{"as_of":"2026-08-12T04:22:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:6919217c4d0faf29dfae3e61ed9f979d85816f954f483a76383d4625671371a5","coverage":[{"denominator":10,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":10,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T17:34:41.012242Z","state":"measured"},{"denominator":11,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":11,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-11T06:34:44.6726+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T15:40:52.686816Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"pith","source_observed_at":"2026-08-06T15:40:53.293923Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2507.10457","last_updated":"2025-08-06T22:10:30Z","snapshot_observed_at":"2026-08-07T13:02:26.385087Z","submitted_at":"2025-07-14T16:37:05Z","title":"Logic layer Prompt Control Injection (LPCI): A Novel Security Vulnerability Class in Agentic Systems","version":2},"cited_work":{"arxiv_id":"2507.10457","doi":null,"metadata_source":"pith","pith_arxiv_id":"2507.10457","snapshot_observed_at":"2026-08-06T15:40:53.293923Z","title":"Logic layer Prompt Control Injection (LPCI): A Novel Security Vulnerability Class in Agentic Systems","venue":"cs.CR","work_id":"fe488007-c873-419a-bf2d-25772f9b3b9d","year":2025},"citing_paper":{"arxiv_id":"2507.15330","last_updated":"2025-07-21T07:41:58Z","snapshot_observed_at":"2026-08-11T22:34:23.473078Z","submitted_at":"2025-07-21T07:41:58Z","title":"QSAF: A Novel Mitigation Framework for Cognitive Degradation in Agentic AI","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-06T15:40:52.686816Z"},"links":{"cited_paper":"/paper/2507.10457","citing_paper":"/paper/2507.15330"},"observation_digest":"sha256:0d8e90446e72a27aa4f6f4159aeacb2df8fb78d637bf8a0db47ff6359a9f9494","observation_id":"ca09cb54-2308-4910-a535-74d9dc080b1f","resolution":{"observed_at":"2026-08-06T15:40:53.389894Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2507.10457/citation-record","integrity":"/paper/2507.10457/integrity","json":"/paper/2507.10457/citation-record.json","paper":"/paper/2507.10457"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2212.08073","last_updated":"2022-12-15T06:19:23Z","snapshot_observed_at":"2026-08-02T04:53:58.766070Z","submitted_at":"2022-12-15T06:19:23Z","title":"Constitutional AI: Harmlessness from AI Feedback","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2212.08073","snapshot_observed_at":"2026-08-06T17:34:40.979596Z","title":"Constitutional AI: Harmlessness from AI Feedback,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.10457","last_updated":"2025-08-06T22:10:30Z","snapshot_observed_at":"2026-08-07T13:02:26.385087Z","submitted_at":"2025-07-14T16:37:05Z","title":"Logic layer Prompt Control Injection (LPCI): A Novel Security Vulnerability Class in Agentic Systems","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-06T17:34:40.979596Z"},"links":{"cited_paper":"/paper/2212.08073","citing_paper":"/paper/2507.10457"},"observation_digest":"sha256:f8cb30e86b2366306322b22eee1c8696c6346bd2f2672101aaf029e861835b33","observation_id":"3d6d3892-330b-4ef4-ba6b-49c54ecdc755","resolution":{"observed_at":"2026-08-06T17:34:40.979596Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.13161","last_updated":"2024-04-19T20:11:12Z","snapshot_observed_at":"2026-08-07T13:01:36.699787Z","submitted_at":"2024-04-19T20:11:12Z","title":"CyberSecEval 2: A Wide-Ranging Cybersecurity Evaluation Suite for Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.13161","snapshot_observed_at":"2026-08-06T17:34:40.983819Z","title":"CyberSecEval 2: A Wide-Ranging Cybersecurity Evaluation Suite for Large Language Models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.10457","last_updated":"2025-08-06T22:10:30Z","snapshot_observed_at":"2026-08-07T13:02:26.385087Z","submitted_at":"2025-07-14T16:37:05Z","title":"Logic layer Prompt Control Injection (LPCI): A Novel Security Vulnerability Class in Agentic