Pith. sign in

Paper Citation Record · LEDGER

CodeSentinel: A Three-Layer Defense Against Indirect Prompt Injection in Code Contexts

As of 6 August 2026, this Paper Citation Record lists 26 of 26 outbound references and 0 inbound Pith citation observations for arXiv:2606.19235.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2606.19235 v1

Coverage vector

measured 26 of 26 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-06-26T20:16:13.523721Z

measured 26 of 26 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-06T06:34:29.942622+00:00

measured 0 of 0 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: cited_works

Reference resolution

26 of 26 outbound references displayed

  • verified exact0
  • verified fuzzy0
  • unresolved24
  • parse uncertain0
  • malformed identifier0
  • metadata mismatch2

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation 5e93be94-edcb-4050-b97a-2370c49fbc62 · outbound

This paper cites Journal of Systems and Software , volume =.

CodeSentinel: A Three-Layer Defense Against Indirect Prompt Injection in Code Contexts Journal of Systems and Software , volume =

Reference 1

Resolution
unresolved
no resolver link, observed 2026-06-26T20:16:13.523721Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-06-26T20:16:13.523721Z digest=sha256:a15f45c06bdea9b7119c0161166ae77bae9e7b98ef431b03ce011d3f7744ee77

Observation 1632e401-05e3-448c-9430-d60f347b090a · outbound

This paper cites an unresolved cited work.

CodeSentinel: A Three-Layer Defense Against Indirect Prompt Injection in Code Contexts Unresolved cited work

Reference 2

Resolution
unresolved
no resolver link, observed 2026-06-26T20:16:13.523721Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-06-26T20:16:13.523721Z digest=sha256:a3179657c09282406c762f84dc5fee62924e68f88c65347af3eb388edd64d1d9

Observation 16f92cf5-eee4-4f5d-9f7f-fc2fcf24ab30 · outbound

This paper cites Program Synthesis with Large Language Models.

CodeSentinel: A Three-Layer Defense Against Indirect Prompt Injection in Code Contexts Program Synthesis with Large Language Models

Reference 3

Resolution
metadata mismatch
local_arxiv, observed 2026-07-04T01:39:24.972029Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

source=arxiv_source observed=2026-06-26T20:16:13.523721Z digest=sha256:52e73e6de50204354b583a0f5b6f314d074642d14454025b1e5d9fb3ab38444e

Observation 5f20f5bf-3cbb-4a27-bfab-31e66e7849fe · outbound

This paper cites RepoBench: Benchmarking Repository-Level Code Auto-Completion Systems , url =.

CodeSentinel: A Three-Layer Defense Against Indirect Prompt Injection in Code Contexts RepoBench: Benchmarking Repository-Level Code Auto-Completion Systems , url =

Reference 4

Resolution
unresolved
no resolver link, observed 2026-06-26T20:16:13.523721Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-06-26T20:16:13.523721Z digest=sha256:5e5b6b8c5305db2a9aa195e32f22dc0deadcad9fb1257b75dec809d8081a0e9f

Observation 35025dee-cbce-41ae-a673-e2cb53d6c042 · outbound

This paper cites Evaluating Large Language Models Trained on Code.

CodeSentinel: A Three-Layer Defense Against Indirect Prompt Injection in Code Contexts Evaluating Large Language Models Trained on Code

Reference 5

Resolution
metadata mismatch
local_arxiv, observed 2026-07-04T01:39:24.975528Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

source=arxiv_source observed=2026-06-26T20:16:13.523721Z digest=sha256:8cbf109dd7e95c97a9d6a871f28e6f6377c5c5d2e50956f90affb83e8e4908c9

Observation ad0386ea-45f0-4f8f-aaff-80526ec41384 · outbound

This paper cites Iterative.

CodeSentinel: A Three-Layer Defense Against Indirect Prompt Injection in Code Contexts Iterative

Reference 6

Resolution
unresolved
no resolver link, observed 2026-06-26T20:16:13.523721Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-06-26T20:16:13.523721Z digest=sha256:bcf8f66094ef34991b06b731daf6422f863a9a5d98efa01d594e69b991afb639

Observation d528fb18-45d3-45cd-9b6d-e26ad95a42be · outbound

This paper cites an unresolved cited work.

CodeSentinel: A Three-Layer Defense Against Indirect Prompt Injection in Code Contexts Unresolved cited work

Reference 7

Resolution
unresolved
no resolver link, observed 2026-06-26T20:16:13.523721Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-06-26T20:16:13.523721Z digest=sha256:24132fda96c87fa230da4a776850a7bec3f52e322be62845da688a3426a32cbf

Observation 2c858e47-eaa2-4c4c-9f61-46b16c4aa63a · outbound

This paper cites an unresolved cited work.

CodeSentinel: A Three-Layer Defense Against Indirect Prompt Injection in Code Contexts Unresolved cited work

Reference 8

Resolution
unresolved
no resolver link, observed 2026-06-26T20:16:13.523721Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-06-26T20:16:13.523721Z digest=sha256:a8840d639140655403565817e096b57ccab737c2e44423d93665902bfd1cf732

Observation 5b808625-f928-47a0-beb0-d5ce62b4f4a9 · outbound

This paper cites an unresolved cited work.

