{"as_of":"2026-08-07T10:30:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:59c35b0b55a03d26d1e3581538c518ef675e486c9465f9511ebe73f1851240eb","coverage":[{"denominator":29,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":29,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T16:34:05.446734Z","state":"measured"},{"denominator":32,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":32,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":3,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":3,"source":"paper_references, paper_reference_links","source_observed_at":"2026-05-22T12:46:44.819224Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-05-22T12:51:33.393440Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2507.13169","last_updated":"2025-07-17T14:33:36Z","snapshot_observed_at":"2026-08-06T16:26:27.439425Z","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats","version":1},"cited_work":{"arxiv_id":"2507.13169","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2507.13169","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Prompt injection 2.0: Hybrid ai threats","venue":null,"work_id":"0708d8cf-8ee2-43f8-b3f3-d6b3df1ea906","year":2025},"citing_paper":{"arxiv_id":"2509.06921","last_updated":"2026-04-15T05:15:58Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-09-08T17:33:59Z","title":"Neuro-Symbolic AI for Cybersecurity: State of the Art, Challenges, and Opportunities","version":2},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-05-18T18:04:09.528381Z"},"links":{"cited_paper":"/paper/2507.13169","citing_paper":"/paper/2509.06921"},"observation_digest":"sha256:75c9fc59a8d3b5e642d3cafeb7011ac679d5464e8f202e2a31b4d34e4e434041","observation_id":"e5e416d9-e605-440c-b626-69eb3f50bd19","resolution":{"observed_at":"2026-05-18T18:06:43.025006Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.13169","last_updated":"2025-07-17T14:33:36Z","snapshot_observed_at":"2026-08-06T16:26:27.439425Z","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats","version":1},"cited_work":{"arxiv_id":"2507.13169","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2507.13169","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Prompt injection 2.0: Hybrid ai threats","venue":null,"work_id":"0708d8cf-8ee2-43f8-b3f3-d6b3df1ea906","year":2025},"citing_paper":{"arxiv_id":"2510.23883","last_updated":"2026-04-03T16:27:34Z","snapshot_observed_at":"2026-08-02T13:42:34.526072Z","submitted_at":"2025-10-27T21:48:11Z","title":"Agentic AI Security: Threats, Defenses, Evaluation, and Open Challenges","version":3},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-05-18T03:42:10.703369Z"},"links":{"cited_paper":"/paper/2507.13169","citing_paper":"/paper/2510.23883"},"observation_digest":"sha256:64f6b30369e810f794206181118bae1d47cabd680792e591c26b66881c106a66","observation_id":"406e2f80-5836-4e26-8605-0a1161a23245","resolution":{"observed_at":"2026-05-18T03:42:22.431852Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.13169","last_updated":"2025-07-17T14:33:36Z","snapshot_observed_at":"2026-08-06T16:26:27.439425Z","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats","version":1},"cited_work":{"arxiv_id":"2507.13169","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2507.13169","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Prompt injection 2.0: Hybrid ai threats","venue":null,"work_id":"0708d8cf-8ee2-43f8-b3f3-d6b3df1ea906","year":2025},"citing_paper":{"arxiv_id":"2512.06556","last_updated":"2026-05-21T13:44:50Z","snapshot_observed_at":"2026-07-06T22:37:59.340166Z","submitted_at":"2025-12-06T20:07:58Z","title":"Semantic Attacks on Tool-Augmented LLMs: Securing the Model Context Protocol Against Descriptor-Level Manipulation","version":2},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-05-22T12:46:44.819224Z"},"links":{"cited_paper":"/paper/2507.13169","citing_paper":"/paper/2512.06556"},"observation_digest":"sha256:bd57c4d023f73c3c9bce4de67bb9ba6dfb826330216f163d1669370f156c8498","observation_id":"621df737-31d9-4a80-9d4e-e92f691c623e","resolution":{"observed_at":"2026-05-22T12:51:33.396810Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2507.13169/citation-record","integrity":"/paper/2507.13169/integrity","json":"/paper/2507.13169/citation-record.json","paper":"/paper/2507.13169"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2209.02128","last_updated":"2022-09-05T20:29:17Z","snapshot_observed_at":"2026-08-04T07:20:43.897179Z","submitted_at":"2022-09-05T20:29:17Z","title":"Evaluating