{"as_of":"2026-08-09T02:07:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:8216640e2f90685a987faef0dfa9bfe07c58fd1147dc328ddfdea88a9974ecf9","coverage":[{"denominator":29,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":29,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-08T12:07:35.990056Z","state":"measured"},{"denominator":29,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":29,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2608.05495/citation-record","integrity":"/paper/2608.05495/integrity","json":"/paper/2608.05495/citation-record.json","paper":"/paper/2608.05495"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2307.10490","last_updated":"2023-10-03T17:03:10Z","snapshot_observed_at":"2026-08-08T22:08:37.768137Z","submitted_at":"2023-07-19T23:03:20Z","title":"Abusing Images and Sounds for Indirect Instruction Injection in Multi-Modal LLMs","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.10490","snapshot_observed_at":"2026-08-08T12:07:35.853723Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.05495","last_updated":"2026-08-06T00:51:46Z","snapshot_observed_at":"2026-08-09T01:10:33.951852Z","submitted_at":"2026-08-06T00:51:46Z","title":"PromptShield Home: Ambient Multimodal Prompt Injection Defense for Smart-Home Agents","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-08T12:07:35.853723Z"},"links":{"cited_paper":"/paper/2307.10490","citing_paper":"/paper/2608.05495"},"observation_digest":"sha256:eddb80fe3753fe9a6cca0e2d2d121d1548de5fd23d457c6d97119c6f1ffceece","observation_id":"646d89a3-18e4-4702-a6e0-1f7169807a60","resolution":{"observed_at":"2026-08-08T12:07:35.853723Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1016/j.cmpb.2008","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T12:07:36.238281Z","title":null,"venue":null,"work_id":"f6382028-d096-4c2d-aa4c-bb4e60a85a7f","year":2008},"citing_paper":{"arxiv_id":"2608.05495","last_updated":"2026-08-06T00:51:46Z","snapshot_observed_at":"2026-08-09T01:10:33.951852Z","submitted_at":"2026-08-06T00:51:46Z","title":"PromptShield Home: Ambient Multimodal Prompt Injection Defense for Smart-Home Agents","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-08T12:07:35.859702Z"},"links":{"citing_paper":"/paper/2608.05495"},"observation_digest":"sha256:4cd51d0124278d178d0d572c4c73fe2007505cc23235939ca12746900003580e","observation_id":"ff8d04d3-23ab-4589-9c0b-88928b68cd32","resolution":{"observed_at":"2026-08-08T12:07:36.243276Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1038/s41467-024-55631-x","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T12:07:36.222266Z","title":"Wiest, Carolin V","venue":null,"work_id":"ec06e9d4-8928-4517-93cf-3a07aa0a37ab","year":2025},"citing_paper":{"arxiv_id":"2608.05495","last_updated":"2026-08-06T00:51:46Z","snapshot_observed_at":"2026-08-09T01:10:33.951852Z","submitted_at":"2026-08-06T00:51:46Z","title":"PromptShield Home: Ambient Multimodal Prompt Injection Defense for Smart-Home Agents","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-08T12:07:35.864836Z"},"links":{"citing_paper":"/paper/2608.05495"},"observation_digest":"sha256:b6a80f601ffa8033c366d9177913ab1d5f622b11cd348f6a3d51e5ec1de019de","observation_id":"966f20a6-3d2c-4603-95bf-997c1da96c8c","resolution":{"observed_at":"2026-08-08T12:07:36.227275Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T12:07:37.567663Z","title":null,"venue":null,"work_id":"be2c5fe9-af2c-4196-b329-916b20ea0a8d","year":2023},"citing_paper":{"arxiv_id":"2608.05495","last_updated":"2026-08-06T00:51:46Z","snapshot_observed_at":"2026-08-09T01:10:33.951852Z","submitted_at":"2026-08-06T00:51:46Z","title":"PromptShield Home: Ambient Multimodal Prompt Injection Defense for Smart-Home Agents","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-08T12:07:35.869966Z"},"links":{"citing_paper":"/paper/2608.05495"},"observation_digest":"sha256:ab450290b34ae66ac6d7ac06272dc9f8b9735be80f2b5871450371fe697ea18d","observation_id":"28ac0d2d-0cc9-483d-aa25-61db76afa12e","resolution":{"observed_at":"2026-08-08T12:07:37.572875Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T12:07:35.875185Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.05495","last_updated":"2026-08-06T00:51:46Z","snapshot_observed_at":"2026-08-09T01:10:33.951852Z","submitted_at":"2026-08-06T00:51:46Z","title":"PromptShield