{"as_of":"2026-08-07T19:18:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:ab6d32b2dc4be9e27b2d945cf06f74b64224b1ebb4f3b38482d5ea2e8951c512","coverage":[{"denominator":24,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":24,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-05T16:50:30.164447Z","state":"measured"},{"denominator":25,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":25,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-05-16T20:35:26.913297Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-05-16T20:38:24.771300Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2508.19287","last_updated":"2025-08-25T05:20:11Z","snapshot_observed_at":"2026-08-05T16:50:27.007109Z","submitted_at":"2025-08-25T05:20:11Z","title":"Prompt-in-Content Attacks: Exploiting Uploaded Inputs to Hijack LLM Behavior","version":1},"cited_work":{"arxiv_id":"2508.19287","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2508.19287","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Prompt-in-content attacks: Exploiting uploaded inputs to hijack llm behavior","venue":null,"work_id":"804f96e1-8233-42c4-9f76-7ad855a74ce3","year":2025},"citing_paper":{"arxiv_id":"2512.20405","last_updated":"2026-04-14T22:31:30Z","snapshot_observed_at":"2026-07-06T22:39:52.837578Z","submitted_at":"2025-12-23T14:54:45Z","title":"ChatGPT: Excellent Paper! Accept It. Editor: Imposter Found! Review Rejected","version":3},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-05-16T20:35:26.913297Z"},"links":{"cited_paper":"/paper/2508.19287","citing_paper":"/paper/2512.20405"},"observation_digest":"sha256:01eca8335c1921976233f72a262b1c04fe7d57708681769f5c16dd633594dcf3","observation_id":"8b997909-ea2a-4798-a6bb-7b9687af6c4d","resolution":{"observed_at":"2026-05-16T20:38:24.772785Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2508.19287/citation-record","integrity":"/paper/2508.19287/integrity","json":"/paper/2508.19287/citation-record.json","paper":"/paper/2508.19287"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:50:27.494758Z","title":"ACM transactions on intelligent systems and technology15(3), 1–45 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.19287","last_updated":"2025-08-25T05:20:11Z","snapshot_observed_at":"2026-08-05T16:50:27.007109Z","submitted_at":"2025-08-25T05:20:11Z","title":"Prompt-in-Content Attacks: Exploiting Uploaded Inputs to Hijack LLM Behavior","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-05T16:50:27.494758Z"},"links":{"citing_paper":"/paper/2508.19287"},"observation_digest":"sha256:85f47b01eddd8896e044f20f4b1858fdc2e549d943273295538e578c25123ca7","observation_id":"51f4e2e7-c5d4-42f7-afdd-3afe1c2a4c52","resolution":{"observed_at":"2026-08-05T16:50:27.494758Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.01769","last_updated":"2024-11-21T23:39:12Z","snapshot_observed_at":"2026-08-06T16:39:54.371324Z","submitted_at":"2024-05-02T22:43:02Z","title":"A Survey on Large Language Models for Critical Societal Domains: Finance, Healthcare, and Law","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.01769","snapshot_observed_at":"2026-08-05T16:50:27.634779Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.19287","last_updated":"2025-08-25T05:20:11Z","snapshot_observed_at":"2026-08-05T16:50:27.007109Z","submitted_at":"2025-08-25T05:20:11Z","title":"Prompt-in-Content Attacks: Exploiting Uploaded Inputs to Hijack LLM Behavior","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-05T16:50:27.634779Z"},"links":{"cited_paper":"/paper/2405.01769","citing_paper":"/paper/2508.19287"},"observation_digest":"sha256:a37482c437c83845dbf9dd65a35474709f005da3cfdeffae53da207832e4706c","observation_id":"de5726b3-e7be-433a-93fa-166858f3d9f7","resolution":{"observed_at":"2026-08-05T16:50:27.634779Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:50:33.407037Z","title":"In: 2024 IEEE International Con- ference on Big Data (BigData)","venue":null,"work_id":"58ae064f-906d-42bb-850f-69f7aac3466f","year":2024},"citing_paper":{"arxiv_id":"2508.19287","last_updated":"2025-08-25T05:20:11Z","snapshot_observed_at":"2026-08-05T16:50:27.007109Z","submitted_at":"2025-08-25T05:20:11Z","title":"Prompt-in-Content Attacks: Exploiting Uploaded Inputs to Hijack LLM Behavior","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-05T16:50:27.723080Z"},"links":{"citing_paper":"/paper/2508.19287"},"observation_digest":"sha256:6889cb884609c2794f0d88e88736804f1cd8683d4e115774e6f7a4928e50ba25","observation_id":"2a63a6e7-42f6-4b35-aa27-26ada5b07f9c","resolution":{"observed_at":"2026-08-05T16:50:33.494758Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:50:33.201556Z","title":"ACM Computing Surveys57(6), 1–39 (2025)","venue":null,"work_id":"ff3abcc8-4474-48b2-ae94-9be153783248","year":2025},"citing_paper":{"arxiv_id":"2508.19287","last_updated":"2025-08-25T05:20:11Z","snapshot_observed_at":"2026-08-05T16:50:27.007109Z","submitted_at":"2025-08-25T05:20:11Z","title":"Prompt-in-Content Attacks: Exploiting Uploaded Inputs to Hijack LLM Behavior","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-05T16:50:27.794401Z"},"links":{"citing_paper":"/paper/2508.19287"},"observation_digest":"sha256:c5d4971fa8e1536d27d1aa3072bf63f758e00ceff39cd75ee4d779de0e70d558","observation_id":"9425f9b0-6670-4106-ac45-82dab32a6e95","resolution":{"observed_at":"2026-08-05T16:50:33.273793Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:50:33.010407Z","title":"Cybersecurity 7(1), 70 (2024)","venue":null,"work_id":"cbbaddb5-a61c-442d-9f95-97b420375488","year":2024},"citing_paper":{"arxiv_id":"2508.19287","last_updated":"2025-08-25T05:20:11Z","snapshot_observed_at":"2026-08-05T16:50:27.007109Z","submitted_at":"2025-08-25T05:20:11Z","title":"Prompt-in-Content Attacks: Exploiting Uploaded Inputs to Hijack LLM Behavior","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-05T16:50:27.954346Z"},"links":{"citing_paper":"/paper/2508.19287"},"observation_digest":"sha256:4f758ea58efe7d5a94dfaddc477775c1db9636a999f73df395480b932d6549c9","observation_id":"403147c1-9106-4219-b38b-f80faf053944","resolution":{"observed_at":"2026-08-05T16:50:33.091436Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.14720","last_updated":"2024-03-20T15:26:23Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-03-20T15:26:23Z","title":"Defending Against Indirect Prompt Injection Attacks With Spotlighting","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.14720","snapshot_observed_at":"2026-08-05T16:50:28.069437Z","title":"arXiv preprint arXiv:2403.14720 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.19287","last_updated":"2025-08-25T05:20:11Z","snapshot_observed_at":"2026-08-05T16:50:27.007109Z","submitted_at":"2025-08-25T05:20:11Z","title":"Prompt-in-Content Attacks: Exploiting Uploaded Inputs to Hijack LLM Behavior","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-05T16:50:28.069437Z"},"links":{"cited_paper":"/paper/2403.14720","citing_paper":"/paper/2508.19287"},"observation_digest":"sha256:81ce145d27ce1c3c01d725081b1ba2b0a2341d966b8db422cf78dff4aef45a84","observation_id":"feb22126-f6bb-44ed-8bc7-a351c3db93b0","resolution":{"observed_at":"2026-08-05T16:50:28.069437Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.12351","last_updated":"2024-02-23T19:22:58Z","snapshot_observed_at":"2026-07-06T16:50:22.657866Z","submitted_at":"2023-11-21T04:59:17Z","title":"Advancing Transformer Architecture in Long-Context Large Language Models: A Comprehensive Survey","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.12351","snapshot_observed_at":"2026-08-05T16:50:28.169744Z","title":"arXiv preprint arXiv:2311.12351 (2023)","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.19287","last_updated":"2025-08-25T05:20:11Z","snapshot_observed_at":"2026-08-05T16:50:27.007109Z","submitted_at":"2025-08-25T05:20:11Z","title":"Prompt-in-Content Attacks: Exploiting Uploaded Inputs to Hijack LLM