{"as_of":"2026-08-08T17:50:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:c70996237da09c3d1080f502213d81f5c35a9ad3ea990996b64decb53a0b667c","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":8,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":8,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":8,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":8,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-08T14:04:38.245522Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-05-13T00:57:00.718612Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2504.09593","last_updated":"2025-04-17T03:50:19Z","snapshot_observed_at":"2026-08-07T16:06:09.244670Z","submitted_at":"2025-04-13T14:18:35Z","title":"ControlNET: A Firewall for RAG-based LLM System","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.09593","snapshot_observed_at":"2026-08-06T05:56:20.394074Z","title":"Controlnet: A firewall for rag-based llm system","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":74,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.394074Z"},"links":{"cited_paper":"/paper/2504.09593","citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:2b4beb317f56037d392ce98cd8690f4bc3790e72336bcabc4e09cd6ef9ca15ad","observation_id":"1102c1bf-d5cc-42c0-b2e5-7844190859c8","resolution":{"observed_at":"2026-08-06T05:56:20.394074Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.09593","last_updated":"2025-04-17T03:50:19Z","snapshot_observed_at":"2026-08-07T16:06:09.244670Z","submitted_at":"2025-04-13T14:18:35Z","title":"ControlNET: A Firewall for RAG-based LLM System","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.09593","snapshot_observed_at":"2026-08-05T22:51:28.176303Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.06418","last_updated":"2025-08-08T16:05:27Z","snapshot_observed_at":"2026-08-08T12:59:56.859606Z","submitted_at":"2025-08-08T16:05:27Z","title":"Quantifying Conversation Drift in MCP via Latent Polytope","version":1},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-08-05T22:51:28.176303Z"},"links":{"cited_paper":"/paper/2504.09593","citing_paper":"/paper/2508.06418"},"observation_digest":"sha256:dd2b42912a383cec7bb1359069334fee34d0a5fe05225fbc3aaa627da881b498","observation_id":"cacada80-e609-4068-a52a-a3545898727f","resolution":{"observed_at":"2026-08-05T22:51:28.176303Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.09593","last_updated":"2025-04-17T03:50:19Z","snapshot_observed_at":"2026-08-07T16:06:09.244670Z","submitted_at":"2025-04-13T14:18:35Z","title":"ControlNET: A Firewall for RAG-based LLM System","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.09593","snapshot_observed_at":"2026-08-05T15:26:33.651692Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.19870","last_updated":"2025-08-27T13:33:35Z","snapshot_observed_at":"2026-08-07T05:20:03.066438Z","submitted_at":"2025-08-27T13:33:35Z","title":"Secure Multi-LLM Agentic AI and Agentification for Edge General Intelligence by Zero-Trust: A Survey","version":1},"reference_index":93,"source":"pdf_text","source_observed_at":"2026-08-05T15:26:33.651692Z"},"links":{"cited_paper":"/paper/2504.09593","citing_paper":"/paper/2508.19870"},"observation_digest":"sha256:e1387fcb953a89430cb6531bed3dfe75a94d1aea8a8afd19344aab03ac0f1c95","observation_id":"eac75904-96bd-41fe-8491-938156ad44da","resolution":{"observed_at":"2026-08-05T15:26:33.651692Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.09593","last_updated":"2025-04-17T03:50:19Z","snapshot_observed_at":"2026-08-07T16:06:09.244670Z","submitted_at":"2025-04-13T14:18:35Z","title":"ControlNET: A Firewall for RAG-based LLM System","version":2},"cited_work":{"arxiv_id":"2504.09593","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2504.09593","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Controlnet: A firewall for rag-based llm system.arXiv preprint arXiv:2504.09593","venue":null,"work_id":"a35144b3-59d6-4086-8ae0-aaf7486e6e25","year":2025},"citing_paper":{"arxiv_id":"2604.20932","last_updated":"2026-04-22T11:17:10Z","snapshot_observed_at":"2026-08-03T00:59:52.036447Z","submitted_at":"2026-04-22T11:17:10Z","title":"Adaptive Defense Orchestration for RAG: A Sentinel-Strategist Architecture against Multi-Vector Attacks","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-05-10T00:18:11.968889Z"},"links":{"cited_paper":"/paper/2504.09593","citing_paper":"/paper/2604.20932"},"observation_digest":"sha256:5b0810ad00f35e7713a984d74f51bb6f74efaa641b4d15c76115b34277a557f8","observation_id":"ea6bed01-2ba2-49f8-b35e-a6889a634b33","resolution":{"observed_at":"2026-05-10T00:19:46.809116Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.09593","last_updated":"2025-04-17T03:50:19Z","snapshot_observed_at":"2026-08-07T16:06:09.244670Z","submitted_at":"2025-04-13T14:18:35Z","title":"ControlNET: A Firewall for RAG-based LLM