{"as_of":"2026-08-05T13:43:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:081f4efb1c8b76a6baa03fa19e63b148ea627943e802b4f4de96245678ce3f8e","coverage":[{"denominator":35,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":35,"source":"paper_references, paper_reference_links","source_observed_at":"2026-06-27T08:56:12.882653Z","state":"measured"},{"denominator":35,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":35,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-05T06:32:48.257954+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2606.12737/citation-record","integrity":"/paper/2606.12737/integrity","json":"/paper/2606.12737/citation-record.json","paper":"/paper/2606.12737"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T08:56:12.882653Z","title":"Association for Computational Linguistics , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.12737","last_updated":"2026-06-10T22:57:02Z","snapshot_observed_at":"2026-07-06T23:51:35.904251Z","submitted_at":"2026-06-10T22:57:02Z","title":"PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-06-27T08:56:12.882653Z"},"links":{"citing_paper":"/paper/2606.12737"},"observation_digest":"sha256:da851ef96e41498d0f7656f4cfc348f7fa3b07fc2c7efed508ba9c2eab99edf3","observation_id":"5c121285-e973-4a84-8ebc-9099130fbc11","resolution":{"observed_at":"2026-06-27T08:56:12.882653Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T08:56:12.882653Z","title":"International Conference on Machine Learning , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.12737","last_updated":"2026-06-10T22:57:02Z","snapshot_observed_at":"2026-07-06T23:51:35.904251Z","submitted_at":"2026-06-10T22:57:02Z","title":"PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections","version":1},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-06-27T08:56:12.882653Z"},"links":{"citing_paper":"/paper/2606.12737"},"observation_digest":"sha256:6af707a9daf8b0684b78079ec37cf62dfd82f16345799f6c29193edf4be6c8c8","observation_id":"d6a18bd0-8428-4a87-b462-916e121a4760","resolution":{"observed_at":"2026-06-27T08:56:12.882653Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T08:56:12.882653Z","title":"Findings of the Association for Computational Linguistics: ACL 2024 , pages=","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.12737","last_updated":"2026-06-10T22:57:02Z","snapshot_observed_at":"2026-07-06T23:51:35.904251Z","submitted_at":"2026-06-10T22:57:02Z","title":"PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-06-27T08:56:12.882653Z"},"links":{"citing_paper":"/paper/2606.12737"},"observation_digest":"sha256:c639d71df6b760d825de695558d63d435afc50aa4a2e17017a31417344f66328","observation_id":"2371645a-2f15-4006-b514-fed1a00576cc","resolution":{"observed_at":"2026-06-27T08:56:12.882653Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T08:56:12.882653Z","title":"Advances in Neural Information Processing Systems , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.12737","last_updated":"2026-06-10T22:57:02Z","snapshot_observed_at":"2026-07-06T23:51:35.904251Z","submitted_at":"2026-06-10T22:57:02Z","title":"PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-06-27T08:56:12.882653Z"},"links":{"citing_paper":"/paper/2606.12737"},"observation_digest":"sha256:659f12da596f648004ebd1aba0af3dc8ded8ba65f657355c894b2fedf18d9ade","observation_id":"6d113ea4-552b-4f0c-86a2-f63513dc6322","resolution":{"observed_at":"2026-06-27T08:56:12.882653Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2602.03117","last_updated":"2026-05-07T07:42:14Z","snapshot_observed_at":"2026-07-06T22:44:18.875334Z","submitted_at":"2026-02-03T05:20:42Z","title":"AgentDyn: Are Your Agent Security Defenses Deployable in Real-World Dynamic