{"as_of":"2026-08-09T11:38:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:e4e9c9d01fe2336f9961cbbe59ae5123fe055f5109ccf20a180449c7bf249dba","coverage":[{"denominator":39,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":39,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-04T22:01:57.994573Z","state":"measured"},{"denominator":39,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":39,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2509.07617/citation-record","integrity":"/paper/2509.07617/integrity","json":"/paper/2509.07617/citation-record.json","paper":"/paper/2509.07617"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2406.00799","last_updated":"2025-03-06T17:43:10Z","snapshot_observed_at":"2026-08-08T01:50:42.192362Z","submitted_at":"2024-06-02T16:53:21Z","title":"Get my drift? Catching LLM Task Drift with Activation Deltas","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00799","snapshot_observed_at":"2026-08-04T22:01:55.817698Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:55.817698Z"},"links":{"cited_paper":"/paper/2406.00799","citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:3f91190dedeff6af42e07144728bfdc34132a7079c151f6d99798a68edb720dc","observation_id":"9e7d3ba7-4aad-4095-a7b5-3c73f2aaa80f","resolution":{"observed_at":"2026-08-04T22:01:55.817698Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1803.08375","last_updated":"2026-04-14T12:21:53Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2018-03-22T14:30:17Z","title":"Deep Learning using Rectified Linear Units (ReLU)","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1803.08375","snapshot_observed_at":"2026-08-04T22:01:55.919959Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:55.919959Z"},"links":{"cited_paper":"/paper/1803.08375","citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:c24b9c33c9b03b5b6104f3d46c08266d04c264542473f05755406c8afdcd995c","observation_id":"d6ab64dc-bf4c-4481-9660-41c25be777dc","resolution":{"observed_at":"2026-08-04T22:01:55.919959Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T22:01:58.408784Z","title":null,"venue":null,"work_id":"82f926b2-0634-4d7a-b53d-dbb26de5cce5","year":2023},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:55.983764Z"},"links":{"citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:80610a9fbac23d87cefe2dde044da6c32c3836f88a63b89cfaf9dbc330857655","observation_id":"5f9d6298-8373-4f59-b50f-19a3726268f0","resolution":{"observed_at":"2026-08-04T22:01:58.411899Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T22:01:58.398849Z","title":null,"venue":null,"work_id":"e79e6df1-2782-46c5-8527-a0206609f3d5","year":2023},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:56.083669Z"},"links":{"citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:42ef525bc9b5eda3c20f1a52e5e5522b076d56af540e06fe0e774b7509be4170","observation_id":"0a00f070-2033-49c2-901d-74404f3f3537","resolution":{"observed_at":"2026-08-04T22:01:58.401937Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.06363","last_updated":"2024-09-25T19:48:39Z","snapshot_observed_at":"2026-07-06T17:27:58.440355Z","submitted_at":"2024-02-09T12:15:51Z","title":"StruQ: Defending Against Prompt Injection with Structured Queries","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.06363","snapshot_observed_at":"2026-08-04T22:01:56.130324Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:56.130324Z"},"links":{"cited_paper":"/paper/2402.06363","citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:b6c3025f2250972bc8438e807d905f8365cd4d76e211da22629ca8889a39beda","observation_id":"95186c93-b8d9-401a-87c5-4352a1e01ee7","resolution":{"observed_at":"2026-08-04T22:01:56.130324Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T22:01:58.389217Z","title":null,"venue":null,"work_id":"c744fe1a-b75d-4179-8d77-a08ad86ded6a","year":2023},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:56.245216Z"},"links":{"citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:a61bbd8364f77861a8b5a314529bdce7d95b3a213a80d902f6311e3ad5edae1a","observation_id":"00ef843a-ac58-470d-9626-abdf69b4025d","resolution":{"observed_at":"2026-08-04T22:01:58.392453Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T22:01:56.353635Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:56.353635Z"},"links":{"citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:29752a3b49e403a1d705f5c147962a6f84eb565582dda8bb29205cd4eaebd7d1","observation_id":"38da0cd8-dfd6-4a9f-88ea-80490161cbcd","resolution":{"observed_at":"2026-08-04T22:01:56.353635Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.21783","last_updated":"2024-11-23T23:27:33Z","snapshot_observed_at":"2026-07-06T18:55:11.576666Z","submitted_at":"2024-07-31T17:54:27Z","title":"The Llama 3 Herd of Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.21783","snapshot_observed_at":"2026-08-04T22:01:56.478515Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:56.478515Z"},"links":{"cited_paper":"/paper/2407.21783","citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:f53bfb538dad12e5093d8fcb2aeb650a4a668a0b569b171207df13f0e502429f","observation_id":"77dc8b32-3aff-4b2e-9972-520977470a60","resolution":{"observed_at":"2026-08-04T22:01:56.478515Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T22:01:58.379781Z","title":null,"venue":null,"work_id":"86268bd5-dee1-4ce6-80c4-6e6ae6ae2bf1","year":2024},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:56.560318Z"},"links":{"citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:2a7d0090e570789a7321a7c7719592758a2f5da98b440e4b02d26c4f4e1955bf","observation_id":"615f0075-f0b5-4842-bc74-5a38f43b3076","resolution":{"observed_at":"2026-08-04T22:01:58.383036Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T22:01:58.369795Z","title":null,"venue":null,"work_id":"a8844341-3bed-4b0b-b8f9-1c9f6295c745","year":2023},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:56.637975Z"},"links":{"citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:7bd65aea34079c05c2a2086e6d5211d17a43198976f57efbc8c3488a8b036e77","observation_id":"ff9c73df-5a20-4c82-8d99-113a15914304","resolution":{"observed_at":"2026-08-04T22:01:58.372887Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.04093","last_updated":"2024-06-06T14:10:12Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-06-06T14:10:12Z","title":"Scaling and evaluating sparse autoencoders","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.04093","snapshot_observed_at":"2026-08-04T22:01:56.733520Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:56.733520Z"},"links":{"cited_paper":"/paper/2406.04093","citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:31b053fd9cb0fba52e699a12dccff433bd1512fbe01d7f5477c75c94bf63325e","observation_id":"02e2de0e-b531-4308-b725-aa65e26cb1c5","resolution":{"observed_at":"2026-08-04T22:01:56.733520Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T22:01:58.359967Z","title":null,"venue":null,"work_id":"9c6bc63d-4aef-43ff-8e22-1814710e72c3","year":2023},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:56.817271Z"},"links":{"citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:fd682b0f25ce56443374dcfba9a92e5cfe5185bb43debda1e3edba40bba2019c","observation_id":"50f7f826-a35f-481a-8063-e5e8f7fd9efc","resolution":{"observed_at":"2026-08-04T22:01:58.363333Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1912.03263","last_updated":"2020-09-15T15:40:19Z","snapshot_observed_at":"2026-07-06T08:42:41.724791Z","submitted_at":"2019-12-06T18:00:36Z","title":"Your Classifier is Secretly an Energy Based Model and You Should Treat it Like One","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1912.03263","snapshot_observed_at":"2026-08-04T22:01:56.912126Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:56.912126Z"},"links":{"cited_paper":"/paper/1912.03263","citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:9e5faf58d912385aa1d1902d2af30de631157479042ad47e116ea6f1671c90e4","observation_id":"667c41ca-d484-43fa-a39c-a161d5fa0282","resolution":{"observed_at":"2026-08-04T22:01:56.912126Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T22:01:58.349752Z","title":null,"venue":null,"work_id":"35beaf47-4a8c-4401-818a-98ddffd34bd4","year":2024},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:56.975406Z"},"links":{"citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:d335cab676ed89667c87fd59fb60228ba75f4e1d8ecbae0681f89eb74e79e9a8","observation_id":"cd607da8-c69e-45fe-9fd4-25764f8546c2","resolution":{"observed_at":"2026-08-04T22:01:58.353342Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T22:01:58.340213Z","title":null,"venue":null,"work_id":"78f4aca4-148c-4b27-9981-8eb9aa07fa63","year":2023},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:57.054596Z"},"links":{"citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:1fb19884682a080857eb99db8fb0ebf7772e670de418ef0461d12c3949710bcb","observation_id":"e455f78e-2f15-4f6d-97fa-ccb0cb8b7811","resolution":{"observed_at":"2026-08-04T22:01:58.343348Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T22:01:58.329502Z","title":null,"venue":null,"work_id":"3ef0f2f1-1e3c-4fd5-911b-4e716fd73b38","year":1977},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:57.131950Z"},"links":{"citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:1a89bc77335873fa22b2c14aeaeca9c05f1eb83555613cc2217eacbb35f02c1a","observation_id":"7a5b27e1-938c-4fe5-bd44-6b240d99810e","resolution":{"observed_at":"2026-08-04T22:01:58.333116Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.07981","last_updated":"2024-09-02T21:29:04Z","snapshot_observed_at":"2026-08-04T11:08:33.781707Z","submitted_at":"2024-04-11T17:57:32Z","title":"Manipulating