{"as_of":"2026-08-08T21:58:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:63937c5792a71cded81b1bb8848a4a5392b30ca2ae78bebb4838959303ad14e2","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":17,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":17,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":17,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":17,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T05:25:42.450138Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":1,"source":"arxiv_reference","source_observed_at":"2026-08-05T02:28:24.338817Z","state":"measured"}],"external_citation_measurements":[{"count":0,"observed_at":"2026-08-05T02:28:24.338817Z","source":"arxiv_reference"}],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2505.04806","last_updated":"2025-05-13T05:36:34Z","snapshot_observed_at":"2026-08-08T20:41:26.386035Z","submitted_at":"2025-05-07T21:15:40Z","title":"Red Teaming the Mind of the Machine: A Systematic Evaluation of Prompt Injection and Jailbreak Vulnerabilities in LLMs","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.04806","snapshot_observed_at":"2026-08-07T05:25:42.450138Z","title":"Red Teaming the Mind of the Machine: A Systematic Evalua- tion of Prompt Injection and Jailbreak Vulnerabilities in LLMs","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.07974","last_updated":"2025-06-09T17:49:04Z","snapshot_observed_at":"2026-08-07T05:18:55.977128Z","submitted_at":"2025-06-09T17:49:04Z","title":"Exposing Hidden Backdoors in NFT Smart Contracts: A Static Security Analysis of Rug Pull Patterns","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-07T05:25:42.450138Z"},"links":{"cited_paper":"/paper/2505.04806","citing_paper":"/paper/2506.07974"},"observation_digest":"sha256:72b220bd81c51d32735f679c351a767c55b77412f8df916623728b13515ea485","observation_id":"04941d1a-7427-48ec-a832-4c17fd59af40","resolution":{"observed_at":"2026-08-07T05:25:42.450138Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.04806","last_updated":"2025-05-13T05:36:34Z","snapshot_observed_at":"2026-08-08T20:41:26.386035Z","submitted_at":"2025-05-07T21:15:40Z","title":"Red Teaming the Mind of the Machine: A Systematic Evaluation of Prompt Injection and Jailbreak Vulnerabilities in LLMs","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.04806","snapshot_observed_at":"2026-08-06T21:34:45.015831Z","title":"Red teaming the mind of the machine: A systematic evaluation of prompt injection and jailbreak vulnerabilities in llms,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":99,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:45.015831Z"},"links":{"cited_paper":"/paper/2505.04806","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:275d6d580e364eac73dc70075335ce9b99ca22cf79108267721dcd252bd31ed3","observation_id":"b4282a96-6bb9-4961-b94c-0cb55c1f85d4","resolution":{"observed_at":"2026-08-06T21:34:45.015831Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.04806","last_updated":"2025-05-13T05:36:34Z","snapshot_observed_at":"2026-08-08T20:41:26.386035Z","submitted_at":"2025-05-07T21:15:40Z","title":"Red Teaming the Mind of the Machine: A Systematic Evaluation of Prompt Injection and Jailbreak Vulnerabilities in LLMs","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.04806","snapshot_observed_at":"2026-08-06T19:56:05.267094Z","title":"Pathadeet al., Red teaming the mind of the machine: Asystematicevaluationofpromptinjectionandjailbreak vulnerabilities in LLMs, arXiv preprint arXiv:2505.04806 (2025)","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.08014","last_updated":"2025-07-06T08:41:30Z","snapshot_observed_at":"2026-08-06T19:48:50.296360Z","submitted_at":"2025-07-06T08:41:30Z","title":"Mass-Scale