{"as_of":"2026-07-25T03:47:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:14b920df6409b9f7532f7979152f18975bbe405b3894845a7125baa255ab8412","coverage":[{"denominator":41,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":41,"source":"paper_references, paper_reference_links","source_observed_at":"2026-06-29T11:55:34.911818Z","state":"measured"},{"denominator":41,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":41,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-07-24T06:31:00.690269+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2605.28017/citation-record","integrity":"/paper/2605.28017/integrity","json":"/paper/2605.28017/citation-record.json","paper":"/paper/2605.28017"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T11:55:34.911818Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2605.28017","last_updated":"2026-05-28T01:52:56Z","snapshot_observed_at":"2026-07-06T23:37:40.695655Z","submitted_at":"2026-05-27T06:16:11Z","title":"Can It Reach the Generator? Investigating the Survival of Prompt-Injection Attacks in Realistic RAG Settings","version":2},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-06-29T11:55:34.911818Z"},"links":{"citing_paper":"/paper/2605.28017"},"observation_digest":"sha256:4b3c301254dd926e176887abce18a1e636637c433ecc62614ebb659799896a71","observation_id":"d02cec9b-d498-495d-a7a6-9d69a0027bc4","resolution":{"observed_at":"2026-06-29T11:55:34.911818Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T11:55:34.911818Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2605.28017","last_updated":"2026-05-28T01:52:56Z","snapshot_observed_at":"2026-07-06T23:37:40.695655Z","submitted_at":"2026-05-27T06:16:11Z","title":"Can It Reach the Generator? Investigating the Survival of Prompt-Injection Attacks in Realistic RAG Settings","version":2},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-06-29T11:55:34.911818Z"},"links":{"citing_paper":"/paper/2605.28017"},"observation_digest":"sha256:b1c00eb8af5b0b2a01de0198c786b94dc8aeaa08e2009bce642e513a8d1c5734","observation_id":"05cb2e45-8d44-4bcd-80c9-23eb4a1357ad","resolution":{"observed_at":"2026-06-29T11:55:34.911818Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T11:55:34.911818Z","title":null,"venue":null,"work_id":null,"year":1999},"citing_paper":{"arxiv_id":"2605.28017","last_updated":"2026-05-28T01:52:56Z","snapshot_observed_at":"2026-07-06T23:37:40.695655Z","submitted_at":"2026-05-27T06:16:11Z","title":"Can It Reach the Generator? Investigating the Survival of Prompt-Injection Attacks in Realistic RAG Settings","version":2},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-06-29T11:55:34.911818Z"},"links":{"citing_paper":"/paper/2605.28017"},"observation_digest":"sha256:ebef490a4bf7fe021ccad180634c930becb4bcb9cac96fb5cf236d17481e709a","observation_id":"761efe73-c8ad-4819-a089-c312158ca1f9","resolution":{"observed_at":"2026-06-29T11:55:34.911818Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2509.08919","last_updated":"2025-09-10T18:29:18Z","snapshot_observed_at":"2026-07-06T22:28:28.274132Z","submitted_at":"2025-09-10T18:29:18Z","title":"Generative Engine Optimization: How to Dominate AI Search","version":1},"cited_work":{"arxiv_id":"2509.08919","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2509.08919","snapshot_observed_at":"2026-07-04T21:10:08.608871Z","title":"Generative engine optimization: How to dominate ai search","venue":null,"work_id":"1441da72-dacd-4b64-ba45-723be861f345","year":2025},"citing_paper":{"arxiv_id":"2605.28017","last_updated":"2026-05-28T01:52:56Z","snapshot_observed_at":"2026-07-06T23:37:40.695655Z","submitted_at":"2026-05-27T06:16:11Z","title":"Can It Reach the Generator? Investigating the Survival of Prompt-Injection Attacks in Realistic RAG Settings","version":2},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-06-29T11:55:34.911818Z"},"links":{"cited_paper":"/paper/2509.08919","citing_paper":"/paper/2605.28017"},"observation_digest":"sha256:c3be6bcbf57f6816624c2123baf8ace48d45b2fc60e7c5610911b2f152a86f41","observation_id":"4042b386-ed6e-46e8-9c8f-058ea292a230","resolution":{"observed_at":"2026-06-29T12:03:24.300241Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-24T06:31:00.690269+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-24T06:31:00.690269+00:00","source":"crossref"},{"observed_at":"2026-07-24T06:30:55.483554+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T11:55:34.911818Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2605.28017","last_updated":"2026-05-28T01:52:56Z","snapshot_observed_at":"2026-07-06T23:37:40.695655Z","submitted_at":"2026-05-27T06:16:11Z","title":"Can It Reach the Generator? Investigating the Survival of Prompt-Injection Attacks in Realistic RAG