Environments?","version":3},"cited_work":{"arxiv_id":"2602.03117","doi":"10.48550/arxiv.2602.03117","metadata_source":"pith","pith_arxiv_id":"2602.03117","snapshot_observed_at":"2026-08-05T02:49:54.815029Z","title":"AgentDyn: Are Your Agent Security Defenses Deployable in Real-World Dynamic Environments?","venue":"cs.CR","work_id":"5164f177-b5ab-4d9c-ac93-125e92bf1f5a","year":2026},"citing_paper":{"arxiv_id":"2606.12737","last_updated":"2026-06-10T22:57:02Z","snapshot_observed_at":"2026-07-06T23:51:35.904251Z","submitted_at":"2026-06-10T22:57:02Z","title":"PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-06-27T08:56:12.882653Z"},"links":{"cited_paper":"/paper/2602.03117","citing_paper":"/paper/2606.12737"},"observation_digest":"sha256:552b307868e7e1ba89e33af76aaf536cf7b6714e254d13c5f201850cee557b04","observation_id":"453a80a3-478c-42bb-ad94-d563c5cea9e6","resolution":{"observed_at":"2026-07-03T12:38:07.258901Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-07-15T19:20:23.920036+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-15T19:20:23.920036+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T08:56:12.882653Z","title":"Findings of the Association for Computational Linguistics: EACL 2026 , pages=","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2606.12737","last_updated":"2026-06-10T22:57:02Z","snapshot_observed_at":"2026-07-06T23:51:35.904251Z","submitted_at":"2026-06-10T22:57:02Z","title":"PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-06-27T08:56:12.882653Z"},"links":{"citing_paper":"/paper/2606.12737"},"observation_digest":"sha256:b4b391494ebeccd7bb32339e11a8505bbc0918cf9a86b05f0111e84620ec7352","observation_id":"e2f158fa-4308-4b25-bd65-6689adc83a07","resolution":{"observed_at":"2026-06-27T08:56:12.882653Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.01606","last_updated":"2024-10-02T14:47:05Z","snapshot_observed_at":"2026-08-03T19:54:21.584740Z","submitted_at":"2024-10-02T14:47:05Z","title":"Automated Red Teaming with GOAT: the Generative Offensive Agent Tester","version":1},"cited_work":{"arxiv_id":"2410.01606","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2410.01606","snapshot_observed_at":"2026-07-04T19:50:11.139672Z","title":"Automated red teaming with goat: the generative offensive agent tester","venue":null,"work_id":"1344694e-7af1-4e8c-bf09-02845b6042d6","year":2024},"citing_paper":{"arxiv_id":"2606.12737","last_updated":"2026-06-10T22:57:02Z","snapshot_observed_at":"2026-07-06T23:51:35.904251Z","submitted_at":"2026-06-10T22:57:02Z","title":"PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-06-27T08:56:12.882653Z"},"links":{"cited_paper":"/paper/2410.01606","citing_paper":"/paper/2606.12737"},"observation_digest":"sha256:756e9d011667185fe86458b8feaec3df8cadc981dfbf649d8f4239a646b027bc","observation_id":"a0f72eda-bc89-491e-9fc9-620947e6c823","resolution":{"observed_at":"2026-07-03T12:38:07.284216Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T08:56:12.882653Z","title":"International Conference on Machine Learning , pages=","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.12737","last_updated":"2026-06-10T22:57:02Z","snapshot_observed_at":"2026-07-06T23:51:35.904251Z","submitted_at":"2026-06-10T22:57:02Z","title":"PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections","version":1},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-06-27T08:56:12.882653Z"},"links":{"citing_paper":"/paper/2606.12737"},"observation_digest":"sha256:f3bad80ebd79b2dce805fcbc28c3e02d491cc201c169647c876092e78c42205b","observation_id":"545c8d09-380b-4f73-831b-cac4e8ba3d02","resolution":{"observed_at":"2026-06-27T08:56:12.882653Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T08:56:12.882653Z","title":"Findings of the Association for Computational Linguistics: EACL 2026 , pages=","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2606.12737","last_updated":"2026-06-10T22:57:02Z","snapshot_observed_at":"2026-07-06T23:51:35.904251Z","submitted_at":"2026-06-10T22:57:02Z","title":"PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-06-27T08:56:12.882653Z"},"links":{"citing_paper":"/paper/2606.12737"},"observation_digest":"sha256:90232d850981d1962cbbb611a0951d6e49688a9e8426e770cfb6ca071d8e1b39","observation_id":"4856e421-a6d5-446c-9c56-5771917946b3","resolution":{"observed_at":"2026-06-27T08:56:12.882653Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T08:56:12.882653Z","title":"Proceedings of the 2025 ACM SIGSAC Conference on Computer and Communications Security , pages=","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.12737","last_updated":"2026-06-10T22:57:02Z","snapshot_observed_at":"2026-07-06T23:51:35.904251Z","submitted_at":"2026-06-10T22:57:02Z","title":"PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-06-27T08:56:12.882653Z"},"links":{"citing_paper":"/paper/2606.12737"},"observation_digest":"sha256:c09dc9998b46b6008bd8edcc0e6101098dffdfaa0f2ac6e74952be1c30827957","observation_id":"dfcc6f51-57dc-4e3a-8e8e-805afabfbebd","resolution":{"observed_at":"2026-06-27T08:56:12.882653Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T08:56:12.882653Z","title":"Proceedings of the 63rd Annual Meeting of the Association for Computational Linguistics (Volume 1: Long Papers) , pages=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.12737","last_updated":"2026-06-10T22:57:02Z","snapshot_observed_at":"2026-07-06T23:51:35.904251Z","submitted_at":"2026-06-10T22:57:02Z","title":"PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-06-27T08:56:12.882653Z"},"links":{"citing_paper":"/paper/2606.12737"},"observation_digest":"sha256:c3a2f55a5b0bd8346810a127a288652d6a4a274818b2d8a1d28724901416f211","observation_id":"ba43d2bc-0732-428f-af57-58f67d417352","resolution":{"observed_at":"2026-06-27T08:56:12.882653Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04960","last_updated":"2025-01-30T22:55:18Z","snapshot_observed_at":"2026-08-03T16:57:10.185196Z","submitted_at":"2024-03-08T00:02:30Z","title":"IsolateGPT: An Execution Isolation Architecture for LLM-Based Agentic Systems","version":2},"cited_work":{"arxiv_id":"2403.04960","doi":null,"metadata_source":"pith","pith_arxiv_id":"2403.04960","snapshot_observed_at":"2026-07-11T02:47:50.122545Z","title":"SecGPT: An Execution Isolation Architecture for LLM-Based Systems","venue":"cs.CR","work_id":"b8650c23-e9e9-4d99-83d1-87e2dec8898b","year":2024},"citing_paper":{"arxiv_id":"2606.12737","last_updated":"2026-06-10T22:57:02Z","snapshot_observed_at":"2026-07-06T23:51:35.904251Z","submitted_at":"2026-06-10T22:57:02Z","title":"PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-06-27T08:56:12.882653Z"},"links":{"cited_paper":"/paper/2403.04960","citing_paper":"/paper/2606.12737"},"observation_digest":"sha256:559e447daea3bc1b312c7c5acbfffc800307b195b15732a954e05e5d8bf761f2","observation_id":"97103400-c4e7-4626-a3f1-e91c74dfa137","resolution":{"observed_at":"2026-07-03T12:38:07.278674Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T08:56:12.882653Z","title":"International Conference on Machine Learning , pages=","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.12737","last_updated":"2026-06-10T22:57:02Z","snapshot_observed_at":"2026-07-06T23:51:35.904251Z","submitted_at":"2026-06-10T22:57:02Z","title":"PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections","version":1},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-06-27T08:56:12.882653Z"},"links":{"citing_paper":"/paper/2606.12737"},"observation_digest":"sha256:d2d6ab24d4d51c67b386df0dc73e4dd0d6e81381d39bc0e7eaee14488cb648b4","observation_id":"7f9b3955-df97-48a9-9bc5-e7371d6bf0ec","resolution":{"observed_at":"2026-06-27T08:56:12.882653Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T08:56:12.882653Z","title":"International