{"as_of":"2026-08-12T12:18:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:9b07bf6a7d36041be23c204cd3a2b7171ccd9c0c30962c3ef61a8ba230c59f23","coverage":[{"denominator":25,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":25,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-11T04:15:54.074275Z","state":"measured"},{"denominator":25,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":25,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-12T06:34:41.77262+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2608.07808/citation-record","integrity":"/paper/2608.07808/integrity","json":"/paper/2608.07808/citation-record.json","paper":"/paper/2608.07808"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:15:56.778113Z","title":"Declassifying the Responsible Disclosure of the Prompt In- jection Attack Vulnerability of GPT-3","venue":null,"work_id":"191438e5-9e56-4432-8f0b-a48b14d0f127","year":2022},"citing_paper":{"arxiv_id":"2608.07808","last_updated":"2026-08-07T23:16:35Z","snapshot_observed_at":"2026-08-12T12:16:47.910620Z","submitted_at":"2026-08-07T23:16:35Z","title":"The Anatomy of a Prompt Injection: A Component Model for Structured Analysis","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-11T04:15:53.975217Z"},"links":{"citing_paper":"/paper/2608.07808"},"observation_digest":"sha256:061e9ff9252b87615e4ca4c8b47ba26ec07f317e0cc44ea33c102c9ee821734e","observation_id":"18f9f91b-0542-4e25-a206-108e9c1be58f","resolution":{"observed_at":"2026-08-11T04:15:56.782150Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2209.02128","last_updated":"2022-09-05T20:29:17Z","snapshot_observed_at":"2026-08-09T15:15:59.049198Z","submitted_at":"2022-09-05T20:29:17Z","title":"Evaluating the Susceptibility of Pre-Trained Language Models via Handcrafted Adversarial Examples","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2209.02128","snapshot_observed_at":"2026-08-11T04:15:53.979753Z","title":"Evaluating the Susceptibility of Pre-Trained Language Models via Handcrafted Adversarial Examples","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2608.07808","last_updated":"2026-08-07T23:16:35Z","snapshot_observed_at":"2026-08-12T12:16:47.910620Z","submitted_at":"2026-08-07T23:16:35Z","title":"The Anatomy of a Prompt Injection: A Component Model for Structured Analysis","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-11T04:15:53.979753Z"},"links":{"cited_paper":"/paper/2209.02128","citing_paper":"/paper/2608.07808"},"observation_digest":"sha256:e84786f197b9438375adaf73a698e45c8095b1652a42cd7cb4bca24a6b9a074e","observation_id":"3f4b0ba8-cdde-4cd3-9998-9d9b7c0c6ee1","resolution":{"observed_at":"2026-08-11T04:15:53.979753Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:15:56.765861Z","title":"Prompt injection attacks against GPT-3.https://simonwillison.net/2022/Sep/ 12/prompt-injection/, 12 September 2022","venue":null,"work_id":"e3000ccd-a50e-463b-93ad-659fc72ffe9d","year":2022},"citing_paper":{"arxiv_id":"2608.07808","last_updated":"2026-08-07T23:16:35Z","snapshot_observed_at":"2026-08-12T12:16:47.910620Z","submitted_at":"2026-08-07T23:16:35Z","title":"The Anatomy of a Prompt Injection: A Component Model for Structured Analysis","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-11T04:15:53.984409Z"},"links":{"citing_paper":"/paper/2608.07808"},"observation_digest":"sha256:ae139f185a9ae4dc01521ae647ecc69487663b2517473202e38383be44ca4fcf","observation_id":"16de0781-5aef-485e-9815-392c3d90a636","resolution":{"observed_at":"2026-08-11T04:15:56.770925Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:15:56.753521Z","title":"Prompt injection and jailbreaking are not the same thing.https://simonwillison","venue":null,"work_id":"f814b468-babd-43bf-97a8-b0561b4ba54b","year":2024},"citing_paper":{"arxiv_id":"2608.07808","last_updated":"2026-08-07T23:16:35Z","snapshot_observed_at":"2026-08-12T12:16:47.910620Z","submitted_at":"2026-08-07T23:16:35Z","title":"The