{"as_of":"2026-08-22T13:19:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:465d874d3c874b3469f24adff95699e6632fbb222fa4d35d7a5986eeb0c7c73f","coverage":[{"denominator":31,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":31,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-05T22:51:28.198095Z","state":"measured"},{"denominator":34,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":34,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-22T06:32:14.747728+00:00","state":"measured"},{"denominator":3,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":3,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-11T16:53:35.001891Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-04T14:19:54.275521Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2508.06418","last_updated":"2025-08-08T16:05:27Z","snapshot_observed_at":"2026-08-08T12:59:56.859606Z","submitted_at":"2025-08-08T16:05:27Z","title":"Quantifying Conversation Drift in MCP via Latent Polytope","version":1},"cited_work":{"arxiv_id":"2508.06418","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2508.06418","snapshot_observed_at":"2026-07-04T14:19:54.275521Z","title":null,"venue":null,"work_id":"a7294563-09c6-4b11-bf04-be1c12c6efc0","year":2025},"citing_paper":{"arxiv_id":"2606.27027","last_updated":"2026-06-25T13:35:28Z","snapshot_observed_at":"2026-08-15T13:25:51.583187Z","submitted_at":"2026-06-25T13:35:28Z","title":"ShareLock: A Stealthy Multi-Tool Threshold Poisoning Attack Against MCP","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-06-26T04:07:14.506108Z"},"links":{"cited_paper":"/paper/2508.06418","citing_paper":"/paper/2606.27027"},"observation_digest":"sha256:7eecf3a7a896458bb69d9744f63119142c5c9d1113bdaaedc490ae86c128fd02","observation_id":"68b1a6f9-5dfd-469c-978e-56d1849da6da","resolution":{"observed_at":"2026-07-04T14:19:54.277000Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2508.06418","last_updated":"2025-08-08T16:05:27Z","snapshot_observed_at":"2026-08-08T12:59:56.859606Z","submitted_at":"2025-08-08T16:05:27Z","title":"Quantifying Conversation Drift in MCP via Latent Polytope","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2508.06418","snapshot_observed_at":"2026-07-14T07:09:56.559355Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.11086","last_updated":"2026-07-13T04:55:16Z","snapshot_observed_at":"2026-08-18T22:52:02.783939Z","submitted_at":"2026-07-13T04:55:16Z","title":"Rethinking MCP Security: A Large-Scale Study of Runtime MCP Servers and Security Scanner Reliability","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-07-14T07:09:56.559355Z"},"links":{"cited_paper":"/paper/2508.06418","citing_paper":"/paper/2607.11086"},"observation_digest":"sha256:ec3611cf941ff5115eee907d87f99353b378b1617472620773d5b6adf1d20015","observation_id":"4dfc0bb5-735b-40f6-ad90-a597961fa2b2","resolution":{"observed_at":"2026-07-14T07:09:56.559355Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2508.06418","last_updated":"2025-08-08T16:05:27Z","snapshot_observed_at":"2026-08-08T12:59:56.859606Z","submitted_at":"2025-08-08T16:05:27Z","title":"Quantifying Conversation Drift in MCP via Latent Polytope","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2508.06418","snapshot_observed_at":"2026-08-11T16:53:35.001891Z","title":"arXiv preprint arXiv:2508.06418 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.09476","last_updated":"2026-08-10T11:45:03Z","snapshot_observed_at":"2026-08-22T02:14:45.651204Z","submitted_at":"2026-08-10T11:45:03Z","title":"ActBench: Self-Evolving Benchmark of Behavioral Safety in Cowork Agents","version":1},"reference_index":66,"source":"arxiv_source","source_observed_at":"2026-08-11T16:53:35.001891Z"},"links":{"cited_paper":"/paper/2508.06418","citing_paper":"/paper/2608.09476"},"observation_digest":"sha256:3e9f602294a2c3e8778d640172373230322584268cee06fc2c3c2619c46d3b33","observation_id":"0d49999b-5bce-4f24-bd81-9d4fbb3484a4","resolution":{"observed_at":"2026-08-11T16:53:35.001891Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2508.06418/citation-record","integrity":"/paper/2508.06418/integrity","json":"/paper/2508.06418/citation-record.json","paper":"/paper/2508.06418"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:51:28.015724Z","title":", \" * write