{"as_of":"2026-08-08T07:47:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:2972dccae7ae4a62968df1505770a72bfe312b2f76db32f62e286a7c0a8d0d4a","coverage":[{"denominator":31,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":31,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T13:03:08.559854Z","state":"measured"},{"denominator":32,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":32,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-06-27T10:09:35.461423Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-03T10:17:57.568129Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2505.22852","last_updated":"2025-05-28T20:35:24Z","snapshot_observed_at":"2026-08-07T12:56:41.673086Z","submitted_at":"2025-05-28T20:35:24Z","title":"Operationalizing CaMeL: Strengthening LLM Defenses for Enterprise Deployment","version":1},"cited_work":{"arxiv_id":"2505.22852","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.22852","snapshot_observed_at":"2026-07-03T10:17:57.568129Z","title":"Operationalizing camel: Strengthening llm defenses for enterprise deployment, 2025","venue":null,"work_id":"932a9859-e8e4-456f-8425-797a173e97db","year":2025},"citing_paper":{"arxiv_id":"2606.12320","last_updated":"2026-06-10T16:54:47Z","snapshot_observed_at":"2026-07-30T03:53:23.122847Z","submitted_at":"2026-06-10T16:54:47Z","title":"A Five-Plane Reference Architecture for Runtime Governance of Production AI Agents","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-06-27T10:09:35.461423Z"},"links":{"cited_paper":"/paper/2505.22852","citing_paper":"/paper/2606.12320"},"observation_digest":"sha256:64c8bbfb9eda095e217a99abeffc9500f1cb18db802df99d9ff43bf19e33b8cf","observation_id":"58c23c6e-a04e-4999-ab62-d6566bb8774c","resolution":{"observed_at":"2026-07-03T10:17:57.569438Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2505.22852/citation-record","integrity":"/paper/2505.22852/integrity","json":"/paper/2505.22852/citation-record.json","paper":"/paper/2505.22852"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2302.12173","last_updated":"2023-05-05T14:26:17Z","snapshot_observed_at":"2026-07-06T14:55:08.682906Z","submitted_at":"2023-02-23T17:14:38Z","title":"Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2302.12173","snapshot_observed_at":"2026-08-07T13:03:06.201700Z","title":"Poisoning language models during instruction tuning","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.22852","last_updated":"2025-05-28T20:35:24Z","snapshot_observed_at":"2026-08-07T12:56:41.673086Z","submitted_at":"2025-05-28T20:35:24Z","title":"Operationalizing CaMeL: Strengthening LLM Defenses for Enterprise Deployment","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-07T13:03:06.201700Z"},"links":{"cited_paper":"/paper/2302.12173","citing_paper":"/paper/2505.22852"},"observation_digest":"sha256:7f2d987f374387e0855bf03ec7249bd21f52e0da000aa01de41ec3cf6fc03b04","observation_id":"09840135-322b-443d-ba8d-4ddf8fc00204","resolution":{"observed_at":"2026-08-07T13:03:06.201700Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:03:12.987702Z","title":"Cybersentinel: An emergent threat detection system for ai security, 2025","venue":null,"work_id":"6faf16ff-5018-4f66-83e9-a8670bff050e","year":2025},"citing_paper":{"arxiv_id":"2505.22852","last_updated":"2025-05-28T20:35:24Z","snapshot_observed_at":"2026-08-07T12:56:41.673086Z","submitted_at":"2025-05-28T20:35:24Z","title":"Operationalizing CaMeL: Strengthening LLM Defenses for Enterprise