Anatomy of a Prompt Injection: A Component Model for Structured Analysis","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-11T04:15:53.988010Z"},"links":{"citing_paper":"/paper/2608.07808"},"observation_digest":"sha256:61861913eafb84c4e5289bd3a1d550ff6d3a53dba46095e8c7188dca5d6607c8","observation_id":"807cc4d1-ad42-441b-a006-59122687a618","resolution":{"observed_at":"2026-08-11T04:15:56.758227Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.13169","last_updated":"2025-07-17T14:33:36Z","snapshot_observed_at":"2026-08-07T22:34:49.318621Z","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2507.13169","snapshot_observed_at":"2026-08-11T04:15:53.991771Z","title":"Prompt Injection 2.0: Hybrid AI Threats","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.07808","last_updated":"2026-08-07T23:16:35Z","snapshot_observed_at":"2026-08-12T12:16:47.910620Z","submitted_at":"2026-08-07T23:16:35Z","title":"The Anatomy of a Prompt Injection: A Component Model for Structured Analysis","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-11T04:15:53.991771Z"},"links":{"cited_paper":"/paper/2507.13169","citing_paper":"/paper/2608.07808"},"observation_digest":"sha256:151e26be3b1fc123dc24279f48beed8a103fbebe84c917bf813e90062da1c4cb","observation_id":"3e6f750e-bd37-43e2-be17-717b63583de1","resolution":{"observed_at":"2026-08-11T04:15:53.991771Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2510.13893","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:15:56.573226Z","title":"Guarding the Guardrails: A Taxonomy-Driven Approach to Jailbreak Detection","venue":null,"work_id":"152e6011-34ae-4927-affa-179f2f642559","year":2026},"citing_paper":{"arxiv_id":"2608.07808","last_updated":"2026-08-07T23:16:35Z","snapshot_observed_at":"2026-08-12T12:16:47.910620Z","submitted_at":"2026-08-07T23:16:35Z","title":"The Anatomy of a Prompt Injection: A Component Model for Structured Analysis","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-11T04:15:53.996132Z"},"links":{"citing_paper":"/paper/2608.07808"},"observation_digest":"sha256:ee7900bcdadadc6ec744411e7745b5015e1268d16b2530ebdf73a761188aa3b6","observation_id":"795f5a43-e11a-423f-94d4-342e47dd301f","resolution":{"observed_at":"2026-08-11T04:15:56.581488Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:15:56.741119Z","title":"Do Anything Now","venue":null,"work_id":"c6bee349-e495-4fa9-bae0-7238f8a7e13c","year":2024},"citing_paper":{"arxiv_id":"2608.07808","last_updated":"2026-08-07T23:16:35Z","snapshot_observed_at":"2026-08-12T12:16:47.910620Z","submitted_at":"2026-08-07T23:16:35Z","title":"The Anatomy of a Prompt Injection: A Component Model for Structured Analysis","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-11T04:15:54.000258Z"},"links":{"citing_paper":"/paper/2608.07808"},"observation_digest":"sha256:bf5bef19afc067427498a795db6e61645211a39e7da92a6ca6a43b34ba0b8c14","observation_id":"f1610e89-e14a-4590-ad2e-ed2a3e4c7eac","resolution":{"observed_at":"2026-08-11T04:15:56.745574Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2311.08268","last_updated":"2024-04-07T03:04:10Z","snapshot_observed_at":"2026-08-11T18:59:58.005945Z","submitted_at":"2023-11-14T16:02:16Z","title":"A Wolf in Sheep's Clothing: Generalized Nested Jailbreak Prompts can Fool Large Language Models Easily","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.08268","snapshot_observed_at":"2026-08-11T04:15:54.007992Z","title":"A Wolf in Sheep’s Clothing: Generalized Nested Jailbreak Prompts Can Fool Large Language Models Easily","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.07808","last_updated":"2026-08-07T23:16:35Z","snapshot_observed_at":"2026-08-12T12:16:47.910620Z","submitted_at":"2026-08-07T23:16:35Z","title":"The Anatomy of a Prompt Injection: A Component Model for Structured