Pith. sign in

Paper Citation Record · LEDGER

BASIS: Breach-Aware Selective Prompt Injection Shielding with Prefill Attention Probes

As of 22 August 2026, this Paper Citation Record lists 49 of 49 outbound references and 0 inbound Pith citation observations for arXiv:2608.08027.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2608.08027 v1

Coverage vector

measured 49 of 49 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-12T00:37:02.534015Z

measured 49 of 49 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-22T06:32:14.747728+00:00

measured 0 of 0 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: cited_works

Reference resolution

49 of 49 outbound references displayed

  • verified exact0
  • verified fuzzy28
  • unresolved20
  • parse uncertain0
  • malformed identifier1
  • metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation affd7774-c9fa-4050-9dc8-21b095188d5c · outbound

This paper cites A Survey of Large Language Models.

BASIS: Breach-Aware Selective Prompt Injection Shielding with Prefill Attention Probes A Survey of Large Language Models

Reference 1

Resolution
unresolved
no resolver link, observed 2026-08-12T00:37:02.403278Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T00:37:02.403278Z digest=sha256:f9a40b630ea52dd2f02f296473f3c6f167287573a548cab975de44017af480ba

Observation 5bfd5039-8f75-4a61-bf84-6add7e7ebaf7 · outbound

This paper cites Formalizing and benchmarking prompt injection attacks and defenses,.

BASIS: Breach-Aware Selective Prompt Injection Shielding with Prefill Attention Probes Formalizing and benchmarking prompt injection attacks and defenses,

Reference 2

Resolution
unresolved
no resolver link, observed 2026-08-12T00:37:02.407355Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T00:37:02.407355Z digest=sha256:bd6c84c84c78312e92d52a0839142a8473986d77c69af7ff5672ab4865ba0547

Observation 1d712126-7fb5-4736-87bb-c28c34b4a3c9 · outbound

This paper cites OW ASP top 10 for large language model applications,.

BASIS: Breach-Aware Selective Prompt Injection Shielding with Prefill Attention Probes OW ASP top 10 for large language model applications,

Reference 3

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T00:37:02.975164Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

source=pdf_text observed=2026-08-12T00:37:02.410406Z digest=sha256:1241b91b1365df4cb04e15741d26694833b1bafa3ea89a10fede1d7b387995b1

Observation 8b7c1f00-ab62-47ff-9097-0d75c5385042 · outbound

This paper cites Delimiters won’t save you from prompt injection,.

BASIS: Breach-Aware Selective Prompt Injection Shielding with Prefill Attention Probes Delimiters won’t save you from prompt injection,

Reference 4

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T00:37:02.967850Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

source=pdf_text observed=2026-08-12T00:37:02.413519Z digest=sha256:da69ccc47d51c1b88df61785a4ff853f8c4e9d498dfd906a2db8d9165437a721

Observation 3c495ea6-a1db-492c-a99a-53a67b454344 · outbound

This paper cites Sandwich defense,.

BASIS: Breach-Aware Selective Prompt Injection Shielding with Prefill Attention Probes Sandwich defense,

Reference 5

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T00:37:02.952098Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

source=pdf_text observed=2026-08-12T00:37:02.419425Z digest=sha256:bc3022388759a6d4fb9446169feb1640be6a4ad0daa8f19a249b74adfc91062c

Observation 9faf0654-c4c9-4ff9-bf63-7f2339053561 · outbound

This paper cites Instruction defense,.

BASIS: Breach-Aware Selective Prompt Injection Shielding with Prefill Attention Probes Instruction defense,

Reference 6

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T00:37:02.944538Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

source=pdf_text observed=2026-08-12T00:37:02.422389Z digest=sha256:dbb3254e440b2e20b1628397e285cfbbcee6c55b81402741e14a677a3edbce6a

Observation 3ef082e4-a440-4fb6-9df3-e375e6f9a1a3 · outbound

This paper cites Prompt-guard-86m,.

