Paper Citation Record · LEDGER

OET: Optimization-based prompt injection Evaluation Toolkit

As of 17 August 2026, this Paper Citation Record lists 30 of 30 outbound references and 2 inbound Pith citation observations for arXiv:2505.00843.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2505.00843 v1

Coverage vector

measured 30 of 30 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-16T04:38:39.701686Z

measured 32 of 32 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-17T06:30:58.91139+00:00

measured 2 of 2 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-08-07T10:30:14.284471Z

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: arxiv_reference, observed 2026-07-03T06:17:41.897796Z

Reference resolution

30 of 30 outbound references displayed

verified exact1
verified fuzzy0
unresolved28
parse uncertain0
malformed identifier1
metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation 2b50062e-16b0-477a-833b-d26e5bb769a7 · outbound

This paper cites Jailbreaking Black Box Large Language Models in Twenty Queries.

OET: Optimization-based prompt injection Evaluation Toolkit Jailbreaking Black Box Large Language Models in Twenty Queries

Reference 4

Resolution: unresolved; no resolver link, observed 2026-08-16T04:38:39.294695Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation e7c1170b-fa30-47c5-8ca8-36d4fe4c9503 · outbound

This paper cites SecAlign: Defending Against Prompt Injection with Preference Optimization.

OET: Optimization-based prompt injection Evaluation Toolkit SecAlign: Defending Against Prompt Injection with Preference Optimization

Reference 5

Resolution: unresolved; no resolver link, observed 2026-08-16T04:38:39.301351Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation d11c2963-3eff-4c48-aefa-488e53718a3c · outbound

This paper cites The Llama 3 Herd of Models.

OET: Optimization-based prompt injection Evaluation Toolkit The Llama 3 Herd of Models

Reference 8

Resolution: unresolved; no resolver link, observed 2026-08-16T04:38:39.323097Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 4d6006f2-0e8f-4cfe-9107-a73599998ffc · outbound

This paper cites Attacking Large Language Models with Projected Gradient Descent.

OET: Optimization-based prompt injection Evaluation Toolkit Attacking Large Language Models with Projected Gradient Descent

Reference 9

Resolution: unresolved; no resolver link, observed 2026-08-16T04:38:39.361751Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 28c559f0-be82-4119-b624-c85f8fa41fb6 · outbound

This paper cites GPT-4o System Card.

OET: Optimization-based prompt injection Evaluation Toolkit GPT-4o System Card

Reference 10

Resolution: unresolved; no resolver link, observed 2026-08-16T04:38:39.384048Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 0bbce21e-25d1-402f-8516-961b96ee7259 · outbound

This paper cites An In-Depth Investigation of Data Collection in LLM App Ecosystems.

OET: Optimization-based prompt injection Evaluation Toolkit An In-Depth Investigation of Data Collection in LLM App Ecosystems

Reference 11

Resolution: unresolved; no resolver link, observed 2026-08-16T04:38:39.393918Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 91770c3a-9538-4f21-a3c3-b4ce00af6187 · outbound

This paper cites PromptKeeper: Safeguarding System Prompts for LLMs.

OET: Optimization-based prompt injection Evaluation Toolkit PromptKeeper: Safeguarding System Prompts for LLMs

Reference 12

Resolution: unresolved; no resolver link, observed 2026-08-16T04:38:39.403909Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 5b8937d3-e613-44c6-934d-f308ef9ba314 · outbound

This paper cites PubMedQA: A Dataset for Biomedical Research Question Answering.

OET: Optimization-based prompt injection Evaluation Toolkit PubMedQA: A Dataset for Biomedical Research Question Answering

Reference 13

Resolution: unresolved; no resolver link, observed 2026-08-16T04:38:39.412780Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 1c2185b1-cb18-406f-867a-31f9d347feec · outbound

This paper cites Challenges and Applications of Large Language Models.

OET: Optimization-based prompt injection Evaluation Toolkit Challenges and Applications of Large Language Models

Reference 15

Resolution: unresolved; no resolver link, observed 2026-08-16T04:38:39.428367Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 93ba8093-4ea3-4627-93e1-4a251d14ac48 · outbound

This paper cites Automatic and Universal Prompt Injection Attacks against Large Language Models.

OET: Optimization-based prompt injection Evaluation Toolkit Automatic and Universal Prompt Injection Attacks against Large Language Models

Reference 16

Resolution: unresolved; no resolver link, observed 2026-08-16T04:38:39.435643Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation f6b4a58d-65c1-493d-958c-8d4c6907811e · outbound

This paper cites Neural Exec: Learning (and Learning from) Execution Triggers for Prompt Injection Attacks.

