{"as_of":"2026-08-08T22:38:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:f56c8d6139cfae19686d5aaccabfbf3d806dfc409eec7cc40023794e3dc21b9e","coverage":[{"denominator":59,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":59,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T18:32:44.393617Z","state":"measured"},{"denominator":67,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":67,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":8,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":8,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-05T15:26:33.475946Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-04T00:59:20.691622Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-06T18:25:32.971973Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2507.07974","snapshot_observed_at":"2026-08-05T15:26:33.475946Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.19870","last_updated":"2025-08-27T13:33:35Z","snapshot_observed_at":"2026-08-07T05:20:03.066438Z","submitted_at":"2025-08-27T13:33:35Z","title":"Secure Multi-LLM Agentic AI and Agentification for Edge General Intelligence by Zero-Trust: A Survey","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-05T15:26:33.475946Z"},"links":{"cited_paper":"/paper/2507.07974","citing_paper":"/paper/2508.19870"},"observation_digest":"sha256:b873a51556a3eaf6b2d501fe97298919bf2ad95b636eb0f3561e4837a6f504a2","observation_id":"00efaf60-b293-480a-b774-31e490f8f738","resolution":{"observed_at":"2026-08-05T15:26:33.475946Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-06T18:25:32.971973Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2507.07974","snapshot_observed_at":"2026-08-05T10:44:10.395605Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2509.03787","last_updated":"2025-09-04T00:45:58Z","snapshot_observed_at":"2026-08-08T11:14:03.361977Z","submitted_at":"2025-09-04T00:45:58Z","title":"Evaluating the Robustness of Retrieval-Augmented Generation to Adversarial Evidence in the Health Domain","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-05T10:44:10.395605Z"},"links":{"cited_paper":"/paper/2507.07974","citing_paper":"/paper/2509.03787"},"observation_digest":"sha256:d4647f98cea8cf850d8fba00817799ff9ffde4542f8c3aa2586eba61194bb4b3","observation_id":"3759cf91-e76f-435b-a7b1-a60fb611481f","resolution":{"observed_at":"2026-08-05T10:44:10.395605Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-06T18:25:32.971973Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"cited_work":{"arxiv_id":"2507.07974","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2507.07974","snapshot_observed_at":"2026-07-04T00:59:20.691622Z","title":"Defending against prompt injection with a few defensive tokens","venue":null,"work_id":"4f729650-c7f8-4e91-b5ed-4250fe884098","year":2025},"citing_paper":{"arxiv_id":"2604.24118","last_updated":"2026-04-27T07:12:52Z","snapshot_observed_at":"2026-07-30T05:21:40.679953Z","submitted_at":"2026-04-27T07:12:52Z","title":"AgentVisor: Defending LLM Agents Against Prompt Injection via Semantic Virtualization","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-05-08T03:07:21.524834Z"},"links":{"cited_paper":"/paper/2507.07974","citing_paper":"/paper/2604.24118"},"observation_digest":"sha256:a1491568800a99e85a0a9764ce71e23a8f119da70f360860fb2a0c889bbdabd6","observation_id":"38648840-d053-4eb0-be8d-b05dcf8a8c4b","resolution":{"observed_at":"2026-05-11T22:16:31.049398Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-06T18:25:32.971973Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"cited_work":{"arxiv_id":"2507.07974","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2507.07974","snapshot_observed_at":"2026-07-04T00:59:20.691622Z","title":"Defending against prompt injection with a few defensive tokens","venue":null,"work_id":"4f729650-c7f8-4e91-b5ed-4250fe884098","year":2025},"citing_paper":{"arxiv_id":"2605.00741","last_updated":"2026-05-01T15:42:54Z","snapshot_observed_at":"2026-08-08T14:23:25.943740Z","submitted_at":"2026-05-01T15:42:54Z","title":"Self-Adaptive Multi-Agent LLM-Based Security Pattern Selection for IoT Systems","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-05-09T19:04:48.453055Z"},"links":{"cited_paper":"/paper/2507.07974","citing_paper":"/paper/2605.00741"},"observation_digest":"sha256:af72b076fdbc6b5195e4f8506f69be213b244e0fa6a23b504f8d4bc3e895922d","observation_id":"8e49ae19-fc24-43d5-b9b2-3450b671cc89","resolution":{"observed_at":"2026-05-11T15:51:44.325861Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-06T18:25:32.971973Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"cited_work":{"arxiv_id":"2507.07974","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2507.07974","snapshot_observed_at":"2026-07-04T00:59:20.691622Z","title":"Defending against prompt injection with a few defensive tokens","venue":null,"work_id":"4f729650-c7f8-4e91-b5ed-4250fe884098","year":2025},"citing_paper":{"arxiv_id":"2605.18991","last_updated":"2026-05-20T17:25:38Z","snapshot_observed_at":"2026-07-06T23:29:47.081347Z","submitted_at":"2026-05-18T18:11:17Z","title":"Agent Security is a Systems