Paper Citation Record · LEDGER

The Anatomy of a Prompt Injection: A Component Model for Structured Analysis

As of 19 August 2026, this Paper Citation Record lists 25 of 25 outbound references and 0 inbound Pith citation observations for arXiv:2608.07808.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2608.07808 v1

Coverage vector

measured 25 of 25 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-11T04:15:54.074275Z

measured 25 of 25 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-19T06:32:44.657259+00:00

measured 0 of 0 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: cited_works

Reference resolution

25 of 25 outbound references displayed

verified exact1
verified fuzzy14
unresolved10
parse uncertain0
malformed identifier0
metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation 18f9f91b-0542-4e25-a206-108e9c1be58f · outbound

This paper cites Declassifying the Responsible Disclosure of the Prompt In- jection Attack Vulnerability of GPT-3.

The Anatomy of a Prompt Injection: A Component Model for Structured Analysis Declassifying the Responsible Disclosure of the Prompt In- jection Attack Vulnerability of GPT-3

Reference 1

Resolution: verified fuzzy; raw_fallback, observed 2026-08-11T04:15:56.782150Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 3f4b0ba8-cdde-4cd3-9998-9d9b7c0c6ee1 · outbound

This paper cites Evaluating the Susceptibility of Pre-Trained Language Models via Handcrafted Adversarial Examples.

The Anatomy of a Prompt Injection: A Component Model for Structured Analysis Evaluating the Susceptibility of Pre-Trained Language Models via Handcrafted Adversarial Examples

Reference 2

Resolution: unresolved; no resolver link, observed 2026-08-11T04:15:53.979753Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 16de0781-5aef-485e-9815-392c3d90a636 · outbound

This paper cites Prompt injection attacks against GPT-3.https://simonwillison.net/2022/Sep/ 12/prompt-injection/, 12 September 2022.

The Anatomy of a Prompt Injection: A Component Model for Structured Analysis Prompt injection attacks against GPT-3.https://simonwillison.net/2022/Sep/ 12/prompt-injection/, 12 September 2022

Reference 3

Resolution: verified fuzzy; raw_fallback, observed 2026-08-11T04:15:56.770925Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 807cc4d1-ad42-441b-a006-59122687a618 · outbound

This paper cites Prompt injection and jailbreaking are not the same thing.https://simonwillison.

The Anatomy of a Prompt Injection: A Component Model for Structured Analysis Prompt injection and jailbreaking are not the same thing.https://simonwillison

Reference 4

Resolution: verified fuzzy; raw_fallback, observed 2026-08-11T04:15:56.758227Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 3e6f750e-bd37-43e2-be17-717b63583de1 · outbound

This paper cites Prompt Injection 2.0: Hybrid AI Threats.

The Anatomy of a Prompt Injection: A Component Model for Structured Analysis Prompt Injection 2.0: Hybrid AI Threats

Reference 5

Resolution: unresolved; no resolver link, observed 2026-08-11T04:15:53.991771Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 795f5a43-e11a-423f-94d4-342e47dd301f · outbound

This paper cites Guarding the Guardrails: A Taxonomy-Driven Approach to Jailbreak Detection.

The Anatomy of a Prompt Injection: A Component Model for Structured Analysis Guarding the Guardrails: A Taxonomy-Driven Approach to Jailbreak Detection

Reference 6

Resolution: verified exact; arxiv_id, observed 2026-08-11T04:15:56.581488Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation f1610e89-e14a-4590-ad2e-ed2a3e4c7eac · outbound

This paper cites Do Anything Now.

The Anatomy of a Prompt Injection: A Component Model for Structured Analysis Do Anything Now

Reference 7

Resolution: verified fuzzy; raw_fallback, observed 2026-08-11T04:15:56.745574Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 120d8d3f-1836-4188-a090-5fb9de627d79 · outbound

This paper cites A Wolf in Sheep's Clothing: Generalized Nested Jailbreak Prompts can Fool Large Language Models Easily.

