{"as_of":"2026-08-08T16:21:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:c5903f1ac841b43a95bff0804a7b66ec8e6b5c1dfbc938a8ed1996a33c86ff96","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":16,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":16,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":16,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":16,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-08T04:37:28.696356Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-04T09:19:44.179757Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2406.03007","last_updated":"2024-06-05T07:14:28Z","snapshot_observed_at":"2026-07-06T18:25:44.620682Z","submitted_at":"2024-06-05T07:14:28Z","title":"BadAgent: Inserting and Activating Backdoor Attacks in LLM Agents","version":1},"cited_work":{"arxiv_id":"2406.03007","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2406.03007","snapshot_observed_at":"2026-07-04T09:19:44.179757Z","title":"Badagent: Inserting and acti- vating backdoor attacks in llm agents","venue":null,"work_id":"3f768c74-861b-4568-a875-d1201c8221c0","year":2024},"citing_paper":{"arxiv_id":"2410.02644","last_updated":"2025-05-30T03:50:33Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-10-03T16:30:47Z","title":"Agent Security Bench (ASB): Formalizing and Benchmarking Attacks and Defenses in LLM-based Agents","version":4},"reference_index":138,"source":"arxiv_source","source_observed_at":"2026-05-12T13:36:57.011451Z"},"links":{"cited_paper":"/paper/2406.03007","citing_paper":"/paper/2410.02644"},"observation_digest":"sha256:52c52f571571e7feb51443766d2a73cc6ff488e2bf87fa2caec0b59c9529eb4a","observation_id":"5524f44e-bfa6-4613-83bb-bc296f7a7bc7","resolution":{"observed_at":"2026-05-12T13:36:57.183215Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.03007","last_updated":"2024-06-05T07:14:28Z","snapshot_observed_at":"2026-07-06T18:25:44.620682Z","submitted_at":"2024-06-05T07:14:28Z","title":"BadAgent: Inserting and Activating Backdoor Attacks in LLM Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.03007","snapshot_observed_at":"2026-08-08T04:37:28.696356Z","title":"Rlhfpoison: Reward poison- ing attack for reinforcement learning with human feed- back in large language models","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2502.08586","last_updated":"2025-02-12T17:19:36Z","snapshot_observed_at":"2026-08-08T04:30:32.472694Z","submitted_at":"2025-02-12T17:19:36Z","title":"Commercial LLM Agents Are Already Vulnerable to Simple Yet Dangerous Attacks","version":1},"reference_index":2020,"source":"pdf_text","source_observed_at":"2026-08-08T04:37:28.696356Z"},"links":{"cited_paper":"/paper/2406.03007","citing_paper":"/paper/2502.08586"},"observation_digest":"sha256:0d481a645958bfbb0456419aea7abdfbcc47948a48d24f2c28e4c12081c7065c","observation_id":"6b8f9803-dfee-4eb5-832e-dde61e6a10e5","resolution":{"observed_at":"2026-08-08T04:37:28.696356Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.03007","last_updated":"2024-06-05T07:14:28Z","snapshot_observed_at":"2026-07-06T18:25:44.620682Z","submitted_at":"2024-06-05T07:14:28Z","title":"BadAgent: Inserting and Activating Backdoor Attacks in LLM Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.03007","snapshot_observed_at":"2026-08-07T14:42:37.913404Z","title":"Badagent: Inserting and activating backdoor attacks in llm agents","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.17861","last_updated":"2025-05-23T13:13:44Z","snapshot_observed_at":"2026-08-08T15:07:52.945830Z","submitted_at":"2025-05-23T13:13:44Z","title":"Superplatforms Have to Attack AI