output.state after.block = add.period write newline","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2508.06418","last_updated":"2025-08-08T16:05:27Z","snapshot_observed_at":"2026-08-08T12:59:56.859606Z","submitted_at":"2025-08-08T16:05:27Z","title":"Quantifying Conversation Drift in MCP via Latent Polytope","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-05T22:51:28.015724Z"},"links":{"citing_paper":"/paper/2508.06418"},"observation_digest":"sha256:ac293aabe19cab4d72edde1ad0d90af4e499e7016914aebabd0caf69e2287c29","observation_id":"8548a390-426c-4574-a74f-af18b61f6d98","resolution":{"observed_at":"2026-08-05T22:51:28.015724Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:51:28.022885Z","title":"write newline","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2508.06418","last_updated":"2025-08-08T16:05:27Z","snapshot_observed_at":"2026-08-08T12:59:56.859606Z","submitted_at":"2025-08-08T16:05:27Z","title":"Quantifying Conversation Drift in MCP via Latent Polytope","version":1},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-05T22:51:28.022885Z"},"links":{"citing_paper":"/paper/2508.06418"},"observation_digest":"sha256:399478e4c586133a0ae400d52ead56970ce0ee502db2bfcfd3396cccfd1589cd","observation_id":"a04b6b4a-7931-4f08-b530-f8766cffb1d6","resolution":{"observed_at":"2026-08-05T22:51:28.022885Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:51:28.977490Z","title":"GonzaloA/fake\\_news","venue":null,"work_id":"e459663a-4490-4840-93b5-62f53b2181cb","year":2022},"citing_paper":{"arxiv_id":"2508.06418","last_updated":"2025-08-08T16:05:27Z","snapshot_observed_at":"2026-08-08T12:59:56.859606Z","submitted_at":"2025-08-08T16:05:27Z","title":"Quantifying Conversation Drift in MCP via Latent Polytope","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-05T22:51:28.031296Z"},"links":{"citing_paper":"/paper/2508.06418"},"observation_digest":"sha256:5185029411e7388e2974f2e30a39788e6a0149635e402866a44c8d57175c7dae","observation_id":"14c3eb1c-eed8-41e5-9ee4-37ef04edcb1f","resolution":{"observed_at":"2026-08-05T22:51:28.983812Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00799","last_updated":"2025-03-06T17:43:10Z","snapshot_observed_at":"2026-08-16T13:46:59.275887Z","submitted_at":"2024-06-02T16:53:21Z","title":"Get my drift? Catching LLM Task Drift with Activation Deltas","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00799","snapshot_observed_at":"2026-08-05T22:51:28.042439Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.06418","last_updated":"2025-08-08T16:05:27Z","snapshot_observed_at":"2026-08-08T12:59:56.859606Z","submitted_at":"2025-08-08T16:05:27Z","title":"Quantifying Conversation Drift in MCP via Latent Polytope","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-05T22:51:28.042439Z"},"links":{"cited_paper":"/paper/2406.00799","citing_paper":"/paper/2508.06418"},"observation_digest":"sha256:0047632f813510f69dc4ff773bb49bcaa3790399baab7386ac9ef4c5e3487e20","observation_id":"586f8d8a-f0e5-4a8a-a6ff-790b26029a29","resolution":{"observed_at":"2026-08-05T22:51:28.042439Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2303.08774","last_updated":"2024-03-04T06:01:33Z","snapshot_observed_at":"2026-08-17T09:58:46.058102Z","submitted_at":"2023-03-15T17:15:04Z","title":"GPT-4 Technical Report","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.08774","snapshot_observed_at":"2026-08-05T22:51:28.049953Z","title":"L.; Almeida, D.; Altenschmidt, J.; Altman, S.; Anadkat, S.; et al","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.06418","last_updated":"2025-08-08T16:05:27Z","snapshot_observed_at":"2026-08-08T12:59:56.859606Z","submitted_at":"2025-08-08T16:05:27Z","title":"Quantifying Conversation Drift in MCP via Latent