Analysis of In-the-Wild Conversations Reveals Complexity Bounds on LLM Jailbreaking","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-06T19:56:05.267094Z"},"links":{"cited_paper":"/paper/2505.04806","citing_paper":"/paper/2507.08014"},"observation_digest":"sha256:479af68613956234c5fd28759ade07994a189318d1e7c00da88e14c4e2b0134e","observation_id":"f06f63dd-10ab-4e04-a6d4-df2ba5aebb24","resolution":{"observed_at":"2026-08-06T19:56:05.267094Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.04806","last_updated":"2025-05-13T05:36:34Z","snapshot_observed_at":"2026-08-08T20:41:26.386035Z","submitted_at":"2025-05-07T21:15:40Z","title":"Red Teaming the Mind of the Machine: A Systematic Evaluation of Prompt Injection and Jailbreak Vulnerabilities in LLMs","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.04806","snapshot_observed_at":"2026-08-05T11:00:38.221707Z","title":"Red teaming the mind of the machine: A systematic evaluation of prompt injection and jailbreak vulnerabilities in llms","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2509.03383","last_updated":"2025-09-03T15:00:28Z","snapshot_observed_at":"2026-08-08T06:25:51.743398Z","submitted_at":"2025-09-03T15:00:28Z","title":"ANNIE: Be Careful of Your Robots","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-05T11:00:38.221707Z"},"links":{"cited_paper":"/paper/2505.04806","citing_paper":"/paper/2509.03383"},"observation_digest":"sha256:111f0adc042539b38d5ed8fd0e3280bbbc18f23bc7fb33e25cdec40b4de4c410","observation_id":"f9984e62-8605-4ef4-8134-5a73f9b6d88a","resolution":{"observed_at":"2026-08-05T11:00:38.221707Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.04806","last_updated":"2025-05-13T05:36:34Z","snapshot_observed_at":"2026-08-08T20:41:26.386035Z","submitted_at":"2025-05-07T21:15:40Z","title":"Red Teaming the Mind of the Machine: A Systematic Evaluation of Prompt Injection and Jailbreak Vulnerabilities in LLMs","version":2},"cited_work":{"arxiv_id":"2505.04806","doi":"10.48550/arxiv.2505.04806","metadata_source":"arxiv_reference","pith_arxiv_id":"2505.04806","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2505.04806 , year=","venue":"ArXiv.org","work_id":"8c37b5cc-babf-49e8-a3f7-f1da999127bc","year":2025},"citing_paper":{"arxiv_id":"2512.21110","last_updated":"2026-04-24T20:27:34Z","snapshot_observed_at":"2026-07-06T22:39:58.137482Z","submitted_at":"2025-12-24T11:15:57Z","title":"Beyond Context: Large Language Models' Failure to Grasp Users' Intent","version":3},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-05-16T20:09:25.827452Z"},"links":{"cited_paper":"/paper/2505.04806","citing_paper":"/paper/2512.21110"},"observation_digest":"sha256:bf38c957316228e26114dad21d7b331f1a45ed6f8ec294cf17aaa0da983d51a2","observation_id":"4915318a-e3b8-4ea4-8341-f944fe4a7c5b","resolution":{"observed_at":"2026-05-16T20:11:13.575849Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.04806","last_updated":"2025-05-13T05:36:34Z","snapshot_observed_at":"2026-08-08T20:41:26.386035Z","submitted_at":"2025-05-07T21:15:40Z","title":"Red Teaming the Mind of the Machine: A Systematic Evaluation of Prompt Injection and Jailbreak Vulnerabilities in LLMs","version":2},"cited_work":{"arxiv_id":"2505.04806","doi":"10.48550/arxiv.2505.04806","metadata_source":"arxiv_reference","pith_arxiv_id":"2505.04806","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2505.04806 , year=","venue":"ArXiv.org","work_id":"8c37b5cc-babf-49e8-a3f7-f1da999127bc","year":2025},"citing_paper":{"arxiv_id":"2601.22569","last_updated":"2026-05-18T21:06:40Z","snapshot_observed_at":"2026-08-04T06:31:01.746171Z","submitted_at":"2026-01-30T05:10:16Z","title":"Whispers