Deployment","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-07T13:03:06.241383Z"},"links":{"citing_paper":"/paper/2505.22852"},"observation_digest":"sha256:334263fa67a4d45ebd27e7ff8fe9059969337b2a664a51ceabf921e481880c39","observation_id":"6f38cd75-e6af-4e23-b5c4-40c854c89f21","resolution":{"observed_at":"2026-08-07T13:03:13.030501Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:03:12.875821Z","title":"A comparison of machine learning techniques for phishing detection","venue":null,"work_id":"a6f43023-6678-4de5-a98b-85e40e5ffafe","year":2007},"citing_paper":{"arxiv_id":"2505.22852","last_updated":"2025-05-28T20:35:24Z","snapshot_observed_at":"2026-08-07T12:56:41.673086Z","submitted_at":"2025-05-28T20:35:24Z","title":"Operationalizing CaMeL: Strengthening LLM Defenses for Enterprise Deployment","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T13:03:06.336063Z"},"links":{"citing_paper":"/paper/2505.22852"},"observation_digest":"sha256:eb10fad488616d5454e7d35035857cf89da1f32ad59f0b8de9a63576af2719a9","observation_id":"c9e9f21e-9273-47dd-a293-734b3d6369a8","resolution":{"observed_at":"2026-08-07T13:03:12.917910Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:03:12.764630Z","title":"Engineering risk-aware, security-by-design frameworks for assurance of large-scale autonomous ai models, 2025","venue":null,"work_id":"067db607-c0a1-4a2f-96c7-ef1af186f832","year":2025},"citing_paper":{"arxiv_id":"2505.22852","last_updated":"2025-05-28T20:35:24Z","snapshot_observed_at":"2026-08-07T12:56:41.673086Z","submitted_at":"2025-05-28T20:35:24Z","title":"Operationalizing CaMeL: Strengthening LLM Defenses for Enterprise Deployment","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T13:03:06.398020Z"},"links":{"citing_paper":"/paper/2505.22852"},"observation_digest":"sha256:a542352ad10d87a82fd98f9d71a00e9699767da47f13cc78fbbfefba9a6044b1","observation_id":"46c0f109-17ce-4fe1-8a8c-a61d548a9714","resolution":{"observed_at":"2026-08-07T13:03:12.810082Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:03:12.640525Z","title":"The cyber immune system: Harnessing adversarial forces for security resilience, 2025","venue":null,"work_id":"00dc19bb-f8f9-447a-a4bc-e25a503156f6","year":2025},"citing_paper":{"arxiv_id":"2505.22852","last_updated":"2025-05-28T20:35:24Z","snapshot_observed_at":"2026-08-07T12:56:41.673086Z","submitted_at":"2025-05-28T20:35:24Z","title":"Operationalizing CaMeL: Strengthening LLM Defenses for Enterprise Deployment","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-07T13:03:06.422572Z"},"links":{"citing_paper":"/paper/2505.22852"},"observation_digest":"sha256:ad9aba3ebcb403e96f6cfa6d5ef2f7421014596a5dd5ca6a657a2be08d0ee08f","observation_id":"e035b966-076c-48f3-8d6a-131f471603ab","resolution":{"observed_at":"2026-08-07T13:03:12.693105Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:03:12.451306Z","title":"A broad-coverage challenge corpus for sentence understanding through inference","venue":null,"work_id":"71c106b8-a6c5-4c75-a396-511e68825259","year":2018},"citing_paper":{"arxiv_id":"2505.22852","last_updated":"2025-05-28T20:35:24Z","snapshot_observed_at":"2026-08-07T12:56:41.673086Z","submitted_at":"2025-05-28T20:35:24Z","title":"Operationalizing CaMeL: Strengthening LLM Defenses for Enterprise