Problem","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-05-20T09:02:59.719090Z"},"links":{"cited_paper":"/paper/2507.07974","citing_paper":"/paper/2605.18991"},"observation_digest":"sha256:d92d532e566ebd660caa793a7da9b582dcb6d777b3ec6f00c22a753186452713","observation_id":"987c7af2-19bf-4a4d-864e-313c699e9eff","resolution":{"observed_at":"2026-05-20T09:03:09.853946Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-06T18:25:32.971973Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"cited_work":{"arxiv_id":"2507.07974","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2507.07974","snapshot_observed_at":"2026-07-04T00:59:20.691622Z","title":"Defending against prompt injection with a few defensive tokens","venue":null,"work_id":"4f729650-c7f8-4e91-b5ed-4250fe884098","year":2025},"citing_paper":{"arxiv_id":"2605.18991","last_updated":"2026-05-20T17:25:38Z","snapshot_observed_at":"2026-07-06T23:29:47.081347Z","submitted_at":"2026-05-18T18:11:17Z","title":"Agent Security is a Systems Problem","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-05-21T07:43:14.250188Z"},"links":{"cited_paper":"/paper/2507.07974","citing_paper":"/paper/2605.18991"},"observation_digest":"sha256:3b3ab8bff9682ce476f12bea4ab8a6fdc4b5dc9c448ebe90be5819cf062842c7","observation_id":"600205e2-4a6b-4577-b4a7-3841a0de1d52","resolution":{"observed_at":"2026-05-21T07:44:02.915798Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-06T18:25:32.971973Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"cited_work":{"arxiv_id":"2507.07974","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2507.07974","snapshot_observed_at":"2026-07-04T00:59:20.691622Z","title":"Defending against prompt injection with a few defensive tokens","venue":null,"work_id":"4f729650-c7f8-4e91-b5ed-4250fe884098","year":2025},"citing_paper":{"arxiv_id":"2606.18673","last_updated":"2026-06-17T04:20:00Z","snapshot_observed_at":"2026-07-06T23:54:04.739534Z","submitted_at":"2026-06-17T04:20:00Z","title":"Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-06-26T20:47:36.337189Z"},"links":{"cited_paper":"/paper/2507.07974","citing_paper":"/paper/2606.18673"},"observation_digest":"sha256:5e36e1439539868c0fe4ee01d2602d2b9477d61360aa6a4d2f8adce0027ecb2c","observation_id":"11510c15-b9e1-4dc5-8a0a-736bce17a901","resolution":{"observed_at":"2026-07-04T00:59:20.694798Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-06T18:25:32.971973Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2507.07974","snapshot_observed_at":"2026-08-01T14:11:22.395013Z","title":"Defending against prompt injection with a few defensivetokens,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.18847","last_updated":"2026-07-21T08:35:22Z","snapshot_observed_at":"2026-08-08T16:25:54.761610Z","submitted_at":"2026-07-21T08:35:22Z","title":"Data Leakage Prevention in Agentic Applications via Preemptive Hardening","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-01T14:11:22.395013Z"},"links":{"cited_paper":"/paper/2507.07974","citing_paper":"/paper/2607.18847"},"observation_digest":"sha256:d9bf472d24a2d3211f6d8c72f815575be8aac731178d881463f50d651b45830f","observation_id":"50c8ef7e-94ed-410f-aff7-75c78a20766e","resolution":{"observed_at":"2026-08-01T14:11:22.395013Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2507.07974/citation-record","integrity":"/paper/2507.07974/integrity","json":"/paper/2507.07974/citation-record.json","paper":"/paper/2507.07974"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2406.00799","last_updated":"2025-03-06T17:43:10Z","snapshot_observed_at":"2026-08-08T01:50:42.192362Z","submitted_at":"2024-06-02T16:53:21Z","title":"Get my drift? Catching LLM Task Drift with Activation Deltas","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00799","snapshot_observed_at":"2026-08-06T18:32:38.442495Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-06T18:25:32.971973Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:38.442495Z"},"links":{"cited_paper":"/paper/2406.00799","citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:34544b00471129ed326ca41d75e19683ab24428d20d965e687cd4b01bfa30e47","observation_id":"70deac73-eb39-4506-8e14-af93fb311975","resolution":{"observed_at":"2026-08-06T18:32:38.442495Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.13161","last_updated":"2024-04-19T20:11:12Z","snapshot_observed_at":"2026-08-07T13:01:36.699787Z","submitted_at":"2024-04-19T20:11:12Z","title":"CyberSecEval 2: A Wide-Ranging Cybersecurity Evaluation Suite for Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.13161","snapshot_observed_at":"2026-08-06T18:32:38.557329Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-06T18:25:32.971973Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:38.557329Z"},"links":{"cited_paper":"/paper/2404.13161","citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:dd8cc3a98351a53528bbc8ec78c3c30aad21fe34e0a97e59d338ce8ee33acdbb","observation_id":"2d84767a-0df9-4771-901c-ec6aef9c879b","resolution":{"observed_at":"2026-08-06T18:32:38.557329Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.06363","last_updated":"2024-09-25T19:48:39Z","snapshot_observed_at":"2026-07-06T17:27:58.440355Z","submitted_at":"2024-02-09T12:15:51Z","title":"StruQ: Defending Against Prompt Injection with Structured Queries","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.06363","snapshot_observed_at":"2026-08-06T18:32:38.700951Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-06T18:25:32.971973Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:38.700951Z"},"links":{"cited_paper":"/paper/2402.06363","citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:423cb26d17698de30b0c3f69998188654769abe99604a9d4bad468e49cc8d5f5","observation_id":"9ab0f8a5-2e4b-41a9-8917-1f35c561db7b","resolution":{"observed_at":"2026-08-06T18:32:38.700951Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05451","last_updated":"2025-07-03T05:45:41Z","snapshot_observed_at":"2026-07-06T19:29:18.770662Z","submitted_at":"2024-10-07T19:34:35Z","title":"SecAlign: