Paper Citation Record · LEDGER

Quantifying Conversation Drift in MCP via Latent Polytope

As of 22 August 2026, this Paper Citation Record lists 31 of 31 outbound references and 3 inbound Pith citation observations for arXiv:2508.06418.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2508.06418 v1

Coverage vector

measured 31 of 31 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-05T22:51:28.198095Z

measured 34 of 34 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-21T06:32:19.484+00:00

measured 3 of 3 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-08-11T16:53:35.001891Z

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: arxiv_reference, observed 2026-07-04T14:19:54.275521Z

Reference resolution

31 of 31 outbound references displayed

verified exact1
verified fuzzy1
unresolved29
parse uncertain0
malformed identifier0
metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation 8548a390-426c-4574-a74f-af18b61f6d98 · outbound

This paper cites , " * write output.state after.block = add.period write newline.

Quantifying Conversation Drift in MCP via Latent Polytope , " * write output.state after.block = add.period write newline

Reference 1

Resolution: unresolved; no resolver link, observed 2026-08-05T22:51:28.015724Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation a04b6b4a-7931-4f08-b530-f8766cffb1d6 · outbound

This paper cites write newline.

Quantifying Conversation Drift in MCP via Latent Polytope write newline

Reference 2

Resolution: unresolved; no resolver link, observed 2026-08-05T22:51:28.022885Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 14c3eb1c-eed8-41e5-9ee4-37ef04edcb1f · outbound

This paper cites GonzaloA/fake\_news.

Quantifying Conversation Drift in MCP via Latent Polytope GonzaloA/fake\_news

Reference 3

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T22:51:28.983812Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

Observation 586f8d8a-f0e5-4a8a-a6ff-790b26029a29 · outbound

This paper cites Get my drift? Catching LLM Task Drift with Activation Deltas.

Quantifying Conversation Drift in MCP via Latent Polytope Get my drift? Catching LLM Task Drift with Activation Deltas

Reference 4

Resolution: unresolved; no resolver link, observed 2026-08-05T22:51:28.042439Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 5eacdea9-f62b-44a9-9141-cbcc277d77c5 · outbound

This paper cites GPT-4 Technical Report.

Quantifying Conversation Drift in MCP via Latent Polytope GPT-4 Technical Report

Reference 5

Resolution: unresolved; no resolver link, observed 2026-08-05T22:51:28.049953Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 16b69998-c383-41ad-8ce8-d0121e40f655 · outbound

This paper cites Representation Engineering for Large-Language Models: Survey and Research Challenges.

Quantifying Conversation Drift in MCP via Latent Polytope Representation Engineering for Large-Language Models: Survey and Research Challenges

Reference 6

Resolution: unresolved; no resolver link, observed 2026-08-05T22:51:28.057876Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 6ff86b81-6e43-4bf1-9a83-10780ba5bdf7 · outbound

This paper cites Steering Large Language Model Activations in Sparse Spaces.

Quantifying Conversation Drift in MCP via Latent Polytope Steering Large Language Model Activations in Sparse Spaces

Reference 7

Resolution: unresolved; no resolver link, observed 2026-08-05T22:51:28.064772Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 4c60e0b9-500c-41a5-a449-6a31062268d2 · outbound

This paper cites StruQ: Defending Against Prompt Injection with Structured Queries.

Quantifying Conversation Drift in MCP via Latent Polytope StruQ: Defending Against Prompt Injection with Structured Queries

Reference 8

Resolution: unresolved; no resolver link, observed 2026-08-05T22:51:28.070431Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 4f0f4095-d4b9-4244-adf3-7ea0557f5bf4 · outbound

This paper cites an unresolved cited work.

Quantifying Conversation Drift in MCP via Latent Polytope Unresolved cited work

Reference 9

Resolution: unresolved; raw_fallback, observed 2026-08-05T22:51:28.964929Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

Observation e0d13b95-ba3d-45c4-a254-a4f2d61dcdb2 · outbound

This paper cites We Should Identify and Mitigate Third-Party Safety Risks in MCP-Powered Agent Systems.

Quantifying Conversation Drift in MCP via Latent Polytope We Should Identify and Mitigate Third-Party Safety Risks in MCP-Powered Agent Systems

Reference 10

Resolution: unresolved; no resolver link, observed 2026-08-05T22:51:28.082763Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation d177d919-e7e3-4ce5-b9cd-5529137beb2d · outbound

This paper cites an unresolved cited work.

Quantifying Conversation Drift in MCP via Latent Polytope Unresolved cited work

Reference 11

Resolution: unresolved; raw_fallback, observed 2026-08-05T22:51:28.946136Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

Observation eccb5d1f-828e-467a-b437-f97fc41babc5 · outbound

This paper cites an unresolved cited work.