Settings","version":2},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-06-29T11:55:34.911818Z"},"links":{"citing_paper":"/paper/2605.28017"},"observation_digest":"sha256:bccf821a1d31ec9abcf674cc89cb21c0933d4ac35acb8dd7515859c16f5c74e9","observation_id":"9a80bc97-4b63-41f8-add7-40cd26089176","resolution":{"observed_at":"2026-06-29T11:55:34.911818Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.10997","last_updated":"2024-03-27T09:16:57Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-12-18T07:47:33Z","title":"Retrieval-Augmented Generation for Large Language Models: A Survey","version":5},"cited_work":{"arxiv_id":"2312.10997","doi":"10.1186/1476-072x-8-72","metadata_source":"pith","pith_arxiv_id":"2312.10997","snapshot_observed_at":"2026-07-11T11:50:26.030339Z","title":"Retrieval-Augmented Generation for Large Language Models: A Survey","venue":"cs.CL","work_id":"b80d2790-6cd9-4c87-b3c4-de404f99a80e","year":2023},"citing_paper":{"arxiv_id":"2605.28017","last_updated":"2026-05-28T01:52:56Z","snapshot_observed_at":"2026-07-06T23:37:40.695655Z","submitted_at":"2026-05-27T06:16:11Z","title":"Can It Reach the Generator? Investigating the Survival of Prompt-Injection Attacks in Realistic RAG Settings","version":2},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-06-29T11:55:34.911818Z"},"links":{"cited_paper":"/paper/2312.10997","citing_paper":"/paper/2605.28017"},"observation_digest":"sha256:bb410153f82fddb90da6c4b269d00fce07e239decd70f0ed7a6169603d088de3","observation_id":"40b91ad3-a172-43d4-a4e5-2447f4a4a6d3","resolution":{"observed_at":"2026-06-29T12:03:24.287521Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-24T06:31:00.690269+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-24T06:31:00.690269+00:00","source":"crossref"},{"observed_at":"2026-07-24T06:30:55.483554+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T11:55:34.911818Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2605.28017","last_updated":"2026-05-28T01:52:56Z","snapshot_observed_at":"2026-07-06T23:37:40.695655Z","submitted_at":"2026-05-27T06:16:11Z","title":"Can It Reach the Generator? Investigating the Survival of Prompt-Injection Attacks in Realistic RAG Settings","version":2},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-06-29T11:55:34.911818Z"},"links":{"citing_paper":"/paper/2605.28017"},"observation_digest":"sha256:c78ebcf3bb0f17b2a383e66af3aa9411e9b4f2d755237f6fded8e9ba16b4af4c","observation_id":"e13d43d3-be69-4479-b12f-1f04c851c266","resolution":{"observed_at":"2026-06-29T11:55:34.911818Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T11:55:34.911818Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2605.28017","last_updated":"2026-05-28T01:52:56Z","snapshot_observed_at":"2026-07-06T23:37:40.695655Z","submitted_at":"2026-05-27T06:16:11Z","title":"Can It Reach the Generator? Investigating the Survival of Prompt-Injection Attacks in Realistic RAG Settings","version":2},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-06-29T11:55:34.911818Z"},"links":{"citing_paper":"/paper/2605.28017"},"observation_digest":"sha256:709e2cf418fd36b135578cd17ac90c387052b702e865865487c2668f2f06bcf5","observation_id":"d4ca611b-92f8-43d6-ad55-3b6ad973c6e4","resolution":{"observed_at":"2026-06-29T11:55:34.911818Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2602.03608","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T12:03:24.300141Z","title":"Core: Corpus-based ranking exploitation via llm manipulation","venue":null,"work_id":"34dab831-43da-462a-aaeb-883bf59c48dd","year":2026},"citing_paper":{"arxiv_id":"2605.28017","last_updated":"2026-05-28T01:52:56Z","snapshot_observed_at":"2026-07-06T23:37:40.695655Z","submitted_at":"2026-05-27T06:16:11Z","title":"Can It Reach the Generator? Investigating the Survival of Prompt-Injection Attacks in Realistic RAG Settings","version":2},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-06-29T11:55:34.911818Z"},"links":{"citing_paper":"/paper/2605.28017"},"observation_digest":"sha256:18c27a2e34143f373d960e1e854524e76168ab6884c50114b104d8d057350333","observation_id":"abf6ae0b-e5c0-442a-8247-fb0894ea95a1","resolution":{"observed_at":"2026-06-29T12:03:24.301690Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-24T06:31:00.690269+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-24T06:31:00.690269+00:00","source":"crossref"},{"observed_at":"2026-07-24T06:30:55.483554+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T11:55:34.911818Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2605.28017","last_updated":"2026-05-28T01:52:56Z","snapshot_observed_at":"2026-07-06T23:37:40.695655Z","submitted_at":"2026-05-27T06:16:11Z","title":"Can It Reach the Generator? Investigating the Survival of Prompt-Injection Attacks in Realistic RAG