Large Language Models to Increase Product Visibility","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.07981","snapshot_observed_at":"2026-08-04T22:01:57.245660Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:57.245660Z"},"links":{"cited_paper":"/paper/2404.07981","citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:769832b05d3b93c9fecfab6c943427c5b6404a884e49558dd02476410e16173e","observation_id":"e3cdba70-e1a0-47fa-aff9-ea91c3760c6e","resolution":{"observed_at":"2026-08-04T22:01:57.245660Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.22770","last_updated":"2025-03-30T16:39:15Z","snapshot_observed_at":"2026-08-08T06:17:50.732965Z","submitted_at":"2024-10-30T07:39:42Z","title":"InjecGuard: Benchmarking and Mitigating Over-defense in Prompt Injection Guardrail Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.22770","snapshot_observed_at":"2026-08-04T22:01:57.303234Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:57.303234Z"},"links":{"cited_paper":"/paper/2410.22770","citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:6c23ed5f3b35c26e4b3b603347eac5f33c4893737d7e7ea7e41fe1dbacda8853","observation_id":"20ed6250-4fe4-49a9-8648-c3bbcd5cfde3","resolution":{"observed_at":"2026-08-04T22:01:57.303234Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.04451","last_updated":"2024-03-20T21:34:56Z","snapshot_observed_at":"2026-08-06T02:57:30.438059Z","submitted_at":"2023-10-03T19:44:37Z","title":"AutoDAN: Generating Stealthy Jailbreak Prompts on Aligned Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.04451","snapshot_observed_at":"2026-08-04T22:01:57.377362Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:57.377362Z"},"links":{"cited_paper":"/paper/2310.04451","citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:3968378319085fab6d2c92a54141a82c4213e19ada7e196aab1ffa28af4b122a","observation_id":"d30553a2-b272-43cd-a8f6-0e38b6ead490","resolution":{"observed_at":"2026-08-04T22:01:57.377362Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T22:01:58.317820Z","title":null,"venue":null,"work_id":"6c27a46c-4eeb-4062-94f4-c7187ad5648f","year":2019},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:57.451340Z"},"links":{"citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:43d49230312c80a3077363119a1d316704fafdc9d526461ee8d6350fc281c763","observation_id":"477d6527-d241-4363-8c25-7eab01b014c1","resolution":{"observed_at":"2026-08-04T22:01:58.321463Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.18653/v1/2022.acl-long.31","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":null,"venue":"Proceedings of the 60th Annual Meeting of the Association for Computational Linguistics (Volume 1: Long Papers)","work_id":"34b208e7-c6a5-49a1-8ae5-09524610d4bc","year":2022},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:57.489600Z"},"links":{"citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:bc2929935052f0daca962b88dae0e969caaa33af028429e95077d1e2ba3b5e50","observation_id":"21142ff4-51b4-48be-8900-0a21b46ec4c2","resolution":{"observed_at":"2026-08-04T22:01:58.125977Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T22:01:58.306610Z","title":null,"venue":null,"work_id":"e9e6c134-b7a2-42a1-9a73-4137c995d684","year":2023},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:57.617024Z"},"links":{"citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:e5978b249dffde427b3487fa396228a8fb265dfc73dfe41c0bc94071461b4de9","observation_id":"70069888-8a48-4925-a62b-b0d6e2a97fc8","resolution":{"observed_at":"2026-08-04T22:01:58.309970Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T22:01:58.295788Z","title":null,"venue":null,"work_id":"fce0a732-44df-4a8b-9f94-aff1a241100f","year":2024},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:57.729077Z"},"links":{"citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:af72446c662a1a858065dd969f0960afe899b8f0f2684d394d5ad893f8dad744","observation_id":"05b1ac4a-92d6-4488-8f1a-7d8bdc384174","resolution":{"observed_at":"2026-08-04T22:01:58.299156Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"9932.36947","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T22:01:58.237934Z","title":null,"venue":null,"work_id":"5631cf8b-72ff-4e6a-8783-545f4c0b0dc3","year":2024},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:57.801630Z"},"links":{"citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:d7399c560c0d6625a05bf1a279f0009d547d818a6935e98d38f5cfa381070fde","observation_id":"0680734a-96b0-4b7f-acd9-0a59e99ccea0","resolution":{"observed_at":"2026-08-04T22:01:58.243483Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.13459","last_updated":"2025-05-29T14:42:38Z","snapshot_observed_at":"2026-08-04T11:15:46.100317Z","submitted_at":"2024-02-21T01:30:03Z","title":"Learning to Poison Large Language