Behavior","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-05T16:50:28.169744Z"},"links":{"cited_paper":"/paper/2311.12351","citing_paper":"/paper/2508.19287"},"observation_digest":"sha256:7fbe52311d0601c0c4d1aded0eb953869a1180c70a35f94ee72016c4ce079c98","observation_id":"ff8cef0a-4330-4753-93d2-389d03bf037a","resolution":{"observed_at":"2026-08-05T16:50:28.169744Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:50:28.278771Z","title":"Learning and individual differences103, 102274 (2023)","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.19287","last_updated":"2025-08-25T05:20:11Z","snapshot_observed_at":"2026-08-05T16:50:27.007109Z","submitted_at":"2025-08-25T05:20:11Z","title":"Prompt-in-Content Attacks: Exploiting Uploaded Inputs to Hijack LLM Behavior","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-05T16:50:28.278771Z"},"links":{"citing_paper":"/paper/2508.19287"},"observation_digest":"sha256:144d518d954426aefc704b12234f7b35fbb095420f5e22a24999115ac4063812","observation_id":"3d5cf4f4-7742-48fa-bdb3-4c6ab5f5e6f6","resolution":{"observed_at":"2026-08-05T16:50:28.278771Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:50:32.712545Z","title":"Authorea Preprints (2024)","venue":null,"work_id":"6d77576f-9346-4498-9290-fcfcaae1b423","year":2024},"citing_paper":{"arxiv_id":"2508.19287","last_updated":"2025-08-25T05:20:11Z","snapshot_observed_at":"2026-08-05T16:50:27.007109Z","submitted_at":"2025-08-25T05:20:11Z","title":"Prompt-in-Content Attacks: Exploiting Uploaded Inputs to Hijack LLM Behavior","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-05T16:50:28.481789Z"},"links":{"citing_paper":"/paper/2508.19287"},"observation_digest":"sha256:ae7f1ea00964e0a5ce4d73cf266efbb7af2660a1af73133efadc3182a9603500","observation_id":"c70fa357-aa86-4b2e-ac33-2bb0ded3bc52","resolution":{"observed_at":"2026-08-05T16:50:32.767031Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:50:32.572320Z","title":"AI Open (2024)","venue":null,"work_id":"817429ad-8d39-41bc-bea2-e98cb2f194ea","year":2024},"citing_paper":{"arxiv_id":"2508.19287","last_updated":"2025-08-25T05:20:11Z","snapshot_observed_at":"2026-08-05T16:50:27.007109Z","submitted_at":"2025-08-25T05:20:11Z","title":"Prompt-in-Content Attacks: Exploiting Uploaded Inputs to Hijack LLM Behavior","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-05T16:50:28.627107Z"},"links":{"citing_paper":"/paper/2508.19287"},"observation_digest":"sha256:a7e93fb890908ab7745fb30137d1facb4aa95871abe6b27dfba03484fe30507f","observation_id":"e4a18588-d5ed-480c-846e-b7310ed07eb6","resolution":{"observed_at":"2026-08-05T16:50:32.644754Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:50:32.338938Z","title":"In: Proceedings of the Extended Abstracts of the CHI Conference on Human Factors in Computing Systems","venue":null,"work_id":"bb5f0e79-f777-4277-8df0-3d8eca87423c","year":2025},"citing_paper":{"arxiv_id":"2508.19287","last_updated":"2025-08-25T05:20:11Z","snapshot_observed_at":"2026-08-05T16:50:27.007109Z","submitted_at":"2025-08-25T05:20:11Z","title":"Prompt-in-Content Attacks: Exploiting Uploaded Inputs to Hijack LLM Behavior","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-05T16:50:28.690824Z"},"links":{"citing_paper":"/paper/2508.19287"},"observation_digest":"sha256:38e147ffb27048ed59b26afecd7bdd4aafd6ed45e700f1725bb9fc3f991e4aff","observation_id":"a5848cdb-b43b-41a8-93ca-942c2cec5a0f","resolution":{"observed_at":"2026-08-05T16:50:32.410186Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:50:31.985979Z","title":"Advances in Neural Information Processing Systems36, 4952–4984 (2023)","venue":null,"work_id":"59908352-b651-4258-bb4b-69da179e0259","year":2023},"citing_paper":{"arxiv_id":"2508.19287","last_updated":"2025-08-25T05:20:11Z","snapshot_observed_at":"2026-08-05T16:50:27.007109Z","submitted_at":"2025-08-25T05:20:11Z","title":"Prompt-in-Content Attacks: Exploiting Uploaded Inputs to Hijack LLM