Agents","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-07T14:42:37.913404Z"},"links":{"cited_paper":"/paper/2406.03007","citing_paper":"/paper/2505.17861"},"observation_digest":"sha256:dac55c13fa7a3cceb9bfd849c2e416542d11d199355e289656ce258d78a5d244","observation_id":"bfc370ec-1bf4-4463-a693-eefd55a130a9","resolution":{"observed_at":"2026-08-07T14:42:37.913404Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.03007","last_updated":"2024-06-05T07:14:28Z","snapshot_observed_at":"2026-07-06T18:25:44.620682Z","submitted_at":"2024-06-05T07:14:28Z","title":"BadAgent: Inserting and Activating Backdoor Attacks in LLM Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.03007","snapshot_observed_at":"2026-08-07T12:48:17.082771Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-08T12:07:48.346526Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:17.082771Z"},"links":{"cited_paper":"/paper/2406.03007","citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:848201ced6ffb380d0a5289fc7dd2374515501831a62ff06bc103217595570cd","observation_id":"06bd2291-f7f5-40c6-b46f-44af44752bf4","resolution":{"observed_at":"2026-08-07T12:48:17.082771Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.03007","last_updated":"2024-06-05T07:14:28Z","snapshot_observed_at":"2026-07-06T18:25:44.620682Z","submitted_at":"2024-06-05T07:14:28Z","title":"BadAgent: Inserting and Activating Backdoor Attacks in LLM Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.03007","snapshot_observed_at":"2026-08-07T11:11:40.513409Z","title":"Badagent: Inserting and activating backdoor attacks in llm agents.arXiv preprint arXiv:2406.03007, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-07T13:32:09.488526Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":74,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.513409Z"},"links":{"cited_paper":"/paper/2406.03007","citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:2e9b9487b6bf20bb649f3e7433f593215ef6db6e7d46def755ee03c940c75732","observation_id":"f3f856b1-b0bf-43af-a1cc-44626b5a8be5","resolution":{"observed_at":"2026-08-07T11:11:40.513409Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.03007","last_updated":"2024-06-05T07:14:28Z","snapshot_observed_at":"2026-07-06T18:25:44.620682Z","submitted_at":"2024-06-05T07:14:28Z","title":"BadAgent: Inserting and Activating Backdoor Attacks in LLM Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.03007","snapshot_observed_at":"2026-08-07T05:59:33.685730Z","title":"InProceedings of the 2021 Conference on Empirical Methods in Natural Language Processing","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.06518","last_updated":"2025-06-06T20:32:43Z","snapshot_observed_at":"2026-08-07T05:52:43.506241Z","submitted_at":"2025-06-06T20:32:43Z","title":"A Systematic Review of Poisoning Attacks Against Large Language Models","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-07T05:59:33.685730Z"},"links":{"cited_paper":"/paper/2406.03007","citing_paper":"/paper/2506.06518"},"observation_digest":"sha256:306afd5c4bc878d29b2fd15cff947c08c5540aaf65f61a99f8213226666755d7","observation_id":"29ede7d0-14d3-4b61-9ae0-7f66260913e6","resolution":{"observed_at":"2026-08-07T05:59:33.685730Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.03007","last_updated":"2024-06-05T07:14:28Z","snapshot_observed_at":"2026-07-06T18:25:44.620682Z","submitted_at":"2024-06-05T07:14:28Z","title":"BadAgent: Inserting and Activating Backdoor Attacks in LLM Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.03007","snapshot_observed_at":"2026-08-07T05:20:51.502855Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.08336","last_updated":"2025-06-11T01:39:01Z","snapshot_observed_at":"2026-08-07T22:32:21.983693Z","submitted_at":"2025-06-10T01:45:56Z","title":"Your Agent Can Defend Itself against Backdoor