{"as_of":"2026-08-06T14:42:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:d84dd6316f33ed5e26d2aa00a3628bea58089b979d9600c4140d66c83c1d481a","coverage":[{"denominator":26,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":26,"source":"paper_references, paper_reference_links","source_observed_at":"2026-06-26T20:16:13.523721Z","state":"measured"},{"denominator":26,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":26,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-06T06:34:29.942622+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2606.19235/citation-record","integrity":"/paper/2606.19235/integrity","json":"/paper/2606.19235/citation-record.json","paper":"/paper/2606.19235"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:16:13.523721Z","title":"Journal of Systems and Software , volume =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.19235","last_updated":"2026-06-17T16:12:50Z","snapshot_observed_at":"2026-07-06T23:54:32.815760Z","submitted_at":"2026-06-17T16:12:50Z","title":"CodeSentinel: A Three-Layer Defense Against Indirect Prompt Injection in Code Contexts","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-06-26T20:16:13.523721Z"},"links":{"citing_paper":"/paper/2606.19235"},"observation_digest":"sha256:a15f45c06bdea9b7119c0161166ae77bae9e7b98ef431b03ce011d3f7744ee77","observation_id":"5e93be94-edcb-4050-b97a-2370c49fbc62","resolution":{"observed_at":"2026-06-26T20:16:13.523721Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:16:13.523721Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.19235","last_updated":"2026-06-17T16:12:50Z","snapshot_observed_at":"2026-07-06T23:54:32.815760Z","submitted_at":"2026-06-17T16:12:50Z","title":"CodeSentinel: A Three-Layer Defense Against Indirect Prompt Injection in Code Contexts","version":1},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-06-26T20:16:13.523721Z"},"links":{"citing_paper":"/paper/2606.19235"},"observation_digest":"sha256:a3179657c09282406c762f84dc5fee62924e68f88c65347af3eb388edd64d1d9","observation_id":"1632e401-05e3-448c-9430-d60f347b090a","resolution":{"observed_at":"2026-06-26T20:16:13.523721Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2108.07732","last_updated":"2021-08-16T03:57:30Z","snapshot_observed_at":"2026-08-02T19:23:53.535075Z","submitted_at":"2021-08-16T03:57:30Z","title":"Program Synthesis with Large Language Models","version":1},"cited_work":{"arxiv_id":"2108.07732","doi":"10.1007/s11390-025-5518-5","metadata_source":"pith","pith_arxiv_id":"2108.07732","snapshot_observed_at":"2026-07-11T11:50:26.030339Z","title":"Program Synthesis with Large Language Models","venue":"cs.PL","work_id":"fd241a05-03b9-4de2-9588-9d77ce176125","year":2021},"citing_paper":{"arxiv_id":"2606.19235","last_updated":"2026-06-17T16:12:50Z","snapshot_observed_at":"2026-07-06T23:54:32.815760Z","submitted_at":"2026-06-17T16:12:50Z","title":"CodeSentinel: A Three-Layer Defense Against Indirect Prompt Injection in Code Contexts","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-06-26T20:16:13.523721Z"},"links":{"cited_paper":"/paper/2108.07732","citing_paper":"/paper/2606.19235"},"observation_digest":"sha256:52e73e6de50204354b583a0f5b6f314d074642d14454025b1e5d9fb3ab38444e","observation_id":"16f92cf5-eee4-4f5d-9f7f-fc2fcf24ab30","resolution":{"observed_at":"2026-07-04T01:39:24.972029Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:16:13.523721Z","title":"RepoBench: Benchmarking Repository-Level Code Auto-Completion Systems , url =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.19235","last_updated":"2026-06-17T16:12:50Z","snapshot_observed_at":"2026-07-06T23:54:32.815760Z","submitted_at":"2026-06-17T16:12:50Z","title":"CodeSentinel: A Three-Layer Defense Against Indirect Prompt Injection in Code Contexts","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-06-26T20:16:13.523721Z"},"links":{"citing_paper":"/paper/2606.19235"},"observation_digest":"sha256:5e5b6b8c5305db2a9aa195e32f22dc0deadcad9fb1257b75dec809d8081a0e9f","observation_id":"5f20f5bf-3cbb-4a27-bfab-31e66e7849fe","resolution":{"observed_at":"2026-06-26T20:16:13.523721Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2107.03374","last_updated":"2021-07-14T17:16:02Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2021-07-07T17:41:24Z","title":"Evaluating