Settings","version":2},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-06-29T11:55:34.911818Z"},"links":{"citing_paper":"/paper/2605.28017"},"observation_digest":"sha256:d23be04bc7ea480713ada14f73906bf34407e5c77776e3938be60bf16f766c96","observation_id":"86590da0-2c98-44cd-a532-be5ca5062dec","resolution":{"observed_at":"2026-06-29T11:55:34.911818Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.07981","last_updated":"2024-09-02T21:29:04Z","snapshot_observed_at":"2026-07-06T17:59:00.124173Z","submitted_at":"2024-04-11T17:57:32Z","title":"Manipulating Large Language Models to Increase Product Visibility","version":2},"cited_work":{"arxiv_id":"2404.07981","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2404.07981","snapshot_observed_at":"2026-07-03T20:08:55.799226Z","title":"arXiv preprint arXiv:2404.07981 , year=","venue":null,"work_id":"663492b2-4c9c-4eca-b78a-2a119e869d2f","year":2024},"citing_paper":{"arxiv_id":"2605.28017","last_updated":"2026-05-28T01:52:56Z","snapshot_observed_at":"2026-07-06T23:37:40.695655Z","submitted_at":"2026-05-27T06:16:11Z","title":"Can It Reach the Generator? Investigating the Survival of Prompt-Injection Attacks in Realistic RAG Settings","version":2},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-06-29T11:55:34.911818Z"},"links":{"cited_paper":"/paper/2404.07981","citing_paper":"/paper/2605.28017"},"observation_digest":"sha256:86cbf132abf473845dfee91137c7655796f6e670813636dad449c9f872e3bfe0","observation_id":"dff4f8a8-d718-45e4-a278-d34b701e26ff","resolution":{"observed_at":"2026-06-29T12:03:24.304365Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-24T06:31:00.690269+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-24T06:31:00.690269+00:00","source":"crossref"},{"observed_at":"2026-07-24T06:30:55.483554+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T11:55:34.911818Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2605.28017","last_updated":"2026-05-28T01:52:56Z","snapshot_observed_at":"2026-07-06T23:37:40.695655Z","submitted_at":"2026-05-27T06:16:11Z","title":"Can It Reach the Generator? Investigating the Survival of Prompt-Injection Attacks in Realistic RAG Settings","version":2},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-06-29T11:55:34.911818Z"},"links":{"citing_paper":"/paper/2605.28017"},"observation_digest":"sha256:f27e2fd3aebfa3cf0a61a47ef1cc7c8663157f3ec0fecba0e2dfe7ffbae2726f","observation_id":"06182ce5-3030-4de7-826a-1fb075021bfa","resolution":{"observed_at":"2026-06-29T11:55:34.911818Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T11:55:34.911818Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2605.28017","last_updated":"2026-05-28T01:52:56Z","snapshot_observed_at":"2026-07-06T23:37:40.695655Z","submitted_at":"2026-05-27T06:16:11Z","title":"Can It Reach the Generator? Investigating the Survival of Prompt-Injection Attacks in Realistic RAG Settings","version":2},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-06-29T11:55:34.911818Z"},"links":{"citing_paper":"/paper/2605.28017"},"observation_digest":"sha256:fa55c49136916c0f19c54e2d4f5a096addc5c2b4666f538dff6404db5f68d1ad","observation_id":"1d5edc93-ece3-40b4-b616-654b0d04a6de","resolution":{"observed_at":"2026-06-29T11:55:34.911818Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.02156","last_updated":"2023-05-03T14:45:34Z","snapshot_observed_at":"2026-07-06T15:22:47.702437Z","submitted_at":"2023-05-03T14:45:34Z","title":"Zero-Shot Listwise Document Reranking with a Large Language Model","version":1},"cited_work":{"arxiv_id":"2305.02156","doi":"10.48550/arxiv.2305.02156","metadata_source":"arxiv_reference","pith_arxiv_id":"2305.02156","snapshot_observed_at":"2026-07-10T06:15:00.866473Z","title":"Yao Meng, Chenyan Xiong, Zhenghao Liu, Zhiyuan Liu, and Jiawei Han","venue":null,"work_id":"d00110ef-6ed4-4d60-93d9-2108f45f7e09","year":2023},"citing_paper":{"arxiv_id":"2605.28017","last_updated":"2026-05-28T01:52:56Z","snapshot_observed_at":"2026-07-06T23:37:40.695655Z","submitted_at":"2026-05-27T06:16:11Z","title":"Can It Reach the Generator? Investigating the Survival of Prompt-Injection Attacks in Realistic RAG Settings","version":2},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-06-29T11:55:34.911818Z"},"links":{"cited_paper":"/paper/2305.02156","citing_paper":"/paper/2605.28017"},"observation_digest":"sha256:23f635ddba24c8c55b875161db81e7e9fb497b7e1f9165a5ba2e0ad7a226dc7a","observation_id":"df231db6-bd64-4d87-a2c0-4ee43c775319","resolution":{"observed_at":"2026-06-29T12:03:24.305373Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-24T06:31:00.690269+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-24T06:31:00.690269+00:00","source":"crossref"},{"observed_at":"2026-07-24T06:30:55.483554+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T11:55:34.911818Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2605.28017","last_updated":"2026-05-28T01:52:56Z","snapshot_observed_at":"2026-07-06T23:37:40.695655Z","submitted_at":"2026-05-27T06:16:11Z","title":"Can It Reach the Generator? Investigating the Survival of Prompt-Injection Attacks in Realistic RAG