{"as_of":"2026-08-08T15:18:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:550adff1d2d654ffaec36231b8af65dd0af412a633f072d1225d81d98417cd31","coverage":[{"denominator":54,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":54,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-08T00:51:38.329320Z","state":"measured"},{"denominator":54,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":54,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2608.04053/citation-record","integrity":"/paper/2608.04053/integrity","json":"/paper/2608.04053/citation-record.json","paper":"/paper/2608.04053"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:51:37.611450Z","title":"Proceedings of the 16th ACM workshop on artificial intelligence and security , pages=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-08T15:11:14.586579Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:37.611450Z"},"links":{"citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:5ba3d9ea5fa50bd96f52c4fa4f3968a5c434cf0aa9c5bfb8eeb613dd233fd2e0","observation_id":"c1a08d5e-249b-4cee-ad4f-ef98be84eb49","resolution":{"observed_at":"2026-08-08T00:51:37.611450Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:51:37.618617Z","title":"arXiv preprint arXiv:2310.12815 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-08T15:11:14.586579Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:37.618617Z"},"links":{"citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:3777b1d4b8c7faf17e0a5020d4f8f396c85f67a5c1773a0414630139b518d6af","observation_id":"4b3e5a4e-8767-40a4-bead-a944932a210a","resolution":{"observed_at":"2026-08-08T00:51:37.618617Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:51:37.623699Z","title":"Advances in Neural Information Processing Systems , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-08T15:11:14.586579Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:37.623699Z"},"links":{"citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:9bcd495e1639f2eab0b8c95f65d5a6f8a31b374efa7d3e18f19fe75ddcfb3df1","observation_id":"4a33352e-3d4f-4b9b-bb22-c841d0894878","resolution":{"observed_at":"2026-08-08T00:51:37.623699Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:51:39.431048Z","title":"2023 , publisher=","venue":null,"work_id":"df5eb10b-fac0-437f-a6fb-5167f9c9c80c","year":2023},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-08T15:11:14.586579Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:37.628827Z"},"links":{"citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:67fd0338bf7386adf9d9077455c4b8e29281d60e86caac416329ef77e7de852d","observation_id":"894a5520-b84a-4a30-bf27-6c2f65f1b38c","resolution":{"observed_at":"2026-08-08T00:51:39.436115Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:51:39.415581Z","title":"1979 , publisher=","venue":null,"work_id":"c92373d8-3561-4731-b409-901e4ce8162d","year":1979},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-08T15:11:14.586579Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:37.633813Z"},"links":{"citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:6ea538f51dc4d34db6659aa74c6178b708f0ea37996916e0002eed7da29d6bc2","observation_id":"3ef074bc-3fe7-4a43-add8-35ec6955cdb2","resolution":{"observed_at":"2026-08-08T00:51:39.420351Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:51:39.400309Z","title":"Cognitive linguistics: Basic readings , volume=","venue":null,"work_id":"69991d64-eecb-4df3-957d-d32b43657e35","year":null},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-08T15:11:14.586579Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:37.639319Z"},"links":{"citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:bf3e317c8b7022a93ab0f6135953432c57ef16edd50dd65fc9e92b58652ba51b","observation_id":"b46715fa-f411-41d6-a177-5aa962735f43","resolution":{"observed_at":"2026-08-08T00:51:39.405248Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:51:37.645030Z","title":"COLING 1998 Volume 1: The 17th International Conference on Computational Linguistics , year=","venue":null,"work_id":null,"year":1998},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-08T15:11:14.586579Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:37.645030Z"},"links":{"citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:66dc827760c10ab51dda5b569f4831a62dfe560a59adb899a24b44f509acca45","observation_id":"b9cfb268-5d55-4867-8b14-5b8a6a8b73c6","resolution":{"observed_at":"2026-08-08T00:51:37.645030Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:51:39.374500Z","title":"Computational linguistics , volume=","venue":null,"work_id":"a5fe3cd1-b4d3-49cb-9ef3-b91f04b1edd8","year":null},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-08T15:11:14.586579Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:37.649931Z"},"links":{"citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:7566a69714e321eaba94cbbf83609095dfe74ecd33e4e7deb47620ab2bd43b5a","observation_id":"bebb1eac-4183-4026-bf4d-d01a51e09ff7","resolution":{"observed_at":"2026-08-08T00:51:39.378992Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:51:37.654893Z","title":"arXiv preprint arXiv:2602.10453 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-08T15:11:14.586579Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:37.654893Z"},"links":{"citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:123b456c5a6600e5d7bfb4f4c2dc251928516fb1c809d6f0e53ec1fb2df40213","observation_id":"32d5cf6b-aad8-48ca-818c-6829c5ee5222","resolution":{"observed_at":"2026-08-08T00:51:37.654893Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2605.03378","last_updated":"2026-07-08T15:04:28Z","snapshot_observed_at":"2026-08-02T02:34:38.609069Z","submitted_at":"2026-05-05T05:37:00Z","title":"ARGUS: Defending LLM Agents Against Context-Aware Prompt Injection","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2605.03378","snapshot_observed_at":"2026-08-08T00:51:37.660174Z","title":"arXiv preprint arXiv:2605.03378 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-08T15:11:14.586579Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:37.660174Z"},"links":{"cited_paper":"/paper/2605.03378","citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:cbbd9852880583bc5bdd135ff325a5bb211965c5791e2d99c9730b6c9f817618","observation_id":"2935a0e6-4709-47d7-ac0d-161fbe26b8ba","resolution":{"observed_at":"2026-08-08T00:51:37.660174Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2605.17324","last_updated":"2026-05-17T08:30:45Z","snapshot_observed_at":"2026-08-03T01:56:42.822957Z","submitted_at":"2026-05-17T08:30:45Z","title":"ASPI: Seeking Ambiguity Clarification Amplifies Prompt Injection Vulnerability in LLM Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2605.17324","snapshot_observed_at":"2026-08-08T00:51:37.665028Z","title":"arXiv preprint arXiv:2605.17324 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-08T15:11:14.586579Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:37.665028Z"},"links":{"cited_paper":"/paper/2605.17324","citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:346db69ba996b62da9549d4e9671aacc57b48fd1d62dec16ceac780458cf3cf2","observation_id":"02e19852-729f-42ad-a1c0-138a9dfdb0c2","resolution":{"observed_at":"2026-08-08T00:51:37.665028Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2605.17634","last_updated":"2026-05-17T19:55:39Z","snapshot_observed_at":"2026-08-06T17:10:02.723847Z","submitted_at":"2026-05-17T19:55:39Z","title":"AI Agents May Always Fall for Prompt Injections","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2605.17634","snapshot_observed_at":"2026-08-08T00:51:37.670066Z","title":"arXiv preprint arXiv:2605.17634 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-08T15:11:14.586579Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:37.670066Z"},"links":{"cited_paper":"/paper/2605.17634","citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:c2365b725b83f62595f066c4c9ec952d642a0f28dee5d775821800692062a5c3","observation_id":"582e3146-39d0-4b06-af94-7e80afb8b2a0","resolution":{"observed_at":"2026-08-08T00:51:37.670066Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:51:37.674984Z","title":"arXiv preprint arXiv:2603.30016 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-08T15:11:14.586579Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:37.674984Z"},"links":{"citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:ba76c2e224376b6639f13ff2fecbe869184088a82eb5d0cc6a821c9eab359750","observation_id":"86b0b2d8-f69e-4851-a12c-107eefb184e2","resolution":{"observed_at":"2026-08-08T00:51:37.674984Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:51:39.358905Z","title":", author=","venue":null,"work_id":"d700d372-f731-42c0-9809-db4bc76fbc44","year":null},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-08T15:11:14.586579Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:37.679629Z"},"links":{"citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:0c8a4fb591a7877c6302a6c8ec21857547069959eadad81c74be85ac5ebdcd36","observation_id":"9abd683a-bc0e-48f3-af5b-0bb035571ee9","resolution":{"observed_at":"2026-08-08T00:51:39.363301Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:51:39.345124Z","title":"Cell , volume=","venue":null,"work_id":"f3e28de2-9ffb-4442-b79c-562360df2f21","year":1994},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-08T15:11:14.586579Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:37.684136Z"},"links":{"citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:6dfb2dacd745dd96d78ab915674b2caef695154582711b7e0353a2ab82599263","observation_id":"b85dc81d-2db4-48bb-92ec-ce2dddc8df8e","resolution":{"observed_at":"2026-08-08T00:51:39.349172Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:51:39.330839Z","title":"Nature reviews immunology , volume=","venue":null,"work_id":"6f88226b-c2c5-42dd-a3f0-bfc171583b46","year":2011},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-08T15:11:14.586579Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:37.689168Z"},"links":{"citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:38fc72edd6cb512ff0e606d0a7b2993565520584f8f379caacbd816af0046a62","observation_id":"8eb58d32-700f-4758-b7d0-653f4efa27b6","resolution":{"observed_at":"2026-08-08T00:51:39.335327Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:51:39.315292Z","title":"2001 , publisher=","venue":null,"work_id":"76e21b13-d239-43fc-ab3e-6578e666f03d","year":2001},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-08T15:11:14.586579Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:37.694125Z"},"links":{"citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:99d01a656ea8ec2bf66197239730bc4c54c19adf780826d9ec57b1b184883b06","observation_id":"93ed84d7-e1b0-4428-a70f-da95f3a15af0","resolution":{"observed_at":"2026-08-08T00:51:39.320383Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:51:39.299809Z","title":"Nature Reviews Immunology , volume=","venue":null,"work_id":"41868c9c-ef7e-42e4-aa25-a070856b0d7c","year":2008},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-08T15:11:14.586579Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:37.699963Z"},"links":{"citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:17e05fe63faf9c18facfdb3327a4960b13985bfdf3fd47ed337eaa5538be80ab","observation_id":"e0428a09-a03b-435b-87af-50972660de2b","resolution":{"observed_at":"2026-08-08T00:51:39.304673Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.14720","last_updated":"2024-03-20T15:26:23Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-03-20T15:26:23Z","title":"Defending Against Indirect Prompt Injection Attacks With Spotlighting","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.14720","snapshot_observed_at":"2026-08-08T00:51:37.714887Z","title":"arXiv preprint arXiv:2403.14720 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-08T15:11:14.586579Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:37.714887Z"},"links":{"cited_paper":"/paper/2403.14720","citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:160e208f2b0f4ae81e9fd396a05ed3fbf450984f2d4adaa5cf674dbd7f098a36","observation_id":"8f6729bc-3625-4fe7-84a9-d66ff10787f5","resolution":{"observed_at":"2026-08-08T00:51:37.714887Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:51:37.746562Z","title":"Proceedings of the 31st ACM SIGKDD Conference on Knowledge Discovery and Data Mining V","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-08T15:11:14.586579Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:37.746562Z"},"links":{"citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:1c9014fedadd37474ca0578b590663a488431a70c5990e3837805e77584e19b8","observation_id":"05ef34a5-fffb-4543-b307-4316c00ad664","resolution":{"observed_at":"2026-08-08T00:51:37.746562Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:51:37.762332Z","title":"Findings of the Association for Computational Linguistics: ACL 2024 , pages=","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-08T15:11:14.586579Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:37.762332Z"},"links":{"citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:bd7b096af272b56f969c95ea503f2793cbe23c7bce4199c33acc726c9d87ac7e","observation_id":"2ab931c8-f5a7-4ca2-beb5-a3a741613666","resolution":{"observed_at":"2026-08-08T00:51:37.762332Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:51:37.794068Z","title":"International Conference on Learning Representations , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-08T15:11:14.586579Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:37.794068Z"},"links":{"citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:4cce54b32a29bbd7b00590bf9afcb6c583b06d853c8046aead0cfff2560d218e","observation_id":"d490315a-054e-4ab1-80b7-94ea57bc0c30","resolution":{"observed_at":"2026-08-08T00:51:37.794068Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.13208","last_updated":"2024-04-19T22:55:23Z","snapshot_observed_at":"2026-08-02T11:48:17.206729Z","submitted_at":"2024-04-19T22:55:23Z","title":"The