
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-05-13T06:58:50.781524Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 99962e79-61cb-4b2c-815c-0d3ffb418ba2 · outbound
This paper cites an unresolved cited work.
Defeating Prompt Injections by Design Unresolved cited work
Reference 86
- Resolution
- unresolved
- raw_fallback, observed 2026-05-13T06:58:50.784807Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation bfdc3a26-28df-4633-8436-9c10cd8da334 · outbound
This paper cites an unresolved cited work.
Defeating Prompt Injections by Design Unresolved cited work
Reference 87
- Resolution
- unresolved
- raw_fallback, observed 2026-05-13T06:58:50.788179Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 4dc1cf6a-ebe1-4e45-bd84-a3eb4be2199d · outbound
This paper cites <stdin>", line 12, in <module> rent_info = query_ai_assistant( ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ f.
Defeating Prompt Injections by Design <stdin>", line 12, in <module> rent_info = query_ai_assistant( ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ f
Reference 88
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-05-13T06:58:50.792682Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation a0135233-ad1b-4d56-b464-d3296de620f6 · outbound
This paper cites an unresolved cited work.
Defeating Prompt Injections by Design Unresolved cited work
Reference 89
- Resolution
- unresolved
- raw_fallback, observed 2026-05-13T06:58:50.795828Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation bbb7fea2-12ee-4439-9bf6-aa6139d57a67 · outbound
This paper cites an unresolved cited work.
Defeating Prompt Injections by Design Unresolved cited work
Reference 90
- Resolution
- unresolved
- raw_fallback, observed 2026-05-13T06:58:50.799254Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 74551945-8046-42f5-8dae-c812fd1685da · outbound
This paper cites File content.
Defeating Prompt Injections by Design File content
Reference 91
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-05-13T06:58:50.802878Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 5d35375b-45ad-4d16-962f-80bcfbd2ab55 · outbound
This paper cites an unresolved cited work.
Defeating Prompt Injections by Design Unresolved cited work
Reference 92
- Resolution
- unresolved
- raw_fallback, observed 2026-05-13T06:58:50.806126Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 48a7b81c-fd35-4ea7-98ce-54f5187bfbdf · outbound
This paper cites an unresolved cited work.
Defeating Prompt Injections by Design Unresolved cited work
Reference 93
- Resolution
- unresolved
- raw_fallback, observed 2026-05-13T06:58:50.809589Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation f08db649-f36a-4478-9644-391b0394d9eb · outbound
This paper cites "", RentNoticeInfo ) print(f.
Defeating Prompt Injections by Design "", RentNoticeInfo ) print(f
Reference 94
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-05-13T06:58:50.812272Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation c293c8ea-53d5-45a7-a845-649399293a99 · outbound
This paper cites output_schema=.
Defeating Prompt Injections by Design output_schema=
Reference 95
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-05-13T06:58:50.815238Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 4570ee93-6adf-4015-8f08-0498e2b2a50a · outbound
This paper cites Hawaii") if not hawaii_files: raise ValueError(.
Defeating Prompt Injections by Design Hawaii") if not hawaii_files: raise ValueError(
Reference 96
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-05-13T06:58:50.818422Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 503f0113-20c7-4703-b837-c4d4f7875187 · outbound
This paper cites an unresolved cited work.
Defeating Prompt Injections by Design Unresolved cited work
Reference 97
- Resolution
- unresolved
- raw_fallback, observed 2026-05-13T06:58:50.821702Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation b91a49be-5478-4379-8cb8-e8d9b0446b3e · outbound
This paper cites an unresolved cited work.
Defeating Prompt Injections by Design Unresolved cited work
Reference 98
- Resolution
- unresolved
- raw_fallback, observed 2026-05-13T06:58:50.825033Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation a28d8497-ee70-47df-91d0-a44b71279e20 · outbound
This paper cites an unresolved cited work.
Defeating Prompt Injections by Design Unresolved cited work
Reference 99
- Resolution
- unresolved
- raw_fallback, observed 2026-05-13T06:58:50.828865Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation d47342de-bf8d-4791-bce8-57502a98d2a3 · outbound
This paper cites an unresolved cited work.
Defeating Prompt Injections by Design Unresolved cited work
Reference 100
- Resolution
- unresolved
- raw_fallback, observed 2026-05-13T06:58:50.832479Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation ebcca425-bb0b-4023-9ad4-ed36456fc195 · outbound
This paper cites Hawaii") - content.
Defeating Prompt Injections by Design Hawaii") - content
Reference 101
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-05-13T06:58:50.836076Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 81682d84-4fcc-4ff3-abb9-9bf9366172e4 · outbound
This paper cites an unresolved cited work.
Defeating Prompt Injections by Design Unresolved cited work
Reference 102
- Resolution
- unresolved
- raw_fallback, observed 2026-05-13T06:58:50.840385Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 71d0e18b-65e5-4b39-bfae-8c30d0e9234a · outbound
This paper cites an unresolved cited work.
Defeating Prompt Injections by Design Unresolved cited work
Reference 103
- Resolution
- unresolved
- raw_fallback, observed 2026-05-13T06:58:50.844201Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 3e2530f1-a179-4a0b-811b-bb660f3b13a4 · outbound
This paper cites an unresolved cited work.
Defeating Prompt Injections by Design Unresolved cited work
Reference 104
- Resolution
- unresolved
- raw_fallback, observed 2026-05-13T06:58:50.848206Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation b487464f-7149-4f94-b655-b65590725d40 · outbound
This paper cites an unresolved cited work.
Defeating Prompt Injections by Design Unresolved cited work
Reference 105
- Resolution
- unresolved
- raw_fallback, observed 2026-05-13T06:58:50.851373Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 582ddda8-4aa4-4e5f-89e7-bb874a34ce93 · outbound
This paper cites output_schema=.
Defeating Prompt Injections by Design output_schema=
Reference 106
- Resolution
- malformed identifier
- raw_fallback, observed 2026-05-13T06:58:50.854850Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 19ac485e-3818-4720-b006-f8723651a1de · outbound
This paper cites an unresolved cited work.
