{"as_of":"2026-08-10T18:11:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:9b0826a80581294943ed6368bef932bd75e7c56370653fb78d1cf4e8f853bdec","coverage":[{"denominator":70,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":70,"source":"paper_references, paper_reference_links","source_observed_at":"2026-06-26T20:47:36.337189Z","state":"measured"},{"denominator":70,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":70,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-10T06:31:04.303077+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2606.18673/citation-record","integrity":"/paper/2606.18673/integrity","json":"/paper/2606.18673/citation-record.json","paper":"/paper/2606.18673"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:47:36.337189Z","title":"https://huggingface.co/sentence-transformers","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2606.18673","last_updated":"2026-06-17T04:20:00Z","snapshot_observed_at":"2026-07-06T23:54:04.739534Z","submitted_at":"2026-06-17T04:20:00Z","title":"Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-06-26T20:47:36.337189Z"},"links":{"citing_paper":"/paper/2606.18673"},"observation_digest":"sha256:6e7b5312443e8cbb69980a9afb4c190f64eacdf5b0bfe0f23efa4e2a40670028","observation_id":"f35e3636-ef7f-4eb6-97e2-56d85813603a","resolution":{"observed_at":"2026-06-26T20:47:36.337189Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:47:36.337189Z","title":"https://huggingface.co/datasets/fka/awesome- chatgpt-prompts","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2606.18673","last_updated":"2026-06-17T04:20:00Z","snapshot_observed_at":"2026-07-06T23:54:04.739534Z","submitted_at":"2026-06-17T04:20:00Z","title":"Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-06-26T20:47:36.337189Z"},"links":{"citing_paper":"/paper/2606.18673"},"observation_digest":"sha256:70d922db70c5d1867285311076dd8d583843449a00eeeebf2c6da3f2e4d531a4","observation_id":"e230de10-8b8f-497a-8986-25f8a618f20f","resolution":{"observed_at":"2026-06-26T20:47:36.337189Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:47:36.337189Z","title":"https://learnprompting.org/docs/prompt_hacking/ defensive_measures","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2606.18673","last_updated":"2026-06-17T04:20:00Z","snapshot_observed_at":"2026-07-06T23:54:04.739534Z","submitted_at":"2026-06-17T04:20:00Z","title":"Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-06-26T20:47:36.337189Z"},"links":{"citing_paper":"/paper/2606.18673"},"observation_digest":"sha256:ae2048fe2cbaa05895c8d7906680d9f4dc4bc98f4ef8d9fa66eb084efde2404e","observation_id":"b0315aa5-5899-4155-8600-502ff5b14e5f","resolution":{"observed_at":"2026-06-26T20:47:36.337189Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:47:36.337189Z","title":"https://huggingface.co/meta-llama/Llama-2-7b-chat- hf","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2606.18673","last_updated":"2026-06-17T04:20:00Z","snapshot_observed_at":"2026-07-06T23:54:04.739534Z","submitted_at":"2026-06-17T04:20:00Z","title":"Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-06-26T20:47:36.337189Z"},"links":{"citing_paper":"/paper/2606.18673"},"observation_digest":"sha256:9e087a5b90bc239582b59d4bfa895bb828958cd3f3e18a7cc29a76514a88d83f","observation_id":"e3ad4d49-ca31-4c1c-ac8a-93b570ba8293","resolution":{"observed_at":"2026-06-26T20:47:36.337189Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:47:36.337189Z","title":"https://promptbase.com/","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2606.18673","last_updated":"2026-06-17T04:20:00Z","snapshot_observed_at":"2026-07-06T23:54:04.739534Z","submitted_at":"2026-06-17T04:20:00Z","title":"Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-06-26T20:47:36.337189Z"},"links":{"citing_paper":"/paper/2606.18673"},"observation_digest":"sha256:a24f4f1f75391d988cc74ae90472613dcfb11b7784b85f1606cf9b1c92b3f1c2","observation_id":"389ebdd2-eeb3-4be3-a2b1-d58052f95d9b","resolution":{"observed_at":"2026-06-26T20:47:36.337189Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:47:36.337189Z","title":"https://nvd.nist.gov/vuln/detail/cve-2024-5184","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.18673","last_updated":"2026-06-17T04:20:00Z","snapshot_observed_at":"2026-07-06T23:54:04.739534Z","submitted_at":"2026-06-17T04:20:00Z","title":"Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-06-26T20:47:36.337189Z"},"links":{"citing_paper":"/paper/2606.18673"},"observation_digest":"sha256:6d8c2d817708bb752f047ba6f6c07d5efdb03df74a8b2c7c69d4dd5924ea4299","observation_id":"729f7532-c15f-4948-95d7-c78a2e69c3d2","resolution":{"observed_at":"2026-06-26T20:47:36.337189Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:47:36.337189Z","title":"https://github.com/LouisShark/chatgpt_system_ prompt/tree/066b8f9a6db9dce64f2d5d36d91f9e87d8ca2530","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.18673","last_updated":"2026-06-17T04:20:00Z","snapshot_observed_at":"2026-07-06T23:54:04.739534Z","submitted_at":"2026-06-17T04:20:00Z","title":"Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-06-26T20:47:36.337189Z"},"links":{"citing_paper":"/paper/2606.18673"},"observation_digest":"sha256:c50adf5d89d183f58b8ce3b2a4a24df3fb0b5996059b0d83e9a55a0b14f55996","observation_id":"9fb76333-127b-44a9-bf2a-4c7adcafbd18","resolution":{"observed_at":"2026-06-26T20:47:36.337189Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:47:36.337189Z","title":"https://huggingface.co/meta-llama/Llama-3.1-8B- Instruct","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.18673","last_updated":"2026-06-17T04:20:00Z","snapshot_observed_at":"2026-07-06T23:54:04.739534Z","submitted_at":"2026-06-17T04:20:00Z","title":"Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-06-26T20:47:36.337189Z"},"links":{"citing_paper":"/paper/2606.18673"},"observation_digest":"sha256:ff4b72916e759f061fafedb5aa775b54330714c0ff012234b0f5250bbd0a5139","observation_id":"35022add-54ba-44f7-a597-ff0fee6160c4","resolution":{"observed_at":"2026-06-26T20:47:36.337189Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:47:36.337189Z","title":"https://huggingface.co/meta-llama/Llama-3.3-70B- Instruct","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.18673","last_updated":"2026-06-17T04:20:00Z","snapshot_observed_at":"2026-07-06T23:54:04.739534Z","submitted_at":"2026-06-17T04:20:00Z","title":"Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-06-26T20:47:36.337189Z"},"links":{"citing_paper":"/paper/2606.18673"},"observation_digest":"sha256:f842671ffd730d53e615c273f71ed403b009f737bd84e100e03d0f2a6f09faaf","observation_id":"160d02c8-9793-48c2-9efd-31d6171d5ee2","resolution":{"observed_at":"2026-06-26T20:47:36.337189Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:47:36.337189Z","title":"https://github.com/friuns2/Leaked- GPTs/blob/main/gpts/MangaMikoAnimeGirlfriend.md","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.18673","last_updated":"2026-06-17T04:20:00Z","snapshot_observed_at":"2026-07-06T23:54:04.739534Z","submitted_at":"2026-06-17T04:20:00Z","title":"Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-06-26T20:47:36.337189Z"},"links":{"citing_paper":"/paper/2606.18673"},"observation_digest":"sha256:f34cbfa59ad74b6b05c036c96417ad7c1063e1eee5e6ca7824cae5fcf5f7b99e","observation_id":"6fc3c137-96e1-4c20-b311-141d21f5c794","resolution":{"observed_at":"2026-06-26T20:47:36.337189Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:47:36.337189Z","title":"https://huggingface.co/mistralai/Mistral-7B- Instruct-v0.3","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.18673","last_updated":"2026-06-17T04:20:00Z","snapshot_observed_at":"2026-07-06T23:54:04.739534Z","submitted_at":"2026-06-17T04:20:00Z","title":"Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-06-26T20:47:36.337189Z"},"links":{"citing_paper":"/paper/2606.18673"},"observation_digest":"sha256:e25571c946ea5da660827a2c7291cef5779579b9ff6915b521dfd4540d3536b1","observation_id":"bd26acb0-8de5-44b2-9c46-6259d7aa8070","resolution":{"observed_at":"2026-06-26T20:47:36.337189Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:47:36.337189Z","title":"https://platform.openai.com/docs","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.18673","last_updated":"2026-06-17T04:20:00Z","snapshot_observed_at":"2026-07-06T23:54:04.739534Z","submitted_at":"2026-06-17T04:20:00Z","title":"Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-06-26T20:47:36.337189Z"},"links":{"citing_paper":"/paper/2606.18673"},"observation_digest":"sha256:8b61e80dd0d96411dda0a8ebe494ae8856d30ddc4d849a4fb9ff5f39dbd5e14f","observation_id":"f605472e-31a8-450d-8490-abed275ac0a4","resolution":{"observed_at":"2026-06-26T20:47:36.337189Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:47:36.337189Z","title":"https://huggingface.co/Qwen/Qwen2.5-72B-Instruct","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.18673","last_updated":"2026-06-17T04:20:00Z","snapshot_observed_at":"2026-07-06T23:54:04.739534Z","submitted_at":"2026-06-17T04:20:00Z","title":"Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-06-26T20:47:36.337189Z"},"links":{"citing_paper":"/paper/2606.18673"},"observation_digest":"sha256:b2bd14256d20abb7051b572db5e348c5d9eb4e77ae163b4a6a81892622ace605","observation_id":"6bdca070-845a-416a-a296-91bd0a1679c9","resolution":{"observed_at":"2026-06-26T20:47:36.337189Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:47:36.337189Z","title":"https://github.com/agentscope- ai/agentscope/tree/main/examples/functionality/rag","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.18673","last_updated":"2026-06-17T04:20:00Z","snapshot_observed_at":"2026-07-06T23:54:04.739534Z","submitted_at":"2026-06-17T04:20:00Z","title":"Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-06-26T20:47:36.337189Z"},"links":{"citing_paper":"/paper/2606.18673"},"observation_digest":"sha256:160c8bb4ed6d4cdce18daff8d98f399d4015b0245a39994363642862ff262648","observation_id":"37b85ed4-d5c2-4101-bc49-fe71925b03c3","resolution":{"observed_at":"2026-06-26T20:47:36.337189Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:47:36.337189Z","title":"https://github.com/friuns2/BlackFriday-GPTs- Prompts/blob/main/gpts/simulation-game.md","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.18673","last_updated":"2026-06-17T04:20:00Z","snapshot_observed_at":"2026-07-06T23:54:04.739534Z","submitted_at":"2026-06-17T04:20:00Z","title":"Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-06-26T20:47:36.337189Z"},"links":{"citing_paper":"/paper/2606.18673"},"observation_digest":"sha256:715c6c2932c692df3be0e0666491291c4a7531d3e1a9bb83c792cd291b9bfa51","observation_id":"94253ff4-f716-4670-b3dd-8b70a2be55a6","resolution":{"observed_at":"2026-06-26T20:47:36.337189Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:47:36.337189Z","title":"https://claude.com/pricing/enterprise","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.18673","last_updated":"2026-06-17T04:20:00Z","snapshot_observed_at":"2026-07-06T23:54:04.739534Z","submitted_at":"2026-06-17T04:20:00Z","title":"Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-06-26T20:47:36.337189Z"},"links":{"citing_paper":"/paper/2606.18673"},"observation_digest":"sha256:d7148d395a575aef0457063ec47402c4b2c068716a94802841819ee9827b0a5b","observation_id":"e81be67d-1483-48c8-a131-01478a7e8199","resolution":{"observed_at":"2026-06-26T20:47:36.337189Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:47:36.337189Z","title":"https://github.com/elder- plinius/CL4R1T4S","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.18673","last_updated":"2026-06-17T04:20:00Z","snapshot_observed_at":"2026-07-06T23:54:04.739534Z","submitted_at":"2026-06-17T04:20:00Z","title":"Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-06-26T20:47:36.337189Z"},"links":{"citing_paper":"/paper/2606.18673"},"observation_digest":"sha256:2b38c2f8a786aa598d14bdde8959b6219482396a6f2840800a4d2f6684722787","observation_id":"ade7ce24-0a49-4c2c-8b5c-ab20c76c015d","resolution":{"observed_at":"2026-06-26T20:47:36.337189Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:47:36.337189Z","title":"https://embracethered.com/blog/posts/2025/windsurf-data-exfiltration- vulnerabilities/","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.18673","last_updated":"2026-06-17T04:20:00Z","snapshot_observed_at":"2026-07-06T23:54:04.739534Z","submitted_at":"2026-06-17T04:20:00Z","title":"Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-06-26T20:47:36.337189Z"},"links":{"citing_paper":"/paper/2606.18673"},"observation_digest":"sha256:ed08c62d832289c588d689fc97fdc0e24f513c28421d83567d8b0a4a19905801","observation_id":"7512bfc6-9ffc-444d-bed2-8ccd764090dd","resolution":{"observed_at":"2026-06-26T20:47:36.337189Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:47:36.337189Z","title":"https://genai.owasp.org/llmrisk/ llm072025-system-prompt-leakage/","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.18673","last_updated":"2026-06-17T04:20:00Z","snapshot_observed_at":"2026-07-06T23:54:04.739534Z","submitted_at":"2026-06-17T04:20:00Z","title":"Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-06-26T20:47:36.337189Z"},"links":{"citing_paper":"/paper/2606.18673"},"observation_digest":"sha256:41445b48d4f0b9a5220b2b57d870ca076c0cfca02776105eab7fd6fd6784ae29","observation_id":"12693b7e-1bbd-4ae2-a0de-125ede82638a","resolution":{"observed_at":"2026-06-26T20:47:36.337189Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:47:36.337189Z","title":"https://bugcrowd.com/engagements/openai","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.18673","last_updated":"2026-06-17T04:20:00Z","snapshot_observed_at":"2026-07-06T23:54:04.739534Z","submitted_at":"2026-06-17T04:20:00Z","title":"Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-06-26T20:47:36.337189Z"},"links":{"citing_paper":"/paper/2606.18673"},"observation_digest":"sha256:82c99551d3d9c058fa1b68955bcbc1513f5e51e2f9a35e60394fc27d55e61011","observation_id":"5d17a7c6-b4a3-48fc-8a60-45e48c5217ed","resolution":{"observed_at":"2026-06-26T20:47:36.337189Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:47:36.337189Z","title":"https://huggingface.co/Qwen/Qwen3-30B- A3B-Instruct-2507","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.18673","last_updated":"2026-06-17T04:20:00Z","snapshot_observed_at":"2026-07-06T23:54:04.739534Z","submitted_at":"2026-06-17T04:20:00Z","title":"Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-06-26T20:47:36.337189Z"},"links":{"citing_paper":"/paper/2606.18673"},"observation_digest":"sha256:5515bb15e56ced1ae07caa5bb0cb5ed66ac8eb08cdcf81abf5bdccb77effdb06","observation_id":"5487212e-17c7-45ba-84e9-47d3492fb7b5","resolution":{"observed_at":"2026-06-26T20:47:36.337189Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:47:36.337189Z","title":"https://huggingface.co/Qwen/Qwen3-32B","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.18673","last_updated":"2026-06-17T04:20:00Z","snapshot_observed_at":"2026-07-06T23:54:04.739534Z","submitted_at":"2026-06-17T04:20:00Z","title":"Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-06-26T20:47:36.337189Z"},"links":{"citing_paper":"/paper/2606.18673"},"observation_digest":"sha256:8c670801ac76090953959d862a33ef70a71b4394382cdd52c35342c31484f91f","observation_id":"dc98a60d-240a-451e-8371-3187b14dc681","resolution":{"observed_at":"2026-06-26T20:47:36.337189Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:47:36.337189Z","title":"https://huggingface.co/Qwen/Qwen3-4B-Instruct- 2507","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.18673","last_updated":"2026-06-17T04:20:00Z","snapshot_observed_at":"2026-07-06T23:54:04.739534Z","submitted_at":"2026-06-17T04:20:00Z","title":"Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-06-26T20:47:36.337189Z"},"links":{"citing_paper":"/paper/2606.18673"},"observation_digest":"sha256:e01b96a9e0a5e2401ff1ff352e3e501334209b8e89924a602ab898b54c7af822","observation_id":"4922e0d0-c166-4597-a4fd-36440f6c26c4","resolution":{"observed_at":"2026-06-26T20:47:36.337189Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:47:36.337189Z","title":"2025.Tongyi Agent Platform","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.18673","last_updated":"2026-06-17T04:20:00Z","snapshot_observed_at":"2026-07-06T23:54:04.739534Z","submitted_at":"2026-06-17T04:20:00Z","title":"Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-06-26T20:47:36.337189Z"},"links":{"citing_paper":"/paper/2606.18673"},"observation_digest":"sha256:95ff1d4e4332bd27ecdad9024b9bab7c801b7c7acd220fe0650da1d11d9d229b","observation_id":"82201050-838b-4d78-a97b-cca4b3b0a47c","resolution":{"observed_at":"2026-06-26T20:47:36.337189Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:47:36.337189Z","title":"2025.AgentBuilder","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.18673","last_updated":"2026-06-17T04:20:00Z","snapshot_observed_at":"2026-07-06T23:54:04.739534Z","submitted_at":"2026-06-17T04:20:00Z","title":"Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-06-26T20:47:36.337189Z"},"links":{"citing_paper":"/paper/2606.18673"},"observation_digest":"sha256:0107067b80ab9b5c466107b25ec2eb4d9992682c1f429bef8959995fc28e042f","observation_id":"445a9c21-5110-4de6-982c-58d465d9a100","resolution":{"observed_at":"2026-06-26T20:47:36.337189Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:47:36.337189Z","title":"2024.Coze","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.18673","last_updated":"2026-06-17T04:20:00Z","snapshot_observed_at":"2026-07-06T23:54:04.739534Z","submitted_at":"2026-06-17T04:20:00Z","title":"Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-06-26T20:47:36.337189Z"},"links":{"citing_paper":"/paper/2606.18673"},"observation_digest":"sha256:81b596d243098b3976156f8948ceaab908a9c07835a2579b75021c138744dba6","observation_id":"dfe4cd5c-0705-4516-93e3-1bccea357b39","resolution":{"observed_at":"2026-06-26T20:47:36.337189Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:47:36.337189Z","title":"2024.Coze Community Guidelines","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.18673","last_updated":"2026-06-17T04:20:00Z","snapshot_observed_at":"2026-07-06T23:54:04.739534Z","submitted_at":"2026-06-17T04:20:00Z","title":"Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-06-26T20:47:36.337189Z"},"links":{"citing_paper":"/paper/2606.18673"},"observation_digest":"sha256:a9d9d18c12ec2eea06bd06b62aa7773405fa5e104efcfbbca4b33626a8a1f60f","observation_id":"2388b805-6708-48e8-81c1-263913e7c2f6","resolution":{"observed_at":"2026-06-26T20:47:36.337189Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:47:36.337189Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.18673","last_updated":"2026-06-17T04:20:00Z","snapshot_observed_at":"2026-07-06T23:54:04.739534Z","submitted_at":"2026-06-17T04:20:00Z","title":"Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-06-26T20:47:36.337189Z"},"links":{"citing_paper":"/paper/2606.18673"},"observation_digest":"sha256:952ba418d8df5519e4ca18c6934d87d26d4613349d845b3dfd730a87b411df13","observation_id":"671d9ccd-3cdb-4248-99f8-ad10dec4c812","resolution":{"observed_at":"2026-06-26T20:47:36.337189Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:47:36.337189Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.18673","last_updated":"2026-06-17T04:20:00Z","snapshot_observed_at":"2026-07-06T23:54:04.739534Z","submitted_at":"2026-06-17T04:20:00Z","title":"Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-06-26T20:47:36.337189Z"},"links":{"citing_paper":"/paper/2606.18673"},"observation_digest":"sha256:26c81a23cbf1ebdb8a460bf6da8ced6cac5f308861dcf0f4ec58be12fab90dc5","observation_id":"560040b1-14a2-43a8-a5f9-efc637aece75","resolution":{"observed_at":"2026-06-26T20:47:36.337189Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:47:36.337189Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.18673","last_updated":"2026-06-17T04:20:00Z","snapshot_observed_at":"2026-07-06T23:54:04.739534Z","submitted_at":"2026-06-17T04:20:00Z","title":"Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-06-26T20:47:36.337189Z"},"links":{"citing_paper":"/paper/2606.18673"},"observation_digest":"sha256:f94b21e991617c2b020e848e1d6c5e867672a89a0dab2e15dcff9c0fd32e1abc","observation_id":"1426113a-8a19-42af-ac9c-7f79931bcf79","resolution":{"observed_at":"2026-06-26T20:47:36.337189Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2507.07974","last_updated":"2025-08-25T16:49:10Z","snapshot_observed_at":"2026-08-09T06:15:46.568294Z","submitted_at":"2025-07-10T17:51:05Z","title":"Defending