{"as_of":"2026-08-21T02:43:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:840d2e86ad4ca28c84c023216b88413a1403e727c5af41db61d6d984cfa989a2","coverage":[{"denominator":22,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":22,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-15T16:24:10.748194Z","state":"measured"},{"denominator":29,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":29,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-20T06:33:59.587034+00:00","state":"measured"},{"denominator":7,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":7,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-02T05:58:01.260673Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-05T07:40:47.616845Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2509.10540","last_updated":"2025-09-06T04:06:01Z","snapshot_observed_at":"2026-08-15T16:20:14.110461Z","submitted_at":"2025-09-06T04:06:01Z","title":"EchoLeak: The First Real-World Zero-Click Prompt Injection Exploit in a Production LLM System","version":1},"cited_work":{"arxiv_id":"2509.10540","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2509.10540","snapshot_observed_at":"2026-07-05T07:40:47.616845Z","title":"Echoleak: The first real-world zero-click prompt injection exploit in a production llm system","venue":null,"work_id":"b24c4a96-110e-4543-9d5e-2888ebd77959","year":2025},"citing_paper":{"arxiv_id":"2605.03213","last_updated":"2026-05-07T16:46:43Z","snapshot_observed_at":"2026-08-19T04:50:05.742324Z","submitted_at":"2026-05-04T23:09:16Z","title":"When Agents Handle Secrets: A Survey of Confidential Computing for Agentic AI","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-05-07T02:12:30.086152Z"},"links":{"cited_paper":"/paper/2509.10540","citing_paper":"/paper/2605.03213"},"observation_digest":"sha256:ad8ab9f5b9c9b2c9453d0c9b79b7790ceccf457c4982104e6c651b44feddea58","observation_id":"275298e0-c703-4a89-8d2f-85421dbae657","resolution":{"observed_at":"2026-05-12T10:46:31.578307Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2509.10540","last_updated":"2025-09-06T04:06:01Z","snapshot_observed_at":"2026-08-15T16:20:14.110461Z","submitted_at":"2025-09-06T04:06:01Z","title":"EchoLeak: The First Real-World Zero-Click Prompt Injection Exploit in a Production LLM System","version":1},"cited_work":{"arxiv_id":"2509.10540","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2509.10540","snapshot_observed_at":"2026-07-05T07:40:47.616845Z","title":"Echoleak: The first real-world zero-click prompt injection exploit in a production llm system","venue":null,"work_id":"b24c4a96-110e-4543-9d5e-2888ebd77959","year":2025},"citing_paper":{"arxiv_id":"2605.03213","last_updated":"2026-05-07T16:46:43Z","snapshot_observed_at":"2026-08-19T04:50:05.742324Z","submitted_at":"2026-05-04T23:09:16Z","title":"When Agents Handle Secrets: A Survey of Confidential Computing for Agentic AI","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-05-08T17:56:09.884837Z"},"links":{"cited_paper":"/paper/2509.10540","citing_paper":"/paper/2605.03213"},"observation_digest":"sha256:73c5034439979f19c95e0b7cf972067086013731530680d67130805c65616e19","observation_id":"b6724033-57f4-47bf-9032-5e5d939d2b4f","resolution":{"observed_at":"2026-05-09T06:55:44.484453Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2509.10540","last_updated":"2025-09-06T04:06:01Z","snapshot_observed_at":"2026-08-15T16:20:14.110461Z","submitted_at":"2025-09-06T04:06:01Z","title":"EchoLeak: The First Real-World Zero-Click Prompt Injection Exploit in a Production LLM System","version":1},"cited_work":{"arxiv_id":"2509.10540","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2509.10540","snapshot_observed_at":"2026-07-05T07:40:47.616845Z","title":"Echoleak: The first real-world zero-click prompt injection exploit in a production llm system","venue":null,"work_id":"b24c4a96-110e-4543-9d5e-2888ebd77959","year":2025},"citing_paper":{"arxiv_id":"2605.11868","last_updated":"2026-05-12T09:48:53Z","snapshot_observed_at":"2026-07-06T23:23:39.723268Z","submitted_at":"2026-05-12T09:48:53Z","title":"IPI-proxy: An Intercepting Proxy for Red-Teaming Web-Browsing AI Agents Against Indirect Prompt Injection","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-05-13T05:46:07.132408Z"},"links":{"cited_paper":"/paper/2509.10540","citing_paper":"/paper/2605.11868"},"observation_digest":"sha256:d826b366810f1c1ed5348dab89898f462949af1d3b7a5876a237223185ed7b0e","observation_id":"70b68a3b-0df5-460f-a703-5543dfa4674d","resolution":{"observed_at":"2026-05-13T05:47:21.306811Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2509.10540","last_updated":"2025-09-06T04:06:01Z","snapshot_observed_at":"2026-08-15T16:20:14.110461Z","submitted_at":"2025-09-06T04:06:01Z","title":"EchoLeak: The First Real-World Zero-Click Prompt Injection Exploit in a Production LLM System","version":1},"cited_work":{"arxiv_id":"2509.10540","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2509.10540","snapshot_observed_at":"2026-07-05T07:40:47.616845Z","title":"Echoleak: The first real-world zero-click prompt injection exploit in a production llm system","venue":null,"work_id":"b24c4a96-110e-4543-9d5e-2888ebd77959","year":2025},"citing_paper":{"arxiv_id":"2605.18133","last_updated":"2026-05-18T09:38:18Z","snapshot_observed_at":"2026-08-13T19:10:03.642585Z","submitted_at":"2026-05-18T09:38:18Z","title":"An Empirical Study of Privacy Leakage Chains via Prompt Injection in Black-Box Chatbot Environments","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-05-20T09:58:05.349147Z"},"links":{"cited_paper":"/paper/2509.10540","citing_paper":"/paper/2605.18133"},"observation_digest":"sha256:c923478cf5ee8ea1b8e5922f2a011058a04f846a20cf20aefb023d16f066ab9e","observation_id":"51f16092-5ff6-490d-bb3f-6e56f252d14c","resolution":{"observed_at":"2026-05-20T09:58:10.909078Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2509.10540","last_updated":"2025-09-06T04:06:01Z","snapshot_observed_at":"2026-08-15T16:20:14.110461Z","submitted_at":"2025-09-06T04:06:01Z","title":"EchoLeak: The First Real-World Zero-Click Prompt Injection Exploit in a Production LLM System","version":1},"cited_work":{"arxiv_id":"2509.10540","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2509.10540","snapshot_observed_at":"2026-07-05T07:40:47.616845Z","title":"Echoleak: The first real-world zero-click prompt injection exploit in a production llm system","venue":null,"work_id":"b24c4a96-110e-4543-9d5e-2888ebd77959","year":2025},"citing_paper":{"arxiv_id":"2605.27396","last_updated":"2026-04-21T15:43:57Z","snapshot_observed_at":"2026-08-15T22:45:27.609602Z","submitted_at":"2026-04-21T15:43:57Z","title":"Agentic Literacy Debt: A Structural Problem the AI Literacy Field Has Not Yet Named","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-07-05T07:32:42.676066Z"},"links":{"cited_paper":"/paper/2509.10540","citing_paper":"/paper/2605.27396"},"observation_digest":"sha256:dcb34cb26a92bd2d031666de6c1e20d72ec8d9ffb39ab9fd4a784a8f6625b921","observation_id":"3f061f6e-ef7f-4ca4-a908-6c4b723ab5d0","resolution":{"observed_at":"2026-07-05T07:40:47.618596Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2509.10540","last_updated":"2025-09-06T04:06:01Z","snapshot_observed_at":"2026-08-15T16:20:14.110461Z","submitted_at":"2025-09-06T04:06:01Z","title":"EchoLeak: The First Real-World Zero-Click Prompt Injection Exploit in a Production LLM System","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2509.10540","snapshot_observed_at":"2026-08-02T05:58:01.260673Z","title":"EchoLeak: The First Real-World Zero- Click Prompt Injection Exploit in a Production LLM System,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.14155","last_updated":"2026-07-14T18:56:38Z","snapshot_observed_at":"2026-08-18T12:33:16.032099Z","submitted_at":"2026-07-14T18:56:38Z","title":"Beyond Object Validation: Relational Conformance in Multi-Artifact Agent