Defeating Prompt Injections by Design Unresolved cited work
Reference 107
- Resolution
- unresolved
- raw_fallback, observed 2026-05-13T06:58:50.858491Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 3e01c425-4b8a-450b-ac9d-9e5abf2f8169 · outbound
This paper cites an unresolved cited work.
Defeating Prompt Injections by Design Unresolved cited work
Reference 108
- Resolution
- unresolved
- raw_fallback, observed 2026-05-13T06:58:50.861594Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation b2a11d57-1ad1-4382-a0d4-9023d2498b43 · outbound
This paper cites an unresolved cited work.
Defeating Prompt Injections by Design Unresolved cited work
Reference 109
- Resolution
- unresolved
- raw_fallback, observed 2026-05-13T06:58:50.865098Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation b1fcc2a6-2815-4807-bff3-2434a96d1631 · outbound
This paper cites an unresolved cited work.
Defeating Prompt Injections by Design Unresolved cited work
Reference 110
- Resolution
- unresolved
- raw_fallback, observed 2026-05-13T06:58:50.868721Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Pith citing papers
Observation 91c2998f-532b-45d7-9685-f5524bce044e · inbound
Progent: Securing AI Agents with Privilege Control cites this paper.
Progent: Securing AI Agents with Privilege Control Defeating Prompt Injections by Design
Reference 16
- Resolution
- verified exact
- local_arxiv, observed 2026-05-22T21:12:08.466892Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation c323418f-7d17-47e6-839f-ae90a10ca63b · inbound
Prompt Injection Attack to Tool Selection in LLM Agents cites this paper.
Prompt Injection Attack to Tool Selection in LLM Agents Defeating Prompt Injections by Design
Reference 72
- Resolution
- verified exact
- local_arxiv, observed 2026-05-16T17:08:29.060244Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 24f7860b-2c1c-40a0-93a5-927df4a66a35 · inbound
ACE: A Security Architecture for LLM-Integrated App Systems cites this paper.
ACE: A Security Architecture for LLM-Integrated App Systems Defeating Prompt Injections by Design
Reference 32
- Resolution
- verified exact
- local_arxiv, observed 2026-05-22T18:06:54.293797Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation e8a19c33-5ccc-477f-8ba9-f7ef4a3fd665 · inbound
SafeSearch: Automated Red-Teaming of LLM-Based Search Agents cites this paper.
SafeSearch: Automated Red-Teaming of LLM-Based Search Agents Defeating Prompt Injections by Design
Reference 8
- Resolution
- unresolved
- no resolver link, observed 2026-08-04T14:43:48.898809Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation b7df83c0-c237-440d-9f63-1d99dbb449ff · inbound
Agentic AI Security: Threats, Defenses, Evaluation, and Open Challenges cites this paper.
Agentic AI Security: Threats, Defenses, Evaluation, and Open Challenges Defeating Prompt Injections by Design
Reference 185
- Resolution
- verified exact
- local_arxiv, observed 2026-05-18T03:42:22.211468Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation fc959d86-7914-4a3f-92e4-a961064ba38b · inbound
Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels cites this paper.
Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels Defeating Prompt Injections by Design
Reference 16
- Resolution
- unresolved
- no resolver link, observed 2026-08-04T07:06:38.002885Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 1003d660-a7cb-41e6-b9cd-1e9eab33ecb4 · inbound
CaMeLs Can Use Computers Too: System-level Security for Computer Use Agents cites this paper.
CaMeLs Can Use Computers Too: System-level Security for Computer Use Agents Defeating Prompt Injections by Design
Reference 4
- Resolution
- unresolved
- no resolver link, observed 2026-08-03T10:32:31.637195Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation a5f08203-a2a9-4277-a0ac-b273618e6cf7 · inbound
AgentDyn: Are Your Agent Security Defenses Deployable in Real-World Dynamic Environments? cites this paper.
AgentDyn: Are Your Agent Security Defenses Deployable in Real-World Dynamic Environments? Defeating Prompt Injections by Design
Reference 2
- Resolution
- verified exact
- local_arxiv, observed 2026-05-16T08:17:36.449313Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 21dfb839-4a88-4a5a-bc85-a02392bdec18 · inbound
Formal Policy Enforcement for Real-World Agentic Systems cites this paper.
Formal Policy Enforcement for Real-World Agentic Systems Defeating Prompt Injections by Design
Reference 21
- Resolution
- verified exact
- local_arxiv, observed 2026-05-15T21:10:18.562794Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation d48a0961-6233-420b-af7c-4779db3b2a51 · inbound
The LLMbda Calculus: AI Agents, Conversations, and Information Flow cites this paper.
The LLMbda Calculus: AI Agents, Conversations, and Information Flow Defeating Prompt Injections by Design
Reference 9
- Resolution
- unresolved
- no resolver link, observed 2026-08-02T21:31:19.385929Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 4b4b557f-a79d-447e-b60f-2027c48888c5 · inbound
Tracking Capabilities for Safer Agents cites this paper.
Tracking Capabilities for Safer Agents Defeating Prompt Injections by Design
Reference 27
- Resolution
- verified exact
- local_arxiv, observed 2026-05-15T18:36:29.241280Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 16fad904-e3a8-48d2-bf3f-fe4ae04908df · inbound
AttriGuard: Defeating Indirect Prompt Injection in LLM Agents via Causal Attribution of Tool Invocations cites this paper.
AttriGuard: Defeating Indirect Prompt Injection in LLM Agents via Causal Attribution of Tool Invocations Defeating Prompt Injections by Design
Reference 11
- Resolution
- unresolved
- no resolver link, observed 2026-07-14T23:21:58.911407Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 83d84014-684b-4545-af18-56c67849cf92 · inbound
Security Considerations for Artificial Intelligence Agents cites this paper.
Security Considerations for Artificial Intelligence Agents Defeating Prompt Injections by Design
Reference 9
- Resolution
- verified exact
- local_arxiv, observed 2026-05-15T12:40:00.283828Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 40ddf811-1ace-4073-827f-239940e1f6df · inbound
Evaluating Privilege Usage of Agents with Real-World Tools cites this paper.