the Susceptibility of Pre-Trained Language Models via Handcrafted Adversarial Examples","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2209.02128","snapshot_observed_at":"2026-08-06T16:34:03.088522Z","title":"J., et al","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.13169","last_updated":"2025-07-17T14:33:36Z","snapshot_observed_at":"2026-08-06T16:26:27.439425Z","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-06T16:34:03.088522Z"},"links":{"cited_paper":"/paper/2209.02128","citing_paper":"/paper/2507.13169"},"observation_digest":"sha256:1651cd9600b4e0d4f78c0edfe913717cc8b7a0ef2f3ee77565705fc59b7d121f","observation_id":"e22e7f76-32cd-4cb3-869f-3183830e0afa","resolution":{"observed_at":"2026-08-06T16:34:03.088522Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:34:07.946109Z","title":"C., & Heichman, R","venue":null,"work_id":"862ee3aa-1758-4358-867a-a8ac03b0999a","year":2024},"citing_paper":{"arxiv_id":"2507.13169","last_updated":"2025-07-17T14:33:36Z","snapshot_observed_at":"2026-08-06T16:26:27.439425Z","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-06T16:34:03.214886Z"},"links":{"citing_paper":"/paper/2507.13169"},"observation_digest":"sha256:caa4941281aa2b7a2088fe1b93d8c4ae8499c1b0d3ba6f34c567c4708369d18b","observation_id":"28fbf030-816c-41ff-903c-2df09f0a7f9c","resolution":{"observed_at":"2026-08-06T16:34:08.065627Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.05499","last_updated":"2025-12-29T02:25:27Z","snapshot_observed_at":"2026-07-06T15:40:27.639368Z","submitted_at":"2023-06-08T18:43:11Z","title":"Prompt Injection attack against LLM-integrated Applications","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.05499","snapshot_observed_at":"2026-08-06T16:34:03.313953Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.13169","last_updated":"2025-07-17T14:33:36Z","snapshot_observed_at":"2026-08-06T16:26:27.439425Z","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-06T16:34:03.313953Z"},"links":{"cited_paper":"/paper/2306.05499","citing_paper":"/paper/2507.13169"},"observation_digest":"sha256:a5d48a1df5e7ca344749989feeba668518fa95dc01c7cbfa899626261a67661c","observation_id":"4ba24e3f-f487-4b02-a626-63b6ad009055","resolution":{"observed_at":"2026-08-06T16:34:03.313953Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04957","last_updated":"2024-03-07T23:46:20Z","snapshot_observed_at":"2026-07-06T17:41:19.171822Z","submitted_at":"2024-03-07T23:46:20Z","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.04957","snapshot_observed_at":"2026-08-06T16:34:03.407180Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.13169","last_updated":"2025-07-17T14:33:36Z","snapshot_observed_at":"2026-08-06T16:26:27.439425Z","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-06T16:34:03.407180Z"},"links":{"cited_paper":"/paper/2403.04957","citing_paper":"/paper/2507.13169"},"observation_digest":"sha256:bf5d6a1819aa7d52cd513411c7e3606664e5407c5f66e0ed601a797423b687ce","observation_id":"513e5f8c-0e6b-4d1c-aa3d-8110b7bcb807","resolution":{"observed_at":"2026-08-06T16:34:03.407180Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2308.01990","last_updated":"2025-01-27T20:37:59Z","snapshot_observed_at":"2026-07-06T16:02:19.253303Z","submitted_at":"2023-08-03T19:03:18Z","title":"From Prompt Injections to SQL Injection Attacks: How Protected is Your LLM-Integrated Web Application?","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.01990","snapshot_observed_at":"2026-08-06T16:34:03.503194Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.13169","last_updated":"2025-07-17T14:33:36Z","snapshot_observed_at":"2026-08-06T16:26:27.439425Z","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-06T16:34:03.503194Z"},"links":{"cited_paper":"/paper/2308.01990","citing_paper":"/paper/2507.13169"},"observation_digest":"sha256:2ccdf3c95125f804b2853b13df87c266b62e58c4a86cade547dc584d66d2a7c8","observation_id":"2c8e481a-6979-4c1e-91d7-eb514330e081","resolution":{"observed_at":"2026-08-06T16:34:03.503194Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.14442","last_updated":"2024-11-05T18:38:30Z","snapshot_observed_at":"2026-07-06T19:53:56.407834Z","submitted_at":"2024-11-05T18:38:30Z","title":"AI