Analysis","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-11T04:15:54.007992Z"},"links":{"cited_paper":"/paper/2311.08268","citing_paper":"/paper/2608.07808"},"observation_digest":"sha256:5c705a450e8d19c7f4b90c2fc04e277e5e61bedfc2fe1b3244e5361916b3ec44","observation_id":"120d8d3f-1836-4188-a090-5fb9de627d79","resolution":{"observed_at":"2026-08-11T04:15:54.007992Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:15:54.012075Z","title":"Adversarial Machine Learning: A Taxonomy and Terminology of Attacks and Mitigations","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.07808","last_updated":"2026-08-07T23:16:35Z","snapshot_observed_at":"2026-08-12T12:16:47.910620Z","submitted_at":"2026-08-07T23:16:35Z","title":"The Anatomy of a Prompt Injection: A Component Model for Structured Analysis","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-11T04:15:54.012075Z"},"links":{"citing_paper":"/paper/2608.07808"},"observation_digest":"sha256:f29ddf9178104960dcac06d49c91f422a0f1c2640494dfd1d03ee77e29c5c1de","observation_id":"2d5a5605-1dba-4f7d-819a-21dde29b984d","resolution":{"observed_at":"2026-08-11T04:15:54.012075Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:15:56.727899Z","title":"OWASP Top 10 for Large Language Model Appli- cations (Version 2025), released 18 November 2024","venue":null,"work_id":"0e18fa79-f6df-4dc4-a717-7c4201c60417","year":2025},"citing_paper":{"arxiv_id":"2608.07808","last_updated":"2026-08-07T23:16:35Z","snapshot_observed_at":"2026-08-12T12:16:47.910620Z","submitted_at":"2026-08-07T23:16:35Z","title":"The Anatomy of a Prompt Injection: A Component Model for Structured Analysis","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-11T04:15:54.016231Z"},"links":{"citing_paper":"/paper/2608.07808"},"observation_digest":"sha256:7b33ac7341652b7d0663d1a6f4c2b0f68dce32ce252ccc15ec10e6066a28fb84","observation_id":"86bf491b-a323-4d6f-a478-d4eccbfa8e58","resolution":{"observed_at":"2026-08-11T04:15:56.732361Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.05499","last_updated":"2025-12-29T02:25:27Z","snapshot_observed_at":"2026-07-06T15:40:27.639368Z","submitted_at":"2023-06-08T18:43:11Z","title":"Prompt Injection attack against LLM-integrated Applications","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.05499","snapshot_observed_at":"2026-08-11T04:15:54.020127Z","title":"Prompt Injection Attack against LLM-Integrated Applications","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.07808","last_updated":"2026-08-07T23:16:35Z","snapshot_observed_at":"2026-08-12T12:16:47.910620Z","submitted_at":"2026-08-07T23:16:35Z","title":"The Anatomy of a Prompt Injection: A Component Model for Structured Analysis","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-11T04:15:54.020127Z"},"links":{"cited_paper":"/paper/2306.05499","citing_paper":"/paper/2608.07808"},"observation_digest":"sha256:6cf691d83694fad4e30056545cca1e69b591d5a142b6db94b293e1737b6f93c8","observation_id":"a5920229-351b-4e1f-bac8-e4c2618b8e7a","resolution":{"observed_at":"2026-08-11T04:15:54.020127Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:15:54.024689Z","title":"The Promptware Kill Chain: How Prompt Injections Gradually Evolved Into a Multistep Malware Delivery Mechanism","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.07808","last_updated":"2026-08-07T23:16:35Z","snapshot_observed_at":"2026-08-12T12:16:47.910620Z","submitted_at":"2026-08-07T23:16:35Z","title":"The Anatomy of a Prompt Injection: A Component Model for Structured Analysis","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-11T04:15:54.024689Z"},"links":{"citing_paper":"/paper/2608.07808"},"observation_digest":"sha256:a321db498ddeed921d7e32a30a23dc105282240f13e65e865199dc21d173580a","observation_id":"269fc590-447d-485c-be80-5d8171ea1431","resolution":{"observed_at":"2026-08-11T04:15:54.024689Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:15:56.715937Z","title":"Breaking Down EchoLeak, the First