Evaluating Privilege Usage of Agents with Real-World Tools Defeating Prompt Injections by Design
Reference 5
- Resolution
- verified exact
- local_arxiv, observed 2026-05-14T22:18:04.353353Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 95245790-8d92-4da7-94c6-9d41aad2cd29 · inbound
AgentWatcher: A Rule-based Prompt Injection Monitor cites this paper.
AgentWatcher: A Rule-based Prompt Injection Monitor Defeating Prompt Injections by Design
Reference 40
- Resolution
- unresolved
- no resolver link, observed 2026-08-02T17:00:40.844082Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 7cab693d-ecd1-4daf-87f8-8e66588aee0c · inbound
KAIJU: An Executive Kernel for Intent-Gated Execution of LLM Agents cites this paper.
KAIJU: An Executive Kernel for Intent-Gated Execution of LLM Agents Defeating Prompt Injections by Design
Reference 5
- Resolution
- metadata mismatch
- arxiv_id, observed 2026-05-13T06:58:51.233859Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 73a97a9b-7c39-4a3b-aa7d-06d16f1b5212 · inbound
Causality Laundering: Denial-Feedback Leakage in Tool-Calling LLM Agents cites this paper.
Causality Laundering: Denial-Feedback Leakage in Tool-Calling LLM Agents Defeating Prompt Injections by Design
Reference 8
- Resolution
- verified exact
- local_arxiv, observed 2026-05-13T17:23:02.748549Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation da323a05-b8ff-4536-86a9-cf7e7f2aa305 · inbound
TRUSTDESC: Preventing Tool Poisoning in LLM Applications via Trusted Description Generation cites this paper.
TRUSTDESC: Preventing Tool Poisoning in LLM Applications via Trusted Description Generation Defeating Prompt Injections by Design
Reference 31
- Resolution
- verified exact
- arxiv_id, observed 2026-05-13T06:58:51.233859Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation faa1a609-d3f9-45a0-aea4-7a1cbaa91258 · inbound
LogAct: Enabling Agentic Reliability via Shared Logs cites this paper.
LogAct: Enabling Agentic Reliability via Shared Logs Defeating Prompt Injections by Design
Reference 13
- Resolution
- verified exact
- arxiv_id, observed 2026-05-13T06:58:51.233859Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 7df91b75-ab65-4591-8a5e-c5cb10809eb1 · inbound
Semantic Intent Fragmentation: A Single-Shot Compositional Attack on Multi-Agent AI Pipelines cites this paper.
Semantic Intent Fragmentation: A Single-Shot Compositional Attack on Multi-Agent AI Pipelines Defeating Prompt Injections by Design
Reference 12
- Resolution
- verified exact
- arxiv_id, observed 2026-05-13T06:58:51.233859Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 61a5a89a-62e7-4995-a9ee-03e06fe59564 · inbound
ClawGuard: A Runtime Security Framework for Tool-Augmented LLM Agents Against Indirect Prompt Injection cites this paper.
ClawGuard: A Runtime Security Framework for Tool-Augmented LLM Agents Against Indirect Prompt Injection Defeating Prompt Injections by Design
Reference 9
- Resolution
- verified exact
- arxiv_id, observed 2026-05-13T06:58:51.233859Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation c2c0ebb2-4a01-47d2-b1ee-1e2e5b54d140 · inbound
ClawGuard: A Runtime Security Framework for Tool-Augmented LLM Agents Against Indirect Prompt Injection cites this paper.
ClawGuard: A Runtime Security Framework for Tool-Augmented LLM Agents Against Indirect Prompt Injection Defeating Prompt Injections by Design
Reference 9
- Resolution
- verified exact
- arxiv_id, observed 2026-05-13T06:58:51.233859Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation b1d85e4f-ae47-4d44-a7ae-71cdc24d4ebc · inbound
Don't Make Models Guess Security and Safety: Symbolic Guardrails for Domain-Specific AI Agents cites this paper.
Don't Make Models Guess Security and Safety: Symbolic Guardrails for Domain-Specific AI Agents Defeating Prompt Injections by Design
Reference 17
- Resolution
- verified exact
- arxiv_id, observed 2026-05-13T06:58:51.233859Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 8e8db37a-5b38-4d11-86ad-95bf7df33981 · inbound
CapSeal: Capability-Sealed Secret Mediation for Secure Agent Execution cites this paper.
CapSeal: Capability-Sealed Secret Mediation for Secure Agent Execution Defeating Prompt Injections by Design
Reference 23
- Resolution
- verified exact
- arxiv_id, observed 2026-05-13T06:58:51.233859Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 2f49fb74-6c1a-4231-829a-5d605d171708 · inbound
AgenTEE: Confidential LLM Agent Execution on Edge Devices cites this paper.
AgenTEE: Confidential LLM Agent Execution on Edge Devices Defeating Prompt Injections by Design
Reference 15
- Resolution
- verified exact
- arxiv_id, observed 2026-05-13T06:58:51.233859Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation c0a4e646-a4f9-4fef-a2b7-5b960b6898b8 · inbound
Owner-Harm: A Missing Threat Model for AI Agent Safety cites this paper.
Owner-Harm: A Missing Threat Model for AI Agent Safety Defeating Prompt Injections by Design
Reference 4
- Resolution
- verified exact
- arxiv_id, observed 2026-05-13T06:58:51.233859Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation d2d8fdeb-5ab3-46fb-94ab-d3765902ceeb · inbound
An AI Agent Execution Environment to Safeguard User Data cites this paper.
An AI Agent Execution Environment to Safeguard User Data Defeating Prompt Injections by Design
Reference 13
- Resolution
- verified exact
- arxiv_id, observed 2026-05-13T06:58:51.233859Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation f1f14165-85e0-4f9b-8a09-b75b52e0f5fe · inbound
Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents cites this paper.
Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents Defeating Prompt Injections by Design
Reference 14
- Resolution
- verified exact
- arxiv_id, observed 2026-05-13T06:58:51.233859Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 37400b07-0971-4055-b661-c7da34b23ab8 · inbound
Semia: Auditing Agent Skills via Constraint-Guided Representation Synthesis cites this paper.
Semia: Auditing Agent Skills via Constraint-Guided Representation Synthesis Defeating Prompt Injections by Design
Reference 6
- Resolution
- verified exact
- arxiv_id, observed 2026-05-13T06:58:51.233859Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation b228fcd1-cb3c-40e8-bd41-b1159f5f735d · inbound
Trojan Hippo: Weaponizing Agent Memory for Data Exfiltration cites this paper.
Trojan Hippo: Weaponizing Agent Memory for Data Exfiltration Defeating Prompt Injections by Design
Reference 16
- Resolution
- verified exact
- arxiv_id, observed 2026-05-13T06:58:51.233859Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 594bac72-42b0-4be8-b0fd-3349fad95b93 · inbound
Trojan Hippo: Weaponizing Agent Memory for Data Exfiltration cites this paper.
Trojan Hippo: Weaponizing Agent Memory for Data Exfiltration Defeating Prompt Injections by Design
Reference 16
- Resolution
- verified exact
- local_arxiv, observed 2026-05-19T17:32:41.575594Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 6d06679b-454e-49fa-9d94-bc5c50fe676c · inbound
Rewriting the Response Path: Silent Tampering and Provider-Signed Defense in BYOK LLM Agents cites this paper.
Rewriting the Response Path: Silent Tampering and Provider-Signed Defense in BYOK LLM Agents Defeating Prompt Injections by Design
Reference 75
- Resolution
- verified exact
- arxiv_id, observed 2026-05-13T06:58:51.233859Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 86d63f80-7af6-4a64-8ad5-6b82be262303 · inbound
Rewriting the Response Path: Silent Tampering and Provider-Signed Defense in BYOK LLM Agents cites this paper.
Rewriting the Response Path: Silent Tampering and Provider-Signed Defense in BYOK LLM Agents Defeating Prompt Injections by Design
Reference 75
- Resolution
- unresolved
- no resolver link, observed 2026-08-02T15:04:27.407345Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 1d4b984e-f05f-44d7-8fe7-cb393428fb4b · inbound
Pact: A Choreographic Language for Agentic Ecosystems cites this paper.
Pact: A Choreographic Language for Agentic Ecosystems Defeating Prompt Injections by Design
Reference 10
- Resolution
- verified exact
- arxiv_id, observed 2026-05-13T06:58:51.233859Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 12316065-bd92-4d58-87c0-dd548fdddfcb · inbound
ARGUS: Defending LLM Agents Against Context-Aware Prompt Injection cites this paper.
ARGUS: Defending LLM Agents Against Context-Aware Prompt Injection Defeating Prompt Injections by Design
Reference 146
- Resolution
- metadata mismatch
- arxiv_id, observed 2026-05-13T06:58:51.233859Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 5da1024e-0ea3-4e62-9ad0-35a9d75dbe3a · inbound
MAGIQ: A Post-Quantum Multi-Agentic AI Governance System with Provable Security cites this paper.
MAGIQ: A Post-Quantum Multi-Agentic AI Governance System with Provable Security Defeating Prompt Injections by Design
Reference 19
- Resolution
- verified exact
- arxiv_id, observed 2026-05-13T06:58:51.233859Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 78280b7c-e19a-40c3-b62a-d2eb46cdee5e · inbound
MAGIQ: A Post-Quantum Multi-Agentic AI Governance System with Provable Security cites this paper.
MAGIQ: A Post-Quantum Multi-Agentic AI Governance System with Provable Security Defeating Prompt Injections by Design
Reference 19
- Resolution
- verified exact
- local_arxiv, observed 2026-05-20T22:33:48.500016Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 73699191-1658-46f8-9909-cd6cf9129213 · inbound
When Child Inherits: Modeling and Exploiting Subagent Spawn in Multi-Agent Networks cites this paper.
When Child Inherits: Modeling and Exploiting Subagent Spawn in Multi-Agent Networks Defeating Prompt Injections by Design
Reference 55
- Resolution
- verified exact
- arxiv_id, observed 2026-05-13T06:58:51.233859Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 7bcd1ecc-c7a7-45e6-a89d-1ecc13218f76 · inbound
MATRA: Modeling the Attack Surface of Agentic AI Systems -- OpenClaw Case Study cites this paper.
MATRA: Modeling the Attack Surface of Agentic AI Systems -- OpenClaw Case Study Defeating Prompt Injections by Design
Reference 33
- Resolution
- verified exact
- arxiv_id, observed 2026-05-13T06:58:51.233859Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 95103f03-5f6f-46f9-8039-c2b1bb493a7e · inbound
Engineering Robustness into Personal Agents with the AI Workflow Store cites this paper.
Engineering Robustness into Personal Agents with the AI Workflow Store Defeating Prompt Injections by Design
Reference 19
- Resolution
- verified exact
- arxiv_id, observed 2026-05-13T06:58:51.233859Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 3634e635-cfaa-4e75-9fd5-97acc9795aff · inbound
Engineering Robustness into Personal Agents with the AI Workflow Store cites this paper.
Engineering Robustness into Personal Agents with the AI Workflow Store Defeating Prompt Injections by Design
Reference 19
- Resolution
- verified exact
- arxiv_id, observed 2026-05-13T06:58:51.233859Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation f32dc9c3-c611-409d-9492-fb406b939ee8 · inbound
Engineering Robustness into Personal Agents with the AI Workflow Store cites this paper.
Engineering Robustness into Personal Agents with the AI Workflow Store Defeating Prompt Injections by Design
Reference 19
- Resolution
- verified exact
- local_arxiv, observed 2026-07-01T14:15:47.120873Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 4b61da4b-582f-42c2-8812-ba8729ae0ac4 · inbound
AgentShield: Deception-based Compromise Detection for Tool-using LLM Agents cites this paper.
