{"as_of":"2026-08-08T05:57:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:fe005ca56b264fcc8d491c2e86d0128f94201c9f15558596ab7b5f938d30ee92","coverage":[{"denominator":75,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":75,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T13:28:21.836925Z","state":"measured"},{"denominator":78,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":78,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":3,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":3,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-08T04:21:30.393348Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":1,"source":"arxiv_reference","source_observed_at":"2026-08-05T02:28:24.338817Z","state":"measured"}],"external_citation_measurements":[{"count":0,"observed_at":"2026-08-05T02:28:24.338817Z","source":"arxiv_reference"}],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"cited_work":{"arxiv_id":"2505.23817","doi":"10.48550/arxiv.2505.23817","metadata_source":"arxiv_reference","pith_arxiv_id":"2505.23817","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Hadi Amini, and Yanzhao Wu","venue":"arXiv (Cornell University)","work_id":"7a0b89ee-4669-4134-afa3-148e5a24a074","year":2025},"citing_paper":{"arxiv_id":"2605.28999","last_updated":"2026-05-27T18:56:19Z","snapshot_observed_at":"2026-07-06T23:38:27.990823Z","submitted_at":"2026-05-27T18:56:19Z","title":"Measuring Real-World Prompt Injection Attacks in LLM-based Resume Screening","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-06-29T11:16:52.024973Z"},"links":{"cited_paper":"/paper/2505.23817","citing_paper":"/paper/2605.28999"},"observation_digest":"sha256:d645f4a6a9b41a59d415bcb1965be1b7b960e0c3779edf3da313a2c994c34ace","observation_id":"251d89f7-920e-41a7-afd9-9004fc6ad39a","resolution":{"observed_at":"2026-06-29T11:23:21.304322Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"cited_work":{"arxiv_id":"2505.23817","doi":"10.48550/arxiv.2505.23817","metadata_source":"arxiv_reference","pith_arxiv_id":"2505.23817","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Hadi Amini, and Yanzhao Wu","venue":"arXiv (Cornell University)","work_id":"7a0b89ee-4669-4134-afa3-148e5a24a074","year":2025},"citing_paper":{"arxiv_id":"2606.07539","last_updated":"2026-04-29T17:39:36Z","snapshot_observed_at":"2026-08-02T12:30:34.186010Z","submitted_at":"2026-04-29T17:39:36Z","title":"Prompt Governance? On Governing Technologies Governed by Natural Language","version":1},"reference_index":77,"source":"pdf_text","source_observed_at":"2026-07-01T08:17:10.481202Z"},"links":{"cited_paper":"/paper/2505.23817","citing_paper":"/paper/2606.07539"},"observation_digest":"sha256:3097624b09e5f337399db9c41056b66c4aa6d890118b5d42a48b391cdf4f9d45","observation_id":"ca5f4bdd-cfe1-4b76-bd04-129b61282dfa","resolution":{"observed_at":"2026-07-01T08:25:32.638976Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.23817","snapshot_observed_at":"2026-08-08T04:21:30.393348Z","title":"System prompt extraction attacks and defenses in large language models,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.02995","last_updated":"2026-08-04T01:21:29Z","snapshot_observed_at":"2026-08-08T04:13:00.119460Z","submitted_at":"2026-08-04T01:21:29Z","title":"SparSEEty: Extracting Tokens from Sparsity-Exploiting LLM Serving Systems via Deterministic Side Channels","version":1},"reference_index":75,"source":"pdf_text","source_observed_at":"2026-08-08T04:21:30.393348Z"},"links":{"cited_paper":"/paper/2505.23817","citing_paper":"/paper/2608.02995"},"observation_digest":"sha256:b6ed1b3a0d43be0a8b9b4c9123f2ba930fd4448593d660b9aefe4e0372947d9a","observation_id":"bd1c589c-65c5-4ad4-a46f-386c73719985","resolution":{"observed_at":"2026-08-08T04:21:30.393348Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2505.23817/citation-record","integrity":"/paper/2505.23817/integrity","json":"/paper/2505.23817/citation-record.json","paper":"/paper/2505.23817"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2303.08774","last_updated":"2024-03-04T06:01:33Z","snapshot_observed_at":"2026-08-07T07:30:12.213965Z","submitted_at":"2023-03-15T17:15:04Z","title":"GPT-4 Technical Report","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.08774","snapshot_observed_at":"2026-08-07T13:28:15.868481Z","title":"GPT-4 technical report","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:15.868481Z"},"links":{"cited_paper":"/paper/2303.08774","citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:5cd61ea9b68b7b195f7458b8939446b2c1d638e04712afdf09db2f81cd839dc8","observation_id":"904ae51b-c775-413c-b332-05ed7340ee58","resolution":{"observed_at":"2026-08-07T13:28:15.868481Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:29.059536Z","title":"Prompt leakage effect and mitigation strategies for multi-turn LLM applications","venue":null,"work_id":"766e421f-7b86-4699-a124-e9589ee4c270","year":2024},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:15.900195Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:36ba2c9bf0bfae2532b59d21b290e63a592ebdf5a70bf0fd9f6e3d0d6284d259","observation_id":"3409a184-0836-489a-8886-b6fc5dffd51a","resolution":{"observed_at":"2026-08-07T13:28:29.131750Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:28.935321Z","title":"Harmful content generation","venue":null,"work_id":"060d3e40-fc8b-4be6-a932-c9963d38bb3e","year":2024},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:15.979603Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:836e103483515caa516eb6a40ac62c9ae2ad4fd492bcd182bf691bc6b6766fff","observation_id":"68f541b0-139e-495c-ad6b-6eec07333f52","resolution":{"observed_at":"2026-08-07T13:28:28.982642Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2408.11865","last_updated":"2024-08-17T17:40:52Z","snapshot_observed_at":"2026-07-06T19:04:13.760549Z","submitted_at":"2024-08-17T17:40:52Z","title":"How Susceptible are LLMs to Influence in Prompts?","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.11865","snapshot_observed_at":"2026-08-07T13:28:16.031944Z","title":"How