{"as_of":"2026-08-12T06:49:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:63ce42cf738bb43e46280d8f6f09ac4f88984fd03ed47cafd834c490e53cfa13","coverage":[{"denominator":35,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":35,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-04T04:34:33.230801Z","state":"measured"},{"denominator":35,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":35,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-12T06:34:41.77262+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2607.19396/citation-record","integrity":"/paper/2607.19396/integrity","json":"/paper/2607.19396/citation-record.json","paper":"/paper/2607.19396"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T04:34:33.136025Z","title":"LLM01 2025 Prompt Injection","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.19396","last_updated":"2026-08-02T14:07:20Z","snapshot_observed_at":"2026-08-09T02:34:30.861611Z","submitted_at":"2026-07-03T14:24:26Z","title":"CrackedPDFs: A Controlled Benchmark for Hidden Prompt Injection in PDFs","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-04T04:34:33.136025Z"},"links":{"citing_paper":"/paper/2607.19396"},"observation_digest":"sha256:cf3aa879a1158cb65df0e46cf623681bf4377fb32e193a79528605727a73ba20","observation_id":"7e9fc0e5-ceab-4697-a853-8c3e430e8b59","resolution":{"observed_at":"2026-08-04T04:34:33.136025Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2306.05499","last_updated":"2025-12-29T02:25:27Z","snapshot_observed_at":"2026-07-06T15:40:27.639368Z","submitted_at":"2023-06-08T18:43:11Z","title":"Prompt Injection attack against LLM-integrated Applications","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.05499","snapshot_observed_at":"2026-08-04T04:34:33.139765Z","title":"https://arxiv.org/abs/2306.05499","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19396","last_updated":"2026-08-02T14:07:20Z","snapshot_observed_at":"2026-08-09T02:34:30.861611Z","submitted_at":"2026-07-03T14:24:26Z","title":"CrackedPDFs: A Controlled Benchmark for Hidden Prompt Injection in PDFs","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-04T04:34:33.139765Z"},"links":{"cited_paper":"/paper/2306.05499","citing_paper":"/paper/2607.19396"},"observation_digest":"sha256:4c055ab881e6f6d472456bb1ad168706e9d2ba50e4c75b0adc78104582ad181a","observation_id":"e2d46ee9-a217-4822-b758-2ae655dfca69","resolution":{"observed_at":"2026-08-04T04:34:33.139765Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T04:34:33.143131Z","title":"https://arxiv.org/abs/2601.22240","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19396","last_updated":"2026-08-02T14:07:20Z","snapshot_observed_at":"2026-08-09T02:34:30.861611Z","submitted_at":"2026-07-03T14:24:26Z","title":"CrackedPDFs: A Controlled Benchmark for Hidden Prompt Injection in PDFs","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-04T04:34:33.143131Z"},"links":{"citing_paper":"/paper/2607.19396"},"observation_digest":"sha256:ac5bffe09a9f469e54ec82e2d3f379ee84b25ac0f1dde66a2a47577f77a1aae5","observation_id":"c4a59186-71d9-44ec-b488-2dc8b5ea83ae","resolution":{"observed_at":"2026-08-04T04:34:33.143131Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T04:34:33.146158Z","title":"Prompt Injection Defenses","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19396","last_updated":"2026-08-02T14:07:20Z","snapshot_observed_at":"2026-08-09T02:34:30.861611Z","submitted_at":"2026-07-03T14:24:26Z","title":"CrackedPDFs: A Controlled Benchmark for Hidden Prompt Injection in PDFs","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-04T04:34:33.146158Z"},"links":{"citing_paper":"/paper/2607.19396"},"observation_digest":"sha256:4ab6696f0df132ec5ed60922fe51199a8110967aefcad7cb143ab2edb50d7217","observation_id":"2c78452c-6067-4834-8201-8f759a989443","resolution":{"observed_at":"2026-08-04T04:34:33.146158Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T04:34:33.149047Z","title":"Principled