{"as_of":"2026-08-08T23:06:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:663375546d56447ea5483f76adb323e80f5e3091b8e99e4faf5894ca22355df8","coverage":[{"denominator":8,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":8,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-02T11:07:08.044674Z","state":"measured"},{"denominator":8,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":8,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2606.17467/citation-record","integrity":"/paper/2606.17467/integrity","json":"/paper/2606.17467/citation-record.json","paper":"/paper/2606.17467"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2309.00614","last_updated":"2023-09-04T17:47:36Z","snapshot_observed_at":"2026-07-06T16:13:23.343694Z","submitted_at":"2023-09-01T17:59:44Z","title":"Baseline Defenses for Adversarial Attacks Against Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.00614","snapshot_observed_at":"2026-08-02T11:07:07.657788Z","title":"Yupei Liu, Yuqi Jia, Runpeng Geng, Jinyuan Jia, and Neil Zhenqiang Gong","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.17467","last_updated":"2026-07-21T14:56:46Z","snapshot_observed_at":"2026-08-02T22:48:54.525435Z","submitted_at":"2026-06-16T03:29:23Z","title":"PARSE: Provenance-Aware Retrieval Sanitization for Professional Domain LLM Agents","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-02T11:07:07.657788Z"},"links":{"cited_paper":"/paper/2309.00614","citing_paper":"/paper/2606.17467"},"observation_digest":"sha256:4bfbcf328f3233aaabc15d3f29812f66bb1bc1c616614ff070a098cee970ef06","observation_id":"592f3ea7-fc44-422d-8172-2daa9d727585","resolution":{"observed_at":"2026-08-02T11:07:07.657788Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T11:07:07.760381Z","title":"Preprint, arXiv:2310.12815","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.17467","last_updated":"2026-07-21T14:56:46Z","snapshot_observed_at":"2026-08-02T22:48:54.525435Z","submitted_at":"2026-06-16T03:29:23Z","title":"PARSE: Provenance-Aware Retrieval Sanitization for Professional Domain LLM Agents","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-02T11:07:07.760381Z"},"links":{"citing_paper":"/paper/2606.17467"},"observation_digest":"sha256:0c02a5a3c6b49f3adb048d01db2ccbdd973953ff1bdd539b492d32a010002838","observation_id":"bb272f13-dfd3-4b2c-8333-cbf71bb84b4c","resolution":{"observed_at":"2026-08-02T11:07:07.760381Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2605.22001","last_updated":"2026-05-21T04:58:11Z","snapshot_observed_at":"2026-08-02T20:44:06.922581Z","submitted_at":"2026-05-21T04:58:11Z","title":"Blind Spots in the Guard: How Domain-Camouflaged Injection Attacks Evade Detection in Multi-Agent LLM Systems","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2605.22001","snapshot_observed_at":"2026-08-02T11:07:07.881761Z","title":"https:// ai.meta.com/research/publications/ llama-guard-3/","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.17467","last_updated":"2026-07-21T14:56:46Z","snapshot_observed_at":"2026-08-02T22:48:54.525435Z","submitted_at":"2026-06-16T03:29:23Z","title":"PARSE: Provenance-Aware Retrieval Sanitization for Professional Domain LLM Agents","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-02T11:07:07.881761Z"},"links":{"cited_paper":"/paper/2605.22001","citing_paper":"/paper/2606.17467"},"observation_digest":"sha256:067259c3a439cb06488d98ceb6c923efcf0a6f598af6523f20fe19c701cc3dbf","observation_id":"31994e44-11ee-4eed-8214-a03018936177","resolution":{"observed_at":"2026-08-02T11:07:07.881761Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.06608","last_updated":"2025-02-26T18:59:01Z","snapshot_observed_at":"2026-07-06T18:28:24.821865Z","submitted_at":"2024-06-06T18:10:11Z","title":"The Prompt Report: A Systematic Survey of Prompt Engineering Techniques","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.06608","snapshot_observed_at":"2026-08-02T11:07:08.044674Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.17467","last_updated":"2026-07-21T14:56:46Z","snapshot_observed_at":"2026-08-02T22:48:54.525435Z","submitted_at":"2026-06-16T03:29:23Z","title":"PARSE: Provenance-Aware Retrieval Sanitization for Professional Domain LLM Agents","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-02T11:07:08.044674Z"},"links":{"cited_paper":"/paper/2406.06608","citing_paper":"/paper/2606.17467"},"observation_digest":"sha256:5ad4d38f0c7bb3ed70326fea79201bc826230e56341d2ff4d2afffa13e201069","observation_id":"0dd43cb4-5c27-4514-89d9-bedc3a1febbf","resolution":{"observed_at":"2026-08-02T11:07:08.044674Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2211.09527","last_updated":"2022-11-17T13:43:20Z","snapshot_observed_at":"2026-07-06T14:19:47.424778Z","submitted_at":"2022-11-17T13:43:20Z","title":"Ignore