Large Language Models Trained on Code","version":2},"cited_work":{"arxiv_id":"2107.03374","doi":"10.48550/arxiv.2107.03374","metadata_source":"pith","pith_arxiv_id":"2107.03374","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Evaluating Large Language Models Trained on Code","venue":"cs.LG","work_id":"042493e9-b26f-4b4e-bbde-382072ca9b08","year":2021},"citing_paper":{"arxiv_id":"2606.19235","last_updated":"2026-06-17T16:12:50Z","snapshot_observed_at":"2026-07-06T23:54:32.815760Z","submitted_at":"2026-06-17T16:12:50Z","title":"CodeSentinel: A Three-Layer Defense Against Indirect Prompt Injection in Code Contexts","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-06-26T20:16:13.523721Z"},"links":{"cited_paper":"/paper/2107.03374","citing_paper":"/paper/2606.19235"},"observation_digest":"sha256:8cbf109dd7e95c97a9d6a871f28e6f6377c5c5d2e50956f90affb83e8e4908c9","observation_id":"35025dee-cbce-41ae-a673-e2cb53d6c042","resolution":{"observed_at":"2026-07-04T01:39:24.975528Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-01T08:08:23.404839+00:00","source":"crossref_status_cache"},{"observed_at":"2026-08-01T08:08:23.404839+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:16:13.523721Z","title":"Iterative","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.19235","last_updated":"2026-06-17T16:12:50Z","snapshot_observed_at":"2026-07-06T23:54:32.815760Z","submitted_at":"2026-06-17T16:12:50Z","title":"CodeSentinel: A Three-Layer Defense Against Indirect Prompt Injection in Code Contexts","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-06-26T20:16:13.523721Z"},"links":{"citing_paper":"/paper/2606.19235"},"observation_digest":"sha256:bcf8f66094ef34991b06b731daf6422f863a9a5d98efa01d594e69b991afb639","observation_id":"ad0386ea-45f0-4f8f-aaff-80526ec41384","resolution":{"observed_at":"2026-06-26T20:16:13.523721Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:16:13.523721Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.19235","last_updated":"2026-06-17T16:12:50Z","snapshot_observed_at":"2026-07-06T23:54:32.815760Z","submitted_at":"2026-06-17T16:12:50Z","title":"CodeSentinel: A Three-Layer Defense Against Indirect Prompt Injection in Code Contexts","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-06-26T20:16:13.523721Z"},"links":{"citing_paper":"/paper/2606.19235"},"observation_digest":"sha256:24132fda96c87fa230da4a776850a7bec3f52e322be62845da688a3426a32cbf","observation_id":"d528fb18-45d3-45cd-9b6d-e26ad95a42be","resolution":{"observed_at":"2026-06-26T20:16:13.523721Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:16:13.523721Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.19235","last_updated":"2026-06-17T16:12:50Z","snapshot_observed_at":"2026-07-06T23:54:32.815760Z","submitted_at":"2026-06-17T16:12:50Z","title":"CodeSentinel: A Three-Layer Defense Against Indirect Prompt Injection in Code Contexts","version":1},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-06-26T20:16:13.523721Z"},"links":{"citing_paper":"/paper/2606.19235"},"observation_digest":"sha256:a8840d639140655403565817e096b57ccab737c2e44423d93665902bfd1cf732","observation_id":"2c858e47-eaa2-4c4c-9f61-46b16c4aa63a","resolution":{"observed_at":"2026-06-26T20:16:13.523721Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:16:13.523721Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.19235","last_updated":"2026-06-17T16:12:50Z","snapshot_observed_at":"2026-07-06T23:54:32.815760Z","submitted_at":"2026-06-17T16:12:50Z","title":"CodeSentinel: A Three-Layer Defense Against Indirect Prompt Injection in Code Contexts","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-06-26T20:16:13.523721Z"},"links":{"citing_paper":"/paper/2606.19235"},"observation_digest":"sha256:ef49d11f6744a0f2057fc2c96f109a7220703e282095dab256e09578e871d6d4","observation_id":"5b808625-f928-47a0-beb0-d5ce62b4f4a9","resolution":{"observed_at":"2026-06-26T20:16:13.523721Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:16:13.523721Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.19235","last_updated":"2026-06-17T16:12:50Z","snapshot_observed_at":"2026-07-06T23:54:32.815760Z","submitted_at":"2026-06-17T16:12:50Z","title":"CodeSentinel: A Three-Layer Defense Against Indirect Prompt Injection in Code Contexts","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-06-26T20:16:13.523721Z"},"links":{"citing_paper":"/paper/2606.19235"},"observation_digest":"sha256:880df9a647081065ffcda6f572715c911b8189b1ea637f0981fbbf3ab86b78a0","observation_id":"f9cfd1a9-7a8f-4e21-b295-ab48af6665e4","resolution":{"observed_at":"2026-06-26T20:16:13.523721Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:16:13.523721Z","title":"and Yu, Tianjiao and Diwan, Nirav and Wang, Gang and Hakkani-Tür, Dilek and Lourentzou, Ismini , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.19235","last_updated":"2026-06-17T16:12:50Z","snapshot_observed_at":"2026-07-06T23:54:32.815760Z","submitted_at":"2026-06-17T16:12:50Z","title":"CodeSentinel: A Three-Layer Defense Against Indirect Prompt Injection in Code Contexts","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-06-26T20:16:13.523721Z"},"links":{"citing_paper":"/paper/2606.19235"},"observation_digest":"sha256:79dc6911ab5e4a9604109dea6bef59b0dbca060d77fd03e9a9fd8acf6fc90e66","observation_id":"133af8ca-7c18-4694-bcc3-a02c7bccd275","resolution":{"observed_at":"2026-06-26T20:16:13.523721Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:16:13.523721Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.19235","last_updated":"2026-06-17T16:12:50Z","snapshot_observed_at":"2026-07-06T23:54:32.815760Z","submitted_at":"2026-06-17T16:12:50Z","title":"CodeSentinel: A Three-Layer Defense Against Indirect Prompt Injection in Code Contexts","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-06-26T20:16:13.523721Z"},"links":{"citing_paper":"/paper/2606.19235"},"observation_digest":"sha256:1066abdab6f5cc34d8c82f6e49013d8e6d1f116c74267d70c12f52185889188f","observation_id":"5d76e524-c2e4-4220-b876-dea499ed614e","resolution":{"observed_at":"2026-06-26T20:16:13.523721Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:16:13.523721Z","title":"2026 , eprint=","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2606.19235","last_updated":"2026-06-17T16:12:50Z","snapshot_observed_at":"2026-07-06T23:54:32.815760Z","submitted_at":"2026-06-17T16:12:50Z","title":"CodeSentinel: A Three-Layer Defense Against Indirect Prompt Injection in Code Contexts","version":1},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-06-26T20:16:13.523721Z"},"links":{"citing_paper":"/paper/2606.19235"},"observation_digest":"sha256:f0f75bfd070ccaee41a6b09ad2cdc4a24995fd3ef1394b573839a6992862613a","observation_id":"6db50adb-1a21-42eb-9b0d-88c1582b27d1","resolution":{"observed_at":"2026-06-26T20:16:13.523721Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:16:13.523721Z","title":"I njec A gent: Benchmarking Indirect Prompt Injections in Tool-Integrated Large Language Model Agents","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.19235","last_updated":"2026-06-17T16:12:50Z","snapshot_observed_at":"2026-07-06T23:54:32.815760Z","submitted_at":"2026-06-17T16:12:50Z","title":"CodeSentinel: A Three-Layer Defense Against Indirect Prompt Injection in Code Contexts","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-06-26T20:16:13.523721Z"},"links":{"citing_paper":"/paper/2606.19235"},"observation_digest":"sha256:172404e5d6c115ecb7b3b6c1c1460e66aba8534bb09e8fe829b3679df4f01bd5","observation_id":"3d7f443f-cf11-46d1-a0f0-615583284809","resolution":{"observed_at":"2026-06-26T20:16:13.523721Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:16:13.523721Z","title":"ACM SIGKDD Conference on Knowledge Discovery and Data Mining , author =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.19235","last_updated":"2026-06-17T16:12:50Z","snapshot_observed_at":"2026-07-06T23:54:32.815760Z","submitted_at":"2026-06-17T16:12:50Z","title":"CodeSentinel: A Three-Layer Defense Against Indirect Prompt Injection in Code Contexts","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-06-26T20:16:13.523721Z"},"links":{"citing_paper":"/paper/2606.19235"},"observation_digest":"sha256:309e2949271f6c2a536a4319db5d89c85118738893fbf1b6d2b484d72650c868","observation_id":"034db5d1-268c-4383-97ee-251831eb4327","resolution":{"observed_at":"2026-06-26T20:16:13.523721Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:16:13.523721Z","title":"Defending