Ethics by Design: Implementing Customizable Guardrails for Responsible AI Development","version":1},"cited_work":{"arxiv_id":"2411.14442","doi":null,"metadata_source":"pith","pith_arxiv_id":"2411.14442","snapshot_observed_at":"2026-08-06T16:34:06.334600Z","title":"AI Ethics by Design: Implementing Customizable Guardrails for Responsible AI Development","venue":"cs.CY","work_id":"761d77b0-5aad-482f-be8d-582cdcc1771a","year":2024},"citing_paper":{"arxiv_id":"2507.13169","last_updated":"2025-07-17T14:33:36Z","snapshot_observed_at":"2026-08-06T16:26:27.439425Z","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-06T16:34:03.624743Z"},"links":{"cited_paper":"/paper/2411.14442","citing_paper":"/paper/2507.13169"},"observation_digest":"sha256:11dd7358363015d4f98f183d99839ba44e597a474c45982822f573ea243350a1","observation_id":"81b7056d-e92d-4262-a83a-cfadff70051b","resolution":{"observed_at":"2026-08-06T16:34:06.402350Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.08837","last_updated":"2025-06-27T11:13:27Z","snapshot_observed_at":"2026-08-07T04:58:26.428959Z","submitted_at":"2025-06-10T14:23:55Z","title":"Design Patterns for Securing LLM Agents against Prompt Injections","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.08837","snapshot_observed_at":"2026-08-06T16:34:03.695223Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.13169","last_updated":"2025-07-17T14:33:36Z","snapshot_observed_at":"2026-08-06T16:26:27.439425Z","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-06T16:34:03.695223Z"},"links":{"cited_paper":"/paper/2506.08837","citing_paper":"/paper/2507.13169"},"observation_digest":"sha256:d76a5f9b9476621f4c6639d98e4d67d2ad5f0bc033fb87c75bf0566d8852d52a","observation_id":"74108fff-12a9-4135-8e67-a6a18bca8085","resolution":{"observed_at":"2026-08-06T16:34:03.695223Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:34:07.640743Z","title":null,"venue":null,"work_id":"0a999f25-da6a-482c-b3c4-b642e5897b85","year":2024},"citing_paper":{"arxiv_id":"2507.13169","last_updated":"2025-07-17T14:33:36Z","snapshot_observed_at":"2026-08-06T16:26:27.439425Z","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-06T16:34:03.778176Z"},"links":{"citing_paper":"/paper/2507.13169"},"observation_digest":"sha256:85ba3e693b22cdbc1e80753d77a85d58fcff0bd808a346477fa553af38af5508","observation_id":"9ffcd4e8-6f3c-4856-9cce-4421416681fa","resolution":{"observed_at":"2026-08-06T16:34:07.818080Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.07283","last_updated":"2024-10-09T11:01:29Z","snapshot_observed_at":"2026-08-02T17:12:52.352951Z","submitted_at":"2024-10-09T11:01:29Z","title":"Prompt Infection: LLM-to-LLM Prompt Injection within Multi-Agent Systems","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.07283","snapshot_observed_at":"2026-08-06T16:34:03.842222Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.13169","last_updated":"2025-07-17T14:33:36Z","snapshot_observed_at":"2026-08-06T16:26:27.439425Z","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-06T16:34:03.842222Z"},"links":{"cited_paper":"/paper/2410.07283","citing_paper":"/paper/2507.13169"},"observation_digest":"sha256:95383b8cd564a5214eb196f4be6e6ad845e1de38ba595200288c5fd75b8cde9e","observation_id":"67a374ee-c085-4de3-abb1-fb82d9c1fefe","resolution":{"observed_at":"2026-08-06T16:34:03.842222Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.18813","last_updated":"2025-06-24T08:05:33Z","snapshot_observed_at":"2026-08-06T07:36:52.841128Z","submitted_at":"2025-03-24T15:54:10Z","title":"Defeating Prompt Injections by