Zero-Click AI Vulnerability Enabling Data Exfiltration from Microsoft 365 Copilot","venue":null,"work_id":"7446a8b1-e281-42e3-94f0-9c406c5efa11","year":2025},"citing_paper":{"arxiv_id":"2608.07808","last_updated":"2026-08-07T23:16:35Z","snapshot_observed_at":"2026-08-12T12:16:47.910620Z","submitted_at":"2026-08-07T23:16:35Z","title":"The Anatomy of a Prompt Injection: A Component Model for Structured Analysis","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-11T04:15:54.028857Z"},"links":{"citing_paper":"/paper/2608.07808"},"observation_digest":"sha256:b7da5cfd0b0ea830a10a936eee88bf18e65e7b3588c6e48afa6572ff4e09f0c3","observation_id":"3f3ab5cc-b5b2-47e8-a055-0a856ffe09fb","resolution":{"observed_at":"2026-08-11T04:15:56.719690Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.00898","last_updated":"2024-01-31T19:52:00Z","snapshot_observed_at":"2026-08-06T01:29:20.953609Z","submitted_at":"2024-01-31T19:52:00Z","title":"An Early Categorization of Prompt Injection Attacks on Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.00898","snapshot_observed_at":"2026-08-11T04:15:54.032865Z","title":"An Early Categorization of Prompt Injection Attacks on Large Language Models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.07808","last_updated":"2026-08-07T23:16:35Z","snapshot_observed_at":"2026-08-12T12:16:47.910620Z","submitted_at":"2026-08-07T23:16:35Z","title":"The Anatomy of a Prompt Injection: A Component Model for Structured Analysis","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-11T04:15:54.032865Z"},"links":{"cited_paper":"/paper/2402.00898","citing_paper":"/paper/2608.07808"},"observation_digest":"sha256:60018f2c88554362e82aa503c51fce08da7fe4f3bb709bf8d4fdc2d0d32f5f3e","observation_id":"b874e385-5546-464d-8b84-52e97bf6bcf4","resolution":{"observed_at":"2026-08-11T04:15:54.032865Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:15:56.704150Z","title":"Prompt injection is not SQL injection (it may be worse)","venue":null,"work_id":"b25fcb6a-3a57-4029-a64f-ab892d9ef334","year":2025},"citing_paper":{"arxiv_id":"2608.07808","last_updated":"2026-08-07T23:16:35Z","snapshot_observed_at":"2026-08-12T12:16:47.910620Z","submitted_at":"2026-08-07T23:16:35Z","title":"The Anatomy of a Prompt Injection: A Component Model for Structured Analysis","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-11T04:15:54.037606Z"},"links":{"citing_paper":"/paper/2608.07808"},"observation_digest":"sha256:5d983d6898c6f3ffa15d1ac431abd02d8b721ae865cd7d8f88f16c000f846b3f","observation_id":"f6b10693-8132-4306-9f02-f5d053178666","resolution":{"observed_at":"2026-08-11T04:15:56.708415Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:15:56.692539Z","title":"NIST Phish Scale User Guide","venue":null,"work_id":"63296eb1-c33e-4004-878b-369f4049d931","year":2023},"citing_paper":{"arxiv_id":"2608.07808","last_updated":"2026-08-07T23:16:35Z","snapshot_observed_at":"2026-08-12T12:16:47.910620Z","submitted_at":"2026-08-07T23:16:35Z","title":"The Anatomy of a Prompt Injection: A Component Model for Structured Analysis","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-11T04:15:54.041426Z"},"links":{"citing_paper":"/paper/2608.07808"},"observation_digest":"sha256:90cc0d8f96be2d92a8beb25448080a2db2be355e32e7158723643dbce6d7f211","observation_id":"ab5b6bf0-43af-4079-a84e-b4133241469b","resolution":{"observed_at":"2026-08-11T04:15:56.696467Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:15:56.679697Z","title":"In the Wild: Malware Prototype with Embedded Prompt Injection","venue":null,"work_id":"a0c19886-6582-4539-86b5-335b482ca4fc","year":2025},"citing_paper":{"arxiv_id":"2608.07808","last_updated":"2026-08-07T23:16:35Z","snapshot_observed_at":"2026-08-12T12:16:47.910620Z","submitted_at":"2026-08-07T23:16:35Z","title":"The Anatomy of a Prompt Injection: A Component Model for Structured