of Wealth: Red-Teaming Google's Agent Payments Protocol via Prompt Injection","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-05-21T15:18:58.274360Z"},"links":{"cited_paper":"/paper/2505.04806","citing_paper":"/paper/2601.22569"},"observation_digest":"sha256:35f4464b654b0cc2bdb2a4d64ed6a32546187b271d24d484962dd9532034311b","observation_id":"267ac4c7-1726-48ad-87cc-fe52b623d097","resolution":{"observed_at":"2026-05-21T15:20:17.397162Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.04806","last_updated":"2025-05-13T05:36:34Z","snapshot_observed_at":"2026-08-08T20:41:26.386035Z","submitted_at":"2025-05-07T21:15:40Z","title":"Red Teaming the Mind of the Machine: A Systematic Evaluation of Prompt Injection and Jailbreak Vulnerabilities in LLMs","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.04806","snapshot_observed_at":"2026-07-13T14:38:58.879673Z","title":"Available: https://arxiv.org/abs/2505.04806","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2604.01039","last_updated":"2026-06-05T19:49:24Z","snapshot_observed_at":"2026-08-07T20:47:26.471296Z","submitted_at":"2026-04-01T15:45:56Z","title":"Automated Framework to Evaluate and Harden LLM System Instructions against Encoding Attacks","version":2},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-07-13T14:38:58.879673Z"},"links":{"cited_paper":"/paper/2505.04806","citing_paper":"/paper/2604.01039"},"observation_digest":"sha256:d6adb8bb060975023627ea6d4328f11921c331300de74806e9114301111326e9","observation_id":"acb0caf6-b910-471d-bc89-14b628f3f354","resolution":{"observed_at":"2026-07-13T14:38:58.879673Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.04806","last_updated":"2025-05-13T05:36:34Z","snapshot_observed_at":"2026-08-08T20:41:26.386035Z","submitted_at":"2025-05-07T21:15:40Z","title":"Red Teaming the Mind of the Machine: A Systematic Evaluation of Prompt Injection and Jailbreak Vulnerabilities in LLMs","version":2},"cited_work":{"arxiv_id":"2505.04806","doi":"10.48550/arxiv.2505.04806","metadata_source":"arxiv_reference","pith_arxiv_id":"2505.04806","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2505.04806 , year=","venue":"ArXiv.org","work_id":"8c37b5cc-babf-49e8-a3f7-f1da999127bc","year":2025},"citing_paper":{"arxiv_id":"2604.19657","last_updated":"2026-04-21T16:45:30Z","snapshot_observed_at":"2026-07-06T23:06:16.972438Z","submitted_at":"2026-04-21T16:45:30Z","title":"An AI Agent Execution Environment to Safeguard User Data","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-05-10T02:14:40.639143Z"},"links":{"cited_paper":"/paper/2505.04806","citing_paper":"/paper/2604.19657"},"observation_digest":"sha256:1e46999a88dd8870cd013e00e4df4b78c9299ca50498f866da671dca3d0b4688","observation_id":"8658f980-8186-4615-b11b-930412589c82","resolution":{"observed_at":"2026-05-11T13:11:05.891404Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.04806","last_updated":"2025-05-13T05:36:34Z","snapshot_observed_at":"2026-08-08T20:41:26.386035Z","submitted_at":"2025-05-07T21:15:40Z","title":"Red Teaming the Mind of the Machine: A Systematic Evaluation of Prompt Injection and Jailbreak Vulnerabilities in LLMs","version":2},"cited_work":{"arxiv_id":"2505.04806","doi":"10.48550/arxiv.2505.04806","metadata_source":"arxiv_reference","pith_arxiv_id":"2505.04806","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2505.04806 , year=","venue":"ArXiv.org","work_id":"8c37b5cc-babf-49e8-a3f7-f1da999127bc","year":2025},"citing_paper":{"arxiv_id":"2605.08876","last_updated":"2026-08-02T00:52:12Z","snapshot_observed_at":"2026-08-06T23:24:39.267150Z","submitted_at":"2026-05-09T10:55:11Z","title":"OTora: A Unified Red Teaming Framework for Reasoning-Level Denial-of-Service in LLM Agents","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-05-12T01:57:22.554881Z"},"links":{"cited_paper":"/paper/2505.04806","citing_paper":"/paper/2605.08876"},"observation_digest":"sha256:3a8ba85cde7ab28fb07af3dc7cde371f052162eb7c6fae97082fe8fbb09ac505","observation_id":"d42c1592-e1ca-42eb-8b34-26f2a22ef125","resolution":{"observed_at":"2026-05-12T07:46:28.112736Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.04806","last_updated":"2025-05-13T05:36:34Z","snapshot_observed_at":"2026-08-08T20:41:26.386035Z","submitted_at":"2025-05-07T21:15:40Z","title":"Red Teaming the Mind of the Machine: A Systematic Evaluation of Prompt Injection and Jailbreak Vulnerabilities in LLMs","version":2},"cited_work":{"arxiv_id":"2505.04806","doi":"10.48550/arxiv.2505.04806","metadata_source":"arxiv_reference","pith_arxiv_id":"2505.04806","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2505.04806 , year=","venue":"ArXiv.org","work_id":"8c37b5cc-babf-49e8-a3f7-f1da999127bc","year":2025},"citing_paper":{"arxiv_id":"2605.08876","last_updated":"2026-08-02T00:52:12Z","snapshot_observed_at":"2026-08-06T23:24:39.267150Z","submitted_at":"2026-05-09T10:55:11Z","title":"OTora: A Unified Red Teaming Framework for Reasoning-Level Denial-of-Service in LLM Agents","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-06-30T22:52:54.684185Z"},"links":{"cited_paper":"/paper/2505.04806","citing_paper":"/paper/2605.08876"},"observation_digest":"sha256:d206e3be0c4a022c0accb0e10c7faf168e0fc8b7b886403d49e02c37cfb9d1a0","observation_id":"f3b68ddf-f963-4730-90a3-b625018c5aa8","resolution":{"observed_at":"2026-07-01T13:45:45.437788Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.04806","last_updated":"2025-05-13T05:36:34Z","snapshot_observed_at":"2026-08-08T20:41:26.386035Z","submitted_at":"2025-05-07T21:15:40Z","title":"Red Teaming the Mind of the Machine: A Systematic Evaluation of Prompt Injection and Jailbreak Vulnerabilities in LLMs","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.04806","snapshot_observed_at":"2026-08-04T05:17:31.221017Z","title":"OpenAI API Documentation","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2605.08876","last_updated":"2026-08-02T00:52:12Z","snapshot_observed_at":"2026-08-06T23:24:39.267150Z","submitted_at":"2026-05-09T10:55:11Z","title":"OTora: A Unified Red Teaming Framework for Reasoning-Level Denial-of-Service in LLM Agents","version":3},"reference_index":2023,"source":"pdf_text","source_observed_at":"2026-08-04T05:17:31.221017Z"},"links":{"cited_paper":"/paper/2505.04806","citing_paper":"/paper/2605.08876"},"observation_digest":"sha256:534b0de461d4908a544c8a5bda96d2adf601789fd9395d0bb26f6e5d51a2bbb3","observation_id":"ec7cb2de-065f-4dac-865f-71bd54ed6d78","resolution":{"observed_at":"2026-08-04T05:17:31.221017Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.04806","last_updated":"2025-05-13T05:36:34Z","snapshot_observed_at":"2026-08-08T20:41:26.386035Z","submitted_at":"2025-05-07T21:15:40Z","title":"Red Teaming the Mind of the Machine: A Systematic Evaluation of Prompt Injection and Jailbreak Vulnerabilities in LLMs","version":2},"cited_work":{"arxiv_id":"2505.04806","doi":"10.48550/arxiv.2505.04806","metadata_source":"arxiv_reference","pith_arxiv_id":"2505.04806","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2505.04806 , year=","venue":"ArXiv.org","work_id":"8c37b5cc-babf-49e8-a3f7-f1da999127bc","year":2025},"citing_paper":{"arxiv_id":"2605.23723","last_updated":"2026-05-22T15:03:13Z","snapshot_observed_at":"2026-08-06T20:38:36.463625Z","submitted_at":"2026-05-22T15:03:13Z","title":"MemAudit: Post-hoc Auditing of Poisoned Agent Memory via Causal Attribution and Structural Anomaly Detection","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-05-25T04:05:15.708438Z"},"links":{"cited_paper":"/paper/2505.04806","citing_paper":"/paper/2605.23723"},"observation_digest":"sha256:bde1f18fe6b2c50d50311ab7801c71ca08a1208fca361913ffe5b66d65c3a2b6","observation_id":"fde27398-675a-4de3-a358-7073ae7f9a9e","resolution":{"observed_at":"2026-05-25T04:05:20.411461Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.04806","last_updated":"2025-05-13T05:36:34Z","snapshot_observed_at":"2026-08-08T20:41:26.386035Z","submitted_at":"2025-05-07T21:15:40Z","title":"Red Teaming the Mind of the Machine: A Systematic Evaluation of Prompt Injection and Jailbreak Vulnerabilities in LLMs","version":2},"cited_work":{"arxiv_id":"2505.04806","doi":"10.48550/arxiv.2505.04806","metadata_source":"arxiv_reference","pith_arxiv_id":"2505.04806","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2505.04806 , year=","venue":"ArXiv.org","work_id":"8c37b5cc-babf-49e8-a3f7-f1da999127bc","year":2025},"citing_paper":{"arxiv_id":"2605.26999","last_updated":"2026-05-26T13:19:25Z","snapshot_observed_at":"2026-08-08T09:09:26.193483Z","submitted_at":"2026-05-26T13:19:25Z","title":"Prompt Injection Detection is Regime-Dependent: A Deployment-Aware Evaluation with Interpretable Structural Signals","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-06-29T18:41:03.566306Z"},"links":{"cited_paper":"/paper/2505.04806","citing_paper":"/paper/2605.26999"},"observation_digest":"sha256:be3dbb5a36671ccd966b410d62e074dc976cfd9950b743d7228563c0995383a1","observation_id":"c6f664a5-4dfe-4664-a750-3302e263781a","resolution":{"observed_at":"2026-06-29T18:43:50.228134Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.04806","last_updated":"2025-05-13T05:36:34Z","snapshot_observed_at":"2026-08-08T20:41:26.386035Z","submitted_at":"2025-05-07T21:15:40Z","title":"Red Teaming the Mind of the Machine: A Systematic Evaluation of Prompt Injection and Jailbreak Vulnerabilities in LLMs","version":2},"cited_work":{"arxiv_id":"2505.04806","doi":"10.48550/arxiv.2505.04806","metadata_source":"arxiv_reference","pith_arxiv_id":"2505.04806","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2505.04806 , year=","venue":"ArXiv.org","work_id":"8c37b5cc-babf-49e8-a3f7-f1da999127bc","year":2025},"citing_paper":{"arxiv_id":"2605.30096","last_updated":"2026-05-28T15:39:43Z","snapshot_observed_at":"2026-08-08T19:27:59.265761Z","submitted_at":"2026-05-28T15:39:43Z","title":"How Reliable Are AI Attackers Against a Fixed Vulnerable Target? A 400-Run Empirical Study of LLM Penetration Testing Consistency","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-06-29T06:53:48.841077Z"},"links":{"cited_paper":"/paper/2505.04806","citing_paper":"/paper/2605.30096"},"observation_digest":"sha256:5867d26925526ba9086bd5506bc2de8000f8d6f265428ebbdda4aea96181b3ac","observation_id":"a81e95ba-693a-486a-ac6d-7d77d24d1de0","resolution":{"observed_at":"2026-06-29T14:13:30.554033Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.04806","last_updated":"2025-05-13T05:36:34Z","snapshot_observed_at":"2026-08-08T20:41:26.386035Z","submitted_at":"2025-05-07T21:15:40Z","title":"Red Teaming the Mind of the Machine: A Systematic Evaluation of Prompt Injection and Jailbreak Vulnerabilities in LLMs","version":2},"cited_work":{"arxiv_id":"2505.04806","doi":"10.48550/arxiv.2505.04806","metadata_source":"arxiv_reference","pith_arxiv_id":"2505.04806","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2505.04806 , year=","venue":"ArXiv.org","work_id":"8c37b5cc-babf-49e8-a3f7-f1da999127bc","year":2025},"citing_paper":{"arxiv_id":"2606.27027","last_updated":"2026-06-25T13:35:28Z","snapshot_observed_at":"2026-08-07T13:33:16.881427Z","submitted_at":"2026-06-25T13:35:28Z","title":"ShareLock: A Stealthy Multi-Tool Threshold Poisoning Attack Against MCP","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-06-26T04:07:14.506108Z"},"links":{"cited_paper":"/paper/2505.04806","citing_paper":"/paper/2606.27027"},"observation_digest":"sha256:1b4199d7fca4eafdad230e374a506ca5fb21814c1c4e1eecf31697e976995571","observation_id":"d21b7dbd-c8a7-487e-ae3a-4a75b3def877","resolution":{"observed_at":"2026-07-04T14:19:54.253542Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.04806","last_updated":"2025-05-13T05:36:34Z","snapshot_observed_at":"2026-08-08T20:41:26.386035Z","submitted_at":"2025-05-07T21:15:40Z","title":"Red Teaming the Mind of the Machine: A Systematic Evaluation of Prompt Injection and Jailbreak Vulnerabilities in LLMs","version":2},"cited_work":{"arxiv_id":"2505.04806","doi":"10.48550/arxiv.2505.04806","metadata_source":"arxiv_reference","pith_arxiv_id":"2505.04806","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2505.04806 , year=","venue":"ArXiv.org","work_id":"8c37b5cc-babf-49e8-a3f7-f1da999127bc","year":2025},"citing_paper":{"arxiv_id":"2607.02072","last_updated":"2026-07-06T14:17:36Z","snapshot_observed_at":"2026-08-07T11:32:07.307879Z","submitted_at":"2026-07-02T12:07:00Z","title":"kNNGuard: Turning LLM Hidden Activations into a Training-Free Configurable Guardrail","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-07-03T17:03:06.656045Z"},"links":{"cited_paper":"/paper/2505.04806","citing_paper":"/paper/2607.02072"},"observation_digest":"sha256:bffa918dadc1281716e5ca9d65ea855435e8c773330283305091981fc4321dd9","observation_id":"c137ff90-863f-4cee-a111-6f3369f719e1","resolution":{"observed_at":"2026-07-03T17:08:42.782288Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.04806","last_updated":"2025-05-13T05:36:34Z","snapshot_observed_at":"2026-08-08T20:41:26.386035Z","submitted_at":"2025-05-07T21:15:40Z","title":"Red Teaming the Mind of the Machine: A Systematic Evaluation of Prompt Injection and Jailbreak Vulnerabilities in LLMs","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.04806","snapshot_observed_at":"2026-07-12T08:27:42.250470Z","title":"arXiv preprint arXiv:2505.04806 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.02072","last_updated":"2026-07-06T14:17:36Z","snapshot_observed_at":"2026-08-07T11:32:07.307879Z","submitted_at":"2026-07-02T12:07:00Z","title":"kNNGuard: Turning LLM Hidden Activations into a Training-Free Configurable Guardrail","version":2},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-07-12T08:27:42.250470Z"},"links":{"cited_paper":"/paper/2505.04806","citing_paper":"/paper/2607.02072"},"observation_digest":"sha256:9d918bcabe2137a2ea17869b094e2b41633ae5414e3e0c1cdf257b83cb6920af","observation_id":"73024db3-e914-4cc7-90d6-c919535614fb","resolution":{"observed_at":"2026-07-12T08:27:42.250470Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2505.04806/citation-record","integrity":"/paper/2505.04806/integrity","json":"/paper/2505.04806/citation-record.json","paper":"/paper/2505.04806"},"outbound":[],"paper":{"arxiv_id":"2505.04806","last_updated":"2025-05-13T05:36:34Z","latest_version":2,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-08T20:41:26.386035Z","submitted_at":"2025-05-07T21:15:40Z","title":"Red Teaming the Mind of the Machine: A Systematic Evaluation of Prompt Injection and Jailbreak Vulnerabilities in LLMs"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 17 inbound Pith citation observations for arXiv:2505.04806."}