Defending Against Prompt Injection with Preference Optimization","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.05451","snapshot_observed_at":"2026-08-06T18:32:38.828080Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-06T18:25:32.971973Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:38.828080Z"},"links":{"cited_paper":"/paper/2410.05451","citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:383501f64618613c9c8684e82d47a941f92b5df54f5ed7a106b895970bad92cb","observation_id":"6ede77e6-208c-4571-8ddc-ee3fe5407b0c","resolution":{"observed_at":"2026-08-06T18:32:38.828080Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:38.970617Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-06T18:25:32.971973Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:38.970617Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:ece51cf0c03784e70e88e4fc771f1bfcfd0aadef74acf84a4c3f25094d10027f","observation_id":"20f911fd-9d68-486c-ba8b-88f71854ef2a","resolution":{"observed_at":"2026-08-06T18:32:38.970617Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:39.094310Z","title":"Angelopoulos, Tianle Li, Dacheng Li, Banghua Zhu, Hao Zhang, Michael I","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-06T18:25:32.971973Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:39.094310Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:eb4cf64b4390eb36d02e9410a0d14f27e0e62afbfc9403a4dceccc4eb55ade1b","observation_id":"8f31587f-0f4d-49f9-bcdc-333a23327ed0","resolution":{"observed_at":"2026-08-06T18:32:39.094310Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.18813","last_updated":"2025-06-24T08:05:33Z","snapshot_observed_at":"2026-08-07T19:59:01.081751Z","submitted_at":"2025-03-24T15:54:10Z","title":"Defeating Prompt Injections by Design","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.18813","snapshot_observed_at":"2026-08-06T18:32:39.188120Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-06T18:25:32.971973Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:39.188120Z"},"links":{"cited_paper":"/paper/2503.18813","citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:719a14bd49ca9b2e64a0d167df9737e464639a6e45b3ef3893c1ba7525b20749","observation_id":"994bbd42-cfd1-4ab1-81a0-07436532cf7e","resolution":{"observed_at":"2026-08-06T18:32:39.188120Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"6122.36674","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:45.431506Z","title":null,"venue":null,"work_id":"e34981f3-46e2-41af-9a3d-7257b181dd58","year":2023},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-06T18:25:32.971973Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:39.419209Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:8dc77f346a747f2fdaa980131b5db3f544d92a5d71e5976db63f871adb3f3779","observation_id":"de3f473a-91df-48b7-b18f-8f49a401832b","resolution":{"observed_at":"2026-08-06T18:32:45.517328Z","resolver_source":"raw_fallback","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:39.601601Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-06T18:25:32.971973Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:39.601601Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:d07c8805255c845cd810d2a0bcbbbd94996284c28717e34f59337de809d939db","observation_id":"8a34d255-a3de-41ca-87fb-87e6e020af5d","resolution":{"observed_at":"2026-08-06T18:32:39.601601Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2106.09685","last_updated":"2021-10-16T18:40:34Z","snapshot_observed_at":"2026-08-07T07:43:16.294957Z","submitted_at":"2021-06-17T17:37:18Z","title":"LoRA: Low-Rank Adaptation of Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2106.09685","snapshot_observed_at":"2026-08-06T18:32:39.724332Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-06T18:25:32.971973Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:39.724332Z"},"links":{"cited_paper":"/paper/2106.09685","citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:46f12924ed2f69251f122de85c59f34f8fe0cd00c02e769f4efb5e69d5c34f66","observation_id":"d044c525-6379-4223-bbdb-d62c0e739627","resolution":{"observed_at":"2026-08-06T18:32:39.724332Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:49.948264Z","title":"Hsu, and Pin-Yu Chen","venue":null,"work_id":"b46443f2-fa1d-4bf6-83bc-5be146c21762","year":2025},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-06T18:25:32.971973Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:39.919502Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:009824d0280580e2bf94d1b12c9e59c1fd8ad2bcea291261c7fee5314581db04","observation_id":"b3b16656-f545-49ea-8283-cec467f7fd34","resolution":{"observed_at":"2026-08-06T18:32:50.101732Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:49.723004Z","title":"Joshi, Hanna Moazam, Heather Miller, Matei Zaharia, and Christopher