Analysis","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-11T04:15:54.045200Z"},"links":{"citing_paper":"/paper/2608.07808"},"observation_digest":"sha256:0042c6de2fcc40bd3e5d73f36016e521f929c8c4a6791b164b7b6372ac4a0fec","observation_id":"04b8c06a-7741-481c-bf2c-909fd14be758","resolution":{"observed_at":"2026-08-11T04:15:56.683999Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-08-12T09:06:50.363435Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-08-11T04:15:54.049384Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.07808","last_updated":"2026-08-07T23:16:35Z","snapshot_observed_at":"2026-08-12T12:16:47.910620Z","submitted_at":"2026-08-07T23:16:35Z","title":"The Anatomy of a Prompt Injection: A Component Model for Structured Analysis","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-11T04:15:54.049384Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2608.07808"},"observation_digest":"sha256:af18ed1c24fcab47adbba0cf59b46bf1a219a3baaf903b0ce5b66e4b1eae51bc","observation_id":"549b2043-cea3-4bb0-bba3-046fb3af7781","resolution":{"observed_at":"2026-08-11T04:15:54.049384Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.01833","last_updated":"2025-02-26T13:41:41Z","snapshot_observed_at":"2026-08-03T07:26:39.431128Z","submitted_at":"2024-04-02T10:45:49Z","title":"Great, Now Write an Article About That: The Crescendo Multi-Turn LLM Jailbreak Attack","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.01833","snapshot_observed_at":"2026-08-11T04:15:54.053419Z","title":"Great, Now Write an Article About That: The Crescendo Multi-Turn LLM Jailbreak Attack","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.07808","last_updated":"2026-08-07T23:16:35Z","snapshot_observed_at":"2026-08-12T12:16:47.910620Z","submitted_at":"2026-08-07T23:16:35Z","title":"The Anatomy of a Prompt Injection: A Component Model for Structured Analysis","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-11T04:15:54.053419Z"},"links":{"cited_paper":"/paper/2404.01833","citing_paper":"/paper/2608.07808"},"observation_digest":"sha256:f0150c6b5bbffca99c804346f14f34fe95d15850cecc8bff559b0a3ce1da7043","observation_id":"923da724-b7fb-4db6-bd9e-aaf4d68207a3","resolution":{"observed_at":"2026-08-11T04:15:54.053419Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:15:56.667100Z","title":"Many-shot Jailbreaking","venue":null,"work_id":"142e180c-7f8e-41c4-b52e-c8fd9cfbd4a8","year":2024},"citing_paper":{"arxiv_id":"2608.07808","last_updated":"2026-08-07T23:16:35Z","snapshot_observed_at":"2026-08-12T12:16:47.910620Z","submitted_at":"2026-08-07T23:16:35Z","title":"The Anatomy of a Prompt Injection: A Component Model for Structured Analysis","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-11T04:15:54.057615Z"},"links":{"citing_paper":"/paper/2608.07808"},"observation_digest":"sha256:ba01eb98c864bf7baf8b25a9ca1a1253aa2f9806c94b4d6f1c0f59afcd9b3611","observation_id":"b026ca45-2577-4f52-9794-1eb075049a14","resolution":{"observed_at":"2026-08-11T04:15:56.671075Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:15:56.653595Z","title":"STIX Version 2.1","venue":null,"work_id":"0110fd17-5136-44f4-acb4-fba1f77810ef","year":2021},"citing_paper":{"arxiv_id":"2608.07808","last_updated":"2026-08-07T23:16:35Z","snapshot_observed_at":"2026-08-12T12:16:47.910620Z","submitted_at":"2026-08-07T23:16:35Z","title":"The Anatomy of a Prompt Injection: A Component Model for Structured Analysis","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-11T04:15:54.062319Z"},"links":{"citing_paper":"/paper/2608.07808"},"observation_digest":"sha256:8a3f525d1863faa76328e7353affc6390af1b3c01061587f0342e8d84d76c81a","observation_id":"d4785464-1ff1-4958-b08a-b6aa6401bfa6","resolution":{"observed_at":"2026-08-11T04:15:56.657712Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:15:56.640751Z","title":"TAXII Version 