AgentShield: Deception-based Compromise Detection for Tool-using LLM Agents Defeating Prompt Injections by Design
Reference 15
- Resolution
- verified exact
- arxiv_id, observed 2026-05-13T06:58:51.233859Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation b3f71de2-a0f2-4e8a-8bc7-479a232cc626 · inbound
The Granularity Mismatch in Agent Security: Argument-Level Provenance Solves Enforcement and Isolates the LLM Reasoning Bottleneck cites this paper.
The Granularity Mismatch in Agent Security: Argument-Level Provenance Solves Enforcement and Isolates the LLM Reasoning Bottleneck Defeating Prompt Injections by Design
Reference 4
- Resolution
- verified exact
- arxiv_id, observed 2026-05-13T06:58:51.233859Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 9b6ca1f1-565b-44fc-9560-80d1a5eed6eb · inbound
IPI-proxy: An Intercepting Proxy for Red-Teaming Web-Browsing AI Agents Against Indirect Prompt Injection cites this paper.
IPI-proxy: An Intercepting Proxy for Red-Teaming Web-Browsing AI Agents Against Indirect Prompt Injection Defeating Prompt Injections by Design
Reference 18
- Resolution
- verified exact
- arxiv_id, observed 2026-05-13T06:58:51.233859Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation b7f900d4-3545-48e6-96ca-8c24fcf7d241 · inbound
Language-Based Agent Control cites this paper.
Language-Based Agent Control Defeating Prompt Injections by Design
Reference 8
- Resolution
- verified exact
- local_arxiv, observed 2026-07-01T14:25:45.919982Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 96b1a0cf-aa67-40ac-aea4-1f1f0f891b4d · inbound
Certified Robustness under Heterogeneous Perturbations via Hybrid Randomized Smoothing cites this paper.
Certified Robustness under Heterogeneous Perturbations via Hybrid Randomized Smoothing Defeating Prompt Injections by Design
Reference 4
- Resolution
- verified exact
- local_arxiv, observed 2026-05-14T20:47:59.133922Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 08299630-9fbc-4ef5-be95-e9377792a85a · inbound
Sleeper Channels and Provenance Gates: Persistent Prompt Injection in Always-on Autonomous AI Agents cites this paper.
Sleeper Channels and Provenance Gates: Persistent Prompt Injection in Always-on Autonomous AI Agents Defeating Prompt Injections by Design
Reference 29
- Resolution
- verified exact
- local_arxiv, observed 2026-05-14T18:22:33.605271Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 5b962b1b-3ca6-4a7c-9a3a-f3fed07b89e8 · inbound
Web Agents Should Adopt the Plan-Then-Execute Paradigm cites this paper.
Web Agents Should Adopt the Plan-Then-Execute Paradigm Defeating Prompt Injections by Design
Reference 7
- Resolution
- verified exact
- local_arxiv, observed 2026-05-15T02:43:33.378646Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 0f9916f0-fe64-42ec-bd71-cabf0507bf09 · inbound
Securing LLM Agents Need Intent-to-Execution Integrity cites this paper.
Securing LLM Agents Need Intent-to-Execution Integrity Defeating Prompt Injections by Design
Reference 19
- Resolution
- verified exact
- local_arxiv, observed 2026-05-19T20:17:45.526644Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 47acb930-00d5-4610-b6f8-40b5bd42ced8 · inbound
Trust No Tool: Evaluating and Defending LLM Agents under Untrusted Tool Feedback cites this paper.
Trust No Tool: Evaluating and Defending LLM Agents under Untrusted Tool Feedback Defeating Prompt Injections by Design
Reference 31
- Resolution
- verified exact
- local_arxiv, observed 2026-05-19T23:27:52.462500Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation e4b2cac2-4ea7-48bf-84af-b399208393b5 · inbound
PopPy: Opportunistically Exploiting Parallelism in Python Compound AI Applications cites this paper.
PopPy: Opportunistically Exploiting Parallelism in Python Compound AI Applications Defeating Prompt Injections by Design
Reference 21
- Resolution
- verified exact
- local_arxiv, observed 2026-05-20T08:08:08.958639Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation c0581715-d149-456d-94de-902d020cf9cb · inbound
Agent Security is a Systems Problem cites this paper.
Agent Security is a Systems Problem Defeating Prompt Injections by Design
Reference 18
- Resolution
- verified exact
- local_arxiv, observed 2026-05-20T09:03:09.847981Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 47089b14-e6e7-4a34-994f-36c50ea98e00 · inbound
Agent Security is a Systems Problem cites this paper.
Agent Security is a Systems Problem Defeating Prompt Injections by Design
Reference 18
- Resolution
- verified exact
- local_arxiv, observed 2026-05-21T07:44:02.910333Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 87985fdd-6c7d-4854-93ca-4bf184c3298b · inbound
Boiling the Frog: A Multi-Turn Benchmark for Agentic Safety cites this paper.
Boiling the Frog: A Multi-Turn Benchmark for Agentic Safety Defeating Prompt Injections by Design
Reference 22
- Resolution
- verified exact
- local_arxiv, observed 2026-05-22T05:51:07.825126Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 3293e6f6-0011-4d24-a386-e093cd53c11c · inbound
Boiling the Frog: A Multi-Turn Benchmark for Agentic Safety cites this paper.
Boiling the Frog: A Multi-Turn Benchmark for Agentic Safety Defeating Prompt Injections by Design
Reference 22
- Resolution
- verified exact
- local_arxiv, observed 2026-05-25T06:06:42.892565Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 8d106773-ac14-498c-831a-4554a7caef22 · inbound
Security, Privacy, and Ethical Risks in OpenClaw cites this paper.
Security, Privacy, and Ethical Risks in OpenClaw Defeating Prompt Injections by Design
Reference 13
- Resolution
- metadata mismatch
- local_arxiv, observed 2026-05-25T04:26:37.747860Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation d96b1da7-ef48-40bf-bdd8-53926f0533cf · inbound
Reframing LLM Agent Security as an Agent-Human Interaction Problem cites this paper.