Settings","version":2},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-06-29T11:55:34.911818Z"},"links":{"citing_paper":"/paper/2605.28017"},"observation_digest":"sha256:ca73d3fe518496717f364fe8b7aec4dd91b1e628c4aef60878d7fa198c2d56a4","observation_id":"5987901b-bfbd-4a86-b26d-9fac40ef93f8","resolution":{"observed_at":"2026-06-29T11:55:34.911818Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T11:55:34.911818Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2605.28017","last_updated":"2026-05-28T01:52:56Z","snapshot_observed_at":"2026-07-06T23:37:40.695655Z","submitted_at":"2026-05-27T06:16:11Z","title":"Can It Reach the Generator? Investigating the Survival of Prompt-Injection Attacks in Realistic RAG Settings","version":2},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-06-29T11:55:34.911818Z"},"links":{"citing_paper":"/paper/2605.28017"},"observation_digest":"sha256:6100c87034ee58a2e37c634e9f479688facdf8017a75dbd662c62d697d970a7e","observation_id":"3fe6194f-24e8-40b5-9b7e-930cb67874e2","resolution":{"observed_at":"2026-06-29T11:55:34.911818Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T11:55:34.911818Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2605.28017","last_updated":"2026-05-28T01:52:56Z","snapshot_observed_at":"2026-07-06T23:37:40.695655Z","submitted_at":"2026-05-27T06:16:11Z","title":"Can It Reach the Generator? Investigating the Survival of Prompt-Injection Attacks in Realistic RAG Settings","version":2},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-06-29T11:55:34.911818Z"},"links":{"citing_paper":"/paper/2605.28017"},"observation_digest":"sha256:dc420301d595527e4435c65c0c292f36160c2ac8626af89c5bf13ceb1ef173d4","observation_id":"39923be2-c904-4ff9-be2b-74e7da913440","resolution":{"observed_at":"2026-06-29T11:55:34.911818Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T11:55:34.911818Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2605.28017","last_updated":"2026-05-28T01:52:56Z","snapshot_observed_at":"2026-07-06T23:37:40.695655Z","submitted_at":"2026-05-27T06:16:11Z","title":"Can It Reach the Generator? Investigating the Survival of Prompt-Injection Attacks in Realistic RAG Settings","version":2},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-06-29T11:55:34.911818Z"},"links":{"citing_paper":"/paper/2605.28017"},"observation_digest":"sha256:3ed5a77e7eab410d9bf2ffcb9f121be146ed7b4cc99ca83a5ffd13693a430e85","observation_id":"4cb3e3cc-8305-4d90-9faf-a664a242901d","resolution":{"observed_at":"2026-06-29T11:55:34.911818Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T11:55:34.911818Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2605.28017","last_updated":"2026-05-28T01:52:56Z","snapshot_observed_at":"2026-07-06T23:37:40.695655Z","submitted_at":"2026-05-27T06:16:11Z","title":"Can It Reach the Generator? Investigating the Survival of Prompt-Injection Attacks in Realistic RAG Settings","version":2},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-06-29T11:55:34.911818Z"},"links":{"citing_paper":"/paper/2605.28017"},"observation_digest":"sha256:29feceaf7b4397567f0b5818285773288e2fba25b9cc79347c5e8c2d723e1aed","observation_id":"b563402b-9466-457e-855b-c7225ee362d9","resolution":{"observed_at":"2026-06-29T11:55:34.911818Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T11:55:34.911818Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2605.28017","last_updated":"2026-05-28T01:52:56Z","snapshot_observed_at":"2026-07-06T23:37:40.695655Z","submitted_at":"2026-05-27T06:16:11Z","title":"Can It Reach the Generator? Investigating the Survival of Prompt-Injection Attacks in Realistic RAG Settings","version":2},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-06-29T11:55:34.911818Z"},"links":{"citing_paper":"/paper/2605.28017"},"observation_digest":"sha256:707dc078776bbc290871bff9d6dc5b021bfab24f9feecbf1e858d576f1ed88bc","observation_id":"da868605-d003-47e8-9aa1-7f98d2b27a89","resolution":{"observed_at":"2026-06-29T11:55:34.911818Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T11:55:34.911818Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2605.28017","last_updated":"2026-05-28T01:52:56Z","snapshot_observed_at":"2026-07-06T23:37:40.695655Z","submitted_at":"2026-05-27T06:16:11Z","title":"Can It Reach the Generator? Investigating the Survival of Prompt-Injection Attacks in Realistic RAG Settings","version":2},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-06-29T11:55:34.911818Z"},"links":{"citing_paper":"/paper/2605.28017"},"observation_digest":"sha256:69c30397fa8886aee0ae8353f6e7fdca8d0d30a5fe86dd107051eb3924930085","observation_id":"954784cf-4fee-4104-9773-e5b65e3d40b6","resolution":{"observed_at":"2026-06-29T11:55:34.911818Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2206.06588","last_updated":"2022-06-14T04:25:26Z","snapshot_observed_at":"2026-07-06T13:20:29.949578Z","submitted_at":"2022-06-14T04:25:26Z","title":"Shopping Queries