Attacks","version":2},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-07T05:20:51.502855Z"},"links":{"cited_paper":"/paper/2406.03007","citing_paper":"/paper/2506.08336"},"observation_digest":"sha256:85dceb90846fff57c752b1f72d8d1a3ca7fcb3774592b365698dbc3309e09d9f","observation_id":"ae5fd4c0-37c0-4e12-80bf-38cfccaf4151","resolution":{"observed_at":"2026-08-07T05:20:51.502855Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.03007","last_updated":"2024-06-05T07:14:28Z","snapshot_observed_at":"2026-07-06T18:25:44.620682Z","submitted_at":"2024-06-05T07:14:28Z","title":"BadAgent: Inserting and Activating Backdoor Attacks in LLM Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.03007","snapshot_observed_at":"2026-08-06T21:34:44.473874Z","title":"Badagent: Inserting and activating backdoor attacks in llm agents,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":83,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:44.473874Z"},"links":{"cited_paper":"/paper/2406.03007","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:183cbacac77b468130e6c2a5fa2aca7c5bdb13d87516a8c82f70957132f0020c","observation_id":"e992e2d9-83e4-4241-bf08-5156052f98c2","resolution":{"observed_at":"2026-08-06T21:34:44.473874Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.03007","last_updated":"2024-06-05T07:14:28Z","snapshot_observed_at":"2026-07-06T18:25:44.620682Z","submitted_at":"2024-06-05T07:14:28Z","title":"BadAgent: Inserting and Activating Backdoor Attacks in LLM Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.03007","snapshot_observed_at":"2026-08-05T20:31:46.488948Z","title":"Badagent: Inserting and activating backdoor attacks in llm agents","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.10404","last_updated":"2025-08-14T07:12:44Z","snapshot_observed_at":"2026-08-08T02:31:17.622343Z","submitted_at":"2025-08-14T07:12:44Z","title":"Layer-Wise Perturbations via Sparse Autoencoders for Adversarial Text Generation","version":1},"reference_index":150,"source":"pdf_text","source_observed_at":"2026-08-05T20:31:46.488948Z"},"links":{"cited_paper":"/paper/2406.03007","citing_paper":"/paper/2508.10404"},"observation_digest":"sha256:17b003473264339e333cf89f142a4a414b52404dcae5af8918e4beab8ca2e471","observation_id":"97400208-3df6-43f9-a038-98a645929d2a","resolution":{"observed_at":"2026-08-05T20:31:46.488948Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.03007","last_updated":"2024-06-05T07:14:28Z","snapshot_observed_at":"2026-07-06T18:25:44.620682Z","submitted_at":"2024-06-05T07:14:28Z","title":"BadAgent: Inserting and Activating Backdoor Attacks in LLM Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.03007","snapshot_observed_at":"2026-08-04T21:44:12.414472Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.07764","last_updated":"2025-09-09T13:59:00Z","snapshot_observed_at":"2026-08-04T21:44:11.122043Z","submitted_at":"2025-09-09T13:59:00Z","title":"AgentSentinel: An End-to-End and Real-Time Security Defense Framework for Computer-Use Agents","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-04T21:44:12.414472Z"},"links":{"cited_paper":"/paper/2406.03007","citing_paper":"/paper/2509.07764"},"observation_digest":"sha256:d142632b678d397edd9a869f19df56a5e9739bd1fb3e4c052ce3be1d7920438b","observation_id":"904521e1-e999-4249-9ecc-2a389f34a1ba","resolution":{"observed_at":"2026-08-04T21:44:12.414472Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.03007","last_updated":"2024-06-05T07:14:28Z","snapshot_observed_at":"2026-07-06T18:25:44.620682Z","submitted_at":"2024-06-05T07:14:28Z","title":"BadAgent: Inserting and Activating Backdoor Attacks in LLM Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.03007","snapshot_observed_at":"2026-08-04T13:15:23.930235Z","title":"Badagent: Inserting