Home: Ambient Multimodal Prompt Injection Defense for Smart-Home Agents","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-08T12:07:35.875185Z"},"links":{"citing_paper":"/paper/2608.05495"},"observation_digest":"sha256:1b6fd2259cef51f78223e15e8def516308b5fdd6e7413aa556f733acb5c3228a","observation_id":"439b07e0-04d4-4650-9937-7f52cb25c4ce","resolution":{"observed_at":"2026-08-08T12:07:35.875185Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T12:07:37.550091Z","title":"2017.IoT fundamentals: Networking technologies, protocols, and use cases for the internet of things","venue":null,"work_id":"13495893-ed69-44f4-bae4-0fefd8047adf","year":2017},"citing_paper":{"arxiv_id":"2608.05495","last_updated":"2026-08-06T00:51:46Z","snapshot_observed_at":"2026-08-09T01:10:33.951852Z","submitted_at":"2026-08-06T00:51:46Z","title":"PromptShield Home: Ambient Multimodal Prompt Injection Defense for Smart-Home Agents","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-08T12:07:35.880075Z"},"links":{"citing_paper":"/paper/2608.05495"},"observation_digest":"sha256:7f5b2f801f45b0ede793844cfd2b54bb1bf93566a62ee6381e23481a6b13ac01","observation_id":"ee173c15-7fb8-4401-a064-4889b7afb789","resolution":{"observed_at":"2026-08-08T12:07:37.555770Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2021.10221","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T12:07:37.399845Z","title":null,"venue":null,"work_id":"1a44e6f3-909c-46ee-8403-5ee206c94725","year":2021},"citing_paper":{"arxiv_id":"2608.05495","last_updated":"2026-08-06T00:51:46Z","snapshot_observed_at":"2026-08-09T01:10:33.951852Z","submitted_at":"2026-08-06T00:51:46Z","title":"PromptShield Home: Ambient Multimodal Prompt Injection Defense for Smart-Home Agents","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-08T12:07:35.885643Z"},"links":{"citing_paper":"/paper/2608.05495"},"observation_digest":"sha256:1a288afc12365998b34351154b5f0be79016a5eeff5522f3df07cb880635c0e5","observation_id":"3cfebdda-c51a-4d6b-a9c9-1be4e20206a4","resolution":{"observed_at":"2026-08-08T12:07:37.407487Z","resolver_source":"raw_fallback","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.05499","last_updated":"2025-12-29T02:25:27Z","snapshot_observed_at":"2026-07-06T15:40:27.639368Z","submitted_at":"2023-06-08T18:43:11Z","title":"Prompt Injection attack against LLM-integrated Applications","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.05499","snapshot_observed_at":"2026-08-08T12:07:35.890440Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.05495","last_updated":"2026-08-06T00:51:46Z","snapshot_observed_at":"2026-08-09T01:10:33.951852Z","submitted_at":"2026-08-06T00:51:46Z","title":"PromptShield Home: Ambient Multimodal Prompt Injection Defense for Smart-Home Agents","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-08T12:07:35.890440Z"},"links":{"cited_paper":"/paper/2306.05499","citing_paper":"/paper/2608.05495"},"observation_digest":"sha256:155f243ce715b5ca7420f42346dc5a5da87ff8a9f0dd77609d93044c6f318a78","observation_id":"13820eca-092c-48ee-810a-9d56a47a578c","resolution":{"observed_at":"2026-08-08T12:07:35.890440Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.48550/arxiv.2310.12815","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T12:07:36.186437Z","title":null,"venue":null,"work_id":"24b7b82a-6d26-49f1-a533-184e6590808a","year":2024},"citing_paper":{"arxiv_id":"2608.05495","last_updated":"2026-08-06T00:51:46Z","snapshot_observed_at":"2026-08-09T01:10:33.951852Z","submitted_at":"2026-08-06T00:51:46Z","title":"PromptShield Home: Ambient Multimodal Prompt Injection Defense for Smart-Home Agents","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-08T12:07:35.895709Z"},"links":{"citing_paper":"/paper/2608.05495"},"observation_digest":"sha256:ee71882a52e2a62d19921a59d371a945890ac9f5fc1edbd01cd13a562983f1d5","observation_id":"4d1d0d88-661a-4906-abf9-cb5ecd00489e","resolution":{"observed_at":"2026-08-08T12:07:36.191405Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T12:07:35.900496Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.05495","last_updated":"2026-08-06T00:51:46Z","snapshot_observed_at":"2026-08-09T01:10:33.951852Z","submitted_at":"2026-08-06T00:51:46Z","title":"PromptShield