against Indirect Prompt Injection by Instruction Detection , url =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.19235","last_updated":"2026-06-17T16:12:50Z","snapshot_observed_at":"2026-07-06T23:54:32.815760Z","submitted_at":"2026-06-17T16:12:50Z","title":"CodeSentinel: A Three-Layer Defense Against Indirect Prompt Injection in Code Contexts","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-06-26T20:16:13.523721Z"},"links":{"citing_paper":"/paper/2606.19235"},"observation_digest":"sha256:ff8f0bfd126f615c73f450a1dba3040a9be50216648d0b76fc25a0ccb05c136a","observation_id":"ca25e02e-15f0-4ad1-b946-389cba6c6568","resolution":{"observed_at":"2026-06-26T20:16:13.523721Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:16:13.523721Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.19235","last_updated":"2026-06-17T16:12:50Z","snapshot_observed_at":"2026-07-06T23:54:32.815760Z","submitted_at":"2026-06-17T16:12:50Z","title":"CodeSentinel: A Three-Layer Defense Against Indirect Prompt Injection in Code Contexts","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-06-26T20:16:13.523721Z"},"links":{"citing_paper":"/paper/2606.19235"},"observation_digest":"sha256:8ecd3cbf2635bc5eee522ea246f8cae62356108b66612cea864b7d421cfaf617","observation_id":"ea0fa343-3951-41e4-9cf6-1333ddbedb27","resolution":{"observed_at":"2026-06-26T20:16:13.523721Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:16:13.523721Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.19235","last_updated":"2026-06-17T16:12:50Z","snapshot_observed_at":"2026-07-06T23:54:32.815760Z","submitted_at":"2026-06-17T16:12:50Z","title":"CodeSentinel: A Three-Layer Defense Against Indirect Prompt Injection in Code Contexts","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-06-26T20:16:13.523721Z"},"links":{"citing_paper":"/paper/2606.19235"},"observation_digest":"sha256:9ed90d0e7e047992913344cff2e20e0090261aa85395ad3d4690ba6f08da1e58","observation_id":"9ea20310-b0fb-4d8c-a9a4-eebce8d69f3f","resolution":{"observed_at":"2026-06-26T20:16:13.523721Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:16:13.523721Z","title":"UniGuardian: A Unified Defense for Detecting Prompt Injection, Backdoor Attacks and Adversarial Attacks in Large Language Models , url =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.19235","last_updated":"2026-06-17T16:12:50Z","snapshot_observed_at":"2026-07-06T23:54:32.815760Z","submitted_at":"2026-06-17T16:12:50Z","title":"CodeSentinel: A Three-Layer Defense Against Indirect Prompt Injection in Code Contexts","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-06-26T20:16:13.523721Z"},"links":{"citing_paper":"/paper/2606.19235"},"observation_digest":"sha256:204b58449cd4ffae7407e3d53118f8ebac75177f821057c93ad9bcddaa3538c6","observation_id":"706cef02-bc5e-4f93-a41a-a1ad98a7f69a","resolution":{"observed_at":"2026-06-26T20:16:13.523721Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:16:13.523721Z","title":"Smoke and","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.19235","last_updated":"2026-06-17T16:12:50Z","snapshot_observed_at":"2026-07-06T23:54:32.815760Z","submitted_at":"2026-06-17T16:12:50Z","title":"CodeSentinel: A Three-Layer Defense Against Indirect Prompt Injection in Code Contexts","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-06-26T20:16:13.523721Z"},"links":{"citing_paper":"/paper/2606.19235"},"observation_digest":"sha256:b9b3904ec685ad5c6a5f58a603cfca4e6c78062ee0b6791f59606dac1efa3b1a","observation_id":"2dcd65a3-a3fc-4ab6-8924-c9cd7ee941a3","resolution":{"observed_at":"2026-06-26T20:16:13.523721Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:16:13.523721Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.19235","last_updated":"2026-06-17T16:12:50Z","snapshot_observed_at":"2026-07-06T23:54:32.815760Z","submitted_at":"2026-06-17T16:12:50Z","title":"CodeSentinel: A Three-Layer Defense Against Indirect Prompt Injection in Code