Systems","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-06T17:34:40.983819Z"},"links":{"cited_paper":"/paper/2404.13161","citing_paper":"/paper/2507.10457"},"observation_digest":"sha256:497f7cb8df7736ca383ee41ddf1847f688da18168b7933f0fd2019bbe4bab263","observation_id":"5f0a98ab-59e0-4dce-bf53-a7b3dcc501e3","resolution":{"observed_at":"2026-08-06T17:34:40.983819Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2209.07858","last_updated":"2022-11-22T19:12:57Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2022-08-23T23:37:14Z","title":"Red Teaming Language Models to Reduce Harms: Methods, Scaling Behaviors, and Lessons Learned","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2209.07858","snapshot_observed_at":"2026-08-06T17:34:40.987575Z","title":"Red Teaming Language Models to Reduce Harms: Methods, Scaling Behaviors, and Lessons Learned,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.10457","last_updated":"2025-08-06T22:10:30Z","snapshot_observed_at":"2026-08-07T13:02:26.385087Z","submitted_at":"2025-07-14T16:37:05Z","title":"Logic layer Prompt Control Injection (LPCI): A Novel Security Vulnerability Class in Agentic Systems","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-06T17:34:40.987575Z"},"links":{"cited_paper":"/paper/2209.07858","citing_paper":"/paper/2507.10457"},"observation_digest":"sha256:eaa6a596d2814549b1764e1b725a57bd26a6006b484c62e2c0ebc664d90b4cd8","observation_id":"1288abbb-1d3d-4d66-bc4c-d36aed4532fd","resolution":{"observed_at":"2026-08-06T17:34:40.987575Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.13161","last_updated":"2024-04-19T20:11:12Z","snapshot_observed_at":"2026-08-07T13:01:36.699787Z","submitted_at":"2024-04-19T20:11:12Z","title":"CyberSecEval 2: A Wide-Ranging Cybersecurity Evaluation Suite for Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.13161","snapshot_observed_at":"2026-08-06T17:34:40.992014Z","title":"CyberSecEval 2: A Wide-Ranging Cybersecurity Evaluation Suite for Large Language Models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.10457","last_updated":"2025-08-06T22:10:30Z","snapshot_observed_at":"2026-08-07T13:02:26.385087Z","submitted_at":"2025-07-14T16:37:05Z","title":"Logic layer Prompt Control Injection (LPCI): A Novel Security Vulnerability Class in Agentic Systems","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-06T17:34:40.992014Z"},"links":{"cited_paper":"/paper/2404.13161","citing_paper":"/paper/2507.10457"},"observation_digest":"sha256:ef9c36264386512a9d1cf55b830faeb14438b7d7914df507c93b68e47881c727","observation_id":"a77dce2d-abb8-4874-843d-9a4fa3a9498f","resolution":{"observed_at":"2026-08-06T17:34:40.992014Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:34:41.116511Z","title":"JSON Web Token (JWT),","venue":null,"work_id":"ec1c3256-f2cc-4018-ab68-2e9b1677fccd","year":2015},"citing_paper":{"arxiv_id":"2507.10457","last_updated":"2025-08-06T22:10:30Z","snapshot_observed_at":"2026-08-07T13:02:26.385087Z","submitted_at":"2025-07-14T16:37:05Z","title":"Logic layer Prompt Control Injection (LPCI): A Novel Security Vulnerability Class in Agentic Systems","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-06T17:34:40.995517Z"},"links":{"citing_paper":"/paper/2507.10457"},"observation_digest":"sha256:dca4fd9ae6c31309fceda8ce064055011500fb38cb1c5beedc652952df7ff320","observation_id":"76e04d12-25b7-4d4a-90b2-9f8a2253f257","resolution":{"observed_at":"2026-08-06T17:34:41.119953Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:34:41.107655Z","title":"ATLAS: Adversarial Threat Landscape for Artificial-Intelligence Systems,","venue":null,"work_id":"8875f738-d3f4-457e-add6-253b49bb7faf","year":2025},"citing_paper":{"arxiv_id":"2507.10457","last_updated":"2025-08-06T22:10:30Z","snapshot_observed_at":"2026-08-07T13:02:26.385087Z","submitted_at":"2025-07-14T16:37:05Z","title":"Logic layer Prompt Control Injection (LPCI): A Novel Security Vulnerability Class in Agentic Systems","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-06T17:34:40.999485Z"},"links":{"citing_paper":"/paper/2507.10457"},"observation_digest":"sha256:81ef0c99a47b78eb820302fa5edacf74e334fff3e650158ad5df252d065c7bfe","observation_id":"5d9de426-a51e-4820-8bc6-e83828edf601","resolution":{"observed_at":"2026-08-06T17:34:41.110796Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2412.06090","last_updated":"2024-12-08T22:46:30Z","snapshot_observed_at":"2026-08-11T19:59:12.832898Z","submitted_at":"2024-12-08T22:46:30Z","title":"Trust