Reframing LLM Agent Security as an Agent-Human Interaction Problem Defeating Prompt Injections by Design
Reference 14
- Resolution
- verified exact
- local_arxiv, observed 2026-06-30T13:54:43.855346Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 8be3032c-958e-4c38-a858-cfdb1511ec13 · inbound
Sandlock: Confining AI Agent Code with Unprivileged Linux Primitives cites this paper.
Sandlock: Confining AI Agent Code with Unprivileged Linux Primitives Defeating Prompt Injections by Design
Reference 7
- Resolution
- verified exact
- local_arxiv, observed 2026-06-29T21:23:58.540163Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation e0a9fead-a953-4018-97aa-e042849b1479 · inbound
Aligning Provenance with Authorization: A Dual-Graph Defense for LLM Agents cites this paper.
Aligning Provenance with Authorization: A Dual-Graph Defense for LLM Agents Defeating Prompt Injections by Design
Reference 5
- Resolution
- verified exact
- local_arxiv, observed 2026-06-29T18:03:48.495140Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 67e11105-4279-4a91-ac1f-24bd2aee9fa0 · inbound
AgentGuard: An Attribute-Based Access Control Framework for Tool-Use LLM-Based Agent cites this paper.
AgentGuard: An Attribute-Based Access Control Framework for Tool-Use LLM-Based Agent Defeating Prompt Injections by Design
Reference 5
- Resolution
- verified exact
- local_arxiv, observed 2026-06-29T11:53:23.341322Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 87ee80af-8a02-4f63-8cfd-fc32c0677f63 · inbound
AIRGuard: Guarding Agent Actions with Runtime Authority Control cites this paper.
AIRGuard: Guarding Agent Actions with Runtime Authority Control Defeating Prompt Injections by Design
Reference 8
- Resolution
- verified exact
- local_arxiv, observed 2026-06-29T12:53:27.145109Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation ebc6ee4a-0035-4b03-8520-4f40d541da64 · inbound
Measuring Real-World Prompt Injection Attacks in LLM-based Resume Screening cites this paper.
Measuring Real-World Prompt Injection Attacks in LLM-based Resume Screening Defeating Prompt Injections by Design
Reference 7
- Resolution
- verified exact
- local_arxiv, observed 2026-06-29T11:23:21.312290Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation ffb9f178-b0b3-421e-870a-93c15a9e8dfa · inbound
From Prompt Injection to Persistent Control: Defending Agentic Harness Against Trojan Backdoors cites this paper.
From Prompt Injection to Persistent Control: Defending Agentic Harness Against Trojan Backdoors Defeating Prompt Injections by Design
Reference 6
- Resolution
- verified exact
- local_arxiv, observed 2026-06-28T22:12:41.472594Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 18c3742e-4d4e-4586-9054-d422de6b0a7f · inbound
AI Integrity: Defending Against Backdoors and Secret Loyalties cites this paper.
AI Integrity: Defending Against Backdoors and Secret Loyalties Defeating Prompt Injections by Design
Reference 10
- Resolution
- metadata mismatch
- local_arxiv, observed 2026-07-04T14:59:54.625457Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 245fc154-1c5c-43c6-80bd-b26c268978a6 · inbound
Model-Native Computing Architecture: Envisioning Future System Architecture Through the Lens of Computer Architecture cites this paper.
Model-Native Computing Architecture: Envisioning Future System Architecture Through the Lens of Computer Architecture Defeating Prompt Injections by Design
Reference 34
- Resolution
- verified exact
- local_arxiv, observed 2026-07-01T19:36:09.366795Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 9c7e5771-f75a-4f4a-b55a-39ce6263bd48 · inbound
When Safe Skills Collide: Measuring Compositional Risk in Agent Skill Ecosystems cites this paper.
When Safe Skills Collide: Measuring Compositional Risk in Agent Skill Ecosystems Defeating Prompt Injections by Design
Reference 27
- Resolution
- verified exact
- local_arxiv, observed 2026-06-28T19:52:36.053236Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 34327849-1d8b-4ebf-8ed9-8052911efb35 · inbound
What You Approve Is What Executes: Consent Integrity for Black-Box LLM Agents cites this paper.
What You Approve Is What Executes: Consent Integrity for Black-Box LLM Agents Defeating Prompt Injections by Design
Reference 13
- Resolution
- verified exact
- local_arxiv, observed 2026-07-01T23:36:22.954515Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 245932b5-6148-423d-950c-e7da038a00a5 · inbound
From Agent Traces to Trust: A Survey of Evidence Tracing and Execution Provenance in LLM Agents cites this paper.
From Agent Traces to Trust: A Survey of Evidence Tracing and Execution Provenance in LLM Agents Defeating Prompt Injections by Design
Reference 19
- Resolution
- metadata mismatch
- local_arxiv, observed 2026-07-02T09:16:49.566278Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 83c12e36-adde-4668-910d-4802ea6fb1d3 · inbound
From Agent Traces to Trust: A Survey of Evidence Tracing and Execution Provenance in LLM Agents cites this paper.
From Agent Traces to Trust: A Survey of Evidence Tracing and Execution Provenance in LLM Agents Defeating Prompt Injections by Design
Reference 19
- Resolution
- metadata mismatch
- local_arxiv, observed 2026-06-30T11:04:37.860907Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 0d87f913-6392-4b44-9464-5ae2397d9a15 · inbound
Data Flow Control: Data Safety Policies for AI Agents cites this paper.
Data Flow Control: Data Safety Policies for AI Agents Defeating Prompt Injections by Design
Reference 17
- Resolution
- verified exact
- local_arxiv, observed 2026-07-02T15:47:06.355024Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 5de1093b-f2f7-4a01-92f2-a533cad856c6 · inbound
Where Instruction Hierarchy Breaks: Diagnosing and Repairing Failures in Reasoning Language Models cites this paper.