Design","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.18813","snapshot_observed_at":"2026-08-06T16:34:03.919189Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.13169","last_updated":"2025-07-17T14:33:36Z","snapshot_observed_at":"2026-08-06T16:26:27.439425Z","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-06T16:34:03.919189Z"},"links":{"cited_paper":"/paper/2503.18813","citing_paper":"/paper/2507.13169"},"observation_digest":"sha256:8eb03a548815592f8d2780e02080885d08373853d8764fc84b2bb05bfdbe031f","observation_id":"7f4cdc41-655f-434b-9be2-a74bc3172ba9","resolution":{"observed_at":"2026-08-06T16:34:03.919189Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:34:07.454906Z","title":null,"venue":null,"work_id":"838f528a-28d6-447c-8b0b-22b5f880ee25","year":2024},"citing_paper":{"arxiv_id":"2507.13169","last_updated":"2025-07-17T14:33:36Z","snapshot_observed_at":"2026-08-06T16:26:27.439425Z","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-06T16:34:04.001119Z"},"links":{"citing_paper":"/paper/2507.13169"},"observation_digest":"sha256:d1b30e5db08aec8b70c441e809e15d48a150c3d680c6e7bd8de140e44a57f3cd","observation_id":"1c073cff-1405-48a5-91aa-b7a78fc582b7","resolution":{"observed_at":"2026-08-06T16:34:07.505229Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:34:07.167009Z","title":null,"venue":null,"work_id":"97180fb5-1752-4932-bf4b-ab84d7849105","year":2023},"citing_paper":{"arxiv_id":"2507.13169","last_updated":"2025-07-17T14:33:36Z","snapshot_observed_at":"2026-08-06T16:26:27.439425Z","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-06T16:34:04.096370Z"},"links":{"citing_paper":"/paper/2507.13169"},"observation_digest":"sha256:02c1b3d8b1a2caeb51c9a62445340daf1662ea879845037831312227990b6c7d","observation_id":"43d9d6d4-67cb-4608-89d9-d5c6532faf25","resolution":{"observed_at":"2026-08-06T16:34:07.307622Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:34:06.963722Z","title":null,"venue":null,"work_id":"881e011b-731f-4fcf-84d7-86b55762e35a","year":2024},"citing_paper":{"arxiv_id":"2507.13169","last_updated":"2025-07-17T14:33:36Z","snapshot_observed_at":"2026-08-06T16:26:27.439425Z","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-06T16:34:04.192243Z"},"links":{"citing_paper":"/paper/2507.13169"},"observation_digest":"sha256:31c738d683ff11da79b5918a3d54497c95549c097296023d23c8b8ca3525a993","observation_id":"0c024737-d7c3-4a78-9b2f-f2c999750230","resolution":{"observed_at":"2026-08-06T16:34:07.022398Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.14197","last_updated":"2025-01-27T08:51:16Z","snapshot_observed_at":"2026-07-06T17:06:45.522731Z","submitted_at":"2023-12-21T01:08:39Z","title":"Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.14197","snapshot_observed_at":"2026-08-06T16:34:04.277916Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.13169","last_updated":"2025-07-17T14:33:36Z","snapshot_observed_at":"2026-08-06T16:26:27.439425Z","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-06T16:34:04.277916Z"},"links":{"cited_paper":"/paper/2312.14197","citing_paper":"/paper/2507.13169"},"observation_digest":"sha256:c8c7a0a93d351735090db6ae2361236a86ce3ae0bdbce4dfe19e6929cba2cf6d","observation_id":"2783b487-2406-40aa-aff0-c2ebdf3fd4ae","resolution":{"observed_at":"2026-08-06T16:34:04.277916Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:34:06.842152Z","title":null,"venue":null,"work_id":"6f20eda0-6691-4316-84b3-5334b321f66f","year":2025},"citing_paper":{"arxiv_id":"2507.13169","last_updated":"2025-07-17T14:33:36Z","snapshot_observed_at":"2026-08-06T16:26:27.439425Z","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-06T16:34:04.375475Z"},"links":{"citing_paper":"/paper/2507.13169"},"observation_digest":"sha256:e7d1d1080c118ff82ac9a3976034a4dc23262588f6e023eb7d6729cbdd5d3337","observation_id":"932b69ab-e882-49e0-a697-a9bbcf822bb9","resolution":{"observed_at":"2026-08-06T16:34:06.877652Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2503.14281","last_updated":"2026-04-20T13:26:09Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-03-18T14:20:54Z","title":"XOXO: Stealthy Cross-Origin Context Poisoning Attacks against AI Coding Assistants","version":4},"cited_work":{"arxiv_id":"2503.14281","doi":null,"metadata_source":"pith","pith_arxiv_id":"2503.14281","snapshot_observed_at":"2026-08-06T16:34:06.025828Z","title":"XOXO: Stealthy Cross-Origin Context Poisoning Attacks against AI Coding Assistants","venue":"cs.CR","work_id":"b263c9f4-1c5d-4c0a-b3a2-8b463170cc7a","year":2025},"citing_paper":{"arxiv_id":"2507.13169","last_updated":"2025-07-17T14:33:36Z","snapshot_observed_at":"2026-08-06T16:26:27.439425Z","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-06T16:34:04.450450Z"},"links":{"cited_paper":"/paper/2503.14281","citing_paper":"/paper/2507.13169"},"observation_digest":"sha256:241221f24af3e9be8f60b68f9be7f037def93368f789d1536cb0e5a1152f8461","observation_id":"e379a488-61be-486e-b10a-30e052f70bbd","resolution":{"observed_at":"2026-08-06T16:34:06.094966Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.13076","last_updated":"2025-05-19T13:10:29Z","snapshot_observed_at":"2026-07-06T21:26:15.934710Z","submitted_at":"2025-05-19T13:10:29Z","title":"The Hidden Dangers of Browsing AI Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.13076","snapshot_observed_at":"2026-08-06T16:34:04.510763Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.13169","last_updated":"2025-07-17T14:33:36Z","snapshot_observed_at":"2026-08-06T16:26:27.439425Z","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-06T16:34:04.510763Z"},"links":{"cited_paper":"/paper/2505.13076","citing_paper":"/paper/2507.13169"},"observation_digest":"sha256:e4b02894c41e8731e4a437f195fe87f617efe4737288d4caba84336c04c36bf2","observation_id":"97ca63c5-25a5-4980-94cb-1c29107c98e0","resolution":{"observed_at":"2026-08-06T16:34:04.510763Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.13459","last_updated":"2025-05-29T14:42:38Z","snapshot_observed_at":"2026-08-04T11:15:46.100317Z","submitted_at":"2024-02-21T01:30:03Z","title":"Learning to Poison Large Language Models for Downstream Manipulation","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.13459","snapshot_observed_at":"2026-08-06T16:34:04.598552Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.13169","last_updated":"2025-07-17T14:33:36Z","snapshot_observed_at":"2026-08-06T16:26:27.439425Z","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-06T16:34:04.598552Z"},"links":{"cited_paper":"/paper/2402.13459","citing_paper":"/paper/2507.13169"},"observation_digest":"sha256:dcab1ddf51e9911fa6027f042c676bc2e0108175d51a190ec18e732114759bef","observation_id":"48ce344e-7e62-45bd-8d86-18374023e328","resolution":{"observed_at":"2026-08-06T16:34:04.598552Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.17196","last_updated":"2024-04-26T07:11:18Z","snapshot_observed_at":"2026-07-06T18:05:59.538624Z","submitted_at":"2024-04-26T07:11:18Z","title":"Human-Imperceptible Retrieval Poisoning Attacks in LLM-Powered Applications","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.17196","snapshot_observed_at":"2026-08-06T16:34:04.667309Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.13169","last_updated":"2025-07-17T14:33:36Z","snapshot_observed_at":"2026-08-06T16:26:27.439425Z","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-06T16:34:04.667309Z"},"links":{"cited_paper":"/paper/2404.17196","citing_paper":"/paper/2507.13169"},"observation_digest":"sha256:279061eea0032ff33572dc19ffdd77fe0bcd7e69e58b2947caca7ad38617ddd8","observation_id":"fb31b710-e5d8-497a-9bb8-b335be88601d","resolution":{"observed_at":"2026-08-06T16:34:04.667309Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.16957","last_updated":"2025-05-22T17:36:33Z","snapshot_observed_at":"2026-08-05T13:05:45.466439Z","submitted_at":"2025-05-22T17:36:33Z","title":"Invisible Prompts, Visible Threats: Malicious Font Injection in External Resources for Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.16957","snapshot_observed_at":"2026-08-06T16:34:04.754226Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.13169","last_updated":"2025-07-17T14:33:36Z","snapshot_observed_at":"2026-08-06T16:26:27.439425Z","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-06T16:34:04.754226Z"},"links":{"cited_paper":"/paper/2505.16957","citing_paper":"/paper/2507.13169"},"observation_digest":"sha256:5f2af4bc8135cf53729a6cf80638b32f298f5f061a37b263f475cd348f134d83","observation_id":"8a60a853-a16d-4b30-beb5-e095804b0e30","resolution":{"observed_at":"2026-08-06T16:34:04.754226Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.14479","last_updated":"2024-10-18T14:02:34Z","snapshot_observed_at":"2026-07-06T19:35:57.222956Z","submitted_at":"2024-10-18T14:02:34Z","title":"Backdoored