{"as_of":"2026-08-07T11:42:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:0af2eb82f6f1e4bcadc59bc60c98ca1610ec76dee8d141f4d361d28b0a7e4802","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":10,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":10,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":10,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":10,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T11:02:03.866331Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-05-18T08:16:06.487287Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2504.14348","last_updated":"2025-07-27T10:12:52Z","snapshot_observed_at":"2026-07-06T21:11:58.671097Z","submitted_at":"2025-04-19T16:28:03Z","title":"Manipulating Multimodal Agents via Cross-Modal Prompt Injection","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.14348","snapshot_observed_at":"2026-08-07T11:02:03.866331Z","title":"Manipulating Multimodal Agents via Cross-Modal Prompt Injection.arXiv2025, arXiv:2504.14348","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.03683","last_updated":"2025-06-04T08:13:53Z","snapshot_observed_at":"2026-08-07T10:55:11.199820Z","submitted_at":"2025-06-04T08:13:53Z","title":"PRJ: Perception-Retrieval-Judgement for Generated Images","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T11:02:03.866331Z"},"links":{"cited_paper":"/paper/2504.14348","citing_paper":"/paper/2506.03683"},"observation_digest":"sha256:4a4ec6fa3f6ad27826a0d30bc9ac4e058c2ef6cf9198bb9f6766abea02d49725","observation_id":"fa30f3e3-9f77-4155-84c1-e2aca42e085f","resolution":{"observed_at":"2026-08-07T11:02:03.866331Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.14348","last_updated":"2025-07-27T10:12:52Z","snapshot_observed_at":"2026-07-06T21:11:58.671097Z","submitted_at":"2025-04-19T16:28:03Z","title":"Manipulating Multimodal Agents via Cross-Modal Prompt Injection","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.14348","snapshot_observed_at":"2026-08-06T16:34:04.952025Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.13169","last_updated":"2025-07-17T14:33:36Z","snapshot_observed_at":"2026-08-06T16:26:27.439425Z","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-06T16:34:04.952025Z"},"links":{"cited_paper":"/paper/2504.14348","citing_paper":"/paper/2507.13169"},"observation_digest":"sha256:912698bed19cec07ef665dc9c15048d640a6319008381a08701a265450b0af8c","observation_id":"2a247095-3659-4852-b88a-22fed94a42b8","resolution":{"observed_at":"2026-08-06T16:34:04.952025Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.14348","last_updated":"2025-07-27T10:12:52Z","snapshot_observed_at":"2026-07-06T21:11:58.671097Z","submitted_at":"2025-04-19T16:28:03Z","title":"Manipulating Multimodal Agents via Cross-Modal Prompt Injection","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.14348","snapshot_observed_at":"2026-08-06T15:42:37.809088Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.17934","last_updated":"2025-07-21T04:30:50Z","snapshot_observed_at":"2026-08-06T15:34:44.763343Z","submitted_at":"2025-07-21T04:30:50Z","title":"Multimodal Fine-grained Reasoning for Post Quality Evaluation","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-06T15:42:37.809088Z"},"links":{"cited_paper":"/paper/2504.14348","citing_paper":"/paper/2507.17934"},"observation_digest":"sha256:108755cb13ae3a5f5bcc4de5db4c51d1c353b6a31c74832af515392920599330","observation_id":"47fbc2ab-ed6f-472e-9737-6e132ed1068d","resolution":{"observed_at":"2026-08-06T15:42:37.809088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.14348","last_updated":"2025-07-27T10:12:52Z","snapshot_observed_at":"2026-07-06T21:11:58.671097Z","submitted_at":"2025-04-19T16:28:03Z","title":"Manipulating Multimodal Agents via Cross-Modal Prompt Injection","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.14348","snapshot_observed_at":"2026-08-06T12:52:01.473903Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.21407","last_updated":"2025-08-30T06:01:56Z","snapshot_observed_at":"2026-08-06T14:56:46.143908Z","submitted_at":"2025-07-29T00:27:12Z","title":"Graph-Augmented