Previous Prompt: Attack Techniques For Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2211.09527","snapshot_observed_at":"2026-08-02T11:07:07.956789Z","title":"Preprint, arXiv:2211.09527","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.17467","last_updated":"2026-07-21T14:56:46Z","snapshot_observed_at":"2026-08-02T22:48:54.525435Z","submitted_at":"2026-06-16T03:29:23Z","title":"PARSE: Provenance-Aware Retrieval Sanitization for Professional Domain LLM Agents","version":2},"reference_index":2022,"source":"pdf_text","source_observed_at":"2026-08-02T11:07:07.956789Z"},"links":{"cited_paper":"/paper/2211.09527","citing_paper":"/paper/2606.17467"},"observation_digest":"sha256:e70a136583c0d7877a6395f422bb25dded6813834848fadb092eee136ba31c2e","observation_id":"538a620d-b81b-4d4c-b1c6-dd2469c8395a","resolution":{"observed_at":"2026-08-02T11:07:07.956789Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.06674","last_updated":"2023-12-07T19:40:50Z","snapshot_observed_at":"2026-07-06T17:00:00.321552Z","submitted_at":"2023-12-07T19:40:50Z","title":"Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversations","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.06674","snapshot_observed_at":"2026-08-02T11:07:07.582414Z","title":"Neel Jain, Avi Schwarzschild, Yuxin Wen, Gowthami Somepalli, John Kirchenbauer, Ping-yeh Chiang, Micah Goldblum, Tom Goldstein, and Jonas Geip- ing","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.17467","last_updated":"2026-07-21T14:56:46Z","snapshot_observed_at":"2026-08-02T22:48:54.525435Z","submitted_at":"2026-06-16T03:29:23Z","title":"PARSE: Provenance-Aware Retrieval Sanitization for Professional Domain LLM Agents","version":2},"reference_index":2023,"source":"pdf_text","source_observed_at":"2026-08-02T11:07:07.582414Z"},"links":{"cited_paper":"/paper/2312.06674","citing_paper":"/paper/2606.17467"},"observation_digest":"sha256:a73534b8c7aca2f85eb584b6cd5a5be7615729d794e83f0827cb9ff22844a801","observation_id":"e531fa75-a6fb-415f-8cf9-ae14824f03fb","resolution":{"observed_at":"2026-08-02T11:07:07.582414Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.14197","last_updated":"2025-01-27T08:51:16Z","snapshot_observed_at":"2026-07-06T17:06:45.522731Z","submitted_at":"2023-12-21T01:08:39Z","title":"Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.14197","snapshot_observed_at":"2026-08-02T11:07:07.442032Z","title":"Hakan Inan, Kartikeya Upasani, Jianfeng Chi, Rashi Rungta, Krithika Iyer, Yuning Mao, Michael Tontchev, Qing Hu, Brian Fuller, Davide Testuggine, and Madian Khabsa","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.17467","last_updated":"2026-07-21T14:56:46Z","snapshot_observed_at":"2026-08-02T22:48:54.525435Z","submitted_at":"2026-06-16T03:29:23Z","title":"PARSE: Provenance-Aware Retrieval Sanitization for Professional Domain LLM Agents","version":2},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-02T11:07:07.442032Z"},"links":{"cited_paper":"/paper/2312.14197","citing_paper":"/paper/2606.17467"},"observation_digest":"sha256:22427f2ed92041853bba8ccf0b9afa721340db6ea61d5ccfadc37a7e733e58ff","observation_id":"317cc991-7106-429f-8973-67bdeb1617af","resolution":{"observed_at":"2026-08-02T11:07:07.442032Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T11:07:07.283971Z","title":"Preprint, arXiv:2510.08829","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.17467","last_updated":"2026-07-21T14:56:46Z","snapshot_observed_at":"2026-08-02T22:48:54.525435Z","submitted_at":"2026-06-16T03:29:23Z","title":"PARSE: Provenance-Aware Retrieval Sanitization for Professional Domain LLM Agents","version":2},"reference_index":2025,"source":"pdf_text","source_observed_at":"2026-08-02T11:07:07.283971Z"},"links":{"citing_paper":"/paper/2606.17467"},"observation_digest":"sha256:2f8d2bbe930c62c4c947cddb8b74d7895763c9b693ffc68bef7c7354f955f4f5","observation_id":"e587a4f2-6137-49b9-add2-3647679d16e0","resolution":{"observed_at":"2026-08-02T11:07:07.283971Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2606.17467","last_updated":"2026-07-21T14:56:46Z","latest_version":2,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-02T22:48:54.525435Z","submitted_at":"2026-06-16T03:29:23Z","title":"PARSE: Provenance-Aware Retrieval Sanitization for Professional Domain LLM Agents"},"reference_resolution":{"displayed":8,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":8,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":8},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 8 of 8 outbound references and 0 inbound Pith citation observations for arXiv:2606.17467."}