Potts","venue":null,"work_id":"8e1270d8-e85e-4203-b6af-a447756b1a1a","year":2024},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-06T18:25:32.971973Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:40.067620Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:4baad752360a998bc5c035efc6c369ec91b68b21a85df2bceaa75ffb18561ea8","observation_id":"c9248236-d609-4c9f-bd72-043c1d0accf3","resolution":{"observed_at":"2026-08-06T18:32:49.825978Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:49.638013Z","title":null,"venue":null,"work_id":"656f8e33-8123-43a6-93a8-f25a98013cfe","year":2023},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-06T18:25:32.971973Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:40.147230Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:3104dd47025ab4fa0e6e028ecb551b440962f941d1df0efe135c89e5a679d102","observation_id":"428da68c-ebbc-4bca-8f4f-fa741a3ee5aa","resolution":{"observed_at":"2026-08-06T18:32:49.707217Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:40.224826Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-06T18:25:32.971973Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:40.224826Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:1fc105d318a42307514730bd437f91819f208dca6f952cb2a7e09aec0f1dc63a","observation_id":"355fe044-1d97-405f-9b69-d24229d21e0a","resolution":{"observed_at":"2026-08-06T18:32:40.224826Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:49.487355Z","title":"Hashimoto","venue":null,"work_id":"e8abab88-d42e-46e6-8d41-9f2ec531a23c","year":2023},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-06T18:25:32.971973Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:40.344624Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:069ffc86afabf1c9bb519d47df9443f42edbb316aff33404f3dc680140f4fec6","observation_id":"b9b7a7aa-011d-4fed-8ba1-a1590d9eedfe","resolution":{"observed_at":"2026-08-06T18:32:49.575464Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:49.355292Z","title":null,"venue":null,"work_id":"f0fe41d0-74bf-4887-a321-234f9479c80f","year":2021},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-06T18:25:32.971973Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:40.439968Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:9f4b875205b2f78598af03353f6814be77b085fa60cc9a90986b5e0b9741b7f6","observation_id":"d4fc5046-9194-4df1-bf95-869d2c8a54fe","resolution":{"observed_at":"2026-08-06T18:32:49.420803Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2502.13141","last_updated":"2025-02-18T18:59:00Z","snapshot_observed_at":"2026-08-07T18:07:28.802660Z","submitted_at":"2025-02-18T18:59:00Z","title":"UniGuardian: A Unified Defense for Detecting Prompt Injection, Backdoor Attacks and Adversarial Attacks in Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.13141","snapshot_observed_at":"2026-08-06T18:32:40.613792Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-06T18:25:32.971973Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:40.613792Z"},"links":{"cited_paper":"/paper/2502.13141","citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:c840f438b882c41ef8c918ae34713b78ac7b3b12e9ece0c70ff3e91280e78854","observation_id":"190efc79-74f7-4d83-a635-89f5c2bcb68a","resolution":{"observed_at":"2026-08-06T18:32:40.613792Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04957","last_updated":"2024-03-07T23:46:20Z","snapshot_observed_at":"2026-08-08T04:50:42.660630Z","submitted_at":"2024-03-07T23:46:20Z","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.04957","snapshot_observed_at":"2026-08-06T18:32:40.695022Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-06T18:25:32.971973Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:40.695022Z"},"links":{"cited_paper":"/paper/2403.04957","citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:84ecf82e3a8a8aca0ccad0037390dc7241d12ad63d9738c22146d2b0c0d3c118","observation_id":"98b6a98b-c918-43b7-83b6-5e56d436e594","resolution":{"observed_at":"2026-08-06T18:32:40.695022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:40.780835Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-06T18:25:32.971973Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:40.780835Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:3ac1b239de29ced0f41952cd939b81939f37923db16709348a3de0b52d370b25","observation_id":"97f5d211-58eb-4eed-8bc9-2559a5cbf1b7","resolution":{"observed_at":"2026-08-06T18:32:40.780835Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:40.944988Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-06T18:25:32.971973Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:40.944988Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:2a984aac7a42da5923dc022e47133617f421509ba08b24de309604a91d09525d","observation_id":"348a0822-5451-4ee3-a4e0-cd7ace13e17c","resolution":{"observed_at":"2026-08-06T18:32:40.944988Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:49.084502Z","title":null,"venue":null,"work_id":"b7b12468-5d94-4c44-8bb9-03f2095fd81e","year":2022},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-06T18:25:32.971973Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:41.026529Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:65513c545610eec344059ac161dd220e9b61bee7da7d17f737f8ff188a7eb775","observation_id":"18e0109c-fb7f-4ce8-851a-86edff0d087d","resolution":{"observed_at":"2026-08-06T18:32:49.145765Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:48.960658Z","title":null,"venue":null,"work_id":"fe8daaa0-d6cc-42c5-a68b-430b3c8146ac","year":2024},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-06T18:25:32.971973Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:41.095949Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:f8277117b655e5a2fb23900e24eaf768535a66a8a0c8a05b08f6349b8431e80d","observation_id":"2003e6b8-6a4b