{"as_of":"2026-08-07T10:24:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:4a179d164628483de672cbb746622cbca8c58f138398ea5137310f57dfe8718f","coverage":[{"denominator":48,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":48,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T15:32:53.004983Z","state":"measured"},{"denominator":50,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":50,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":2,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":2,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-05T04:56:25.081296Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-02T04:16:36.058442Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-07T05:36:18.121460Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2507.15613","snapshot_observed_at":"2026-08-05T04:56:25.081296Z","title":"Contextual Ambi- guity in LLM Prompt Processing,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2509.05883","last_updated":"2025-09-07T01:11:10Z","snapshot_observed_at":"2026-08-05T04:56:24.767692Z","submitted_at":"2025-09-07T01:11:10Z","title":"Multimodal Prompt Injection Attacks: Risks and Defenses for Modern LLMs","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-05T04:56:25.081296Z"},"links":{"cited_paper":"/paper/2507.15613","citing_paper":"/paper/2509.05883"},"observation_digest":"sha256:a4ef5be458e64cea435a8e47f4d9b4a30762f2e57e3bb7281b0298d03de2b605","observation_id":"5c84f511-aad6-438f-8964-9d05c9e93977","resolution":{"observed_at":"2026-08-05T04:56:25.081296Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-07T05:36:18.121460Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"cited_work":{"arxiv_id":"2507.15613","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2507.15613","snapshot_observed_at":"2026-07-02T04:16:36.058442Z","title":"Multi-stage prompt inference attacks on enterprise LLM systems","venue":null,"work_id":"a744b7d4-37a0-43ce-bc2f-bccf1aa2d83c","year":null},"citing_paper":{"arxiv_id":"2606.04141","last_updated":"2026-06-02T18:53:17Z","snapshot_observed_at":"2026-08-02T13:02:03.082813Z","submitted_at":"2026-06-02T18:53:17Z","title":"Caught in the Act(ivation): Toward Pre-Output and Multi-Turn Detection of Credential Exfiltration by LLM Agents","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-06-28T09:15:57.044886Z"},"links":{"cited_paper":"/paper/2507.15613","citing_paper":"/paper/2606.04141"},"observation_digest":"sha256:28f2cee2f502ab9c9f63e9ec4f69dd147b5d27c449eda02988e7499659551226","observation_id":"94eacda7-0fc9-4d24-a743-f5ae4c40f4e2","resolution":{"observed_at":"2026-07-02T04:16:36.059865Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2507.15613/citation-record","integrity":"/paper/2507.15613/integrity","json":"/paper/2507.15613/citation-record.json","paper":"/paper/2507.15613"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:32:53.440110Z","title":"Perez and I","venue":null,"work_id":"156a48ca-5c42-4715-93a0-ee20d4ae05f1","year":2022},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-07T05:36:18.121460Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:50.647226Z"},"links":{"citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:895e524fe2bc070e0917818e513fe694d92cffcf65a70a6c0b9bfc464a6304e9","observation_id":"b4a63c9f-3b28-4fbe-a134-d2664b113ee1","resolution":{"observed_at":"2026-08-06T15:32:53.442679Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:32:53.432672Z","title":null,"venue":null,"work_id":"f6539150-6697-46a6-8a6e-27430167dc14","year":2023},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-07T05:36:18.121460Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:50.705705Z"},"links":{"citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:404f0c29fea68abca978fdfa96dbb398e239a84780e749e699fe5ae5aa29d56c","observation_id":"b23d4ea1-00cf-4a25-b4da-b18125043c47","resolution":{"observed_at":"2026-08-06T15:32:53.435189Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2302.12173","last_updated":"2023-05-05T14:26:17Z","snapshot_observed_at":"2026-07-06T14:55:08.682906Z","submitted_at":"2023-02-23T17:14:38Z","title":"Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2302.12173","snapshot_observed_at":"2026-08-06T15:32:50.781317Z","title":"Greshake et al","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-07T05:36:18.121460Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:50.781317Z"},"links":{"cited_paper":"/paper/2302.12173","citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:0cf6d0d9a1d3bd07b79aa1120b679b75b3d55897bbe76018251a75dacf6ef18f","observation_id":"811f48c9-a734-415a-a3fe-3b0bf032febc","resolution":{"observed_at":"2026-08-06T15:32:50.781317Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:32:53.425144Z","title":"Owasp