Dataset: A Large-Scale ESCI Benchmark for Improving Product Search","version":1},"cited_work":{"arxiv_id":"2206.06588","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2206.06588","snapshot_observed_at":"2026-07-04T10:19:47.677112Z","title":"Reddy, Lluís Màrquez, Fran Valero, Nikhil Rao, Hugo Zaragoza, Sambaran Bandyopadhyay, Arnab Biswas, Anlu Xing, and Karthik Subbian","venue":null,"work_id":"9c577f92-ab85-4f49-82bd-a51ba0bac39c","year":2022},"citing_paper":{"arxiv_id":"2605.28017","last_updated":"2026-05-28T01:52:56Z","snapshot_observed_at":"2026-07-06T23:37:40.695655Z","submitted_at":"2026-05-27T06:16:11Z","title":"Can It Reach the Generator? Investigating the Survival of Prompt-Injection Attacks in Realistic RAG Settings","version":2},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-06-29T11:55:34.911818Z"},"links":{"cited_paper":"/paper/2206.06588","citing_paper":"/paper/2605.28017"},"observation_digest":"sha256:fc92f2c1593a8126f9bc2aa86fd3fada4946ab3d5dd3c3e91cbf73a6eb213c1f","observation_id":"e5c2e0e5-12e9-4a51-89d4-09c49a0be32a","resolution":{"observed_at":"2026-06-29T12:03:24.288069Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-24T06:31:00.690269+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-24T06:31:00.690269+00:00","source":"crossref"},{"observed_at":"2026-07-24T06:30:55.483554+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T11:55:34.911818Z","title":null,"venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"2605.28017","last_updated":"2026-05-28T01:52:56Z","snapshot_observed_at":"2026-07-06T23:37:40.695655Z","submitted_at":"2026-05-27T06:16:11Z","title":"Can It Reach the Generator? Investigating the Survival of Prompt-Injection Attacks in Realistic RAG Settings","version":2},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-06-29T11:55:34.911818Z"},"links":{"citing_paper":"/paper/2605.28017"},"observation_digest":"sha256:0cd39587d799ea80cc1d6bb2979da31b55d727f45e0ae51fe8d70f317ea70fc2","observation_id":"765e1f6f-7921-4aad-bccd-796794e347b9","resolution":{"observed_at":"2026-06-29T11:55:34.911818Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T11:55:34.911818Z","title":null,"venue":null,"work_id":null,"year":1976},"citing_paper":{"arxiv_id":"2605.28017","last_updated":"2026-05-28T01:52:56Z","snapshot_observed_at":"2026-07-06T23:37:40.695655Z","submitted_at":"2026-05-27T06:16:11Z","title":"Can It Reach the Generator? Investigating the Survival of Prompt-Injection Attacks in Realistic RAG Settings","version":2},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-06-29T11:55:34.911818Z"},"links":{"citing_paper":"/paper/2605.28017"},"observation_digest":"sha256:4ecb242f01e7f2e3a5cba82bce5a76f9a3893aa0c6436adb2e0e948540cd5d0a","observation_id":"85026304-ef71-4a04-ad47-628d93558ee5","resolution":{"observed_at":"2026-06-29T11:55:34.911818Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T11:55:34.911818Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2605.28017","last_updated":"2026-05-28T01:52:56Z","snapshot_observed_at":"2026-07-06T23:37:40.695655Z","submitted_at":"2026-05-27T06:16:11Z","title":"Can It Reach the Generator? Investigating the Survival of Prompt-Injection Attacks in Realistic RAG Settings","version":2},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-06-29T11:55:34.911818Z"},"links":{"citing_paper":"/paper/2605.28017"},"observation_digest":"sha256:643badcdbd56d3dfafccfa182c98a03b8930eecc1342b2250d26adde33686081","observation_id":"f81d0a1b-74da-4b1e-8113-06433771c2e3","resolution":{"observed_at":"2026-06-29T11:55:34.911818Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T11:55:34.911818Z","title":null,"venue":null,"work_id":null,"year":2008},"citing_paper":{"arxiv_id":"2605.28017","last_updated":"2026-05-28T01:52:56Z","snapshot_observed_at":"2026-07-06T23:37:40.695655Z","submitted_at":"2026-05-27T06:16:11Z","title":"Can It Reach the Generator? Investigating the Survival of Prompt-Injection Attacks in Realistic RAG Settings","version":2},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-06-29T11:55:34.911818Z"},"links":{"citing_paper":"/paper/2605.28017"},"observation_digest":"sha256:50fd326a990d73cf04c1c1e9620b4e967fae3b0be060d91a91b32bffc506fcba","observation_id":"62484947-0d1e-45c8-be11-a9e0c74e703b","resolution":{"observed_at":"2026-06-29T11:55:34.911818Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T11:55:34.911818Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2605.28017","last_updated":"2026-05-28T01:52:56Z","snapshot_observed_at":"2026-07-06T23:37:40.695655Z","submitted_at":"2026-05-27T06:16:11Z","title":"Can It Reach the Generator? Investigating the Survival of Prompt-Injection Attacks in Realistic RAG