-4646-b29a-455760a2f4d7","resolution":{"observed_at":"2026-08-06T18:32:49.019498Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:48.842311Z","title":null,"venue":null,"work_id":"1127974d-a645-4bbc-baff-aa5196e22204","year":2024},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-06T18:25:32.971973Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:41.159789Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:62d4c6a9f2a3d6f53b842621f095ec0eae2ac15be0b6d95db27f6e600485138a","observation_id":"7c37b11c-8886-413a-a66a-787f707d5dfc","resolution":{"observed_at":"2026-08-06T18:32:48.886048Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:48.727864Z","title":null,"venue":null,"work_id":"c35772ce-ff55-4ddb-b0ca-8e8d6071e5e3","year":2024},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-06T18:25:32.971973Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:41.262034Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:59155dcfc24783c93dec0f99ee0e30b27e9146fc6b3008e28d359aaf9f1e2034","observation_id":"feb7ba66-ef8a-4906-9e5c-95035cfd8844","resolution":{"observed_at":"2026-08-06T18:32:48.768104Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:48.576149Z","title":null,"venue":null,"work_id":"fa1dbc83-be6f-4b34-80b4-b69ba434a5d4","year":2025},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-06T18:25:32.971973Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:41.321261Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:3f831e10e3da45e90ac8b9b32e9f8f9a8673978ee0b2ccdf35b2fcbb21221c94","observation_id":"facda6f5-75d6-452c-a9d7-52b43619f143","resolution":{"observed_at":"2026-08-06T18:32:48.644595Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:48.418773Z","title":null,"venue":null,"work_id":"dcdf89ce-e0c7-4555-ba71-cab817dd1b58","year":2023},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-06T18:25:32.971973Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:41.399597Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:d44d942abdcb95d78a6a9554947d1fa41ca3f3a602054e67d77f6d1b02785d43","observation_id":"05afec08-e036-489e-8b5e-63d70c2e5a72","resolution":{"observed_at":"2026-08-06T18:32:48.490841Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:41.457013Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-06T18:25:32.971973Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:41.457013Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:24219d65e21d48e7292e7ba570c12cde178923758ca9dbdad5d73bfe4c83591f","observation_id":"88ad8792-c823-40ff-99cc-0c4d3320fd9f","resolution":{"observed_at":"2026-08-06T18:32:41.457013Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:41.570906Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-06T18:25:32.971973Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:41.570906Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:0833ed4cc1e7418d817d10e93d7d46b923533653171bc51b8812ef99dbecc98d","observation_id":"b56f6ca4-1ac9-4bde-aa6b-6b39ed4d4a73","resolution":{"observed_at":"2026-08-06T18:32:41.570906Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:48.319923Z","title":null,"venue":null,"work_id":"edcc1dc7-cd49-4b75-a6e3-7121748494d9","year":2024},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-06T18:25:32.971973Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:41.669619Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:4307449cb5398335aa8b6aabba19481d2a72e9bc7a2860fab4877d6820dae407","observation_id":"efbb61b7-605f-4de8-a0ac-9fa53b136c3d","resolution":{"observed_at":"2026-08-06T18:32:48.360671Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:41.740788Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-06T18:25:32.971973Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:41.740788Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:7ebfaa615960c52fdec5ffc034ce19976d10e8a159e0b8aaec8e05c20e51547b","observation_id":"96e9f6bf-ed86-4970-86bc-a6a86a19c3a0","resolution":{"observed_at":"2026-08-06T18:32:41.740788Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:47.965079Z","title":null,"venue":null,"work_id":"e63e0e0c-c927-44c4-b745-0f01e69098b0","year":2025},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-06T18:25:32.971973Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:41.888137Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:0b9f426cfb1e0b7243d44a6a208b0fb6af1399f3e03ddf3152639b6d6d0292f2","observation_id":"000820f1-964e-4176-a142-a1133e6a5280","resolution":{"observed_at":"2026-08-06T18:32:48.092532Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:47.734269Z","title":null,"venue":null,"work_id":"47415266-428d-4463-bf9d-8b025f969465","year":2023},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-06T18:25:32.971973Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:41.945512Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:6300c8c812ddace2bbf95dad5ad665abcdc71ca6cd69a3036d03243548ab4b38","observation_id":"1da3d644-8260-4e79-bc79-24662ce8a970","resolution":{"observed_at":"2026-08-06T18:32:47.843438Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:47.584567Z","title":null,"venue":null,"work_id":"322e0458-d299-4a6c-97d9-d3dbf71ae287","year":2024},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-06T18:25:32.971973Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:42.036261Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:16c23d1522c910dc859c6db8c455dfc7cef9a68cad7a7fb629306925b495219c","observation_id":"c389744f-a