BASIS: Breach-Aware Selective Prompt Injection Shielding with Prefill Attention Probes Prompt-guard-86m,

Reference 7

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T00:37:02.936715Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

source=pdf_text observed=2026-08-12T00:37:02.425600Z digest=sha256:7cd7976ecf4f95af4523e0c13df90e75b3baabd1f908a1eac0139d7f7a9e308a

Observation 3fd2f2d0-cba3-41bc-9869-7399d53d36bd · outbound

This paper cites Fine-tuned deberta-v3-base for prompt injection detection,.

BASIS: Breach-Aware Selective Prompt Injection Shielding with Prefill Attention Probes Fine-tuned deberta-v3-base for prompt injection detection,

Reference 8

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T00:37:02.928960Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

source=pdf_text observed=2026-08-12T00:37:02.428096Z digest=sha256:a3132d762ed5f101796263d8ba3b6e1fbdc82abb301a8b25574023eefe3a78a5

Observation bf0ffde1-fe28-41ea-be07-379142738bdf · outbound

This paper cites Signed-prompt: A new approach to prevent prompt injection attacks against llm-integrated applications,.

BASIS: Breach-Aware Selective Prompt Injection Shielding with Prefill Attention Probes Signed-prompt: A new approach to prevent prompt injection attacks against llm-integrated applications,

Reference 9

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T00:37:02.921412Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

source=pdf_text observed=2026-08-12T00:37:02.430524Z digest=sha256:39e99ffb1fe32f53acf5177a2ea691a4bdf9faa660aa297977fa790021ff9bee

Observation 1bd8d7e8-3662-455a-bb52-40974ff9b358 · outbound

This paper cites Attention tracker: Detecting prompt injection attacks in llms,.

BASIS: Breach-Aware Selective Prompt Injection Shielding with Prefill Attention Probes Attention tracker: Detecting prompt injection attacks in llms,

Reference 10

Resolution
unresolved
no resolver link, observed 2026-08-12T00:37:02.433308Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T00:37:02.433308Z digest=sha256:223bd43c6853cf18023d586edbbbfd33149d1ece2fb830d8779fbcb3530c5ca2

Observation 217f530d-ceed-4699-a3a1-6e4ea54d8d22 · outbound

This paper cites InjecGuard: Benchmarking and Mitigating Over-defense in Prompt Injection Guardrail Models.

BASIS: Breach-Aware Selective Prompt Injection Shielding with Prefill Attention Probes InjecGuard: Benchmarking and Mitigating Over-defense in Prompt Injection Guardrail Models

Reference 11

Resolution
unresolved
no resolver link, observed 2026-08-12T00:37:02.435811Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T00:37:02.435811Z digest=sha256:4302d19fe1c2c2b68558566f80c1923034eec3c5de6a6b865e389e15431969c5

Observation 46f822c2-6291-4a46-9a9a-a5d397edea0d · outbound

This paper cites Piguard: Prompt injection guardrail via mitigating overdefense for free,.

BASIS: Breach-Aware Selective Prompt Injection Shielding with Prefill Attention Probes Piguard: Prompt injection guardrail via mitigating overdefense for free,

Reference 12

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T00:37:02.909766Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

source=pdf_text observed=2026-08-12T00:37:02.438313Z digest=sha256:aed026409d0428d8f8b5f08fb1c68fd60a04fd3072ee45b77da2a837aa7e4f03

Observation 690294cf-0e4b-431c-9802-24a9a8caee98 · outbound

This paper cites Securing LLM systems against prompt injec- tion,.

BASIS: Breach-Aware Selective Prompt Injection Shielding with Prefill Attention Probes Securing LLM systems against prompt injec- tion,

Reference 13

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T00:37:02.901585Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

source=pdf_text observed=2026-08-12T00:37:02.440400Z digest=sha256:3395bcbea9a603f97c2baf9468e02c2c9688c336abaecc97496b461df848e715

Observation 000d4c6b-4b4e-4344-b710-d51afa8cdad8 · outbound

This paper cites Prompt injection attacks against GPT-3,.