Large Language Model Agents: Current Progress and Future Prospects","version":2},"reference_index":54,"source":"arxiv_source","source_observed_at":"2026-08-06T12:52:01.473903Z"},"links":{"cited_paper":"/paper/2504.14348","citing_paper":"/paper/2507.21407"},"observation_digest":"sha256:8aa8cc7edeb5138aa1688d58dd15988e041b71a2041104ec45e2421cf88dd3fa","observation_id":"985a0ac5-07aa-41fc-9303-ff35510a7f03","resolution":{"observed_at":"2026-08-06T12:52:01.473903Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.14348","last_updated":"2025-07-27T10:12:52Z","snapshot_observed_at":"2026-07-06T21:11:58.671097Z","submitted_at":"2025-04-19T16:28:03Z","title":"Manipulating Multimodal Agents via Cross-Modal Prompt Injection","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.14348","snapshot_observed_at":"2026-08-04T23:49:33.164739Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2509.06350","last_updated":"2026-01-27T23:14:36Z","snapshot_observed_at":"2026-08-04T23:49:28.733609Z","submitted_at":"2025-09-08T05:45:37Z","title":"Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks?","version":2},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-04T23:49:33.164739Z"},"links":{"cited_paper":"/paper/2504.14348","citing_paper":"/paper/2509.06350"},"observation_digest":"sha256:0caf2aa0cb24c657a3803052a6bc4d67829aae64f3ca44a5a1e314eddb40e0d2","observation_id":"6c994ed2-b110-4413-872c-248d9ce14731","resolution":{"observed_at":"2026-08-04T23:49:33.164739Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.14348","last_updated":"2025-07-27T10:12:52Z","snapshot_observed_at":"2026-07-06T21:11:58.671097Z","submitted_at":"2025-04-19T16:28:03Z","title":"Manipulating Multimodal Agents via Cross-Modal Prompt Injection","version":4},"cited_work":{"arxiv_id":"2504.14348","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2504.14348","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Manipulating multimodal agents via cross-modal prompt injection","venue":null,"work_id":"40d42e51-8a2d-406d-84a5-e2059d9282b3","year":2025},"citing_paper":{"arxiv_id":"2510.10073","last_updated":"2026-04-14T02:53:37Z","snapshot_observed_at":"2026-07-06T22:32:22.953630Z","submitted_at":"2025-10-11T07:18:12Z","title":"SecureWebArena: A Holistic Security Evaluation Benchmark for LVLM-based Web Agents","version":2},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-05-18T08:14:51.102085Z"},"links":{"cited_paper":"/paper/2504.14348","citing_paper":"/paper/2510.10073"},"observation_digest":"sha256:f918a7b009f29328e532843ec1a5e3f2581f8aeac799f73d72909dcde964c852","observation_id":"17fd2714-c315-4cf1-b6a5-a2de4ea56449","resolution":{"observed_at":"2026-05-18T08:16:06.490295Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.14348","last_updated":"2025-07-27T10:12:52Z","snapshot_observed_at":"2026-07-06T21:11:58.671097Z","submitted_at":"2025-04-19T16:28:03Z","title":"Manipulating Multimodal Agents via Cross-Modal Prompt Injection","version":4},"cited_work":{"arxiv_id":"2504.14348","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2504.14348","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Manipulating multimodal agents via cross-modal prompt injection","venue":null,"work_id":"40d42e51-8a2d-406d-84a5-e2059d9282b3","year":2025},"citing_paper":{"arxiv_id":"2510.23883","last_updated":"2026-04-03T16:27:34Z","snapshot_observed_at":"2026-08-02T13:42:34.526072Z","submitted_at":"2025-10-27T21:48:11Z","title":"Agentic AI Security: Threats, Defenses, Evaluation, and Open Challenges","version":3},"reference_index":79,"source":"pdf_text","source_observed_at":"2026-05-18T03:42:10.703369Z"},"links":{"cited_paper":"/paper/2504.14348","citing_paper":"/paper/2510.23883"},"observation_digest":"sha256:6dbaa85bf7f1708ebf06228fd4cc370ba3b7c5de11eb8902ea5f5908949a66dd","observation_id":"b3090f75-8209-436a-ad65-5470229fabba","resolution":{"observed_at":"2026-05-18T03:42:22.021033Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.14348","last_updated":"2025-07-27T10:12:52Z","snapshot_observed_at":"2026-07-06T21:11:58.671097Z","submitted_at":"2025-04-19T16:28:03Z","title":"Manipulating