No AI: Prompt Injection Along The CIA Security Triad","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.06090","snapshot_observed_at":"2026-08-06T17:34:41.002845Z","title":"Trust No AI: Prompt Injection Along The CIA Security Triad,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.10457","last_updated":"2025-08-06T22:10:30Z","snapshot_observed_at":"2026-08-07T13:02:26.385087Z","submitted_at":"2025-07-14T16:37:05Z","title":"Logic layer Prompt Control Injection (LPCI): A Novel Security Vulnerability Class in Agentic Systems","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-06T17:34:41.002845Z"},"links":{"cited_paper":"/paper/2412.06090","citing_paper":"/paper/2507.10457"},"observation_digest":"sha256:959e4174800d03b6bcde10f7c25508017e6ec18ffbea5283a77c0ccb2479dfa8","observation_id":"55f780b4-e192-4f91-9ed3-9afc3549a340","resolution":{"observed_at":"2026-08-06T17:34:41.002845Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:34:41.097743Z","title":"Spyware Injection Into Your ChatGPT’s Long-Term Memory (SpAI- ware),","venue":null,"work_id":"b3aa04d0-9053-4cbd-859c-b38cbabf4ed2","year":2024},"citing_paper":{"arxiv_id":"2507.10457","last_updated":"2025-08-06T22:10:30Z","snapshot_observed_at":"2026-08-07T13:02:26.385087Z","submitted_at":"2025-07-14T16:37:05Z","title":"Logic layer Prompt Control Injection (LPCI): A Novel Security Vulnerability Class in Agentic Systems","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-06T17:34:41.006253Z"},"links":{"citing_paper":"/paper/2507.10457"},"observation_digest":"sha256:6d07b4edf38eb2198b3120f89a0a2c6843156111ad89675096f3b1e8d4cb69a5","observation_id":"d189fb9f-0644-45bd-ba79-5625a96749dd","resolution":{"observed_at":"2026-08-06T17:34:41.101000Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:34:41.088323Z","title":"OWASP Top 10 for Large Language Model Applications,","venue":null,"work_id":"71c4afd9-69b7-4b82-96b2-085875c0b3cf","year":2025},"citing_paper":{"arxiv_id":"2507.10457","last_updated":"2025-08-06T22:10:30Z","snapshot_observed_at":"2026-08-07T13:02:26.385087Z","submitted_at":"2025-07-14T16:37:05Z","title":"Logic layer Prompt Control Injection (LPCI): A Novel Security Vulnerability Class in Agentic Systems","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-06T17:34:41.009198Z"},"links":{"citing_paper":"/paper/2507.10457"},"observation_digest":"sha256:c987a7d0e3d3287e97105046f156410e830b4ba521bc78322cd21726a067c603","observation_id":"cf0840e9-1bc4-4578-aa9a-2a6a4d0fdeb0","resolution":{"observed_at":"2026-08-06T17:34:41.091970Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:34:41.076274Z","title":"7 Container Security Best Practices for Enterprise Deployments,","venue":null,"work_id":"ec0cf58b-4d8a-46ac-818b-5d840fc5d6f1","year":2025},"citing_paper":{"arxiv_id":"2507.10457","last_updated":"2025-08-06T22:10:30Z","snapshot_observed_at":"2026-08-07T13:02:26.385087Z","submitted_at":"2025-07-14T16:37:05Z","title":"Logic layer Prompt Control Injection (LPCI): A Novel Security Vulnerability Class in Agentic Systems","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-06T17:34:41.012242Z"},"links":{"citing_paper":"/paper/2507.10457"},"observation_digest":"sha256:9d2ab7e69169c47622b999880b492ba1e3fdcfd6ed0277199f45c8aada810874","observation_id":"9babd59f-c144-4b40-9ed0-aad3936abbd4","resolution":{"observed_at":"2026-08-06T17:34:41.081903Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2507.10457","last_updated":"2025-08-06T22:10:30Z","latest_version":2,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-07T13:02:26.385087Z","submitted_at":"2025-07-14T16:37:05Z","title":"Logic layer Prompt Control Injection (LPCI): A Novel Security Vulnerability Class in Agentic Systems"},"reference_resolution":{"displayed":10,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":5,"verified_exact":0,"verified_fuzzy":5},"total_outbound_references":10},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"thesis":"As of 12 August 2026, this Paper Citation Record lists 10 of 10 outbound references and 1 inbound Pith citation observation for arXiv:2507.10457."}