{"as_of":"2026-08-09T00:06:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:d3779780c1fb921d47d7c70fdbe529aa20c7e6c19f8a3750f4f6550405cb6522","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":5,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":5,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":5,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":5,"source":"paper_references, paper_reference_links","source_observed_at":"2026-05-15T02:42:05.644536Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-05-15T02:43:33.379911Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2508.15310","last_updated":"2025-08-21T07:08:16Z","snapshot_observed_at":"2026-08-08T04:03:57.302764Z","submitted_at":"2025-08-21T07:08:16Z","title":"IPIGuard: A Novel Tool Dependency Graph-Based Defense Against Indirect Prompt Injection in LLM Agents","version":1},"cited_work":{"arxiv_id":"2508.15310","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2508.15310","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"IPIGuard: A novel tool dependency graph-based defense against indirect prompt injection in LLM agents","venue":null,"work_id":"e52e49b8-5458-4d9f-b54f-6183b61c74df","year":2025},"citing_paper":{"arxiv_id":"2604.16543","last_updated":"2026-04-17T02:31:09Z","snapshot_observed_at":"2026-07-06T23:03:52.631613Z","submitted_at":"2026-04-17T02:31:09Z","title":"Conjunctive Prompt Attacks in Multi-Agent LLM Systems","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-05-10T08:13:42.401992Z"},"links":{"cited_paper":"/paper/2508.15310","citing_paper":"/paper/2604.16543"},"observation_digest":"sha256:92a879a25bb6a045fa38661a91299d342395faf9952a223fa2f877f543671a12","observation_id":"16c1e72a-d067-4120-8ed7-2cbe2c135a34","resolution":{"observed_at":"2026-05-10T08:17:37.719282Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2508.15310","last_updated":"2025-08-21T07:08:16Z","snapshot_observed_at":"2026-08-08T04:03:57.302764Z","submitted_at":"2025-08-21T07:08:16Z","title":"IPIGuard: A Novel Tool Dependency Graph-Based Defense Against Indirect Prompt Injection in LLM Agents","version":1},"cited_work":{"arxiv_id":"2508.15310","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2508.15310","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"IPIGuard: A novel tool dependency graph-based defense against indirect prompt injection in LLM agents","venue":null,"work_id":"e52e49b8-5458-4d9f-b54f-6183b61c74df","year":2025},"citing_paper":{"arxiv_id":"2604.16762","last_updated":"2026-04-18T00:23:32Z","snapshot_observed_at":"2026-08-05T05:46:03.567285Z","submitted_at":"2026-04-18T00:23:32Z","title":"CapSeal: Capability-Sealed Secret Mediation for Secure Agent Execution","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-05-10T07:47:46.307793Z"},"links":{"cited_paper":"/paper/2508.15310","citing_paper":"/paper/2604.16762"},"observation_digest":"sha256:407ee924f3e195e8a25b77a8701a5d8b60e63779b78a5577560c3a7e420b1f81","observation_id":"3e0770cc-4269-4a14-ad1a-e5086ad6b35d","resolution":{"observed_at":"2026-05-10T07:52:13.818751Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2508.15310","last_updated":"2025-08-21T07:08:16Z","snapshot_observed_at":"2026-08-08T04:03:57.302764Z","submitted_at":"2025-08-21T07:08:16Z","title":"IPIGuard: A Novel Tool Dependency Graph-Based Defense Against Indirect Prompt Injection in LLM Agents","version":1},"cited_work":{"arxiv_id":"2508.15310","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2508.15310","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"IPIGuard: A novel tool dependency graph-based defense against indirect prompt injection in LLM agents","venue":null,"work_id":"e52e49b8-5458-4d9f-b54f-6183b61c74df","year":2025},"citing_paper":{"arxiv_id":"2604.17562","last_updated":"2026-04-19T18:02:21Z","snapshot_observed_at":"2026-07-06T23:04:37.370465Z","submitted_at":"2026-04-19T18:02:21Z","title":"SafeAgent: A Runtime Protection Architecture for Agentic Systems","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-05-10T06:06:49.717091Z"},"links":{"cited_paper":"/paper/2508.15310","citing_paper":"/paper/2604.17562"},"observation_digest":"sha256:4744a4e3fe3332bdb97464f46b125547c78859cd8441e6fc4b0b3b5311989d22","observation_id":"8691a171-85b4-4da8-9ef8-87108510c73c","resolution":{"observed_at":"2026-05-10T06:11:20.523296Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2508.15310","last_updated":"2025-08-21T07:08:16Z","snapshot_observed_at":"2026-08-08T04:03:57.302764Z","submitted_at":"2025-08-21T07:08:16Z","title":"IPIGuard: A Novel Tool Dependency Graph-Based Defense Against Indirect Prompt Injection in LLM Agents","version":1},"cited_work":{"arxiv_id":"2508.15310","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2508.15310","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"IPIGuard: A novel tool dependency graph-based defense against indirect prompt injection in LLM agents","venue":null,"work_id":"e52e49b8-5458-4d9f-b54f-6183b61c74df","year":2025},"citing_paper":{"arxiv_id":"2604.25109","last_updated":"2026-04-28T01:32:27Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:32:27Z","title":"Structured Security Auditing and Robustness Enhancement for Untrusted Agent Skills","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-05-07T16:22:49.737626Z"},"links":{"cited_paper":"/paper/2508.15310","citing_paper":"/paper/2604.25109"},"observation_digest":"sha256:362b48754dd09d54a93da771d4da311c3a2fcf116830eccedb6ba4c9f7a8b9a4","observation_id":"5737b865-a879-4711-9d1b-4ff6ff40d388","resolution":{"observed_at":"2026-05-11T23:46:17.376618Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2508.15310","last_updated":"2025-08-21T07:08:16Z","snapshot_observed_at":"2026-08-08T04:03:57.302764Z","submitted_at":"2025-08-21T07:08:16Z","title":"IPIGuard: A Novel Tool Dependency Graph-Based Defense Against Indirect Prompt Injection in LLM Agents","version":1},"cited_work":{"arxiv_id":"2508.15310","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2508.15310","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"IPIGuard: A novel tool dependency graph-based defense against indirect prompt injection in LLM agents","venue":null,"work_id":"e52e49b8-5458-4d9f-b54f-6183b61c74df","year":2025},"citing_paper":{"arxiv_id":"2605.14290","last_updated":"2026-05-14T02:48:57Z","snapshot_observed_at":"2026-08-03T04:50:16.568616Z","submitted_at":"2026-05-14T02:48:57Z","title":"Web Agents Should Adopt the Plan-Then-Execute Paradigm","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-05-15T02:42:05.644536Z"},"links":{"cited_paper":"/paper/2508.15310","citing_paper":"/paper/2605.14290"},"observation_digest":"sha256:ce2b4cf567199d03a0187d15e565fd52c71c459bbb73a7cfb959e9272409947b","observation_id":"611a0c98-fd08-47a9-9c68-5d3d2f248f26","resolution":{"observed_at":"2026-05-15T02:43:33.381524Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2508.15310/citation-record","integrity":"/paper/2508.15310/integrity","json":"/paper/2508.15310/citation-record.json","paper":"/paper/2508.15310"},"outbound":[],"paper":{"arxiv_id":"2508.15310","last_updated":"2025-08-21T07:08:16Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-08T04:03:57.302764Z","submitted_at":"2025-08-21T07:08:16Z","title":"IPIGuard: A Novel Tool Dependency Graph-Based Defense Against Indirect Prompt Injection in LLM Agents"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 5 inbound Pith citation observations for arXiv:2508.15310."}