BASIS: Breach-Aware Selective Prompt Injection Shielding with Prefill Attention Probes Prompt injection attacks against GPT-3,

Reference 14

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T00:37:02.893977Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

source=pdf_text observed=2026-08-12T00:37:02.442458Z digest=sha256:8bf702fd12b82454ba552723c487d34ed23b0bfb43b794b96ba76d8150b7583f

Observation 93c60bfb-083d-4478-a0de-a297b3afb12a · outbound

This paper cites Universal and Transferable Adversarial Attacks on Aligned Language Models.

BASIS: Breach-Aware Selective Prompt Injection Shielding with Prefill Attention Probes Universal and Transferable Adversarial Attacks on Aligned Language Models

Reference 15

Resolution
unresolved
no resolver link, observed 2026-08-12T00:37:02.444749Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T00:37:02.444749Z digest=sha256:dc0ad480bec6e4aa31a35cd1b76d9c2f84d7605f89cdd065377ab0a1a133dd18

Observation 74b273c7-1791-4886-8fb5-4878fa68b026 · outbound

This paper cites Autodan: Generating stealthy jailbreak prompts on aligned large language models,.

BASIS: Breach-Aware Selective Prompt Injection Shielding with Prefill Attention Probes Autodan: Generating stealthy jailbreak prompts on aligned large language models,

Reference 16

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T00:37:02.887185Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

source=pdf_text observed=2026-08-12T00:37:02.447166Z digest=sha256:176b58c2c080322dce214df22748e67c0f4015d1c6ba3bd4fd29441335905d64

Observation 74bd7a97-b3b4-4fb4-b79f-3e78d57a2076 · outbound

This paper cites x.com — x.com,.

BASIS: Breach-Aware Selective Prompt Injection Shielding with Prefill Attention Probes x.com — x.com,

Reference 17

Resolution
unresolved
no resolver link, observed 2026-08-12T00:37:02.449530Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T00:37:02.449530Z digest=sha256:3227d878aaecf41c901f09aa5d6c58567f1ac8b6d011d6672dd74c1b35aa15e0

Observation 3e5b6a83-baaa-4a28-925a-086bab7c0e50 · outbound

This paper cites Understanding intermediate layers using linear classifier probes.

BASIS: Breach-Aware Selective Prompt Injection Shielding with Prefill Attention Probes Understanding intermediate layers using linear classifier probes

Reference 18

Resolution
unresolved
no resolver link, observed 2026-08-12T00:37:02.452001Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T00:37:02.452001Z digest=sha256:0a0172e0d67863088f388323d681ea47b6587f30c8c14bbdcc368bd1d170d532

Observation 62bdad09-b8ec-4a9b-9c1e-37e5aaf7a2f1 · outbound

This paper cites Probing classifiers: Promises, shortcomings, and ad- vances,.

BASIS: Breach-Aware Selective Prompt Injection Shielding with Prefill Attention Probes Probing classifiers: Promises, shortcomings, and ad- vances,

Reference 19

Resolution
unresolved
no resolver link, observed 2026-08-12T00:37:02.454969Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T00:37:02.454969Z digest=sha256:7c053de4b71a25b36ab2c646c61d14a400acbb257205f14f635f3eba94955923

Observation c7dabdcc-db6f-47d0-8272-aba8ad2cf329 · outbound

This paper cites In-context Learning and Induction Heads.

BASIS: Breach-Aware Selective Prompt Injection Shielding with Prefill Attention Probes In-context Learning and Induction Heads

Reference 20

Resolution
unresolved
no resolver link, observed 2026-08-12T00:37:02.457319Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T00:37:02.457319Z digest=sha256:e22c9231c87d566fe57c55cfd5212640a1bd7b4bb600c0e71422ed61b58c5cc6

Observation 1ef72592-bcbb-4ed1-a36a-4e91c77063e6 · outbound

This paper cites Retrieval head mecha- nistically explains long-context factuality,.