Where Instruction Hierarchy Breaks: Diagnosing and Repairing Failures in Reasoning Language Models Defeating Prompt Injections by Design
Reference 2
- Resolution
- verified exact
- local_arxiv, observed 2026-07-02T17:47:18.114428Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 9e65e1a0-1e2f-4a6a-9146-26d95b630487 · inbound
Document-Authored Control-Signal Impersonation: A Low-Cost Indirect Prompt Attack on RAG Safety Boundaries cites this paper.
Document-Authored Control-Signal Impersonation: A Low-Cost Indirect Prompt Attack on RAG Safety Boundaries Defeating Prompt Injections by Design
Reference 13
- Resolution
- verified exact
- local_arxiv, observed 2026-07-03T01:17:30.896276Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation bc772e50-d442-4aba-8121-318e1aec71a1 · inbound
Game-Theoretic Multi-Agent Control for Robust Contextual Reasoning in LLMs cites this paper.
Game-Theoretic Multi-Agent Control for Robust Contextual Reasoning in LLMs Defeating Prompt Injections by Design
Reference 20
- Resolution
- verified exact
- local_arxiv, observed 2026-07-03T05:47:41.223186Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation c5a085ea-1145-4b70-a35c-4a057d34e657 · inbound
Assessing Automated Prompt Injection Attacks in Agentic Environments cites this paper.
Assessing Automated Prompt Injection Attacks in Agentic Environments Defeating Prompt Injections by Design
Reference 10
- Resolution
- verified exact
- local_arxiv, observed 2026-07-03T06:17:41.846662Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation aedca008-bfc0-45d4-9ad2-f1e62fb4ac34 · inbound
Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation cites this paper.
Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation Defeating Prompt Injections by Design
Reference 32
- Resolution
- verified exact
- local_arxiv, observed 2026-06-27T13:20:56.816241Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 5de21b34-3824-4319-b671-be150b1fcd6e · inbound
A Five-Plane Reference Architecture for Runtime Governance of Production AI Agents cites this paper.
A Five-Plane Reference Architecture for Runtime Governance of Production AI Agents Defeating Prompt Injections by Design
Reference 13
- Resolution
- verified exact
- local_arxiv, observed 2026-07-03T10:17:57.578573Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 5709d5c7-8162-43a1-88fb-5aa7d6eab53e · inbound
OCELOT: Inference-Leakage Budgets for Privacy-Preserving LLM Agents cites this paper.
OCELOT: Inference-Leakage Budgets for Privacy-Preserving LLM Agents Defeating Prompt Injections by Design
Reference 14
- Resolution
- verified exact
- local_arxiv, observed 2026-07-03T11:58:06.924551Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 7679050e-0e2c-4070-908f-3323c2361e7a · inbound
AutoDojo: Adaptive Black-Box Attacks Reveal the Limits of IPI Defenses and Task-Specification Effects in LLM Agents cites this paper.
AutoDojo: Adaptive Black-Box Attacks Reveal the Limits of IPI Defenses and Task-Specification Effects in LLM Agents Defeating Prompt Injections by Design
Reference 29
- Resolution
- verified exact
- local_arxiv, observed 2026-07-03T16:48:40.524630Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 5ae01ffe-831b-4cb4-b209-b793c4c6fd26 · inbound
Evaluating Prompting-Based Defenses Against Domain-Camouflaged Injection Attacks cites this paper.
Evaluating Prompting-Based Defenses Against Domain-Camouflaged Injection Attacks Defeating Prompt Injections by Design
Reference 2
- Resolution
- verified exact
- local_arxiv, observed 2026-07-03T22:08:59.307242Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation f25ea887-a358-49fb-b7a4-8a5a2f94b55e · inbound
The Gate Is Only as Honest as Its Contracts: ContractGuard for the Contract Layer of Risk-Aware Causal Gating cites this paper.
The Gate Is Only as Honest as Its Contracts: ContractGuard for the Contract Layer of Risk-Aware Causal Gating Defeating Prompt Injections by Design
Reference 22
- Resolution
- verified exact
- local_arxiv, observed 2026-07-04T00:49:18.311385Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation c3e3be16-36d6-4a0e-8a92-2d80c07460c7 · inbound
Think Twice Before You Act: Protecting LLM Agents Against Tool Description Poisoning via Isolated Planning cites this paper.
Think Twice Before You Act: Protecting LLM Agents Against Tool Description Poisoning via Isolated Planning Defeating Prompt Injections by Design
Reference 21
- Resolution
- metadata mismatch
- local_arxiv, observed 2026-07-04T04:59:36.386362Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 4d8b5ac6-8a54-4702-b722-e29dcf5d67bf · inbound
Safe to Check, Unsafe to Use: Relinking at the Compression Boundary of LLM Agents cites this paper.
Safe to Check, Unsafe to Use: Relinking at the Compression Boundary of LLM Agents Defeating Prompt Injections by Design
Reference 14
- Resolution
- verified exact
- local_arxiv, observed 2026-07-04T07:29:39.128527Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation c1118d07-9846-4318-a062-2daf2767eec8 · inbound
Governance Decay: How Context Compaction Silently Erases Safety Constraints in Long-Horizon LLM Agents cites this paper.
Governance Decay: How Context Compaction Silently Erases Safety Constraints in Long-Horizon LLM Agents Defeating Prompt Injections by Design
Reference 7
- Resolution
- verified exact
- local_arxiv, observed 2026-07-04T08:59:42.379117Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 4d4e55d3-324b-4cdc-bc6e-1e4e27ffc4af · inbound
GIF: Locally Sound Geometric Information Flow Control for LLMs cites this paper.
GIF: Locally Sound Geometric Information Flow Control for LLMs Defeating Prompt Injections by Design
Reference 12
- Resolution
- verified exact
- local_arxiv, observed 2026-07-04T10:49:46.739536Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 64f8e865-2fc4-4983-8dd4-ed057c034aaf · inbound
Detecting Malicious Agent Skills in the Wild using Attention cites this paper.