Against Prompt Injection With a Few DefensiveTokens","version":2},"cited_work":{"arxiv_id":"2507.07974","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2507.07974","snapshot_observed_at":"2026-07-04T00:59:20.691622Z","title":"Defending against prompt injection with a few defensive tokens","venue":null,"work_id":"4f729650-c7f8-4e91-b5ed-4250fe884098","year":2025},"citing_paper":{"arxiv_id":"2606.18673","last_updated":"2026-06-17T04:20:00Z","snapshot_observed_at":"2026-07-06T23:54:04.739534Z","submitted_at":"2026-06-17T04:20:00Z","title":"Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-06-26T20:47:36.337189Z"},"links":{"cited_paper":"/paper/2507.07974","citing_paper":"/paper/2606.18673"},"observation_digest":"sha256:7d900e9a265cbe76df168ebce407c44ed1d1882a8254fea791555c1615d499ff","observation_id":"11510c15-b9e1-4dc5-8a0a-736bce17a901","resolution":{"observed_at":"2026-07-04T00:59:20.694798Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:47:36.337189Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.18673","last_updated":"2026-06-17T04:20:00Z","snapshot_observed_at":"2026-07-06T23:54:04.739534Z","submitted_at":"2026-06-17T04:20:00Z","title":"Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-06-26T20:47:36.337189Z"},"links":{"citing_paper":"/paper/2606.18673"},"observation_digest":"sha256:ac6fe164edf5077601d36d04d8ec96a1f9394db1d9463ff16221e32ecd445537","observation_id":"02a6a40e-660c-4944-9df3-eafb10711cf0","resolution":{"observed_at":"2026-06-26T20:47:36.337189Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:47:36.337189Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.18673","last_updated":"2026-06-17T04:20:00Z","snapshot_observed_at":"2026-07-06T23:54:04.739534Z","submitted_at":"2026-06-17T04:20:00Z","title":"Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-06-26T20:47:36.337189Z"},"links":{"citing_paper":"/paper/2606.18673"},"observation_digest":"sha256:2739d38ecd0dd049d0518b11bc90ec70fd2f8e00a0ee4aae4e7fdc63df80e5a9","observation_id":"15b94641-7c45-4b2a-b689-6b5551b03375","resolution":{"observed_at":"2026-06-26T20:47:36.337189Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1906.04341","last_updated":"2019-06-11T01:31:41Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2019-06-11T01:31:41Z","title":"What Does BERT Look At? An Analysis of BERT's Attention","version":1},"cited_work":{"arxiv_id":"1906.04341","doi":"10.48550/arxiv.1906.04341","metadata_source":"pith","pith_arxiv_id":"1906.04341","snapshot_observed_at":"2026-07-10T06:15:00.866473Z","title":"What Does BERT Look At? An Analysis of BERT's Attention","venue":"cs.CL","work_id":"88041fb5-b526-48f2-b4f5-57830c6b339d","year":2019},"citing_paper":{"arxiv_id":"2606.18673","last_updated":"2026-06-17T04:20:00Z","snapshot_observed_at":"2026-07-06T23:54:04.739534Z","submitted_at":"2026-06-17T04:20:00Z","title":"Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-06-26T20:47:36.337189Z"},"links":{"cited_paper":"/paper/1906.04341","citing_paper":"/paper/2606.18673"},"observation_digest":"sha256:95e75339da7052c7a7ee41a840c7c9f998c12a2af72fa456bdf57b68d6ea1ab0","observation_id":"524540bc-38f3-4e02-b52c-95513c29f881","resolution":{"observed_at":"2026-07-04T00:59:20.683094Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.14034","last_updated":"2024-05-20T04:01:08Z","snapshot_observed_at":"2026-08-10T10:25:57.886885Z","submitted_at":"2024-02-21T04:11:28Z","title":"AgentScope: A Flexible yet Robust Multi-Agent Platform","version":2},"cited_work":{"arxiv_id":"2402.14034","doi":"10.48550/arxiv.2402.14034","metadata_source":"arxiv_reference","pith_arxiv_id":"2402.14034","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"AgentScope: A Flexible yet Robust Multi-Agent Platform","venue":"arXiv (Cornell University)","work_id":"41f8fc1e-1e31-4adb-81fa-414f73b79d41","year":2024},"citing_paper":{"arxiv_id":"2606.18673","last_updated":"2026-06-17T04:20:00Z","snapshot_observed_at":"2026-07-06T23:54:04.739534Z","submitted_at":"2026-06-17T04:20:00Z","title":"Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-06-26T20:47:36.337189Z"},"links":{"cited_paper":"/paper/2402.14034","citing_paper":"/paper/2606.18673"},"observation_digest":"sha256:d97dd50e2172de76447a761df811735dd9a7742a15f1e689dcd49ff99887a2f2","observation_id":"377768ec-7673-4353-9fe8-e2e7bdfe30bb","resolution":{"observed_at":"2026-07-04T00:59:20.689347Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:47:36.337189Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2606.18673","last_updated":"2026-06-17T04:20:00Z","snapshot_observed_at":"2026-07-06T23:54:04.739534Z","submitted_at":"2026-06-17T04:20:00Z","title":"Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-06-26T20:47:36.337189Z"},"links":{"citing_paper":"/paper/2606.18673"},"observation_digest":"sha256:43850eda9e37a65d880f7656c1d2ab1b7e8b19751fd4524d7190938a582b3f85","observation_id":"65216aaf-2c86-4a59-abd0-e1f0b3f1c956","resolution":{"observed_at":"2026-06-26T20:47:36.337189Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.23278","last_updated":"2025-10-07T07:13:32Z","snapshot_observed_at":"2026-07-06T21:00:55.979837Z","submitted_at":"2025-03-30T01:58:22Z","title":"Model Context Protocol (MCP): Landscape, Security Threats, and Future Research Directions","version":3},"cited_work":{"arxiv_id":"2503.23278","doi":"10.48550/arxiv.2503.23278","metadata_source":"pith","pith_arxiv_id":"2503.23278","snapshot_observed_at":"2026-07-11T02:47:49.588216Z","title":"Model Context Protocol (MCP): Landscape, Security Threats, and Future Research