Conference on Learning Representations (ICLR) , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.12737","last_updated":"2026-06-10T22:57:02Z","snapshot_observed_at":"2026-07-06T23:51:35.904251Z","submitted_at":"2026-06-10T22:57:02Z","title":"PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-06-27T08:56:12.882653Z"},"links":{"citing_paper":"/paper/2606.12737"},"observation_digest":"sha256:800ba6ae23325acb8133e5356c3afabad56735b8682f0ad9b23da85d53b30f30","observation_id":"2632bc97-ee8f-4d77-8d96-5149ff90538b","resolution":{"observed_at":"2026-06-27T08:56:12.882653Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T08:56:12.882653Z","title":"Findings of the Association for Computational Linguistics: EMNLP 2025 , pages=","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.12737","last_updated":"2026-06-10T22:57:02Z","snapshot_observed_at":"2026-07-06T23:51:35.904251Z","submitted_at":"2026-06-10T22:57:02Z","title":"PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-06-27T08:56:12.882653Z"},"links":{"citing_paper":"/paper/2606.12737"},"observation_digest":"sha256:d4deada059af247b383a7833055618c7028fed565704b1013daacacd1b6f46c8","observation_id":"25dd0661-376b-4107-80b3-3f55ea94993b","resolution":{"observed_at":"2026-06-27T08:56:12.882653Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T08:56:12.882653Z","title":"First conference on language modeling , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.12737","last_updated":"2026-06-10T22:57:02Z","snapshot_observed_at":"2026-07-06T23:51:35.904251Z","submitted_at":"2026-06-10T22:57:02Z","title":"PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-06-27T08:56:12.882653Z"},"links":{"citing_paper":"/paper/2606.12737"},"observation_digest":"sha256:afc0eebc10598a1ec6ee7f3581747495836e0772df651567f672ca89990f365f","observation_id":"d69472a5-10fd-4664-9454-a7e09fc40710","resolution":{"observed_at":"2026-06-27T08:56:12.882653Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T08:56:12.882653Z","title":"Advances in neural information processing systems , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.12737","last_updated":"2026-06-10T22:57:02Z","snapshot_observed_at":"2026-07-06T23:51:35.904251Z","submitted_at":"2026-06-10T22:57:02Z","title":"PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-06-27T08:56:12.882653Z"},"links":{"citing_paper":"/paper/2606.12737"},"observation_digest":"sha256:015eb046f1d8eb73240e977b7fcfcdcdad23c400160ecdbab1614dafaf7f4ed9","observation_id":"82c0468b-402c-4428-b805-c6acdccda38a","resolution":{"observed_at":"2026-06-27T08:56:12.882653Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T08:56:12.882653Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.12737","last_updated":"2026-06-10T22:57:02Z","snapshot_observed_at":"2026-07-06T23:51:35.904251Z","submitted_at":"2026-06-10T22:57:02Z","title":"PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-06-27T08:56:12.882653Z"},"links":{"citing_paper":"/paper/2606.12737"},"observation_digest":"sha256:36608a783fe654a43e1b6c67681314529c2821d04b0ca52bfc7fcd173612ec18","observation_id":"16be4640-2ecf-47f2-816c-968f44e0088d","resolution":{"observed_at":"2026-06-27T08:56:12.882653Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2507.02735","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T08:16:58.857965Z","title":"Meta secalign: A secure foundation llm against prompt injection