System","version":2},"cited_work":{"arxiv_id":"2504.09593","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2504.09593","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Controlnet: A firewall for rag-based llm system.arXiv preprint arXiv:2504.09593","venue":null,"work_id":"a35144b3-59d6-4086-8ae0-aaf7486e6e25","year":2025},"citing_paper":{"arxiv_id":"2605.10614","last_updated":"2026-05-11T14:11:41Z","snapshot_observed_at":"2026-08-08T07:09:13.904514Z","submitted_at":"2026-05-11T14:11:41Z","title":"PRISM: Generation-Time Detection and Mitigation of Secret Leakage in Multi-Agent LLM Pipelines","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-05-12T03:27:56.191256Z"},"links":{"cited_paper":"/paper/2504.09593","citing_paper":"/paper/2605.10614"},"observation_digest":"sha256:6096bb9c007f30b79752cfcae1295cca079c3494b689051f6349bcde6eaca459","observation_id":"23618fd7-c137-4cc8-91f7-6ff02f8573fa","resolution":{"observed_at":"2026-05-12T07:21:25.095042Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.09593","last_updated":"2025-04-17T03:50:19Z","snapshot_observed_at":"2026-08-07T16:06:09.244670Z","submitted_at":"2025-04-13T14:18:35Z","title":"ControlNET: A Firewall for RAG-based LLM System","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.09593","snapshot_observed_at":"2026-07-12T17:06:32.429160Z","title":"Controlnet: A firewall for rag-based llm system.arXiv preprint arXiv:2504.09593,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2605.11046","last_updated":"2026-07-06T14:50:31Z","snapshot_observed_at":"2026-07-12T17:06:30.437834Z","submitted_at":"2026-05-11T12:41:36Z","title":"On the dilaton gravity of analogue black holes","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-07-12T17:06:32.429160Z"},"links":{"cited_paper":"/paper/2504.09593","citing_paper":"/paper/2605.11046"},"observation_digest":"sha256:1e583753c89fd8ac5005d1916310af534782c170404a0d7e1ed2411a5833c55d","observation_id":"728306ca-ee93-4925-bdc1-db531722a7a6","resolution":{"observed_at":"2026-07-12T17:06:32.429160Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.09593","last_updated":"2025-04-17T03:50:19Z","snapshot_observed_at":"2026-08-07T16:06:09.244670Z","submitted_at":"2025-04-13T14:18:35Z","title":"ControlNET: A Firewall for RAG-based LLM System","version":2},"cited_work":{"arxiv_id":"2504.09593","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2504.09593","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Controlnet: A firewall for rag-based llm system.arXiv preprint arXiv:2504.09593","venue":null,"work_id":"a35144b3-59d6-4086-8ae0-aaf7486e6e25","year":2025},"citing_paper":{"arxiv_id":"2605.11047","last_updated":"2026-05-11T13:20:02Z","snapshot_observed_at":"2026-07-06T23:22:57.012338Z","submitted_at":"2026-05-11T13:20:02Z","title":"Red-Teaming Agent Execution Contexts: Open-World Security Evaluation on OpenClaw","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-05-13T00:53:56.517406Z"},"links":{"cited_paper":"/paper/2504.09593","citing_paper":"/paper/2605.11047"},"observation_digest":"sha256:545edb757caa151f0da179a453179e72cf83b0e82d02d6a58f5b89ef64a2cb03","observation_id":"b65baeca-1b97-4738-a866-c5308f2e6b8e","resolution":{"observed_at":"2026-05-13T00:57:00.721540Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.09593","last_updated":"2025-04-17T03:50:19Z","snapshot_observed_at":"2026-08-07T16:06:09.244670Z","submitted_at":"2025-04-13T14:18:35Z","title":"ControlNET: A Firewall for RAG-based LLM System","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.09593","snapshot_observed_at":"2026-08-08T14:04:38.245522Z","title":"arXiv preprint arXiv:2504.09593 (2025)","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.05391","last_updated":"2026-08-05T20:18:45Z","snapshot_observed_at":"2026-08-08T17:16:19.772899Z","submitted_at":"2026-08-05T20:18:45Z","title":"Adaptive Arena-based Contestable Argumentative Network-of-Experts for Open-Ended Care Plan Coordination","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-08T14:04:38.245522Z"},"links":{"cited_paper":"/paper/2504.09593","citing_paper":"/paper/2608.05391"},"observation_digest":"sha256:a5db7671b870c28d42d4509f0e4d25287677741feb29142f322cc5f64247168c","observation_id":"1c55d056-bace-4748-8b0c-43ef61f3130d","resolution":{"observed_at":"2026-08-08T14:04:38.245522Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2504.09593/citation-record","integrity":"/paper/2504.09593/integrity","json":"/paper/2504.09593/citation-record.json","paper":"/paper/2504.09593"},"outbound":[],"paper":{"arxiv_id":"2504.09593","last_updated":"2025-04-17T03:50:19Z","latest_version":2,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-07T16:06:09.244670Z","submitted_at":"2025-04-13T14:18:35Z","title":"ControlNET: A Firewall for RAG-based LLM System"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 8 inbound Pith citation observations for arXiv:2504.09593."}