Deployment","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T13:03:06.441137Z"},"links":{"citing_paper":"/paper/2505.22852"},"observation_digest":"sha256:18c9981d8341e394f261bea76394aac93f31faa71d680a81d05dc49f776211d9","observation_id":"92920c7f-76d4-4862-bfcc-ec46fdf49329","resolution":{"observed_at":"2026-08-07T13:03:12.514984Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:03:12.334679Z","title":null,"venue":null,"work_id":"16afb962-f806-473c-8243-bd07d775b7b3","year":1999},"citing_paper":{"arxiv_id":"2505.22852","last_updated":"2025-05-28T20:35:24Z","snapshot_observed_at":"2026-08-07T12:56:41.673086Z","submitted_at":"2025-05-28T20:35:24Z","title":"Operationalizing CaMeL: Strengthening LLM Defenses for Enterprise Deployment","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T13:03:06.474938Z"},"links":{"citing_paper":"/paper/2505.22852"},"observation_digest":"sha256:85e36db8b83cd3c6c3dbb0abdea9f279a3113098a9456413793c3c51265ce687","observation_id":"05cfaab1-20db-4da3-a8af-fabae7473f80","resolution":{"observed_at":"2026-08-07T13:03:12.377681Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:03:12.182442Z","title":"Flowcaml: A polymorphic information-flow language","venue":null,"work_id":"62c16a97-9e70-4e37-92fd-4997d8f390ac","year":2004},"citing_paper":{"arxiv_id":"2505.22852","last_updated":"2025-05-28T20:35:24Z","snapshot_observed_at":"2026-08-07T12:56:41.673086Z","submitted_at":"2025-05-28T20:35:24Z","title":"Operationalizing CaMeL: Strengthening LLM Defenses for Enterprise Deployment","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-07T13:03:06.500421Z"},"links":{"citing_paper":"/paper/2505.22852"},"observation_digest":"sha256:a35e747f1fe751b2f76e8928595eb249f15d4325918cc8b7f01ce7b74abb66cf","observation_id":"35452170-061a-4812-beea-bf29ed65a234","resolution":{"observed_at":"2026-08-07T13:03:12.235157Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:03:06.553702Z","title":"Zero trust architecture","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2505.22852","last_updated":"2025-05-28T20:35:24Z","snapshot_observed_at":"2026-08-07T12:56:41.673086Z","submitted_at":"2025-05-28T20:35:24Z","title":"Operationalizing CaMeL: Strengthening LLM Defenses for Enterprise Deployment","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T13:03:06.553702Z"},"links":{"citing_paper":"/paper/2505.22852"},"observation_digest":"sha256:10933c4d8400d9c6671af7f992610a82b9d057bf22462ea2e22a761e56d2f7ee","observation_id":"e332bd4f-de27-40fa-b6dd-008bc01eebb0","resolution":{"observed_at":"2026-08-07T13:03:06.553702Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:03:12.061760Z","title":"Hu, David Ferraiolo, Richard Kuhn, and Angelo Schnitzer","venue":null,"work_id":"08a993bb-13d1-41be-93ce-a5937d20fc11","year":2015},"citing_paper":{"arxiv_id":"2505.22852","last_updated":"2025-05-28T20:35:24Z","snapshot_observed_at":"2026-08-07T12:56:41.673086Z","submitted_at":"2025-05-28T20:35:24Z","title":"Operationalizing CaMeL: Strengthening LLM Defenses for Enterprise Deployment","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T13:03:06.642019Z"},"links":{"citing_paper":"/paper/2505.22852"},"observation_digest":"sha256:e486f2bd273cbd13c2d2f91330f10cfaf3e8f4d962423f6544f27f36012f9650","observation_id":"8bcabf05-c80c-4d79-adc9-e9b3cdda554c","resolution":{"observed_at":"2026-08-07T13:03:12.110613Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:03:11.945924Z","title":"Security fatigue","venue":null,"work_id":"18b0b742-577f-41ae-b593-fc1f8f6e73cb","year":2016},"citing_paper":{"arxiv_id":"2505.22852","last_updated":"2025-05-28T20:35:24Z","snapshot_observed_at":"2026-08-07T12:56:41.673086Z","submitted_at":"2025-05-28T20:35:24Z","title":"Operationalizing CaMeL: Strengthening LLM Defenses for Enterprise