top 10 for large language model applications, 2023","venue":null,"work_id":"a0aa8a0e-b44b-445f-9ce9-a82cd0208875","year":2023},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-07T05:36:18.121460Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:50.886430Z"},"links":{"citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:42909887683cc37c13a20c7b9ea8acd9723015fd8b0479df1d046849cada385e","observation_id":"e194ef1f-7791-4f8f-9f8c-f855edd836f4","resolution":{"observed_at":"2026-08-06T15:32:53.427742Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:32:53.417272Z","title":"Carlini et al","venue":null,"work_id":"2b4e064e-3251-48ee-84b6-617fe9869ebd","year":2021},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-07T05:36:18.121460Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:50.987164Z"},"links":{"citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:d6fc2937d95e14915bcd8af064e1e5ac2169fe3c079cf5a26b72bd4aeb6f3e43","observation_id":"dbad5721-9df4-41d4-a6fb-9bdd0a90bde3","resolution":{"observed_at":"2026-08-06T15:32:53.420290Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:32:53.408759Z","title":"Shokri et al","venue":null,"work_id":"6fcee074-49a7-4277-99cf-bb38d31d3685","year":2017},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-07T05:36:18.121460Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:51.004463Z"},"links":{"citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:9594c2bc4e7b2392c30918812f056de915c7ecd95fd6ced729db6001d5ee45a4","observation_id":"247faf4b-0d5e-4f19-a57a-c72d9da7e93d","resolution":{"observed_at":"2026-08-06T15:32:53.411767Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.10169","last_updated":"2023-07-19T17:55:13Z","snapshot_observed_at":"2026-07-06T15:55:59.949673Z","submitted_at":"2023-07-19T17:55:13Z","title":"Challenges and Applications of Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.10169","snapshot_observed_at":"2026-08-06T15:32:51.106135Z","title":"Kaddour et al","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-07T05:36:18.121460Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:51.106135Z"},"links":{"cited_paper":"/paper/2307.10169","citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:a232822df2fd09f372de0ed4b19d2940bde391e6c8b7a5b8b4989a302f04863f","observation_id":"120d88d0-ddce-4ec5-b2de-ec651730f150","resolution":{"observed_at":"2026-08-06T15:32:51.106135Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:32:53.400688Z","title":"Croisdale","venue":null,"work_id":"1c9d97ed-e0b5-4649-8c0a-6685c68f0931","year":2025},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-07T05:36:18.121460Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:51.233199Z"},"links":{"citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:8819a925e5606a6d1b6be94432cad307e7c142d6313074c16f43a045492ae590","observation_id":"74d42618-241c-4c08-8723-cc2f70e0d580","resolution":{"observed_at":"2026-08-06T15:32:53.403504Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.09756","last_updated":"2023-10-15T06:51:03Z","snapshot_observed_at":"2026-07-06T16:33:18.143476Z","submitted_at":"2023-10-15T06:51:03Z","title":"New Benchmarks for Asian Facial Recognition Tasks: Face Classification with Large Foundation Models","version":1},"cited_work":{"arxiv_id":"2310.09756","doi":null,"metadata_source":"pith","pith_arxiv_id":"2310.09756","snapshot_observed_at":"2026-08-06T15:32:53.208730Z","title":"New Benchmarks for Asian Facial Recognition Tasks: Face Classification with Large Foundation Models","venue":"cs.CV","work_id":"83c0ef57-66da-418b-9e06-2dc8204c9605","year":2023},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-07T05:36:18.121460Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:51.397481Z"},"links":{"cited_paper":"/paper/2310.09756","citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:7e161f564b55aaf30119db6c72f6c4f89b3bb9439b172db1e84d46dcc83f0527","observation_id":"d72a479c-0c56-4d27-92b3-ff94fce15c1c","resolution":{"observed_at":"2026-08-06T15:32:53.211767Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:32:53.392918Z","title":"Gpt-4 system card, March 2023","venue":null,"work_id":"f79104a8-0f0d-4fc5-bf30-c243619cc005","year":2023},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-07T05:36:18.121460Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:51.588116Z"},"links":{"citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:d0093a2e39b4c55e4bbe152fc998deb559e9a7333ef32864c2fa6dba1c41cb35","observation_id":"24c7cedd-d4cb-4de0-8142-5a71b6cf0666","resolution":{"observed_at":"2026-08-06T15:32:53.395577Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:32:53.385270Z","title":"Hung