Settings","version":2},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-06-29T11:55:34.911818Z"},"links":{"citing_paper":"/paper/2605.28017"},"observation_digest":"sha256:4dcf9f1e0cd204e3c4a6a3c92a0b340fb723ee48b961a7c172aa42511c02bd43","observation_id":"6c83368e-018e-4aa7-be4d-29e6d27d2458","resolution":{"observed_at":"2026-06-29T11:55:34.911818Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T11:55:34.911818Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2605.28017","last_updated":"2026-05-28T01:52:56Z","snapshot_observed_at":"2026-07-06T23:37:40.695655Z","submitted_at":"2026-05-27T06:16:11Z","title":"Can It Reach the Generator? Investigating the Survival of Prompt-Injection Attacks in Realistic RAG Settings","version":2},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-06-29T11:55:34.911818Z"},"links":{"citing_paper":"/paper/2605.28017"},"observation_digest":"sha256:863a597d22d14308436948e77b32366769e0484865b44be74e9da5006a543b12","observation_id":"6575d6ba-b473-4f11-a287-8a969595238b","resolution":{"observed_at":"2026-06-29T11:55:34.911818Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T11:55:34.911818Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2605.28017","last_updated":"2026-05-28T01:52:56Z","snapshot_observed_at":"2026-07-06T23:37:40.695655Z","submitted_at":"2026-05-27T06:16:11Z","title":"Can It Reach the Generator? Investigating the Survival of Prompt-Injection Attacks in Realistic RAG Settings","version":2},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-06-29T11:55:34.911818Z"},"links":{"citing_paper":"/paper/2605.28017"},"observation_digest":"sha256:7203edc53eff14ee1120699064eecf0c3ba569e3598b7a1ce801a34569cd4eab","observation_id":"dc315fa5-4d68-49a8-b84d-94baa0590181","resolution":{"observed_at":"2026-06-29T11:55:34.911818Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.05804","last_updated":"2025-05-23T02:35:56Z","snapshot_observed_at":"2026-07-06T21:05:59.227458Z","submitted_at":"2025-04-08T08:36:18Z","title":"StealthRank: LLM Ranking Manipulation via Stealthy Prompt Optimization","version":2},"cited_work":{"arxiv_id":"2504.05804","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2504.05804","snapshot_observed_at":"2026-06-29T12:03:24.292027Z","title":"Stealthrank: Llm ranking manipulation via stealthy prompt optimization.arXiv preprint arXiv:2504.05804","venue":null,"work_id":"0258d454-7983-43bd-9580-8ce0c6c40055","year":2025},"citing_paper":{"arxiv_id":"2605.28017","last_updated":"2026-05-28T01:52:56Z","snapshot_observed_at":"2026-07-06T23:37:40.695655Z","submitted_at":"2026-05-27T06:16:11Z","title":"Can It Reach the Generator? Investigating the Survival of Prompt-Injection Attacks in Realistic RAG Settings","version":2},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-06-29T11:55:34.911818Z"},"links":{"cited_paper":"/paper/2504.05804","citing_paper":"/paper/2605.28017"},"observation_digest":"sha256:9f8b51ea48de51aaa1bcad4b81ccd010956247ecd0beceeaab9bc14f008166f6","observation_id":"258ae85d-dac3-4e41-b744-e385e1449e9e","resolution":{"observed_at":"2026-06-29T12:03:24.293626Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-24T06:31:00.690269+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-24T06:31:00.690269+00:00","source":"crossref"},{"observed_at":"2026-07-24T06:30:55.483554+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.13079","last_updated":"2025-08-12T17:53:18Z","snapshot_observed_at":"2026-07-06T21:11:05.749637Z","submitted_at":"2025-04-17T16:46:11Z","title":"Retrieval-Augmented Generation with Conflicting Evidence","version":2},"cited_work":{"arxiv_id":"2504.13079","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2504.13079","snapshot_observed_at":"2026-07-04T18:40:02.383306Z","title":"Yuxia Wang, Minghan Wang, Muhammad Arslan Man- zoor, Fei Liu, Georgi Nenkov Georgiev, Rocktim Jy- oti Das, and Preslav Nakov","venue":null,"work_id":"8f24c4d1-16d3-47ac-b5b3-b5c7883e83f5","year":2025},"citing_paper":{"arxiv_id":"2605.28017","last_updated":"2026-05-28T01:52:56Z","snapshot_observed_at":"2026-07-06T23:37:40.695655Z","submitted_at":"2026-05-27T06:16:11Z","title":"Can It Reach the Generator? Investigating the Survival of Prompt-Injection Attacks in Realistic RAG Settings","version":2},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-06-29T11:55:34.911818Z"},"links":{"cited_paper":"/paper/2504.13079","citing_paper":"/paper/2605.28017"},"observation_digest":"sha256:a6b7555183b31a9b7ecd7e2d7bcf0db3dce779fc53304a20fb76915814a678ff","observation_id":"18729c28-f716-4ba0-8de3-da8aeee74dfa","resolution":{"observed_at":"2026-06-29T12:03:24.302901Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-24T06:31:00.690269+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-24T06:31:00.690269+00:00","source":"crossref"},{"observed_at":"2026-07-24T06:30:55.483554+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T11:55:34.911818Z","title":null,"venue":null,"work_id":null,"year":2011},"citing_paper":{"arxiv_id":"2605.28017","last_updated":"2026-05-28T01:52:56Z","snapshot_observed_at":"2026-07-06T23:37:40.695655Z","submitted_at":"2026-05-27T06:16:11Z","title":"Can