Models for Downstream Manipulation","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.13459","snapshot_observed_at":"2026-08-04T22:01:57.897642Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:57.897642Z"},"links":{"cited_paper":"/paper/2402.13459","citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:e24617dac9ffd57ba7d8021b0b05e05bec21f6fb7951717c54c7f6847f2edfcd","observation_id":"7df2670b-84c2-462a-ad8a-6f489e28d981","resolution":{"observed_at":"2026-08-04T22:01:57.897642Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T22:01:58.285550Z","title":null,"venue":null,"work_id":"2fdd8760-4156-4c76-a6cc-ff906479ddb7","year":2022},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:57.949819Z"},"links":{"citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:1b984cb29f2296998f795c4ff6fe027c26d77a21dd2c04315759cc554d04a249","observation_id":"fd6a3044-0fc5-47a7-98a7-e120ecf444ca","resolution":{"observed_at":"2026-08-04T22:01:58.288781Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T22:01:58.274790Z","title":null,"venue":null,"work_id":"59acd994-7d6a-4d2e-87ab-3d0227140378","year":2023},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:57.953121Z"},"links":{"citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:13747dab7cbfcc8f02d7bd42d27611e69ce7b3c87a11a8c90fb09f8684afef12","observation_id":"98f36526-371a-4be9-b39c-4917f899150c","resolution":{"observed_at":"2026-08-04T22:01:58.278618Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2101.03288","last_updated":"2021-02-17T19:20:09Z","snapshot_observed_at":"2026-08-07T02:28:23.454003Z","submitted_at":"2021-01-09T04:51:31Z","title":"How to Train Your Energy-Based Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2101.03288","snapshot_observed_at":"2026-08-04T22:01:57.956628Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:57.956628Z"},"links":{"cited_paper":"/paper/2101.03288","citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:25cf29ca6a2303b888c694879bef69e3d7673edaa7e23e71b22032b8322a1006","observation_id":"b5688f6c-e99b-4249-b4f8-8b53afd838f1","resolution":{"observed_at":"2026-08-04T22:01:57.956628Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.01011","last_updated":"2023-11-02T06:13:36Z","snapshot_observed_at":"2026-07-06T16:42:04.139453Z","submitted_at":"2023-11-02T06:13:36Z","title":"Tensor Trust: Interpretable Prompt Injection Attacks from an Online Game","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.01011","snapshot_observed_at":"2026-08-04T22:01:57.960028Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:57.960028Z"},"links":{"cited_paper":"/paper/2311.01011","citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:7014a705850dc680598efe11c19285973f2264140ee42ad4666ded2f19712596","observation_id":"5c03889a-82f0-4b39-bf67-ea4dcf4822fe","resolution":{"observed_at":"2026-08-04T22:01:57.960028Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.01605","last_updated":"2024-09-06T18:17:07Z","snapshot_observed_at":"2026-08-06T22:08:41.344061Z","submitted_at":"2024-08-02T23:47:27Z","title":"CYBERSECEVAL 3: Advancing the Evaluation of Cybersecurity Risks and Capabilities in Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.01605","snapshot_observed_at":"2026-08-04T22:01:57.963907Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:57.963907Z"},"links":{"cited_paper":"/paper/2408.01605","citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:63c9165ef07298cbaf18331f20661ff95b4a5b6a3df75e1d32a867c43760c127","observation_id":"4502b85a-9c97-4b32-aa88-126b77fc5c4c","resolution":{"observed_at":"2026-08-04T22:01:57.963907Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.10671","last_updated":"2024-09-10T13:25:53Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-07-15T12:35:42Z","title":"Qwen2 Technical Report","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.10671","snapshot_observed_at":"2026-08-04T22:01:57.967318Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:57.967318Z"},"links":{"cited_paper":"/paper/2407.10671","citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:2187d0a168d7a090ab3ee782dbd21d565738eb2850073981e59c97e79656e0c7","observation_id":"280b6d50-c2de-43ec-ac3e-117263adcf6a","resolution":{"observed_at":"2026-08-04T22:01:57.967318Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.15115","last_updated":"2025-01-03T02:18:21Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-12-19T17:56:09Z","title":"Qwen2.5 Technical Report","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.15115","snapshot_observed_at":"2026-08-04T22:01:57.970596Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:57.970596Z"},"links":{"cited_paper":"/paper/2412.15115","citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:fed79a9603036ce6031a51dcfe59ae87ecdfba521b72e0936fd9f363a44f1904","observation_id":"cd0fbbd3-0e73-425b-88f5-91a4dadc7053","resolution":{"observed_at":"2026-08-04T22:01:57.970596Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.10253","last_updated":"2024-06-27T16:01:27Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-09-19T02:19:48Z","title":"GPTFUZZER: Red Teaming Large Language Models with Auto-Generated Jailbreak Prompts","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.10253","snapshot_observed_at":"2026-08-04T22:01:57.973925Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:57.973925Z"},"links":{"cited_paper":"/paper/2309.10253","citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:f9e6313e0fff04d613e637ed2618ff391a97526f9107b435ffd8be2478882e9b","observation_id":"f0b328ce-df6a-40d1-b004-bfb33ed4605e","resolution":{"observed_at":"2026-08-04T22:01:57.973925Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2409.14729","last_updated":"2025-04-03T23:03:17Z","snapshot_observed_at":"2026-07-06T19:20:14.980387Z","submitted_at":"2024-09-23T06:08:32Z","title":"PROMPTFUZZ: Harnessing Fuzzing Techniques for Robust Testing of Prompt Injection in LLMs","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.14729","snapshot_observed_at":"2026-08-04T22:01:57.977055Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:57.977055Z"},"links":{"cited_paper":"/paper/2409.14729","citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:d18c2578b2a0b428c5a3cf4dc97d23935296bbc73cc3f8c2a6199c51448f020f","observation_id":"c548b889-4ab8-4ee0-9675-7a7956461aad","resolution":{"observed_at":"2026-08-04T22:01:57.977055Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T22:01:57.980607Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:57.980607Z"},"links":{"citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:b5689e2f5518266662ce6b55e9a09964a3b8bd67262fbc5df6bf8f776eb15e95","observation_id":"3beca988-30d5-4a49-bd65-fa341b2d39b8","resolution":{"observed_at":"2026-08-04T22:01:57.980607Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.01405","last_updated":"2025-03-03T06:14:14Z","snapshot_observed_at":"2026-07-06T16:26:38.284922Z","submitted_at":"2023-10-02T17:59:07Z","title":"Representation Engineering: A Top-Down Approach to AI Transparency","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.01405","snapshot_observed_at":"2026-08-04T22:01:57.984138Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:57.984138Z"},"links":{"cited_paper":"/paper/2310.01405","citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:04e71abb23b1bf0684638b8e448cf81ac293c2c0d90d77c586dd09105b3d3a5d","observation_id":"12e1d92e-2d6c-4c91-8270-315a322e8e54","resolution":{"observed_at":"2026-08-04T22:01:57.984138Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-07-06T15:59:23.019044Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-08-04T22:01:57.987780Z","title":"Zico Kolter, and Matt Fredrikson","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:57.987780Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:796ad4958060a9414191e567235857e3796cd9ff06caf4901bb618927fdfaf64","observation_id":"e07732de-3b93-4f69-8ef2-1125ada131a8","resolution":{"observed_at":"2026-08-04T22:01:57.987780Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T22:01:57.991183Z","title":"online\" 'onlinestring :=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":38,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:57.991183Z"},"links":{"citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:382c579c9a88d854e11cc8617fef8d55040f4bb8be5cd7a981dcd4c4c19ff4de","observation_id":"44405e95-71fb-4270-8b49-cf5294d2baf2","resolution":{"observed_at":"2026-08-04T22:01:57.991183Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T22:01:57.994573Z","title":"write newline","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling","version":1},"reference_index":39,"source":"arxiv_source","source_observed_at":"2026-08-04T22:01:57.994573Z"},"links":{"citing_paper":"/paper/2509.07617"},"observation_digest":"sha256:ea44ff6fca8f24df18ca8a6fd0c7eef44bc4cc2ff6bd04dfc1fcf03e24f0be13","observation_id":"cbfd15c2-da4c-4369-9bcc-7989144050b7","resolution":{"observed_at":"2026-08-04T22:01:57.994573Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2509.07617","last_updated":"2025-09-09T11:42:06Z","latest_version":1,"primary_category":"cs.AI","snapshot_observed_at":"2026-08-09T04:13:47.465666Z","submitted_at":"2025-09-09T11:42:06Z","title":"Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling"},"reference_resolution":{"displayed":39,"state_counts":{"malformed_identifier":0,"metadata_mismatch":1,"parse_uncertain":0,"unresolved":37,"verified_exact":1,"verified_fuzzy":0},"total_outbound_references":39},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 39 of 39 outbound references and 0 inbound Pith citation observations for arXiv:2509.07617."}