Releases","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-02T05:58:01.260673Z"},"links":{"cited_paper":"/paper/2509.10540","citing_paper":"/paper/2607.14155"},"observation_digest":"sha256:ce8513c6713ab3a5c4ef136ea0ae332c0a1da22794fb5861e7a0840f10250c40","observation_id":"9f25e6f0-4063-4064-a76d-0b1a2384dcd0","resolution":{"observed_at":"2026-08-02T05:58:01.260673Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2509.10540","last_updated":"2025-09-06T04:06:01Z","snapshot_observed_at":"2026-08-15T16:20:14.110461Z","submitted_at":"2025-09-06T04:06:01Z","title":"EchoLeak: The First Real-World Zero-Click Prompt Injection Exploit in a Production LLM System","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2509.10540","snapshot_observed_at":"2026-08-01T15:05:19.509390Z","title":"EchoLeak: The first real-world zero-click prompt injection exploit in a production LLM system,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.19433","last_updated":"2026-07-20T22:50:33Z","snapshot_observed_at":"2026-08-14T15:43:17.365888Z","submitted_at":"2026-07-20T22:50:33Z","title":"The Chronos Vulnerability: A Taxonomy of Temporal Persistence and Memory-Based Deception in Agentic AI","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-01T15:05:19.509390Z"},"links":{"cited_paper":"/paper/2509.10540","citing_paper":"/paper/2607.19433"},"observation_digest":"sha256:44779aaa6cf65f61658f1b0471454c30dc9721ee2f9a5eb6373c83dc969e3cfc","observation_id":"3bc24c1e-11f6-4de4-b241-7937b170c3f7","resolution":{"observed_at":"2026-08-01T15:05:19.509390Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2509.10540/citation-record","integrity":"/paper/2509.10540/integrity","json":"/paper/2509.10540/citation-record.json","paper":"/paper/2509.10540"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:24:10.965972Z","title":null,"venue":null,"work_id":"46b6aa2d-5563-443d-a531-3c433ba3e766","year":2025},"citing_paper":{"arxiv_id":"2509.10540","last_updated":"2025-09-06T04:06:01Z","snapshot_observed_at":"2026-08-15T16:20:14.110461Z","submitted_at":"2025-09-06T04:06:01Z","title":"EchoLeak: The First Real-World Zero-Click Prompt Injection Exploit in a Production LLM System","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-15T16:24:10.674806Z"},"links":{"citing_paper":"/paper/2509.10540"},"observation_digest":"sha256:6a70d0cb8a29770fc9c3728119822debfcfb06375d549f7d15dce70ca8c34284","observation_id":"5c885a38-10d9-4a3d-a711-20231b35541c","resolution":{"observed_at":"2026-08-15T16:24:10.969346Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:24:10.956636Z","title":null,"venue":null,"work_id":"7a3e0a49-ed0d-4ae9-aad1-8914d924a649","year":2025},"citing_paper":{"arxiv_id":"2509.10540","last_updated":"2025-09-06T04:06:01Z","snapshot_observed_at":"2026-08-15T16:20:14.110461Z","submitted_at":"2025-09-06T04:06:01Z","title":"EchoLeak: The First Real-World Zero-Click Prompt Injection Exploit in a Production LLM System","version":1},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-15T16:24:10.679163Z"},"links":{"citing_paper":"/paper/2509.10540"},"observation_digest":"sha256:7d37029581bec7d7cd92efb34da467154f214e7c8036b0262633a9b3dd705d79","observation_id":"ce73e253-45e3-4089-9ec1-0bfa73eaf17a","resolution":{"observed_at":"2026-08-15T16:24:10.959957Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:24:10.947127Z","title":null,"venue":null,"work_id":"9f5d5469-24a2-467e-9afc-7704c02509e4","year":2025},"citing_paper":{"arxiv_id":"2509.10540","last_updated":"2025-09-06T04:06:01Z","snapshot_observed_at":"2026-08-15T16:20:14.110461Z","submitted_at":"2025-09-06T04:06:01Z","title":"EchoLeak: The First Real-World Zero-Click Prompt Injection Exploit in a Production LLM System","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-15T16:24:10.682559Z"},"links":{"citing_paper":"/paper/2509.10540"},"observation_digest":"sha256:b5ca57aa90cfda4fb79126497f30541499b474ca81e0fc2f4abe14de11bcfab1","observation_id":"a3976f18-d369-4280-a352-51e960b89c92","resolution":{"observed_at":"2026-08-15T16:24:10.950739Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.10997","last_updated":"2024-03-27T09:16:57Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-12-18T07:47:33Z","title":"Retrieval-Augmented