et al","venue":null,"work_id":"b441f61e-0d73-4dee-ab4b-10867c94a74b","year":2025},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-07T05:36:18.121460Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:51.753929Z"},"links":{"citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:7023db957f4f973b327207d414103ddd559f055f4266dd481ae70f5ec0a30712","observation_id":"41900801-b519-4580-902e-5c08c52093af","resolution":{"observed_at":"2026-08-06T15:32:53.387991Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:32:53.378110Z","title":"Tram` er et al","venue":null,"work_id":"b6261b8e-0943-49cc-9071-c5df50f9cb42","year":2016},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-07T05:36:18.121460Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:51.885952Z"},"links":{"citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:b0bcaf86cac92868350954f1ed1cd690ff04c5cce61d102e52d6ee9b2bca1e26","observation_id":"74e7d46e-981b-4903-b145-70bf4181f9ee","resolution":{"observed_at":"2026-08-06T15:32:53.380497Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:32:53.370055Z","title":"Suo et al","venue":null,"work_id":"05b7b595-742e-4bb4-8dbe-1f1dd29efcaa","year":2024},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-07T05:36:18.121460Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:52.020541Z"},"links":{"citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:3fb1dc9f439557644d5ac555ff84d95a7ec1fb3543854e37a162e252d059d5f0","observation_id":"dd7ae18f-cc42-4291-b7eb-db5681c5951f","resolution":{"observed_at":"2026-08-06T15:32:53.373044Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2212.08073","last_updated":"2022-12-15T06:19:23Z","snapshot_observed_at":"2026-08-02T04:53:58.766070Z","submitted_at":"2022-12-15T06:19:23Z","title":"Constitutional AI: Harmlessness from AI Feedback","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2212.08073","snapshot_observed_at":"2026-08-06T15:32:52.190381Z","title":"Bai et al","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-07T05:36:18.121460Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:52.190381Z"},"links":{"cited_paper":"/paper/2212.08073","citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:636857d4d974e138c4e5cb03e9be39dfe9b3a27cc25e9942d0c5172c98593a2c","observation_id":"bf833539-8aea-4d10-93e6-f3b3f338d8b1","resolution":{"observed_at":"2026-08-06T15:32:52.190381Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2209.07858","last_updated":"2022-11-22T19:12:57Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2022-08-23T23:37:14Z","title":"Red Teaming Language Models to Reduce Harms: Methods, Scaling Behaviors, and Lessons Learned","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2209.07858","snapshot_observed_at":"2026-08-06T15:32:52.315635Z","title":"Perez et al","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-07T05:36:18.121460Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:52.315635Z"},"links":{"cited_paper":"/paper/2209.07858","citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:022d26ca729d509789dd35a4c29f9717d447288a9b4e3ddb3463b401e4837080","observation_id":"a06151e3-371d-4afb-8723-0a423bd1d525","resolution":{"observed_at":"2026-08-06T15:32:52.315635Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:32:53.362640Z","title":null,"venue":null,"work_id":"4f70aad5-9e95-4979-be4d-fe515017ddb1","year":2023},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-07T05:36:18.121460Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:52.498378Z"},"links":{"citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:bf100e1b3d8057d59645cfa1f4d83d5cc0764a488845a0fff0f38eb9d33eedb0","observation_id":"3a262fd2-beb2-408d-a736-ed9f63823481","resolution":{"observed_at":"2026-08-06T15:32:53.365065Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04957","last_updated":"2024-03-07T23:46:20Z","snapshot_observed_at":"2026-07-06T17:41:19.171822Z","submitted_at":"2024-03-07T23:46:20Z","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.04957","snapshot_observed_at":"2026-08-06T15:32:52.654532Z","title":"Liu et