Paper Citation Record · LEDGER

Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling

As of 9 August 2026, this Paper Citation Record lists 39 of 39 outbound references and 0 inbound Pith citation observations for arXiv:2509.07617.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2509.07617 v1

Coverage vector

measured 39 of 39 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-04T22:01:57.994573Z

measured 39 of 39 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-09T06:31:02.800959+00:00

measured 0 of 0 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: cited_works

Reference resolution

39 of 39 outbound references displayed

verified exact1
verified fuzzy0
unresolved37
parse uncertain0
malformed identifier0
metadata mismatch1

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation 9e7d3ba7-4aad-4095-a7b5-3c73f2aaa80f · outbound

This paper cites Get my drift? Catching LLM Task Drift with Activation Deltas.

Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling Get my drift? Catching LLM Task Drift with Activation Deltas

Reference 1

Resolution: unresolved; no resolver link, observed 2026-08-04T22:01:55.817698Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation d6ab64dc-bf4c-4481-9660-41c25be777dc · outbound

This paper cites Deep Learning using Rectified Linear Units (ReLU).

Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling Deep Learning using Rectified Linear Units (ReLU)

Reference 2

Resolution: unresolved; no resolver link, observed 2026-08-04T22:01:55.919959Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 5f9d6298-8373-4f59-b50f-19a3726268f0 · outbound

This paper cites an unresolved cited work.

Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling Unresolved cited work

Reference 3

Resolution: unresolved; raw_fallback, observed 2026-08-04T22:01:58.411899Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 0a00f070-2033-49c2-901d-74404f3f3537 · outbound

This paper cites an unresolved cited work.

Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling Unresolved cited work

Reference 4

Resolution: unresolved; raw_fallback, observed 2026-08-04T22:01:58.401937Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 95186c93-b8d9-401a-87c5-4352a1e01ee7 · outbound

This paper cites StruQ: Defending Against Prompt Injection with Structured Queries.

Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling StruQ: Defending Against Prompt Injection with Structured Queries

Reference 5

Resolution: unresolved; no resolver link, observed 2026-08-04T22:01:56.130324Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 00ef843a-ac58-470d-9626-abdf69b4025d · outbound

This paper cites an unresolved cited work.

Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling Unresolved cited work

Reference 6

Resolution: unresolved; raw_fallback, observed 2026-08-04T22:01:58.392453Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 38da0cd8-dfd6-4a9f-88ea-80490161cbcd · outbound

This paper cites an unresolved cited work.

Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling Unresolved cited work

Reference 7

Resolution: unresolved; no resolver link, observed 2026-08-04T22:01:56.353635Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 77dc8b32-3aff-4b2e-9972-520977470a60 · outbound

This paper cites The Llama 3 Herd of Models.

Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling The Llama 3 Herd of Models

Reference 8

Resolution: unresolved; no resolver link, observed 2026-08-04T22:01:56.478515Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 615f0075-f0b5-4842-bc74-5a38f43b3076 · outbound

This paper cites an unresolved cited work.

Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling Unresolved cited work

Reference 9

Resolution: unresolved; raw_fallback, observed 2026-08-04T22:01:58.383036Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation ff9c73df-5a20-4c82-8d99-113a15914304 · outbound

This paper cites an unresolved cited work.

Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling Unresolved cited work

Reference 10

Resolution: unresolved; raw_fallback, observed 2026-08-04T22:01:58.372887Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 02e2de0e-b531-4308-b725-aa65e26cb1c5 · outbound

This paper cites Scaling and evaluating sparse autoencoders.

Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling Scaling and evaluating sparse autoencoders

Reference 11

Resolution: unresolved; no resolver link, observed 2026-08-04T22:01:56.733520Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 50f7f826-a35f-481a-8063-e5e8f7fd9efc · outbound

This paper cites an unresolved cited work.

Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling Unresolved cited work

Reference 12

Resolution: unresolved; raw_fallback, observed 2026-08-04T22:01:58.363333Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 667c41ca-d484-43fa-a39c-a161d5fa0282 · outbound

This paper cites Your Classifier is Secretly an Energy Based Model and You Should Treat it Like One.

Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling Your Classifier is Secretly an Energy Based Model and You Should Treat it Like One

Reference 13

Resolution: unresolved; no resolver link, observed 2026-08-04T22:01:56.912126Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation cd607da8-c69e-45fe-9fd4-25764f8546c2 · outbound

This paper cites an unresolved cited work.

Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling Unresolved cited work

Reference 14

Resolution: unresolved; raw_fallback, observed 2026-08-04T22:01:58.353342Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation e455f78e-2f15-4f6d-97fa-ccb0cb8b7811 · outbound

This paper cites an unresolved cited work.

Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling Unresolved cited work

Reference 15

Resolution: unresolved; raw_fallback, observed 2026-08-04T22:01:58.343348Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 7a5b27e1-938c-4fe5-bd44-6b240d99810e · outbound

This paper cites an unresolved cited work.

Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling Unresolved cited work

Reference 16

Resolution: unresolved; raw_fallback, observed 2026-08-04T22:01:58.333116Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation e3cdba70-e1a0-47fa-aff9-ea91c3760c6e · outbound

This paper cites Manipulating Large Language Models to Increase Product Visibility.

Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling Manipulating Large Language Models to Increase Product Visibility

Reference 17

Resolution: unresolved; no resolver link, observed 2026-08-04T22:01:57.245660Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 20ed6250-4fe4-49a9-8648-c3bbcd5cfde3 · outbound

This paper cites InjecGuard: Benchmarking and Mitigating Over-defense in Prompt Injection Guardrail Models.

Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling InjecGuard: Benchmarking and Mitigating Over-defense in Prompt Injection Guardrail Models

Reference 18

Resolution: unresolved; no resolver link, observed 2026-08-04T22:01:57.303234Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation d30553a2-b272-43cd-a8f6-0e38b6ead490 · outbound

This paper cites AutoDAN: Generating Stealthy Jailbreak Prompts on Aligned Large Language Models.

Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling AutoDAN: Generating Stealthy Jailbreak Prompts on Aligned Large Language Models

Reference 19

Resolution: unresolved; no resolver link, observed 2026-08-04T22:01:57.377362Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 477d6527-d241-4363-8c25-7eab01b014c1 · outbound

This paper cites an unresolved cited work.

Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling Unresolved cited work

Reference 20

Resolution: unresolved; raw_fallback, observed 2026-08-04T22:01:58.321463Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 21142ff4-51b4-48be-8900-0a21b46ec4c2 · outbound

This paper cites an unresolved cited work.

Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling Unresolved cited work

Reference 21

Resolution: verified exact; doi, observed 2026-08-04T22:01:58.125977Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 70069888-8a48-4925-a62b-b0d6e2a97fc8 · outbound

This paper cites an unresolved cited work.

Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling Unresolved cited work

Reference 22

Resolution: unresolved; raw_fallback, observed 2026-08-04T22:01:58.309970Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 05b1ac4a-92d6-4488-8f1a-7d8bdc384174 · outbound

This paper cites an unresolved cited work.

Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling Unresolved cited work

Reference 23

Resolution: unresolved; raw_fallback, observed 2026-08-04T22:01:58.299156Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 0680734a-96b0-4b7f-acd9-0a59e99ccea0 · outbound

This paper cites an unresolved cited work.

Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling Unresolved cited work

Reference 24

Resolution: metadata mismatch; arxiv_id, observed 2026-08-04T22:01:58.243483Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 7df2670b-84c2-462a-ad8a-6f489e28d981 · outbound

This paper cites Learning to Poison Large Language Models for Downstream Manipulation.

Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling Learning to Poison Large Language Models for Downstream Manipulation

Reference 25

Resolution: unresolved; no resolver link, observed 2026-08-04T22:01:57.897642Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation fd6a3044-0fc5-47a7-98a7-e120ecf444ca · outbound

This paper cites an unresolved cited work.

Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling Unresolved cited work

Reference 26

Resolution: unresolved; raw_fallback, observed 2026-08-04T22:01:58.288781Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 98f36526-371a-4be9-b39c-4917f899150c · outbound

This paper cites an unresolved cited work.

Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling Unresolved cited work

Reference 27

Resolution: unresolved; raw_fallback, observed 2026-08-04T22:01:58.278618Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation b5688f6c-e99b-4249-b4f8-8b53afd838f1 · outbound

This paper cites How to Train Your Energy-Based Models.

Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling How to Train Your Energy-Based Models

Reference 28

Resolution: unresolved; no resolver link, observed 2026-08-04T22:01:57.956628Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 5c03889a-82f0-4b39-bf67-ea4dcf4822fe · outbound

This paper cites Tensor Trust: Interpretable Prompt Injection Attacks from an Online Game.

Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling Tensor Trust: Interpretable Prompt Injection Attacks from an Online Game

Reference 29

Resolution: unresolved; no resolver link, observed 2026-08-04T22:01:57.960028Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 4502b85a-9c97-4b32-aa88-126b77fc5c4c · outbound

This paper cites CYBERSECEVAL 3: Advancing the Evaluation of Cybersecurity Risks and Capabilities in Large Language Models.

Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling CYBERSECEVAL 3: Advancing the Evaluation of Cybersecurity Risks and Capabilities in Large Language Models

Reference 30

Resolution: unresolved; no resolver link, observed 2026-08-04T22:01:57.963907Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 280b6d50-c2de-43ec-ac3e-117263adcf6a · outbound

This paper cites Qwen2 Technical Report.

Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling Qwen2 Technical Report

Reference 31

Resolution: unresolved; no resolver link, observed 2026-08-04T22:01:57.967318Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation cd0fbbd3-0e73-425b-88f5-91a4dadc7053 · outbound

This paper cites Qwen2.5 Technical Report.

Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling Qwen2.5 Technical Report

Reference 32

Resolution: unresolved; no resolver link, observed 2026-08-04T22:01:57.970596Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation f0b328ce-df6a-40d1-b004-bfb33ed4605e · outbound

This paper cites GPTFUZZER: Red Teaming Large Language Models with Auto-Generated Jailbreak Prompts.

Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling GPTFUZZER: Red Teaming Large Language Models with Auto-Generated Jailbreak Prompts

Reference 33

Resolution: unresolved; no resolver link, observed 2026-08-04T22:01:57.973925Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation c548b889-4ab8-4ee0-9675-7a7956461aad · outbound

This paper cites PROMPTFUZZ: Harnessing Fuzzing Techniques for Robust Testing of Prompt Injection in LLMs.

Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling PROMPTFUZZ: Harnessing Fuzzing Techniques for Robust Testing of Prompt Injection in LLMs

Reference 34

Resolution: unresolved; no resolver link, observed 2026-08-04T22:01:57.977055Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 3beca988-30d5-4a49-bd65-fa341b2d39b8 · outbound

This paper cites an unresolved cited work.

Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling Unresolved cited work

Reference 35

Resolution: unresolved; no resolver link, observed 2026-08-04T22:01:57.980607Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 12e1d92e-2d6c-4c91-8270-315a322e8e54 · outbound

This paper cites Representation Engineering: A Top-Down Approach to AI Transparency.

Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling Representation Engineering: A Top-Down Approach to AI Transparency

Reference 36

Resolution: unresolved; no resolver link, observed 2026-08-04T22:01:57.984138Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation e07732de-3b93-4f69-8ef2-1125ada131a8 · outbound

This paper cites Universal and Transferable Adversarial Attacks on Aligned Language Models.

Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling Universal and Transferable Adversarial Attacks on Aligned Language Models

Reference 37

Resolution: unresolved; no resolver link, observed 2026-08-04T22:01:57.987780Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 44405e95-71fb-4270-8b49-cf5294d2baf2 · outbound

This paper cites online" 'onlinestring :=.

Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling online" 'onlinestring :=

Reference 38

Resolution: unresolved; no resolver link, observed 2026-08-04T22:01:57.991183Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation cbfd15c2-da4c-4369-9bcc-7989144050b7 · outbound

This paper cites write newline.

Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling write newline

Reference 39

Resolution: unresolved; no resolver link, observed 2026-08-04T22:01:57.994573Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Pith citing papers

No inbound Pith citation observations are available.