and activating backdoor attacks in llm agents, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.01157","last_updated":"2026-06-09T20:25:55Z","snapshot_observed_at":"2026-08-08T09:22:36.387389Z","submitted_at":"2025-10-01T17:45:04Z","title":"Where Do Backdoors Live? A Component-Level Analysis of Backdoor Propagation in Speech Language Models","version":4},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-08-04T13:15:23.930235Z"},"links":{"cited_paper":"/paper/2406.03007","citing_paper":"/paper/2510.01157"},"observation_digest":"sha256:44c43b455575b119d4fcd9e3ad9aec99ac4553d09cd7c2442b1cd5bc60592cda","observation_id":"ea269435-92dd-4d02-a987-1080d6e1ffae","resolution":{"observed_at":"2026-08-04T13:15:23.930235Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.03007","last_updated":"2024-06-05T07:14:28Z","snapshot_observed_at":"2026-07-06T18:25:44.620682Z","submitted_at":"2024-06-05T07:14:28Z","title":"BadAgent: Inserting and Activating Backdoor Attacks in LLM Agents","version":1},"cited_work":{"arxiv_id":"2406.03007","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2406.03007","snapshot_observed_at":"2026-07-04T09:19:44.179757Z","title":"Badagent: Inserting and acti- vating backdoor attacks in llm agents","venue":null,"work_id":"3f768c74-861b-4568-a875-d1201c8221c0","year":2024},"citing_paper":{"arxiv_id":"2605.03482","last_updated":"2026-05-07T11:41:14Z","snapshot_observed_at":"2026-07-30T12:28:00.209964Z","submitted_at":"2026-05-05T08:15:41Z","title":"MEMSAD: Gradient-Coupled Anomaly Detection for Memory Poisoning in Retrieval-Augmented Agents","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-05-07T15:57:39.809778Z"},"links":{"cited_paper":"/paper/2406.03007","citing_paper":"/paper/2605.03482"},"observation_digest":"sha256:e4edd5db6ecfd188002ccf7a51e961219ca30a7291ea22c830b490dbf1c5d8ed","observation_id":"137fdf27-2b96-465d-81ca-f8c3f4c86f02","resolution":{"observed_at":"2026-05-12T00:01:14.275417Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.03007","last_updated":"2024-06-05T07:14:28Z","snapshot_observed_at":"2026-07-06T18:25:44.620682Z","submitted_at":"2024-06-05T07:14:28Z","title":"BadAgent: Inserting and Activating Backdoor Attacks in LLM Agents","version":1},"cited_work":{"arxiv_id":"2406.03007","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2406.03007","snapshot_observed_at":"2026-07-04T09:19:44.179757Z","title":"Badagent: Inserting and acti- vating backdoor attacks in llm agents","venue":null,"work_id":"3f768c74-861b-4568-a875-d1201c8221c0","year":2024},"citing_paper":{"arxiv_id":"2605.03482","last_updated":"2026-05-07T11:41:14Z","snapshot_observed_at":"2026-07-30T12:28:00.209964Z","submitted_at":"2026-05-05T08:15:41Z","title":"MEMSAD: Gradient-Coupled Anomaly Detection for Memory Poisoning in Retrieval-Augmented Agents","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-05-08T18:50:41.401393Z"},"links":{"cited_paper":"/paper/2406.03007","citing_paper":"/paper/2605.03482"},"observation_digest":"sha256:5c566ee3b763ca4d6dd18af073f56327d61997b08922fbe3bf654670e8694f74","observation_id":"014ce278-3c88-4b4f-b1bd-bfb1460cffc2","resolution":{"observed_at":"2026-05-09T06:10:41.442412Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.03007","last_updated":"2024-06-05T07:14:28Z","snapshot_observed_at":"2026-07-06T18:25:44.620682Z","submitted_at":"2024-06-05T07:14:28Z","title":"BadAgent: Inserting and Activating Backdoor Attacks in LLM Agents","version":1},"cited_work":{"arxiv_id":"2406.03007","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2406.03007","snapshot_observed_at":"2026-07-04T09:19:44.179757Z","title":"Badagent: Inserting and acti- vating backdoor attacks in llm