CodeSentinel: A Three-Layer Defense Against Indirect Prompt Injection in Code Contexts Unresolved cited work

Reference 9

Resolution
unresolved
no resolver link, observed 2026-06-26T20:16:13.523721Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-06-26T20:16:13.523721Z digest=sha256:ef49d11f6744a0f2057fc2c96f109a7220703e282095dab256e09578e871d6d4

Observation f9cfd1a9-7a8f-4e21-b295-ab48af6665e4 · outbound

This paper cites an unresolved cited work.

CodeSentinel: A Three-Layer Defense Against Indirect Prompt Injection in Code Contexts Unresolved cited work

Reference 10

Resolution
unresolved
no resolver link, observed 2026-06-26T20:16:13.523721Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-06-26T20:16:13.523721Z digest=sha256:880df9a647081065ffcda6f572715c911b8189b1ea637f0981fbbf3ab86b78a0

Observation 133af8ca-7c18-4694-bcc3-a02c7bccd275 · outbound

This paper cites and Yu, Tianjiao and Diwan, Nirav and Wang, Gang and Hakkani-Tür, Dilek and Lourentzou, Ismini , year =.

CodeSentinel: A Three-Layer Defense Against Indirect Prompt Injection in Code Contexts and Yu, Tianjiao and Diwan, Nirav and Wang, Gang and Hakkani-Tür, Dilek and Lourentzou, Ismini , year =

Reference 11

Resolution
unresolved
no resolver link, observed 2026-06-26T20:16:13.523721Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-06-26T20:16:13.523721Z digest=sha256:79dc6911ab5e4a9604109dea6bef59b0dbca060d77fd03e9a9fd8acf6fc90e66

Observation 5d76e524-c2e4-4220-b876-dea499ed614e · outbound

This paper cites an unresolved cited work.

CodeSentinel: A Three-Layer Defense Against Indirect Prompt Injection in Code Contexts Unresolved cited work

Reference 12

Resolution
unresolved
no resolver link, observed 2026-06-26T20:16:13.523721Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-06-26T20:16:13.523721Z digest=sha256:1066abdab6f5cc34d8c82f6e49013d8e6d1f116c74267d70c12f52185889188f

Observation 6db50adb-1a21-42eb-9b0d-88c1582b27d1 · outbound

This paper cites 2026 , eprint=.

CodeSentinel: A Three-Layer Defense Against Indirect Prompt Injection in Code Contexts 2026 , eprint=

Reference 13

Resolution
unresolved
no resolver link, observed 2026-06-26T20:16:13.523721Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-06-26T20:16:13.523721Z digest=sha256:f0f75bfd070ccaee41a6b09ad2cdc4a24995fd3ef1394b573839a6992862613a

Observation 3d7f443f-cf11-46d1-a0f0-615583284809 · outbound

This paper cites I njec A gent: Benchmarking Indirect Prompt Injections in Tool-Integrated Large Language Model Agents.

CodeSentinel: A Three-Layer Defense Against Indirect Prompt Injection in Code Contexts I njec A gent: Benchmarking Indirect Prompt Injections in Tool-Integrated Large Language Model Agents

Reference 14

Resolution
unresolved
no resolver link, observed 2026-06-26T20:16:13.523721Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-06-26T20:16:13.523721Z digest=sha256:172404e5d6c115ecb7b3b6c1c1460e66aba8534bb09e8fe829b3679df4f01bd5

Observation 034db5d1-268c-4383-97ee-251831eb4327 · outbound

This paper cites ACM SIGKDD Conference on Knowledge Discovery and Data Mining , author =.

CodeSentinel: A Three-Layer Defense Against Indirect Prompt Injection in Code Contexts ACM SIGKDD Conference on Knowledge Discovery and Data Mining , author =

Reference 15

Resolution
unresolved
no resolver link, observed 2026-06-26T20:16:13.523721Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-06-26T20:16:13.523721Z digest=sha256:309e2949271f6c2a536a4319db5d89c85118738893fbf1b6d2b484d72650c868

Observation ca25e02e-15f0-4ad1-b946-389cba6c6568 · outbound

This paper cites Defending against Indirect Prompt Injection by Instruction Detection , url =.

CodeSentinel: A Three-Layer Defense Against Indirect Prompt Injection in Code Contexts Defending against Indirect Prompt Injection by Instruction Detection , url =

Reference 16

Resolution
unresolved
no resolver link, observed 2026-06-26T20:16:13.523721Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-06-26T20:16:13.523721Z digest=sha256:ff8f0bfd126f615c73f450a1dba3040a9be50216648d0b76fc25a0ccb05c136a

Observation ea0fa343-3951-41e4-9cf6-1333ddbedb27 · outbound

This paper cites an unresolved cited work.

