{"as_of":"2026-08-18T13:19:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:4b3fcc65a75053c19cf12ceba102f0f73db8e68711314cee7b119a1a23380360","coverage":[{"denominator":11,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":11,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-16T11:51:19.347084Z","state":"measured"},{"denominator":13,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":13,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-18T06:34:40.430872+00:00","state":"measured"},{"denominator":2,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":2,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-15T22:42:00.220522Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-06-29T07:53:14.251868Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2504.16125","last_updated":"2025-04-20T05:59:00Z","snapshot_observed_at":"2026-08-16T18:35:25.416350Z","submitted_at":"2025-04-20T05:59:00Z","title":"Breaking the Prompt Wall (I): A Real-World Case Study of Attacking ChatGPT via Lightweight Prompt Injection","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.16125","snapshot_observed_at":"2026-08-15T22:42:00.220522Z","title":"Breaking the prompt wall (i): A real-world case study of attacking chatgpt via lightweight prompt injection","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.06643","last_updated":"2025-05-10T13:36:01Z","snapshot_observed_at":"2026-08-18T01:31:41.228606Z","submitted_at":"2025-05-10T13:36:01Z","title":"Practical Reasoning Interruption Attacks on Reasoning Large Language Models","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-15T22:42:00.220522Z"},"links":{"cited_paper":"/paper/2504.16125","citing_paper":"/paper/2505.06643"},"observation_digest":"sha256:311b0d85b33e98972ace45d7c56f3e601da2c87166135ca5f13e832d2f4cda68","observation_id":"16a5338f-783f-4b6c-affa-7540ac4846f9","resolution":{"observed_at":"2026-08-15T22:42:00.220522Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.16125","last_updated":"2025-04-20T05:59:00Z","snapshot_observed_at":"2026-08-16T18:35:25.416350Z","submitted_at":"2025-04-20T05:59:00Z","title":"Breaking the Prompt Wall (I): A Real-World Case Study of Attacking ChatGPT via Lightweight Prompt Injection","version":1},"cited_work":{"arxiv_id":"2504.16125","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2504.16125","snapshot_observed_at":"2026-06-29T07:53:14.251868Z","title":null,"venue":null,"work_id":"983799e9-263e-4117-b704-5f5679b45c6f","year":2025},"citing_paper":{"arxiv_id":"2605.29251","last_updated":"2026-05-28T02:12:41Z","snapshot_observed_at":"2026-07-06T23:38:41.516603Z","submitted_at":"2026-05-28T02:12:41Z","title":"Provably Secure Agent Guardrail","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-06-29T07:43:17.593344Z"},"links":{"cited_paper":"/paper/2504.16125","citing_paper":"/paper/2605.29251"},"observation_digest":"sha256:db337f8ab10758bc8a172612e97774516b1a7d17f19dfa5d7aad90f25bf66acf","observation_id":"e2bc39bf-1d4f-4427-8be6-76205425af09","resolution":{"observed_at":"2026-06-29T07:53:14.253813Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2504.16125/citation-record","integrity":"/paper/2504.16125/integrity","json":"/paper/2504.16125/citation-record.json","paper":"/paper/2504.16125"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2404.02151","last_updated":"2025-04-17T18:55:45Z","snapshot_observed_at":"2026-08-16T14:04:12.947538Z","submitted_at":"2024-04-02T17:58:27Z","title":"Jailbreaking Leading Safety-Aligned LLMs with Simple Adaptive Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.02151","snapshot_observed_at":"2026-08-16T11:51:19.294095Z","title":"Jailbreaking leading safety-aligned llms with simple adaptive