Contexts","version":1},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-06-26T20:16:13.523721Z"},"links":{"citing_paper":"/paper/2606.19235"},"observation_digest":"sha256:41115499d225785f6c1b5888206c0862852897950c0a8a1218f6356bab68c8ec","observation_id":"15fca555-4743-4960-8a28-6937723cca5e","resolution":{"observed_at":"2026-06-26T20:16:13.523721Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:16:13.523721Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.19235","last_updated":"2026-06-17T16:12:50Z","snapshot_observed_at":"2026-07-06T23:54:32.815760Z","submitted_at":"2026-06-17T16:12:50Z","title":"CodeSentinel: A Three-Layer Defense Against Indirect Prompt Injection in Code Contexts","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-06-26T20:16:13.523721Z"},"links":{"citing_paper":"/paper/2606.19235"},"observation_digest":"sha256:58418662021597a55227bde6e04d97f2201cdf778850f99d713fdb3a94fa8b6a","observation_id":"dcb04767-57ef-4fab-8d04-73c2a73cc03a","resolution":{"observed_at":"2026-06-26T20:16:13.523721Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:16:13.523721Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.19235","last_updated":"2026-06-17T16:12:50Z","snapshot_observed_at":"2026-07-06T23:54:32.815760Z","submitted_at":"2026-06-17T16:12:50Z","title":"CodeSentinel: A Three-Layer Defense Against Indirect Prompt Injection in Code Contexts","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-06-26T20:16:13.523721Z"},"links":{"citing_paper":"/paper/2606.19235"},"observation_digest":"sha256:cdfae2f48425518c76cebb5132c2422ba6e9975bc97a388f5a74703a0be6f53c","observation_id":"1d2c5ee9-bda6-4bcc-8895-5fe06c7aedbc","resolution":{"observed_at":"2026-06-26T20:16:13.523721Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:16:13.523721Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.19235","last_updated":"2026-06-17T16:12:50Z","snapshot_observed_at":"2026-07-06T23:54:32.815760Z","submitted_at":"2026-06-17T16:12:50Z","title":"CodeSentinel: A Three-Layer Defense Against Indirect Prompt Injection in Code Contexts","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-06-26T20:16:13.523721Z"},"links":{"citing_paper":"/paper/2606.19235"},"observation_digest":"sha256:c618ffdcb24838840b1e82fcd8cdbb699e26fcb08d7e68d16921c6d0a22b4699","observation_id":"c803c800-894d-4c41-967b-b8ff456d2ac6","resolution":{"observed_at":"2026-06-26T20:16:13.523721Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:16:13.523721Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.19235","last_updated":"2026-06-17T16:12:50Z","snapshot_observed_at":"2026-07-06T23:54:32.815760Z","submitted_at":"2026-06-17T16:12:50Z","title":"CodeSentinel: A Three-Layer Defense Against Indirect Prompt Injection in Code Contexts","version":1},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-06-26T20:16:13.523721Z"},"links":{"citing_paper":"/paper/2606.19235"},"observation_digest":"sha256:726c1cebd5eb671b60de06ab489264cb1b5e1415d6f609b5cd514693ffb73cf7","observation_id":"f6d044e0-b107-4fd0-b848-20a8be31bf8b","resolution":{"observed_at":"2026-06-26T20:16:13.523721Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:16:13.523721Z","title":"Defeating","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.19235","last_updated":"2026-06-17T16:12:50Z","snapshot_observed_at":"2026-07-06T23:54:32.815760Z","submitted_at":"2026-06-17T16:12:50Z","title":"CodeSentinel: A Three-Layer Defense Against Indirect Prompt Injection in Code Contexts","version":1},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-06-26T20:16:13.523721Z"},"links":{"citing_paper":"/paper/2606.19235"},"observation_digest":"sha256:aa92095f8dcd55f0ed77ef34f61a8a377a6d77f2702601954a92bbe11951ab10","observation_id":"5be52c82-d625-4f59-941d-d86b538e0a53","resolution":{"observed_at":"2026-06-26T20:16:13.523721Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2606.19235","last_updated":"2026-06-17T16:12:50Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-07-06T23:54:32.815760Z","submitted_at":"2026-06-17T16:12:50Z","title":"CodeSentinel: A Three-Layer Defense Against Indirect Prompt Injection in Code Contexts"},"reference_resolution":{"displayed":26,"state_counts":{"malformed_identifier":0,"metadata_mismatch":2,"parse_uncertain":0,"unresolved":24,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":26},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"thesis":"As of 6 August 2026, this Paper Citation Record lists 26 of 26 outbound references and 0 inbound Pith citation observations for arXiv:2606.19235."}