CodeSentinel: A Three-Layer Defense Against Indirect Prompt Injection in Code Contexts Unresolved cited work

Reference 17

Resolution
unresolved
no resolver link, observed 2026-06-26T20:16:13.523721Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-06-26T20:16:13.523721Z digest=sha256:8ecd3cbf2635bc5eee522ea246f8cae62356108b66612cea864b7d421cfaf617

Observation 9ea20310-b0fb-4d8c-a9a4-eebce8d69f3f · outbound

This paper cites an unresolved cited work.

CodeSentinel: A Three-Layer Defense Against Indirect Prompt Injection in Code Contexts Unresolved cited work

Reference 18

Resolution
unresolved
no resolver link, observed 2026-06-26T20:16:13.523721Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-06-26T20:16:13.523721Z digest=sha256:9ed90d0e7e047992913344cff2e20e0090261aa85395ad3d4690ba6f08da1e58

Observation 706cef02-bc5e-4f93-a41a-a1ad98a7f69a · outbound

This paper cites UniGuardian: A Unified Defense for Detecting Prompt Injection, Backdoor Attacks and Adversarial Attacks in Large Language Models , url =.

CodeSentinel: A Three-Layer Defense Against Indirect Prompt Injection in Code Contexts UniGuardian: A Unified Defense for Detecting Prompt Injection, Backdoor Attacks and Adversarial Attacks in Large Language Models , url =

Reference 19

Resolution
unresolved
no resolver link, observed 2026-06-26T20:16:13.523721Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-06-26T20:16:13.523721Z digest=sha256:204b58449cd4ffae7407e3d53118f8ebac75177f821057c93ad9bcddaa3538c6

Observation 2dcd65a3-a3fc-4ab6-8924-c9cd7ee941a3 · outbound

This paper cites Smoke and.

CodeSentinel: A Three-Layer Defense Against Indirect Prompt Injection in Code Contexts Smoke and

Reference 20

Resolution
unresolved
no resolver link, observed 2026-06-26T20:16:13.523721Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-06-26T20:16:13.523721Z digest=sha256:b9b3904ec685ad5c6a5f58a603cfca4e6c78062ee0b6791f59606dac1efa3b1a

Observation 15fca555-4743-4960-8a28-6937723cca5e · outbound

This paper cites an unresolved cited work.

CodeSentinel: A Three-Layer Defense Against Indirect Prompt Injection in Code Contexts Unresolved cited work

Reference 21

Resolution
unresolved
no resolver link, observed 2026-06-26T20:16:13.523721Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-06-26T20:16:13.523721Z digest=sha256:41115499d225785f6c1b5888206c0862852897950c0a8a1218f6356bab68c8ec

Observation dcb04767-57ef-4fab-8d04-73c2a73cc03a · outbound

This paper cites an unresolved cited work.

CodeSentinel: A Three-Layer Defense Against Indirect Prompt Injection in Code Contexts Unresolved cited work

Reference 22

Resolution
unresolved
no resolver link, observed 2026-06-26T20:16:13.523721Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-06-26T20:16:13.523721Z digest=sha256:58418662021597a55227bde6e04d97f2201cdf778850f99d713fdb3a94fa8b6a

Observation 1d2c5ee9-bda6-4bcc-8895-5fe06c7aedbc · outbound

This paper cites an unresolved cited work.

CodeSentinel: A Three-Layer Defense Against Indirect Prompt Injection in Code Contexts Unresolved cited work

Reference 23

Resolution
unresolved
no resolver link, observed 2026-06-26T20:16:13.523721Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-06-26T20:16:13.523721Z digest=sha256:cdfae2f48425518c76cebb5132c2422ba6e9975bc97a388f5a74703a0be6f53c

Observation c803c800-894d-4c41-967b-b8ff456d2ac6 · outbound

This paper cites an unresolved cited work.

CodeSentinel: A Three-Layer Defense Against Indirect Prompt Injection in Code Contexts Unresolved cited work

Reference 24

Resolution
unresolved
no resolver link, observed 2026-06-26T20:16:13.523721Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-06-26T20:16:13.523721Z digest=sha256:c618ffdcb24838840b1e82fcd8cdbb699e26fcb08d7e68d16921c6d0a22b4699

Observation f6d044e0-b107-4fd0-b848-20a8be31bf8b · outbound

This paper cites an unresolved cited work.

CodeSentinel: A Three-Layer Defense Against Indirect Prompt Injection in Code Contexts Unresolved cited work

Reference 25

Resolution
unresolved
no resolver link, observed 2026-06-26T20:16:13.523721Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-06-26T20:16:13.523721Z digest=sha256:726c1cebd5eb671b60de06ab489264cb1b5e1415d6f609b5cd514693ffb73cf7

Observation 5be52c82-d625-4f59-941d-d86b538e0a53 · outbound

This paper cites Defeating.

CodeSentinel: A Three-Layer Defense Against Indirect Prompt Injection in Code Contexts Defeating

Reference 26

Resolution
unresolved
no resolver link, observed 2026-06-26T20:16:13.523721Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-06-26T20:16:13.523721Z digest=sha256:aa92095f8dcd55f0ed77ef34f61a8a377a6d77f2702601954a92bbe11951ab10

Pith citing papers

No inbound Pith citation observations are available.