Detection of Hidden LLM Prompts in Structured Documents","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19396","last_updated":"2026-08-02T14:07:20Z","snapshot_observed_at":"2026-08-09T02:34:30.861611Z","submitted_at":"2026-07-03T14:24:26Z","title":"CrackedPDFs: A Controlled Benchmark for Hidden Prompt Injection in PDFs","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-04T04:34:33.149047Z"},"links":{"citing_paper":"/paper/2607.19396"},"observation_digest":"sha256:f758fd9227e4205029b044f45f4945d959b2e962fd2a84b26be6d84f64e5b280","observation_id":"1e2e8e2d-4f66-43d6-9414-b42be40666af","resolution":{"observed_at":"2026-08-04T04:34:33.149047Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T04:34:33.152202Z","title":"Hidden-Comment Injection in LLM Agents","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19396","last_updated":"2026-08-02T14:07:20Z","snapshot_observed_at":"2026-08-09T02:34:30.861611Z","submitted_at":"2026-07-03T14:24:26Z","title":"CrackedPDFs: A Controlled Benchmark for Hidden Prompt Injection in PDFs","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-04T04:34:33.152202Z"},"links":{"citing_paper":"/paper/2607.19396"},"observation_digest":"sha256:fb060e479568b4265830ab44f0255db12b38d082a1437c88b9f321e1b19f5c4a","observation_id":"622b2666-1d48-4187-b117-e8869480b7b4","resolution":{"observed_at":"2026-08-04T04:34:33.152202Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.16957","last_updated":"2025-05-22T17:36:33Z","snapshot_observed_at":"2026-08-09T00:25:53.983420Z","submitted_at":"2025-05-22T17:36:33Z","title":"Invisible Prompts, Visible Threats: Malicious Font Injection in External Resources for Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.16957","snapshot_observed_at":"2026-08-04T04:34:33.155021Z","title":"Malicious Font Injection in External Resources for Large Language Models","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.19396","last_updated":"2026-08-02T14:07:20Z","snapshot_observed_at":"2026-08-09T02:34:30.861611Z","submitted_at":"2026-07-03T14:24:26Z","title":"CrackedPDFs: A Controlled Benchmark for Hidden Prompt Injection in PDFs","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-04T04:34:33.155021Z"},"links":{"cited_paper":"/paper/2505.16957","citing_paper":"/paper/2607.19396"},"observation_digest":"sha256:b47c5c9c4597b8c83593d43d25b7fd0e2ebc591368f6446812c5d0bf7fce8de0","observation_id":"1d01d33a-8052-4cbb-b240-7438ab46b225","resolution":{"observed_at":"2026-08-04T04:34:33.155021Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T04:34:33.158239Z","title":"https://arxiv.org/pdf/2509.10248.pdf","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19396","last_updated":"2026-08-02T14:07:20Z","snapshot_observed_at":"2026-08-09T02:34:30.861611Z","submitted_at":"2026-07-03T14:24:26Z","title":"CrackedPDFs: A Controlled Benchmark for Hidden Prompt Injection in PDFs","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-04T04:34:33.158239Z"},"links":{"citing_paper":"/paper/2607.19396"},"observation_digest":"sha256:aadbf565940918a8d2878c83cdbfd53199753a7956c472bf77ccddbca3fba0e4","observation_id":"f35fa40f-b88d-49c5-bed0-ef32a46321db","resolution":{"observed_at":"2026-08-04T04:34:33.158239Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T04:34:33.161193Z","title":"https://arxiv.org/abs/2512.23684","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19396","last_updated":"2026-08-02T14:07:20Z","snapshot_observed_at":"2026-08-09T02:34:30.861611Z","submitted_at":"2026-07-03T14:24:26Z","title":"CrackedPDFs: A Controlled Benchmark for Hidden Prompt Injection in PDFs","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-04T04:34:33.161193Z"},"links":{"citing_paper":"/paper/2607.19396"},"observation_digest":"sha256:776cfc4ffe3120ed10789f85e0d45d326831c8d4aed124b79375353c68bc9208","observation_id":"f78d466c-b906-4e2f-9e31-08ec29d6eae6","resolution":{"observed_at":"2026-08-04T04:34:33.161193Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T04:34:33.163875Z","title":"https://zenodo.org/records/16603590","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19396","last_updated":"2026-08-02T14:07:20Z","snapshot_observed_at":"2026-08-09T02:34:30.861611Z","submitted_at":"2026-07-03T14:24:26Z","title":"CrackedPDFs: A Controlled Benchmark for Hidden Prompt Injection in PDFs","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-04T04:34:33.163875Z"},"links":{"citing_paper":"/paper/2607.19396"},"observation_digest":"sha256:d0c278c5e4d052bc1166576df09c5171b4b6f3dfea80afc5d953e3e4dd35efc4","observation_id":"691ddd70-931d-4022-8422-016be9d95880","resolution":{"observed_at":"2026-08-04T04:34:33.163875Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T04:34:33.166564Z","title":"Prompt Injection Exploits Invisible PDF Text to Pass Credit Score Analysis","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19396","last_updated":"2026-08-02T14:07:20Z","snapshot_observed_at":"2026-08-09T02:34:30.861611Z","submitted_at":"2026-07-03T14:24:26Z","title":"CrackedPDFs: A Controlled Benchmark for Hidden Prompt Injection in PDFs","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-04T04:34:33.166564Z"},"links":{"citing_paper":"/paper/2607.19396"},"observation_digest":"sha256:d46f62bc3c806fa2c8bb9abe3815bf3b8d923cbf895300676bf67d6e24869480","observation_id":"b995a757-5a36-469b-bc45-c331308d780c","resolution":{"observed_at":"2026-08-04T04:34:33.166564Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T04:34:33.169371Z","title":"Invisible Prompt Injection Secure AI","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19396","last_updated":"2026-08-02T14:07:20Z","snapshot_observed_at":"2026-08-09T02:34:30.861611Z","submitted_at":"2026-07-03T14:24:26Z","title":"CrackedPDFs: A Controlled Benchmark for Hidden Prompt Injection in PDFs","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-04T04:34:33.169371Z"},"links":{"citing_paper":"/paper/2607.19396"},"observation_digest":"sha256:950ede7249760f6314d6c97117ff0d991c47dc530640895976239d2d3aedcb2a","observation_id":"07d92953-b41f-42ef-8665-0ac89e799c8d","resolution":{"observed_at":"2026-08-04T04:34:33.169371Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T04:34:33.172135Z","title":"Invisible Unicode Jailbreak","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19396","last_updated":"2026-08-02T14:07:20Z","snapshot_observed_at":"2026-08-09T02:34:30.861611Z","submitted_at":"2026-07-03T14:24:26Z","title":"CrackedPDFs: A Controlled Benchmark for Hidden Prompt Injection in PDFs","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-04T04:34:33.172135Z"},"links":{"citing_paper":"/paper/2607.19396"},"observation_digest":"sha256:806d5c52d35e7fd725466a953c987a334a5319594f6a338b2eacefca8c877989","observation_id":"ae316f90-7e56-439c-80eb-9dc0b1cd4ea3","resolution":{"observed_at":"2026-08-04T04:34:33.172135Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.00348","last_updated":"2025-04-23T01:35:19Z","snapshot_observed_at":"2026-08-11T01:59:50.770534Z","submitted_at":"2024-11-01T04:05:59Z","title":"Attention Tracker: Detecting Prompt Injection Attacks in LLMs","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.00348","snapshot_observed_at":"2026-08-04T04:34:33.174989Z","title":"Detecting Prompt Injection Attacks in