susceptible are LLMs to influence in prompts? arXiv preprint arXiv:2408.11865, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:16.031944Z"},"links":{"cited_paper":"/paper/2408.11865","citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:d40ea7e76e3efec557f1b263d28d84fc89afc164a8f0e9611c8b0634b3bbcfc0","observation_id":"cfbd207a-b95b-4558-9006-2464ad7c8d96","resolution":{"observed_at":"2026-08-07T13:28:16.031944Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:28.810947Z","title":"Large Language Models: A survey of their development, capabilities, and applications","venue":null,"work_id":"41098377-cfa4-4510-a283-6cf6797d9783","year":2024},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:16.088342Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:9dee9ea3a6cb64f378cb047156fb83b71caf646024257c4b8888ba0e1ee43a40","observation_id":"7e476f65-7f2c-43a4-a050-3de0463c1a4d","resolution":{"observed_at":"2026-08-07T13:28:28.856056Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:28.627451Z","title":"Introducing the next generation of Claude","venue":null,"work_id":"77c03eb0-51a1-47a7-9295-e2761a578961","year":2024},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:16.177647Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:f1226ebd493500d285cbb68894abedaaabf55b5bad2c97116ff19f63232e7051","observation_id":"965523e6-8e41-4123-92a5-50e4aeec9dae","resolution":{"observed_at":"2026-08-07T13:28:28.708539Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:16.277338Z","title":"Language models are few-shot learners","venue":null,"work_id":null,"year":1901},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:16.277338Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:eb7a7ea1ed807048902cbb6f44b133e4c6da6243dd557576350ff5ba8214f496","observation_id":"264951e0-35c1-4b96-af56-b6c3b95f317d","resolution":{"observed_at":"2026-08-07T13:28:16.277338Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:28.414804Z","title":"System prompt leakage","venue":null,"work_id":"8e119474-cbbf-4ea3-9859-396595fcb8ab","year":2024},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:16.375256Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:3699888debdafbd472622e749001e20af90ed6ce726ad9da3f63810f5d4d6bb3","observation_id":"0c4c3386-82fd-4c9b-854e-d5ad2a8135df","resolution":{"observed_at":"2026-08-07T13:28:28.495951Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:28.260796Z","title":"Security and privacy challenges of Large Language Models: A survey","venue":null,"work_id":"09d6aa57-d429-41bd-8c70-5aea925da6d8","year":2025},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:16.449808Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:bfc89d4d6e2e42fd2cedad19d526a60d66ac0c88dcd3c75bf00f1acc7f46f71a","observation_id":"dacd04bf-49a9-4a19-93d6-1baad2ea8909","resolution":{"observed_at":"2026-08-07T13:28:28.302234Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:28.156813Z","title":"google/txgemma-9b-chat","venue":null,"work_id":"76f4cbd1-97c7-440f-aa30-2702f507c8ae","year":2024},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:16.516728Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:a880971fa08f0fe25d2dd233879511b8db862196833f19026101817296e63f11","observation_id":"18dc2fd6-bafc-438e-91d7-fb40e553749a","resolution":{"observed_at":"2026-08-07T13:28:28.192950Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:28.015776Z","title":"tiiuae/falcon3-7b-instruct","venue":null,"work_id":"7ddcb41c-28fe-4b23-a595-cd6db926dca7","year":2024},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:16.575634Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:b325865706ace6f0b8a68e6a7f9998b6eb980b5cf66e05580f7dea2fda2ddb7b","observation_id":"a66f8d0c-2eef-45ec-ad8b-b91a03eae4d3","resolution":{"observed_at":"2026-08-07T13:28:28.100516Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:27.836274Z","title":"meta-llama/llama-3.1-8b-instruct","venue":null,"work_id":"5ec22c59-eb29-419e-9115-8429f196ff84","year":2024},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:16.612789Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:6e1a295049e72ad326b32dd9a30457ef0b50ab23bf405c66fd9fd3482eedcfed","observation_id":"7aa40db5-8083-4292-be28-58c7902b7ceb","resolution":{"observed_at":"2026-08-07T13:28:27.940904Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2407.21783","last_updated":"2024-11-23T23:27:33Z","snapshot_observed_at":"2026-07-06T18:55:11.576666Z","submitted_at":"2024-07-31T17:54:27Z","title":"The Llama 3 Herd of Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.21783","snapshot_observed_at":"2026-08-07T13:28:16.664623Z","title":"The llama 3 herd of models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:16.664623Z"},"links":{"cited_paper":"/paper/2407.21783","citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:6cc1a78fe70f62498318a240d174f36277c6f326342b6bedb4a14be6aa729098","observation_id":"16bd48d7-df57-4aea-b5b2-cc68ffca1bbd","resolution":{"observed_at":"2026-08-07T13:28:16.664623Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.14516","last_updated":"2025-03-28T15:40:49Z","snapshot_observed_at":"2026-07-06T19:36:01.448627Z","submitted_at":"2024-10-18T14:55:14Z","title":"Do LLMs \"know\" internally when they follow instructions?","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.14516","snapshot_observed_at":"2026-08-07T13:28:16.754755Z","title":"Do LLMs \"know\" internally when they follow instructions? arXiv preprint arXiv:2410.14516, 2024","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:16.754755Z"},"links":{"cited_paper":"/paper/2410.14516","citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:6ed1b8990a9c3ede606d712e2e629d54c0152e3dfd4cdef0e67db944609ac3de","observation_id":"75d57d93-2ec7-4c25-8b8f-99fa28be6c03","resolution":{"observed_at":"2026-08-07T13:28:16.754755Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:27.712931Z","title":"LLM System Prompt Leakage: Prevention