attacks","venue":null,"work_id":"69776aad-e4d1-4d24-bb01-59055547fa49","year":2025},"citing_paper":{"arxiv_id":"2606.12737","last_updated":"2026-06-10T22:57:02Z","snapshot_observed_at":"2026-07-06T23:51:35.904251Z","submitted_at":"2026-06-10T22:57:02Z","title":"PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-06-27T08:56:12.882653Z"},"links":{"citing_paper":"/paper/2606.12737"},"observation_digest":"sha256:deb61ab33af5030989d613f71f1cbd52f0d1f8d76a3089f923fc4408d1ba583e","observation_id":"41d63c5a-8b8d-470d-82cc-200c57f6b1bf","resolution":{"observed_at":"2026-07-03T12:38:07.263610Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T08:56:12.882653Z","title":"Proceedings of the 63rd Annual Meeting of the Association for Computational Linguistics (Volume 1: Long Papers) , pages=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.12737","last_updated":"2026-06-10T22:57:02Z","snapshot_observed_at":"2026-07-06T23:51:35.904251Z","submitted_at":"2026-06-10T22:57:02Z","title":"PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-06-27T08:56:12.882653Z"},"links":{"citing_paper":"/paper/2606.12737"},"observation_digest":"sha256:4ac03ccf30ea20504b2b5e49a2260bce9d45884b930d197ef0bcf5086de3ce55","observation_id":"6c7b0acf-fadd-451d-9848-3d07c6ad974c","resolution":{"observed_at":"2026-06-27T08:56:12.882653Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2601.07072","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-03T12:38:07.254162Z","title":"arXiv preprint arXiv:2601.07072 , year=","venue":null,"work_id":"66f1736f-2897-439d-8f22-cdcf766937d9","year":2026},"citing_paper":{"arxiv_id":"2606.12737","last_updated":"2026-06-10T22:57:02Z","snapshot_observed_at":"2026-07-06T23:51:35.904251Z","submitted_at":"2026-06-10T22:57:02Z","title":"PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections","version":1},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-06-27T08:56:12.882653Z"},"links":{"citing_paper":"/paper/2606.12737"},"observation_digest":"sha256:4dd8c56d3a94ca971dbfb0286860c60ef166734fe75abb70f673fbb56a648d93","observation_id":"557b9231-16e0-4ea4-a9e8-30c0b1312256","resolution":{"observed_at":"2026-07-03T12:38:07.256292Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2602.22724","doi":"10.48550/arxiv.2602.22724","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Agentsentry: Mitigating indirect prompt injection in llm agents via temporal causal diagnostics and context purification","venue":"Open MIND","work_id":"f201b9d8-52ac-4a3f-888c-e488c65bc313","year":2026},"citing_paper":{"arxiv_id":"2606.12737","last_updated":"2026-06-10T22:57:02Z","snapshot_observed_at":"2026-07-06T23:51:35.904251Z","submitted_at":"2026-06-10T22:57:02Z","title":"PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-06-27T08:56:12.882653Z"},"links":{"citing_paper":"/paper/2606.12737"},"observation_digest":"sha256:465cd789ecddc3b1fc1c73fc5cff6457cf0618c4488b6c780a0fa4835351abde","observation_id":"9a587471-6211-45d8-ab08-d953df34a513","resolution":{"observed_at":"2026-07-03T12:38:07.284412Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T08:56:12.882653Z","title":"International Conference on Machine Learning , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.12737","last_updated":"2026-06-10T22:57:02Z","snapshot_observed_at":"2026-07-06T23:51:35.904251Z","submitted_at":"2026-06-10T22:57:02Z","title":"PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-06-27T08:56:12.882653Z"},"links":{"citing_paper":"/paper/2606.12737"},"observation_digest":"sha256:f0e8f5ca8989906df81cbbaa314aa85724cd2614362865b5a38dd619544a1219","observation_id":"cb8bd580-2e71-40ec-985f-74eab42d4415","resolution":{"observed_at":"2026-06-27T08:56:12.882653Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T08:56:12.882653Z","title":"Advances in neural information processing systems , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.12737","last_updated":"2026-06-10T22:57:02Z","snapshot_observed_at":"2026-07-06T23:51:35.904251Z","submitted_at":"2026-06-10T22:57:02Z","title":"PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-06-27T08:56:12.882653Z"},"links":{"citing_paper":"/paper/2606.12737"},"observation_digest":"sha256:60914f0ace1e3ab18e01502fbf37d34c0ea780dc4f6e35c3f9f18ff5810c59b5","observation_id":"cc69a8d3-0cc5-498a-b177-ead2f3dc4b64","resolution":{"observed_at":"2026-06-27T08:56:12.882653Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T08:56:12.882653Z","title":"Proceedings of the 2024 Conference on Empirical Methods in Natural Language Processing , pages=","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.12737","last_updated":"2026-06-10T22:57:02Z","snapshot_observed_at":"2026-07-06T23:51:35.904251Z","submitted_at":"2026-06-10T22:57:02Z","title":"PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections","version":1},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-06-27T08:56:12.882653Z"},"links":{"citing_paper":"/paper/2606.12737"},"observation_digest":"sha256:59b26162d7e7b077547373bf4c9357a8402cc4a0dc1a7d4c4e70d97979be06d5","observation_id":"f596ae5b-adbd-49ec-b680-a296102f6e40","resolution":{"observed_at":"2026-06-27T08:56:12.882653Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T08:56:12.882653Z","title":"International Conference on Learning Representations , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.12737","last_updated":"2026-06-10T22:57:02Z","snapshot_observed_at":"2026-07-06T23:51:35.904251Z","submitted_at":"2026-06-10T22:57:02Z","title":"PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections","version":1},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-06-27T08:56:12.882653Z"},"links":{"citing_paper":"/paper/2606.12737"},"observation_digest":"sha256:9e5eff34f9d0af0620d9a2e522d45d3bd305404f33a9db1bc3553d236c79f7df","observation_id":"966a5405-3867-46ea-a606-39276777ca8c","resolution":{"observed_at":"2026-06-27T08:56:12.882653Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2510.04550","doi":"10.48550/arxiv.2510.04550","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2510.04550 , year=","venue":"ArXiv.org","work_id":"47ea0bcb-42b8-4e0c-9192-911e908c703d","year":2025},"citing_paper":{"arxiv_id":"2606.12737","last_updated":"2026-06-10T22:57:02Z","snapshot_observed_at":"2026-07-06T23:51:35.904251Z","submitted_at":"2026-06-10T22:57:02Z","title":"PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections","version":1},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-06-27T08:56:12.882653Z"},"links":{"citing_paper":"/paper/2606.12737"},"observation_digest":"sha256:a142d666d99bb72bbbc1847c728b8eb17b166067bd069c766b6ec0da295139ee","observation_id":"b469f583-b834-415a-962e-55bb28df5516","resolution":{"observed_at":"2026-07-03T12:38:07.271260Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-07-11T01:50:51.591086+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-11T01:50:51.591086+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.05849","last_updated":"2025-06-14T01:50:21Z","snapshot_observed_at":"2026-07-06T21:21:20.149404Z","submitted_at":"2025-05-09T07:40:17Z","title":"AgentVigil: Generic Black-Box Red-teaming for Indirect Prompt Injection against LLM Agents","version":4},"cited_work":{"arxiv_id":"2505.05849","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.05849","snapshot_observed_at":"2026-07-04T10:09:45.177863Z","title":"Agentvigil: Generic black-box red- teaming for indirect prompt injection against llm agents","venue":null,"work_id":"78036d3e-3022-41fc-a844-76366394ab0d","year":2025},"citing_paper":{"arxiv_id":"2606.12737","last_updated":"2026-06-10T22:57:02Z","snapshot_observed_at":"2026-07-06T23:51:35.904251Z","submitted_at":"2026-06-10T22:57:02Z","title":"PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections","version":1},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-06-27T08:56:12.882653Z"},"links":{"cited_paper":"/paper/2505.05849","citing_paper":"/paper/2606.12737"},"observation_digest":"sha256:1d03c99910f0f27b0dafa78de0276dc5a77578a7fe00ac2afc3e8f189775f622","observation_id":"d3594358-41db-416a-ba7e-17f323c11cce","resolution":{"observed_at":"2026-07-03T12:38:07.269748Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T08:56:12.882653Z","title":"Advances