Multimodal Agents via Cross-Modal Prompt Injection","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.14348","snapshot_observed_at":"2026-08-02T08:55:49.141115Z","title":"https://arxiv.org/html/2504.14348v1","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19396","last_updated":"2026-08-02T14:07:20Z","snapshot_observed_at":"2026-08-06T23:24:50.017918Z","submitted_at":"2026-07-03T14:24:26Z","title":"CrackedPDFs: A Controlled Benchmark for Hidden Prompt Injection in PDFs","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-02T08:55:49.141115Z"},"links":{"cited_paper":"/paper/2504.14348","citing_paper":"/paper/2607.19396"},"observation_digest":"sha256:31df326552ce8acd85d6e955234f4aca500bd6a5a78f987755fc3654fb1623a2","observation_id":"e87d6b9c-7ad8-445a-9149-17b16da3537b","resolution":{"observed_at":"2026-08-02T08:55:49.141115Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.14348","last_updated":"2025-07-27T10:12:52Z","snapshot_observed_at":"2026-07-06T21:11:58.671097Z","submitted_at":"2025-04-19T16:28:03Z","title":"Manipulating Multimodal Agents via Cross-Modal Prompt Injection","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.14348","snapshot_observed_at":"2026-08-04T04:34:33.210622Z","title":"https://arxiv.org/html/2504.14348v1","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19396","last_updated":"2026-08-02T14:07:20Z","snapshot_observed_at":"2026-08-06T23:24:50.017918Z","submitted_at":"2026-07-03T14:24:26Z","title":"CrackedPDFs: A Controlled Benchmark for Hidden Prompt Injection in PDFs","version":2},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-04T04:34:33.210622Z"},"links":{"cited_paper":"/paper/2504.14348","citing_paper":"/paper/2607.19396"},"observation_digest":"sha256:f855b9f350127833164eefc24730c4600443067525429d33a2e6a96232d73e44","observation_id":"d655a8ad-6a58-4b7d-98d6-ddb8635af7b3","resolution":{"observed_at":"2026-08-04T04:34:33.210622Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.14348","last_updated":"2025-07-27T10:12:52Z","snapshot_observed_at":"2026-07-06T21:11:58.671097Z","submitted_at":"2025-04-19T16:28:03Z","title":"Manipulating Multimodal Agents via Cross-Modal Prompt Injection","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.14348","snapshot_observed_at":"2026-08-01T06:04:46.726071Z","title":"arXiv preprint arXiv:2504.14348 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.22024","last_updated":"2026-07-24T06:43:09Z","snapshot_observed_at":"2026-08-06T15:37:49.497100Z","submitted_at":"2026-07-24T06:43:09Z","title":"Agent Security Needs Redefinition through a Holistic Framework","version":1},"reference_index":294,"source":"arxiv_source","source_observed_at":"2026-08-01T06:04:46.726071Z"},"links":{"cited_paper":"/paper/2504.14348","citing_paper":"/paper/2607.22024"},"observation_digest":"sha256:d8514f3e520ac26202d6cfbccf7afa620cea12db2a2ae685e8920e2180ee4e70","observation_id":"ba1048b2-f49c-4347-bf86-b6ea76ff35b8","resolution":{"observed_at":"2026-08-01T06:04:46.726071Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2504.14348/citation-record","integrity":"/paper/2504.14348/integrity","json":"/paper/2504.14348/citation-record.json","paper":"/paper/2504.14348"},"outbound":[],"paper":{"arxiv_id":"2504.14348","last_updated":"2025-07-27T10:12:52Z","latest_version":4,"primary_category":"cs.CV","snapshot_observed_at":"2026-07-06T21:11:58.671097Z","submitted_at":"2025-04-19T16:28:03Z","title":"Manipulating Multimodal Agents via Cross-Modal Prompt Injection"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 7 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 10 inbound Pith citation observations for arXiv:2504.14348."}