Deployment","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T13:03:06.712183Z"},"links":{"citing_paper":"/paper/2505.22852"},"observation_digest":"sha256:bdd11647fe547de5d152587505fed064f864d5606c3d290c9726aa90f903ac6e","observation_id":"8746c377-b319-409e-a5ce-06d5b9c33345","resolution":{"observed_at":"2026-08-07T13:03:11.995420Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:03:11.811787Z","title":"Certikos: An extensible architecture for building certified concurrent os kernels","venue":null,"work_id":"2774c360-eaa5-4a02-86b9-63a770f86cc1","year":2016},"citing_paper":{"arxiv_id":"2505.22852","last_updated":"2025-05-28T20:35:24Z","snapshot_observed_at":"2026-08-07T12:56:41.673086Z","submitted_at":"2025-05-28T20:35:24Z","title":"Operationalizing CaMeL: Strengthening LLM Defenses for Enterprise Deployment","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T13:03:06.794567Z"},"links":{"citing_paper":"/paper/2505.22852"},"observation_digest":"sha256:d10dbf1f69bea9d5779e52da9cf5dd1b6ee10e8ba4c4aec487c74019a9254920","observation_id":"61adfc04-dbce-4a9c-9013-0ef96640d0ba","resolution":{"observed_at":"2026-08-07T13:03:11.873128Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:03:11.578169Z","title":"Formal verification of a realistic compiler","venue":null,"work_id":"08bc2b89-e53e-44b5-8cd5-a9814be7a3a5","year":2009},"citing_paper":{"arxiv_id":"2505.22852","last_updated":"2025-05-28T20:35:24Z","snapshot_observed_at":"2026-08-07T12:56:41.673086Z","submitted_at":"2025-05-28T20:35:24Z","title":"Operationalizing CaMeL: Strengthening LLM Defenses for Enterprise Deployment","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T13:03:06.863414Z"},"links":{"citing_paper":"/paper/2505.22852"},"observation_digest":"sha256:58e09fbbbec079e7f6cb7b262697850f4f8d5c3bbbf8c829e27300ea400bd9ba","observation_id":"c8f1fcbb-16c1-4a13-b905-202778013ebc","resolution":{"observed_at":"2026-08-07T13:03:11.666639Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:03:11.356490Z","title":"Language-based information-flow security","venue":null,"work_id":"60818cca-19ee-48d5-b426-2a3f45c04577","year":2003},"citing_paper":{"arxiv_id":"2505.22852","last_updated":"2025-05-28T20:35:24Z","snapshot_observed_at":"2026-08-07T12:56:41.673086Z","submitted_at":"2025-05-28T20:35:24Z","title":"Operationalizing CaMeL: Strengthening LLM Defenses for Enterprise Deployment","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-07T13:03:06.913129Z"},"links":{"citing_paper":"/paper/2505.22852"},"observation_digest":"sha256:1074a0c1605c18e0e71e15373168cea8c91e28b569b28056e7aeea8724b6cf67","observation_id":"9d048838-bd52-428a-be5b-59849a9e7dfc","resolution":{"observed_at":"2026-08-07T13:03:11.474114Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:03:11.139914Z","title":"Controlled-channel attacks: Deterministic side channels for untrusted operating systems","venue":null,"work_id":"06d28ab1-f10b-4e98-882c-8bd331d8793a","year":2015},"citing_paper":{"arxiv_id":"2505.22852","last_updated":"2025-05-28T20:35:24Z","snapshot_observed_at":"2026-08-07T12:56:41.673086Z","submitted_at":"2025-05-28T20:35:24Z","title":"Operationalizing CaMeL: Strengthening LLM Defenses for Enterprise Deployment","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T13:03:06.989564Z"},"links":{"citing_paper":"/paper/2505.22852"},"observation_digest":"sha256:020d1c8b8740dd9d717050d05aefa5fdfd0db47f77afaa0c6e036968cc57b0d4","observation_id":"406568ac-b488-46d0-8bc6-bd53edbf8688","resolution":{"observed_at":"2026-08-07T13:03:11.242363Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:03:10.954487Z","title":"Error message side channels in secure operating