The Anatomy of a Prompt Injection: A Component Model for Structured Analysis A Wolf in Sheep's Clothing: Generalized Nested Jailbreak Prompts can Fool Large Language Models Easily

Reference 8

Resolution: unresolved; no resolver link, observed 2026-08-11T04:15:54.007992Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 2d5a5605-1dba-4f7d-819a-21dde29b984d · outbound

This paper cites Adversarial Machine Learning: A Taxonomy and Terminology of Attacks and Mitigations.

The Anatomy of a Prompt Injection: A Component Model for Structured Analysis Adversarial Machine Learning: A Taxonomy and Terminology of Attacks and Mitigations

Reference 9

Resolution: unresolved; no resolver link, observed 2026-08-11T04:15:54.012075Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 86bf491b-a323-4d6f-a478-d4eccbfa8e58 · outbound

This paper cites OWASP Top 10 for Large Language Model Appli- cations (Version 2025), released 18 November 2024.

The Anatomy of a Prompt Injection: A Component Model for Structured Analysis OWASP Top 10 for Large Language Model Appli- cations (Version 2025), released 18 November 2024

Reference 10

Resolution: verified fuzzy; raw_fallback, observed 2026-08-11T04:15:56.732361Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation a5920229-351b-4e1f-bac8-e4c2618b8e7a · outbound

This paper cites Prompt Injection attack against LLM-integrated Applications.

The Anatomy of a Prompt Injection: A Component Model for Structured Analysis Prompt Injection attack against LLM-integrated Applications

Reference 11

Resolution: unresolved; no resolver link, observed 2026-08-11T04:15:54.020127Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 269fc590-447d-485c-be80-5d8171ea1431 · outbound

This paper cites The Promptware Kill Chain: How Prompt Injections Gradually Evolved Into a Multistep Malware Delivery Mechanism.

The Anatomy of a Prompt Injection: A Component Model for Structured Analysis The Promptware Kill Chain: How Prompt Injections Gradually Evolved Into a Multistep Malware Delivery Mechanism

Reference 12

Resolution: unresolved; no resolver link, observed 2026-08-11T04:15:54.024689Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 3f3ab5cc-b5b2-47e8-a055-0a856ffe09fb · outbound

This paper cites Breaking Down EchoLeak, the First Zero-Click AI Vulnerability Enabling Data Exfiltration from Microsoft 365 Copilot.

The Anatomy of a Prompt Injection: A Component Model for Structured Analysis Breaking Down EchoLeak, the First Zero-Click AI Vulnerability Enabling Data Exfiltration from Microsoft 365 Copilot

Reference 13

Resolution: verified fuzzy; raw_fallback, observed 2026-08-11T04:15:56.719690Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation b874e385-5546-464d-8b84-52e97bf6bcf4 · outbound

This paper cites An Early Categorization of Prompt Injection Attacks on Large Language Models.

The Anatomy of a Prompt Injection: A Component Model for Structured Analysis An Early Categorization of Prompt Injection Attacks on Large Language Models

Reference 14

Resolution: unresolved; no resolver link, observed 2026-08-11T04:15:54.032865Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation f6b10693-8132-4306-9f02-f5d053178666 · outbound

This paper cites Prompt injection is not SQL injection (it may be worse).

The Anatomy of a Prompt Injection: A Component Model for Structured Analysis Prompt injection is not SQL injection (it may be worse)

Reference 15

Resolution: verified fuzzy; raw_fallback, observed 2026-08-11T04:15:56.708415Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation ab5b6bf0-43af-4079-a84e-b4133241469b · outbound

This paper cites NIST Phish Scale User Guide.

The Anatomy of a Prompt Injection: A Component Model for Structured Analysis NIST Phish Scale User Guide

Reference 16

Resolution: verified fuzzy; raw_fallback, observed 2026-08-11T04:15:56.696467Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 04b8c06a-7741-481c-bf2c-909fd14be758 · outbound

This paper cites In the Wild: Malware Prototype with Embedded Prompt Injection.