attacks","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2504.16125","last_updated":"2025-04-20T05:59:00Z","snapshot_observed_at":"2026-08-16T18:35:25.416350Z","submitted_at":"2025-04-20T05:59:00Z","title":"Breaking the Prompt Wall (I): A Real-World Case Study of Attacking ChatGPT via Lightweight Prompt Injection","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-16T11:51:19.294095Z"},"links":{"cited_paper":"/paper/2404.02151","citing_paper":"/paper/2504.16125"},"observation_digest":"sha256:7a4f56348257a2c0b6500be34cf38e3292d0b900fb83719ed02e75067b4f983e","observation_id":"42914bb6-783b-4be7-bff1-cd4e6e2ba38e","resolution":{"observed_at":"2026-08-16T11:51:19.294095Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2501.12948","last_updated":"2026-01-04T03:57:36Z","snapshot_observed_at":"2026-08-15T12:33:55.451951Z","submitted_at":"2025-01-22T15:19:35Z","title":"DeepSeek-R1: Incentivizing Reasoning Capability in LLMs via Reinforcement Learning","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.12948","snapshot_observed_at":"2026-08-16T11:51:19.300489Z","title":"Deepseek-r1: Incentivizing reasoning capability in llms via reinforcement learning","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2504.16125","last_updated":"2025-04-20T05:59:00Z","snapshot_observed_at":"2026-08-16T18:35:25.416350Z","submitted_at":"2025-04-20T05:59:00Z","title":"Breaking the Prompt Wall (I): A Real-World Case Study of Attacking ChatGPT via Lightweight Prompt Injection","version":1},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-16T11:51:19.300489Z"},"links":{"cited_paper":"/paper/2501.12948","citing_paper":"/paper/2504.16125"},"observation_digest":"sha256:aacaf7c3c5269ebd1893ed598bf9a6a30da8dc8422fe0a133737dbd232c0b8b8","observation_id":"1d91d227-ed24-4d42-a1ed-fec5097fcf60","resolution":{"observed_at":"2026-08-16T11:51:19.300489Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:51:19.678624Z","title":"Proadvprompter: A two-stage journey to effective adversarial prompting for llms","venue":null,"work_id":"0c6cfd31-9c35-43b9-b839-e08bb089a012","year":2025},"citing_paper":{"arxiv_id":"2504.16125","last_updated":"2025-04-20T05:59:00Z","snapshot_observed_at":"2026-08-16T18:35:25.416350Z","submitted_at":"2025-04-20T05:59:00Z","title":"Breaking the Prompt Wall (I): A Real-World Case Study of Attacking ChatGPT via Lightweight Prompt Injection","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-16T11:51:19.305523Z"},"links":{"citing_paper":"/paper/2504.16125"},"observation_digest":"sha256:6fdee2bed43f8fe28020e90788b62002e169055ec44bb75c06925a5abe3c16d3","observation_id":"6d86aba4-ad65-4b83-8b26-c6910b1224b6","resolution":{"observed_at":"2026-08-16T11:51:19.684368Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:51:19.310480Z","title":"Not what you've signed up for: Compromising real-world llm-integrated applications with indirect prompt injection","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2504.16125","last_updated":"2025-04-20T05:59:00Z","snapshot_observed_at":"2026-08-16T18:35:25.416350Z","submitted_at":"2025-04-20T05:59:00Z","title":"Breaking the Prompt Wall (I): A Real-World Case Study of Attacking ChatGPT via Lightweight Prompt Injection","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-16T11:51:19.310480Z"},"links":{"citing_paper":"/paper/2504.16125"},"observation_digest":"sha256:56f1646f31545046ba8f8991926517bfdf59a71fe4f65d02133337252b756607","observation_id":"a27606d8-1141-469e-bafe-a4b2e1e093bb","resolution":{"observed_at":"2026-08-16T11:51:19.310480Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.05206","last_updated":"2026-04-14T16:10:41Z","snapshot_observed_at":"2026-08-15T21:07:34.234107Z","submitted_at":"2025-02-02T05:14:22Z","title":"Safety at Scale: A Comprehensive Survey of Large Model and Agent Safety","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.05206","snapshot_observed_at":"2026-08-16T11:51:19.315822Z","title":"Safety