Detecting Malicious Agent Skills in the Wild using Attention Defeating Prompt Injections by Design
Reference 5
- Resolution
- verified exact
- local_arxiv, observed 2026-07-04T11:39:47.680493Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 7d3094e3-9121-47d9-9744-2cfb19015294 · inbound
Securing LLM-Agent Long-Term Memory Against Poisoning: Non-Malleable, Origin-Bound Authority with Machine-Checked Guarantees cites this paper.
Securing LLM-Agent Long-Term Memory Against Poisoning: Non-Malleable, Origin-Bound Authority with Machine-Checked Guarantees Defeating Prompt Injections by Design
Reference 26
- Resolution
- verified exact
- local_arxiv, observed 2026-07-04T17:30:00.209196Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 25777ca8-de86-4bda-a7e7-3e5fceefbe76 · inbound
Governed Shared Memory for Multi-Agent LLM Systems cites this paper.
Governed Shared Memory for Multi-Agent LLM Systems Defeating Prompt Injections by Design
Reference 5
- Resolution
- verified exact
- local_arxiv, observed 2026-07-04T17:09:58.690933Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 00ee360c-91d8-4792-8300-29f991314fde · inbound
ActPlane: Programmable OS-Level Policy Enforcement for Agent Harnesses cites this paper.
ActPlane: Programmable OS-Level Policy Enforcement for Agent Harnesses Defeating Prompt Injections by Design
Reference 14
- Resolution
- verified exact
- local_arxiv, observed 2026-07-04T19:30:07.961689Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 284cde31-08be-4cef-9862-fcdc329eef54 · inbound
ActPlane: Programmable OS-Level Policy Enforcement for Agent Harnesses cites this paper.
ActPlane: Programmable OS-Level Policy Enforcement for Agent Harnesses Defeating Prompt Injections by Design
Reference 14
- Resolution
- verified exact
- local_arxiv, observed 2026-07-02T21:47:27.558879Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation b32baa66-2ca9-4e74-acf4-67f1bf80442d · inbound
Adaptive Evaluation of Out-of-Band Defenses Against Prompt Injection in LLM Agents cites this paper.
Adaptive Evaluation of Out-of-Band Defenses Against Prompt Injection in LLM Agents Defeating Prompt Injections by Design
Reference 15
- Resolution
- verified exact
- local_arxiv, observed 2026-07-04T13:39:51.398669Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation eebe8c6c-4a46-4048-ab79-4c76823282d8 · inbound
VIGIL: Runtime Enforcement of Behavioral Specifications in AI Agent Skills cites this paper.
VIGIL: Runtime Enforcement of Behavioral Specifications in AI Agent Skills Defeating Prompt Injections by Design
Reference 18
- Resolution
- verified exact
- local_arxiv, observed 2026-07-04T13:59:52.332369Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 87e23069-8ab6-4ed8-8fb9-6e8f1518de6c · inbound
Agents That Know Too Much: A Data-Centric Survey of Privacy in LLM Agents cites this paper.
Agents That Know Too Much: A Data-Centric Survey of Privacy in LLM Agents Defeating Prompt Injections by Design
Reference 28
- Resolution
- verified exact
- local_arxiv, observed 2026-07-04T14:09:53.240687Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation e49eb883-4526-4a01-85df-71df668e05f7 · inbound
Whose Side Is Your Agent On? Multi-Party Principal Loyalty in LLM Agents cites this paper.
Whose Side Is Your Agent On? Multi-Party Principal Loyalty in LLM Agents Defeating Prompt Injections by Design
Reference 12
- Resolution
- verified exact
- local_arxiv, observed 2026-06-30T13:44:41.469076Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation e82459c9-91b0-4b82-8127-7a378f181800 · inbound
Safeguarding LLM Agents from Misalignment through Provenance Analysis cites this paper.
Safeguarding LLM Agents from Misalignment through Provenance Analysis Defeating Prompt Injections by Design
Reference 10
- Resolution
- verified exact
- local_arxiv, observed 2026-07-04T01:29:22.004476Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation e4f5c155-4e9b-49f9-8c3f-664f48e9c044 · inbound
Cloak and Detonate: Scanner Evasion and Dynamic Detection of Agent Skill Malware cites this paper.
Cloak and Detonate: Scanner Evasion and Dynamic Detection of Agent Skill Malware Defeating Prompt Injections by Design
Reference 46
- Resolution
- verified exact
- local_arxiv, observed 2026-07-03T10:37:56.235427Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 9649899a-0b68-4f2b-8914-f22e7431730c · inbound
Cloak and Detonate: Scanner Evasion and Dynamic Detection of Agent Skill Malware cites this paper.
Cloak and Detonate: Scanner Evasion and Dynamic Detection of Agent Skill Malware Defeating Prompt Injections by Design
Reference 46
- Resolution
- unresolved
- no resolver link, observed 2026-07-12T08:09:57.596812Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation dcce4937-73b0-4130-8fbb-dc0d97a5febe · inbound
MOSAIC: Knowledge-Guided CLI Command Composition Attack in LLM Coding Agents cites this paper.
MOSAIC: Knowledge-Guided CLI Command Composition Attack in LLM Coding Agents Defeating Prompt Injections by Design
Reference 66
- Resolution
- unresolved
- no resolver link, observed 2026-07-12T06:34:07.307906Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 285c5605-fad3-49bf-a22a-ee7a420b26e3 · inbound
DualView: Preventing Indirect Prompt Injection in Personal AI Agents cites this paper.
DualView: Preventing Indirect Prompt Injection in Personal AI Agents Defeating Prompt Injections by Design
Reference 12
- Resolution
- unresolved
- no resolver link, observed 2026-07-11T23:43:28.649948Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation acb983a4-e7a1-4cbe-b170-b1bef34b6a9c · inbound
Governed Individuation: Cryptographically Decoupling an Agent's Learning from Its Authority cites this paper.
Governed Individuation: Cryptographically Decoupling an Agent's Learning from Its Authority Defeating Prompt Injections by Design
Reference 21
- Resolution
- unresolved
- no resolver link, observed 2026-07-11T16:25:52.941193Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.