Directions","venue":"cs.CR","work_id":"3eff6b57-ab58-474f-afd9-4e115a5818a9","year":2025},"citing_paper":{"arxiv_id":"2606.18673","last_updated":"2026-06-17T04:20:00Z","snapshot_observed_at":"2026-07-06T23:54:04.739534Z","submitted_at":"2026-06-17T04:20:00Z","title":"Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-06-26T20:47:36.337189Z"},"links":{"cited_paper":"/paper/2503.23278","citing_paper":"/paper/2606.18673"},"observation_digest":"sha256:20e042d386ae419fe7546c686712f7f8dba6fe4e0d5c6e1b1a2bda96045f8216","observation_id":"6a0f5142-a44d-4303-aff4-d5abbecbf17c","resolution":{"observed_at":"2026-07-04T00:59:20.715814Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-05-24T11:23:19.786497+00:00","source":"crossref_status_cache"},{"observed_at":"2026-05-24T11:23:19.786497+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:47:36.337189Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.18673","last_updated":"2026-06-17T04:20:00Z","snapshot_observed_at":"2026-07-06T23:54:04.739534Z","submitted_at":"2026-06-17T04:20:00Z","title":"Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-06-26T20:47:36.337189Z"},"links":{"citing_paper":"/paper/2606.18673"},"observation_digest":"sha256:c373ae0df59e508eab182b977372af25c8adefc4e7b4b593219236459453cbc8","observation_id":"39b7b011-8912-48da-87bb-1bb55caebce6","resolution":{"observed_at":"2026-06-26T20:47:36.337189Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:47:36.337189Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.18673","last_updated":"2026-06-17T04:20:00Z","snapshot_observed_at":"2026-07-06T23:54:04.739534Z","submitted_at":"2026-06-17T04:20:00Z","title":"Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-06-26T20:47:36.337189Z"},"links":{"citing_paper":"/paper/2606.18673"},"observation_digest":"sha256:7aa410d1cf1d700521a85ed24ec833f3f3c07254d504826cb379426db3f93c8c","observation_id":"c2518f57-85e2-4c7e-99b9-7de3f4907af3","resolution":{"observed_at":"2026-06-26T20:47:36.337189Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.13426","last_updated":"2025-08-27T06:38:03Z","snapshot_observed_at":"2026-08-09T13:08:16.328270Z","submitted_at":"2024-12-18T01:43:25Z","title":"PromptKeeper: Safeguarding System Prompts for LLMs","version":3},"cited_work":{"arxiv_id":"2412.13426","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2412.13426","snapshot_observed_at":"2026-07-04T00:59:20.707310Z","title":"arXiv preprint arXiv:2412.13426 , year=","venue":null,"work_id":"dae4e53e-cb9c-423c-bc75-cf06ee8a7c48","year":2024},"citing_paper":{"arxiv_id":"2606.18673","last_updated":"2026-06-17T04:20:00Z","snapshot_observed_at":"2026-07-06T23:54:04.739534Z","submitted_at":"2026-06-17T04:20:00Z","title":"Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-06-26T20:47:36.337189Z"},"links":{"cited_paper":"/paper/2412.13426","citing_paper":"/paper/2606.18673"},"observation_digest":"sha256:3e950efbffcd4d2931ac60df325bc9c8c4da848ffbcc7acea452327f80ede119","observation_id":"ee339261-ff22-468f-9e4b-838b95dd7e6a","resolution":{"observed_at":"2026-07-04T00:59:20.709661Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:47:36.337189Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2606.18673","last_updated":"2026-06-17T04:20:00Z","snapshot_observed_at":"2026-07-06T23:54:04.739534Z","submitted_at":"2026-06-17T04:20:00Z","title":"Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-06-26T20:47:36.337189Z"},"links":{"citing_paper":"/paper/2606.18673"},"observation_digest":"sha256:e06b14991ae4930962fd6fa94c68d9de4f4ed1ca03eac2ab95f21cf7ec7f2cea","observation_id":"3a54069d-7ec0-439b-87a6-1b289330b9df","resolution":{"observed_at":"2026-06-26T20:47:36.337189Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.02416","last_updated":"2025-02-12T14:52:56Z","snapshot_observed_at":"2026-08-07T07:19:45.931364Z","submitted_at":"2024-08-05T12:20:39Z","title":"Why Are My Prompts Leaked? Unraveling Prompt Extraction Threats in Customized Large Language Models","version":2},"cited_work":{"arxiv_id":"2408.02416","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2408.02416","snapshot_observed_at":"2026-07-04T00:59:20.697040Z","title":"Why are my prompts leaked? unraveling prompt extraction threats in customized large language models","venue":null,"work_id":"f62c30e5-cb3a-4ddb-9276-4f22a7543008","year":2024},"citing_paper":{"arxiv_id":"2606.18673","last_updated":"2026-06-17T04:20:00Z","snapshot_observed_at":"2026-07-06T23:54:04.739534Z","submitted_at":"2026-06-17T04:20:00Z","title":"Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-06-26T20:47:36.337189Z"},"links":{"cited_paper":"/paper/2408.02416","citing_paper":"/paper/2606.18673"},"observation_digest":"sha256:ed1c2f5a0622430261365c4d55c1c3afb778fae3151be21378ab30e89bcc8ebd","observation_id":"9a8515bc-a01e-45d7-9006-93550d9b20eb","resolution":{"observed_at":"2026-07-04T00:59:20.699931Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:47:36.337189Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2606.18673","last_updated":"2026-06-17T04:20:00Z","snapshot_observed_at":"2026-07-06T23:54:04.739534Z","submitted_at":"2026-06-17T04:20:00Z","title":"Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-06-26T20:47:36.337189Z"},"links":{"citing_paper":"/paper/2606.18673"},"observation_digest":"sha256:99a6201b751fbfad6fbc834ee515965957505c7736300b1695ecd170e8c3aa0b","observation_id":"074db26c-73a9-4261-9371-f23180fa9b31","resolution":{"observed_at":"2026-06-26T20:47:36.337189Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2306.05499","last_updated":"2025-12-29T02:25:27Z","snapshot_observed_at":"2026-07-06T15:40:27.639368Z","submitted_at":"2023-06-08T18:43:11Z","title":"Prompt Injection attack against LLM-integrated Applications","version":3},"cited_work":{"arxiv_id":"2306.05499","doi":"10.48550/arxiv.2306.05499","metadata_source":"pith","pith_arxiv_id":"2306.05499","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Prompt Injection attack against LLM-integrated Applications","venue":"cs.CR","work_id":"977b4683-bba6-49d6-8f3d-496c41cb7fac","year":2023},"citing_paper":{"arxiv_id":"2606.18673","last_updated":"2026-06-17T04:20:00Z","snapshot_observed_at":"2026-07-06T23:54:04.739534Z","submitted_at":"2026-06-17T04:20:00Z","title":"Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-06-26T20:47:36.337189Z"},"links":{"cited_paper":"/paper/2306.05499","citing_paper":"/paper/2606.18673"},"observation_digest":"sha256:eeb3390a718265867e11a900d0143ca473d847dd2f0ccfd7612a0ea828db7cd1","observation_id":"56799426-8b99-4a62-9b1e-c0b2cd3813c6","resolution":{"observed_at":"2026-07-04T00:59:20.664882Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:47:36.337189Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.18673","last_updated":"2026-06-17T04:20:00Z","snapshot_observed_at":"2026-07-06T23:54:04.739534Z","submitted_at":"2026-06-17T04:20:00Z","title":"Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-06-26T20:47:36.337189Z"},"links":{"citing_paper":"/paper/2606.18673"},"observation_digest":"sha256:a5ba2e7607343505b3070ca0f4bacb16620db9d3cca29c05cc78b2c0cf23b5a9","observation_id":"2ce12970-1d18-4e97-9091-66415c8e8fd3","resolution":{"observed_at":"2026-06-26T20:47:36.337189Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:47:36.337189Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.18673","last_updated":"2026-06-17T04:20:00Z","snapshot_observed_at":"2026-07-06T23:54:04.739534Z","submitted_at":"2026-06-17T04:20:00Z","title":"Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-06-26T20:47:36.337189Z"},"links":{"citing_paper":"/paper/2606.18673"},"observation_digest":"sha256:b4a48156784835e74d2c7ac8566566f91db5978b6556fdbd813b88b8672625b4","observation_id":"2863930b-93dd-47cc-9701-74662d5a8038","resolution":{"observed_at":"2026-06-26T20:47:36.337189Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:47:36.337189Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.18673","last_updated":"2026-06-17T04:20:00Z","snapshot_observed_at":"2026-07-06T23:54:04.739534Z","submitted_at":"2026-06-17T04:20:00Z","title":"Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-06-26T20:47:36.337189Z"},"links":{"citing_paper":"/paper/2606.18673"},"observation_digest":"sha256:b0c7f8f56efc2f5ce63daae9076f36bea9b35c9b80ca8ac175e50d6b732d9572","observation_id":"818d623b-65c6-4dae-ab2b-c7d2b3cae25d","resolution":{"observed_at":"2026-06-26T20:47:36.337189Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2510.09023","last_updated":"2025-10-10T05:51:04Z","snapshot_observed_at":"2026-08-03T03:11:42.084785Z","submitted_at":"2025-10-10T05:51:04Z","title":"The Attacker Moves Second: Stronger Adaptive Attacks Bypass Defenses Against Llm Jailbreaks and Prompt Injections","version":1},"cited_work":{"arxiv_id":"2510.09023","doi":"10.48550/arxiv.2510.09023","metadata_source":"pith","pith_arxiv_id":"2510.09023","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"The Attacker Moves Second: Stronger Adaptive Attacks Bypass Defenses Against Llm Jailbreaks and Prompt Injections","venue":"cs.LG","work_id":"585d66b7-a25c-4390-a7c8-8b15064c122f","year":2025},"citing_paper":{"arxiv_id":"2606.18673","last_updated":"2026-06-17T04:20:00Z","snapshot_observed_at":"2026-07-06T23:54:04.739534Z","submitted_at":"2026-06-17T04:20:00Z","title":"Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-06-26T20:47:36.337189Z"},"links":{"cited_paper":"/paper/2510.09023","citing_paper":"/paper/2606.18673"},"observation_digest":"sha256:686f923201ccc871034b69876ca47f5e56841e95db1d54bf5dd2175e5f000c6e","observation_id":"cbc2a353-4866-428a-b988-6a0b25275110","resolution":{"observed_at":"2026-07-04T00:59:20.677385Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:47:36.337189Z","title":"2024.GPTs","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.18673","last_updated":"2026-06-17T04:20:00Z","snapshot_observed_at":"2026-07-06T23:54:04.739534Z","submitted_at":"2026-06-17T04:20:00Z","title":"Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-06-26T20:47:36.337189Z"},"links":{"citing_paper":"/paper/2606.18673"},"observation_digest":"sha256:9c69788db63402d3b5cb3e189950adbbda8184fe0e549ff59ff3a8aab2ed8fe1","observation_id":"d401dd89-86b7-44ca-a7d3-6b25329a3b06","resolution":{"observed_at":"2026-06-26T20:47:36.337189Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:47:36.337189Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.18673","last_updated":"2026-06-17T04:20:00Z","snapshot_observed_at":"2026-07-06T23:54:04.739534Z","submitted_at":"2026-06-17T04:20:00Z","title":"Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-06-26T20:47:36.337189Z"},"links":{"citing_paper":"/paper/2606.18673"},"observation_digest":"sha256:0505c585820654b58f582ecab9f152ca35349b1ac741304a6986c4930ed06376","observation_id":"330dfc4b-56b6-4f5b-9ed2-1aa7186ac1b2","resolution":{"observed_at":"2026-06-26T20:47:36.337189Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:47:36.337189Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.18673","last_updated":"2026-06-17T04:20:00Z","snapshot_observed_at":"2026-07-06T23:54:04.739534Z","submitted_at":"2026-06-17T04:20:00Z","title":"Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-06-26T20:47:36.337189Z"},"links":{"citing_paper":"/paper/2606.18673"},"observation_digest":"sha256:338a1cfc891d22ae92cec6ff869c02376c60779a4a3fc7484d0a2e9f08c00d7c","observation_id":"25804b1c-d72d-4047-9673-3fedf20fa8a2","resolution":{"observed_at":"2026-06-26T20:47:36.337189Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2211.09527","last_updated":"2022-11-17T13:43:20Z","snapshot_observed_at":"2026-07-06T14:19:47.424778Z","submitted_at":"2022-11-17T13:43:20Z","title":"Ignore Previous Prompt: Attack Techniques For Language Models","version":1},"cited_work":{"arxiv_id":"2211.09527","doi":"10.48550/arxiv.2211.09527","metadata_source":"pith","pith_arxiv_id":"2211.09527","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Ignore Previous Prompt: Attack Techniques For Language Models","venue":"cs.CL","work_id":"a7c5b6ec-3407-4330-96c8-3fc58e7d410b","year":2022},"citing_paper":{"arxiv_id":"2606.18673","last_updated":"2026-06-17T04:20:00Z","snapshot_observed_at":"2026-07-06T23:54:04.739534Z","submitted_at":"2026-06-17T04:20:00Z","title":"Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-06-26T20:47:36.337189Z"},"links":{"cited_paper":"/paper/2211.09527","citing_paper":"/paper/2606.18673"},"observation_digest":"sha256:9b8ba9e029d2a803a5f31c52a2885b57852c03edb46f892c4e346da535a334c5","observation_id":"c9441acd-cdda-49d3-ad46-325ccac32332","resolution":{"observed_at":"2026-07-04T00:59:20.678348Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-05-24T11:53:03.018758+00:00","source":"crossref_status_cache"},{"observed_at":"2026-05-24T11:53:03.018758+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:47:36.337189Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.18673","last_updated":"2026-06-17T04:20:00Z","snapshot_observed_at":"2026-07-06T23:54:04.739534Z","submitted_at":"2026-06-17T04:20:00Z","title":"Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-06-26T20:47:36.337189Z"},"links":{"citing_paper":"/paper/2606.18673"},"observation_digest":"sha256:6e6363f1904a159c20dafa4cea652d84de2c48e12415c437e98564712697b098","observation_id":"f1f24637-f9eb-4d2b-8861-770f450f62e0","resolution":{"observed_at":"2026-06-26T20:47:36.337189Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.05946","last_updated":"2024-06-10T00:35:23Z","snapshot_observed_at":"2026-08-08T03:05:18.803803Z","submitted_at":"2024-06-10T00:35:23Z","title":"Safety Alignment Should Be Made More Than Just a Few Tokens Deep","version":1},"cited_work":{"arxiv_id":"2406.05946","doi":"10.48550/arxiv.2406.05946","metadata_source":"arxiv_reference","pith_arxiv_id":"2406.05946","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Safety alignment should be made more than just a few