{"as_of":"2026-08-09T04:28:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:e2aad16125624f0f0b08a791389701f077493d5557f9c95e9cd107f5cbaa962e","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":8,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":8,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":8,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":8,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T22:23:14.155540Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-01T11:05:42.376291Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2505.12567","last_updated":"2025-05-18T22:55:16Z","snapshot_observed_at":"2026-08-07T15:43:35.656611Z","submitted_at":"2025-05-18T22:55:16Z","title":"A Survey of Attacks on Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.12567","snapshot_observed_at":"2026-08-06T22:23:14.155540Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":86,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:14.155540Z"},"links":{"cited_paper":"/paper/2505.12567","citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:118ae52a1b1b7f088a932bf829585d0dc693491627819f4b7e76dfb899912c1b","observation_id":"0ce7fa8f-8630-4980-9495-8b48523e056b","resolution":{"observed_at":"2026-08-06T22:23:14.155540Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.12567","last_updated":"2025-05-18T22:55:16Z","snapshot_observed_at":"2026-08-07T15:43:35.656611Z","submitted_at":"2025-05-18T22:55:16Z","title":"A Survey of Attacks on Large Language Models","version":1},"cited_work":{"arxiv_id":"2505.12567","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.12567","snapshot_observed_at":"2026-07-01T11:05:42.376291Z","title":"arXiv preprint arXiv:2505.12567 , year=","venue":null,"work_id":"9f7dbf1c-be92-4e5d-a654-39f8259e2768","year":2025},"citing_paper":{"arxiv_id":"2510.09093","last_updated":"2026-04-10T06:21:50Z","snapshot_observed_at":"2026-07-06T22:32:17.816175Z","submitted_at":"2025-10-10T07:39:01Z","title":"Exploiting Web Search Tools of AI Agents for Data Exfiltration","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-05-18T08:36:04.262528Z"},"links":{"cited_paper":"/paper/2505.12567","citing_paper":"/paper/2510.09093"},"observation_digest":"sha256:93d9eb627e6478fbd41646355a332cddd4ff518c6b246d620b12f99ab15095e2","observation_id":"4437ed19-2bef-44be-8e2b-3b2765d5a548","resolution":{"observed_at":"2026-05-18T08:36:07.186914Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.12567","last_updated":"2025-05-18T22:55:16Z","snapshot_observed_at":"2026-08-07T15:43:35.656611Z","submitted_at":"2025-05-18T22:55:16Z","title":"A Survey of Attacks on Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.12567","snapshot_observed_at":"2026-08-03T05:45:43.424556Z","title":"and Parhi, K","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.02600","last_updated":"2026-06-05T12:49:59Z","snapshot_observed_at":"2026-08-03T05:45:40.908563Z","submitted_at":"2026-02-01T17:41:32Z","title":"Step-Wise Refusal Dynamics in Autoregressive and Diffusion Language Models","version":3},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-03T05:45:43.424556Z"},"links":{"cited_paper":"/paper/2505.12567","citing_paper":"/paper/2602.02600"},"observation_digest":"sha256:753c9441a3e8509eaf8cd77579e57c0b51afe69bea8e58915cbcd540e3cd67c4","observation_id":"b3b4624a-5506-431b-8382-3254edd8199a","resolution":{"observed_at":"2026-08-03T05:45:43.424556Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.12567","last_updated":"2025-05-18T22:55:16Z","snapshot_observed_at":"2026-08-07T15:43:35.656611Z","submitted_at":"2025-05-18T22:55:16Z","title":"A Survey of Attacks on Large Language Models","version":1},"cited_work":{"arxiv_id":"2505.12567","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.12567","snapshot_observed_at":"2026-07-01T11:05:42.376291Z","title":"arXiv preprint arXiv:2505.12567 , year=","venue":null,"work_id":"9f7dbf1c-be92-4e5d-a654-39f8259e2768","year":2025},"citing_paper":{"arxiv_id":"2604.11663","last_updated":"2026-04-13T16:11:38Z","snapshot_observed_at":"2026-07-06T22:59:59.220594Z","submitted_at":"2026-04-13T16:11:38Z","title":"Why Do Large Language Models Generate Harmful Content?","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-05-10T15:31:13.545599Z"},"links":{"cited_paper":"/paper/2505.12567","citing_paper":"/paper/2604.11663"},"observation_digest":"sha256:b7e3fd982d4232fb6b053e20c18c33ee5635c047701f7b255417c4526ac79187","observation_id":"c0b1cc9f-0519-459c-bdd1-fcfc6bc94ae5","resolution":{"observed_at":"2026-05-11T10:21:04.698068Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.12567","last_updated":"2025-05-18T22:55:16Z","snapshot_observed_at":"2026-08-07T15:43:35.656611Z","submitted_at":"2025-05-18T22:55:16Z","title":"A Survey of Attacks on Large Language Models","version":1},"cited_work":{"arxiv_id":"2505.12567","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.12567","snapshot_observed_at":"2026-07-01T11:05:42.376291Z","title":"arXiv