{"as_of":"2026-08-18T11:24:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:397484d3c0782059f39ffdfc35b505b8ad8e73787e14338ec3e10ea362f07e07","coverage":[{"denominator":12,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":12,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-11T15:21:43.608356Z","state":"measured"},{"denominator":12,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":12,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-18T06:34:40.430872+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2608.09551/citation-record","integrity":"/paper/2608.09551/integrity","json":"/paper/2608.09551/citation-record.json","paper":"/paper/2608.09551"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2108.07258","last_updated":"2022-07-12T23:45:14Z","snapshot_observed_at":"2026-08-02T09:20:40.804790Z","submitted_at":"2021-08-16T17:50:08Z","title":"On the Opportunities and Risks of Foundation Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2108.07258","snapshot_observed_at":"2026-08-11T15:21:43.568153Z","title":"Stephen Casper, Xander Davies, Claudia Shi, et al","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.09551","last_updated":"2026-08-10T12:48:41Z","snapshot_observed_at":"2026-08-17T13:33:47.863768Z","submitted_at":"2026-08-10T12:48:41Z","title":"Pragmatic Attack Surface: Vulnerabilities of Implicit Context in Large Language Models","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-11T15:21:43.568153Z"},"links":{"cited_paper":"/paper/2108.07258","citing_paper":"/paper/2608.09551"},"observation_digest":"sha256:1d5b7fb83f90b721165f5ebf32cdc5e6412c82d12423dc983451552a777d734d","observation_id":"a7f69bdb-f1e9-4d12-b929-a60cbb79cf36","resolution":{"observed_at":"2026-08-11T15:21:43.568153Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2601.09365","last_updated":"2026-04-07T08:27:43Z","snapshot_observed_at":"2026-08-13T14:52:21.730749Z","submitted_at":"2026-01-14T10:45:22Z","title":"Frame of Reference: Addressing the Challenges of Common Ground Representation in Situational Dialogs","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2601.09365","snapshot_observed_at":"2026-08-11T15:21:43.585618Z","title":"Accepted to Findings of ACL 2026","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.09551","last_updated":"2026-08-10T12:48:41Z","snapshot_observed_at":"2026-08-17T13:33:47.863768Z","submitted_at":"2026-08-10T12:48:41Z","title":"Pragmatic Attack Surface: Vulnerabilities of Implicit Context in Large Language Models","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-11T15:21:43.585618Z"},"links":{"cited_paper":"/paper/2601.09365","citing_paper":"/paper/2608.09551"},"observation_digest":"sha256:5161ca204ee7f4eccfb21cff7569d19886367a983dc4f3314f3a06d89b3bd32a","observation_id":"612627c8-c7bd-47ff-9e19-af3dd288b2ac","resolution":{"observed_at":"2026-08-11T15:21:43.585618Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2510.03417","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:21:43.834267Z","title":"arXiv preprint arXiv:2510.03417","venue":null,"work_id":"f787dabc-ba0c-4c92-a55c-dc4acb25ed11","year":null},"citing_paper":{"arxiv_id":"2608.09551","last_updated":"2026-08-10T12:48:41Z","snapshot_observed_at":"2026-08-17T13:33:47.863768Z","submitted_at":"2026-08-10T12:48:41Z","title":"Pragmatic Attack Surface: Vulnerabilities of Implicit Context in Large Language Models","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-11T15:21:43.595406Z"},"links":{"citing_paper":"/paper/2608.09551"},"observation_digest":"sha256:e841e7bc097cc053754ecb6578155df22ceab63a7270305963f491497e331ada","observation_id":"03b9399d-7ed4-4d82-adb2-763fd90a5849","resolution":{"observed_at":"2026-08-11T15:21:43.839709Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2411.08010","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:21:43.736818Z","title":"InFind- ings of the Association for Computational Linguistics: ACL 2024, pages 12075–12097, Bangkok, Thailand","venue":null,"work_id":"61ca67d2-6711-4670-b684-a3e834d79f6e","year":2024},"citing_paper":{"arxiv_id":"2608.09551","last_updated":"2026-08-10T12:48:41Z","snapshot_observed_at":"2026-08-17T13:33:47.863768Z","submitted_at":"2026-08-10T12:48:41Z","title":"Pragmatic Attack Surface: Vulnerabilities of Implicit Context in Large Language Models","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-11T15:21:43.604434Z"},"links":{"citing_paper":"/paper/2608.09551"},"observation_digest":"sha256:40a085951259aa94a64f87fc59092602937bded8f24738baf3ae358640bfdffa","observation_id":"2e052938-15e5-49c1-848b-da3e87c4c7c6","resolution":{"observed_at":"2026-08-11T15:21:43.745183Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.08760","last_updated":"2024-06-19T19:07:47Z","snapshot_observed_at":"2026-08-16T13:52:44.705884Z","submitted_at":"2024-05-14T16:48:56Z","title":"Is