Home: Ambient Multimodal Prompt Injection Defense for Smart-Home Agents","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-08T12:07:35.900496Z"},"links":{"citing_paper":"/paper/2608.05495"},"observation_digest":"sha256:42b6edbb0ac3e6c412e2df5b66cbd63c14cbac589d20f4ba0c36fa925713227c","observation_id":"f3aea480-c23a-4480-ab1f-0a39cfd5b2aa","resolution":{"observed_at":"2026-08-08T12:07:35.900496Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T12:07:35.905386Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2608.05495","last_updated":"2026-08-06T00:51:46Z","snapshot_observed_at":"2026-08-09T01:10:33.951852Z","submitted_at":"2026-08-06T00:51:46Z","title":"PromptShield Home: Ambient Multimodal Prompt Injection Defense for Smart-Home Agents","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-08T12:07:35.905386Z"},"links":{"citing_paper":"/paper/2608.05495"},"observation_digest":"sha256:6968131e3781a71746cacddd6af40a47fff0be6dd498e97e2efd2099a7b2b919","observation_id":"25c7b0e8-77ca-46ce-9451-e08437df7f7a","resolution":{"observed_at":"2026-08-08T12:07:35.905386Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T12:07:37.531929Z","title":"Choquette-Choo, Milad Nasr, Chawin Sitawarin, Gena Gibson, Andreas Terzis, and John \"Four\" Flynn","venue":null,"work_id":"f91fb648-234f-481e-b1eb-9aa3133cd97d","year":null},"citing_paper":{"arxiv_id":"2608.05495","last_updated":"2026-08-06T00:51:46Z","snapshot_observed_at":"2026-08-09T01:10:33.951852Z","submitted_at":"2026-08-06T00:51:46Z","title":"PromptShield Home: Ambient Multimodal Prompt Injection Defense for Smart-Home Agents","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-08T12:07:35.910416Z"},"links":{"citing_paper":"/paper/2608.05495"},"observation_digest":"sha256:db30e480a94b32bf4538997c0a7a231c70a41bb55adad983a2a19d81d914d7f0","observation_id":"f68e74f9-7dd8-490a-9583-b94d83e59ef3","resolution":{"observed_at":"2026-08-08T12:07:37.538116Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T12:07:35.920566Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.05495","last_updated":"2026-08-06T00:51:46Z","snapshot_observed_at":"2026-08-09T01:10:33.951852Z","submitted_at":"2026-08-06T00:51:46Z","title":"PromptShield Home: Ambient Multimodal Prompt Injection Defense for Smart-Home Agents","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-08T12:07:35.920566Z"},"links":{"citing_paper":"/paper/2608.05495"},"observation_digest":"sha256:cfd4b6e7625d374bc119f529ec4e730f763bb00c4611fdcfd8bb91140caf7291","observation_id":"a0ed537e-3a22-43cc-bb81-e96e32c961da","resolution":{"observed_at":"2026-08-08T12:07:35.920566Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T12:07:35.924756Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2608.05495","last_updated":"2026-08-06T00:51:46Z","snapshot_observed_at":"2026-08-09T01:10:33.951852Z","submitted_at":"2026-08-06T00:51:46Z","title":"PromptShield Home: Ambient Multimodal Prompt Injection Defense for Smart-Home Agents","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-08T12:07:35.924756Z"},"links":{"citing_paper":"/paper/2608.05495"},"observation_digest":"sha256:39c93a5de00599eda74daeae1783f15156e3e4135530fead491004fb330cac5c","observation_id":"9bad4706-8c1a-4f0d-becf-64fe2fbdf463","resolution":{"observed_at":"2026-08-08T12:07:35.924756Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T12:07:35.929046Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2608.05495","last_updated":"2026-08-06T00:51:46Z","snapshot_observed_at":"2026-08-09T01:10:33.951852Z","submitted_at":"2026-08-06T00:51:46Z","title":"PromptShield Home: Ambient Multimodal Prompt Injection Defense for Smart-Home