Generation for Large Language Models: A Survey","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.10997","snapshot_observed_at":"2026-08-15T16:24:10.685949Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2509.10540","last_updated":"2025-09-06T04:06:01Z","snapshot_observed_at":"2026-08-15T16:20:14.110461Z","submitted_at":"2025-09-06T04:06:01Z","title":"EchoLeak: The First Real-World Zero-Click Prompt Injection Exploit in a Production LLM System","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-15T16:24:10.685949Z"},"links":{"cited_paper":"/paper/2312.10997","citing_paper":"/paper/2509.10540"},"observation_digest":"sha256:6af1a4b380b698336ac480dfed412d751da8b491c9641375c787914c0d950cb2","observation_id":"0a124ab0-16a6-41f5-8038-26de89b3cbf8","resolution":{"observed_at":"2026-08-15T16:24:10.685949Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2302.12173","last_updated":"2023-05-05T14:26:17Z","snapshot_observed_at":"2026-08-12T14:45:22.117576Z","submitted_at":"2023-02-23T17:14:38Z","title":"Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2302.12173","snapshot_observed_at":"2026-08-15T16:24:10.689830Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2509.10540","last_updated":"2025-09-06T04:06:01Z","snapshot_observed_at":"2026-08-15T16:20:14.110461Z","submitted_at":"2025-09-06T04:06:01Z","title":"EchoLeak: The First Real-World Zero-Click Prompt Injection Exploit in a Production LLM System","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-15T16:24:10.689830Z"},"links":{"cited_paper":"/paper/2302.12173","citing_paper":"/paper/2509.10540"},"observation_digest":"sha256:1326a226f90c0f76a13ecc6878857718691bd7ced5d40c04f324df0a4fa64f66","observation_id":"b1e35195-d99c-41b9-9099-d529b95e34aa","resolution":{"observed_at":"2026-08-15T16:24:10.689830Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:24:10.937466Z","title":null,"venue":null,"work_id":"e9802238-82a4-40be-b94c-24900bfe2083","year":2024},"citing_paper":{"arxiv_id":"2509.10540","last_updated":"2025-09-06T04:06:01Z","snapshot_observed_at":"2026-08-15T16:20:14.110461Z","submitted_at":"2025-09-06T04:06:01Z","title":"EchoLeak: The First Real-World Zero-Click Prompt Injection Exploit in a Production LLM System","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-15T16:24:10.693755Z"},"links":{"citing_paper":"/paper/2509.10540"},"observation_digest":"sha256:229a056b3eed5ed26a442e295abb9cfb065f5685874be512cada0a37f2bd8e73","observation_id":"636ee463-92ab-44cc-ace7-9ba3f456a4cb","resolution":{"observed_at":"2026-08-15T16:24:10.940804Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:24:10.928213Z","title":null,"venue":null,"work_id":"0f8ceb7c-343e-4e6d-8a52-1fce9f9e5a6c","year":2025},"citing_paper":{"arxiv_id":"2509.10540","last_updated":"2025-09-06T04:06:01Z","snapshot_observed_at":"2026-08-15T16:20:14.110461Z","submitted_at":"2025-09-06T04:06:01Z","title":"EchoLeak: The First Real-World Zero-Click Prompt Injection Exploit in a Production LLM System","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-15T16:24:10.697942Z"},"links":{"citing_paper":"/paper/2509.10540"},"observation_digest":"sha256:95d52ce593cf47799133fad3e3c3bb70119c31c32428086b23a30307d978c979","observation_id":"426934eb-129c-43b4-be4d-a7d3a61eb55d","resolution":{"observed_at":"2026-08-15T16:24:10.931812Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.02926","last_updated":"2025-02-27T02:22:07Z","snapshot_observed_at":"2026-08-16T15:02:52.363303Z","submitted_at":"2023-09-06T11:39:37Z","title":"Demystifying RCE Vulnerabilities in LLM-Integrated Apps","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.02926","snapshot_observed_at":"2026-08-15T16:24:10.701391Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2509.10540","last_updated":"2025-09-06T04:06:01Z","snapshot_observed_at":"2026-08-15T16:20:14.110461Z","submitted_at":"2025-09-06T04:06:01Z","title":"EchoLeak: The First Real-World Zero-Click Prompt Injection Exploit in a Production LLM System","version":1},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-15T16:24:10.701391Z"},"links":{"cited_paper":"/paper/2309.02926","citing_paper":"/paper/2509.10540"},"observation_digest":"sha256:21ed22f2545454daae5fda6c7561550350845e6e34e08feee163beca799f3fc1","observation_id":"84ab690a-6649-494d-b9dc-989f560e1ed6","resolution":{"observed_at":"2026-08-15T16:24:10.701391Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:24:10.918771Z","title":null,"venue":null,"work_id":"f301e3e3-9350-405c-8b5f-ed76ebd92bf4","year":2024},"citing_paper":{"arxiv_id":"2509.10540","last_updated":"2025-09-06T04:06:01Z","snapshot_observed_at":"2026-08-15T16:20:14.110461Z","submitted_at":"2025-09-06T04:06:01Z","title":"EchoLeak: The First Real-World Zero-Click Prompt Injection Exploit in a Production LLM System","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-15T16:24:10.705526Z"},"links":{"citing_paper":"/paper/2509.10540"},"observation_digest":"sha256:9860df0d483d84c6ebea1638511e075b168a8fb4877f83a372a68595e9a2e9c1","observation_id":"7e326775-99c0-4c53-9662-7f0d3fa53d0e","resolution":{"observed_at":"2026-08-15T16:24:10.922240Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:24:10.908536Z","title":null,"venue":null,"work_id":"be1042a9-5f1b-4d70-a9fe-427822fbf431","year":2025},"citing_paper":{"arxiv_id":"2509.10540","last_updated":"2025-09-06T04:06:01Z","snapshot_observed_at":"2026-08-15T16:20:14.110461Z","submitted_at":"2025-09-06T04:06:01Z","title":"EchoLeak: The First Real-World Zero-Click Prompt Injection Exploit in a Production LLM System","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-15T16:24:10.708581Z"},"links":{"citing_paper":"/paper/2509.10540"},"observation_digest":"sha256:a1406ce803d3467ea00172240456f5ca20ccaeb89411cc17902a545d393ac55d","observation_id":"c4a669ba-c2c2-42f9-9ffd-7575d240f7ec","resolution":{"observed_at":"2026-08-15T16:24:10.912080Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:24:10.897950Z","title":null,"venue":null,"work_id":"7398955f-9601-4dbc-a754-56ed07d089e1","year":2024},"citing_paper":{"arxiv_id":"2509.10540","last_updated":"2025-09-06T04:06:01Z","snapshot_observed_at":"2026-08-15T16:20:14.110461Z","submitted_at":"2025-09-06T04:06:01Z","title":"EchoLeak: The First Real-World Zero-Click Prompt Injection Exploit in a Production LLM System","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-15T16:24:10.711748Z"},"links":{"citing_paper":"/paper/2509.10540"},"observation_digest":"sha256:9007aa0ea54123a1cdf8ca0220f6c73a3f72fcabdc88841d33aacaa7e4aee143","observation_id":"57eb8e35-500d-44e2-95d5-99c66cdbc561","resolution":{"observed_at":"2026-08-15T16:24:10.901212Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:24:10.888632Z","title":null,"venue":null,"work_id":"ee433746-cd91-4fbb-a9e9-b2608266b6b3","year":2025},"citing_paper":{"arxiv_id":"2509.10540","last_updated":"2025-09-06T04:06:01Z","snapshot_observed_at":"2026-08-15T16:20:14.110461Z","submitted_at":"2025-09-06T04:06:01Z","title":"EchoLeak: The First Real-World Zero-Click Prompt Injection Exploit in a Production LLM System","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-15T16:24:10.714937Z"},"links":{"citing_paper":"/paper/2509.10540"},"observation_digest":"sha256:3936d098e82418362c9ec1ac513dfa7b9acb1e2337c6fda797975796ba5be17a","observation_id":"9aa310ea-4e39-4d33-97d1-3711fecea852","resolution":{"observed_at":"2026-08-15T16:24:10.891863Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:24:10.879305Z","title":null,"venue":null,"work_id":"f8cf68af-718c-4747-a24e-1e5aaa9a1811","year":2025},"citing_paper":{"arxiv_id":"2509.10540","last_updated":"2025-09-06T04:06:01Z","snapshot_observed_at":"2026-08-15T16:20:14.110461Z","submitted_at":"2025-09-06T04:06:01Z","title":"EchoLeak: The First Real-World Zero-Click Prompt Injection Exploit in a Production LLM