the Pope Catholic? Yes, the Pope is Catholic. Generative Evaluation of Non-Literal Intent Resolution in LLMs","version":2},"cited_work":{"arxiv_id":"2405.08760","doi":null,"metadata_source":"pith","pith_arxiv_id":"2405.08760","snapshot_observed_at":"2026-08-11T15:21:43.642065Z","title":"Is the Pope Catholic? Yes, the Pope is Catholic. Generative Evaluation of Non-Literal Intent Resolution in LLMs","venue":"cs.CL","work_id":"3520e0fb-f76f-40d6-bda2-b1ce28df8d61","year":2024},"citing_paper":{"arxiv_id":"2608.09551","last_updated":"2026-08-10T12:48:41Z","snapshot_observed_at":"2026-08-17T13:33:47.863768Z","submitted_at":"2026-08-10T12:48:41Z","title":"Pragmatic Attack Surface: Vulnerabilities of Implicit Context in Large Language Models","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-11T15:21:43.608356Z"},"links":{"cited_paper":"/paper/2405.08760","citing_paper":"/paper/2608.09551"},"observation_digest":"sha256:07a2d3b42059b1b754d2cc013ffdc3cb30863eb8cd8936be0b093a45d734916a","observation_id":"86ffd656-9f42-4c15-8213-732908018544","resolution":{"observed_at":"2026-08-11T15:21:43.649052Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2412.16339","last_updated":"2025-01-08T20:11:59Z","snapshot_observed_at":"2026-08-17T07:21:20.458339Z","submitted_at":"2024-12-20T21:00:11Z","title":"Deliberative Alignment: Reasoning Enables Safer Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.16339","snapshot_observed_at":"2026-08-11T15:21:43.581114Z","title":null,"venue":null,"work_id":null,"year":1975},"citing_paper":{"arxiv_id":"2608.09551","last_updated":"2026-08-10T12:48:41Z","snapshot_observed_at":"2026-08-17T13:33:47.863768Z","submitted_at":"2026-08-10T12:48:41Z","title":"Pragmatic Attack Surface: Vulnerabilities of Implicit Context in Large Language Models","version":1},"reference_index":1994,"source":"pdf_text","source_observed_at":"2026-08-11T15:21:43.581114Z"},"links":{"cited_paper":"/paper/2412.16339","citing_paper":"/paper/2608.09551"},"observation_digest":"sha256:8cb40b7e627191aa3f691782e675b58628ef10f30b8c17a416aa376d46dd7ec3","observation_id":"efb8ba46-2202-4728-a90d-0725ea8e5cf9","resolution":{"observed_at":"2026-08-11T15:21:43.581114Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:21:43.939819Z","title":"In Edward N","venue":null,"work_id":"e2bed42c-3149-49be-9a9a-dda31eb5bf2b","year":2021},"citing_paper":{"arxiv_id":"2608.09551","last_updated":"2026-08-10T12:48:41Z","snapshot_observed_at":"2026-08-17T13:33:47.863768Z","submitted_at":"2026-08-10T12:48:41Z","title":"Pragmatic Attack Surface: Vulnerabilities of Implicit Context in Large Language Models","version":1},"reference_index":2021,"source":"pdf_text","source_observed_at":"2026-08-11T15:21:43.563920Z"},"links":{"citing_paper":"/paper/2608.09551"},"observation_digest":"sha256:8e6be91ad6ca646c482307c60db898e1bf4a8425306c543217b31ef8e18270b8","observation_id":"a6b0aa97-cda7-434e-918c-9ca68eecc57f","resolution":{"observed_at":"2026-08-11T15:21:43.944091Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2212.08073","last_updated":"2022-12-15T06:19:23Z","snapshot_observed_at":"2026-08-16T03:49:00.703994Z","submitted_at":"2022-12-15T06:19:23Z","title":"Constitutional AI: Harmlessness from AI Feedback","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2212.08073","snapshot_observed_at":"2026-08-11T15:21:43.558593Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.09551","last_updated":"2026-08-10T12:48:41Z","snapshot_observed_at":"2026-08-17T13:33:47.863768Z","submitted_at":"2026-08-10T12:48:41Z","title":"Pragmatic Attack Surface: Vulnerabilities of Implicit Context in Large Language Models","version":1},"reference_index":2022,"source":"pdf_text","source_observed_at":"2026-08-11T15:21:43.558593Z"},"links":{"cited_paper":"/paper/2212.08073","citing_paper":"/paper/2608.09551"},"observation_digest":"sha256:e4ed39e7dbafe80dfeaabae4bbf0c8ed4a192d9c88571bc24094a566d8a36d20","observation_id":"262c3765-3d6d-41da-8ffa-e01c0b45c93e","resolution":{"observed_at":"2026-08-11T15:21:43.558593Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:21:43.914842Z","title":"InAdvances in Neural Information Processing Systems","venue":null,"work_id":"8c523cee-62b3-499b-9ffe-21a3f6317d5a","year":null},"citing_paper":{"arxiv_id":"2608.09551","last_updated":"2026-08-10T12:48:41Z","snapshot_observed_at":"2026-08-17T13:33:47.863768Z","submitted_at":"2026-08-10T12:48:41Z","title":"Pragmatic