Instruction Hierarchy: Training LLMs to Prioritize Privileged Instructions","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.13208","snapshot_observed_at":"2026-08-08T00:51:37.823908Z","title":"arXiv preprint arXiv:2404.13208 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-08T15:11:14.586579Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:37.823908Z"},"links":{"cited_paper":"/paper/2404.13208","citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:a97ebe8dcf2fefd12f9d8db74b7e6a4e329037bff9349b567c4a05ed4166f5fe","observation_id":"34495cd4-29c6-4709-acd9-f46dac887518","resolution":{"observed_at":"2026-08-08T00:51:37.823908Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:51:37.871613Z","title":"34th USENIX Security Symposium (USENIX Security 25) , pages=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-08T15:11:14.586579Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:37.871613Z"},"links":{"citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:f9dc64cd77d54856dc85198c11922f26bb727e24151cabcab5a8ff8511a55d4f","observation_id":"3dd1deef-7ff8-441c-802c-a9ed2d99f1ef","resolution":{"observed_at":"2026-08-08T00:51:37.871613Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05451","last_updated":"2025-07-03T05:45:41Z","snapshot_observed_at":"2026-07-06T19:29:18.770662Z","submitted_at":"2024-10-07T19:34:35Z","title":"SecAlign: Defending Against Prompt Injection with Preference Optimization","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.05451","snapshot_observed_at":"2026-08-08T00:51:37.929904Z","title":"arXiv preprint arXiv:2410.05451 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-08T15:11:14.586579Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:37.929904Z"},"links":{"cited_paper":"/paper/2410.05451","citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:6a42ee7dafb029be722e14f426d30420d815ddea720da5126215ae6c08e7aa0f","observation_id":"7b9fdc99-be04-4fb2-98ee-3af458b5eefb","resolution":{"observed_at":"2026-08-08T00:51:37.929904Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:51:37.952670Z","title":"Proceedings of the 63rd Annual Meeting of the Association for Computational Linguistics (Volume 1: Long Papers) , pages=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-08T15:11:14.586579Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:37.952670Z"},"links":{"citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:d9f82cdf5fd58eb15b4eb4a796cd1848df7f64dc4af7011d8e0d5f935cb90544","observation_id":"fe5ebd86-a78f-40d2-beba-35329adb2d5b","resolution":{"observed_at":"2026-08-08T00:51:37.952670Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:51:37.957326Z","title":"arXiv preprint arXiv:2505.06311 , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-08T15:11:14.586579Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:37.957326Z"},"links":{"citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:213f5c0005c718335e61d7b785257cb4df87d45fad35ca79965f4f495d98a7f5","observation_id":"c7703e69-d818-4e43-a4a9-604291d154d5","resolution":{"observed_at":"2026-08-08T00:51:37.957326Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:51:37.961322Z","title":"Proceedings of the 63rd Annual Meeting of the Association for Computational Linguistics (Volume 1: Long Papers) , pages=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-08T15:11:14.586579Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:37.961322Z"},"links":{"citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:27ff65309f1d53185edfe947db9a545627f55cb170ad58757e23ec9d7c247f56","observation_id":"07e53576-f1ec-4bab-983c-a3c25b1a8750","resolution":{"observed_at":"2026-08-08T00:51:37.961322Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.18813","last_updated":"2025-06-24T08:05:33Z","snapshot_observed_at":"2026-08-07T19:59:01.081751Z","submitted_at":"2025-03-24T15:54:10Z","title":"Defeating Prompt Injections by Design","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.18813","snapshot_observed_at":"2026-08-08T00:51:37.965215Z","title":"arXiv preprint arXiv:2503.18813 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-08T15:11:14.586579Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:37.965215Z"},"links":{"cited_paper":"/paper/2503.18813","citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:9e3198f37ca5c8d1024ee99e651b346d1de6ac99c2f801d30c00f4ac293fbc9e","observation_id":"7ced01fd-a73c-45fa-a69a-2c8e1cc9b532","resolution":{"observed_at":"2026-08-08T00:51:37.965215Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:51:39.223007Z","title":"Proceedings