agents","venue":null,"work_id":"3f768c74-861b-4568-a875-d1201c8221c0","year":2024},"citing_paper":{"arxiv_id":"2605.12529","last_updated":"2026-04-15T10:56:08Z","snapshot_observed_at":"2026-08-01T15:54:04.993991Z","submitted_at":"2026-04-15T10:56:08Z","title":"BackFlush: Knowledge-Free Backdoor Detection and Elimination with Watermark Preservation in Large Language Models","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-05-14T21:01:10.756844Z"},"links":{"cited_paper":"/paper/2406.03007","citing_paper":"/paper/2605.12529"},"observation_digest":"sha256:f2eee8e3c415f25ff0deca15447e71528c293cd45a2d36c70672ea6dd83f4806","observation_id":"51734d8c-f28d-46b2-a091-8e9d4891a0a1","resolution":{"observed_at":"2026-05-14T21:02:58.926580Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.03007","last_updated":"2024-06-05T07:14:28Z","snapshot_observed_at":"2026-07-06T18:25:44.620682Z","submitted_at":"2024-06-05T07:14:28Z","title":"BadAgent: Inserting and Activating Backdoor Attacks in LLM Agents","version":1},"cited_work":{"arxiv_id":"2406.03007","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2406.03007","snapshot_observed_at":"2026-07-04T09:19:44.179757Z","title":"Badagent: Inserting and acti- vating backdoor attacks in llm agents","venue":null,"work_id":"3f768c74-861b-4568-a875-d1201c8221c0","year":2024},"citing_paper":{"arxiv_id":"2605.19147","last_updated":"2026-05-18T21:56:36Z","snapshot_observed_at":"2026-07-06T23:29:57.003383Z","submitted_at":"2026-05-18T21:56:36Z","title":"Be Kind, Rewrite: Benign Projections via Rewriting Defend Against LLM Data Poisoning Attacks","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-05-20T08:53:52.698758Z"},"links":{"cited_paper":"/paper/2406.03007","citing_paper":"/paper/2605.19147"},"observation_digest":"sha256:9793016d0dabf9db3df8ec2f5906ac66d2d1746280c05c5782ac918260469b7d","observation_id":"d3200f26-2af8-40e8-baf5-c496fdb9b70b","resolution":{"observed_at":"2026-05-20T08:58:10.439785Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.03007","last_updated":"2024-06-05T07:14:28Z","snapshot_observed_at":"2026-07-06T18:25:44.620682Z","submitted_at":"2024-06-05T07:14:28Z","title":"BadAgent: Inserting and Activating Backdoor Attacks in LLM Agents","version":1},"cited_work":{"arxiv_id":"2406.03007","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2406.03007","snapshot_observed_at":"2026-07-04T09:19:44.179757Z","title":"Badagent: Inserting and acti- vating backdoor attacks in llm agents","venue":null,"work_id":"3f768c74-861b-4568-a875-d1201c8221c0","year":2024},"citing_paper":{"arxiv_id":"2606.22560","last_updated":"2026-06-21T15:36:04Z","snapshot_observed_at":"2026-08-07T11:54:16.926480Z","submitted_at":"2026-06-21T15:36:04Z","title":"Evidence-Bound Gateway-Path Provenance for Third-Party LLM Inference","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-06-26T10:07:23.015655Z"},"links":{"cited_paper":"/paper/2406.03007","citing_paper":"/paper/2606.22560"},"observation_digest":"sha256:08030e0b7518dc6450554c7cd4900f1b8690c27020795025128f6f9316730931","observation_id":"8c905b2a-582f-4155-9af3-246b4e9c698a","resolution":{"observed_at":"2026-07-04T09:19:44.181392Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2406.03007/citation-record","integrity":"/paper/2406.03007/integrity","json":"/paper/2406.03007/citation-record.json","paper":"/paper/2406.03007"},"outbound":[],"paper":{"arxiv_id":"2406.03007","last_updated":"2024-06-05T07:14:28Z","latest_version":1,"primary_category":"cs.CL","snapshot_observed_at":"2026-07-06T18:25:44.620682Z","submitted_at":"2024-06-05T07:14:28Z","title":"BadAgent: Inserting and Activating Backdoor Attacks in LLM Agents"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 16 inbound Pith citation observations for arXiv:2406.03007."}