{"as_of":"2026-08-09T03:21:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:aac375f156d601cda8a0dbd88db5afa179aa74fbcbb13339ecf2dab4bf9b4eb5","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":10,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":10,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":10,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":10,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T14:46:03.097933Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":1,"source":"arxiv_reference","source_observed_at":"2026-08-05T02:28:24.338817Z","state":"measured"}],"external_citation_measurements":[{"count":0,"observed_at":"2026-08-05T02:28:24.338817Z","source":"arxiv_reference"}],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2504.11168","last_updated":"2025-07-14T15:27:11Z","snapshot_observed_at":"2026-08-08T04:34:09.842811Z","submitted_at":"2025-04-15T13:16:02Z","title":"Bypassing LLM Guardrails: An Empirical Analysis of Evasion Attacks against Prompt Injection and Jailbreak Detection Systems","version":3},"cited_work":{"arxiv_id":"2504.11168","doi":"10.48550/arxiv.2504.11168","metadata_source":"arxiv_reference","pith_arxiv_id":"2504.11168","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Bypassing Prompt Injection and Jailbreak Detection in LLM Guardrails","venue":"ArXiv.org","work_id":"25e52395-d184-41d7-97d7-e875af90914b","year":2025},"citing_paper":{"arxiv_id":"2504.14668","last_updated":"2025-04-20T16:18:06Z","snapshot_observed_at":"2026-08-02T21:19:40.663901Z","submitted_at":"2025-04-20T16:18:06Z","title":"A Byzantine Fault Tolerance Approach towards AI Safety","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-05-22T19:15:09.861706Z"},"links":{"cited_paper":"/paper/2504.11168","citing_paper":"/paper/2504.14668"},"observation_digest":"sha256:9c27c5a54c5410741cc02b8dc50b1cd781e516a999cb60d483d081a18c3c5685","observation_id":"f296bbb6-81ee-408c-a4db-8080aae50f7d","resolution":{"observed_at":"2026-05-22T19:16:58.783644Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.11168","last_updated":"2025-07-14T15:27:11Z","snapshot_observed_at":"2026-08-08T04:34:09.842811Z","submitted_at":"2025-04-15T13:16:02Z","title":"Bypassing LLM Guardrails: An Empirical Analysis of Evasion Attacks against Prompt Injection and Jailbreak Detection Systems","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.11168","snapshot_observed_at":"2026-08-07T14:46:03.097933Z","title":"Hackett, L","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.17654","last_updated":"2026-05-27T08:26:10Z","snapshot_observed_at":"2026-08-07T14:40:44.563063Z","submitted_at":"2025-05-23T09:18:01Z","title":"EVADE-Bench: Multimodal Benchmark for Evaluating and Enhancing Evasive Content Detection","version":4},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T14:46:03.097933Z"},"links":{"cited_paper":"/paper/2504.11168","citing_paper":"/paper/2505.17654"},"observation_digest":"sha256:17b85fb82a96e57dda7b4d132f697be4ea27870f1b8d8bfe2f0934cad9d2d167","observation_id":"656ad9a6-f126-46b6-be17-5d45e6ad8bb2","resolution":{"observed_at":"2026-08-07T14:46:03.097933Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.11168","last_updated":"2025-07-14T15:27:11Z","snapshot_observed_at":"2026-08-08T04:34:09.842811Z","submitted_at":"2025-04-15T13:16:02Z","title":"Bypassing LLM Guardrails: An Empirical Analysis of Evasion Attacks against Prompt Injection and Jailbreak Detection Systems","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.11168","snapshot_observed_at":"2026-08-04T18:34:49.857445Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2509.09912","last_updated":"2025-09-12T00:57:50Z","snapshot_observed_at":"2026-08-06T21:30:11.969868Z","submitted_at":"2025-09-12T00:57:50Z","title":"When Your Reviewer is an LLM: Biases, Divergence, and Prompt Injection Risks in Peer Review","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-04T18:34:49.857445Z"},"links":{"cited_paper":"/paper/2504.11168","citing_paper":"/paper/2509.09912"},"observation_digest":"sha256:ce997cdacdd5a737acc88699249b2c975923e9726490d85c3c55347eac83ca0a","observation_id":"a94fe550-8ff2-4ed4-b795-cb290d71e09d","resolution":{"observed_at":"2026-08-04T18:34:49.857445Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.11168","last_updated":"2025-07-14T15:27:11Z","snapshot_observed_at":"2026-08-08T04:34:09.842811Z","submitted_at":"2025-04-15T13:16:02Z","title":"Bypassing LLM Guardrails: An Empirical Analysis of Evasion Attacks against Prompt Injection and Jailbreak Detection Systems","version":3},"cited_work":{"arxiv_id":"2504.11168","doi":"10.48550/arxiv.2504.11168","metadata_source":"arxiv_reference","pith_arxiv_id":"2504.11168","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Bypassing