{"as_of":"2026-08-07T01:42:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:691b096b44d7a04b3a954ea4eababaa95cad7facdb6e6924435cfa1c7593e3cb","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":20,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":20,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-06T06:34:29.942622+00:00","state":"measured"},{"denominator":20,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":20,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T23:26:54.694634Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":1,"source":"pith","source_observed_at":"2026-08-05T02:28:24.338817Z","state":"measured"}],"external_citation_measurements":[{"count":1,"observed_at":"2026-08-05T02:28:24.338817Z","source":"pith"}],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2409.11295","last_updated":"2025-03-12T20:54:00Z","snapshot_observed_at":"2026-08-06T11:52:38.289574Z","submitted_at":"2024-09-17T15:49:44Z","title":"EIA: Environmental Injection Attack on Generalist Web Agents for Privacy Leakage","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.11295","snapshot_observed_at":"2026-08-06T23:26:54.694634Z","title":"Eia: Environmental injection attack on generalist web agents for privacy leakage,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.18019","last_updated":"2025-07-04T14:29:40Z","snapshot_observed_at":"2026-08-06T23:21:07.175569Z","submitted_at":"2025-06-22T12:59:12Z","title":"Graphs Meet AI Agents: Taxonomy, Progress, and Future Opportunities","version":3},"reference_index":232,"source":"pdf_text","source_observed_at":"2026-08-06T23:26:54.694634Z"},"links":{"cited_paper":"/paper/2409.11295","citing_paper":"/paper/2506.18019"},"observation_digest":"sha256:ad5004a4e7d6e63a15dfc7b5e638ff4ee9dbd27fc2e1979d79c669732292a34a","observation_id":"88870be7-9020-4760-9280-7b97a0082115","resolution":{"observed_at":"2026-08-06T23:26:54.694634Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2409.11295","last_updated":"2025-03-12T20:54:00Z","snapshot_observed_at":"2026-08-06T11:52:38.289574Z","submitted_at":"2024-09-17T15:49:44Z","title":"EIA: Environmental Injection Attack on Generalist Web Agents for Privacy Leakage","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.11295","snapshot_observed_at":"2026-08-06T19:43:28.598263Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.05307","last_updated":"2025-07-07T09:11:16Z","snapshot_observed_at":"2026-08-06T22:58:08.763957Z","submitted_at":"2025-07-07T09:11:16Z","title":"ASSURE: Metamorphic Testing for AI-powered Browser Extensions","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-06T19:43:28.598263Z"},"links":{"cited_paper":"/paper/2409.11295","citing_paper":"/paper/2507.05307"},"observation_digest":"sha256:be237492484058af7bf82f8f78d1c4649068423e99e84ec61821c711b2a67cad","observation_id":"90382a86-16bd-467a-887a-708a98a35a8b","resolution":{"observed_at":"2026-08-06T19:43:28.598263Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2409.11295","last_updated":"2025-03-12T20:54:00Z","snapshot_observed_at":"2026-08-06T11:52:38.289574Z","submitted_at":"2024-09-17T15:49:44Z","title":"EIA: Environmental Injection Attack on Generalist Web Agents for Privacy Leakage","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.11295","snapshot_observed_at":"2026-08-06T16:12:49.478511Z","title":"EIA: environmental injection attack on generalist web agents for privacy leakage","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-06T15:57:20.673152Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:49.478511Z"},"links":{"cited_paper":"/paper/2409.11295","citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:1eabfd3cdfa05da45fca576d5bab4f4bd2a253bfc29760f968de73e75a48de6f","observation_id":"abae9612-218d-498a-8634-014caef4db11","resolution":{"observed_at":"2026-08-06T16:12:49.478511Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2409.11295","last_updated":"2025-03-12T20:54:00Z","snapshot_observed_at":"2026-08-06T11:52:38.289574Z","submitted_at":"2024-09-17T15:49:44Z","title":"EIA: Environmental Injection Attack on Generalist Web Agents for Privacy Leakage","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.11295","snapshot_observed_at":"2026-08-06T15:42:00.957739Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.15219","last_updated":"2025-07-21T03:41:44Z","snapshot_observed_at":"2026-08-06T15:35:31.690602Z","submitted_at":"2025-07-21T03:41:44Z","title":"PromptArmor: Simple yet Effective Prompt Injection Defenses","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-06T15:42:00.957739Z"},"links":{"cited_paper":"/paper/2409.11295","citing_paper":"/paper/2507.15219"},"observation_digest":"sha256:f1beaae5c6b06335943897339d87d0b52b332e39dcc183653f2594c50c2e9595","observation_id":"2664bd85-e1dd-4f04-a5c9-efe47d3de940","resolution":{"observed_at":"2026-08-06T15:42:00.957739Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2409.11295","last_updated":"2025-03-12T20:54:00Z","snapshot_observed_at":"2026-08-06T11:52:38.289574Z","submitted_at":"2024-09-17T15:49:44Z","title":"EIA: Environmental Injection Attack on Generalist Web Agents for Privacy Leakage","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.11295","snapshot_observed_at":"2026-08-06T00:00:31.317537Z","title":"Chejian Xu, Mintong Kang, Jiawei Zhang, Zeyi Liao, Lingbo Mo, Mengqi Yuan, Huan Sun, and Bo Li","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.04482","last_updated":"2025-08-06T14:33:45Z","snapshot_observed_at":"2026-08-06T00:00:28.197248Z","submitted_at":"2025-08-06T14:33:45Z","title":"OS