BASIS: Breach-Aware Selective Prompt Injection Shielding with Prefill Attention Probes Retrieval head mecha- nistically explains long-context factuality,

Reference 21

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T00:37:02.875217Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

source=pdf_text observed=2026-08-12T00:37:02.460216Z digest=sha256:d31b126bfa0668d796d1d823a171091ff0a20cca409501af9ae7dd9f073e0e1b

Observation 08fce25b-1352-446e-92cf-624c2991a22c · outbound

This paper cites Regularization and variable selection via the elastic net,.

BASIS: Breach-Aware Selective Prompt Injection Shielding with Prefill Attention Probes Regularization and variable selection via the elastic net,

Reference 22

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T00:37:02.867287Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

source=pdf_text observed=2026-08-12T00:37:02.462658Z digest=sha256:47e3ebf864dc66a3891edecf6644f04709f2e7e3a1b336b1139a4fe51bccc5e8

Observation c86b8ca2-80eb-494d-82be-fc87b786ec82 · outbound

This paper cites Recursive deep models for semantic compositionality over a sentiment treebank,.

BASIS: Breach-Aware Selective Prompt Injection Shielding with Prefill Attention Probes Recursive deep models for semantic compositionality over a sentiment treebank,

Reference 23

Resolution
unresolved
no resolver link, observed 2026-08-12T00:37:02.465278Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T00:37:02.465278Z digest=sha256:6511fe8113a2384b7b8307ad13a73c9de32c2528c4705d224e66158a7d8b567e

Observation 05cc63a6-7251-452d-8fca-643a07d0ac3a · outbound

This paper cites Foundation.

BASIS: Breach-Aware Selective Prompt Injection Shielding with Prefill Attention Probes Foundation

Reference 24

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T00:37:02.855394Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

source=pdf_text observed=2026-08-12T00:37:02.467887Z digest=sha256:647c83bb45ba26ff57b3d15211ed40c61de23dccdfb81221d21a180abd12a0c1

Observation 28f3d2c0-9db7-4df9-a7ad-c299296739a0 · outbound

This paper cites Don’t give me the details, just the summary! topic-aware convolutional neural networks for extreme summarization,.

BASIS: Breach-Aware Selective Prompt Injection Shielding with Prefill Attention Probes Don’t give me the details, just the summary! topic-aware convolutional neural networks for extreme summarization,

Reference 25

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T00:37:02.847466Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

source=pdf_text observed=2026-08-12T00:37:02.470380Z digest=sha256:f20dc94572f83580851f8a8c484de9721d3adf7bea7725b7d8356b01743ec940

Observation 8d817112-e822-4279-9920-a4a37b1dd169 · outbound

This paper cites Squad: 100,000+ questions for machine comprehension of text,.

BASIS: Breach-Aware Selective Prompt Injection Shielding with Prefill Attention Probes Squad: 100,000+ questions for machine comprehension of text,

Reference 26

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T00:37:02.839498Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

source=pdf_text observed=2026-08-12T00:37:02.473170Z digest=sha256:86a94895f5f583700332c88dae426619882a70da16bccca51e190c68195baab8

Observation a0121950-8fea-4a9e-825c-d2975bc2bf5e · outbound

This paper cites Ignore Previous Prompt: Attack Techniques For Language Models.

BASIS: Breach-Aware Selective Prompt Injection Shielding with Prefill Attention Probes Ignore Previous Prompt: Attack Techniques For Language Models

Reference 27

Resolution
unresolved
no resolver link, observed 2026-08-12T00:37:02.476057Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T00:37:02.476057Z digest=sha256:9a1b654a84844ffce6ca0443af23556172506d078f86c149c9871e642a635802

Observation 2f50e9b5-c29f-4cd3-968c-2f403ed13af4 · outbound

This paper cites Llama 2: Open Foundation and Fine-Tuned Chat Models.