Prompt Injection and Jailbreak Detection in LLM Guardrails","venue":"ArXiv.org","work_id":"25e52395-d184-41d7-97d7-e875af90914b","year":2025},"citing_paper":{"arxiv_id":"2510.09093","last_updated":"2026-04-10T06:21:50Z","snapshot_observed_at":"2026-07-06T22:32:17.816175Z","submitted_at":"2025-10-10T07:39:01Z","title":"Exploiting Web Search Tools of AI Agents for Data Exfiltration","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-05-18T08:36:04.262528Z"},"links":{"cited_paper":"/paper/2504.11168","citing_paper":"/paper/2510.09093"},"observation_digest":"sha256:42077f389e27681045656c8ab19e62d35119f30de8c4926680025b9f15bb9915","observation_id":"76bcc266-7f5b-4bf9-ae9a-6f331c26adf1","resolution":{"observed_at":"2026-05-18T08:36:07.217273Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.11168","last_updated":"2025-07-14T15:27:11Z","snapshot_observed_at":"2026-08-08T04:34:09.842811Z","submitted_at":"2025-04-15T13:16:02Z","title":"Bypassing LLM Guardrails: An Empirical Analysis of Evasion Attacks against Prompt Injection and Jailbreak Detection Systems","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.11168","snapshot_observed_at":"2026-08-02T15:56:48.257415Z","title":"Bypassing LLM Guardrails: An Empirical Analysis of Evasion Attacks against Prompt Injection and Jailbreak Detection Systems","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.18248","last_updated":"2026-07-30T16:35:11Z","snapshot_observed_at":"2026-08-02T23:57:45.082199Z","submitted_at":"2026-04-20T13:27:05Z","title":"Beyond Pattern Matching: Seven Cross-Domain Techniques for Prompt Injection Detection","version":4},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-02T15:56:48.257415Z"},"links":{"cited_paper":"/paper/2504.11168","citing_paper":"/paper/2604.18248"},"observation_digest":"sha256:fda8d0a015a3b04c8ed04c99c4c373f013c67e3a91a27d33cf03575727c6907a","observation_id":"cbe39f0e-1efa-492f-9af0-78502964a57d","resolution":{"observed_at":"2026-08-02T15:56:48.257415Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.11168","last_updated":"2025-07-14T15:27:11Z","snapshot_observed_at":"2026-08-08T04:34:09.842811Z","submitted_at":"2025-04-15T13:16:02Z","title":"Bypassing LLM Guardrails: An Empirical Analysis of Evasion Attacks against Prompt Injection and Jailbreak Detection Systems","version":3},"cited_work":{"arxiv_id":"2504.11168","doi":"10.48550/arxiv.2504.11168","metadata_source":"arxiv_reference","pith_arxiv_id":"2504.11168","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Bypassing Prompt Injection and Jailbreak Detection in LLM Guardrails","venue":"ArXiv.org","work_id":"25e52395-d184-41d7-97d7-e875af90914b","year":2025},"citing_paper":{"arxiv_id":"2606.03136","last_updated":"2026-06-02T04:24:20Z","snapshot_observed_at":"2026-08-06T06:07:51.938149Z","submitted_at":"2026-06-02T04:24:20Z","title":"PsychoPass: Geometric Profiling of Multi-Turn Adversarial LLM Conversations","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-06-28T09:55:56.227335Z"},"links":{"cited_paper":"/paper/2504.11168","citing_paper":"/paper/2606.03136"},"observation_digest":"sha256:be71ffb4433d6a8508b4a8c2a40e4847613f9b30c8e1985c34728a8b4e46bcec","observation_id":"5b6e66dc-3014-4f87-bc5f-81cb25b6775c","resolution":{"observed_at":"2026-07-02T03:36:29.442477Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.11168","last_updated":"2025-07-14T15:27:11Z","snapshot_observed_at":"2026-08-08T04:34:09.842811Z","submitted_at":"2025-04-15T13:16:02Z","title":"Bypassing LLM Guardrails: An Empirical Analysis of Evasion Attacks against Prompt Injection and Jailbreak Detection Systems","version":3},"cited_work":{"arxiv_id":"2504.11168","doi":"10.48550/arxiv.2504.11168","metadata_source":"arxiv_reference","pith_arxiv_id":"2504.11168","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Bypassing Prompt Injection and Jailbreak Detection in LLM Guardrails","venue":"ArXiv.org","work_id":"25e52395-d184-41d7-97d7-e875af90914b","year":2025},"citing_paper":{"arxiv_id":"2606.05946","last_updated":"2026-06-04T09:46:32Z","snapshot_observed_at":"2026-08-09T02:10:30.503875Z","submitted_at":"2026-06-04T09:46:32Z","title":"Short paper: Models in the dark -- Rectification and erasure under GDPR in ML supply chains","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-06-28T03:24:45.955589Z"},"links":{"cited_paper":"/paper/2504.11168","citing_paper":"/paper/2606.05946"},"observation_digest":"sha256:269f4330537a4b27d11b7ba0504886a9c48a4f72e32436b8c1559b722f3456c0","observation_id":"9c7a0633-192b-4021-b033-0c2f1c7bfaa4","resolution":{"observed_at":"2026-06-28T03:31:30.366296Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.11168","last_updated":"2025-07-14T15:27:11Z","snapshot_observed_at":"2026-08-08T04:34:09.842811Z","submitted_at":"2025-04-15T13:16:02Z","title":"Bypassing