Polytope","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-05T22:51:28.049953Z"},"links":{"cited_paper":"/paper/2303.08774","citing_paper":"/paper/2508.06418"},"observation_digest":"sha256:f3b5ff9cbca5366b1fcb454d14d39ae9db4a4cd3956712bdfa264733b002a00d","observation_id":"5eacdea9-f62b-44a9-9141-cbcc277d77c5","resolution":{"observed_at":"2026-08-05T22:51:28.049953Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.17601","last_updated":"2025-02-24T19:36:26Z","snapshot_observed_at":"2026-08-19T21:06:35.805336Z","submitted_at":"2025-02-24T19:36:26Z","title":"Representation Engineering for Large-Language Models: Survey and Research Challenges","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.17601","snapshot_observed_at":"2026-08-05T22:51:28.057876Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.06418","last_updated":"2025-08-08T16:05:27Z","snapshot_observed_at":"2026-08-08T12:59:56.859606Z","submitted_at":"2025-08-08T16:05:27Z","title":"Quantifying Conversation Drift in MCP via Latent Polytope","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-05T22:51:28.057876Z"},"links":{"cited_paper":"/paper/2502.17601","citing_paper":"/paper/2508.06418"},"observation_digest":"sha256:9efdf08314d022e39cf514da31e3ff2acefa8919ac989366079f94a2dc7bbe46","observation_id":"16b69998-c383-41ad-8ce8-d0121e40f655","resolution":{"observed_at":"2026-08-05T22:51:28.057876Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.00177","last_updated":"2025-02-28T20:43:45Z","snapshot_observed_at":"2026-08-16T12:54:08.694181Z","submitted_at":"2025-02-28T20:43:45Z","title":"Steering Large Language Model Activations in Sparse Spaces","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.00177","snapshot_observed_at":"2026-08-05T22:51:28.064772Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.06418","last_updated":"2025-08-08T16:05:27Z","snapshot_observed_at":"2026-08-08T12:59:56.859606Z","submitted_at":"2025-08-08T16:05:27Z","title":"Quantifying Conversation Drift in MCP via Latent Polytope","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-05T22:51:28.064772Z"},"links":{"cited_paper":"/paper/2503.00177","citing_paper":"/paper/2508.06418"},"observation_digest":"sha256:261141ea5039ede4ebc704d3431e88ce7e5fb30ca9530c445d26ccca6c0036c7","observation_id":"6ff86b81-6e43-4bf1-9a83-10780ba5bdf7","resolution":{"observed_at":"2026-08-05T22:51:28.064772Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.06363","last_updated":"2024-09-25T19:48:39Z","snapshot_observed_at":"2026-08-19T16:46:32.130363Z","submitted_at":"2024-02-09T12:15:51Z","title":"StruQ: Defending Against Prompt Injection with Structured Queries","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.06363","snapshot_observed_at":"2026-08-05T22:51:28.070431Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.06418","last_updated":"2025-08-08T16:05:27Z","snapshot_observed_at":"2026-08-08T12:59:56.859606Z","submitted_at":"2025-08-08T16:05:27Z","title":"Quantifying Conversation Drift in MCP via Latent Polytope","version":1},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-05T22:51:28.070431Z"},"links":{"cited_paper":"/paper/2402.06363","citing_paper":"/paper/2508.06418"},"observation_digest":"sha256:6ae01b5b81745937a6816a06914fd2173fc0365993460cd7972bfd04fd1b2cc2","observation_id":"4c60e0b9-500c-41a5-a449-6a31062268d2","resolution":{"observed_at":"2026-08-05T22:51:28.070431Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:51:28.958983Z","title":null,"venue":null,"work_id":"f0a5e0a8-f28d-4831-9d1f-4a814f97bf01","year":2021},"citing_paper":{"arxiv_id":"2508.06418","last_updated":"2025-08-08T16:05:27Z","snapshot_observed_at":"2026-08-08T12:59:56.859606Z","submitted_at":"2025-08-08T16:05:27Z","title":"Quantifying Conversation Drift in MCP via Latent Polytope","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-05T22:51:28.077234Z"},"links":{"citing_paper":"/paper/2508.06418"},"observation_digest":"sha256:6b9a21cdf692b5b12a53479ca195a1174e08668c0f3d4b29088d80ded836e25e","observation_id":"4f0f4095-d4b9-4244-adf3-7ea0557f5bf4","resolution":{"observed_at":"2026-08-05T22:51:28.964929Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.13666","last_updated":"2025-06-16T16:24:31Z","snapshot_observed_at":"2026-08-07T00:25:36.770856Z","submitted_at":"2025-06-16T16:24:31Z","title":"We Should Identify and Mitigate Third-Party Safety Risks in MCP-Powered Agent