al","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-07T05:36:18.121460Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:52.654532Z"},"links":{"cited_paper":"/paper/2403.04957","citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:a140e3afac861225f180978ff4297b3e1fc4f4bca99ad40ca00c413b720095b1","observation_id":"f957c792-a18c-485a-860c-8f06ffec6b56","resolution":{"observed_at":"2026-08-06T15:32:52.654532Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.06449","last_updated":"2024-01-10T08:53:59Z","snapshot_observed_at":"2026-07-06T15:53:27.324303Z","submitted_at":"2023-07-12T21:02:06Z","title":"Reynolds-number scaling of wall-pressure--velocity correlations in wall-bounded turbulence","version":2},"cited_work":{"arxiv_id":"2307.06449","doi":null,"metadata_source":"pith","pith_arxiv_id":"2307.06449","snapshot_observed_at":"2026-08-06T15:32:53.170157Z","title":"Reynolds-number scaling of wall-pressure--velocity correlations in wall-bounded turbulence","venue":"physics.flu-dyn","work_id":"fb250430-5669-44fc-ae2d-9eb2041f50d9","year":2023},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-07T05:36:18.121460Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:52.826416Z"},"links":{"cited_paper":"/paper/2307.06449","citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:1bbd1da57a8668425b43283aa721b81ff3b7b1755e993ab4ef0ff75db51130f1","observation_id":"9a2a53c4-34a4-4c0b-afac-9bc3a5864b0a","resolution":{"observed_at":"2026-08-06T15:32:53.173272Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:32:53.355020Z","title":"Hu et al","venue":null,"work_id":"73381845-115f-47e9-b7e2-6bbaab472324","year":2022},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-07T05:36:18.121460Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:52.831955Z"},"links":{"citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:9e34abb7557acbc9644ae2a25248b0e7807b7b7ceb5c878595639f65fa43dedd","observation_id":"c8b3ffd9-ab3f-481d-b224-6ef4ed0c9e11","resolution":{"observed_at":"2026-08-06T15:32:53.357656Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2301.10226","last_updated":"2024-05-01T22:04:31Z","snapshot_observed_at":"2026-07-06T14:44:16.786216Z","submitted_at":"2023-01-24T18:52:59Z","title":"A Watermark for Large Language Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2301.10226","snapshot_observed_at":"2026-08-06T15:32:52.913067Z","title":"Kirchenbauer et al","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-07T05:36:18.121460Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:52.913067Z"},"links":{"cited_paper":"/paper/2301.10226","citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:63768a17d42a0ab16c0e9e7cfb31fdd496c6c698b4e0b2b353b5afff9be511e1","observation_id":"3812fe2e-eb70-4505-8685-79eebb12c01a","resolution":{"observed_at":"2026-08-06T15:32:52.913067Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2111.09543","last_updated":"2023-03-24T09:17:17Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2021-11-18T06:48:00Z","title":"DeBERTaV3: Improving DeBERTa using ELECTRA-Style Pre-Training with Gradient-Disentangled Embedding Sharing","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2111.09543","snapshot_observed_at":"2026-08-06T15:32:52.916706Z","title":"He et al","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-07T05:36:18.121460Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:52.916706Z"},"links":{"cited_paper":"/paper/2111.09543","citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:cd639a25b8a7adf5e0c3e67dd3d71844ba3bcc4d4ad7843f40730d454bb94d73","observation_id":"2b065241-bd2b-4ff9-890b-ca4070de6e85","resolution":{"observed_at":"2026-08-06T15:32:52.916706Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.22770","last_updated":"2025-03-30T16:39:15Z","snapshot_observed_at":"2026-07-06T19:42:03.739016Z","submitted_at":"2024-10-30T07:39:42Z","title":"InjecGuard: Benchmarking and Mitigating Over-defense in Prompt Injection Guardrail Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.22770","snapshot_observed_at":"2026-08-06T15:32:52.920395Z","title":"Wang et al","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-07T05:36:18.121460Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:52.920395Z"},"links":{"cited_paper":"/paper/2410.22770","citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:b5b12de81bde71aa33fa7986f4665736d35101f67ef5aa3dc814c09194d59675","observation_id":"1d1e9437-1dc1-4d4b-8fbe-b90aeb12b0bd","resolution":{"observed_at":"2026-08-06T15:32:52.920395Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:32:53.347017Z","title":"Zunger et