LLMs","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19396","last_updated":"2026-08-02T14:07:20Z","snapshot_observed_at":"2026-08-09T02:34:30.861611Z","submitted_at":"2026-07-03T14:24:26Z","title":"CrackedPDFs: A Controlled Benchmark for Hidden Prompt Injection in PDFs","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-04T04:34:33.174989Z"},"links":{"cited_paper":"/paper/2411.00348","citing_paper":"/paper/2607.19396"},"observation_digest":"sha256:905cea28363e246907e35a27b2eb261fb761d45ece0d8738802a2203cab6bcc7","observation_id":"fd443f65-e50b-4d29-a4f1-52610b00f23f","resolution":{"observed_at":"2026-08-04T04:34:33.174989Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T04:34:33.178043Z","title":"Prompt Guard: Model Card formeta-llama/Prompt-Guard-86M","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.19396","last_updated":"2026-08-02T14:07:20Z","snapshot_observed_at":"2026-08-09T02:34:30.861611Z","submitted_at":"2026-07-03T14:24:26Z","title":"CrackedPDFs: A Controlled Benchmark for Hidden Prompt Injection in PDFs","version":2},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-04T04:34:33.178043Z"},"links":{"citing_paper":"/paper/2607.19396"},"observation_digest":"sha256:e2d0b6a52d29f8b488484b9505c09583ba6a487689633e2bdd77b00b5a1ee00c","observation_id":"2fb72c58-e0cf-46e2-aa67-771be435e741","resolution":{"observed_at":"2026-08-04T04:34:33.178043Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T04:34:33.180706Z","title":"Llama-Prompt-Guard-2-86M","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19396","last_updated":"2026-08-02T14:07:20Z","snapshot_observed_at":"2026-08-09T02:34:30.861611Z","submitted_at":"2026-07-03T14:24:26Z","title":"CrackedPDFs: A Controlled Benchmark for Hidden Prompt Injection in PDFs","version":2},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-04T04:34:33.180706Z"},"links":{"citing_paper":"/paper/2607.19396"},"observation_digest":"sha256:e0f3d1838e72429bd8f268d0eaef160cab6bc1d78173d0a7f742dd8ab882c2ee","observation_id":"0dfbe7e4-bdf8-4b15-8bcb-fc390c094bb3","resolution":{"observed_at":"2026-08-04T04:34:33.180706Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.06384","last_updated":"2025-06-05T06:01:19Z","snapshot_observed_at":"2026-08-09T04:23:53.979805Z","submitted_at":"2025-06-05T06:01:19Z","title":"Detection Method for Prompt Injection by Integrating Pre-trained Model and Heuristic Feature Engineering","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.06384","snapshot_observed_at":"2026-08-04T04:34:33.183294Z","title":"https://arxiv.org/abs/2506.06384","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19396","last_updated":"2026-08-02T14:07:20Z","snapshot_observed_at":"2026-08-09T02:34:30.861611Z","submitted_at":"2026-07-03T14:24:26Z","title":"CrackedPDFs: A Controlled Benchmark for Hidden Prompt Injection in PDFs","version":2},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-04T04:34:33.183294Z"},"links":{"cited_paper":"/paper/2506.06384","citing_paper":"/paper/2607.19396"},"observation_digest":"sha256:c10b841bc0d5e2fe9c0877553946fd477d35eddacdad2d9bfc4665eb1ce6c9f0","observation_id":"b4d5d6f6-8c08-4815-9c41-571f3634349c","resolution":{"observed_at":"2026-08-04T04:34:33.183294Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T04:34:33.186139Z","title":"https://arxiv.org/abs/2512.12583","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19396","last_updated":"2026-08-02T14:07:20Z","snapshot_observed_at":"2026-08-09T02:34:30.861611Z","submitted_at":"2026-07-03T14:24:26Z","title":"CrackedPDFs: A Controlled Benchmark for Hidden Prompt Injection in