Retrievers for Prompt Injection Attacks on Retrieval Augmented Generation of Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.14479","snapshot_observed_at":"2026-08-06T16:34:04.853306Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.13169","last_updated":"2025-07-17T14:33:36Z","snapshot_observed_at":"2026-08-06T16:26:27.439425Z","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-06T16:34:04.853306Z"},"links":{"cited_paper":"/paper/2410.14479","citing_paper":"/paper/2507.13169"},"observation_digest":"sha256:647fa48addb482226e46c439f2d843ec8b6d8642451883f861ce41921abe952a","observation_id":"fbe5eca5-fc2b-4390-98d2-c32b7d9b82ac","resolution":{"observed_at":"2026-08-06T16:34:04.853306Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.14348","last_updated":"2025-07-27T10:12:52Z","snapshot_observed_at":"2026-07-06T21:11:58.671097Z","submitted_at":"2025-04-19T16:28:03Z","title":"Manipulating Multimodal Agents via Cross-Modal Prompt Injection","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.14348","snapshot_observed_at":"2026-08-06T16:34:04.952025Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.13169","last_updated":"2025-07-17T14:33:36Z","snapshot_observed_at":"2026-08-06T16:26:27.439425Z","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-06T16:34:04.952025Z"},"links":{"cited_paper":"/paper/2504.14348","citing_paper":"/paper/2507.13169"},"observation_digest":"sha256:912698bed19cec07ef665dc9c15048d640a6319008381a08701a265450b0af8c","observation_id":"2a247095-3659-4852-b88a-22fed94a42b8","resolution":{"observed_at":"2026-08-06T16:34:04.952025Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:34:06.722450Z","title":null,"venue":null,"work_id":"7109cc4a-63e3-4861-8e8a-c33406fe41f3","year":2023},"citing_paper":{"arxiv_id":"2507.13169","last_updated":"2025-07-17T14:33:36Z","snapshot_observed_at":"2026-08-06T16:26:27.439425Z","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-06T16:34:05.011939Z"},"links":{"citing_paper":"/paper/2507.13169"},"observation_digest":"sha256:e4bf3e621c7cbfd87af7fe2bcfba420d5763ce214393f15041da878db6f6ba39","observation_id":"6514fbca-975f-4253-a587-05efbc389ff9","resolution":{"observed_at":"2026-08-06T16:34:06.771915Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.10490","last_updated":"2023-10-03T17:03:10Z","snapshot_observed_at":"2026-08-04T02:19:57.679295Z","submitted_at":"2023-07-19T23:03:20Z","title":"Abusing Images and Sounds for Indirect Instruction Injection in Multi-Modal LLMs","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.10490","snapshot_observed_at":"2026-08-06T16:34:05.101373Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.13169","last_updated":"2025-07-17T14:33:36Z","snapshot_observed_at":"2026-08-06T16:26:27.439425Z","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-06T16:34:05.101373Z"},"links":{"cited_paper":"/paper/2307.10490","citing_paper":"/paper/2507.13169"},"observation_digest":"sha256:4e46219623d42a174e0b5418a8e95b2bba0e8060e731d0a85c9b7fa36cb48c9c","observation_id":"80107157-42c9-4510-a17b-5ec0990ce669","resolution":{"observed_at":"2026-08-06T16:34:05.101373Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.16119","last_updated":"2024-03-03T00:12:16Z","snapshot_observed_at":"2026-07-06T16:53:18.275859Z","submitted_at":"2023-10-24T18:18:11Z","title":"Ignore This Title and HackAPrompt: Exposing Systemic Vulnerabilities of LLMs through a Global Scale Prompt Hacking