systems","venue":null,"work_id":"b91a8fd3-37ec-4074-84c6-a3047b8955eb","year":2016},"citing_paper":{"arxiv_id":"2505.22852","last_updated":"2025-05-28T20:35:24Z","snapshot_observed_at":"2026-08-07T12:56:41.673086Z","submitted_at":"2025-05-28T20:35:24Z","title":"Operationalizing CaMeL: Strengthening LLM Defenses for Enterprise Deployment","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T13:03:07.074907Z"},"links":{"citing_paper":"/paper/2505.22852"},"observation_digest":"sha256:ad72eaaad876e2c282daa6eb778b8540d673a8deabebbcfe373744e101d6dac7","observation_id":"8a3a0b54-b1e9-4689-8765-b42c667ae885","resolution":{"observed_at":"2026-08-07T13:03:11.038147Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:03:10.814937Z","title":null,"venue":null,"work_id":"c747bbda-d175-4e7c-b0a3-c20a71189d87","year":1996},"citing_paper":{"arxiv_id":"2505.22852","last_updated":"2025-05-28T20:35:24Z","snapshot_observed_at":"2026-08-07T12:56:41.673086Z","submitted_at":"2025-05-28T20:35:24Z","title":"Operationalizing CaMeL: Strengthening LLM Defenses for Enterprise Deployment","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-07T13:03:07.152855Z"},"links":{"citing_paper":"/paper/2505.22852"},"observation_digest":"sha256:a5a49b2c6ab25ef90d1c0b5272cae4ace4aae8d40deccd91a02f783015d760f2","observation_id":"a83a85e6-98ef-4531-9348-d88b744b1af3","resolution":{"observed_at":"2026-08-07T13:03:10.867752Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:03:10.597177Z","title":"Cache attacks and countermeasures: The case of aes","venue":null,"work_id":"8b6ea8c1-90c4-4dec-9f43-724db0d4b1f0","year":2006},"citing_paper":{"arxiv_id":"2505.22852","last_updated":"2025-05-28T20:35:24Z","snapshot_observed_at":"2026-08-07T12:56:41.673086Z","submitted_at":"2025-05-28T20:35:24Z","title":"Operationalizing CaMeL: Strengthening LLM Defenses for Enterprise Deployment","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T13:03:07.201591Z"},"links":{"citing_paper":"/paper/2505.22852"},"observation_digest":"sha256:d7dedfe76967da2f637a74ab228b618dc70ca584081bbc2d1b304c1be7533984","observation_id":"c133b69b-99a5-49b6-bd22-33a19e90d0ee","resolution":{"observed_at":"2026-08-07T13:03:10.687611Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:03:10.398810Z","title":"Openai api pricing","venue":null,"work_id":"8529576e-8d7f-4322-a535-a1dc785124f0","year":2024},"citing_paper":{"arxiv_id":"2505.22852","last_updated":"2025-05-28T20:35:24Z","snapshot_observed_at":"2026-08-07T12:56:41.673086Z","submitted_at":"2025-05-28T20:35:24Z","title":"Operationalizing CaMeL: Strengthening LLM Defenses for Enterprise Deployment","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-07T13:03:07.332337Z"},"links":{"citing_paper":"/paper/2505.22852"},"observation_digest":"sha256:a345debd91a2bd01521972c1c149844d6f229a505a908e56e91904cb8fbdee5a","observation_id":"68996c9f-695a-42bb-ad41-231f8ad5be56","resolution":{"observed_at":"2026-08-07T13:03:10.495168Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2210.03629","last_updated":"2023-03-10T01:00:17Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2022-10-06T01:00:32Z","title":"ReAct: Synergizing Reasoning and Acting in Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2210.03629","snapshot_observed_at":"2026-08-07T13:03:07.407377Z","title":"React: Synergizing reasoning and acting in language models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.22852","last_updated":"2025-05-28T20:35:24Z","snapshot_observed_at":"2026-08-07T12:56:41.673086Z","submitted_at":"2025-05-28T20:35:24Z","title":"Operationalizing