preprint arXiv:2505.12567 , year=","venue":null,"work_id":"9f7dbf1c-be92-4e5d-a654-39f8259e2768","year":2025},"citing_paper":{"arxiv_id":"2605.00974","last_updated":"2026-05-01T17:27:45Z","snapshot_observed_at":"2026-07-06T23:14:20.123289Z","submitted_at":"2026-05-01T17:27:45Z","title":"SRTJ: Self-Evolving Rule-Driven Training-Free LLM Jailbreaking","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-05-09T18:56:46.692954Z"},"links":{"cited_paper":"/paper/2505.12567","citing_paper":"/paper/2605.00974"},"observation_digest":"sha256:75f69100eb3cf822f251292bd3f8d66fbe9067f7f813f362c9c8112f3401a19c","observation_id":"f0ea97eb-3299-4eee-bcf9-d6849840aa43","resolution":{"observed_at":"2026-05-11T16:01:12.426820Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.12567","last_updated":"2025-05-18T22:55:16Z","snapshot_observed_at":"2026-08-07T15:43:35.656611Z","submitted_at":"2025-05-18T22:55:16Z","title":"A Survey of Attacks on Large Language Models","version":1},"cited_work":{"arxiv_id":"2505.12567","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.12567","snapshot_observed_at":"2026-07-01T11:05:42.376291Z","title":"arXiv preprint arXiv:2505.12567 , year=","venue":null,"work_id":"9f7dbf1c-be92-4e5d-a654-39f8259e2768","year":2025},"citing_paper":{"arxiv_id":"2605.14553","last_updated":"2026-05-14T08:31:17Z","snapshot_observed_at":"2026-07-06T23:25:58.895612Z","submitted_at":"2026-05-14T08:31:17Z","title":"Efficient Multi-objective Prompt Optimization via Pure-exploration Bandits","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-05-15T01:50:21.013336Z"},"links":{"cited_paper":"/paper/2505.12567","citing_paper":"/paper/2605.14553"},"observation_digest":"sha256:b08d4a543d9102e7ce053dc9d0b9d4e13874f3028974172cf8f9289605900177","observation_id":"c2da5128-f804-4b81-bdbd-f4f90322c51e","resolution":{"observed_at":"2026-05-15T01:53:29.081821Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.12567","last_updated":"2025-05-18T22:55:16Z","snapshot_observed_at":"2026-08-07T15:43:35.656611Z","submitted_at":"2025-05-18T22:55:16Z","title":"A Survey of Attacks on Large Language Models","version":1},"cited_work":{"arxiv_id":"2505.12567","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.12567","snapshot_observed_at":"2026-07-01T11:05:42.376291Z","title":"arXiv preprint arXiv:2505.12567 , year=","venue":null,"work_id":"9f7dbf1c-be92-4e5d-a654-39f8259e2768","year":2025},"citing_paper":{"arxiv_id":"2605.23723","last_updated":"2026-05-22T15:03:13Z","snapshot_observed_at":"2026-08-06T20:38:36.463625Z","submitted_at":"2026-05-22T15:03:13Z","title":"MemAudit: Post-hoc Auditing of Poisoned Agent Memory via Causal Attribution and Structural Anomaly Detection","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-05-25T04:05:15.708438Z"},"links":{"cited_paper":"/paper/2505.12567","citing_paper":"/paper/2605.23723"},"observation_digest":"sha256:e3e0d49db61ea780c0ba097d2d8be82e3bc346ace333b47f02d052201bb6c57f","observation_id":"d74a1925-d0ef-4aed-b636-5f55d00c4d90","resolution":{"observed_at":"2026-05-25T04:05:20.417334Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.12567","last_updated":"2025-05-18T22:55:16Z","snapshot_observed_at":"2026-08-07T15:43:35.656611Z","submitted_at":"2025-05-18T22:55:16Z","title":"A Survey of Attacks on Large Language Models","version":1},"cited_work":{"arxiv_id":"2505.12567","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.12567","snapshot_observed_at":"2026-07-01T11:05:42.376291Z","title":"arXiv preprint arXiv:2505.12567 , year=","venue":null,"work_id":"9f7dbf1c-be92-4e5d-a654-39f8259e2768","year":2025},"citing_paper":{"arxiv_id":"2606.31639","last_updated":"2026-06-30T13:21:43Z","snapshot_observed_at":"2026-08-03T05:59:43.224416Z","submitted_at":"2026-06-30T13:21:43Z","title":"A Lifecycle and Application-Stack Survey of Large Language Model Vulnerabilities: Attacks, Risks, Defenses, and Open Problems","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-07-01T04:44:23.543728Z"},"links":{"cited_paper":"/paper/2505.12567","citing_paper":"/paper/2606.31639"},"observation_digest":"sha256:85296d300f3464a5e14681439937a03b0d0e23fd56784baea69d9bc0a7ab4d4c","observation_id":"b8ccbc72-829b-40be-a8cf-72766e565523","resolution":{"observed_at":"2026-07-01T11:05:42.377798Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2505.12567/citation-record","integrity":"/paper/2505.12567/integrity","json":"/paper/2505.12567/citation-record.json","paper":"/paper/2505.12567"},"outbound":[],"paper":{"arxiv_id":"2505.12567","last_updated":"2025-05-18T22:55:16Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-07T15:43:35.656611Z","submitted_at":"2025-05-18T22:55:16Z","title":"A Survey of Attacks on Large Language Models"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 8 inbound Pith citation observations for arXiv:2505.12567."}