Behavior","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-05T16:50:28.824029Z"},"links":{"citing_paper":"/paper/2508.19287"},"observation_digest":"sha256:4d1eb9d30a7273b01fbc9c48f0188db2248c6b49b26c67e5be080314cd7660b9","observation_id":"3d6c04de-94bf-46a0-8d38-b9f81cb1466a","resolution":{"observed_at":"2026-08-05T16:50:32.093373Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04957","last_updated":"2024-03-07T23:46:20Z","snapshot_observed_at":"2026-07-06T17:41:19.171822Z","submitted_at":"2024-03-07T23:46:20Z","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.04957","snapshot_observed_at":"2026-08-05T16:50:28.896342Z","title":"arXiv preprint arXiv:2403.04957 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.19287","last_updated":"2025-08-25T05:20:11Z","snapshot_observed_at":"2026-08-05T16:50:27.007109Z","submitted_at":"2025-08-25T05:20:11Z","title":"Prompt-in-Content Attacks: Exploiting Uploaded Inputs to Hijack LLM Behavior","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-05T16:50:28.896342Z"},"links":{"cited_paper":"/paper/2403.04957","citing_paper":"/paper/2508.19287"},"observation_digest":"sha256:9525e1663338d4afb6f5226a2925cf06c64a147713a71b09d96368c36c0afd2e","observation_id":"4b2a9e2e-c0a5-44ec-8b75-efc62a07db9b","resolution":{"observed_at":"2026-08-05T16:50:28.896342Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:50:31.697635Z","title":"In: 33rd USENIX Security Symposium (USENIX Security 24)","venue":null,"work_id":"6e2fbed7-9c18-4aa9-a47a-f67d04bbc43d","year":2024},"citing_paper":{"arxiv_id":"2508.19287","last_updated":"2025-08-25T05:20:11Z","snapshot_observed_at":"2026-08-05T16:50:27.007109Z","submitted_at":"2025-08-25T05:20:11Z","title":"Prompt-in-Content Attacks: Exploiting Uploaded Inputs to Hijack LLM Behavior","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-05T16:50:28.974766Z"},"links":{"citing_paper":"/paper/2508.19287"},"observation_digest":"sha256:06cf8413d6e087e89d80e46aedc618464575b687bb467d8f28876c766c178944","observation_id":"cde4d3ad-3e5c-4a5a-980c-90e767a3682e","resolution":{"observed_at":"2026-08-05T16:50:31.854751Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:50:31.351507Z","title":"International Journal of Open Information Technologies12(5), 39– 48 (2024)","venue":null,"work_id":"505207ba-eee7-4834-aed7-b762163d9153","year":2024},"citing_paper":{"arxiv_id":"2508.19287","last_updated":"2025-08-25T05:20:11Z","snapshot_observed_at":"2026-08-05T16:50:27.007109Z","submitted_at":"2025-08-25T05:20:11Z","title":"Prompt-in-Content Attacks: Exploiting Uploaded Inputs to Hijack LLM Behavior","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-05T16:50:29.059844Z"},"links":{"citing_paper":"/paper/2508.19287"},"observation_digest":"sha256:1bb471d24e73816989aaaba17c388441fd82087a12928255e8452007da4c17fe","observation_id":"82aeb5b6-db47-4b5d-bf7e-3e10af776f8b","resolution":{"observed_at":"2026-08-05T16:50:31.524753Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:50:31.045749Z","title":"Cluster Computing 27(1), 1–26 (2024)","venue":null,"work_id":"45707e78-810f-42be-b971-8adb36964e90","year":2024},"citing_paper":{"arxiv_id":"2508.19287","last_updated":"2025-08-25T05:20:11Z","snapshot_observed_at":"2026-08-05T16:50:27.007109Z","submitted_at":"2025-08-25T05:20:11Z","title":"Prompt-in-Content Attacks: Exploiting Uploaded Inputs to Hijack LLM Behavior","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-05T16:50:29.139588Z"},"links":{"citing_paper":"/paper/2508.19287"},"observation_digest":"sha256:d8d110de3fba57e4f0b0caa851d9e3e56d5ec8585c1d07868f32c9f4799c3484","observation_id":"f8b6f0db-3eef-4e6d-8105-3ddec786ad55","resolution":{"observed_at":"2026-08-05T16:50:31.195817Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:50:30.856553Z","title":"Available at SSRN 5017385","venue":null,"work_id":"c65fa05a-3e5b-467d-86ec-3f0ebd16f977","year":null},"citing_paper":{"arxiv_id":"2508.19287","last_updated":"2025-08-25T05:20:11Z","snapshot_observed_at":"2026-08-05T16:50:27.007109Z","submitted_at":"2025-08-25T05:20:11Z","title":"Prompt-in-Content