Systems","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.13666","snapshot_observed_at":"2026-08-05T22:51:28.082763Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.06418","last_updated":"2025-08-08T16:05:27Z","snapshot_observed_at":"2026-08-08T12:59:56.859606Z","submitted_at":"2025-08-08T16:05:27Z","title":"Quantifying Conversation Drift in MCP via Latent Polytope","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-05T22:51:28.082763Z"},"links":{"cited_paper":"/paper/2506.13666","citing_paper":"/paper/2508.06418"},"observation_digest":"sha256:9f7e3b1ed764e9b2a26bb4e8cee07c5af4287d1bc71c8f9424ce0f4098dfb1e7","observation_id":"e0d13b95-ba3d-45c4-a254-a4f2d61dcdb2","resolution":{"observed_at":"2026-08-05T22:51:28.082763Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:51:28.941420Z","title":null,"venue":null,"work_id":"7e7e63e1-d87e-4380-9b41-63b205a618a2","year":2025},"citing_paper":{"arxiv_id":"2508.06418","last_updated":"2025-08-08T16:05:27Z","snapshot_observed_at":"2026-08-08T12:59:56.859606Z","submitted_at":"2025-08-08T16:05:27Z","title":"Quantifying Conversation Drift in MCP via Latent Polytope","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-05T22:51:28.089303Z"},"links":{"citing_paper":"/paper/2508.06418"},"observation_digest":"sha256:fde068985c67c27c28ab06a4de8de2ddd8d32aad0629e199d96db1ec68a47ea0","observation_id":"d177d919-e7e3-4ce5-b9cd-5529137beb2d","resolution":{"observed_at":"2026-08-05T22:51:28.946136Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:51:28.094963Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.06418","last_updated":"2025-08-08T16:05:27Z","snapshot_observed_at":"2026-08-08T12:59:56.859606Z","submitted_at":"2025-08-08T16:05:27Z","title":"Quantifying Conversation Drift in MCP via Latent Polytope","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-05T22:51:28.094963Z"},"links":{"citing_paper":"/paper/2508.06418"},"observation_digest":"sha256:855d97d500f602982c554a8dec3a61c92e6ceb7dd9cdd58b738e0383976ac7ff","observation_id":"eccb5d1f-828e-467a-b437-f97fc41babc5","resolution":{"observed_at":"2026-08-05T22:51:28.094963Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.23278","last_updated":"2025-10-07T07:13:32Z","snapshot_observed_at":"2026-08-14T03:34:08.418318Z","submitted_at":"2025-03-30T01:58:22Z","title":"Model Context Protocol (MCP): Landscape, Security Threats, and Future Research Directions","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.23278","snapshot_observed_at":"2026-08-05T22:51:28.100152Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.06418","last_updated":"2025-08-08T16:05:27Z","snapshot_observed_at":"2026-08-08T12:59:56.859606Z","submitted_at":"2025-08-08T16:05:27Z","title":"Quantifying Conversation Drift in MCP via Latent Polytope","version":1},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-05T22:51:28.100152Z"},"links":{"cited_paper":"/paper/2503.23278","citing_paper":"/paper/2508.06418"},"observation_digest":"sha256:1445913fb05f926dfbeadd5b638e91f1184d13a2954bc13b26edf6e332bef344","observation_id":"32b1447d-65b6-47aa-bdec-e399a0b961d4","resolution":{"observed_at":"2026-08-05T22:51:28.100152Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2501.15145","last_updated":"2025-04-12T02:58:59Z","snapshot_observed_at":"2026-08-15T04:20:35.068104Z","submitted_at":"2025-01-25T09:03:19Z","title":"PromptShield: Deployable Detection for Prompt Injection Attacks","version":2},"cited_work":{"arxiv_id":"2501.15145","doi":null,"metadata_source":"pith","pith_arxiv_id":"2501.15145","snapshot_observed_at":"2026-08-05T22:51:28.498764Z","title":"PromptShield: Deployable Detection for Prompt Injection Attacks","venue":"cs.CR","work_id":"3405c5e0-49c7-4576-ac78-69fc6b486a1c","year":2025},"citing_paper":{"arxiv_id":"2508.06418","last_updated":"2025-08-08T16:05:27Z","snapshot_observed_at":"2026-08-08T12:59:56.859606Z","submitted_at":"2025-08-08T16:05:27Z","title":"Quantifying Conversation Drift in MCP via Latent