OET: Optimization-based prompt injection Evaluation Toolkit Neural Exec: Learning (and Learning from) Execution Triggers for Prompt Injection Attacks

Reference 17

Resolution: unresolved; no resolver link, observed 2026-08-16T04:38:39.445465Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 88bf41f4-09ff-4047-be4d-4c77132eef77 · outbound

This paper cites Jatmo: Prompt Injection Defense by Task-Specific Finetuning.

OET: Optimization-based prompt injection Evaluation Toolkit Jatmo: Prompt Injection Defense by Task-Specific Finetuning

Reference 18

Resolution: unresolved; no resolver link, observed 2026-08-16T04:38:39.454277Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 4b864b20-42ff-4155-8efe-17e02ce98383 · outbound

This paper cites doi: 10.2196/58478.

OET: Optimization-based prompt injection Evaluation Toolkit doi: 10.2196/58478

Reference 20

Resolution: malformed identifier; doi_truncated, observed 2026-08-16T04:38:39.761703Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation c6d96c42-e40a-4a5d-8c60-377f42a243d0 · outbound

This paper cites Survey of Vulnerabilities in Large Language Models Revealed by Adversarial Attacks.

OET: Optimization-based prompt injection Evaluation Toolkit Survey of Vulnerabilities in Large Language Models Revealed by Adversarial Attacks

Reference 21

Resolution: unresolved; no resolver link, observed 2026-08-16T04:38:39.478848Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation d70cbd30-f06f-4016-8cd8-9ac2f89aa61d · outbound

This paper cites Optimization-based Prompt Injection Attack to LLM-as-a-Judge.

OET: Optimization-based prompt injection Evaluation Toolkit Optimization-based Prompt Injection Attack to LLM-as-a-Judge

Reference 22

Resolution: unresolved; no resolver link, observed 2026-08-16T04:38:39.485121Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation c670c1e8-1771-4234-950e-564cd0c39fc5 · outbound

This paper cites an unresolved cited work.

OET: Optimization-based prompt injection Evaluation Toolkit Unresolved cited work

Reference 23

Resolution: unresolved; no resolver link, observed 2026-08-16T04:38:39.494803Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 3286b078-3abc-452d-83c2-9b6aecf5dad5 · outbound

This paper cites LLaMA: Open and Efficient Foundation Language Models.

OET: Optimization-based prompt injection Evaluation Toolkit LLaMA: Open and Efficient Foundation Language Models

Reference 24

Resolution: unresolved; no resolver link, observed 2026-08-16T04:38:39.500777Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 201ee514-84cf-4300-9be3-01715e318968 · outbound

This paper cites Universal Adversarial Triggers for Attacking and Analyzing NLP.

OET: Optimization-based prompt injection Evaluation Toolkit Universal Adversarial Triggers for Attacking and Analyzing NLP

Reference 25

Resolution: unresolved; no resolver link, observed 2026-08-16T04:38:39.537808Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation cada5f55-9ebe-44ae-a3a8-28c3dd4facc8 · outbound

This paper cites FATH: Authentication-based Test-time Defense against Indirect Prompt Injection Attacks.

OET: Optimization-based prompt injection Evaluation Toolkit FATH: Authentication-based Test-time Defense against Indirect Prompt Injection Attacks

Reference 26

Resolution: unresolved; no resolver link, observed 2026-08-16T04:38:39.612688Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation fc447187-6cb3-4f18-ab66-ad417f98a79b · outbound

This paper cites Hard Prompts Made Easy: Gradient-Based Discrete Optimization for Prompt Tuning and Discovery.

OET: Optimization-based prompt injection Evaluation Toolkit Hard Prompts Made Easy: Gradient-Based Discrete Optimization for Prompt Tuning and Discovery

Reference 27

Resolution: unresolved; no resolver link, observed 2026-08-16T04:38:39.648458Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 5fbafc03-eb61-48c1-bfee-9862621488c4 · outbound

This paper cites Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models.

OET: Optimization-based prompt injection Evaluation Toolkit Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models

Reference 28

Resolution: unresolved; no resolver link, observed 2026-08-16T04:38:39.677783Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 053d531d-c8c9-478e-bc3b-a3cb9c4514c3 · outbound

This paper cites Robust Prompt Optimization for Defending Language Models Against Jailbreaking Attacks.