tokens deep","venue":"arXiv (Cornell University)","work_id":"40539ea6-b6ba-4195-971b-53c52efa9597","year":2024},"citing_paper":{"arxiv_id":"2606.18673","last_updated":"2026-06-17T04:20:00Z","snapshot_observed_at":"2026-07-06T23:54:04.739534Z","submitted_at":"2026-06-17T04:20:00Z","title":"Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-06-26T20:47:36.337189Z"},"links":{"cited_paper":"/paper/2406.05946","citing_paper":"/paper/2606.18673"},"observation_digest":"sha256:6917ee6a1d8344371523d03ae35e247554526169e563c2cf7ecfa674ce0b05b5","observation_id":"3509ee17-abb0-4704-ad67-20241ed6968e","resolution":{"observed_at":"2026-07-04T00:59:20.668111Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:47:36.337189Z","title":"2024.Poe","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.18673","last_updated":"2026-06-17T04:20:00Z","snapshot_observed_at":"2026-07-06T23:54:04.739534Z","submitted_at":"2026-06-17T04:20:00Z","title":"Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-06-26T20:47:36.337189Z"},"links":{"citing_paper":"/paper/2606.18673"},"observation_digest":"sha256:b724e9469c2f3eaf3cd18dcc4d9169f884fde7f0a02fa8a07466d9eebbb77775","observation_id":"2e84c2b2-f205-4670-925d-5a53da0a57b8","resolution":{"observed_at":"2026-06-26T20:47:36.337189Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:47:36.337189Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.18673","last_updated":"2026-06-17T04:20:00Z","snapshot_observed_at":"2026-07-06T23:54:04.739534Z","submitted_at":"2026-06-17T04:20:00Z","title":"Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-06-26T20:47:36.337189Z"},"links":{"citing_paper":"/paper/2606.18673"},"observation_digest":"sha256:f904695a2c87989b6792961866751774fdeb966fe7e4349b1a078107ee40ef72","observation_id":"4211fcd1-f37d-4bad-8912-c5e766c079c2","resolution":{"observed_at":"2026-06-26T20:47:36.337189Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:47:36.337189Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.18673","last_updated":"2026-06-17T04:20:00Z","snapshot_observed_at":"2026-07-06T23:54:04.739534Z","submitted_at":"2026-06-17T04:20:00Z","title":"Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-06-26T20:47:36.337189Z"},"links":{"citing_paper":"/paper/2606.18673"},"observation_digest":"sha256:0a02e89dc7b27847fe90b47d4146953469d39b6edabbede57e3cd7551c766835","observation_id":"efc56708-84ad-452c-923e-4daf22b4c7a5","resolution":{"observed_at":"2026-06-26T20:47:36.337189Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.17762","last_updated":"2024-08-14T16:00:49Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-02-27T18:55:17Z","title":"Massive Activations in Large Language Models","version":2},"cited_work":{"arxiv_id":"2402.17762","doi":"10.48550/arxiv.2402.17762","metadata_source":"pith","pith_arxiv_id":"2402.17762","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Massive Activations in Large Language Models","venue":"cs.CL","work_id":"a8da768a-7f38-4db5-912b-4d5b7581c8dd","year":2024},"citing_paper":{"arxiv_id":"2606.18673","last_updated":"2026-06-17T04:20:00Z","snapshot_observed_at":"2026-07-06T23:54:04.739534Z","submitted_at":"2026-06-17T04:20:00Z","title":"Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-06-26T20:47:36.337189Z"},"links":{"cited_paper":"/paper/2402.17762","citing_paper":"/paper/2606.18673"},"observation_digest":"sha256:aca197f534cb6bb7ef4fd2303735a6c3dc14d1151c1317592adfc2b2b180aea4","observation_id":"f5782f62-4696-4b0c-b7ce-bd0696b564f7","resolution":{"observed_at":"2026-07-04T00:59:20.670950Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-05-25T12:53:24.227166+00:00","source":"crossref_status_cache"},{"observed_at":"2026-05-25T12:53:24.227166+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:47:36.337189Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.18673","last_updated":"2026-06-17T04:20:00Z","snapshot_observed_at":"2026-07-06T23:54:04.739534Z","submitted_at":"2026-06-17T04:20:00Z","title":"Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-06-26T20:47:36.337189Z"},"links":{"citing_paper":"/paper/2606.18673"},"observation_digest":"sha256:860f87bccee7a51df73e1bd0c12e175d38d559c75a1ff31c70d34d44aeb2fb4d","observation_id":"e29a2dbb-dde2-49ae-a34d-990054d13bf7","resolution":{"observed_at":"2026-06-26T20:47:36.337189Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:47:36.337189Z","title":"2025.Yuanqi Agent Shop","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.18673","last_updated":"2026-06-17T04:20:00Z","snapshot_observed_at":"2026-07-06T23:54:04.739534Z","submitted_at":"2026-06-17T04:20:00Z","title":"Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-06-26T20:47:36.337189Z"},"links":{"citing_paper":"/paper/2606.18673"},"observation_digest":"sha256:05632cc56234df5030dac3fbb1650c4764bc4cde372e366026a88635c045838d","observation_id":"63c245b3-f6c2-418c-b186-8b20854d1ada","resolution":{"observed_at":"2026-06-26T20:47:36.337189Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:47:36.337189Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2606.18673","last_updated":"2026-06-17T04:20:00Z","snapshot_observed_at":"2026-07-06T23:54:04.739534Z","submitted_at":"2026-06-17T04:20:00Z","title":"Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-06-26T20:47:36.337189Z"},"links":{"citing_paper":"/paper/2606.18673"},"observation_digest":"sha256:bbb513dbdf4bba0753a8176005464bf8c3053a3511f351765211a0d6bc2cc51e","observation_id":"1e574be8-b467-4ff1-bfb5-cc78b23f8ba3","resolution":{"observed_at":"2026-06-26T20:47:36.337189Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:47:36.337189Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.18673","last_updated":"2026-06-17T04:20:00Z","snapshot_observed_at":"2026-07-06T23:54:04.739534Z","submitted_at":"2026-06-17T04:20:00Z","title":"Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-06-26T20:47:36.337189Z"},"links":{"citing_paper":"/paper/2606.18673"},"observation_digest":"sha256:d543f6f73db4d189b1947709892426b7fb01c9271985912cd3331daec1ce7fbb","observation_id":"52ef799b-89bb-406a-a7fa-345a4f2306f8","resolution":{"observed_at":"2026-06-26T20:47:36.337189Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:47:36.337189Z","title":"Willison","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2606.18673","last_updated":"2026-06-17T04:20:00Z","snapshot_observed_at":"2026-07-06T23:54:04.739534Z","submitted_at":"2026-06-17T04:20:00Z","title":"Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-06-26T20:47:36.337189Z"},"links":{"citing_paper":"/paper/2606.18673"},"observation_digest":"sha256:9d2940380d0832541353eec2b0def6c22da2795bc3c32a6b25c63066424ca14e","observation_id":"92ee5b35-a