of the 2025 Conference on Empirical Methods in Natural Language Processing , pages=","venue":null,"work_id":"95ca8543-2365-4875-8d78-37eb109a51fd","year":2025},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-08T15:11:14.586579Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:37.969782Z"},"links":{"citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:19529565d2c679de4a55925188e9619b54c3780cc9343e8a7c0e5820ceb681f2","observation_id":"d18945b4-3c30-4fa8-810d-b79398f3b125","resolution":{"observed_at":"2026-08-08T00:51:39.228097Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2603.10749","last_updated":"2026-06-10T06:18:26Z","snapshot_observed_at":"2026-07-14T23:21:58.266403Z","submitted_at":"2026-03-11T13:23:46Z","title":"AttriGuard: Defeating Indirect Prompt Injection in LLM Agents via Causal Attribution of Tool Invocations","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2603.10749","snapshot_observed_at":"2026-08-08T00:51:37.974114Z","title":"arXiv preprint arXiv:2603.10749 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-08T15:11:14.586579Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:37.974114Z"},"links":{"cited_paper":"/paper/2603.10749","citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:cb2e48bd83feed778121171e5763453a3ebab835186d9ac66f592d05d2e46e40","observation_id":"c62ddffa-b695-436b-8500-4d0a5c4801f0","resolution":{"observed_at":"2026-08-08T00:51:37.974114Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2605.15030","last_updated":"2026-05-14T16:26:27Z","snapshot_observed_at":"2026-07-06T23:26:23.179482Z","submitted_at":"2026-05-14T16:26:27Z","title":"WARD: Adversarially Robust Defense of Web Agents Against Prompt Injections","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2605.15030","snapshot_observed_at":"2026-08-08T00:51:37.981307Z","title":"arXiv preprint arXiv:2605.15030 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-08T15:11:14.586579Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:37.981307Z"},"links":{"cited_paper":"/paper/2605.15030","citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:e8b1737d00acea58c2ea42257aec49bc01b8ecbb43ce95d80a977f9c83643be9","observation_id":"72c96f92-8b1e-4040-9215-c8648d3e6ac7","resolution":{"observed_at":"2026-08-08T00:51:37.981307Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:51:39.207256Z","title":"Advances in Neural Information Processing Systems , volume=","venue":null,"work_id":"0636de77-b0c6-4bd6-a0d1-5922641df955","year":null},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-08T15:11:14.586579Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:37.986131Z"},"links":{"citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:eb85242dd9c0c4d9598137778b371d87d8a20f3521063b30468ef794e8635336","observation_id":"da74870d-1909-42ba-9000-6df2350b0490","resolution":{"observed_at":"2026-08-08T00:51:39.212162Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:51:37.991251Z","title":"Advances in neural information processing systems , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-08T15:11:14.586579Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:37.991251Z"},"links":{"citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:6600b1425d5ef7611c147b761998261192068c5574f02a87e89c9301798417e3","observation_id":"745b462d-90cc-44a6-a4a4-5265e703c768","resolution":{"observed_at":"2026-08-08T00:51:37.991251Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:51:37.995595Z","title":"Proceedings of the AAAI Conference on Artificial Intelligence , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-08T15:11:14.586579Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:37.995595Z"},"links":{"citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:d5b982d221f0835de925e6a29105e3ce9d39d283e2d1837efe0815deb93129fa","observation_id":"f6661a60-8c88-4ec3-8beb-ddacbe04c9ed","resolution":{"observed_at":"2026-08-08T00:51:37.995595Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2607.14611","last_updated":"2026-07-16T06:13:48Z","snapshot_observed_at":"2026-08-06T21:11:50.222025Z","submitted_at":"2026-07-16T06:13:48Z","title":"Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems","version":1},"cited_work":{"arxiv_id":"2607.14611","doi":null,"metadata_source":"pith","pith_arxiv_id":"2607.14611","snapshot_observed_at":"2026-08-08T00:51:38.474275Z","title":"Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems","venue":"cs.CR","work_id":"e4839d66-2c69-40a7-9444-52d18c54d5e7","year":2026},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-08T15:11:14.586579Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:38.000729Z"},"links":{"cited_paper":"/paper/2607.14611","citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:c17bcf2211231d44a47a4b2fa9cb6a86b483c67c8db1d30d5d244cfacda5fdd8","observation_id":"d801fd05-9d4b-4757-9fb9-54ceb9d0c655","resolution":{"observed_at":"2026-08-08T00:51:38.479075Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2606.04329","last_updated":"2026-06-18T22:06:23Z","snapshot_observed_at":"2026-08-04T07:47:41.111384Z","submitted_at":"2026-06-03T01:04:13Z","title":"From