PDFs","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-04T04:34:33.186139Z"},"links":{"citing_paper":"/paper/2607.19396"},"observation_digest":"sha256:c270b69cb27b21b3ef8e4fe1f6b54bb1848d12d3507a8a41db33520135b5faca","observation_id":"90936c11-4b0a-4254-89a1-a7524fea8d45","resolution":{"observed_at":"2026-08-04T04:34:33.186139Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T04:34:33.188808Z","title":"https://media.sciltp.com/articles/2506000841/2506000841.pdf","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19396","last_updated":"2026-08-02T14:07:20Z","snapshot_observed_at":"2026-08-09T02:34:30.861611Z","submitted_at":"2026-07-03T14:24:26Z","title":"CrackedPDFs: A Controlled Benchmark for Hidden Prompt Injection in PDFs","version":2},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-04T04:34:33.188808Z"},"links":{"citing_paper":"/paper/2607.19396"},"observation_digest":"sha256:a46ae60674071bab75de3cdd33c09d1b623bcad36624fd953b8dde320d520c45","observation_id":"ab1cab5e-ed91-4d50-abdf-547d49ec9374","resolution":{"observed_at":"2026-08-04T04:34:33.188808Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2601.12359","last_updated":"2026-01-18T11:33:35Z","snapshot_observed_at":"2026-08-06T10:38:00.882004Z","submitted_at":"2026-01-18T11:33:35Z","title":"Zero-Shot Embedding Drift Detection: A Lightweight Defense Against Prompt Injections in LLMs","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2601.12359","snapshot_observed_at":"2026-08-04T04:34:33.191346Z","title":"A Lightweight Defense Against Prompt Injections in LLMs","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19396","last_updated":"2026-08-02T14:07:20Z","snapshot_observed_at":"2026-08-09T02:34:30.861611Z","submitted_at":"2026-07-03T14:24:26Z","title":"CrackedPDFs: A Controlled Benchmark for Hidden Prompt Injection in PDFs","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-04T04:34:33.191346Z"},"links":{"cited_paper":"/paper/2601.12359","citing_paper":"/paper/2607.19396"},"observation_digest":"sha256:aa93e4c62c5449c80f84a204f239f9cce21e4a73d60a02a76ef9edc0edcefbd2","observation_id":"a5b5b6f3-5ca6-4c70-8852-9a1e12bbb827","resolution":{"observed_at":"2026-08-04T04:34:33.191346Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.12368","last_updated":"2025-06-17T05:38:20Z","snapshot_observed_at":"2026-08-11T00:22:56.911415Z","submitted_at":"2025-05-18T11:14:14Z","title":"CAPTURE: Context-Aware Prompt Injection Testing and Robustness Enhancement","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.12368","snapshot_observed_at":"2026-08-04T04:34:33.194213Z","title":"Context-Aware Prompt Injection Testing and Robustness Enhancement","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19396","last_updated":"2026-08-02T14:07:20Z","snapshot_observed_at":"2026-08-09T02:34:30.861611Z","submitted_at":"2026-07-03T14:24:26Z","title":"CrackedPDFs: A Controlled Benchmark for Hidden Prompt Injection in PDFs","version":2},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-04T04:34:33.194213Z"},"links":{"cited_paper":"/paper/2505.12368","citing_paper":"/paper/2607.19396"},"observation_digest":"sha256:8c949e7953bf278c54d915416930d3e399b765b106638314a4e2f16a17815527","observation_id":"6df1d6e5-8472-4e1c-b501-1690c69b0000","resolution":{"observed_at":"2026-08-04T04:34:33.194213Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T04:34:33.197394Z","title":"Content Masking Attack Against Information-Based Online Services","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19396","last_updated":"2026-08-02T14:07:20Z","snapshot_observed_at":"2026-08-09T02:34:30.861611Z","submitted_at":"2026-07-03T14:24:26Z","title":"CrackedPDFs: A Controlled Benchmark for Hidden Prompt Injection in