System","version":1},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-15T16:24:10.718881Z"},"links":{"citing_paper":"/paper/2509.10540"},"observation_digest":"sha256:8c39a50c71ebf8b2d99bf50f88e52fde7736a37e342158259a1773a560b5c731","observation_id":"63f04b8e-d8ef-4b1c-83bd-750839415f2b","resolution":{"observed_at":"2026-08-15T16:24:10.882533Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:24:10.869209Z","title":null,"venue":null,"work_id":"6092872e-130b-410d-b4ed-4eac8ccb22aa","year":2025},"citing_paper":{"arxiv_id":"2509.10540","last_updated":"2025-09-06T04:06:01Z","snapshot_observed_at":"2026-08-15T16:20:14.110461Z","submitted_at":"2025-09-06T04:06:01Z","title":"EchoLeak: The First Real-World Zero-Click Prompt Injection Exploit in a Production LLM System","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-15T16:24:10.722288Z"},"links":{"citing_paper":"/paper/2509.10540"},"observation_digest":"sha256:5c493fc962f7676bc936791b9dc2e3848810126fb0aa912646f79045129ed0ab","observation_id":"f98a4acd-1243-4f95-912a-12fd5374ed2c","resolution":{"observed_at":"2026-08-15T16:24:10.872773Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:24:10.859067Z","title":null,"venue":null,"work_id":"cee1832b-6c5a-40a2-90de-b204cb38b584","year":2025},"citing_paper":{"arxiv_id":"2509.10540","last_updated":"2025-09-06T04:06:01Z","snapshot_observed_at":"2026-08-15T16:20:14.110461Z","submitted_at":"2025-09-06T04:06:01Z","title":"EchoLeak: The First Real-World Zero-Click Prompt Injection Exploit in a Production LLM System","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-15T16:24:10.725173Z"},"links":{"citing_paper":"/paper/2509.10540"},"observation_digest":"sha256:c7efe9c5b044043a078480829b2d9210a72b0bcd1617e529dd743a1e9e15d4a2","observation_id":"91eb3464-cafc-473d-8e83-1a631401644b","resolution":{"observed_at":"2026-08-15T16:24:10.862750Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2211.09527","last_updated":"2022-11-17T13:43:20Z","snapshot_observed_at":"2026-08-18T00:11:55.170013Z","submitted_at":"2022-11-17T13:43:20Z","title":"Ignore Previous Prompt: Attack Techniques For Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2211.09527","snapshot_observed_at":"2026-08-15T16:24:10.728527Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2509.10540","last_updated":"2025-09-06T04:06:01Z","snapshot_observed_at":"2026-08-15T16:20:14.110461Z","submitted_at":"2025-09-06T04:06:01Z","title":"EchoLeak: The First Real-World Zero-Click Prompt Injection Exploit in a Production LLM System","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-15T16:24:10.728527Z"},"links":{"cited_paper":"/paper/2211.09527","citing_paper":"/paper/2509.10540"},"observation_digest":"sha256:134e9584f2bcc59d4c1d63a5a2055fe60604fd88b7a0a1cec4bd075217cfdce5","observation_id":"2d72034b-faee-467b-aee6-770efe41f2e8","resolution":{"observed_at":"2026-08-15T16:24:10.728527Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:24:10.850039Z","title":null,"venue":null,"work_id":"876b7144-b619-4dd6-abaa-ed7fa542d138","year":2025},"citing_paper":{"arxiv_id":"2509.10540","last_updated":"2025-09-06T04:06:01Z","snapshot_observed_at":"2026-08-15T16:20:14.110461Z","submitted_at":"2025-09-06T04:06:01Z","title":"EchoLeak: The First Real-World Zero-Click Prompt Injection Exploit in a Production LLM System","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-15T16:24:10.731986Z"},"links":{"citing_paper":"/paper/2509.10540"},"observation_digest":"sha256:b731a5adbc1e5799e26c03a7738684ace820cf203ca88e8e144a944f4b63e7f1","observation_id":"3b3867d6-5673-42e7-a83e-a554e5cc2255","resolution":{"observed_at":"2026-08-15T16:24:10.853011Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:24:10.840543Z","title":null,"venue":null,"work_id":"248a5246-2d9d-486b-81b4-cf0ddc159a7b","year":2024},"citing_paper":{"arxiv_id":"2509.10540","last_updated":"2025-09-06T04:06:01Z","snapshot_observed_at":"2026-08-15T16:20:14.110461Z","submitted_at":"2025-09-06T04:06:01Z","title":"EchoLeak: The First Real-World Zero-Click Prompt Injection Exploit in a Production LLM