LLM Guardrails: An Empirical Analysis of Evasion Attacks against Prompt Injection and Jailbreak Detection Systems","version":3},"cited_work":{"arxiv_id":"2504.11168","doi":"10.48550/arxiv.2504.11168","metadata_source":"arxiv_reference","pith_arxiv_id":"2504.11168","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Bypassing Prompt Injection and Jailbreak Detection in LLM Guardrails","venue":"ArXiv.org","work_id":"25e52395-d184-41d7-97d7-e875af90914b","year":2025},"citing_paper":{"arxiv_id":"2606.14517","last_updated":"2026-06-16T09:28:39Z","snapshot_observed_at":"2026-07-06T23:52:28.557859Z","submitted_at":"2026-06-12T14:49:00Z","title":"From Shield to Target: Denial-of-Service Attacks on LLM-Based Agent Guardrails","version":2},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-06-27T04:42:05.886984Z"},"links":{"cited_paper":"/paper/2504.11168","citing_paper":"/paper/2606.14517"},"observation_digest":"sha256:cf63fed8b027a227d80009cac4a7276c00e2803bcff76f1bbee1824d2d959023","observation_id":"adde285b-0aec-4e56-bb24-13ed97d70d5a","resolution":{"observed_at":"2026-07-03T16:58:43.511470Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.11168","last_updated":"2025-07-14T15:27:11Z","snapshot_observed_at":"2026-08-08T04:34:09.842811Z","submitted_at":"2025-04-15T13:16:02Z","title":"Bypassing LLM Guardrails: An Empirical Analysis of Evasion Attacks against Prompt Injection and Jailbreak Detection Systems","version":3},"cited_work":{"arxiv_id":"2504.11168","doi":"10.48550/arxiv.2504.11168","metadata_source":"arxiv_reference","pith_arxiv_id":"2504.11168","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Bypassing Prompt Injection and Jailbreak Detection in LLM Guardrails","venue":"ArXiv.org","work_id":"25e52395-d184-41d7-97d7-e875af90914b","year":2025},"citing_paper":{"arxiv_id":"2606.22237","last_updated":"2026-06-20T21:37:12Z","snapshot_observed_at":"2026-08-06T06:38:36.041719Z","submitted_at":"2026-06-20T21:37:12Z","title":"Investigating The Security of Modern AI and Cloud Infrastructure","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-06-26T11:31:39.910784Z"},"links":{"cited_paper":"/paper/2504.11168","citing_paper":"/paper/2606.22237"},"observation_digest":"sha256:4623608b48c5cff471ba14ce2f116b3774a6ff6cdaaf89c9998cb2ada8ecdd0a","observation_id":"c42ea2ac-1377-4141-8751-65258d51ca10","resolution":{"observed_at":"2026-07-04T08:29:42.302084Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.11168","last_updated":"2025-07-14T15:27:11Z","snapshot_observed_at":"2026-08-08T04:34:09.842811Z","submitted_at":"2025-04-15T13:16:02Z","title":"Bypassing LLM Guardrails: An Empirical Analysis of Evasion Attacks against Prompt Injection and Jailbreak Detection Systems","version":3},"cited_work":{"arxiv_id":"2504.11168","doi":"10.48550/arxiv.2504.11168","metadata_source":"arxiv_reference","pith_arxiv_id":"2504.11168","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Bypassing Prompt Injection and Jailbreak Detection in LLM Guardrails","venue":"ArXiv.org","work_id":"25e52395-d184-41d7-97d7-e875af90914b","year":2025},"citing_paper":{"arxiv_id":"2606.24598","last_updated":"2026-06-15T15:27:08Z","snapshot_observed_at":"2026-08-03T07:21:33.627587Z","submitted_at":"2026-06-15T15:27:08Z","title":"Toward Self-Evolution-Ready Workflow Harnesses: A Reversible Migration Path and Convertibility Taxonomy for Expert LLM Pipelines","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-06-27T03:39:24.426862Z"},"links":{"cited_paper":"/paper/2504.11168","citing_paper":"/paper/2606.24598"},"observation_digest":"sha256:78d54bc9af3b2fa708a9e9dd52884911d8eabf26b620ba78d116460cbf47aad7","observation_id":"3d867835-2020-452d-a5c9-1100f787cedb","resolution":{"observed_at":"2026-07-03T17:48:46.404918Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2504.11168/citation-record","integrity":"/paper/2504.11168/integrity","json":"/paper/2504.11168/citation-record.json","paper":"/paper/2504.11168"},"outbound":[],"paper":{"arxiv_id":"2504.11168","last_updated":"2025-07-14T15:27:11Z","latest_version":3,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-08T04:34:09.842811Z","submitted_at":"2025-04-15T13:16:02Z","title":"Bypassing LLM Guardrails: An Empirical Analysis of Evasion Attacks against Prompt Injection and Jailbreak Detection Systems"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 10 inbound Pith citation observations for arXiv:2504.11168."}