PDFs","version":2},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-04T04:34:33.197394Z"},"links":{"citing_paper":"/paper/2607.19396"},"observation_digest":"sha256:320f6ebb97f3a560703d2a05d473853519322fc5ab24e944d688a6657ed1b5b3","observation_id":"17312f1f-3afc-4609-a316-eba417007acf","resolution":{"observed_at":"2026-08-04T04:34:33.197394Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T04:34:33.200076Z","title":"Studying, Finding, and Localizing Inconsistency Bugs in PDF Readers and Files","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19396","last_updated":"2026-08-02T14:07:20Z","snapshot_observed_at":"2026-08-09T02:34:30.861611Z","submitted_at":"2026-07-03T14:24:26Z","title":"CrackedPDFs: A Controlled Benchmark for Hidden Prompt Injection in PDFs","version":2},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-04T04:34:33.200076Z"},"links":{"citing_paper":"/paper/2607.19396"},"observation_digest":"sha256:705a8f2c7a43bd176779fb24e85389ec9003df8df8d10f9ae1b43f7135462a89","observation_id":"61f841c8-3312-4635-86dd-ab0f85ef38bb","resolution":{"observed_at":"2026-08-04T04:34:33.200076Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T04:34:33.202834Z","title":"https://www.usenix.org/system/files/sec20-chen-yizheng.pdf","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19396","last_updated":"2026-08-02T14:07:20Z","snapshot_observed_at":"2026-08-09T02:34:30.861611Z","submitted_at":"2026-07-03T14:24:26Z","title":"CrackedPDFs: A Controlled Benchmark for Hidden Prompt Injection in PDFs","version":2},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-04T04:34:33.202834Z"},"links":{"citing_paper":"/paper/2607.19396"},"observation_digest":"sha256:be5c22ff408db9bb89819c25eb6b060563a81c2014eddc6268fbdd89c5665076","observation_id":"a81d8904-f1e6-4e33-9b56-5145fcb26790","resolution":{"observed_at":"2026-08-04T04:34:33.202834Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T04:34:33.205481Z","title":"https://www.emergentmind.com/topics/optical-character-recognition-ocr-exploits","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19396","last_updated":"2026-08-02T14:07:20Z","snapshot_observed_at":"2026-08-09T02:34:30.861611Z","submitted_at":"2026-07-03T14:24:26Z","title":"CrackedPDFs: A Controlled Benchmark for Hidden Prompt Injection in PDFs","version":2},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-04T04:34:33.205481Z"},"links":{"citing_paper":"/paper/2607.19396"},"observation_digest":"sha256:1ce45930c4ad669131d7b02fbfc2283059a395cf88a0a01b76c61e4b6b0d55dc","observation_id":"b8086476-c70b-43b3-8feb-79337ef64ad2","resolution":{"observed_at":"2026-08-04T04:34:33.205481Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T04:34:33.208166Z","title":"PDF Document Security","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19396","last_updated":"2026-08-02T14:07:20Z","snapshot_observed_at":"2026-08-09T02:34:30.861611Z","submitted_at":"2026-07-03T14:24:26Z","title":"CrackedPDFs: A Controlled Benchmark for Hidden Prompt Injection in PDFs","version":2},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-04T04:34:33.208166Z"},"links":{"citing_paper":"/paper/2607.19396"},"observation_digest":"sha256:63eddd3d2cdd4de91ee0c0d71a2406d58b0c20aceb4d83735299b69d286cb63e","observation_id":"8d76c050-0437-4331-ac7b-13b0f5c57a91","resolution":{"observed_at":"2026-08-04T04:34:33.208166Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.14348","last_updated":"2025-07-27T10:12:52Z","snapshot_observed_at":"2026-08-07T21:52:02.659469Z","submitted_at":"2025-04-19T16:28:03Z","title":"Manipulating Multimodal Agents via Cross-Modal Prompt Injection","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.14348","snapshot_observed_at":"2026-08-04T04:34:33.210622Z","title":"https://arxiv.org/html/2504.14348v1","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19396","last_updated":"2026-08-02T14:07:20Z","snapshot_observed_at":"2026-08-09T02:34:30.861611Z","submitted_at":"2026-07-03T14:24:26Z","title":"CrackedPDFs: A Controlled Benchmark for Hidden Prompt Injection in PDFs","version":2},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-04T04:34:33.210622Z"},"links":{"cited_paper":"/paper/2504.14348","citing_paper":"/paper/2607.19396"},"observation_digest":"sha256:fd761dc3fda219441ed47d0d5a5b871b90306147501d74c66276b9c1957beb60","observation_id":"d655a8ad-6a58-4b7d-98d6-ddb8635af7b3","resolution":{"observed_at":"2026-08-04T04:34:33.210622Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T04:34:33.213268Z","title":"https://pmc.ncbi.nlm.nih.gov/articles/PMC4993050/","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19396","last_updated":"2026-08-02T14:07:20Z","snapshot_observed_at":"2026-08-09T02:34:30.861611Z","submitted_at":"2026-07-03T14:24:26Z","title":"CrackedPDFs: A Controlled Benchmark for Hidden Prompt Injection in PDFs","version":2},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-04T04:34:33.213268Z"},"links":{"citing_paper":"/paper/2607.19396"},"observation_digest":"sha256:548b53bf4301d397761d99a6c5a8c78d09d2a717f94b3df93e21272ea4c32817","observation_id":"056b3cb0-8cb2-462c-b6f4-b897d640491e","resolution":{"observed_at":"2026-08-04T04:34:33.213268Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T04:34:33.215886Z","title":"https://www.cs.cornell.edu/fbs/publications/Hyperproperties.pdf","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19396","last_updated":"2026-08-02T14:07:20Z","snapshot_observed_at":"2026-08-09T02:34:30.861611Z","submitted_at":"2026-07-03T14:24:26Z","title":"CrackedPDFs: A Controlled Benchmark for Hidden Prompt Injection in PDFs","version":2},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-04T04:34:33.215886Z"},"links":{"citing_paper":"/paper/2607.19396"},"observation_digest":"sha256:eac93abec1174a5a99bfb0471bd832fc565c314b0504411908c554a49b27098c","observation_id":"1fb4000e-e920-43da-9f19-5a92d83720b5","resolution":{"observed_at":"2026-08-04T04:34:33.215886Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T04:34:33.218576Z","title":"https://proglearn.neurodata.io/experiments/label_shuffle_exp","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19396","last_updated":"2026-08-02T14:07:20Z","snapshot_observed_at":"2026-08-09T02:34:30.861611Z","submitted_at":"2026-07-03T14:24:26Z","title":"CrackedPDFs: A Controlled Benchmark for Hidden Prompt Injection in PDFs","version":2},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-04T04:34:33.218576Z"},"links":{"citing_paper":"/paper/2607.19396"},"observation_digest":"sha256:6ac62b51261e595fa70e0e15d920ff12c35fc3e55b1566113baca32de4ebfda9","observation_id":"fa77f827-694c-4126-afe4-e688d5d5da55","resolution":{"observed_at":"2026-08-04T04:34:33.218576Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.17212","last_updated":"2024-03-25T21:39:33Z","snapshot_observed_at":"2026-07-06T17:50:35.159174Z","submitted_at":"2024-03-25T21:39:33Z","title":"Sanity Checks for Explanation Uncertainty","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.17212","snapshot_observed_at":"2026-08-04T04:34:33.221037Z","title":"https://arxiv.org/abs/2403.17212","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19396","last_updated":"2026-08-02T14:07:20Z","snapshot_observed_at":"2026-08-09T02:34:30.861611Z","submitted_at":"2026-07-03T14:24:26Z","title":"CrackedPDFs: A Controlled Benchmark for Hidden Prompt Injection in PDFs","version":2},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-04T04:34:33.221037Z"},"links":{"cited_paper":"/paper/2403.17212","citing_paper":"/paper/2607.19396"},"observation_digest":"sha256:2405a3447a70f027ba745591d9826b8e0da9f64c8c80a75b7c1e50b3a9527629","observation_id":"e52b2135-8bdc-4e8f-af6f-904e6450af54","resolution":{"observed_at":"2026-08-04T04:34:33.221037Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T04:34:33.223606Z","title":"Machine