Strategies","venue":null,"work_id":"7890522e-3857-420b-8146-a92a2f681d19","year":2025},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:16.852137Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:1d164905058dc85ffbb2bd628af5992fd6db03f233305aab3541fca08ef3b018","observation_id":"b5911f80-068c-4bc2-abf7-15e1af6fae08","resolution":{"observed_at":"2026-08-07T13:28:27.768943Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:27.566584Z","title":"Pleak: Prompt Leaking Attacks against Large Language Model Applications","venue":null,"work_id":"8471bf87-30d4-4488-9cbb-3235e87b8813","year":2024},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:16.953127Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:b9f60d233568b39d43459efbf217aae460aad3f1732a59e3c026201b1fe2b662","observation_id":"76c02757-bf5a-488a-ac44-e9e1ae5c7dae","resolution":{"observed_at":"2026-08-07T13:28:27.638262Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:27.471701Z","title":"ChatGPT roles","venue":null,"work_id":"03911ce5-08ca-4126-9be1-2a3188027ab0","year":2023},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:17.061404Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:7225a26ab2ffbd426065587f582c0a5b790f653e7101f1e2978de28889143d8c","observation_id":"2af08ee1-16db-402e-8136-758dd48bcbdc","resolution":{"observed_at":"2026-08-07T13:28:27.513060Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:27.309793Z","title":"Exploiting programmatic behavior of LLMs: Dual-use through standard security attacks","venue":null,"work_id":"ed3a98a0-dcb5-4243-9aba-139d1c940791","year":2024},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:17.160826Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:2c3b201e8c5412069a2d307be5c1da162a6689d33b7960ed6ed922113508d607","observation_id":"a8932f52-8035-46bd-9b9c-30d2957f624b","resolution":{"observed_at":"2026-08-07T13:28:27.376292Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:27.114765Z","title":"What is a prompt injection attack? https://www.ibm.com/ think/topics/prompt-injection, 2024","venue":null,"work_id":"94ed1865-6116-4c77-aeee-455f4c8e1848","year":2024},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:17.266114Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:d335b1e03f09e251eda3ffe24186ab8d0cc2256fdd5aa50f33af9fa502606c4c","observation_id":"9c6d2e89-f6f6-4b7a-b19b-2e82c88b1d99","resolution":{"observed_at":"2026-08-07T13:28:27.204619Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:27.016946Z","title":"Cosine similarity to determine similarity measure: Study case in online essay assessment","venue":null,"work_id":"47781a74-d8c5-4d3c-a7b9-2457816c8f51","year":2016},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:17.351731Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:45e3f0d381254cdf4763677f9ac8ca5353382359390ac1903a70b61209de2273","observation_id":"7179ff40-a2b6-4f0f-8ae0-b42c81278ced","resolution":{"observed_at":"2026-08-07T13:28:27.067011Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2304.05197","last_updated":"2023-11-01T05:14:01Z","snapshot_observed_at":"2026-07-06T15:14:24.794122Z","submitted_at":"2023-04-11T13:05:04Z","title":"Multi-step Jailbreaking Privacy Attacks on ChatGPT","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2304.05197","snapshot_observed_at":"2026-08-07T13:28:17.454592Z","title":"Multi-step jailbreaking privacy attacks on ChatGPT","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:17.454592Z"},"links":{"cited_paper":"/paper/2304.05197","citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:4e792e91764b3e8f610892360f5cb65b835cd63d4ca89b08c1ac03c56d7fa789","observation_id":"227d56cf-4a72-4ca8-954f-adc32a8a8f80","resolution":{"observed_at":"2026-08-07T13:28:17.454592Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:17.502752Z","title":"Rouge: A package for automatic evaluation of summaries","venue":null,"work_id":null,"year":2004},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:17.502752Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:d9e5b1f1da3cef19d285c60a7d001fe949eaddd3f294c640923cce60e5687325","observation_id":"04c296ac-4f0e-4b54-8c69-ca54abaae151","resolution":{"observed_at":"2026-08-07T13:28:17.502752Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.04451","last_updated":"2024-03-20T21:34:56Z","snapshot_observed_at":"2026-08-06T02:57:30.438059Z","submitted_at":"2023-10-03T19:44:37Z","title":"AutoDAN: Generating Stealthy Jailbreak Prompts on Aligned Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.04451","snapshot_observed_at":"2026-08-07T13:28:17.560475Z","title":"AutoDAN: Generating stealthy jailbreak prompts on aligned Large Language Models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:17.560475Z"},"links":{"cited_paper":"/paper/2310.04451","citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:376c04530b231706d4eb4e4a04c4ac316edef3b0893576e9aabfb5db30b0d9a7","observation_id":"30a345e2-d63f-489f-b53b-e898990292be","resolution":{"observed_at":"2026-08-07T13:28:17.560475Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2308.12833","last_updated":"2023-08-24T14:45:50Z","snapshot_observed_at":"2026-07-06T16:09:59.750388Z","submitted_at":"2023-08-24T14:45:50Z","title":"Use of LLMs for Illicit Purposes: Threats, Prevention Measures, and Vulnerabilities","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.12833","snapshot_observed_at":"2026-08-07T13:28:17.621783Z","title":"Use of LLMs for illicit purposes: Threats, prevention measures, and vulnerabilities","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:17.621783Z"},"links":{"cited_paper":"/paper/2308.12833","citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:5e73a5dd05f8ea9d6b1627a4d26d8836275e8cdfc68faebf6895aebc0cd69eda","observation_id":"df8f36f9-83c9-4aec-85a8-5af897699b7f","resolution":{"observed_at":"2026-08-07T13:28:17.621783Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2308.13768","last_updated":"2023-08-26T05:20:58Z","snapshot_observed_at":"2026-07-06T16:10:38.925065Z","submitted_at":"2023-08-26T05:20:58Z","title":"Adversarial Fine-Tuning of Language Models: An Iterative Optimisation Approach for the Generation and Detection