Polytope","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-05T22:51:28.105339Z"},"links":{"cited_paper":"/paper/2501.15145","citing_paper":"/paper/2508.06418"},"observation_digest":"sha256:fbd1e1e0b0f6a932eb02b5e3c7ba6efbc10e358bef9a64bca0e52fda1b99fdba","observation_id":"dda0473a-f068-48a5-b58b-73328a2d860b","resolution":{"observed_at":"2026-08-05T22:51:28.507399Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.05499","last_updated":"2025-12-29T02:25:27Z","snapshot_observed_at":"2026-08-21T23:11:31.486806Z","submitted_at":"2023-06-08T18:43:11Z","title":"Prompt Injection attack against LLM-integrated Applications","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.05499","snapshot_observed_at":"2026-08-05T22:51:28.110470Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.06418","last_updated":"2025-08-08T16:05:27Z","snapshot_observed_at":"2026-08-08T12:59:56.859606Z","submitted_at":"2025-08-08T16:05:27Z","title":"Quantifying Conversation Drift in MCP via Latent Polytope","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-05T22:51:28.110470Z"},"links":{"cited_paper":"/paper/2306.05499","citing_paper":"/paper/2508.06418"},"observation_digest":"sha256:7b5c21b8721f48a47a5ed781274190f1a412aa19bd6de63e28f865b039cf538d","observation_id":"3168402d-ca78-4633-8118-6c01593338bf","resolution":{"observed_at":"2026-08-05T22:51:28.110470Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:51:28.923009Z","title":null,"venue":null,"work_id":"ebecca4c-5fe9-4211-ab6a-579465bc9579","year":2024},"citing_paper":{"arxiv_id":"2508.06418","last_updated":"2025-08-08T16:05:27Z","snapshot_observed_at":"2026-08-08T12:59:56.859606Z","submitted_at":"2025-08-08T16:05:27Z","title":"Quantifying Conversation Drift in MCP via Latent Polytope","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-05T22:51:28.117047Z"},"links":{"citing_paper":"/paper/2508.06418"},"observation_digest":"sha256:c9a95194b3cfcf946ad7984cf90703147711cf663b00cbed4217c5a440e5ec95","observation_id":"c0f7e58c-1e3c-4a6d-ad77-0f8d33f57000","resolution":{"observed_at":"2026-08-05T22:51:28.927946Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.08623","last_updated":"2025-05-02T18:26:39Z","snapshot_observed_at":"2026-08-20T11:41:49.623018Z","submitted_at":"2025-04-11T15:25:58Z","title":"Enterprise-Grade Security for the Model Context Protocol (MCP): Frameworks and Mitigation Strategies","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.08623","snapshot_observed_at":"2026-08-05T22:51:28.121759Z","title":"S.; and Habler, I","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.06418","last_updated":"2025-08-08T16:05:27Z","snapshot_observed_at":"2026-08-08T12:59:56.859606Z","submitted_at":"2025-08-08T16:05:27Z","title":"Quantifying Conversation Drift in MCP via Latent Polytope","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-05T22:51:28.121759Z"},"links":{"cited_paper":"/paper/2504.08623","citing_paper":"/paper/2508.06418"},"observation_digest":"sha256:596d5d69198c690013466fde383600bec674060eb890a9f6b3f145dd9407beed","observation_id":"972ae75b-6c82-4de3-b8fa-78640ea7b682","resolution":{"observed_at":"2026-08-05T22:51:28.121759Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.19951","last_updated":"2025-04-28T16:22:21Z","snapshot_observed_at":"2026-08-20T06:23:07.754347Z","submitted_at":"2025-04-28T16:22:21Z","title":"Securing GenAI Multi-Agent Systems Against Tool Squatting: A Zero Trust Registry-Based Approach","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.19951","snapshot_observed_at":"2026-08-05T22:51:28.127341Z","title":"S.; Huang, K.; and Habler, I","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.06418","last_updated":"2025-08-08T16:05:27Z","snapshot_observed_at":"2026-08-08T12:59:56.859606Z","submitted_at":"2025-08-08T16:05:27Z","title":"Quantifying Conversation Drift in MCP via Latent Polytope","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-05T22:51:28.127341Z"},"links":{"cited_paper":"/paper/2504.19951","citing_paper":"/paper/2508.06418"},"observation_digest":"sha256:f18983a58cefd024cb497bd6a08813fb351fbcbecb446aae63e38bbfcb9c445f","observation_id":"e30bdcf6-6307-4918-9df7-d79bc69dd08e","resolution":{"observed_at":"2026-08-05T22:51:28.127341Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:51:28.906062Z","title":null,"venue":null,"work_id":"5f29e464-f596-45c3-aa2d-22fc0f9f52ee","year":2017},"citing_paper":{"arxiv_id":"2508.06418","last_updated":"2025-08-08T16:05:27Z","snapshot_observed_at":"2026-08-08T12:59:56.859606Z","submitted_at":"2025-08-08T16:05:27Z","title":"Quantifying