BASIS: Breach-Aware Selective Prompt Injection Shielding with Prefill Attention Probes Llama 2: Open Foundation and Fine-Tuned Chat Models

Reference 28

Resolution
unresolved
no resolver link, observed 2026-08-12T00:37:02.479512Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T00:37:02.479512Z digest=sha256:b7ce287b9792bd86c68a6393517d77e99c29b3599c73d7523dd0d5c9045d2fae

Observation 8e5e477e-be3f-422d-ae2c-de826c268565 · outbound

This paper cites Defending Against Indirect Prompt Injection Attacks With Spotlighting.

BASIS: Breach-Aware Selective Prompt Injection Shielding with Prefill Attention Probes Defending Against Indirect Prompt Injection Attacks With Spotlighting

Reference 29

Resolution
unresolved
no resolver link, observed 2026-08-12T00:37:02.482345Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T00:37:02.482345Z digest=sha256:6350b72c49aaa33bc2869f159470b69d2ec6debe8fc3984bf9dfb79769e355fc

Observation ccacb7c5-127f-44a3-b503-0f802982fd12 · outbound

This paper cites Prompt programming for large language models: Beyond the few-shot paradigm,.

BASIS: Breach-Aware Selective Prompt Injection Shielding with Prefill Attention Probes Prompt programming for large language models: Beyond the few-shot paradigm,

Reference 30

Resolution
unresolved
no resolver link, observed 2026-08-12T00:37:02.485394Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T00:37:02.485394Z digest=sha256:852bda72cd6ef2314b3c6940e9afbc35d84a011f623214c9a3d1c9994744aed8

Observation 0da2a6ea-a9c5-4e93-92ae-1a6a8c19ed30 · outbound

This paper cites Qwen3 Technical Report.

BASIS: Breach-Aware Selective Prompt Injection Shielding with Prefill Attention Probes Qwen3 Technical Report

Reference 31

Resolution
unresolved
no resolver link, observed 2026-08-12T00:37:02.488314Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T00:37:02.488314Z digest=sha256:baba882d578b0d49aacf62046a9f3e86d5b9f389584fd7119c140bddd2939a80

Observation 95d9d1f7-da07-4fef-9f58-7bd1ed0ceea4 · outbound

This paper cites Team, “Gemma,” 2024.

BASIS: Breach-Aware Selective Prompt Injection Shielding with Prefill Attention Probes Team, “Gemma,” 2024

Reference 32

Resolution
unresolved
no resolver link, observed 2026-08-12T00:37:02.491177Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T00:37:02.491177Z digest=sha256:518bbae98bc9a40e53e7abb24fa7bed13227218b34f5bc887bb723ceada60f0c

Observation 8e05a92c-9589-4af0-a618-64eeaa2375fc · outbound

This paper cites The Llama 3 Herd of Models.

BASIS: Breach-Aware Selective Prompt Injection Shielding with Prefill Attention Probes The Llama 3 Herd of Models

Reference 33

Resolution
unresolved
no resolver link, observed 2026-08-12T00:37:02.494454Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T00:37:02.494454Z digest=sha256:865f9b156e83b1400b7426bdbee18aa3e83e43335ad26955e2079e7c3efbe3cf

Observation 67e34488-9820-4136-a5a7-07074b96da0f · outbound

This paper cites Mistral-nemo-instruct-2407,.

BASIS: Breach-Aware Selective Prompt Injection Shielding with Prefill Attention Probes Mistral-nemo-instruct-2407,

Reference 34

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T00:37:02.823394Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

source=pdf_text observed=2026-08-12T00:37:02.497464Z digest=sha256:3da2929e1494f5c11280deb0d6aa67d8851601f214bf58ffb1b3d88ae6196626

Observation d53a7dea-10e5-4d0f-861b-45c50f50e580 · outbound

This paper cites Jailbreaking ChatGPT via Prompt Engineering: An Empirical Study.