in Neural Information Processing Systems , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.12737","last_updated":"2026-06-10T22:57:02Z","snapshot_observed_at":"2026-07-06T23:51:35.904251Z","submitted_at":"2026-06-10T22:57:02Z","title":"PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections","version":1},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-06-27T08:56:12.882653Z"},"links":{"citing_paper":"/paper/2606.12737"},"observation_digest":"sha256:b4eff24eb9a63e3fc326eca45a4b35179dccff27c04f2d72cde4e28f33ebf1c9","observation_id":"f89385cc-af4f-4ee2-a0b7-55c7ba2286d2","resolution":{"observed_at":"2026-06-27T08:56:12.882653Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.14720","last_updated":"2024-03-20T15:26:23Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-03-20T15:26:23Z","title":"Defending Against Indirect Prompt Injection Attacks With Spotlighting","version":1},"cited_work":{"arxiv_id":"2403.14720","doi":"10.48550/arxiv.2403.14720","metadata_source":"pith","pith_arxiv_id":"2403.14720","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Defending Against Indirect Prompt Injection Attacks With Spotlighting","venue":"cs.CR","work_id":"c18cd975-e731-4e0f-a99f-a37d846cdd31","year":2024},"citing_paper":{"arxiv_id":"2606.12737","last_updated":"2026-06-10T22:57:02Z","snapshot_observed_at":"2026-07-06T23:51:35.904251Z","submitted_at":"2026-06-10T22:57:02Z","title":"PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections","version":1},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-06-27T08:56:12.882653Z"},"links":{"cited_paper":"/paper/2403.14720","citing_paper":"/paper/2606.12737"},"observation_digest":"sha256:eb81193367dcdc7579805920070d01fa2469b247c56b2e6a4e6c730e44f19164","observation_id":"ec49e397-c55b-457f-a4e5-b9789846b29a","resolution":{"observed_at":"2026-07-03T12:38:07.272521Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T08:56:12.882653Z","title":"33rd USENIX Security Symposium (USENIX Security 24) , pages=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.12737","last_updated":"2026-06-10T22:57:02Z","snapshot_observed_at":"2026-07-06T23:51:35.904251Z","submitted_at":"2026-06-10T22:57:02Z","title":"PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections","version":1},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-06-27T08:56:12.882653Z"},"links":{"citing_paper":"/paper/2606.12737"},"observation_digest":"sha256:cab98cbae4540ea70c5b72605fe8dbaf3c77b9a96a19915b684fb36ff7e9a434","observation_id":"16b343e7-16b4-48b3-a404-2b640ce553e4","resolution":{"observed_at":"2026-06-27T08:56:12.882653Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04957","last_updated":"2024-03-07T23:46:20Z","snapshot_observed_at":"2026-07-06T17:41:19.171822Z","submitted_at":"2024-03-07T23:46:20Z","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models","version":1},"cited_work":{"arxiv_id":"2403.04957","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2403.04957","snapshot_observed_at":"2026-07-04T14:09:53.868428Z","title":"Automatic and universal prompt injection attacks against large language