4ca-43dc-b3ee-9382059844e1","resolution":{"observed_at":"2026-06-26T20:47:36.337189Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:47:36.337189Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.18673","last_updated":"2026-06-17T04:20:00Z","snapshot_observed_at":"2026-07-06T23:54:04.739534Z","submitted_at":"2026-06-17T04:20:00Z","title":"Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-06-26T20:47:36.337189Z"},"links":{"citing_paper":"/paper/2606.18673"},"observation_digest":"sha256:447634efb13e3ae57b8fb7690962631b26e969d269d3b833a2abf62cd8edd859","observation_id":"8f138235-6714-4249-ae36-849339ba0653","resolution":{"observed_at":"2026-06-26T20:47:36.337189Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:47:36.337189Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.18673","last_updated":"2026-06-17T04:20:00Z","snapshot_observed_at":"2026-07-06T23:54:04.739534Z","submitted_at":"2026-06-17T04:20:00Z","title":"Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-06-26T20:47:36.337189Z"},"links":{"citing_paper":"/paper/2606.18673"},"observation_digest":"sha256:5a961b45fb49d3f2a6516f86e1ddfec137c3e0eb9a2300eb4bbe21edf1c60383","observation_id":"20a4b8be-8f87-487d-8de3-42c53806e4e4","resolution":{"observed_at":"2026-06-26T20:47:36.337189Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.11538","last_updated":"2024-05-25T05:32:39Z","snapshot_observed_at":"2026-08-04T02:40:34.940411Z","submitted_at":"2023-11-20T04:56:46Z","title":"Assessing Prompt Injection Risks in 200+ Custom GPTs","version":2},"cited_work":{"arxiv_id":"2311.11538","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2311.11538","snapshot_observed_at":"2026-07-04T00:59:20.702254Z","title":"”Assessing prompt injection risks in 200+ custom gpts.” arXiv preprint arXiv:2311.11538 (2023)","venue":null,"work_id":"3bedeade-8c9f-4869-927d-abe396d8eca1","year":2023},"citing_paper":{"arxiv_id":"2606.18673","last_updated":"2026-06-17T04:20:00Z","snapshot_observed_at":"2026-07-06T23:54:04.739534Z","submitted_at":"2026-06-17T04:20:00Z","title":"Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-06-26T20:47:36.337189Z"},"links":{"cited_paper":"/paper/2311.11538","citing_paper":"/paper/2606.18673"},"observation_digest":"sha256:46a0e69153250256a672648a8b19592d611a2c88f6cb84f821adc7dc3d6e2177","observation_id":"9de387fa-9088-4852-b0d9-0c5adcd07de0","resolution":{"observed_at":"2026-07-04T00:59:20.705055Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:47:36.337189Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.18673","last_updated":"2026-06-17T04:20:00Z","snapshot_observed_at":"2026-07-06T23:54:04.739534Z","submitted_at":"2026-06-17T04:20:00Z","title":"Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-06-26T20:47:36.337189Z"},"links":{"citing_paper":"/paper/2606.18673"},"observation_digest":"sha256:40d39ddfe9d9b82cf5bec1a44d5e041d59036dec345784546bfa947da2add12a","observation_id":"d8756bd3-cbf4-44cc-9a68-ac534f5c1c58","resolution":{"observed_at":"2026-06-26T20:47:36.337189Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.06865","last_updated":"2024-08-07T22:05:01Z","snapshot_observed_at":"2026-08-07T22:01:02.608714Z","submitted_at":"2023-07-13T16:15:08Z","title":"Effective Prompt Extraction from Language Models","version":3},"cited_work":{"arxiv_id":"2307.06865","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2307.06865","snapshot_observed_at":"2026-07-04T02:09:22.506605Z","title":"Prompts should not be seen as secrets: Systematically measuring prompt extraction attack success","venue":null,"work_id":"33e44303-8d83-4688-a95b-13395c7b3180","year":2023},"citing_paper":{"arxiv_id":"2606.18673","last_updated":"2026-06-17T04:20:00Z","snapshot_observed_at":"2026-07-06T23:54:04.739534Z","submitted_at":"2026-06-17T04:20:00Z","title":"Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-06-26T20:47:36.337189Z"},"links":{"cited_paper":"/paper/2307.06865","citing_paper":"/paper/2606.18673"},"observation_digest":"sha256:f39db5ebe8500911289f5235bf95c536e67e56e9c5476e3a4a472f0ffae0bea8","observation_id":"d9cc16ba-6afd-4338-9490-5bb763ea5a77","resolution":{"observed_at":"2026-07-04T00:59:20.721166Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:47:36.337189Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2606.18673","last_updated":"2026-06-17T04:20:00Z","snapshot_observed_at":"2026-07-06T23:54:04.739534Z","submitted_at":"2026-06-17T04:20:00Z","title":"Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications","version":1},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-06-26T20:47:36.337189Z"},"links":{"citing_paper":"/paper/2606.18673"},"observation_digest":"sha256:22a427123771297ef62b9b4d81b4c644d54e00c2d6161fdd7ea0780048288595","observation_id":"278f6687-547a-49ee-b30d-38148ecd3689","resolution":{"observed_at":"2026-06-26T20:47:36.337189Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-07-06T15:59:23.019044Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":"2307.15043","doi":"10.48550/arxiv.2307.15043","metadata_source":"pith","pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","venue":"cs.CL","work_id":"3322fa86-1768-4677-8425-dd326b45e078","year":2023},"citing_paper":{"arxiv_id":"2606.18673","last_updated":"2026-06-17T04:20:00Z","snapshot_observed_at":"2026-07-06T23:54:04.739534Z","submitted_at":"2026-06-17T04:20:00Z","title":"Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications","version":1},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-06-26T20:47:36.337189Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2606.18673"},"observation_digest":"sha256:3326e5300f055abb2dbbf33866290a99e0e6bb819064e707afc3ab3b6c9b24f4","observation_id":"c6aca8dc-21a5-44c4-9161-be2d01995c18","resolution":{"observed_at":"2026-07-04T00:59:20.725940Z","resolver_source":"local_arxiv","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-07-15T23:50:40.271168+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-15T23:50:40.271168+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2606.18673","last_updated":"2026-06-17T04:20:00Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-07-06T23:54:04.739534Z","submitted_at":"2026-06-17T04:20:00Z","title":"Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications"},"reference_resolution":{"displayed":70,"state_counts":{"malformed_identifier":1,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":56,"verified_exact":13,"verified_fuzzy":0},"total_outbound_references":70},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"thesis":"As of 10 August 2026, this Paper Citation Record lists 70 of 70 outbound references and 0 inbound Pith citation observations for arXiv:2606.18673."}