Agents","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-08T12:07:35.929046Z"},"links":{"citing_paper":"/paper/2608.05495"},"observation_digest":"sha256:299c4c7749f873fa1498a2051420b20cfe86175c6583641d238660a87caa235e","observation_id":"b6605796-67ed-448b-be79-50dc32348709","resolution":{"observed_at":"2026-08-08T12:07:35.929046Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T12:07:35.933357Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05495","last_updated":"2026-08-06T00:51:46Z","snapshot_observed_at":"2026-08-09T01:10:33.951852Z","submitted_at":"2026-08-06T00:51:46Z","title":"PromptShield Home: Ambient Multimodal Prompt Injection Defense for Smart-Home Agents","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-08T12:07:35.933357Z"},"links":{"citing_paper":"/paper/2608.05495"},"observation_digest":"sha256:03754ce0f1efa2983050119e88de9edc8d7ea1f39a81fdca1ddef2659390dd03","observation_id":"aec5c855-2176-4358-ad18-39901a974d7e","resolution":{"observed_at":"2026-08-08T12:07:35.933357Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1007/s00779-014-","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T12:07:36.041680Z","title":null,"venue":null,"work_id":"aa862e79-1881-43c7-8e19-ad8740190d74","year":2015},"citing_paper":{"arxiv_id":"2608.05495","last_updated":"2026-08-06T00:51:46Z","snapshot_observed_at":"2026-08-09T01:10:33.951852Z","submitted_at":"2026-08-06T00:51:46Z","title":"PromptShield Home: Ambient Multimodal Prompt Injection Defense for Smart-Home Agents","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-08T12:07:35.942536Z"},"links":{"citing_paper":"/paper/2608.05495"},"observation_digest":"sha256:e6232299fc27f78b1da34382173d0694f1df04f8e8346981b94464cce385fa9e","observation_id":"6e0cc572-919d-4fd3-a6af-8ca3686707de","resolution":{"observed_at":"2026-08-08T12:07:36.047070Z","resolver_source":"doi_truncated","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2023.10386","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T12:07:36.849871Z","title":null,"venue":null,"work_id":"c43315db-4b46-455f-94ef-8b0cd7cf67b7","year":2023},"citing_paper":{"arxiv_id":"2608.05495","last_updated":"2026-08-06T00:51:46Z","snapshot_observed_at":"2026-08-09T01:10:33.951852Z","submitted_at":"2026-08-06T00:51:46Z","title":"PromptShield Home: Ambient Multimodal Prompt Injection Defense for Smart-Home Agents","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-08T12:07:35.947568Z"},"links":{"citing_paper":"/paper/2608.05495"},"observation_digest":"sha256:ad676f9456ef1040af9089cb653a9cdb9e262ebfc4000e2124c1ceb2adf6e339","observation_id":"e70985eb-90a8-4add-b2c5-872a847d5d3d","resolution":{"observed_at":"2026-08-08T12:07:36.858178Z","resolver_source":"raw_fallback","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T12:07:35.951958Z","title":"Edward Suh","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.05495","last_updated":"2026-08-06T00:51:46Z","snapshot_observed_at":"2026-08-09T01:10:33.951852Z","submitted_at":"2026-08-06T00:51:46Z","title":"PromptShield Home: Ambient Multimodal Prompt Injection Defense for Smart-Home Agents","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-08T12:07:35.951958Z"},"links":{"citing_paper":"/paper/2608.05495"},"observation_digest":"sha256:8101314e1a7fdef82d473a215163c2cfe9da8d120ab5519f8c608f9c8f650af0","observation_id":"741060fc-6314-427b-befe-078c3b78bdfd","resolution":{"observed_at":"2026-08-08T12:07:35.951958Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T12:07:35.956234Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.05495","last_updated":"2026-08-06T00:51:46Z","snapshot_observed_at":"2026-08-09T01:10:33.951852Z","submitted_at":"2026-08-06T00:51:46Z","title":"PromptShield Home: Ambient Multimodal Prompt Injection Defense for Smart-Home Agents","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-08T12:07:35.956234Z"},"links":{"citing_paper":"/paper/2608.05495"},"observation_digest":"sha256:1c59ce29451b2975f289c6f505d79b239248f3877d63d60ba65262a56f284bdb","observation_id":"8159b725-7acc-4aa0-b07d-db8322c7dd92","resolution":{"observed_at":"2026-08-08T12:07:35.956234Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T12:07:35.960420Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.05495","last_updated":"2026-08-06T00:51:46Z","snapshot_observed_at":"2026-08-09T01:10:33.951852Z","submitted_at":"2026-08-06T00:51:46Z","title":"PromptShield Home: Ambient