BASIS: Breach-Aware Selective Prompt Injection Shielding with Prefill Attention Probes Jailbreaking ChatGPT via Prompt Engineering: An Empirical Study

Reference 35

Resolution
unresolved
no resolver link, observed 2026-08-12T00:37:02.500159Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T00:37:02.500159Z digest=sha256:388c13692fe6d5957079b194780d864130362125dd829321f5c55bc22ffaf2f1

Observation 882902e1-2a6d-492b-bfd2-d57635407841 · outbound

This paper cites ”do anything now.

BASIS: Breach-Aware Selective Prompt Injection Shielding with Prefill Attention Probes ”do anything now

Reference 36

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T00:37:02.815720Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

source=pdf_text observed=2026-08-12T00:37:02.503118Z digest=sha256:77d9a5ac050949e5bbbfab1fb22a35943ec1452b3db3d6a5ca798ae8a48a723d

Observation 497259d6-83fa-4e43-ad64-f17e7987c085 · outbound

This paper cites Ignore this title and hackaprompt: Exposing systemic vulnerabilities of llms through a global prompt hacking competition,.

BASIS: Breach-Aware Selective Prompt Injection Shielding with Prefill Attention Probes Ignore this title and hackaprompt: Exposing systemic vulnerabilities of llms through a global prompt hacking competition,

Reference 37

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T00:37:02.808053Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

source=pdf_text observed=2026-08-12T00:37:02.505632Z digest=sha256:33d6e6fd2f5048872586ecb3333612e85ba5cd06585c77e3cf111a45db7f45f8

Observation 7fc2e783-097f-4d9f-8e10-4341c9aefb57 · outbound

This paper cites Scikit-learn: Machine learning in python,.

BASIS: Breach-Aware Selective Prompt Injection Shielding with Prefill Attention Probes Scikit-learn: Machine learning in python,

Reference 38

Resolution
unresolved
no resolver link, observed 2026-08-12T00:37:02.508173Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T00:37:02.508173Z digest=sha256:924a9c789ce46cad1d650e925604b963742116426b72a82d13de7ae8d7ee5218

Observation 116331e2-f4ea-4982-8a05-28b4f2df9200 · outbound

This paper cites sklearn.linear model.LogisticRegression,.

BASIS: Breach-Aware Selective Prompt Injection Shielding with Prefill Attention Probes sklearn.linear model.LogisticRegression,

Reference 39

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T00:37:02.794326Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

source=pdf_text observed=2026-08-12T00:37:02.510582Z digest=sha256:dde22769e80f891e0b467c33c43cc37d348ac589b95dcdccfc1175f5f396c3de

Observation 12613e14-77dc-487c-aa1f-c2611f90e198 · outbound

This paper cites Transformers: State-of- the-art natural language processing,.

BASIS: Breach-Aware Selective Prompt Injection Shielding with Prefill Attention Probes Transformers: State-of- the-art natural language processing,

Reference 40

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T00:37:02.776374Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

source=pdf_text observed=2026-08-12T00:37:02.515609Z digest=sha256:9a5fe9e9e6886c3d28c15c4da763ff22c7afb5d4fcc8c85553e1901ba296893f

Observation 588eea50-311a-4c81-a896-f928d719086e · outbound

This paper cites Positive.

BASIS: Breach-Aware Selective Prompt Injection Shielding with Prefill Attention Probes Positive

Reference 43

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T00:37:02.769251Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

source=pdf_text observed=2026-08-12T00:37:02.518021Z digest=sha256:4395a93f81bd78d5a919247083f3e12e0c9d151f1311be60e1a06836b909fb9e

Observation d413e9c4-beeb-41ca-90df-859e16de5204 · outbound

This paper cites Format: Output only the Chinese translation.

BASIS: Breach-Aware Selective Prompt Injection Shielding with Prefill Attention Probes Format: Output only the Chinese translation

Reference 44

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T00:37:02.761236Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

source=pdf_text observed=2026-08-12T00:37:02.520454Z digest=sha256:0ade9d5adc797a97f31ad58bcb851781a1b9d32361a3a243caa2f10cd90eea14

Observation 01b5a6bf-1711-4120-9c64-b28f8db1a63a · outbound

This paper cites Format: Output only a 2-3 sentence summary.