OET: Optimization-based prompt injection Evaluation Toolkit Robust Prompt Optimization for Defending Language Models Against Jailbreaking Attacks

Reference 29

Resolution: unresolved; no resolver link, observed 2026-08-16T04:38:39.694018Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation faefc683-3cf1-49b0-b704-8c3122ee5b9a · outbound

This paper cites Universal and Transferable Adversarial Attacks on Aligned Language Models.

OET: Optimization-based prompt injection Evaluation Toolkit Universal and Transferable Adversarial Attacks on Aligned Language Models

Reference 30

Resolution: unresolved; no resolver link, observed 2026-08-16T04:38:39.701686Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation bb12b6a1-beaa-4d2d-96bc-53e1708c53a6 · outbound

This paper cites SQuAD: 100,000+ Questions for Machine Comprehension of Text.

OET: Optimization-based prompt injection Evaluation Toolkit SQuAD: 100,000+ Questions for Machine Comprehension of Text

Reference 2016

Resolution: unresolved; no resolver link, observed 2026-08-16T04:38:39.461017Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 5dd833e8-7dd8-4637-9536-08c7a3e15998 · outbound

This paper cites doi: 10.18653/v1/P17-1147.

OET: Optimization-based prompt injection Evaluation Toolkit doi: 10.18653/v1/P17-1147

Reference 2017

Resolution: unresolved; no resolver link, observed 2026-08-16T04:38:39.419974Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation c39d7328-576e-4c46-bbf3-4caea2e1926c · outbound

This paper cites On Evaluating Adversarial Robustness.

OET: Optimization-based prompt injection Evaluation Toolkit On Evaluating Adversarial Robustness

Reference 2019

Resolution: unresolved; no resolver link, observed 2026-08-16T04:38:39.287874Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 7bdd038e-5a4f-4d5f-b4b6-f643a208d7ff · outbound

This paper cites FinQA: A Dataset of Numerical Reasoning over Financial Data.

OET: Optimization-based prompt injection Evaluation Toolkit FinQA: A Dataset of Numerical Reasoning over Financial Data

Reference 2021

Resolution: unresolved; no resolver link, observed 2026-08-16T04:38:39.307855Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ea5751c4-d577-4361-98a6-42b643dbda6d · outbound

This paper cites AgentDojo: A Dynamic Environment to Evaluate Prompt Injection Attacks and Defenses for LLM Agents.

OET: Optimization-based prompt injection Evaluation Toolkit AgentDojo: A Dynamic Environment to Evaluate Prompt Injection Attacks and Defenses for LLM Agents

Reference 2023

Resolution: unresolved; no resolver link, observed 2026-08-16T04:38:39.315172Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 1ec05193-af83-4686-b44e-c33464fa9278 · outbound

This paper cites AQuA -- Combining Experts' and Non-Experts' Views To Assess Deliberation Quality in Online Discussions Using LLMs.

OET: Optimization-based prompt injection Evaluation Toolkit AQuA -- Combining Experts' and Non-Experts' Views To Assess Deliberation Quality in Online Discussions Using LLMs

Reference 2024

Resolution: verified exact; local_arxiv, observed 2026-08-16T04:38:40.525286Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 71080d02-5928-4413-afa1-2dedb0d76039 · outbound

This paper cites Get my drift? Catching LLM Task Drift with Activation Deltas.

OET: Optimization-based prompt injection Evaluation Toolkit Get my drift? Catching LLM Task Drift with Activation Deltas

Reference 2025

Resolution: unresolved; no resolver link, observed 2026-08-16T04:38:39.272991Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Pith citing papers

Observation 533e6e12-6ca0-4dc5-a089-090fc9c83eed · inbound

Sentinel: SOTA model to protect against prompt injections cites this paper.

Sentinel: SOTA model to protect against prompt injections OET: Optimization-based prompt injection Evaluation Toolkit

Reference 33

Resolution: unresolved; no resolver link, observed 2026-08-07T10:30:14.284471Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 7f679763-cc3a-4c24-8125-049799287f05 · inbound

Assessing Automated Prompt Injection Attacks in Agentic Environments cites this paper.

Assessing Automated Prompt Injection Attacks in Agentic Environments OET: Optimization-based prompt injection Evaluation Toolkit

Reference 33

Resolution: verified exact; arxiv_id, observed 2026-07-03T06:17:41.899803Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.