of Problematic Content","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.13768","snapshot_observed_at":"2026-08-07T13:28:17.670309Z","title":"Adversarial fine-tuning of language models: An iterative optimisation approach for the generation and detection of problematic content","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:17.670309Z"},"links":{"cited_paper":"/paper/2308.13768","citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:9d209964e2557e34f1bf38b180af58d15e012d45785df83f5f906f3e9e294190","observation_id":"24a3a16c-7ad3-457e-9e14-52f68f6040bb","resolution":{"observed_at":"2026-08-07T13:28:17.670309Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:26.819013Z","title":"GPT-4 System Card","venue":null,"work_id":"ba37decc-6e70-4b93-a932-d35da7435dfc","year":2023},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:17.714988Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:21d2b593040f3e7d05e5d2fb84128e2c34fbf955f0a8b731fa2ea4a1f6e174f7","observation_id":"0c3d2a8e-a1ec-4e24-a3a3-2a45f0f9b91d","resolution":{"observed_at":"2026-08-07T13:28:26.876274Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:26.686420Z","title":"Introducing GPT-4.1 in the API","venue":null,"work_id":"16259527-4338-4bdd-af2a-547d5453f8e2","year":2025},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:17.770710Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:7bb43b64391c24d6f6eee7276fcf98ed27431ea5e5ef935d0c8f95fdd0cc1f58","observation_id":"bcdb0479-0497-4716-ac7c-f434048734fc","resolution":{"observed_at":"2026-08-07T13:28:26.760865Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2409.11026","last_updated":"2025-08-06T13:24:09Z","snapshot_observed_at":"2026-08-05T14:42:34.392224Z","submitted_at":"2024-09-17T09:43:29Z","title":"Prompt Obfuscation for Large Language Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.11026","snapshot_observed_at":"2026-08-07T13:28:17.822643Z","title":"Prompt obfuscation for large language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:17.822643Z"},"links":{"cited_paper":"/paper/2409.11026","citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:56f324c5c2713460664ad1cd98d9523279be3699b05822b5084568b8483dcd45","observation_id":"5c86a944-cd53-4906-8dde-a15a4c7d60d9","resolution":{"observed_at":"2026-08-07T13:28:17.822643Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2211.09527","last_updated":"2022-11-17T13:43:20Z","snapshot_observed_at":"2026-07-06T14:19:47.424778Z","submitted_at":"2022-11-17T13:43:20Z","title":"Ignore Previous Prompt: Attack Techniques For Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2211.09527","snapshot_observed_at":"2026-08-07T13:28:17.896064Z","title":"Ignore previous prompt: Attack techniques for language models","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:17.896064Z"},"links":{"cited_paper":"/paper/2211.09527","citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:fdeb39523d4a68f1410e83a7bb5f3a5d5d9b0c5576a05a7f8a25c118b1f4491a","observation_id":"9b6fa092-b653-4055-9006-2a6a0a5eca04","resolution":{"observed_at":"2026-08-07T13:28:17.896064Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:26.553563Z","title":"Instruction defense","venue":null,"work_id":"810b509c-33ea-479a-b69f-7526b587ce04","year":2024},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:17.968777Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:af4087370ad0d234eacf5ffc8a900d069330692cc2cd841d27885dbb556a70f6","observation_id":"38ed03f7-5671-439e-9928-0906af6f2d3a","resolution":{"observed_at":"2026-08-07T13:28:26.607229Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:26.431007Z","title":"Chatgpt roles","venue":null,"work_id":"eced84d8-a6b4-41fa-9724-a109e9089596","year":2024},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:18.024289Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:526a9f8bb867d4e3ef6844d7c05da4c92aac3123ce8139ccfb225c078a95c57f","observation_id":"677e49f2-382d-49d0-a7f4-736a24f30952","resolution":{"observed_at":"2026-08-07T13:28:26.472795Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.12959","last_updated":"2024-02-20T12:25:26Z","snapshot_observed_at":"2026-08-05T12:59:16.120686Z","submitted_at":"2024-02-20T12:25:26Z","title":"Prompt Stealing Attacks Against Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.12959","snapshot_observed_at":"2026-08-07T13:28:18.063710Z","title":"Prompt stealing attacks against large language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:18.063710Z"},"links":{"cited_paper":"/paper/2402.12959","citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:cf23c65d403caec6bd88f09723125bcb545da05ba378c481606cae8b59e5f3bf","observation_id":"e5ae70ec-8c69-4734-8707-9998edb73825","resolution":{"observed_at":"2026-08-07T13:28:18.063710Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.14539","last_updated":"2023-10-10T22:17:17Z","snapshot_observed_at":"2026-07-06T15:59:03.095461Z","submitted_at":"2023-07-26T23:11:15Z","title":"Jailbreak in pieces: Compositional Adversarial Attacks on Multi-Modal Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.14539","snapshot_observed_at":"2026-08-07T13:28:18.153671Z","title":"Jailbreak in pieces: Compositional adversarial attacks on multi-modal language models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:18.153671Z"},"links":{"cited_paper":"/paper/2307.14539","citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:a19f497a01ec76c90bfa2d1bcaf574c2b7e6bff9c838e53293dae8fe80d7fcd5","observation_id":"af023c88-0c17-4978-99fc-96cd4461ca92","resolution":{"observed_at":"2026-08-07T13:28:18.153671Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:26.284742Z","title":"Do Anything Now","venue":null,"work_id":"25a4d4e4-48cd-4523-82f9-bee479176a74","year":2024},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:18.218172Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:b089efa1174cc3bf7e9da5dcccc8c92977ee0623cb895a090b2a07c152bcdac0","observation_id":"2023e019-f348-4999-b99f-971ea631d18e","resolution":{"observed_at":"2026-08-07T13:28:26.323022Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2010.15980","last_updated":"2020-11-07T05:33:35Z","snapshot_observed_at":"2026-08-05T14:17:34.026911Z","submitted_at":"2020-10-29T22:54:00Z","title":"AutoPrompt: Eliciting Knowledge from Language Models with Automatically Generated Prompts","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2010.15980","snapshot_observed_at":"2026-08-07T13:28:18.283491Z","title":"AutoPrompt: Eliciting knowledge from language models with automatically generated prompts","venue":null,"work_id":null,"year":2010},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:18.283491Z"},"links":{"cited_paper":"/paper/2010.15980","citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:5b9a739688da59c57d9b5d651e02b6bde1b42efb097bc943c9dc52f78399581b","observation_id":"deeb8f5a-a1c3-4b84-b42c-c29b0de78707","resolution":{"observed_at":"2026-08-07T13:28:18.283491Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.19572","last_updated":"2025-04-23T06:29:39Z","snapshot_observed_at":"2026-07-06T19:39:42.675941Z","submitted_at":"2024-10-25T14:07:53Z","title":"ChunkRAG: Novel LLM-Chunk Filtering Method for RAG Systems","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.19572","snapshot_observed_at":"2026-08-07T13:28:18.325891Z","title":"ChunkRAG: Novel LLM-Chunk Filtering Method for RAG Systems","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:18.325891Z"},"links":{"cited_paper":"/paper/2410.19572","citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:7262a11bb7004e211defc6531465dedb43c2dbe00be4e28a56f7d3063e25934d","observation_id":"f332e495-a5e7-459f-b185-e37b3f13fa49","resolution":{"observed_at":"2026-08-07T13:28:18.325891Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.11805","last_updated":"2025-05-09T21:04:06Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-12-19T02:39:27Z","title":"Gemini: A Family of Highly Capable Multimodal Models","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.11805","snapshot_observed_at":"2026-08-07T13:28:18.392685Z","title":"Gemini: a family of highly capable multimodal models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:18.392685Z"},"links":{"cited_paper":"/paper/2312.11805","citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:57f0f83c1c10d8c7dbe056bee89ea72bf9bc365f8c32db57274b6b5030fc0403","observation_id":"733cf314-bd1b-42d2-887d-7732eb270e68","resolution":{"observed_at":"2026-08-07T13:28:18.392685Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:26.176024Z","title":"Falcon 3 family of open foundation models, December 2024","venue":null,"work_id":"bcbc69ef-42b0-4977-a523-3fd1ca3c0f2f","year":2024},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:18.448592Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:75360396976cfbc06f046e54f2936b41f74bb7eb3b1a16a137aca2704527c43d","observation_id":"a49f65a8-ab1e-4156-97c4-1d7f848a4cff","resolution":{"observed_at":"2026-08-07T13:28:26.207476Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.07242","last_updated":"2024-04-09T18:29:42Z","snapshot_observed_at":"2026-08-04T16:37:29.435784Z","submitted_at":"2024-04-09T18:29:42Z","title":"Sandwich attack: Multi-language Mixture Adaptive Attack on LLMs","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.07242","snapshot_observed_at":"2026-08-07T13:28:18.519058Z","title":"Sandwich attack: Multi-language mixture adaptive attack on LLMs","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:18.519058Z"},"links":{"cited_paper":"/paper/2404.07242","citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:0da1d1721e1d92309b86c7014050b5351bf84b0dbe03f9fbe003998b0dccdd8f","observation_id":"161fb040-ee28-4bec-9480-cd9a8c4f7b3b","resolution":{"observed_at":"2026-08-07T13:28:18.519058Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:26.059050Z","title":"Synthetic Multilingual LLM Prompts: A synthetic multilingual prompt dataset for prompting llms","venue":null,"work_id":"f033d641-af72-4311-ad7d-fbc9cf22edd3","year":2024},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:18.590460Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:12d0196bf60c5a105179aebbcc6cae5abca8c66f57722683bcae40d25731c85e","observation_id":"f905274b-f7b1-4004-95f6-a38bce22d580","resolution":{"observed_at":"2026-08-07T13:28:26.124131Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2401.00287","last_updated":"2023-12-30T17:37:06Z","snapshot_observed_at":"2026-07-06T17:10:12.654580Z","submitted_at":"2023-12-30T17:37:06Z","title":"The Art of Defending: A Systematic Evaluation and Analysis of LLM Defense Strategies on Safety and Over-Defensiveness","version":1},"cited_work":{"arxiv_id":"2401.00287","doi":null,"metadata_source":"pith","pith_arxiv_id":"2401.00287","snapshot_observed_at":"2026-08-07T13:28:22.268414Z","title":"The Art of Defending: A Systematic Evaluation and Analysis of LLM Defense Strategies on Safety and Over-Defensiveness","venue":"cs.CL","work_id":"0c80993a-06e5-434f-8fce-bdf53bb50a82","year":2023},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:18.665210Z"},"links":{"cited_paper":"/paper/2401.00287","citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:05cfaafd7f56132c70bd963040ca1d1d3665fa257555867eaa6f65118649ea78","observation_id":"20202f5c-7b09-449a-bf81-997ce875bb6f","resolution":{"observed_at":"2026-08-07T13:28:22.318470Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:18.744733Z","title":"Attention is all you need","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:18.744733Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:a7ab1e602ba7c6021d03cb24346cf78789d9c27a3e2f7b3a6a3a37801deb2872","observation_id":"c697ad06-cd63-4715-b734-3431039dbec4","resolution":{"observed_at":"2026-08-07T13:28:18.744733Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:25.903617Z","title":"Jaeger, Fan Zhang, Rory Pilgrim, Yossi Matias, Joelle Barral, David Fleet, and Shekoofeh