BASIS: Breach-Aware Selective Prompt Injection Shielding with Prefill Attention Probes Format: Output only a 2-3 sentence summary

Reference 45

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T00:37:02.752800Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

source=pdf_text observed=2026-08-12T00:37:02.522951Z digest=sha256:2c26e3a7a556d91666f2bd135c33674151afa7554cc3b01d7acd58c69fcf868a

Observation 0bfba195-c095-482a-9610-e992830e177a · outbound

This paper cites Not mentioned.

BASIS: Breach-Aware Selective Prompt Injection Shielding with Prefill Attention Probes Not mentioned

Reference 46

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T00:37:02.744175Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

source=pdf_text observed=2026-08-12T00:37:02.525359Z digest=sha256:804087678f2a8ab11deea46c9a7c09a00d66ba5842df4a057a952ce7aabe414a

Observation a3a5a0e6-eb62-4e81-9fdf-650f7e987fe2 · outbound

This paper cites ignore previous instructions.

BASIS: Breach-Aware Selective Prompt Injection Shielding with Prefill Attention Probes ignore previous instructions

Reference 47

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T00:37:02.735636Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

source=pdf_text observed=2026-08-12T00:37:02.528102Z digest=sha256:b5bd7a50c91306a122fad2537f88c65f0969b0ea93b599dc881b01c28f82c068

Observation e15cf449-8db5-47aa-acab-43bd14c3a54c · outbound

This paper cites an unresolved cited work.

BASIS: Breach-Aware Selective Prompt Injection Shielding with Prefill Attention Probes Unresolved cited work

Reference 48

Resolution
unresolved
raw_fallback, observed 2026-08-12T00:37:02.727073Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

source=pdf_text observed=2026-08-12T00:37:02.530777Z digest=sha256:501825b296afd57b59918ec364d35bcdb34ae81ec590b44f64dcdf91e4dccccb

Observation 7c266ef6-b9dd-4e8c-a515-563ffd8de2b7 · outbound

This paper cites an unresolved cited work.

BASIS: Breach-Aware Selective Prompt Injection Shielding with Prefill Attention Probes Unresolved cited work

Reference 49

Resolution
malformed identifier
raw_fallback, observed 2026-08-12T00:37:02.718484Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

source=pdf_text observed=2026-08-12T00:37:02.534015Z digest=sha256:521ea07b9f20e9d99929fb427c1f20746ab487c27aabdff8dbc4b50b1c864c79

Observation 7d6db094-71d1-4e9f-890e-29bf69055ccc · outbound

This paper cites Available: https://simonwillison.net/2023/May/11/ delimiters-wont-save-you/.

BASIS: Breach-Aware Selective Prompt Injection Shielding with Prefill Attention Probes Available: https://simonwillison.net/2023/May/11/ delimiters-wont-save-you/

Reference 2023

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T00:37:02.959892Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

source=pdf_text observed=2026-08-12T00:37:02.416479Z digest=sha256:932de2f89fbc11e922506e2a644efbd2671e0789993ad084e8e49e4ce783e4ad

Observation 91bc80c4-86ee-4578-a22a-76ef79b88646 · outbound

This paper cites Available: https://scikit-learn.org/stable/modules/ generated/sklearn.linear model.LogisticRegression.html.

BASIS: Breach-Aware Selective Prompt Injection Shielding with Prefill Attention Probes Available: https://scikit-learn.org/stable/modules/ generated/sklearn.linear model.LogisticRegression.html

Reference 2026

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T00:37:02.785284Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

source=pdf_text observed=2026-08-12T00:37:02.512951Z digest=sha256:543e579bc2ffa3d9b4ea76c2e83aae69cdd7b6f19223f5e464f4c338c8a91aa6

Pith citing papers

No inbound Pith citation observations are available.