al","venue":null,"work_id":"04e6cd79-629c-42d9-8ca0-2a1cf8402207","year":2024},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-07T05:36:18.121460Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:52.923463Z"},"links":{"citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:03aa0670478858d5ae59c3a7805138ce94f087c2d1e8a03ce2f362836fcb30e0","observation_id":"15601a8c-0ac4-4805-8173-6c556c2eb8e2","resolution":{"observed_at":"2026-08-06T15:32:53.349752Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:32:53.339032Z","title":"Yi et al","venue":null,"work_id":"f68e8c8f-52d8-4bb2-bf08-7ab17e6efade","year":2023},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-07T05:36:18.121460Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:52.926401Z"},"links":{"citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:4a5326cd2ad44674ea2a4175e29ee1a521856f1b85dfd13fac57627024b204b4","observation_id":"62ce073e-110c-453e-8ef4-85b59ab1d0ef","resolution":{"observed_at":"2026-08-06T15:32:53.341628Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:32:53.330527Z","title":"Chen et al","venue":null,"work_id":"a170153d-6450-4527-8da7-2805f15334ab","year":2024},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-07T05:36:18.121460Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:52.929863Z"},"links":{"citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:054f852d2448933371ef7c99c7062172c854ddde2e336278ad4b46ca9012fba4","observation_id":"9f8d875c-a7b1-4b4a-becd-d243c4c05c55","resolution":{"observed_at":"2026-08-06T15:32:53.333459Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2308.01217","last_updated":"2023-08-02T15:22:00Z","snapshot_observed_at":"2026-07-06T16:01:41.830509Z","submitted_at":"2023-08-02T15:22:00Z","title":"TeachCLIP: Multi-Grained Teaching for Efficient Text-to-Video Retrieval","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.01217","snapshot_observed_at":"2026-08-06T15:32:52.933233Z","title":"Abdelnabi et al","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-07T05:36:18.121460Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:52.933233Z"},"links":{"cited_paper":"/paper/2308.01217","citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:7d42cbb1ea2d638c429e8d3ec9f40dea544a1f6e01dc6d6a732b514d7ce7960c","observation_id":"07cf0b9b-4a72-4b8a-8f8e-677aa2c419cd","resolution":{"observed_at":"2026-08-06T15:32:52.933233Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:32:53.320725Z","title":"Pasquini et al","venue":null,"work_id":"670f65f9-43dc-4e5c-9c6d-2e59f17f993a","year":2024},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-07T05:36:18.121460Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:52.936767Z"},"links":{"citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:5a7546c87e36d741e3206ed633c488e6612857a1279f353b44117198c0519abd","observation_id":"208383d3-cf43-4c41-900d-dd0c78314151","resolution":{"observed_at":"2026-08-06T15:32:53.323886Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2311.09827","last_updated":"2024-02-29T08:20:07Z","snapshot_observed_at":"2026-07-06T16:48:33.164024Z","submitted_at":"2023-11-16T11:52:22Z","title":"Cognitive Overload: Jailbreaking Large Language Models with Overloaded Logical Thinking","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.09827","snapshot_observed_at":"2026-08-06T15:32:52.940158Z","title":"Yan et al","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-07T05:36:18.121460Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:52.940158Z"},"links":{"cited_paper":"/paper/2311.09827","citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:04863f58ff1920711407b45ce95723736e1344a6def762e41a607c561d8bc67c","observation_id":"b181fb95-3c71-4bb5-ba49-d95a4459d76d","resolution":{"observed_at":"2026-08-06T15:32:52.940158Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.07663","last_updated":"2025-03-28T09:12:46Z","snapshot_observed_at":"2026-08-03T22:00:02.645369Z","submitted_at":"2023-09-14T12:27:17Z","title":"High-dimensional Asymptotics of VAEs: Threshold of Posterior Collapse and Dataset-Size Dependence of Rate-Distortion Curve","version":2},"cited_work":{"arxiv_id":"2309.07663","doi":null,"metadata_source":"pith","pith_arxiv_id":"2309.07663","snapshot_observed_at":"2026-08-06T15:32:53.117605Z","title":"High-dimensional Asymptotics of VAEs: Threshold of Posterior Collapse and Dataset-Size Dependence of Rate-Distortion Curve","venue":"stat.ML","work_id":"fdbaaba4-18c8-4559-9e23-0a5a04abf1ea","year":2023},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-07T05:36:18.121460Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:52.942923Z"},"links":{"cited_paper":"/paper/2309.07663","citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:dacffa54d52a1377db0b91d2a9c205cf9e45ad6e8e29957c5538abd8de6eb313","observation_id":"f1a01522-250d-455a-ac06-eeafecb878b6","resolution":{"observed_at":"2026-08-06T15:32:53.121198Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:32:53.311001Z","title":"Mei