Multimodal Prompt Injection Defense for Smart-Home Agents","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-08T12:07:35.960420Z"},"links":{"citing_paper":"/paper/2608.05495"},"observation_digest":"sha256:fb597c1e34405e4015ae70aa534ee3a6878c7674229d17fba66faaa2a5e94618","observation_id":"3d281f4f-7af4-4db2-9d67-ff2b0c9d12f0","resolution":{"observed_at":"2026-08-08T12:07:35.960420Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1016/j.sbspro.2012.04","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T12:07:36.023649Z","title":null,"venue":null,"work_id":"07f981c8-9009-4bf5-a237-79845da99093","year":2012},"citing_paper":{"arxiv_id":"2608.05495","last_updated":"2026-08-06T00:51:46Z","snapshot_observed_at":"2026-08-09T01:10:33.951852Z","submitted_at":"2026-08-06T00:51:46Z","title":"PromptShield Home: Ambient Multimodal Prompt Injection Defense for Smart-Home Agents","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-08T12:07:35.964757Z"},"links":{"citing_paper":"/paper/2608.05495"},"observation_digest":"sha256:968608c71051cd39502f5b6722d9cdb50b09d79f943e02f56850dd93ee000e63","observation_id":"d04a1510-3779-44bf-89b9-bc3270f4825c","resolution":{"observed_at":"2026-08-08T12:07:36.029725Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T12:07:35.969620Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.05495","last_updated":"2026-08-06T00:51:46Z","snapshot_observed_at":"2026-08-09T01:10:33.951852Z","submitted_at":"2026-08-06T00:51:46Z","title":"PromptShield Home: Ambient Multimodal Prompt Injection Defense for Smart-Home Agents","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-08T12:07:35.969620Z"},"links":{"citing_paper":"/paper/2608.05495"},"observation_digest":"sha256:306be39b7d2df3d8a94794a9ecaabc9d666ac01638335f31d3614b94d6a97a11","observation_id":"d5ae12d0-7d09-4149-8f96-51ec3f149787","resolution":{"observed_at":"2026-08-08T12:07:35.969620Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"6270.37602","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T12:07:36.428266Z","title":null,"venue":null,"work_id":"1e75977e-e2a9-4c21-aac9-1217f6756ad4","year":2025},"citing_paper":{"arxiv_id":"2608.05495","last_updated":"2026-08-06T00:51:46Z","snapshot_observed_at":"2026-08-09T01:10:33.951852Z","submitted_at":"2026-08-06T00:51:46Z","title":"PromptShield Home: Ambient Multimodal Prompt Injection Defense for Smart-Home Agents","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-08T12:07:35.974695Z"},"links":{"citing_paper":"/paper/2608.05495"},"observation_digest":"sha256:fc4460e0e303be14d3ce8b13946a189cfd477fa9968c5e40b19cc67fd2c9415d","observation_id":"331d3f98-c503-40b3-bc7a-77be95bb89cf","resolution":{"observed_at":"2026-08-08T12:07:36.435846Z","resolver_source":"raw_fallback","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2414.37947","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T12:07:36.331585Z","title":null,"venue":null,"work_id":"1c9b14e4-4193-4a04-9b05-fa36ebdeefb8","year":2026},"citing_paper":{"arxiv_id":"2608.05495","last_updated":"2026-08-06T00:51:46Z","snapshot_observed_at":"2026-08-09T01:10:33.951852Z","submitted_at":"2026-08-06T00:51:46Z","title":"PromptShield Home: Ambient Multimodal Prompt Injection Defense for Smart-Home Agents","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-08T12:07:35.979580Z"},"links":{"citing_paper":"/paper/2608.05495"},"observation_digest":"sha256:a0ad2c377a2212c16830d3eea380c52c630ed308801e6d0fe1d74478536abfb3","observation_id":"009ccc4b-e441-4fde-a4ce-df66ae929c1a","resolution":{"observed_at":"2026-08-08T12:07:36.339639Z","resolver_source":"raw_fallback","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2604.02623","last_updated":"2026-04-07T14:45:15Z","snapshot_observed_at":"2026-08-05T14:57:29.112440Z","submitted_at":"2026-04-03T01:25:12Z","title":"Poison Once, Exploit Forever: Environment-Injected Memory Poisoning Attacks on Web Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.02623","snapshot_observed_at":"2026-08-08T12:07:35.984734Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.05495","last_updated":"2026-08-06T00:51:46Z","snapshot_observed_at":"2026-08-09T01:10:33.951852Z","submitted_at":"2026-08-06T00:51:46Z","title":"PromptShield