Untrusted Input to Trusted Memory: A Systematic Study of Memory Poisoning Attacks in LLM Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2606.04329","snapshot_observed_at":"2026-08-08T00:51:38.005637Z","title":"arXiv preprint arXiv:2606.04329 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-08T15:11:14.586579Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:38.005637Z"},"links":{"cited_paper":"/paper/2606.04329","citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:f93919d6eb2b826f68651a518a879214f3f39cde6d105d27e9635d274f37c6b7","observation_id":"6505e6ed-eef8-45a3-b4bb-c3f57943ffa5","resolution":{"observed_at":"2026-08-08T00:51:38.005637Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:51:39.172083Z","title":"Proceedings of 1994 IEEE computer society symposium on research in security and privacy , pages=","venue":null,"work_id":"e281037e-331d-4a60-a339-e0b4c6b45d9e","year":1994},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-08T15:11:14.586579Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":38,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:38.010644Z"},"links":{"citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:ce5e2ec2c1f9c5edbb12eab85461b256adc4d6a2f49fd3737130436f3df520a4","observation_id":"6eb49d64-cb4a-4920-a90d-566119b9c18b","resolution":{"observed_at":"2026-08-08T00:51:39.176703Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:51:39.157351Z","title":"Evolutionary computation , volume=","venue":null,"work_id":"eacc6343-9f95-4056-b057-16333b0f1807","year":2000},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-08T15:11:14.586579Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":39,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:38.015616Z"},"links":{"citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:19c1fc13cebda2f9214f7f7df3acb193bc0999246bffd69d83fcd1d454bbeb6f","observation_id":"6f94bf15-a2e0-42e6-b075-815c48bc36a3","resolution":{"observed_at":"2026-08-08T00:51:39.162009Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2605.19328","last_updated":"2026-05-19T04:07:24Z","snapshot_observed_at":"2026-08-03T19:21:56.538777Z","submitted_at":"2026-05-19T04:07:24Z","title":"RoboJailBench: Benchmarking Adversarial Attacks and Defenses in Embodied Robotic Agents","version":1},"cited_work":{"arxiv_id":"2605.19328","doi":null,"metadata_source":"pith","pith_arxiv_id":"2605.19328","snapshot_observed_at":"2026-08-08T00:51:38.414689Z","title":"RoboJailBench: Benchmarking Adversarial Attacks and Defenses in Embodied Robotic Agents","venue":"cs.CR","work_id":"7f6f89c4-5394-49b8-a31d-18f6651dfd98","year":2026},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-08T15:11:14.586579Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":40,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:38.020287Z"},"links":{"cited_paper":"/paper/2605.19328","citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:a0759d37c9f5b04185aa4e81efa49811452bdd8ca400be347086ff314ef2efc0","observation_id":"1cc48d7f-9be4-4d5a-9766-a4c34725e738","resolution":{"observed_at":"2026-08-08T00:51:38.424397Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:51:39.139430Z","title":"Advances in Neural Information Processing Systems , volume=","venue":null,"work_id":"fd59cc6c-a62c-497f-b1ff-f4119bf5051e","year":null},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-08T15:11:14.586579Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":41,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:38.025114Z"},"links":{"citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:c0889bde89355b862afbaafd20fb5d22a84620b08e7d62a7806b6033616b5eec","observation_id":"382f9ef6-aeb8-4c3b-a806-a261aa8a7b1e","resolution":{"observed_at":"2026-08-08T00:51:39.144246Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2502.05174","last_updated":"2025-06-10T18:13:09Z","snapshot_observed_at":"2026-07-06T20:33:01.960703Z","submitted_at":"2025-02-07T18:57:49Z","title":"MELON: Provable Defense Against Indirect Prompt Injection Attacks in AI Agents","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.05174","snapshot_observed_at":"2026-08-08T00:51:38.030612Z","title":"arXiv