CaMeL: Strengthening LLM Defenses for Enterprise Deployment","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-07T13:03:07.407377Z"},"links":{"cited_paper":"/paper/2210.03629","citing_paper":"/paper/2505.22852"},"observation_digest":"sha256:b3a4674f3ce95e8b266b9131d2e69bbce51281cb852b4faaf98c5f44a7c6dd64","observation_id":"863e33be-0132-4e46-9709-e1f50c380bff","resolution":{"observed_at":"2026-08-07T13:03:07.407377Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:03:10.215289Z","title":"Security analysis of infrastructure-as-code: A systematic study","venue":null,"work_id":"352e2102-2f34-4650-b354-5d2c85691854","year":2020},"citing_paper":{"arxiv_id":"2505.22852","last_updated":"2025-05-28T20:35:24Z","snapshot_observed_at":"2026-08-07T12:56:41.673086Z","submitted_at":"2025-05-28T20:35:24Z","title":"Operationalizing CaMeL: Strengthening LLM Defenses for Enterprise Deployment","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T13:03:07.503770Z"},"links":{"citing_paper":"/paper/2505.22852"},"observation_digest":"sha256:b95ac8efdc8dd3cec303066e1ea5850e647a3386cd850516f9a71b9cad0a535d","observation_id":"49654169-c7ed-4650-bead-f6a3c228cbf7","resolution":{"observed_at":"2026-08-07T13:03:10.310135Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:03:10.019566Z","title":"Open policy agent","venue":null,"work_id":"1264e736-9482-40a1-8d4e-84918714b092","year":2022},"citing_paper":{"arxiv_id":"2505.22852","last_updated":"2025-05-28T20:35:24Z","snapshot_observed_at":"2026-08-07T12:56:41.673086Z","submitted_at":"2025-05-28T20:35:24Z","title":"Operationalizing CaMeL: Strengthening LLM Defenses for Enterprise Deployment","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-07T13:03:07.649311Z"},"links":{"citing_paper":"/paper/2505.22852"},"observation_digest":"sha256:5ac8ed3049dc170e8c0cfcbd03879d39f90134e46aab77bfd643c5af2e80d07a","observation_id":"00219a52-e7a7-45a0-a644-aa2e01efd0f1","resolution":{"observed_at":"2026-08-07T13:03:10.106198Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:03:09.793540Z","title":"Dependent types and multi-monadic effects in f ∗","venue":null,"work_id":"41cdc9fb-23f0-4dd1-b8f3-ee9ccf6c001e","year":2016},"citing_paper":{"arxiv_id":"2505.22852","last_updated":"2025-05-28T20:35:24Z","snapshot_observed_at":"2026-08-07T12:56:41.673086Z","submitted_at":"2025-05-28T20:35:24Z","title":"Operationalizing CaMeL: Strengthening LLM Defenses for Enterprise Deployment","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-07T13:03:07.757905Z"},"links":{"citing_paper":"/paper/2505.22852"},"observation_digest":"sha256:7e5d3469505a278d40390d1ebd307350848b21b2bfc0e17dee2f3a2fc2d0c267","observation_id":"0d5e0711-bc85-407d-948c-17ed191c2a23","resolution":{"observed_at":"2026-08-07T13:03:09.908298Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:03:09.634419Z","title":"Transforming cyber defense: Harnessing agentic and frontier ai for proactive, ethical threat intelligence, 2025","venue":null,"work_id":"cf2c1b60-8076-4948-be2b-6cdb00ececd2","year":2025},"citing_paper":{"arxiv_id":"2505.22852","last_updated":"2025-05-28T20:35:24Z","snapshot_observed_at":"2026-08-07T12:56:41.673086Z","submitted_at":"2025-05-28T20:35:24Z","title":"Operationalizing CaMeL: Strengthening LLM Defenses for Enterprise Deployment","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-07T13:03:07.835460Z"},"links":{"citing_paper":"/paper/2505.22852"},"observation_digest":"sha256:0c18a27031a4232dc297bfd91077ab5df9ced7d48ea4a66dd0ef3b2dc1d5bea8","observation_id":"6e2c7966-7ca6-46bd-9d60-5f1a3ddb7390","resolution":{"observed_at":"2026-08-07T13:03:09.696414Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2203.02155","last_updated":"2022-03-04T07:04:42Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2022-03-04T07:04:42Z","title":"Training