Azizi","venue":null,"work_id":"8eb54e8b-5355-4d76-8eee-a3ee49e6b553","year":2025},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:18.801028Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:912e7974511457d5d224f00689dcc8d7f80fcc23c8724ca490dcf7bca036bb9b","observation_id":"5e5ac694-5ff5-46f1-86c1-ab14a96b5bb0","resolution":{"observed_at":"2026-08-07T13:28:25.969480Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2502.10867","last_updated":"2025-02-15T17:52:11Z","snapshot_observed_at":"2026-08-07T18:15:38.061902Z","submitted_at":"2025-02-15T17:52:11Z","title":"A Tutorial on LLM Reasoning: Relevant Methods behind ChatGPT o1","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.10867","snapshot_observed_at":"2026-08-07T13:28:18.865072Z","title":"A tutorial on LLM reasoning: Relevant methods behind ChatGPT-o1","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:18.865072Z"},"links":{"cited_paper":"/paper/2502.10867","citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:47398e85a3f3c0b7a1ac1b49bb1a01d1f154d28bb6632ffcdf24079adc2a3d0e","observation_id":"b11abeee-d132-4cfb-aee1-84801f49987e","resolution":{"observed_at":"2026-08-07T13:28:18.865072Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.06737","last_updated":"2024-10-26T03:01:42Z","snapshot_observed_at":"2026-07-06T18:28:29.297382Z","submitted_at":"2024-06-10T18:57:22Z","title":"Raccoon: Prompt Extraction Benchmark of LLM-Integrated Applications","version":2},"cited_work":{"arxiv_id":"2406.06737","doi":null,"metadata_source":"pith","pith_arxiv_id":"2406.06737","snapshot_observed_at":"2026-08-07T13:28:22.032646Z","title":"Raccoon: Prompt Extraction Benchmark of LLM-Integrated Applications","venue":"cs.CR","work_id":"d40b0686-87b0-4e5c-a13b-c7c1ca4a70ef","year":2024},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:18.903915Z"},"links":{"cited_paper":"/paper/2406.06737","citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:7d33c4d8e8b4eddc9a75869ba7e4d0ffe96c683014ddbd26786f13d785abccca","observation_id":"a17c2539-2ea3-4a32-a41f-8417f4da89e1","resolution":{"observed_at":"2026-08-07T13:28:22.086452Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.16427","last_updated":"2023-12-07T14:39:22Z","snapshot_observed_at":"2026-07-06T16:38:13.945197Z","submitted_at":"2023-10-25T07:47:01Z","title":"PromptAgent: Strategic Planning with Language Models Enables Expert-level Prompt Optimization","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.16427","snapshot_observed_at":"2026-08-07T13:28:18.947368Z","title":"PromptAgent: Strategic Planning with Language Models Enables Expert-level Prompt Optimization","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:18.947368Z"},"links":{"cited_paper":"/paper/2310.16427","citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:ed5264c8fc647e98723b5bc2d42bfef8beb7887a75244b57c2c0880b2a386289","observation_id":"46e94282-c291-43c0-9f6e-3e25aec7761d","resolution":{"observed_at":"2026-08-07T13:28:18.947368Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:25.793721Z","title":"Jailbroken: How does LLM safety training fail? Advances in Neural Information Processing Systems, 36:80079–80110, 2023","venue":null,"work_id":"ee8a58ab-2d9a-430d-8e05-02ea897843f9","year":2023},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:18.985934Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:07591d5b54493caf745dc046aa2a9590016b264643c7669b1b9706d86b74c7a8","observation_id":"8b21fa52-71b6-4c68-adae-8f664e50b043","resolution":{"observed_at":"2026-08-07T13:28:25.824465Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:19.026388Z","title":"Chi, Quoc V","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:19.026388Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:d1a44cb39cb745dc4e3f6b90d1dc126b84af7d745535a97bfc1816d16a065fea","observation_id":"0ab4e036-2bb9-4db0-9aea-4e8a469bce3f","resolution":{"observed_at":"2026-08-07T13:28:19.026388Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.19200","last_updated":"2025-06-12T13:56:26Z","snapshot_observed_at":"2026-08-05T03:23:44.922485Z","submitted_at":"2024-02-29T14:30:28Z","title":"PRSA: Prompt Stealing Attacks against Real-World Prompt Services","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.19200","snapshot_observed_at":"2026-08-07T13:28:19.070717Z","title":"PRSA: PRompt Stealing Attacks against large language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:19.070717Z"},"links":{"cited_paper":"/paper/2402.19200","citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:1c165a4e2f0aa94baba49dea0bf2a9777db23755e7cb81db542456cd39ee8878","observation_id":"e5db517b-63b3-4ad3-afef-fe7ff873368e","resolution":{"observed_at":"2026-08-07T13:28:19.070717Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.11538","last_updated":"2024-05-25T05:32:39Z","snapshot_observed_at":"2026-08-04T02:40:34.940411Z","submitted_at":"2023-11-20T04:56:46Z","title":"Assessing Prompt Injection Risks in 200+ Custom GPTs","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.11538","snapshot_observed_at":"2026-08-07T13:28:19.116843Z","title":"Assessing prompt injection risks in 200+ custom GPTs","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:19.116843Z"},"links":{"cited_paper":"/paper/2311.11538","citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:e713b0dff53bef3993f2ee3aeec8bede7ac3c128652a16bcdcc45dd90ae65abb","observation_id":"124fb2d1-84b4-4e2c-85d1-5f8a13c7549b","resolution":{"observed_at":"2026-08-07T13:28:19.116843Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.06865","last_updated":"2024-08-07T22:05:01Z","snapshot_observed_at":"2026-08-07T22:01:02.608714Z","submitted_at":"2023-07-13T16:15:08Z","title":"Effective Prompt Extraction from Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.06865","snapshot_observed_at":"2026-08-07T13:28:19.348303Z","title":"Effective prompt extraction from language models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:19.348303Z"},"links":{"cited_paper":"/paper/2307.06865","citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:1d7d2a0a6e592e60d2f8777a023f713ab4c4e0ef8ff6c331d55093394af7f865","observation_id":"781d88b3-dd71-4560-9cef-d771f702c936","resolution":{"observed_at":"2026-08-07T13:28:19.348303Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-07-06T15:59:23.019044Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-08-07T13:28:19.412839Z","title":"Universal