System","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-15T16:24:10.734986Z"},"links":{"citing_paper":"/paper/2509.10540"},"observation_digest":"sha256:1c91ebaf6dd66d8d0a575706bb1a69d8458e637bb689180a1c446dac8c6fa825","observation_id":"f297e76c-0bb4-4dbf-935a-5f8c5a23181b","resolution":{"observed_at":"2026-08-15T16:24:10.843913Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:24:10.830528Z","title":null,"venue":null,"work_id":"acce4f2f-a616-42d7-9d22-3bf2bae0ace5","year":2025},"citing_paper":{"arxiv_id":"2509.10540","last_updated":"2025-09-06T04:06:01Z","snapshot_observed_at":"2026-08-15T16:20:14.110461Z","submitted_at":"2025-09-06T04:06:01Z","title":"EchoLeak: The First Real-World Zero-Click Prompt Injection Exploit in a Production LLM System","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-15T16:24:10.738074Z"},"links":{"citing_paper":"/paper/2509.10540"},"observation_digest":"sha256:36672ccaa5977f9fe9375c953b6970a9085f7d622d45edc7736d30bc652c6449","observation_id":"32fd2328-0a4d-4623-a6e1-c50a0b215d05","resolution":{"observed_at":"2026-08-15T16:24:10.833934Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:24:10.819599Z","title":null,"venue":null,"work_id":"3929b1f8-dcb7-4582-ba91-8e720ff7999c","year":2023},"citing_paper":{"arxiv_id":"2509.10540","last_updated":"2025-09-06T04:06:01Z","snapshot_observed_at":"2026-08-15T16:20:14.110461Z","submitted_at":"2025-09-06T04:06:01Z","title":"EchoLeak: The First Real-World Zero-Click Prompt Injection Exploit in a Production LLM System","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-15T16:24:10.741126Z"},"links":{"citing_paper":"/paper/2509.10540"},"observation_digest":"sha256:48d16c780c282a7ea986fa2b292832e1ef91af99fffecf96c1602668dcfee4e2","observation_id":"2ea223b8-c3c4-4bc1-a71a-64c96f87a859","resolution":{"observed_at":"2026-08-15T16:24:10.823673Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:24:10.744447Z","title":", \" * write output.state after.block = add.period write newline","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.10540","last_updated":"2025-09-06T04:06:01Z","snapshot_observed_at":"2026-08-15T16:20:14.110461Z","submitted_at":"2025-09-06T04:06:01Z","title":"EchoLeak: The First Real-World Zero-Click Prompt Injection Exploit in a Production LLM System","version":1},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-15T16:24:10.744447Z"},"links":{"citing_paper":"/paper/2509.10540"},"observation_digest":"sha256:c98093d607d093b5fd622ce03c8de5b6234233dcebe0515c1708c2153aa36b73","observation_id":"393b7542-0c94-45e4-9fa1-5f168877724c","resolution":{"observed_at":"2026-08-15T16:24:10.744447Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:24:10.748194Z","title":"write newline","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.10540","last_updated":"2025-09-06T04:06:01Z","snapshot_observed_at":"2026-08-15T16:20:14.110461Z","submitted_at":"2025-09-06T04:06:01Z","title":"EchoLeak: The First Real-World Zero-Click Prompt Injection Exploit in a Production LLM System","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-15T16:24:10.748194Z"},"links":{"citing_paper":"/paper/2509.10540"},"observation_digest":"sha256:6378d3d7335817bb67b37148d8e33254ca6aef817465efbe7503189f33b9da20","observation_id":"ef77bbcd-4b92-4564-8dd7-0ca58eba198f","resolution":{"observed_at":"2026-08-15T16:24:10.748194Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2509.10540","last_updated":"2025-09-06T04:06:01Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-15T16:20:14.110461Z","submitted_at":"2025-09-06T04:06:01Z","title":"EchoLeak: The First Real-World Zero-Click Prompt Injection Exploit in a Production LLM System"},"reference_resolution":{"displayed":22,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":22,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":22},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"thesis":"As of 21 August 2026, this Paper Citation Record lists 22 of 22 outbound references and 7 inbound Pith citation observations for arXiv:2509.10540."}