32a-419c-a020-dcaa75a4e240","resolution":{"observed_at":"2026-08-06T18:32:47.615215Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:42.150644Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-06T18:25:32.971973Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:42.150644Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:d54c082977c415c8f0eb9459d828e1bf06a52a04ea1774711fd5acb164c9f7f6","observation_id":"8afa656f-67a0-4830-852e-bc6aadb1f529","resolution":{"observed_at":"2026-08-06T18:32:42.150644Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:47.369782Z","title":null,"venue":null,"work_id":"0dd19ac7-25b8-4a2f-95d5-26a8e020c5bd","year":2024},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-06T18:25:32.971973Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:42.232639Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:585cd52e4d83dc3aaa379c0e8408f5036411f3e3f2f5b138d9a01c00c34bdc14","observation_id":"8f93350a-a74b-442c-979f-f06fbf61e616","resolution":{"observed_at":"2026-08-06T18:32:47.469220Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:47.208689Z","title":null,"venue":null,"work_id":"6bfbc6b3-bb9b-4835-bf57-68f16b2b1433","year":2024},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-06T18:25:32.971973Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:42.331638Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:1af7e412c9637692adc3a422bf1ce667dd4e22fb5bc1bb37784f2016539239b0","observation_id":"7e49a9ca-1ddb-4af1-8f21-c4a43cb49d7c","resolution":{"observed_at":"2026-08-06T18:32:47.299636Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:46.996925Z","title":null,"venue":null,"work_id":"c7a73705-db17-4765-b1d9-9f9cd88ed844","year":null},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-06T18:25:32.971973Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:42.408237Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:7530bd89d22a3b9d5b1eec8fae0ca49dff1d828b058ce0b5cf10e78227e68f07","observation_id":"4d236274-ed7b-42ed-88a6-8e8dc36937c9","resolution":{"observed_at":"2026-08-06T18:32:47.095842Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.13208","last_updated":"2024-04-19T22:55:23Z","snapshot_observed_at":"2026-08-02T11:48:17.206729Z","submitted_at":"2024-04-19T22:55:23Z","title":"The Instruction Hierarchy: Training LLMs to Prioritize Privileged Instructions","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.13208","snapshot_observed_at":"2026-08-06T18:32:42.689401Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-06T18:25:32.971973Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:42.689401Z"},"links":{"cited_paper":"/paper/2404.13208","citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:22aed32cfae207e74bb3af66ec8cc12cee2e48a6bfe72c6cbe015f326eeff6b2","observation_id":"867c4399-a773-4c4f-b547-b044dae7e006","resolution":{"observed_at":"2026-08-06T18:32:42.689401Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:46.762040Z","title":null,"venue":null,"work_id":"b825fc2d-54cf-4482-ae65-c994fd7d90ee","year":2023},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-06T18:25:32.971973Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:42.758508Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:4f417b3810df29da6852758b1a01456757b635f425362671a8b73957a2ca100b","observation_id":"f83284f0-90e2-4a1a-ba17-078112756859","resolution":{"observed_at":"2026-08-06T18:32:46.853657Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.06387","last_updated":"2024-05-25T07:01:15Z","snapshot_observed_at":"2026-08-06T13:25:52.403871Z","submitted_at":"2023-10-10T07:50:29Z","title":"Jailbreak and Guard Aligned Language Models with Only Few In-Context Demonstrations","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.06387","snapshot_observed_at":"2026-08-06T18:32:42.838856Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-06T18:25:32.971973Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:42.838856Z"},"links":{"cited_paper":"/paper/2310.06387","citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:b83500a8b419166a217210b32b4d833d0f4798cd7c86516d7186c059297abb9b","observation_id":"c9e12c66-942d-4f13-b196-686c4bf8756d","resolution":{"observed_at":"2026-08-06T18:32:42.838856Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:46.511727Z","title":null,"venue":null,"work_id":"86d86708-a557-47d7-9796-2a4bc959be69","year":2022},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-06T18:25:32.971973Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:42.934138Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:7e5f753afb38b05475d9efaebadfc1dd48058768beeb3c80134778f04fcdb93d","observation_id":"a864402b-0509-43ec-81c8-2df92e7213b2","resolution":{"observed_at":"2026-08-06T18:32:46.641626Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2503.24370","last_updated":"2025-05-21T17:51:27Z","snapshot_observed_at":"2026-08-07T16:20:08.878901Z","submitted_at":"2025-03-31T17:50:13Z","title":"Effectively Controlling Reasoning Models through Thinking Intervention","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.24370","snapshot_observed_at":"2026-08-06T18:32:43.052649Z","title":"Wang, and Prateek