language models to follow instructions with human feedback","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2203.02155","snapshot_observed_at":"2026-08-07T13:03:07.944936Z","title":"Training language models to follow instructions with human feedback","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2505.22852","last_updated":"2025-05-28T20:35:24Z","snapshot_observed_at":"2026-08-07T12:56:41.673086Z","submitted_at":"2025-05-28T20:35:24Z","title":"Operationalizing CaMeL: Strengthening LLM Defenses for Enterprise Deployment","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-07T13:03:07.944936Z"},"links":{"cited_paper":"/paper/2203.02155","citing_paper":"/paper/2505.22852"},"observation_digest":"sha256:7b2b37927bf3e67c34fa6f733ef39867585f40632e5cdcd67ccacd889a569623","observation_id":"74753845-2598-43b5-8fee-48b46897cd52","resolution":{"observed_at":"2026-08-07T13:03:07.944936Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2212.08073","last_updated":"2022-12-15T06:19:23Z","snapshot_observed_at":"2026-08-02T04:53:58.766070Z","submitted_at":"2022-12-15T06:19:23Z","title":"Constitutional AI: Harmlessness from AI Feedback","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2212.08073","snapshot_observed_at":"2026-08-07T13:03:08.049273Z","title":"Constitutional ai: Harmlessness from ai feedback","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2505.22852","last_updated":"2025-05-28T20:35:24Z","snapshot_observed_at":"2026-08-07T12:56:41.673086Z","submitted_at":"2025-05-28T20:35:24Z","title":"Operationalizing CaMeL: Strengthening LLM Defenses for Enterprise Deployment","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-07T13:03:08.049273Z"},"links":{"cited_paper":"/paper/2212.08073","citing_paper":"/paper/2505.22852"},"observation_digest":"sha256:a48a54932d091efc2108c63b6df46e1b10dff1c4975c01ce5521846dcb158c42","observation_id":"dca5da0e-ccbd-4e10-a57d-801c690a6c38","resolution":{"observed_at":"2026-08-07T13:03:08.049273Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:03:09.414683Z","title":"gvisor: User-space kernel sandbox","venue":null,"work_id":"93d518c9-acca-4123-8936-cce313e13497","year":2022},"citing_paper":{"arxiv_id":"2505.22852","last_updated":"2025-05-28T20:35:24Z","snapshot_observed_at":"2026-08-07T12:56:41.673086Z","submitted_at":"2025-05-28T20:35:24Z","title":"Operationalizing CaMeL: Strengthening LLM Defenses for Enterprise Deployment","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-07T13:03:08.128526Z"},"links":{"citing_paper":"/paper/2505.22852"},"observation_digest":"sha256:03a8cdc915df314087cc0ceb9c14cc9d9e986aa9a03b7de5d576f4c330fdac12","observation_id":"eb6800f9-e65e-444b-bc01-2d04bf4a64d0","resolution":{"observed_at":"2026-08-07T13:03:09.504830Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2202.03286","last_updated":"2022-02-07T15:22:17Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2022-02-07T15:22:17Z","title":"Red Teaming Language Models with Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2202.03286","snapshot_observed_at":"2026-08-07T13:03:08.225080Z","title":"Red teaming language models with language models","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2505.22852","last_updated":"2025-05-28T20:35:24Z","snapshot_observed_at":"2026-08-07T12:56:41.673086Z","submitted_at":"2025-05-28T20:35:24Z","title":"Operationalizing