et al","venue":null,"work_id":"61bb58fa-65be-45fa-9406-6b7c7b8c94ae","year":2024},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-07T05:36:18.121460Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:52.946560Z"},"links":{"citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:3bacd5d52a7a3751e135a6b4a22c3d1ee3841a33ab4de63e842547d83708ba0b","observation_id":"f09b2d7a-60fd-474c-b874-db0d6cd17805","resolution":{"observed_at":"2026-08-06T15:32:53.314199Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:32:53.302221Z","title":"Li et al","venue":null,"work_id":"63f53f12-3c79-49ee-b839-bdd6ab49b241","year":2022},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-07T05:36:18.121460Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:52.949711Z"},"links":{"citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:da75dbfaadd885a4c9e5d8129fd6a1f106bae9d59e19e42a219a77a30487eff2","observation_id":"4216d0ed-3974-467d-9cb6-29309360d774","resolution":{"observed_at":"2026-08-06T15:32:53.304671Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:32:53.293929Z","title":"Abadi et al","venue":null,"work_id":"a047e21c-98fb-4dd7-ac54-7d7c44d7834e","year":2016},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-07T05:36:18.121460Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:52.952845Z"},"links":{"citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:665adc0307c6f6cb583003dfa113638a2504f5a07bb384735cf17224764e3892","observation_id":"01d350cf-dc1e-450a-bb33-57e14f163577","resolution":{"observed_at":"2026-08-06T15:32:53.296677Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:32:53.286121Z","title":"Fredrikson, S","venue":null,"work_id":"1da59b65-0e9b-41b9-9e2d-2ba0c9acdd8d","year":2015},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-07T05:36:18.121460Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:52.956423Z"},"links":{"citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:71946da4cddd5a2cef972917cb2997e798d113fbf5c4f9fc961323d29ff72b47","observation_id":"02a109db-3aa2-4543-8758-05b0dc2e76db","resolution":{"observed_at":"2026-08-06T15:32:53.288620Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.02483","last_updated":"2023-07-05T17:58:10Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-07-05T17:58:10Z","title":"Jailbroken: How Does LLM Safety Training Fail?","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.02483","snapshot_observed_at":"2026-08-06T15:32:52.959226Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-07T05:36:18.121460Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:52.959226Z"},"links":{"cited_paper":"/paper/2307.02483","citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:6505f766b125d81dc21241257ab0b7ae40220ede931dddf9e2b2e2a14c94f12d","observation_id":"9b29683d-7c26-4889-9548-c6e9960069ca","resolution":{"observed_at":"2026-08-06T15:32:52.959226Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-07-06T15:59:23.019044Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-08-06T15:32:52.962454Z","title":"Zou et al","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-07T05:36:18.121460Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:52.962454Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:68a935b3fd40122373a22830d9be7fae047076b940351ad2782fe3ba689728f7","observation_id":"4109fe61-1555-4a87-afec-b2619bbd29d4","resolution":{"observed_at":"2026-08-06T15:32:52.962454Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.02533","last_updated":"2023-09-05T19:02:43Z","snapshot_observed_at":"2026-08-05T18:54:51.922471Z","submitted_at":"2023-09-05T19:02:43Z","title":"Euclidean wormholes in two-dimensional CFTs from quantum chaos and number theory","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.02533","snapshot_observed_at":"2026-08-06T15:32:52.966171Z","title":"Hines et al","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-07T05:36:18.121460Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:52.966171Z"},"links":{"cited_paper":"/paper/2309.02533","citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:7438fef515aa0a3fe88d78aa7d919777cd809bd37e2be209800d48a1f82fdc8e","observation_id":"dcdc4561-48d7-4efa-9d15-3c096663ec9a","resolution":{"observed_at":"2026-08-06T15:32:52.966171Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:32:53.278018Z","title":"Ouyang et