Mittal","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-06T18:25:32.971973Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:43.052649Z"},"links":{"cited_paper":"/paper/2503.24370","citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:18bfc7cde207f02c26d5514b2749c7177095106968c54eb280a25d86253390f9","observation_id":"a5d52f40-3e11-4152-9fb8-299456b639b5","resolution":{"observed_at":"2026-08-06T18:32:43.052649Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:46.376057Z","title":null,"venue":null,"work_id":"7111cb6c-2e3e-4065-a225-0cd297fa589c","year":null},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-06T18:25:32.971973Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:43.161456Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:64984248d6eb4c30e1676ba4c06138317382d4d61e866891ea518de93b3304ee","observation_id":"d4a4b962-fc63-4324-a86c-92b825238805","resolution":{"observed_at":"2026-08-06T18:32:46.454818Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.12148","last_updated":"2023-12-19T13:31:24Z","snapshot_observed_at":"2026-07-06T17:05:19.007669Z","submitted_at":"2023-12-19T13:31:24Z","title":"Parameter-Efficient Fine-Tuning Methods for Pretrained Language Models: A Critical Review and Assessment","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.12148","snapshot_observed_at":"2026-08-06T18:32:43.351303Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-06T18:25:32.971973Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:43.351303Z"},"links":{"cited_paper":"/paper/2312.12148","citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:e48bf39c9b2aa4a05bc08c7fa923597acde7ed6a3b10290ee378c4d69bdaabcf","observation_id":"4cc98494-dc94-4d14-93b6-57ebe08457f8","resolution":{"observed_at":"2026-08-06T18:32:43.351303Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"purl/1045146","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:44.872543Z","title":null,"venue":null,"work_id":"a5fd7a9f-7e53-47b0-94c2-47a7813645ba","year":2023},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-06T18:25:32.971973Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:43.484876Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:df60550fba13f5ac99f631e17f91fa0c57ed88b6175ae8c803eff23d103ba62d","observation_id":"44091a2a-b161-497a-9274-e95abd611087","resolution":{"observed_at":"2026-08-06T18:32:44.934779Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:43.568449Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-06T18:25:32.971973Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:43.568449Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:e65d3412289265ec5aaa9ff6b2190a5cc850b1bccfe627cae7f73bee64ef55a5","observation_id":"4300d97a-a3de-4ba7-8848-02d04f2f26a3","resolution":{"observed_at":"2026-08-06T18:32:43.568449Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:46.171522Z","title":null,"venue":null,"work_id":"69c63f9f-4436-4e0a-8577-e45390bcb4ed","year":2025},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-06T18:25:32.971973Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:43.659972Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:1f5c84b4f0acf0a328d7f0f56d0962f4d9fa87956ada28a339e2065cb3dc3261","observation_id":"3b493c9e-0051-4249-a6c6-ed4abde381fe","resolution":{"observed_at":"2026-08-06T18:32:46.272189Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.09102","last_updated":"2025-03-01T19:06:35Z","snapshot_observed_at":"2026-08-04T17:29:52.046121Z","submitted_at":"2024-10-09T12:52:41Z","title":"Instructional Segment Embedding: Improving LLM Safety with Instruction Hierarchy","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.09102","snapshot_observed_at":"2026-08-06T18:32:43.260092Z","title":"In International Conference on Learning Representations (ICLR)","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-06T18:25:32.971973Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:43.260092Z"},"links":{"cited_paper":"/paper/2410.09102","citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:c1d4cf01a82db5ff85771bc0439cd3ff10e3b99cf6d6a19bd4cb1792bbae2e85","observation_id":"801daeeb-141b-498e-8cb4-1a6a8f010be0","resolution":{"observed_at":"2026-08-06T18:32:43.260092Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:43.883708Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-06T18:25:32.971973Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:43.883708Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:fbcac599a47062834332b80a6ba65948b731ad77e2390348bb3d6e2f3a54edb2","observation_id":"88fb5da2-d55e-4fa5-ab23-6409cdd89dd6","resolution":{"observed_at":"2026-08-06T18:32:43.883708Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.14778/3611540","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:44.554884Z","title":null,"venue":null,"work_id":"27f2bdd1-a523-4d33-a5c0-2e75a0f3fa99","year":2023},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-06T18:25:32.971973Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:44.005067Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:ef58262878948caf0c43e35af4817071c6a2d04a5e43abc790b4383b4baf4737","observation_id":"cc820dbf-8668-48ed-9fb4-e5843a2f0afc","resolution":{"observed_at":"2026-08-06T18:32:44.628903Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2401.18018","last_updated":"2024-06-03T06:52:58Z","snapshot_observed_at":"2026-07-06T17:23:14.388964Z","submitted_at":"2024-01-31T17:28:24Z","title":"On Prompt-Driven Safeguarding for Large