Conversation Drift in MCP via Latent Polytope","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-05T22:51:28.133096Z"},"links":{"citing_paper":"/paper/2508.06418"},"observation_digest":"sha256:6cdae9398fa9008da6f237c572d787ab351ad4618fd48c494f95e8ce89f984b2","observation_id":"c14a722f-14bb-4b31-b943-c6c6075a1f6d","resolution":{"observed_at":"2026-08-05T22:51:28.910954Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2211.09527","last_updated":"2022-11-17T13:43:20Z","snapshot_observed_at":"2026-08-18T00:11:55.170013Z","submitted_at":"2022-11-17T13:43:20Z","title":"Ignore Previous Prompt: Attack Techniques For Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2211.09527","snapshot_observed_at":"2026-08-05T22:51:28.137938Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.06418","last_updated":"2025-08-08T16:05:27Z","snapshot_observed_at":"2026-08-08T12:59:56.859606Z","submitted_at":"2025-08-08T16:05:27Z","title":"Quantifying Conversation Drift in MCP via Latent Polytope","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-05T22:51:28.137938Z"},"links":{"cited_paper":"/paper/2211.09527","citing_paper":"/paper/2508.06418"},"observation_digest":"sha256:95f52498ec65e2ac3d0c156bb431008dfa411bc683fff170850a5820cedc133e","observation_id":"05c5f8fc-8f10-4e24-b5a5-d2797498dd49","resolution":{"observed_at":"2026-08-05T22:51:28.137938Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2308.07308","last_updated":"2024-05-02T14:28:39Z","snapshot_observed_at":"2026-08-20T05:22:16.665208Z","submitted_at":"2023-08-14T17:54:10Z","title":"LLM Self Defense: By Self Examination, LLMs Know They Are Being Tricked","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.07308","snapshot_observed_at":"2026-08-05T22:51:28.143566Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.06418","last_updated":"2025-08-08T16:05:27Z","snapshot_observed_at":"2026-08-08T12:59:56.859606Z","submitted_at":"2025-08-08T16:05:27Z","title":"Quantifying Conversation Drift in MCP via Latent Polytope","version":1},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-05T22:51:28.143566Z"},"links":{"cited_paper":"/paper/2308.07308","citing_paper":"/paper/2508.06418"},"observation_digest":"sha256:40edf74dea0ace1c6217624410756d49ba10174fff53d532389e9cde3aee49da","observation_id":"cd994276-0d72-4b71-9058-35983f259cc6","resolution":{"observed_at":"2026-08-05T22:51:28.143566Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.03767","last_updated":"2025-04-11T16:59:05Z","snapshot_observed_at":"2026-08-20T01:31:26.020307Z","submitted_at":"2025-04-02T21:46:02Z","title":"MCP Safety Audit: LLMs with the Model Context Protocol Allow Major Security Exploits","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.03767","snapshot_observed_at":"2026-08-05T22:51:28.148748Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.06418","last_updated":"2025-08-08T16:05:27Z","snapshot_observed_at":"2026-08-08T12:59:56.859606Z","submitted_at":"2025-08-08T16:05:27Z","title":"Quantifying Conversation Drift in MCP via Latent Polytope","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-05T22:51:28.148748Z"},"links":{"cited_paper":"/paper/2504.03767","citing_paper":"/paper/2508.06418"},"observation_digest":"sha256:7193b6dc5ed1ac35879bebc4981443bc2983c645a4fc909406b43700ffae4d17","observation_id":"d775529d-57c9-47ee-899a-7172fcf6db4d","resolution":{"observed_at":"2026-08-05T22:51:28.148748Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2205.05124","last_updated":"2022-05-10T19:04:37Z","snapshot_observed_at":"2026-08-20T16:00:20.443554Z","submitted_at":"2022-05-10T19:04:37Z","title":"Extracting Latent Steering Vectors from Pretrained Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2205.05124","snapshot_observed_at":"2026-08-05T22:51:28.153771Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.06418","last_updated":"2025-08-08T16:05:27Z","snapshot_observed_at":"2026-08-08T12:59:56.859606Z","submitted_at":"2025-08-08T16:05:27Z","title":"Quantifying