and transferable adversarial attacks on aligned language models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:19.412839Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:3305ed2874f7b09e2fcaf45e672c2f442fb81314563345ebe754e051af519433","observation_id":"96a6d877-eb7d-4835-b925-670b7a99df8b","resolution":{"observed_at":"2026-08-07T13:28:19.412839Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:25.624752Z","title":null,"venue":null,"work_id":"f5b26ee4-f693-497f-b176-d780d8cec222","year":null},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:19.459146Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:bf40b92373a208ec0b782b094940dacf986c653e48088d8eb9e7f248ed760568","observation_id":"ad724349-2791-4445-a72a-bba6b4973ef2","resolution":{"observed_at":"2026-08-07T13:28:25.684677Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:25.426960Z","title":null,"venue":null,"work_id":"8826fdd5-5547-475c-ba62-2edc97f2574a","year":null},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:19.514744Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:5e666c38763164f07ac7e8d75a7ee67094fb18118f380c033e0dcf460f2a875b","observation_id":"4b7f047d-32cb-4252-b07d-17108b202edd","resolution":{"observed_at":"2026-08-07T13:28:25.481335Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:25.320167Z","title":null,"venue":null,"work_id":"6e1bddad-b876-47b3-a4ca-156b44afce11","year":null},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:19.535097Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:7d84dc9e32946bc8c712cc3501c7c24597ee8d2e225838c2f132e7e8cfb3c2a8","observation_id":"f1d80ebf-f31f-4434-9239-cda6326d87f2","resolution":{"observed_at":"2026-08-07T13:28:25.352312Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:25.174746Z","title":null,"venue":null,"work_id":"423efe02-fa77-45d8-9225-16a358c20bfc","year":null},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:19.559491Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:c687731b3014aa0ecb73af8fe1fd5416a0c1ff01197d03154934f5279549d84e","observation_id":"e5efa0c1-a192-4d91-9ca1-b2c4bdcea925","resolution":{"observed_at":"2026-08-07T13:28:25.240899Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:24.902032Z","title":null,"venue":null,"work_id":"6eaa3a16-e06c-4022-b338-2d0b25d7cbf1","year":null},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:19.597777Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:452972edfd1e8cc7cb0c796e2ecf89bb428f98abb92e78aca99ba061cd695190","observation_id":"112a6624-9438-4064-9c8d-1242c9606e33","resolution":{"observed_at":"2026-08-07T13:28:25.004742Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:24.312861Z","title":null,"venue":null,"work_id":"694e94a2-4745-4bd8-9093-2b4e4a0adac5","year":null},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:19.799751Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:4b0314664a5b5c202a3c49996716e726509dae240066f76931ecf68e791fd32c","observation_id":"0e24d379-fe6c-4048-8617-3882ca4d789a","resolution":{"observed_at":"2026-08-07T13:28:24.368087Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:24.206155Z","title":null,"venue":null,"work_id":"1389d498-38d0-46ec-9f91-23351424cf13","year":null},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:20.272135Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:eeac2c5dc773c7a3e97ceacd13b19299b5fa24c810e61f2d37e6fffb6d3f0328","observation_id":"05b4b0ec-1184-4dbe-a6e6-16df576fa242","resolution":{"observed_at":"2026-08-07T13:28:24.249124Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:24.718494Z","title":null,"venue":null,"work_id":"1d343fae-98da-460b-aa34-7975aa0f1749","year":null},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:20.313708Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:5589c34fdb2034e3d5b06f2bf4dbb24a2cebd436e280fed088f56452d4bd23cd","observation_id":"4636bb8f-0887-4d16-b81b-7481343fe74b","resolution":{"observed_at":"2026-08-07T13:28:24.754740Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:24.629099Z","title":null,"venue":null,"work_id":"b5be4137-cfb7-48cc-9214-fa55ee5035df","year":null},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:20.378429Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:71c008aabc46d52448d7e67de295f650a676ecbc76ce780a198e8b53b79a2680","observation_id":"0f419749-771d-4eb5-88b1-45a926006581","resolution":{"observed_at":"2026-08-07T13:28:24.652428Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:24.543972Z","title":null,"venue":null,"work_id":"f9211d74-a9a0-4582-bb75-c0a919af802c","year":null},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:20.438241Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:c069a245d41adcf08d768113461be5568a72090ad636a0037d92a853f48dc391","observation_id":"206ea9a2-8a80-4f34-8ce8-f9a2219720f3","resolution":{"observed_at":"2026-08-07T13:28:24.567738Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:24.405657Z","title":null,"venue":null,"work_id":"cc8ee7a8-272d-4138-8a33-2c97f67af0bc","year":null},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:20.525454Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:147705178f5809815148a150bb395b6f95e019fb5b5cc4c15db19fe66271b382","observation_id":"e2d401d4-ed19-4ca2-b78f-c2ba443c1373","resolution":{"observed_at":"2026-08-07T13:28:24.481390Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:24.070646Z","title":null,"venue":null,"work_id":"ee67dd5a-507a-4268-aba5-0a9e138db4b1","year":null},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:20.604031Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:ac3301ea702a83753a19cb22653a5b953bc1e456c6881e81f7e35c518b679089","observation_id":"9db4b0c9-d81d-43a2-b158-2ce8661f3a8b","resolution":{"observed_at":"2026-08-07T13:28:24.138677Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:23.695857Z","title":null,"venue":null,"work_id":"f386aaaf-ad23-4fe8-a1bc-d713a9b3ef7f","year