Quantifying Conversation Drift in MCP via Latent Polytope Unresolved cited work

Reference 12

Resolution: unresolved; no resolver link, observed 2026-08-05T22:51:28.094963Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 32b1447d-65b6-47aa-bdec-e399a0b961d4 · outbound

This paper cites Model Context Protocol (MCP): Landscape, Security Threats, and Future Research Directions.

Quantifying Conversation Drift in MCP via Latent Polytope Model Context Protocol (MCP): Landscape, Security Threats, and Future Research Directions

Reference 13

Resolution: unresolved; no resolver link, observed 2026-08-05T22:51:28.100152Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation dda0473a-f068-48a5-b58b-73328a2d860b · outbound

This paper cites PromptShield: Deployable Detection for Prompt Injection Attacks.

Quantifying Conversation Drift in MCP via Latent Polytope PromptShield: Deployable Detection for Prompt Injection Attacks

Reference 14

Resolution: verified exact; local_arxiv, observed 2026-08-05T22:51:28.507399Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

Observation 3168402d-ca78-4633-8118-6c01593338bf · outbound

This paper cites Prompt Injection attack against LLM-integrated Applications.

Quantifying Conversation Drift in MCP via Latent Polytope Prompt Injection attack against LLM-integrated Applications

Reference 15

Resolution: unresolved; no resolver link, observed 2026-08-05T22:51:28.110470Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation c0f7e58c-1e3c-4a6d-ad77-0f8d33f57000 · outbound

This paper cites an unresolved cited work.

Quantifying Conversation Drift in MCP via Latent Polytope Unresolved cited work

Reference 16

Resolution: unresolved; raw_fallback, observed 2026-08-05T22:51:28.927946Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

Observation 972ae75b-6c82-4de3-b8fa-78640ea7b682 · outbound

This paper cites Enterprise-Grade Security for the Model Context Protocol (MCP): Frameworks and Mitigation Strategies.

Quantifying Conversation Drift in MCP via Latent Polytope Enterprise-Grade Security for the Model Context Protocol (MCP): Frameworks and Mitigation Strategies

Reference 17

Resolution: unresolved; no resolver link, observed 2026-08-05T22:51:28.121759Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation e30bdcf6-6307-4918-9df7-d79bc69dd08e · outbound

This paper cites Securing GenAI Multi-Agent Systems Against Tool Squatting: A Zero Trust Registry-Based Approach.

Quantifying Conversation Drift in MCP via Latent Polytope Securing GenAI Multi-Agent Systems Against Tool Squatting: A Zero Trust Registry-Based Approach

Reference 18

Resolution: unresolved; no resolver link, observed 2026-08-05T22:51:28.127341Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation c14a722f-14bb-4b31-b943-c6c6075a1f6d · outbound

This paper cites an unresolved cited work.

Quantifying Conversation Drift in MCP via Latent Polytope Unresolved cited work

Reference 19

Resolution: unresolved; raw_fallback, observed 2026-08-05T22:51:28.910954Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

Observation 05c5f8fc-8f10-4e24-b5a5-d2797498dd49 · outbound

This paper cites Ignore Previous Prompt: Attack Techniques For Language Models.

Quantifying Conversation Drift in MCP via Latent Polytope Ignore Previous Prompt: Attack Techniques For Language Models

Reference 20

Resolution: unresolved; no resolver link, observed 2026-08-05T22:51:28.137938Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation cd994276-0d72-4b71-9058-35983f259cc6 · outbound

This paper cites LLM Self Defense: By Self Examination, LLMs Know They Are Being Tricked.

Quantifying Conversation Drift in MCP via Latent Polytope LLM Self Defense: By Self Examination, LLMs Know They Are Being Tricked

Reference 21

Resolution: unresolved; no resolver link, observed 2026-08-05T22:51:28.143566Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation d775529d-57c9-47ee-899a-7172fcf6db4d · outbound

This paper cites MCP Safety Audit: LLMs with the Model Context Protocol Allow Major Security Exploits.

Quantifying Conversation Drift in MCP via Latent Polytope MCP Safety Audit: LLMs with the Model Context Protocol Allow Major Security Exploits

Reference 22

Resolution: unresolved; no resolver link, observed 2026-08-05T22:51:28.148748Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 0722ef15-5b41-414c-8a23-32de27c3fb68 · outbound

This paper cites Extracting Latent Steering Vectors from Pretrained Language Models.