Attack Surface: Vulnerabilities of Implicit Context in Large Language Models","version":1},"reference_index":2023,"source":"pdf_text","source_observed_at":"2026-08-11T15:21:43.590637Z"},"links":{"citing_paper":"/paper/2608.09551"},"observation_digest":"sha256:e45f409880bf1c0857e77b65a0a97fc346b8d555487c0c72993c281c0df9910e","observation_id":"c954cfe9-62d0-42f7-8b45-57ae99205259","resolution":{"observed_at":"2026-08-11T15:21:43.919086Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.01833","last_updated":"2025-02-26T13:41:41Z","snapshot_observed_at":"2026-08-13T05:33:18.631487Z","submitted_at":"2024-04-02T10:45:49Z","title":"Great, Now Write an Article About That: The Crescendo Multi-Turn LLM Jailbreak Attack","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.01833","snapshot_observed_at":"2026-08-11T15:21:43.599532Z","title":"https: //arxiv.org/abs/2404.01833","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.09551","last_updated":"2026-08-10T12:48:41Z","snapshot_observed_at":"2026-08-17T13:33:47.863768Z","submitted_at":"2026-08-10T12:48:41Z","title":"Pragmatic Attack Surface: Vulnerabilities of Implicit Context in Large Language Models","version":1},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-11T15:21:43.599532Z"},"links":{"cited_paper":"/paper/2404.01833","citing_paper":"/paper/2608.09551"},"observation_digest":"sha256:e7522b774a6ca1b2022a2f5471d90f8b996a5cc7c0e0c00338a230b9a176bb5b","observation_id":"9b1e8d89-8844-4121-afbb-5b9c452605ec","resolution":{"observed_at":"2026-08-11T15:21:43.599532Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:21:43.927984Z","title":"In2025 IEEE Conference on Se- cure and Trustworthy Machine Learning (SaTML), pages 23–42","venue":null,"work_id":"2d66b75a-8c9f-471a-99b0-cea5b8763a5a","year":null},"citing_paper":{"arxiv_id":"2608.09551","last_updated":"2026-08-10T12:48:41Z","snapshot_observed_at":"2026-08-17T13:33:47.863768Z","submitted_at":"2026-08-10T12:48:41Z","title":"Pragmatic Attack Surface: Vulnerabilities of Implicit Context in Large Language Models","version":1},"reference_index":2025,"source":"pdf_text","source_observed_at":"2026-08-11T15:21:43.572769Z"},"links":{"citing_paper":"/paper/2608.09551"},"observation_digest":"sha256:ea50b496357619b9846f7fed788931fd9906790204341a7e31bc6b2dbc4a66ee","observation_id":"bfb28a54-ee24-402d-b1c7-2307d5f12603","resolution":{"observed_at":"2026-08-11T15:21:43.932192Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2601.03079","last_updated":"2026-08-13T00:22:12Z","snapshot_observed_at":"2026-08-16T23:09:20.378961Z","submitted_at":"2026-01-06T15:09:05Z","title":"Learning to Diagnose and Correct Moral Errors: Beyond Shallow Heuristics in Moral Alignment","version":6},"cited_work":{"arxiv_id":"2601.03079","doi":null,"metadata_source":"pith","pith_arxiv_id":"2601.03079","snapshot_observed_at":"2026-08-11T15:21:43.878040Z","title":"Learning to Diagnose and Correct Errors: Towards Moral Sensitivity Acquisition in Large Language Models","venue":"cs.CL","work_id":"1e06ad1a-d57e-4fef-9e5c-10eb9e711e42","year":2026},"citing_paper":{"arxiv_id":"2608.09551","last_updated":"2026-08-10T12:48:41Z","snapshot_observed_at":"2026-08-17T13:33:47.863768Z","submitted_at":"2026-08-10T12:48:41Z","title":"Pragmatic Attack Surface: Vulnerabilities of Implicit Context in Large Language Models","version":1},"reference_index":2026,"source":"pdf_text","source_observed_at":"2026-08-11T15:21:43.576760Z"},"links":{"cited_paper":"/paper/2601.03079","citing_paper":"/paper/2608.09551"},"observation_digest":"sha256:15cdae68c0fecff54d76ba7db040df262cd053dcb9165ce71bdd295cdf3bdfb7","observation_id":"093b2fcb-9668-4965-8347-eda6b90cc43e","resolution":{"observed_at":"2026-08-11T15:21:43.882220Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2608.09551","last_updated":"2026-08-10T12:48:41Z","latest_version":1,"primary_category":"cs.CL","snapshot_observed_at":"2026-08-17T13:33:47.863768Z","submitted_at":"2026-08-10T12:48:41Z","title":"Pragmatic Attack Surface: Vulnerabilities of Implicit Context in Large Language Models"},"reference_resolution":{"displayed":12,"state_counts":{"malformed_identifier":0,"metadata_mismatch":2,"parse_uncertain":0,"unresolved":5,"verified_exact":2,"verified_fuzzy":3},"total_outbound_references":12},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"thesis":"As of 18 August 2026, this Paper Citation Record lists 12 of 12 outbound references and 0 inbound Pith citation observations for arXiv:2608.09551."}