It Reach the Generator? Investigating the Survival of Prompt-Injection Attacks in Realistic RAG Settings","version":2},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-06-29T11:55:34.911818Z"},"links":{"citing_paper":"/paper/2605.28017"},"observation_digest":"sha256:b4a546817ad92d66595a92ee43a5f27a63cd45a282605e3655742a07ff6b070f","observation_id":"2f9c5fd0-4a4f-4fa7-9e92-3af3024a9573","resolution":{"observed_at":"2026-06-29T11:55:34.911818Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2510.06732","last_updated":"2026-06-28T18:43:51Z","snapshot_observed_at":"2026-07-06T22:31:58.848080Z","submitted_at":"2025-10-08T07:40:40Z","title":"Are LLMs Reliable Rankers? Rank Manipulation via Two-Stage Token Optimization","version":2},"cited_work":{"arxiv_id":"2510.06732","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2510.06732","snapshot_observed_at":"2026-06-30T02:16:10.286812Z","title":null,"venue":null,"work_id":"ff83a3f6-aacc-4160-a4e4-112d4b8cdd3f","year":2025},"citing_paper":{"arxiv_id":"2605.28017","last_updated":"2026-05-28T01:52:56Z","snapshot_observed_at":"2026-07-06T23:37:40.695655Z","submitted_at":"2026-05-27T06:16:11Z","title":"Can It Reach the Generator? Investigating the Survival of Prompt-Injection Attacks in Realistic RAG Settings","version":2},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-06-29T11:55:34.911818Z"},"links":{"cited_paper":"/paper/2510.06732","citing_paper":"/paper/2605.28017"},"observation_digest":"sha256:e41ea0c757d66378d0ec5644d4ad452f1859062b028425916c750f4b2cd84808","observation_id":"f2a3abb7-bcb0-43ac-80e0-998c67b3021d","resolution":{"observed_at":"2026-06-30T02:16:10.286812Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-24T06:31:00.690269+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-24T06:31:00.690269+00:00","source":"crossref"},{"observed_at":"2026-07-24T06:30:55.483554+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2602.16752","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T12:03:24.305422Z","title":null,"venue":null,"work_id":"a6352f87-41ad-4896-afa8-a9c2df198fce","year":2026},"citing_paper":{"arxiv_id":"2605.28017","last_updated":"2026-05-28T01:52:56Z","snapshot_observed_at":"2026-07-06T23:37:40.695655Z","submitted_at":"2026-05-27T06:16:11Z","title":"Can It Reach the Generator? Investigating the Survival of Prompt-Injection Attacks in Realistic RAG Settings","version":2},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-06-29T11:55:34.911818Z"},"links":{"citing_paper":"/paper/2605.28017"},"observation_digest":"sha256:791a9b9f5a068070be97d0056509104f9bb951e20cd4a0a2f62f76d98ce9c8c9","observation_id":"487689ea-542b-4be9-b603-99e47edbc85a","resolution":{"observed_at":"2026-06-29T12:03:24.306747Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-24T06:31:00.690269+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-24T06:31:00.690269+00:00","source":"crossref"},{"observed_at":"2026-07-24T06:30:55.483554+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T11:55:34.911818Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2605.28017","last_updated":"2026-05-28T01:52:56Z","snapshot_observed_at":"2026-07-06T23:37:40.695655Z","submitted_at":"2026-05-27T06:16:11Z","title":"Can It Reach the Generator? Investigating the Survival of Prompt-Injection Attacks in Realistic RAG Settings","version":2},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-06-29T11:55:34.911818Z"},"links":{"citing_paper":"/paper/2605.28017"},"observation_digest":"sha256:7951fce91c877108340b40e08b2ab12be43c33fb061609b4d9e7cc6ad5cf0974","observation_id":"a44ee50a-6114-49f9-b3a3-91f2bf72df9d","resolution":{"observed_at":"2026-06-29T11:55:34.911818Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2510.14276","last_updated":"2025-10-16T04:00:18Z","snapshot_observed_at":"2026-07-06T22:32:47.087967Z","submitted_at":"2025-10-16T04:00:18Z","title":"Qwen3Guard Technical Report","version":1},"cited_work":{"arxiv_id":"2510.14276","doi":"10.48550/arxiv.2510.14276","metadata_source":"pith","pith_arxiv_id":"2510.14276","snapshot_observed_at":"2026-07-10T12:15:01.137692Z","title":"Qwen3Guard Technical Report","venue":"cs.CL","work_id":"de1c5964-d29a-456c-97cc-30684b243a85","year":2025},"citing_paper":{"arxiv_id":"2605.28017","last_updated":"2026-05-28T01:52:56Z","snapshot_observed_at":"2026-07-06T23:37:40.695655Z","submitted_at":"2026-05-27T06:16:11Z","title":"Can It Reach the Generator? Investigating the Survival of Prompt-Injection Attacks in Realistic RAG