Home: Ambient Multimodal Prompt Injection Defense for Smart-Home Agents","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-08T12:07:35.984734Z"},"links":{"cited_paper":"/paper/2604.02623","citing_paper":"/paper/2608.05495"},"observation_digest":"sha256:5fd6ab92bcfabad3878629ae4174b8a79e8421227c93873cfc19b39e43024540","observation_id":"4e652a9f-657f-4ddb-8be6-e980271b9c16","resolution":{"observed_at":"2026-08-08T12:07:35.984734Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T12:07:37.504656Z","title":null,"venue":null,"work_id":"afca6ad3-a6bb-43ae-9d49-8d389efd94dc","year":2025},"citing_paper":{"arxiv_id":"2608.05495","last_updated":"2026-08-06T00:51:46Z","snapshot_observed_at":"2026-08-09T01:10:33.951852Z","submitted_at":"2026-08-06T00:51:46Z","title":"PromptShield Home: Ambient Multimodal Prompt Injection Defense for Smart-Home Agents","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-08T12:07:35.990056Z"},"links":{"citing_paper":"/paper/2608.05495"},"observation_digest":"sha256:a8999a9e2b71be96f60e2c0a8ce60cd495003fae5b23a5d83fd96c11bc6a47e5","observation_id":"b3b09942-f851-43fe-9ecf-2eb55a7cab18","resolution":{"observed_at":"2026-08-08T12:07:37.510036Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.14534","last_updated":"2025-05-20T15:54:45Z","snapshot_observed_at":"2026-08-08T20:01:40.635798Z","submitted_at":"2025-05-20T15:54:45Z","title":"Lessons from Defending Gemini Against Indirect Prompt Injections","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.14534","snapshot_observed_at":"2026-08-08T12:07:35.915388Z","title":"arXiv:2505.14534 [cs.CR] https://arxiv.org/abs/2505.14534","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05495","last_updated":"2026-08-06T00:51:46Z","snapshot_observed_at":"2026-08-09T01:10:33.951852Z","submitted_at":"2026-08-06T00:51:46Z","title":"PromptShield Home: Ambient Multimodal Prompt Injection Defense for Smart-Home Agents","version":1},"reference_index":2025,"source":"pdf_text","source_observed_at":"2026-08-08T12:07:35.915388Z"},"links":{"cited_paper":"/paper/2505.14534","citing_paper":"/paper/2608.05495"},"observation_digest":"sha256:354acef41d78f016d18835ca9623551eb22a7da102cfe71981f0d3ed12536a32","observation_id":"e9fca53b-2c21-4477-87fe-efe692f2293d","resolution":{"observed_at":"2026-08-08T12:07:35.915388Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2605.03378","last_updated":"2026-07-08T15:04:28Z","snapshot_observed_at":"2026-08-02T02:34:38.609069Z","submitted_at":"2026-05-05T05:37:00Z","title":"ARGUS: Defending LLM Agents Against Context-Aware Prompt Injection","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2605.03378","snapshot_observed_at":"2026-08-08T12:07:35.937763Z","title":"arXiv:2605.03378 [cs.CR] https://arxiv.org/abs/2605.03378","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05495","last_updated":"2026-08-06T00:51:46Z","snapshot_observed_at":"2026-08-09T01:10:33.951852Z","submitted_at":"2026-08-06T00:51:46Z","title":"PromptShield Home: Ambient Multimodal Prompt Injection Defense for Smart-Home Agents","version":1},"reference_index":2026,"source":"pdf_text","source_observed_at":"2026-08-08T12:07:35.937763Z"},"links":{"cited_paper":"/paper/2605.03378","citing_paper":"/paper/2608.05495"},"observation_digest":"sha256:5ac794b119e86e0bcb229af7db94bab3ced63dfe77d0ebea3ea25c8a7c37c7b0","observation_id":"947b619d-fe32-40fd-b27b-1ca66e8b6c80","resolution":{"observed_at":"2026-08-08T12:07:35.937763Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2608.05495","last_updated":"2026-08-06T00:51:46Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-09T01:10:33.951852Z","submitted_at":"2026-08-06T00:51:46Z","title":"PromptShield Home: Ambient Multimodal Prompt Injection Defense for Smart-Home Agents"},"reference_resolution":{"displayed":29,"state_counts":{"malformed_identifier":4,"metadata_mismatch":4,"parse_uncertain":0,"unresolved":15,"verified_exact":4,"verified_fuzzy":2},"total_outbound_references":29},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 29 of 29 outbound references and 0 inbound Pith citation observations for arXiv:2608.05495."}