2.1","venue":null,"work_id":"c1e1b894-4809-48f5-ad63-8184cd32ace0","year":2021},"citing_paper":{"arxiv_id":"2608.07808","last_updated":"2026-08-07T23:16:35Z","snapshot_observed_at":"2026-08-12T12:16:47.910620Z","submitted_at":"2026-08-07T23:16:35Z","title":"The Anatomy of a Prompt Injection: A Component Model for Structured Analysis","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-11T04:15:54.066028Z"},"links":{"citing_paper":"/paper/2608.07808"},"observation_digest":"sha256:1daf68e0f8de7a68c7309436eba9fbfd1363a9dd18d5c62b1386cc0b43aa5ea7","observation_id":"bad3fc36-6766-4841-b70f-3bb5e02ae1bc","resolution":{"observed_at":"2026-08-11T04:15:56.645031Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:15:56.627704Z","title":"MITRE ATLAS (Adversarial Threat Landscape for Artificial- Intelligence Systems).https://atlas.mitre.org/","venue":null,"work_id":"12b40e75-6d74-4648-a885-600ad4303ef4","year":null},"citing_paper":{"arxiv_id":"2608.07808","last_updated":"2026-08-07T23:16:35Z","snapshot_observed_at":"2026-08-12T12:16:47.910620Z","submitted_at":"2026-08-07T23:16:35Z","title":"The Anatomy of a Prompt Injection: A Component Model for Structured Analysis","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-11T04:15:54.069912Z"},"links":{"citing_paper":"/paper/2608.07808"},"observation_digest":"sha256:d24e727c8f11b567adce8c44144372ee2434c48fad71381a6694d674d95b8744","observation_id":"dea7947e-5ef7-4687-b2f1-1c7a0faf0c71","resolution":{"observed_at":"2026-08-11T04:15:56.632219Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:15:56.614669Z","title":"MITRE ATT&CK.https://attack.mitre.org/ 14","venue":null,"work_id":"88c123df-10af-4d02-8930-9d3921c3958c","year":null},"citing_paper":{"arxiv_id":"2608.07808","last_updated":"2026-08-07T23:16:35Z","snapshot_observed_at":"2026-08-12T12:16:47.910620Z","submitted_at":"2026-08-07T23:16:35Z","title":"The Anatomy of a Prompt Injection: A Component Model for Structured Analysis","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-11T04:15:54.074275Z"},"links":{"citing_paper":"/paper/2608.07808"},"observation_digest":"sha256:5b2e8f50fa4f0da88e417023dbb3b02bf07c6539d7976647da03171203a25f33","observation_id":"7a6997fc-6032-40b6-9bb4-a7f87d1b3f10","resolution":{"observed_at":"2026-08-11T04:15:56.619232Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2308.03825","last_updated":"2024-05-15T12:06:31Z","snapshot_observed_at":"2026-07-06T16:03:34.432602Z","submitted_at":"2023-08-07T16:55:20Z","title":"\"Do Anything Now\": Characterizing and Evaluating In-The-Wild Jailbreak Prompts on Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.03825","snapshot_observed_at":"2026-08-11T04:15:54.003944Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.07808","last_updated":"2026-08-07T23:16:35Z","snapshot_observed_at":"2026-08-12T12:16:47.910620Z","submitted_at":"2026-08-07T23:16:35Z","title":"The Anatomy of a Prompt Injection: A Component Model for Structured Analysis","version":1},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-11T04:15:54.003944Z"},"links":{"cited_paper":"/paper/2308.03825","citing_paper":"/paper/2608.07808"},"observation_digest":"sha256:1b75cd0ad5d5b7ba57e3beb535bd3853df3fe60e8e5a7619acf09e4d539fd0e4","observation_id":"a95b24a9-b5d5-43bf-9687-fb757cefe83a","resolution":{"observed_at":"2026-08-11T04:15:54.003944Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2608.07808","last_updated":"2026-08-07T23:16:35Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-12T12:16:47.910620Z","submitted_at":"2026-08-07T23:16:35Z","title":"The Anatomy of a Prompt Injection: A Component Model for Structured Analysis"},"reference_resolution":{"displayed":25,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":10,"verified_exact":1,"verified_fuzzy":14},"total_outbound_references":25},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"thesis":"As of 12 August 2026, this Paper Citation Record lists 25 of 25 outbound references and 0 inbound Pith citation observations for arXiv:2608.07808."}