Language Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.18018","snapshot_observed_at":"2026-08-06T18:32:44.096157Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-06T18:25:32.971973Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:44.096157Z"},"links":{"cited_paper":"/paper/2401.18018","citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:0360daae7b98d47a9fc63829abe3857a563fac9babfcd6ac1da92f748de166f8","observation_id":"c46fd5ac-48fa-416e-9127-e34bc783e919","resolution":{"observed_at":"2026-08-06T18:32:44.096157Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:45.869451Z","title":null,"venue":null,"work_id":"abacf174-9ebf-4bac-8722-f55c765b7ec8","year":2024},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-06T18:25:32.971973Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:44.205547Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:7fd27443efa33473c33e997b99e237e2cda3199629d0f48dce8fa926426c29dc","observation_id":"b16a4cff-df7b-45c4-b353-ac8a73dbace6","resolution":{"observed_at":"2026-08-06T18:32:45.998508Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:43.769570Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-06T18:25:32.971973Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:43.769570Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:8cd60e372608b621a14bb323a11818091636029ae24161826f2374016efdc779","observation_id":"9a8b2c99-4ef4-43db-a997-d9e4e979a834","resolution":{"observed_at":"2026-08-06T18:32:43.769570Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:45.732756Z","title":null,"venue":null,"work_id":"4fae8832-bb92-4415-b09c-51da05f6248f","year":2025},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-06T18:25:32.971973Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:44.393617Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:b8442b548e42501a39f60f89715d09dc244cd963dbae5a85bfa2e49e932678d6","observation_id":"1426ba8a-b9b4-4876-9c84-1f51bfb9f8b0","resolution":{"observed_at":"2026-08-06T18:32:45.802563Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-07-06T15:59:23.019044Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-08-06T18:32:44.285307Z","title":"Zico Kolter, and Matt Fredrikson","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-06T18:25:32.971973Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:44.285307Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:cc1b9ac38f2b75529e51bd578b7b8a8212bf529a9ee581147409887e294c3070","observation_id":"aad169b6-04a0-46ca-8be5-38d353ad6935","resolution":{"observed_at":"2026-08-06T18:32:44.285307Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:48.192449Z","title":"Gradient Descent","venue":null,"work_id":"c9d949c4-c5b1-43d6-a1c8-839907d1cad5","year":2023},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-06T18:25:32.971973Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":2023,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:41.817195Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:6ddf10c63ceee9d6bf3c4a38754cc03ccd710f548473881b6a9ba936d97eb0bf","observation_id":"6c142056-0b66-43b3-823d-5cbd2bcf3fdf","resolution":{"observed_at":"2026-08-06T18:32:48.260383Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:49.187377Z","title":"In USENIX Security Symposium","venue":null,"work_id":"a38d2621-d540-4c1e-8aff-8f04bc8c81d6","year":null},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-06T18:25:32.971973Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:40.851785Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:1f505d97ac5d9d07619bbaba0842762035319125914e928df354ed15390e8044","observation_id":"7ee63721-9ed8-45a9-9bac-9df37a85cb02","resolution":{"observed_at":"2026-08-06T18:32:49.277372Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.14534","last_updated":"2025-05-20T15:54:45Z","snapshot_observed_at":"2026-08-08T20:01:40.635798Z","submitted_at":"2025-05-20T15:54:45Z","title":"Lessons from Defending Gemini Against Indirect Prompt Injections","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.14534","snapshot_observed_at":"2026-08-06T18:32:42.517641Z","title":"arXiv preprint arXiv:2505.14534 (2025)","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-06T18:25:32.971973Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":2025,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:42.517641Z"},"links":{"cited_paper":"/paper/2505.14534","citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:5be2208497affd2829497306ef08a3181b068152245eef077cd2dd200db68f13","observation_id":"c58efc40-5b68-4eab-a800-cf3ad0497923","resolution":{"observed_at":"2026-08-06T18:32:42.517641Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:32:40.529016Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-06T18:25:32.971973Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"reference_index":4597,"source":"pdf_text","source_observed_at":"2026-08-06T18:32:40.529016Z"},"links":{"citing_paper":"/paper/2507.07974"},"observation_digest":"sha256:972bde778974f49724e655994a7cc49b742e384f130429b25819fdca716d2ad2","observation_id":"d1664658-9e36-4c25-b524-7ff79a2ecfcc","resolution":{"observed_at":"2026-08-06T18:32:40.529016Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","latest_version":2,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-06T18:25:32.971973Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens"},"reference_resolution":{"displayed":59,"state_counts":{"malformed_identifier":1,"metadata_mismatch":1,"parse_uncertain":0,"unresolved":50,"verified_exact":2,"verified_fuzzy":5},"total_outbound_references":59},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 59 of 59 outbound references and 8 inbound Pith citation observations for arXiv:2507.07974."}