models","venue":null,"work_id":"0bf3ec19-0162-44f2-855f-1b7fdb565de2","year":2024},"citing_paper":{"arxiv_id":"2606.12737","last_updated":"2026-06-10T22:57:02Z","snapshot_observed_at":"2026-07-06T23:51:35.904251Z","submitted_at":"2026-06-10T22:57:02Z","title":"PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections","version":1},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-06-27T08:56:12.882653Z"},"links":{"cited_paper":"/paper/2403.04957","citing_paper":"/paper/2606.12737"},"observation_digest":"sha256:5ed6eaa2d40a7d4c45cb01671182aeb5dfecaced207251b8653893c6e22f52ef","observation_id":"dd1de3f3-e303-4ea7-a748-b0fb390096e8","resolution":{"observed_at":"2026-07-03T12:38:07.281630Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.05499","last_updated":"2025-12-29T02:25:27Z","snapshot_observed_at":"2026-07-06T15:40:27.639368Z","submitted_at":"2023-06-08T18:43:11Z","title":"Prompt Injection attack against LLM-integrated Applications","version":3},"cited_work":{"arxiv_id":"2306.05499","doi":"10.48550/arxiv.2306.05499","metadata_source":"pith","pith_arxiv_id":"2306.05499","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Prompt Injection attack against LLM-integrated Applications","venue":"cs.CR","work_id":"977b4683-bba6-49d6-8f3d-496c41cb7fac","year":2023},"citing_paper":{"arxiv_id":"2606.12737","last_updated":"2026-06-10T22:57:02Z","snapshot_observed_at":"2026-07-06T23:51:35.904251Z","submitted_at":"2026-06-10T22:57:02Z","title":"PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections","version":1},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-06-27T08:56:12.882653Z"},"links":{"cited_paper":"/paper/2306.05499","citing_paper":"/paper/2606.12737"},"observation_digest":"sha256:927fe8dc58b4f4c990ed01c5572cd829d8d4cde0f5a2eda30af621a850f58ed6","observation_id":"00cbc131-51a6-455a-af60-88cdafaf5b2d","resolution":{"observed_at":"2026-07-03T12:38:07.287324Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T08:56:12.882653Z","title":"Proceedings of the 16th ACM workshop on artificial intelligence and security , pages=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.12737","last_updated":"2026-06-10T22:57:02Z","snapshot_observed_at":"2026-07-06T23:51:35.904251Z","submitted_at":"2026-06-10T22:57:02Z","title":"PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections","version":1},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-06-27T08:56:12.882653Z"},"links":{"citing_paper":"/paper/2606.12737"},"observation_digest":"sha256:622154fdd717f7b8e691713e2f87042af25ecb6bf10837df33ad0c4d1d9bc82e","observation_id":"8368a9ba-5602-4185-8e9b-d4e3baecaa43","resolution":{"observed_at":"2026-06-27T08:56:12.882653Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T08:56:12.882653Z","title":"Findings of the Association for Computational Linguistics: EACL 2026 , pages=","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2606.12737","last_updated":"2026-06-10T22:57:02Z","snapshot_observed_at":"2026-07-06T23:51:35.904251Z","submitted_at":"2026-06-10T22:57:02Z","title":"PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections","version":1},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-06-27T08:56:12.882653Z"},"links":{"citing_paper":"/paper/2606.12737"},"observation_digest":"sha256:b322c07ab1ca3f3f99b879b7aef3d242dafc5a5598b3bea73a00e325fa00339d","observation_id":"5ab27242-5c25-4a24-971c-fff321503819","resolution":{"observed_at":"2026-06-27T08:56:12.882653Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2606.12737","last_updated":"2026-06-10T22:57:02Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-07-06T23:51:35.904251Z","submitted_at":"2026-06-10T22:57:02Z","title":"PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections"},"reference_resolution":{"displayed":35,"state_counts":{"malformed_identifier":0,"metadata_mismatch":9,"parse_uncertain":0,"unresolved":24,"verified_exact":2,"verified_fuzzy":0},"total_outbound_references":35},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"thesis":"As of 5 August 2026, this Paper Citation Record lists 35 of 35 outbound references and 0 inbound Pith citation observations for arXiv:2606.12737."}