Conversation Drift in MCP via Latent Polytope","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-05T22:51:28.153771Z"},"links":{"cited_paper":"/paper/2205.05124","citing_paper":"/paper/2508.06418"},"observation_digest":"sha256:df04bc9797fc7084eca7e7aa75dd8a841dca75ebc2435bd71bcab6a5c8ec3310","observation_id":"0722ef15-5b41-414c-8a23-32de27c3fb68","resolution":{"observed_at":"2026-08-05T22:51:28.153771Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.07612","last_updated":"2024-01-15T11:44:18Z","snapshot_observed_at":"2026-08-16T14:27:29.477573Z","submitted_at":"2024-01-15T11:44:18Z","title":"Signed-Prompt: A New Approach to Prevent Prompt Injection Attacks Against LLM-Integrated Applications","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.07612","snapshot_observed_at":"2026-08-05T22:51:28.159339Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.06418","last_updated":"2025-08-08T16:05:27Z","snapshot_observed_at":"2026-08-08T12:59:56.859606Z","submitted_at":"2025-08-08T16:05:27Z","title":"Quantifying Conversation Drift in MCP via Latent Polytope","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-05T22:51:28.159339Z"},"links":{"cited_paper":"/paper/2401.07612","citing_paper":"/paper/2508.06418"},"observation_digest":"sha256:9857d01f22ebfdae8432ecc7df4ef659b9c06192090ce002acc9504e5350a781","observation_id":"f7e750b7-5280-413e-b33a-b8467dcffea0","resolution":{"observed_at":"2026-08-05T22:51:28.159339Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:51:28.888371Z","title":null,"venue":null,"work_id":"6167421a-f5b2-4f44-9555-7a9e788602a8","year":2018},"citing_paper":{"arxiv_id":"2508.06418","last_updated":"2025-08-08T16:05:27Z","snapshot_observed_at":"2026-08-08T12:59:56.859606Z","submitted_at":"2025-08-08T16:05:27Z","title":"Quantifying Conversation Drift in MCP via Latent Polytope","version":1},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-05T22:51:28.164940Z"},"links":{"citing_paper":"/paper/2508.06418"},"observation_digest":"sha256:71862acc6f8201561c14b8548c23025f66c6652741c45c64c752af4f22709880","observation_id":"77df2916-8b8a-4804-a4db-bf0624027d84","resolution":{"observed_at":"2026-08-05T22:51:28.893815Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:51:28.871716Z","title":null,"venue":null,"work_id":"2dda7eeb-27f2-428b-abaf-cca0cf0f2a6d","year":2024},"citing_paper":{"arxiv_id":"2508.06418","last_updated":"2025-08-08T16:05:27Z","snapshot_observed_at":"2026-08-08T12:59:56.859606Z","submitted_at":"2025-08-08T16:05:27Z","title":"Quantifying Conversation Drift in MCP via Latent Polytope","version":1},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-08-05T22:51:28.170641Z"},"links":{"citing_paper":"/paper/2508.06418"},"observation_digest":"sha256:1161d2259b9323ae8be7ad2678f9d3b7d34b4731aa742ed4b1c0540792f8196e","observation_id":"14d3b2fa-5769-4de4-9962-0d7c8d4bc5e5","resolution":{"observed_at":"2026-08-05T22:51:28.877109Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.09593","last_updated":"2025-04-17T03:50:19Z","snapshot_observed_at":"2026-08-21T09:18:05.561105Z","submitted_at":"2025-04-13T14:18:35Z","title":"ControlNET: A Firewall for RAG-based LLM System","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.09593","snapshot_observed_at":"2026-08-05T22:51:28.176303Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.06418","last_updated":"2025-08-08T16:05:27Z","snapshot_observed_at":"2026-08-08T12:59:56.859606Z","submitted_at":"2025-08-08T16:05:27Z","title":"Quantifying Conversation Drift in MCP via Latent Polytope","version":1},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-08-05T22:51:28.176303Z"},"links":{"cited_paper":"/paper/2504.09593","citing_paper":"/paper/2508.06418"},"observation_digest":"sha256:7266584257ad0ed2b8c1cd5bd67cf40005a64126d2963d7d9fb664393a182b19","observation_id":"cacada80-e609-4068-a52a-a3545898727f","resolution":{"observed_at":"2026-08-05T22:51:28.176303Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.22832","last_updated":"2024-10-30T09:15:51Z","snapshot_observed_at":"2026-08-16T13:04:38.165779Z","submitted_at":"2024-10-30T09:15:51Z","title":"HijackRAG: Hijacking Attacks against Retrieval-Augmented Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.22832","snapshot_observed_at":"2026-08-05T22:51:28.181829Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.06418","last_updated":"2025-08-08T16:05:27Z","snapshot_observed_at":"2026-08-08T12:59:56.859606Z","submitted_at":"2025-08-08T16:05:27Z","title":"Quantifying Conversation Drift in MCP via Latent Polytope","version":1},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-08-05T22:51:28.181829Z"},"links":{"cited_paper":"/paper/2410.22832","citing_paper":"/paper/2508.06418"},"observation_digest":"sha256:7e6fa45019c0e9494c70c0b33ee0cabb64bcfe56c6ff471fc7e6549ffa772e9f","observation_id":"d40f98a0-a812-47e0-bbe5-9acf560065e1","resolution":{"observed_at":"2026-08-05T22:51:28.181829Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.08966","last_updated":"2025-02-14T04:16:40Z","snapshot_observed_at":"2026-08-20T08:17:28.154555Z","submitted_at":"2025-02-13T05:06:22Z","title":"RTBAS: Defending LLM Agents Against Prompt Injection and Privacy Leakage","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.08966","snapshot_observed_at":"2026-08-05T22:51:28.187021Z","title":"Y.; Chen, S.; Wang, R.; McCall, M.; Titzer, B","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.06418","last_updated":"2025-08-08T16:05:27Z","snapshot_observed_at":"2026-08-08T12:59:56.859606Z","submitted_at":"2025-08-08T16:05:27Z","title":"Quantifying Conversation Drift in MCP via Latent Polytope","version":1},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-08-05T22:51:28.187021Z"},"links":{"cited_paper":"/paper/2502.08966","citing_paper":"/paper/2508.06418"},"observation_digest":"sha256:91c9c3c8b2448933b244081ca53ce64d0a883f3e0d8a80d70c9a646d0c5f9b48","observation_id":"afccdfc2-6a61-4588-ae1d-7caaa7ddc689","resolution":{"observed_at":"2026-08-05T22:51:28.187021Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-08-12T09:06:50.363435Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-08-05T22:51:28.192282Z","title":"Z.; and Fredrikson, M","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.06418","last_updated":"2025-08-08T16:05:27Z","snapshot_observed_at":"2026-08-08T12:59:56.859606Z","submitted_at":"2025-08-08T16:05:27Z","title":"Quantifying Conversation Drift in MCP via Latent Polytope","version":1},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-08-05T22:51:28.192282Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2508.06418"},"observation_digest":"sha256:fd0f3cc24448f1e88b52510cf8a19deafaf5e5a4bcc5feed0dedf7ca50160c68","observation_id":"c4660857-0f0c-4709-959c-2603ffaed132","resolution":{"observed_at":"2026-08-05T22:51:28.192282Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-05T22:51:28.198095Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.06418","last_updated":"2025-08-08T16:05:27Z","snapshot_observed_at":"2026-08-08T12:59:56.859606Z","submitted_at":"2025-08-08T16:05:27Z","title":"Quantifying Conversation Drift in MCP via Latent Polytope","version":1},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-08-05T22:51:28.198095Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2508.06418"},"observation_digest":"sha256:1c77895493303a8b7a68be1b2e54eba2c8219c11821cd256cbc3bb8d926c412f","observation_id":"104865e9-671a-4f27-a3c9-35bb198575ca","resolution":{"observed_at":"2026-08-05T22:51:28.198095Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2508.06418","last_updated":"2025-08-08T16:05:27Z","latest_version":1,"primary_category":"cs.CL","snapshot_observed_at":"2026-08-08T12:59:56.859606Z","submitted_at":"2025-08-08T16:05:27Z","title":"Quantifying Conversation Drift in MCP via Latent Polytope"},"reference_resolution":{"displayed":31,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":29,"verified_exact":1,"verified_fuzzy":1},"total_outbound_references":31},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"thesis":"As of 22 August 2026, this Paper Citation Record lists 31 of 31 outbound references and 3 inbound Pith citation observations for arXiv:2508.06418."}