al","venue":null,"work_id":"4309c88d-4b21-48cd-9afa-0a39784da0ef","year":2022},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-07T05:36:18.121460Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:52.968959Z"},"links":{"citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:8d165ce2432fda4790052acdd14dc3858f0b33043f3b09f7031212c7ef33f21c","observation_id":"13b022e9-03bc-4def-a597-23fa12a6ccb8","resolution":{"observed_at":"2026-08-06T15:32:53.280818Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.03684","last_updated":"2024-06-11T19:02:52Z","snapshot_observed_at":"2026-07-06T16:28:22.350574Z","submitted_at":"2023-10-05T17:01:53Z","title":"SmoothLLM: Defending Large Language Models Against Jailbreaking Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.03684","snapshot_observed_at":"2026-08-06T15:32:52.971916Z","title":"Robey, E","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-07T05:36:18.121460Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:52.971916Z"},"links":{"cited_paper":"/paper/2310.03684","citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:fecf5d9a333ca6ac8584ac610e95c60cb78d9bad146fd6c3fb9a27d7fd3c87cd","observation_id":"07aa1d07-7f0d-4ee7-9c0b-aeaf8b99491b","resolution":{"observed_at":"2026-08-06T15:32:52.971916Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.00844","last_updated":"2024-07-18T16:05:55Z","snapshot_observed_at":"2026-08-06T06:01:54.621799Z","submitted_at":"2023-12-01T06:04:49Z","title":"Sparse Beats Dense: Rethinking Supervision in Radar-Camera Depth Completion","version":3},"cited_work":{"arxiv_id":"2312.00844","doi":null,"metadata_source":"pith","pith_arxiv_id":"2312.00844","snapshot_observed_at":"2026-08-06T15:32:53.072631Z","title":"Sparse Beats Dense: Rethinking Supervision in Radar-Camera Depth Completion","venue":"cs.CV","work_id":"b0378ace-373d-4f05-9095-5ec0030fd143","year":2023},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-07T05:36:18.121460Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:52.975304Z"},"links":{"cited_paper":"/paper/2312.00844","citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:5c57493ab9feb4e7cae0d591fcd8f25aa4fadd9a2d777acdabc1933b670a1720","observation_id":"bb0c5946-792b-4bbb-9ad1-c6e90b53311b","resolution":{"observed_at":"2026-08-06T15:32:53.076320Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1606.06565","last_updated":"2016-07-25T17:23:29Z","snapshot_observed_at":"2026-07-06T05:00:46.434335Z","submitted_at":"2016-06-21T13:37:05Z","title":"Concrete Problems in AI Safety","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1606.06565","snapshot_observed_at":"2026-08-06T15:32:52.978666Z","title":"Amodei et al","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-07T05:36:18.121460Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:52.978666Z"},"links":{"cited_paper":"/paper/1606.06565","citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:4bec8315ec425f74db33d8f95c7d51b74bf29e33c94bf346b353c119f9531a7a","observation_id":"9125885e-8f06-4cef-9e92-4c795ff438e2","resolution":{"observed_at":"2026-08-06T15:32:52.978666Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2302.04761","last_updated":"2023-02-09T16:49:57Z","snapshot_observed_at":"2026-07-06T14:50:07.491434Z","submitted_at":"2023-02-09T16:49:57Z","title":"Toolformer: Language Models Can Teach Themselves to Use Tools","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2302.04761","snapshot_observed_at":"2026-08-06T15:32:52.981843Z","title":"Schick et al","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-07T05:36:18.121460Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:52.981843Z"},"links":{"cited_paper":"/paper/2302.04761","citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:ba6dfc74dce09ac3921968a90cbb2540e9e3c33f614cb27728317d1c74005771","observation_id":"dd19912b-cba3-4fbd-bb97-7c2d6ba92b4e","resolution":{"observed_at":"2026-08-06T15:32:52.981843Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:32:53.269816Z","title":"Yu et