Settings","version":2},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-06-29T11:55:34.911818Z"},"links":{"cited_paper":"/paper/2510.14276","citing_paper":"/paper/2605.28017"},"observation_digest":"sha256:91a1cc85a183d1dcf8fd3c034be9e34470728fca8cc689bd2c9c5f85388ccba2","observation_id":"f9c544c2-2970-4610-8795-75b28cedc916","resolution":{"observed_at":"2026-06-29T12:03:24.289784Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-24T06:31:00.690269+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-24T06:31:00.690269+00:00","source":"crossref"},{"observed_at":"2026-07-24T06:30:55.483554+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T11:55:34.911818Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2605.28017","last_updated":"2026-05-28T01:52:56Z","snapshot_observed_at":"2026-07-06T23:37:40.695655Z","submitted_at":"2026-05-27T06:16:11Z","title":"Can It Reach the Generator? Investigating the Survival of Prompt-Injection Attacks in Realistic RAG Settings","version":2},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-06-29T11:55:34.911818Z"},"links":{"citing_paper":"/paper/2605.28017"},"observation_digest":"sha256:1f88d72f8c70dc7e1dfa7e2953da3cc5832f18002fe9eed3d2e026fe3a135f5d","observation_id":"ef24fd6a-e35a-4fd0-bd31-725d33a208e8","resolution":{"observed_at":"2026-06-29T11:55:34.911818Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T11:55:34.911818Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2605.28017","last_updated":"2026-05-28T01:52:56Z","snapshot_observed_at":"2026-07-06T23:37:40.695655Z","submitted_at":"2026-05-27T06:16:11Z","title":"Can It Reach the Generator? Investigating the Survival of Prompt-Injection Attacks in Realistic RAG Settings","version":2},"reference_index":38,"source":"arxiv_source","source_observed_at":"2026-06-29T11:55:34.911818Z"},"links":{"citing_paper":"/paper/2605.28017"},"observation_digest":"sha256:f22ce89b313cc515d90493ca645a6997f12566e3e93bdfde4d97caad20770843","observation_id":"4f3b76e4-df22-493e-a8e9-ed173ceeb756","resolution":{"observed_at":"2026-06-29T11:55:34.911818Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T11:55:34.911818Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2605.28017","last_updated":"2026-05-28T01:52:56Z","snapshot_observed_at":"2026-07-06T23:37:40.695655Z","submitted_at":"2026-05-27T06:16:11Z","title":"Can It Reach the Generator? Investigating the Survival of Prompt-Injection Attacks in Realistic RAG Settings","version":2},"reference_index":39,"source":"arxiv_source","source_observed_at":"2026-06-29T11:55:34.911818Z"},"links":{"citing_paper":"/paper/2605.28017"},"observation_digest":"sha256:fdc68f4728bfcf84a966234250dc948a1526f4a0770bbafc773febe2a42e2ab7","observation_id":"fdbd4658-2a8d-4235-ae9a-2a41727f11df","resolution":{"observed_at":"2026-06-29T11:55:34.911818Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T11:55:34.911818Z","title":"online\" 'onlinestring :=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2605.28017","last_updated":"2026-05-28T01:52:56Z","snapshot_observed_at":"2026-07-06T23:37:40.695655Z","submitted_at":"2026-05-27T06:16:11Z","title":"Can It Reach the Generator? Investigating the Survival of Prompt-Injection Attacks in Realistic RAG Settings","version":2},"reference_index":40,"source":"arxiv_source","source_observed_at":"2026-06-29T11:55:34.911818Z"},"links":{"citing_paper":"/paper/2605.28017"},"observation_digest":"sha256:f083496ec4913a676c35b7913f8b7608ecba8907a23c8afcd682a4a0620b785a","observation_id":"eb639909-93f3-414c-b00e-44c425f6b048","resolution":{"observed_at":"2026-06-29T11:55:34.911818Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T11:55:34.911818Z","title":"write newline","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2605.28017","last_updated":"2026-05-28T01:52:56Z","snapshot_observed_at":"2026-07-06T23:37:40.695655Z","submitted_at":"2026-05-27T06:16:11Z","title":"Can It Reach the Generator? Investigating the Survival of Prompt-Injection Attacks in Realistic RAG Settings","version":2},"reference_index":41,"source":"arxiv_source","source_observed_at":"2026-06-29T11:55:34.911818Z"},"links":{"citing_paper":"/paper/2605.28017"},"observation_digest":"sha256:73605806e2e06ba8549e10021ca6389f05b55cdf38d4266c29c5acd447e45f5c","observation_id":"f2e7819a-4296-4879-b7fd-2d735e4ebff6","resolution":{"observed_at":"2026-06-29T11:55:34.911818Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2605.28017","last_updated":"2026-05-28T01:52:56Z","latest_version":2,"primary_category":"cs.CR","snapshot_observed_at":"2026-07-06T23:37:40.695655Z","submitted_at":"2026-05-27T06:16:11Z","title":"Can It Reach the Generator? Investigating the Survival of Prompt-Injection Attacks in Realistic RAG Settings"},"reference_resolution":{"displayed":41,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":30,"verified_exact":11,"verified_fuzzy":0},"total_outbound_references":41},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-07-24T06:31:00.690269+00:00","source":"crossref"},{"observed_at":"2026-07-24T06:30:55.483554+00:00","source":"retraction_watch"}],"thesis":"As of 25 July 2026, this Paper Citation Record lists 41 of 41 outbound references and 0 inbound Pith citation observations for arXiv:2605.28017."}