CaMeL: Strengthening LLM Defenses for Enterprise Deployment","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-07T13:03:08.225080Z"},"links":{"cited_paper":"/paper/2202.03286","citing_paper":"/paper/2505.22852"},"observation_digest":"sha256:fbf2b53683ead7f8f6be3750744601d8520acc096a85f9e7ffc79d3a1bc3b9c4","observation_id":"f263b51f-ec7b-4650-8a95-c5179a1848fa","resolution":{"observed_at":"2026-08-07T13:03:08.225080Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-07-06T15:59:23.019044Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-08-07T13:03:08.341249Z","title":"Xu, Micah Goldblum, and Tom Goldstein","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.22852","last_updated":"2025-05-28T20:35:24Z","snapshot_observed_at":"2026-08-07T12:56:41.673086Z","submitted_at":"2025-05-28T20:35:24Z","title":"Operationalizing CaMeL: Strengthening LLM Defenses for Enterprise Deployment","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-07T13:03:08.341249Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2505.22852"},"observation_digest":"sha256:893f19210a1625b288b295251d941c7474d9b41084b7662d9b430a91ab13a8a5","observation_id":"852283e5-73f0-4beb-b731-04bc03c626e9","resolution":{"observed_at":"2026-08-07T13:03:08.341249Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:03:09.220177Z","title":"HACL* : Veri- fied implementations of cryptographic algorithms","venue":null,"work_id":"fff8b58e-75c0-4a3d-bb25-68dff63220c0","year":2017},"citing_paper":{"arxiv_id":"2505.22852","last_updated":"2025-05-28T20:35:24Z","snapshot_observed_at":"2026-08-07T12:56:41.673086Z","submitted_at":"2025-05-28T20:35:24Z","title":"Operationalizing CaMeL: Strengthening LLM Defenses for Enterprise Deployment","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-07T13:03:08.445926Z"},"links":{"citing_paper":"/paper/2505.22852"},"observation_digest":"sha256:7d43ea5bb7470cb833e6c9ba2c81f706865a8ec8a92c412d12664809121b10ee","observation_id":"8ec9f2e7-42cd-4991-9d81-366bdd671340","resolution":{"observed_at":"2026-08-07T13:03:09.304190Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:03:08.996666Z","title":"Alignment, agency and autonomy in frontier ai: A systems engineering perspec- tive, 2025","venue":null,"work_id":"6256b346-b681-4252-9dfd-d94acae6e5bf","year":2025},"citing_paper":{"arxiv_id":"2505.22852","last_updated":"2025-05-28T20:35:24Z","snapshot_observed_at":"2026-08-07T12:56:41.673086Z","submitted_at":"2025-05-28T20:35:24Z","title":"Operationalizing CaMeL: Strengthening LLM Defenses for Enterprise Deployment","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-07T13:03:08.559854Z"},"links":{"citing_paper":"/paper/2505.22852"},"observation_digest":"sha256:6c19d30f5fbb3f2c77657ca90766eecc5fb7e5664b9c7aecd62c993fd17a80ba","observation_id":"f6604230-8da2-4c3c-b9cc-9777441a3a9e","resolution":{"observed_at":"2026-08-07T13:03:09.093700Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2505.22852","last_updated":"2025-05-28T20:35:24Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-07T12:56:41.673086Z","submitted_at":"2025-05-28T20:35:24Z","title":"Operationalizing CaMeL: Strengthening LLM Defenses for Enterprise Deployment"},"reference_resolution":{"displayed":31,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":9,"verified_exact":0,"verified_fuzzy":22},"total_outbound_references":31},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 31 of 31 outbound references and 1 inbound Pith citation observation for arXiv:2505.22852."}