Attacks: Exploiting Uploaded Inputs to Hijack LLM Behavior","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-05T16:50:29.274754Z"},"links":{"citing_paper":"/paper/2508.19287"},"observation_digest":"sha256:ec21fe07be5bb043a2ab2c898299cfa534975daa8c584926503d4b918cf3b379","observation_id":"96a786cc-3e7a-40cb-bea5-4d75596676d6","resolution":{"observed_at":"2026-08-05T16:50:30.922498Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:50:30.711610Z","title":"In: 2024 Asia Pacific Signal and Information Processing Association Annual Summit and Conference (APSIPA ASC)","venue":null,"work_id":"44c36762-9e80-42f8-8d77-8ce7afeae248","year":2024},"citing_paper":{"arxiv_id":"2508.19287","last_updated":"2025-08-25T05:20:11Z","snapshot_observed_at":"2026-08-05T16:50:27.007109Z","submitted_at":"2025-08-25T05:20:11Z","title":"Prompt-in-Content Attacks: Exploiting Uploaded Inputs to Hijack LLM Behavior","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-05T16:50:29.420157Z"},"links":{"citing_paper":"/paper/2508.19287"},"observation_digest":"sha256:5adfa40545b48e54743ad88ffed34642ca3655494b295bbd0d10303c4542bfd7","observation_id":"f37e7852-2c04-42ea-a321-2f6e4f3ebbb5","resolution":{"observed_at":"2026-08-05T16:50:30.774749Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.08833","last_updated":"2023-06-15T03:30:13Z","snapshot_observed_at":"2026-07-06T15:42:44.954861Z","submitted_at":"2023-06-15T03:30:13Z","title":"Safeguarding Crowdsourcing Surveys from ChatGPT with Prompt Injection","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.08833","snapshot_observed_at":"2026-08-05T16:50:29.576676Z","title":"arXiv preprint arXiv:2306.08833 (2023)","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.19287","last_updated":"2025-08-25T05:20:11Z","snapshot_observed_at":"2026-08-05T16:50:27.007109Z","submitted_at":"2025-08-25T05:20:11Z","title":"Prompt-in-Content Attacks: Exploiting Uploaded Inputs to Hijack LLM Behavior","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-05T16:50:29.576676Z"},"links":{"cited_paper":"/paper/2306.08833","citing_paper":"/paper/2508.19287"},"observation_digest":"sha256:8ec7b2cc0bf51807a2b97774235e9b04ea63e30aa53bbad027f87a221ca403be","observation_id":"93c46095-eab8-44ac-a4ca-608cc6f2cda2","resolution":{"observed_at":"2026-08-05T16:50:29.576676Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.21492","last_updated":"2024-11-25T20:37:40Z","snapshot_observed_at":"2026-07-06T19:41:06.495019Z","submitted_at":"2024-10-28T20:02:47Z","title":"FATH: Authentication-based Test-time Defense against Indirect Prompt Injection Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.21492","snapshot_observed_at":"2026-08-05T16:50:29.700036Z","title":"arXiv preprint arXiv:2410.21492 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.19287","last_updated":"2025-08-25T05:20:11Z","snapshot_observed_at":"2026-08-05T16:50:27.007109Z","submitted_at":"2025-08-25T05:20:11Z","title":"Prompt-in-Content Attacks: Exploiting Uploaded Inputs to Hijack LLM Behavior","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-05T16:50:29.700036Z"},"links":{"cited_paper":"/paper/2410.21492","citing_paper":"/paper/2508.19287"},"observation_digest":"sha256:567087f15c608bd9e1d0de505f460e275a817272053574c6ecbcbf9a9b04a1e7","observation_id":"72435f72-57a9-4523-bade-16d154b3f501","resolution":{"observed_at":"2026-08-05T16:50:29.700036Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.18649","last_updated":"2024-02-28T19:00:12Z","snapshot_observed_at":"2026-07-06T17:37:05.339368Z","submitted_at":"2024-02-28T19:00:12Z","title":"A New Era in LLM Security: Exploring Security Concerns in Real-World LLM-based Systems","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.18649","snapshot_observed_at":"2026-08-05T16:50:29.805387Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.19287","last_updated":"2025-08-25T05:20:11Z","snapshot_observed_at":"2026-08-05T16:50:27.007109Z","submitted_at":"2025-08-25T05:20:11Z","title":"Prompt-in-Content