Competition","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.16119","snapshot_observed_at":"2026-08-06T16:34:05.169846Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.13169","last_updated":"2025-07-17T14:33:36Z","snapshot_observed_at":"2026-08-06T16:26:27.439425Z","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-06T16:34:05.169846Z"},"links":{"cited_paper":"/paper/2311.16119","citing_paper":"/paper/2507.13169"},"observation_digest":"sha256:d20a514bf474080515b89b9f082728247e1fb29685f8c95666b4b2e5c0af9e2a","observation_id":"711b04e6-a84a-4b06-8648-54f847ee47d8","resolution":{"observed_at":"2026-08-06T16:34:05.169846Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:34:06.608914Z","title":null,"venue":null,"work_id":"edde9825-e0c1-45f7-9b99-3ac593a71947","year":2024},"citing_paper":{"arxiv_id":"2507.13169","last_updated":"2025-07-17T14:33:36Z","snapshot_observed_at":"2026-08-06T16:26:27.439425Z","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-06T16:34:05.255867Z"},"links":{"citing_paper":"/paper/2507.13169"},"observation_digest":"sha256:7472cfdb93540e7ffbc7bd6782f79de226603d55ce1ca67c5dbe3141cf58764e","observation_id":"901f6257-6605-4160-b812-d5c36cc18a4a","resolution":{"observed_at":"2026-08-06T16:34:06.657603Z","resolver_source":"raw_fallback","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.06664","last_updated":"2024-02-16T04:02:51Z","snapshot_observed_at":"2026-08-07T10:02:21.156103Z","submitted_at":"2024-02-06T14:46:08Z","title":"LLM Agents can Autonomously Hack Websites","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.06664","snapshot_observed_at":"2026-08-06T16:34:05.325342Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.13169","last_updated":"2025-07-17T14:33:36Z","snapshot_observed_at":"2026-08-06T16:26:27.439425Z","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-06T16:34:05.325342Z"},"links":{"cited_paper":"/paper/2402.06664","citing_paper":"/paper/2507.13169"},"observation_digest":"sha256:60d7c36b84add7bf80d6ce313d4a2558cdfc9e77db0e4b681aacaaf9eda74d6c","observation_id":"53d2c546-ea9f-4636-bf87-72f6c0317db7","resolution":{"observed_at":"2026-08-06T16:34:05.325342Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.02817","last_updated":"2025-01-30T11:11:37Z","snapshot_observed_at":"2026-07-06T17:39:45.571775Z","submitted_at":"2024-03-05T09:37:13Z","title":"Here Comes The AI Worm: Unleashing Zero-click Worms that Target GenAI-Powered Applications","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.02817","snapshot_observed_at":"2026-08-06T16:34:05.379319Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.13169","last_updated":"2025-07-17T14:33:36Z","snapshot_observed_at":"2026-08-06T16:26:27.439425Z","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-06T16:34:05.379319Z"},"links":{"cited_paper":"/paper/2403.02817","citing_paper":"/paper/2507.13169"},"observation_digest":"sha256:c20090c9e5657863653202cab96decdb304cea314acc749ef2019970026e4754","observation_id":"4a6efbb7-8971-44ae-aabf-67ad24ecb2ae","resolution":{"observed_at":"2026-08-06T16:34:05.379319Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.14720","last_updated":"2024-03-20T15:26:23Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-03-20T15:26:23Z","title":"Defending Against Indirect Prompt Injection Attacks With Spotlighting","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.14720","snapshot_observed_at":"2026-08-06T16:34:05.446734Z","title":"Ignore previous instructions and translate","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.13169","last_updated":"2025-07-17T14:33:36Z","snapshot_observed_at":"2026-08-06T16:26:27.439425Z","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-06T16:34:05.446734Z"},"links":{"cited_paper":"/paper/2403.14720","citing_paper":"/paper/2507.13169"},"observation_digest":"sha256:4297ae72a46259e41755f886ed554e3db6b03f71ea6fb9bfeeb949601eab2020","observation_id":"8a6b4405-be54-4aaf-bad0-de88deabf587","resolution":{"observed_at":"2026-08-06T16:34:05.446734Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2507.13169","last_updated":"2025-07-17T14:33:36Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-06T16:26:27.439425Z","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats"},"reference_resolution":{"displayed":29,"state_counts":{"malformed_identifier":1,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":25,"verified_exact":2,"verified_fuzzy":1},"total_outbound_references":29},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 7 August 2026, this Paper Citation Record lists 29 of 29 outbound references and 3 inbound Pith citation observations for arXiv:2507.13169."}