":null},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":75,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:20.868122Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:2a65b0cc11214f633c62388f3d5d7d20f1d95c6cbdf7fe169e1c20ee8f281dff","observation_id":"fec12599-a0f0-42d3-8239-3ff42fe44287","resolution":{"observed_at":"2026-08-07T13:28:23.743851Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:23.557758Z","title":null,"venue":null,"work_id":"5a812449-54cf-4937-8ccb-fb34f36cef35","year":null},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":78,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:21.029745Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:f71d0557dbcb9e225e9223775073159190387f229d12e2fea48b323698affeb7","observation_id":"26ae3c3f-e162-4bf5-8978-e41add032e12","resolution":{"observed_at":"2026-08-07T13:28:23.620538Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:23.935778Z","title":null,"venue":null,"work_id":"c3a1ec14-f5d3-419a-96bf-43cab25ac36d","year":null},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":79,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:21.104448Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:c74aacd6dd02f0262c1acb85b9bd8525b0582d58a8d1c153e2b8db9a037eb76a","observation_id":"38312853-8305-4986-adf4-2b02e19d0cff","resolution":{"observed_at":"2026-08-07T13:28:23.972893Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:23.833632Z","title":null,"venue":null,"work_id":"628d9f60-7c23-45ad-b4f7-026492a559c5","year":null},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":80,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:21.146753Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:0b6934102da4cc345e00d5aaff73541cd9af7b33a3451f5fa0391fcbc51ca88d","observation_id":"2217e8b5-27fa-4bc7-a6b4-75dea27232f5","resolution":{"observed_at":"2026-08-07T13:28:23.883772Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:23.441103Z","title":"I am a travel assistant, I share travel tips, destination ………","venue":null,"work_id":"4a89615d-11ff-467d-904d-b468745adb24","year":null},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":81,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:21.182542Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:061a00e838210cc5f3102dcd1644ab0f052beb7456c0f5e79cb25a6e82ba2043","observation_id":"4901a84e-f253-4d88-8547-5d1f6f88807f","resolution":{"observed_at":"2026-08-07T13:28:23.499537Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:22.918997Z","title":"I am a travel assistant, I share travel tips, destination ………","venue":null,"work_id":"133374a2-ac18-4b11-8f6e-edb3aaa675da","year":null},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":85,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:21.336827Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:378e66b1a101b78ae7ab0d9d78401286c7731a34ceac75d5c3fcf19fdecb5fa8","observation_id":"690fcd5e-5a83-476e-82ac-e922141c337c","resolution":{"observed_at":"2026-08-07T13:28:22.963529Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:22.860385Z","title":"I am a travel assistant, I share travel tips, destination ………","venue":null,"work_id":"1e74e094-0a84-4561-af5f-fe69c90b1477","year":null},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":89,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:21.538928Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:b125c457af17c797e93221ae93cddcd32bfa446d1e80538a22f2b10d8c6b4399","observation_id":"6701a554-ac23-4d94-ad4b-aee539d2b8b9","resolution":{"observed_at":"2026-08-07T13:28:22.895554Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:23.310035Z","title":null,"venue":null,"work_id":"d41a4586-2a19-42fd-841f-cef01a10c2e9","year":null},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":90,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:21.632440Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:6b3016655e800052451ac9ae98a237b5dbc80cd5d37f03424d1f3634cf4c7733","observation_id":"6f5257d0-2f65-4810-a6e7-52e4ab7c0740","resolution":{"observed_at":"2026-08-07T13:28:23.396384Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:23.184815Z","title":null,"venue":null,"work_id":"f8c95f19-0789-4ff2-893b-7302edf2b76d","year":null},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":91,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:21.693289Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:e541d6e613a53c2bde1098087c1a909742c728cc8cc3e870424b77484f745da7","observation_id":"8dca8632-4df4-4356-b763-d7e41c1a45dd","resolution":{"observed_at":"2026-08-07T13:28:23.239059Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:23.025559Z","title":null,"venue":null,"work_id":"31a976d6-3987-4d38-b946-b31d8c239b6d","year":null},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":92,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:21.744743Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:029f7188c28a93ae81aa499db83a3d009fce8ca8292fff979eb44dee0210a742","observation_id":"2fc0da6c-d258-43ce-ab8c-6d84c8c6faa8","resolution":{"observed_at":"2026-08-07T13:28:23.100624Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:28:22.711686Z","title":"I am a travel assistant, I share travel tips, destination ………","venue":null,"work_id":"aa9832d4-1e60-49a1-9914-a6b707d27d68","year":2000},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":93,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:21.836925Z"},"links":{"citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:9b282c8f6dff8c8755a233a70e1354978a5e49ab8f014a9053b127826c4d1083","observation_id":"50491108-12ad-4053-90d3-10d70fe146bb","resolution":{"observed_at":"2026-08-07T13:28:22.787794Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models"},"reference_resolution":{"displayed":75,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":45,"verified_exact":2,"verified_fuzzy":28},"total_outbound_references":75},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 75 of 75 outbound references and 3 inbound Pith citation observations for arXiv:2505.23817."}