Attacks: Exploiting Uploaded Inputs to Hijack LLM Behavior","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-05T16:50:29.805387Z"},"links":{"cited_paper":"/paper/2402.18649","citing_paper":"/paper/2508.19287"},"observation_digest":"sha256:45cb7f6183558668fce90ac26a17b3557fd1db198e9bec606f54d1e4b0723703","observation_id":"4ed72736-4654-47a2-8294-25c22ec8fd0e","resolution":{"observed_at":"2026-08-05T16:50:29.805387Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.14197","last_updated":"2025-01-27T08:51:16Z","snapshot_observed_at":"2026-07-06T17:06:45.522731Z","submitted_at":"2023-12-21T01:08:39Z","title":"Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.14197","snapshot_observed_at":"2026-08-05T16:50:29.954752Z","title":"arXiv preprint arXiv:2312.14197 (2023)","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.19287","last_updated":"2025-08-25T05:20:11Z","snapshot_observed_at":"2026-08-05T16:50:27.007109Z","submitted_at":"2025-08-25T05:20:11Z","title":"Prompt-in-Content Attacks: Exploiting Uploaded Inputs to Hijack LLM Behavior","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-05T16:50:29.954752Z"},"links":{"cited_paper":"/paper/2312.14197","citing_paper":"/paper/2508.19287"},"observation_digest":"sha256:e1500921048f0658dba9455b7bdf1e2694433c7a7d45cc529e4f6fa56b3607b1","observation_id":"f3cba737-1295-4552-94ac-1eadc91f1413","resolution":{"observed_at":"2026-08-05T16:50:29.954752Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.07234","last_updated":"2024-11-09T04:01:22Z","snapshot_observed_at":"2026-07-06T17:58:25.894552Z","submitted_at":"2024-04-06T06:17:10Z","title":"Goal-guided Generative Prompt Injection Attack on Large Language Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.07234","snapshot_observed_at":"2026-08-05T16:50:30.014754Z","title":"arXiv preprint arXiv:2404.07234 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.19287","last_updated":"2025-08-25T05:20:11Z","snapshot_observed_at":"2026-08-05T16:50:27.007109Z","submitted_at":"2025-08-25T05:20:11Z","title":"Prompt-in-Content Attacks: Exploiting Uploaded Inputs to Hijack LLM Behavior","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-05T16:50:30.014754Z"},"links":{"cited_paper":"/paper/2404.07234","citing_paper":"/paper/2508.19287"},"observation_digest":"sha256:35f2271d529cd0773da732b3009e74457438b1a52380caa2dccb21598d5752db","observation_id":"fc15fc42-8896-4481-8e38-5ef69530383c","resolution":{"observed_at":"2026-08-05T16:50:30.014754Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:50:30.445433Z","title":null,"venue":null,"work_id":"8e1b7c5e-eb08-4296-b483-19ea91a71956","year":2024},"citing_paper":{"arxiv_id":"2508.19287","last_updated":"2025-08-25T05:20:11Z","snapshot_observed_at":"2026-08-05T16:50:27.007109Z","submitted_at":"2025-08-25T05:20:11Z","title":"Prompt-in-Content Attacks: Exploiting Uploaded Inputs to Hijack LLM Behavior","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-05T16:50:30.164447Z"},"links":{"citing_paper":"/paper/2508.19287"},"observation_digest":"sha256:84583b3a1e41f8b355bf7076379810e518d1a84bfde65888616fd5be5d5459b4","observation_id":"0e909c49-7e05-45ab-9c3e-2c0063b2b161","resolution":{"observed_at":"2026-08-05T16:50:30.574959Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2508.19287","last_updated":"2025-08-25T05:20:11Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-05T16:50:27.007109Z","submitted_at":"2025-08-25T05:20:11Z","title":"Prompt-in-Content Attacks: Exploiting Uploaded Inputs to Hijack LLM Behavior"},"reference_resolution":{"displayed":24,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":12,"verified_exact":0,"verified_fuzzy":12},"total_outbound_references":24},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 7 August 2026, this Paper Citation Record lists 24 of 24 outbound references and 1 inbound Pith citation observation for arXiv:2508.19287."}