Learning Crash Course ROC and AUC","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19396","last_updated":"2026-08-02T14:07:20Z","snapshot_observed_at":"2026-08-09T02:34:30.861611Z","submitted_at":"2026-07-03T14:24:26Z","title":"CrackedPDFs: A Controlled Benchmark for Hidden Prompt Injection in PDFs","version":2},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-04T04:34:33.223606Z"},"links":{"citing_paper":"/paper/2607.19396"},"observation_digest":"sha256:da950301381ad910d48f0907f335aae274e60a6f4289747b2c73ec864f88447e","observation_id":"6d17f9d6-8de5-4a8a-9428-9fb90c9532ac","resolution":{"observed_at":"2026-08-04T04:34:33.223606Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T04:34:33.226021Z","title":"PDFAutoGen: Automated Benchmark Construction Pipeline for Hidden Prompt Injection Detection in PDFs","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19396","last_updated":"2026-08-02T14:07:20Z","snapshot_observed_at":"2026-08-09T02:34:30.861611Z","submitted_at":"2026-07-03T14:24:26Z","title":"CrackedPDFs: A Controlled Benchmark for Hidden Prompt Injection in PDFs","version":2},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-04T04:34:33.226021Z"},"links":{"citing_paper":"/paper/2607.19396"},"observation_digest":"sha256:9093d9d8ae97886d0d267a5b9c5fe6291e4a7fc11012df6db38489e2e51fde45","observation_id":"aa54ae66-5b20-42fa-b3f2-5d0f37c845fa","resolution":{"observed_at":"2026-08-04T04:34:33.226021Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T04:34:33.228420Z","title":"LLM Jailbreak & Prompt-Injection Dataset","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19396","last_updated":"2026-08-02T14:07:20Z","snapshot_observed_at":"2026-08-09T02:34:30.861611Z","submitted_at":"2026-07-03T14:24:26Z","title":"CrackedPDFs: A Controlled Benchmark for Hidden Prompt Injection in PDFs","version":2},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-04T04:34:33.228420Z"},"links":{"citing_paper":"/paper/2607.19396"},"observation_digest":"sha256:99eb4046ff2d5fda30dca4fdfa31db5b1445afedff801c6e9a717d3ef983ec07","observation_id":"3758af88-8483-471a-91e8-1fca1cca36db","resolution":{"observed_at":"2026-08-04T04:34:33.228420Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T04:34:33.230801Z","title":"Prompt Injection and Jailbreak Detection Dataset","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19396","last_updated":"2026-08-02T14:07:20Z","snapshot_observed_at":"2026-08-09T02:34:30.861611Z","submitted_at":"2026-07-03T14:24:26Z","title":"CrackedPDFs: A Controlled Benchmark for Hidden Prompt Injection in PDFs","version":2},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-04T04:34:33.230801Z"},"links":{"citing_paper":"/paper/2607.19396"},"observation_digest":"sha256:267553c146843373fb72bbb5968108fe776b03b87b7aad3db70725e1f37df13e","observation_id":"ab5d4a4c-a314-4f05-a53f-30c812d08329","resolution":{"observed_at":"2026-08-04T04:34:33.230801Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2607.19396","last_updated":"2026-08-02T14:07:20Z","latest_version":2,"primary_category":"cs.AI","snapshot_observed_at":"2026-08-09T02:34:30.861611Z","submitted_at":"2026-07-03T14:24:26Z","title":"CrackedPDFs: A Controlled Benchmark for Hidden Prompt Injection in PDFs"},"reference_resolution":{"displayed":35,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":35,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":35},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"thesis":"As of 12 August 2026, this Paper Citation Record lists 35 of 35 outbound references and 0 inbound Pith citation observations for arXiv:2607.19396."}