al","venue":null,"work_id":"d2a76b42-8438-4ba4-8319-197e580153d0","year":2022},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-07T05:36:18.121460Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:52.985606Z"},"links":{"citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:400e24cee9134e4446579528240648ae0c575aa555c7aff48a2fcef504501653","observation_id":"85a494ae-b898-4bf0-a286-17e7812dea0e","resolution":{"observed_at":"2026-08-06T15:32:53.272393Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:32:53.261435Z","title":"Carlini, C","venue":null,"work_id":"7d59293b-1329-41cc-879d-8a7bfb653d0a","year":2019},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-07T05:36:18.121460Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:52.988643Z"},"links":{"citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:b92abd8eaf65d5049d4a0e4b36d387ceee0c2bb905c139e864ed8985f9f6c0b7","observation_id":"38a105dc-00a1-46d5-bc57-38d3a8ed63dc","resolution":{"observed_at":"2026-08-06T15:32:53.264306Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:32:53.253151Z","title":"Christ, N","venue":null,"work_id":"fee3fc61-c8de-40f6-8c7a-351043891650","year":2023},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-07T05:36:18.121460Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:52.991614Z"},"links":{"citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:312fedc7428d3deb1b51b5dbfc34fc57e365ad1364d3e8e47e3844badeed27e1","observation_id":"2d8c85e9-3451-43b7-940c-7b5e44967d53","resolution":{"observed_at":"2026-08-06T15:32:53.255991Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.14275","last_updated":"2024-04-22T15:23:30Z","snapshot_observed_at":"2026-07-06T18:03:47.096406Z","submitted_at":"2024-04-22T15:23:30Z","title":"Maximally informative feature selection using Information Imbalance: Application to COVID-19 severity prediction","version":1},"cited_work":{"arxiv_id":"2404.14275","doi":null,"metadata_source":"pith","pith_arxiv_id":"2404.14275","snapshot_observed_at":"2026-08-06T15:32:53.040484Z","title":"Maximally informative feature selection using Information Imbalance: Application to COVID-19 severity prediction","venue":"stat.ME","work_id":"e67fb0f0-b4cc-4bc0-a347-baccf44f0381","year":2024},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-07T05:36:18.121460Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:52.995131Z"},"links":{"cited_paper":"/paper/2404.14275","citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:36b661ea931e7d9c190e68a9fd7b00ecfd6a189dcf74c16ce8f6e757c5336fe1","observation_id":"35ebc8ed-2a4c-47dc-bfe9-186f2b81c14f","resolution":{"observed_at":"2026-08-06T15:32:53.045480Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:32:53.244940Z","title":null,"venue":null,"work_id":"ea69e6f9-1fb8-4187-81e7-cc99050b5ec7","year":2020},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-07T05:36:18.121460Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:52.998615Z"},"links":{"citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:326548f9fd3a1df9f6f60f538f178b31d97c80d220ffad0b8cb97469b63f4816","observation_id":"812d94ce-84f2-40c9-b750-bee4fb0d38fb","resolution":{"observed_at":"2026-08-06T15:32:53.247491Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.10997","last_updated":"2024-03-27T09:16:57Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-12-18T07:47:33Z","title":"Retrieval-Augmented Generation for Large Language Models: A Survey","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.10997","snapshot_observed_at":"2026-08-06T15:32:53.001587Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-07T05:36:18.121460Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:53.001587Z"},"links":{"cited_paper":"/paper/2312.10997","citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:8ef01938a22fb19b076df2f3ca1bd015233a023633ca6603930a5418eb742ce7","observation_id":"009e2619-68a5-4076-b102-3baa4b95fe53","resolution":{"observed_at":"2026-08-06T15:32:53.001587Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:32:53.236115Z","title":"Li et al","venue":null,"work_id":"482f4106-b9a6-430f-90ef-c59ad0f11c14","year":2024},"citing_paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","snapshot_observed_at":"2026-08-07T05:36:18.121460Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-06T15:32:53.004983Z"},"links":{"citing_paper":"/paper/2507.15613"},"observation_digest":"sha256:e7b0ce0b1d2614e1921115155a4d24e9f0ac1cf929020892243c40601dfeacc2","observation_id":"a1c5f3ec-bd9a-4116-813c-e4e5505b98e8","resolution":{"observed_at":"2026-08-06T15:32:53.239583Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2507.15613","last_updated":"2025-07-21T13:38:12Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-07T05:36:18.121460Z","submitted_at":"2025-07-21T13:38:12Z","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems"},"reference_resolution":{"displayed":48,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":20,"verified_exact":5,"verified_fuzzy":23},"total_outbound_references":48},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 7 August 2026, this Paper Citation Record lists 48 of 48 outbound references and 2 inbound Pith citation observations for arXiv:2507.15613."}