The Anatomy of a Prompt Injection: A Component Model for Structured Analysis In the Wild: Malware Prototype with Embedded Prompt Injection

Reference 17

Resolution: verified fuzzy; raw_fallback, observed 2026-08-11T04:15:56.683999Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 549b2043-cea3-4bb0-bba3-046fb3af7781 · outbound

This paper cites Universal and Transferable Adversarial Attacks on Aligned Language Models.

The Anatomy of a Prompt Injection: A Component Model for Structured Analysis Universal and Transferable Adversarial Attacks on Aligned Language Models

Reference 18

Resolution: unresolved; no resolver link, observed 2026-08-11T04:15:54.049384Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 923da724-b7fb-4db6-bd9e-aaf4d68207a3 · outbound

This paper cites Great, Now Write an Article About That: The Crescendo Multi-Turn LLM Jailbreak Attack.

The Anatomy of a Prompt Injection: A Component Model for Structured Analysis Great, Now Write an Article About That: The Crescendo Multi-Turn LLM Jailbreak Attack

Reference 19

Resolution: unresolved; no resolver link, observed 2026-08-11T04:15:54.053419Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation b026ca45-2577-4f52-9794-1eb075049a14 · outbound

This paper cites Many-shot Jailbreaking.

The Anatomy of a Prompt Injection: A Component Model for Structured Analysis Many-shot Jailbreaking

Reference 20

Resolution: verified fuzzy; raw_fallback, observed 2026-08-11T04:15:56.671075Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation d4785464-1ff1-4958-b08a-b6aa6401bfa6 · outbound

This paper cites STIX Version 2.1.

The Anatomy of a Prompt Injection: A Component Model for Structured Analysis STIX Version 2.1

Reference 21

Resolution: verified fuzzy; raw_fallback, observed 2026-08-11T04:15:56.657712Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation bad3fc36-6766-4841-b70f-3bb5e02ae1bc · outbound

This paper cites TAXII Version 2.1.

The Anatomy of a Prompt Injection: A Component Model for Structured Analysis TAXII Version 2.1

Reference 22

Resolution: verified fuzzy; raw_fallback, observed 2026-08-11T04:15:56.645031Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation dea7947e-5ef7-4687-b2f1-1c7a0faf0c71 · outbound

This paper cites MITRE ATLAS (Adversarial Threat Landscape for Artificial- Intelligence Systems).https://atlas.mitre.org/.

The Anatomy of a Prompt Injection: A Component Model for Structured Analysis MITRE ATLAS (Adversarial Threat Landscape for Artificial- Intelligence Systems).https://atlas.mitre.org/

Reference 23

Resolution: verified fuzzy; raw_fallback, observed 2026-08-11T04:15:56.632219Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 7a6997fc-6032-40b6-9bb4-a7f87d1b3f10 · outbound

This paper cites MITRE ATT&CK.https://attack.mitre.org/ 14.

The Anatomy of a Prompt Injection: A Component Model for Structured Analysis MITRE ATT&CK.https://attack.mitre.org/ 14

Reference 24

Resolution: verified fuzzy; raw_fallback, observed 2026-08-11T04:15:56.619232Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation a95b24a9-b5d5-43bf-9687-fb757cefe83a · outbound

This paper cites "Do Anything Now": Characterizing and Evaluating In-The-Wild Jailbreak Prompts on Large Language Models.

The Anatomy of a Prompt Injection: A Component Model for Structured Analysis "Do Anything Now": Characterizing and Evaluating In-The-Wild Jailbreak Prompts on Large Language Models

Reference 2024

Resolution: unresolved; no resolver link, observed 2026-08-11T04:15:54.003944Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Pith citing papers

No inbound Pith citation observations are available.