{"as_of":"2026-08-06T20:20:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:e5bf0a142cd45df985fa4541a768ff219eb351730230d969f445e0dea6547d54","coverage":[{"denominator":5,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":5,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-02T12:27:02.083053Z","state":"measured"},{"denominator":5,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":5,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-06T06:34:29.942622+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2606.04425/citation-record","integrity":"/paper/2606.04425/integrity","json":"/paper/2606.04425/citation-record.json","paper":"/paper/2606.04425"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2412.14470","last_updated":"2025-05-20T05:58:23Z","snapshot_observed_at":"2026-08-06T12:35:19.109481Z","submitted_at":"2024-12-19T02:35:15Z","title":"Agent-SafetyBench: Evaluating the Safety of LLM Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.14470","snapshot_observed_at":"2026-08-02T12:27:02.083053Z","title":"Wanjun Zhong, Lianghong Guo, Qiqi Gao, He Ye, and Yanlin Wang","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.04425","last_updated":"2026-07-29T18:37:08Z","snapshot_observed_at":"2026-08-02T23:18:02.619587Z","submitted_at":"2026-06-03T04:14:17Z","title":"What If Prompt Injection Never Left? Rethinking Agent Security through Cross-Session Stored Prompt Injection","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-02T12:27:02.083053Z"},"links":{"cited_paper":"/paper/2412.14470","citing_paper":"/paper/2606.04425"},"observation_digest":"sha256:1e4ab4e5552a377d71d2cf4584e82cf42ee63555e7d031f2b557d545a5f7c4e8","observation_id":"1b6d5cb7-5e89-403b-bb2b-7cc24d4a34bd","resolution":{"observed_at":"2026-08-02T12:27:02.083053Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T12:27:02.068297Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.04425","last_updated":"2026-07-29T18:37:08Z","snapshot_observed_at":"2026-08-02T23:18:02.619587Z","submitted_at":"2026-06-03T04:14:17Z","title":"What If Prompt Injection Never Left? Rethinking Agent Security through Cross-Session Stored Prompt Injection","version":2},"reference_index":2023,"source":"pdf_text","source_observed_at":"2026-08-02T12:27:02.068297Z"},"links":{"citing_paper":"/paper/2606.04425"},"observation_digest":"sha256:c75cacbb1d8e07c448c97bfa6fb782b64c6d11e3ba8065ecc582bc359a62db03","observation_id":"c160bd5d-7c7c-49ae-8e2a-81a0c1c23dd1","resolution":{"observed_at":"2026-08-02T12:27:02.068297Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.08560","last_updated":"2024-02-12T18:59:46Z","snapshot_observed_at":"2026-08-03T06:31:15.541423Z","submitted_at":"2023-10-12T17:51:32Z","title":"MemGPT: Towards LLMs as Operating Systems","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.08560","snapshot_observed_at":"2026-08-02T12:27:02.078421Z","title":"Preprint, arXiv:2310.08560","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2606.04425","last_updated":"2026-07-29T18:37:08Z","snapshot_observed_at":"2026-08-02T23:18:02.619587Z","submitted_at":"2026-06-03T04:14:17Z","title":"What If Prompt Injection Never Left? Rethinking Agent Security through Cross-Session Stored Prompt Injection","version":2},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-02T12:27:02.078421Z"},"links":{"cited_paper":"/paper/2310.08560","citing_paper":"/paper/2606.04425"},"observation_digest":"sha256:33d618e19910671f64676b0ffcd6303a6db572c93e838b4b08f8e8035695ff45","observation_id":"3aa17e27-0348-45b8-867c-0363eb046fb5","resolution":{"observed_at":"2026-08-02T12:27:02.078421Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2508.12538","last_updated":"2026-05-25T07:08:19Z","snapshot_observed_at":"2026-08-05T19:27:11.696122Z","submitted_at":"2025-08-18T00:23:41Z","title":"MCPXKIT: The Unified Toolkit for Analyzing Model Context Protocol Security","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2508.12538","snapshot_observed_at":"2026-08-02T12:27:02.072919Z","title":"12 Kelvin Guu, Kenton Lee, Zora Tung, Panupong Pasu- pat, and Mingwei Chang","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2606.04425","last_updated":"2026-07-29T18:37:08Z","snapshot_observed_at":"2026-08-02T23:18:02.619587Z","submitted_at":"2026-06-03T04:14:17Z","title":"What If Prompt Injection Never Left? Rethinking Agent Security through Cross-Session Stored Prompt Injection","version":2},"reference_index":2025,"source":"pdf_text","source_observed_at":"2026-08-02T12:27:02.072919Z"},"links":{"cited_paper":"/paper/2508.12538","citing_paper":"/paper/2606.04425"},"observation_digest":"sha256:12d07823330b617df41e422fe986095ded40b328d07f992b322e6d3430c46e1a","observation_id":"748225de-ec17-408a-b1e9-d6b51bef3a87","resolution":{"observed_at":"2026-08-02T12:27:02.072919Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T12:27:02.063087Z","title":"InThe Thirty-ninth Annual Conference on Neural Information Processing Sys- tems","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.04425","last_updated":"2026-07-29T18:37:08Z","snapshot_observed_at":"2026-08-02T23:18:02.619587Z","submitted_at":"2026-06-03T04:14:17Z","title":"What If Prompt Injection Never Left? Rethinking Agent Security through Cross-Session Stored Prompt Injection","version":2},"reference_index":2026,"source":"pdf_text","source_observed_at":"2026-08-02T12:27:02.063087Z"},"links":{"citing_paper":"/paper/2606.04425"},"observation_digest":"sha256:c03693faa33da0209aaeb5b27f161b9114080825b800cf7af42f5ecaddb2e991","observation_id":"3cf5d80f-713f-4541-a8d0-b2ec472fd399","resolution":{"observed_at":"2026-08-02T12:27:02.063087Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2606.04425","last_updated":"2026-07-29T18:37:08Z","latest_version":2,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-02T23:18:02.619587Z","submitted_at":"2026-06-03T04:14:17Z","title":"What If Prompt Injection Never Left? Rethinking Agent Security through Cross-Session Stored Prompt Injection"},"reference_resolution":{"displayed":5,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":5,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":5},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"thesis":"As of 6 August 2026, this Paper Citation Record lists 5 of 5 outbound references and 0 inbound Pith citation observations for arXiv:2606.04425."}