at scale: A comprehensive survey of large model safety","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2504.16125","last_updated":"2025-04-20T05:59:00Z","snapshot_observed_at":"2026-08-16T18:35:25.416350Z","submitted_at":"2025-04-20T05:59:00Z","title":"Breaking the Prompt Wall (I): A Real-World Case Study of Attacking ChatGPT via Lightweight Prompt Injection","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-16T11:51:19.315822Z"},"links":{"cited_paper":"/paper/2502.05206","citing_paper":"/paper/2504.16125"},"observation_digest":"sha256:1d64aea62af2be4e6202f4e4dbca6ea5e4d36b3bde9d4bd83d6f44b234775f79","observation_id":"2cdc0751-ebd9-42b3-831c-9a1c4771744f","resolution":{"observed_at":"2026-08-16T11:51:19.315822Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:51:19.661236Z","title":"Gpt-4 technical report","venue":null,"work_id":"d26d65d4-ce52-4d42-b2fc-f06c37f5798f","year":2023},"citing_paper":{"arxiv_id":"2504.16125","last_updated":"2025-04-20T05:59:00Z","snapshot_observed_at":"2026-08-16T18:35:25.416350Z","submitted_at":"2025-04-20T05:59:00Z","title":"Breaking the Prompt Wall (I): A Real-World Case Study of Attacking ChatGPT via Lightweight Prompt Injection","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-16T11:51:19.321047Z"},"links":{"citing_paper":"/paper/2504.16125"},"observation_digest":"sha256:9918aab93fdd26bf6318c07be83aec8378a7d5512b2d64fdc854481b937ff4e1","observation_id":"6b74f87d-3394-4c08-9711-99747329ae11","resolution":{"observed_at":"2026-08-16T11:51:19.667174Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.09737","last_updated":"2025-04-13T22:01:25Z","snapshot_observed_at":"2026-08-16T12:41:33.588838Z","submitted_at":"2025-04-13T22:01:25Z","title":"Can LLM feedback enhance review quality? A randomized study of 20K reviews at ICLR 2025","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.09737","snapshot_observed_at":"2026-08-16T11:51:19.326275Z","title":"Can llm feedback enhance review quality? a randomized study of 20k reviews at iclr 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2504.16125","last_updated":"2025-04-20T05:59:00Z","snapshot_observed_at":"2026-08-16T18:35:25.416350Z","submitted_at":"2025-04-20T05:59:00Z","title":"Breaking the Prompt Wall (I): A Real-World Case Study of Attacking ChatGPT via Lightweight Prompt Injection","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-16T11:51:19.326275Z"},"links":{"cited_paper":"/paper/2504.09737","citing_paper":"/paper/2504.16125"},"observation_digest":"sha256:5934d4955825265b1a12062a47c2d4051b75f9b2de2a7a5e53c44e39d0b643d8","observation_id":"155949d7-f206-41f0-ad84-bccad8100678","resolution":{"observed_at":"2026-08-16T11:51:19.326275Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2302.13971","last_updated":"2023-02-27T17:11:15Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-02-27T17:11:15Z","title":"LLaMA: Open and Efficient Foundation Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2302.13971","snapshot_observed_at":"2026-08-16T11:51:19.331250Z","title":"Llama: Open and efficient foundation language models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2504.16125","last_updated":"2025-04-20T05:59:00Z","snapshot_observed_at":"2026-08-16T18:35:25.416350Z","submitted_at":"2025-04-20T05:59:00Z","title":"Breaking the Prompt Wall (I): A Real-World Case Study of Attacking ChatGPT via Lightweight Prompt Injection","version":1},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-16T11:51:19.331250Z"},"links":{"cited_paper":"/paper/2302.13971","citing_paper":"/paper/2504.16125"},"observation_digest":"sha256:74ec4e2d783efa69135918a10d4f55be4c7160bd8df6e3e33df633414b037008","observation_id":"1090ee2b-dafc-4d09-b139-2ec4d5d11e4a","resolution":{"observed_at":"2026-08-16T11:51:19.331250Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2303.17564","last_updated":"2023-12-21T06:21:11Z","snapshot_observed_at":"2026-08-14T12:54:48.492396Z","submitted_at":"2023-03-30T17:30:36Z","title":"BloombergGPT: A Large Language Model for Finance","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.17564","snapshot_observed_at":"2026-08-16T11:51:19.336394Z","title":"Bloomberggpt: A large language model for finance","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2504.16125","last_updated":"2025-04-20T05:59:00Z","snapshot_observed_at":"2026-08-16T18:35:25.416350Z","submitted_at":"2025-04-20T05:59:00Z","title":"Breaking the Prompt Wall (I): A Real-World Case Study of Attacking ChatGPT via Lightweight Prompt Injection","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-16T11:51:19.336394Z"},"links":{"cited_paper":"/paper/2303.17564","citing_paper":"/paper/2504.16125"},"observation_digest":"sha256:db76589630a6437297fdf6e2053349b8b1ff4fd2bd46919adb3ee19a11269264","observation_id":"1f125c16-4690-4113-bb8d-174f11e7d900","resolution":{"observed_at":"2026-08-16T11:51:19.336394Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:51:19.341554Z","title":"Fingpt: Open-source financial large language models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2504.16125","last_updated":"2025-04-20T05:59:00Z","snapshot_observed_at":"2026-08-16T18:35:25.416350Z","submitted_at":"2025-04-20T05:59:00Z","title":"Breaking the Prompt Wall (I): A Real-World Case Study of Attacking ChatGPT via Lightweight Prompt Injection","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-16T11:51:19.341554Z"},"links":{"citing_paper":"/paper/2504.16125"},"observation_digest":"sha256:014b4b3063fd23e42801a583a2d0b27b55c536721048d2e26fe8e494208d4b29","observation_id":"dd659707-9fc2-4a6c-a885-baf3b9b2cc54","resolution":{"observed_at":"2026-08-16T11:51:19.341554Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.01708","last_updated":"2024-12-02T16:55:03Z","snapshot_observed_at":"2026-08-16T13:00:37.847564Z","submitted_at":"2024-12-02T16:55:03Z","title":"Are We There Yet? Revealing the Risks of Utilizing Large Language Models in Scholarly Peer Review","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.01708","snapshot_observed_at":"2026-08-16T11:51:19.347084Z","title":"Are we there yet? revealing the risks of utilizing large language models in scholarly peer review","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2504.16125","last_updated":"2025-04-20T05:59:00Z","snapshot_observed_at":"2026-08-16T18:35:25.416350Z","submitted_at":"2025-04-20T05:59:00Z","title":"Breaking the Prompt Wall (I): A Real-World Case Study of Attacking ChatGPT via Lightweight Prompt Injection","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-16T11:51:19.347084Z"},"links":{"cited_paper":"/paper/2412.01708","citing_paper":"/paper/2504.16125"},"observation_digest":"sha256:15fb328714d17859b1cc866cad2cf8d3949795207e6f69926ec4354a39d1c8fb","observation_id":"d9b89c34-37b7-4eea-8444-dd10820ef57a","resolution":{"observed_at":"2026-08-16T11:51:19.347084Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2504.16125","last_updated":"2025-04-20T05:59:00Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-16T18:35:25.416350Z","submitted_at":"2025-04-20T05:59:00Z","title":"Breaking the Prompt Wall (I): A Real-World Case Study of Attacking ChatGPT via Lightweight Prompt Injection"},"reference_resolution":{"displayed":11,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":9,"verified_exact":0,"verified_fuzzy":2},"total_outbound_references":11},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"thesis":"As of 18 August 2026, this Paper Citation Record lists 11 of 11 outbound references and 2 inbound Pith citation observations for arXiv:2504.16125."}