Quantifying Conversation Drift in MCP via Latent Polytope Extracting Latent Steering Vectors from Pretrained Language Models

Reference 23

Resolution: unresolved; no resolver link, observed 2026-08-05T22:51:28.153771Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation f7e750b7-5280-413e-b33a-b8467dcffea0 · outbound

This paper cites Signed-Prompt: A New Approach to Prevent Prompt Injection Attacks Against LLM-Integrated Applications.

Quantifying Conversation Drift in MCP via Latent Polytope Signed-Prompt: A New Approach to Prevent Prompt Injection Attacks Against LLM-Integrated Applications

Reference 24

Resolution: unresolved; no resolver link, observed 2026-08-05T22:51:28.159339Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 77df2916-8b8a-4804-a4db-bf0624027d84 · outbound

This paper cites an unresolved cited work.

Quantifying Conversation Drift in MCP via Latent Polytope Unresolved cited work

Reference 25

Resolution: unresolved; raw_fallback, observed 2026-08-05T22:51:28.893815Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

Observation 14d3b2fa-5769-4de4-9962-0d7c8d4bc5e5 · outbound

This paper cites an unresolved cited work.

Quantifying Conversation Drift in MCP via Latent Polytope Unresolved cited work

Reference 26

Resolution: unresolved; raw_fallback, observed 2026-08-05T22:51:28.877109Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

Observation cacada80-e609-4068-a52a-a3545898727f · outbound

This paper cites ControlNET: A Firewall for RAG-based LLM System.

Quantifying Conversation Drift in MCP via Latent Polytope ControlNET: A Firewall for RAG-based LLM System

Reference 27

Resolution: unresolved; no resolver link, observed 2026-08-05T22:51:28.176303Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation d40f98a0-a812-47e0-bbe5-9acf560065e1 · outbound

This paper cites HijackRAG: Hijacking Attacks against Retrieval-Augmented Large Language Models.

Quantifying Conversation Drift in MCP via Latent Polytope HijackRAG: Hijacking Attacks against Retrieval-Augmented Large Language Models

Reference 28

Resolution: unresolved; no resolver link, observed 2026-08-05T22:51:28.181829Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation afccdfc2-6a61-4588-ae1d-7caaa7ddc689 · outbound

This paper cites RTBAS: Defending LLM Agents Against Prompt Injection and Privacy Leakage.

Quantifying Conversation Drift in MCP via Latent Polytope RTBAS: Defending LLM Agents Against Prompt Injection and Privacy Leakage

Reference 29

Resolution: unresolved; no resolver link, observed 2026-08-05T22:51:28.187021Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation c4660857-0f0c-4709-959c-2603ffaed132 · outbound

This paper cites Universal and Transferable Adversarial Attacks on Aligned Language Models.

Quantifying Conversation Drift in MCP via Latent Polytope Universal and Transferable Adversarial Attacks on Aligned Language Models

Reference 30

Resolution: unresolved; no resolver link, observed 2026-08-05T22:51:28.192282Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 104865e9-671a-4f27-a3c9-35bb198575ca · outbound

This paper cites PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models.

Quantifying Conversation Drift in MCP via Latent Polytope PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models

Reference 31

Resolution: unresolved; no resolver link, observed 2026-08-05T22:51:28.198095Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Pith citing papers

Observation 68b1a6f9-5dfd-469c-978e-56d1849da6da · inbound

ShareLock: A Stealthy Multi-Tool Threshold Poisoning Attack Against MCP cites this paper.

ShareLock: A Stealthy Multi-Tool Threshold Poisoning Attack Against MCP Quantifying Conversation Drift in MCP via Latent Polytope

Reference 25

Resolution: verified exact; arxiv_id, observed 2026-07-04T14:19:54.277000Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

Observation 4dfc0bb5-735b-40f6-ad90-a597961fa2b2 · inbound

Rethinking MCP Security: A Large-Scale Study of Runtime MCP Servers and Security Scanner Reliability cites this paper.

Rethinking MCP Security: A Large-Scale Study of Runtime MCP Servers and Security Scanner Reliability Quantifying Conversation Drift in MCP via Latent Polytope

Reference 52

Resolution: unresolved; no resolver link, observed 2026-07-14T07:09:56.559355Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 0d49999b-5bce-4f24-bd81-9d4fbb3484a4 · inbound

ActBench: Self-Evolving Benchmark of Behavioral Safety in Cowork Agents cites this paper.

ActBench: Self-Evolving Benchmark of Behavioral Safety in Cowork Agents Quantifying Conversation Drift in MCP via Latent Polytope

Reference 66

Resolution: unresolved; no resolver link, observed 2026-08-11T16:53:35.001891Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.