preprint arXiv:2502.05174 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-08T15:11:14.586579Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":42,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:38.030612Z"},"links":{"cited_paper":"/paper/2502.05174","citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:c653e29a76421bddc5d0727d839cd3dcccf1757786704de4169ea818a8b8f74c","observation_id":"7de49ffb-9ea8-48b1-bdce-4bda27c3e421","resolution":{"observed_at":"2026-08-08T00:51:38.030612Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2602.03117","last_updated":"2026-05-07T07:42:14Z","snapshot_observed_at":"2026-07-06T22:44:18.875334Z","submitted_at":"2026-02-03T05:20:42Z","title":"AgentDyn: Are Your Agent Security Defenses Deployable in Real-World Dynamic Environments?","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2602.03117","snapshot_observed_at":"2026-08-08T00:51:38.035754Z","title":"arXiv preprint arXiv:2602.03117 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-08T15:11:14.586579Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":43,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:38.035754Z"},"links":{"cited_paper":"/paper/2602.03117","citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:d22bd4acbeee656248f32ee6b5003b66992ca693b9f72854b276ba9338102262","observation_id":"8fbc69ab-959d-4f68-824b-0e6139c66aa5","resolution":{"observed_at":"2026-08-08T00:51:38.035754Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:51:39.124273Z","title":"Advances in Neural Information Processing Systems , volume=","venue":null,"work_id":"f4f7278e-5a42-466e-8500-788163b94650","year":null},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-08T15:11:14.586579Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":44,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:38.040635Z"},"links":{"citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:3030b63a46d320d802a851f5c8e4ec2d6ac02a6cbaebf5cc21c922b3cf2e1a62","observation_id":"14e5b9cc-5cd1-4520-9590-2338957aec5c","resolution":{"observed_at":"2026-08-08T00:51:39.129160Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:51:39.108521Z","title":"Proceedings of the 2025 Conference on Empirical Methods in Natural Language Processing , pages=","venue":null,"work_id":"361d2da7-dc49-43a8-8d08-305078e06036","year":2025},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-08T15:11:14.586579Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":45,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:38.045364Z"},"links":{"citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:1ac873e9a02722fa672235e0ab7d81758870ad74b2d7a14f8b3a7c6f1b4deb1d","observation_id":"a5c53926-f165-4fa2-a303-7d23b127f2d5","resolution":{"observed_at":"2026-08-08T00:51:39.113483Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:51:39.093039Z","title":"Advances in Neural Information Processing Systems , volume=","venue":null,"work_id":"7fb0c4b5-25af-4e78-b834-99aacb981012","year":null},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-08T15:11:14.586579Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":46,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:38.050277Z"},"links":{"citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:dddd0e2a6ae513c8e16935432a8e132e52310a6287773087131cdf07c1427c57","observation_id":"a1b4839f-e8eb-4914-bf98-8cae6d7c3b45","resolution":{"observed_at":"2026-08-08T00:51:39.097842Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1909.12434","last_updated":"2020-02-14T22:32:46Z","snapshot_observed_at":"2026-07-06T08:25:01.425019Z","submitted_at":"2019-09-26T23:25:25Z","title":"Learning the Difference that Makes a Difference with Counterfactually-Augmented Data","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1909.12434","snapshot_observed_at":"2026-08-08T00:51:38.137037Z","title":"arXiv preprint arXiv:1909.12434 , year=","venue":null,"work_id":null,"year":1909},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-08T15:11:14.586579Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":47,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:38.137037Z"},"links":{"cited_paper":"/paper/1909.12434","citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:5859993ed1510a762d10951a2eec32ff0b5786f34ded658e9d1dfd5b361f19de","observation_id":"8f650b8c-8254-4e30-aa96-52f647d32886","resolution":{"observed_at":"2026-08-08T00:51:38.137037Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:51:39.077607Z","title":"Nature Reviews Immunology , volume=","venue":null,"work_id":"6282c535-36f1-4da6-ba81-fea720ae0fe4","year":2024},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-08T15:11:14.586579Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":48,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:38.244604Z"},"links":{"citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:344caa05d42003719dca7789898a86f383cf230c1d48a6eb181d32503bbb8136","observation_id":"4735b575-dc32-433f-8dcd-65651b913ca9","resolution":{"observed_at":"2026-08-08T00:51:39.082495Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:51:38.294260Z","title":"Advances in Neural Information Processing Systems , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-08T15:11:14.586579Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":49,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:38.294260Z"},"links":{"citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:f25eca17348470a8e72ec8854d1c5e20a5a56c944740169d7929ff39c782c639","observation_id":"d759868f-e9fa-423f-8039-7221a047f22a","resolution":{"observed_at":"2026-08-08T00:51:38.294260Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:51:38.299467Z","title":"Advances in Neural Information Processing Systems , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-08T15:11:14.586579Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":50,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:38.299467Z"},"links":{"citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:608d8346caef1535a12e2050c3888e220bf22e008f95a2942ba38cf7c326b6e2","observation_id":"f3bd20f7-47c5-4345-a8b5-8e8f935fef14","resolution":{"observed_at":"2026-08-08T00:51:38.299467Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:51:38.308366Z","title":"Advances in Neural Information Processing Systems , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-08T15:11:14.586579Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":51,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:38.308366Z"},"links":{"citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:9a3c49e58eca2b1ee692d6f7ba2fd67e709f9feee655f4ddccd38d42ad2a4751","observation_id":"8d8d6198-e465-40d9-948e-6fa5a235305d","resolution":{"observed_at":"2026-08-08T00:51:38.308366Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:51:38.315243Z","title":"Advances in neural information processing systems , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-08T15:11:14.586579Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":52,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:38.315243Z"},"links":{"citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:5e10a2772f19ccecbcbb969388bbad2d7d386262894d177a73b0b115988fcbf3","observation_id":"8eb8cb3e-7a6c-42bc-a75e-7e87d569ae52","resolution":{"observed_at":"2026-08-08T00:51:38.315243Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:51:39.023400Z","title":"Advances in Neural Information Processing Systems , volume=","venue":null,"work_id":"cc513b7e-8bff-44cc-bd7a-bf7494136488","year":null},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-08T15:11:14.586579Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":53,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:38.322578Z"},"links":{"citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:96902f9972a3192d92391bec9983aaee0c03504f956392c883338905bd186498","observation_id":"b45d935c-d224-4154-99d4-6233b2190184","resolution":{"observed_at":"2026-08-08T00:51:39.027749Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:51:38.329320Z","title":"2026 , howpublished=","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","snapshot_observed_at":"2026-08-08T15:11:14.586579Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","version":1},"reference_index":54,"source":"arxiv_source","source_observed_at":"2026-08-08T00:51:38.329320Z"},"links":{"citing_paper":"/paper/2608.04053"},"observation_digest":"sha256:ea08716447d7dc644f4b68ef461100ff8beed67ccb689cdff8ad4769eafcc25c","observation_id":"fffbdab5-ae42-47be-9db3-0b826bd61072","resolution":{"observed_at":"2026-08-08T00:51:38.329320Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2608.04053","last_updated":"2026-08-04T10:41:34Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-08T15:11:14.586579Z","submitted_at":"2026-08-04T10:41:34Z","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection"},"reference_resolution":{"displayed":54,"state_counts":{"malformed_identifier":0,"metadata_mismatch":2,"parse_uncertain":0,"unresolved":33,"verified_exact":0,"verified_fuzzy":19},"total_outbound_references":54},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 54 of 54 outbound references and 0 inbound Pith citation observations for arXiv:2608.04053."}