{"as_of":"2026-08-23T17:48:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:1d2275af49b02a5b8d207bb298ae7ea9861ee2d537344540dd37cbb7d2a23b57","coverage":[{"denominator":6,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":6,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-02T13:04:42.722748Z","state":"measured"},{"denominator":6,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":6,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-23T06:30:58.430688+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2605.27784/citation-record","integrity":"/paper/2605.27784/integrity","json":"/paper/2605.27784/citation-record.json","paper":"/paper/2605.27784"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:04:42.530019Z","title":"Zhihan Zhang, Shiyang Li, Zixuan Zhang, Xin Liu, Haoming Jiang, Xianfeng Tang, Yifan Gao, Zheng Li, Haodong Wang, Zhaoxuan Tan, and 1 others","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2605.27784","last_updated":"2026-07-26T23:03:56Z","snapshot_observed_at":"2026-08-14T16:23:56.164754Z","submitted_at":"2026-05-27T00:09:45Z","title":"WIRE: Profiling Witnessed Within-Policy Instruction Collisions in LLM Agents","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-02T13:04:42.530019Z"},"links":{"citing_paper":"/paper/2605.27784"},"observation_digest":"sha256:4205b1da8a88f2d9c3ee60f3fd26acbfd5da806da1fcd15cccdbfb15049b7ab2","observation_id":"0aff8ded-da35-4267-be99-7466b4d9adde","resolution":{"observed_at":"2026-08-02T13:04:42.530019Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.13208","last_updated":"2024-04-19T22:55:23Z","snapshot_observed_at":"2026-08-11T23:45:02.178667Z","submitted_at":"2024-04-19T22:55:23Z","title":"The Instruction Hierarchy: Training LLMs to Prioritize Privileged Instructions","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.13208","snapshot_observed_at":"2026-08-02T13:04:42.435862Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2605.27784","last_updated":"2026-07-26T23:03:56Z","snapshot_observed_at":"2026-08-14T16:23:56.164754Z","submitted_at":"2026-05-27T00:09:45Z","title":"WIRE: Profiling Witnessed Within-Policy Instruction Collisions in LLM Agents","version":2},"reference_index":2015,"source":"pdf_text","source_observed_at":"2026-08-02T13:04:42.435862Z"},"links":{"cited_paper":"/paper/2404.13208","citing_paper":"/paper/2605.27784"},"observation_digest":"sha256:d0a312638aaa4fd79422fb8382629ce940e0b1584986b4dc7d0650ebb1472d56","observation_id":"70c53530-511e-4f52-a994-886e069df599","resolution":{"observed_at":"2026-08-02T13:04:42.435862Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:04:42.247938Z","title":"Transactions of the Association for Computational Linguistics, 8:556–571","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2605.27784","last_updated":"2026-07-26T23:03:56Z","snapshot_observed_at":"2026-08-14T16:23:56.164754Z","submitted_at":"2026-05-27T00:09:45Z","title":"WIRE: Profiling Witnessed Within-Policy Instruction Collisions in LLM Agents","version":2},"reference_index":2020,"source":"pdf_text","source_observed_at":"2026-08-02T13:04:42.247938Z"},"links":{"citing_paper":"/paper/2605.27784"},"observation_digest":"sha256:12f3a13b89eb5643bf68fdd3196e3edcb6c4bd1d8cb48d43ddd206b151ffe61f","observation_id":"197ed4da-3147-4c9d-8659-e5ead9f4888b","resolution":{"observed_at":"2026-08-02T13:04:42.247938Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2302.12173","last_updated":"2023-05-05T14:26:17Z","snapshot_observed_at":"2026-08-12T14:45:22.117576Z","submitted_at":"2023-02-23T17:14:38Z","title":"Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2302.12173","snapshot_observed_at":"2026-08-02T13:04:42.367824Z","title":"Xingwei He, Qianru Zhang, Pengfei Chen, Guanhua Chen, Linlin Yu, Yuan Yuan, and Siu-Ming Yiu","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2605.27784","last_updated":"2026-07-26T23:03:56Z","snapshot_observed_at":"2026-08-14T16:23:56.164754Z","submitted_at":"2026-05-27T00:09:45Z","title":"WIRE: Profiling Witnessed Within-Policy Instruction Collisions in LLM Agents","version":2},"reference_index":2023,"source":"pdf_text","source_observed_at":"2026-08-02T13:04:42.367824Z"},"links":{"cited_paper":"/paper/2302.12173","citing_paper":"/paper/2605.27784"},"observation_digest":"sha256:6ebe4c736a173e21ba423458643dffe667c92710f0d223eafdc61b70f229102d","observation_id":"7e6e9483-daa3-4e99-ac74-158f51cebc15","resolution":{"observed_at":"2026-08-02T13:04:42.367824Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:04:42.295089Z","title":"Kai Greshake, Sahar Abdelnabi, Shailesh Mishra, Christoph Endres, Thorsten Holz, and Mario Fritz","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2605.27784","last_updated":"2026-07-26T23:03:56Z","snapshot_observed_at":"2026-08-14T16:23:56.164754Z","submitted_at":"2026-05-27T00:09:45Z","title":"WIRE: Profiling Witnessed Within-Policy Instruction Collisions in LLM Agents","version":2},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-02T13:04:42.295089Z"},"links":{"citing_paper":"/paper/2605.27784"},"observation_digest":"sha256:bbc128f1afaa3083a45cdd1711cdb015a541884a631a1350e8a90a9780343478","observation_id":"4d57905d-bb89-4e11-94eb-c4db8446cf7b","resolution":{"observed_at":"2026-08-02T13:04:42.295089Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.07911","last_updated":"2023-11-14T05:13:55Z","snapshot_observed_at":"2026-07-06T16:47:08.877195Z","submitted_at":"2023-11-14T05:13:55Z","title":"Instruction-Following Evaluation for Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.07911","snapshot_observed_at":"2026-08-02T13:04:42.722748Z","title":"how to fetch data from api","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2605.27784","last_updated":"2026-07-26T23:03:56Z","snapshot_observed_at":"2026-08-14T16:23:56.164754Z","submitted_at":"2026-05-27T00:09:45Z","title":"WIRE: Profiling Witnessed Within-Policy Instruction Collisions in LLM Agents","version":2},"reference_index":2025,"source":"pdf_text","source_observed_at":"2026-08-02T13:04:42.722748Z"},"links":{"cited_paper":"/paper/2311.07911","citing_paper":"/paper/2605.27784"},"observation_digest":"sha256:95a8623a2176f9cc8bf8c9c66bed78a9737558333589fff58972100aab1fb967","observation_id":"36444215-4aaf-432f-9006-dd69db166ff6","resolution":{"observed_at":"2026-08-02T13:04:42.722748Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2605.27784","last_updated":"2026-07-26T23:03:56Z","latest_version":2,"primary_category":"cs.AI","snapshot_observed_at":"2026-08-14T16:23:56.164754Z","submitted_at":"2026-05-27T00:09:45Z","title":"WIRE: Profiling Witnessed Within-Policy Instruction Collisions in LLM Agents"},"reference_resolution":{"displayed":6,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":6,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":6},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"thesis":"As of 23 August 2026, this Paper Citation Record lists 6 of 6 outbound references and 0 inbound Pith citation observations for arXiv:2605.27784."}