Agents: A Survey on MLLM-based Agents for General Computing Devices Use","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-06T00:00:31.317537Z"},"links":{"cited_paper":"/paper/2409.11295","citing_paper":"/paper/2508.04482"},"observation_digest":"sha256:919b4b2bc42c73c81488aa6fb5059d912413e7dc5f055cf29dde1112fd1f1c28","observation_id":"68e1cf73-2136-49ad-b530-750830af3ca5","resolution":{"observed_at":"2026-08-06T00:00:31.317537Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2409.11295","last_updated":"2025-03-12T20:54:00Z","snapshot_observed_at":"2026-08-06T11:52:38.289574Z","submitted_at":"2024-09-17T15:49:44Z","title":"EIA: Environmental Injection Attack on Generalist Web Agents for Privacy Leakage","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.11295","snapshot_observed_at":"2026-08-05T05:09:39.868193Z","title":"Eia: Environmental injection attack on generalist web agents for privacy leakage.arXiv:2409.11295, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.05755","last_updated":"2026-06-28T05:20:23Z","snapshot_observed_at":"2026-08-06T21:30:43.649885Z","submitted_at":"2025-09-06T15:48:49Z","title":"Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment","version":6},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-05T05:09:39.868193Z"},"links":{"cited_paper":"/paper/2409.11295","citing_paper":"/paper/2509.05755"},"observation_digest":"sha256:d7c167f6b3637032a391b4a37a9454cfe9432f727c6c0953cb09e2f0d91f304e","observation_id":"ae5f12df-493f-4ed9-ba60-7c71131e3ff7","resolution":{"observed_at":"2026-08-05T05:09:39.868193Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2409.11295","last_updated":"2025-03-12T20:54:00Z","snapshot_observed_at":"2026-08-06T11:52:38.289574Z","submitted_at":"2024-09-17T15:49:44Z","title":"EIA: Environmental Injection Attack on Generalist Web Agents for Privacy Leakage","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.11295","snapshot_observed_at":"2026-08-04T08:06:11.805883Z","title":"Eia: Environmental injection attack on generalist web agents for privacy leakage.arXiv preprint arXiv:2409.11295, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.22963","last_updated":"2026-06-19T20:25:06Z","snapshot_observed_at":"2026-08-04T08:06:05.944327Z","submitted_at":"2025-10-27T03:37:41Z","title":"When Compression Becomes an Attack Surface: Black-Box Attacks on Prompt-Compressed LLM Agents","version":4},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-04T08:06:11.805883Z"},"links":{"cited_paper":"/paper/2409.11295","citing_paper":"/paper/2510.22963"},"observation_digest":"sha256:f6d260ca477196ea26476ed01ef76f5f6dabc20614158a51a1351e8306210e35","observation_id":"728d166f-39eb-40ab-b682-20de8a213f92","resolution":{"observed_at":"2026-08-04T08:06:11.805883Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2409.11295","last_updated":"2025-03-12T20:54:00Z","snapshot_observed_at":"2026-08-06T11:52:38.289574Z","submitted_at":"2024-09-17T15:49:44Z","title":"EIA: Environmental Injection Attack on Generalist Web Agents for Privacy Leakage","version":5},"cited_work":{"arxiv_id":"2409.11295","doi":"10.48550/arxiv.2409.11295","metadata_source":"pith","pith_arxiv_id":"2409.11295","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Eia: Environmental injection attack on generalist web agents for privacy leakage","venue":"cs.CR","work_id":"648feaca-04ca-4033-83b0-94571d951968","year":2024},"citing_paper":{"arxiv_id":"2510.23883","last_updated":"2026-04-03T16:27:34Z","snapshot_observed_at":"2026-08-02T13:42:34.526072Z","submitted_at":"2025-10-27T21:48:11Z","title":"Agentic AI Security: Threats, Defenses, Evaluation, and Open Challenges","version":3},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-05-18T03:42:10.703369Z"},"links":{"cited_paper":"/paper/2409.11295","citing_paper":"/paper/2510.23883"},"observation_digest":"sha256:8bc1cc934df3d8f9488aa226f9a0b04430d7eaf9ac413f080d2509764f5ee884","observation_id":"7d8311eb-de4a-4d8e-84f4-712762ab9bed","resolution":{"observed_at":"2026-05-18T03:42:22.087412Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2409.11295","last_updated":"2025-03-12T20:54:00Z","snapshot_observed_at":"2026-08-06T11:52:38.289574Z","submitted_at":"2024-09-17T15:49:44Z","title":"EIA: Environmental Injection Attack on Generalist Web Agents for Privacy Leakage","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.11295","snapshot_observed_at":"2026-08-03T10:45:18.184723Z","title":"arXiv preprint arXiv:2409.11295 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-06T11:00:52.802245Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:18.184723Z"},"links":{"cited_paper":"/paper/2409.11295","citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:366ff66ad3d40cc710ef780b941eb5cba1f9869052f025d47ff2dbcd3938963c","observation_id":"6c061f65-f33d-4717-992c-7a16f85f5a6a","resolution":{"observed_at":"2026-08-03T10:45:18.184723Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2409.11295","last_updated":"2025-03-12T20:54:00Z","snapshot_observed_at":"2026-08-06T11:52:38.289574Z","submitted_at":"2024-09-17T15:49:44Z","title":"EIA: Environmental Injection Attack on Generalist Web Agents for Privacy Leakage","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.11295","snapshot_observed_at":"2026-08-03T09:54:57.641440Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2601.12349","last_updated":"2026-07-15T15:32:11Z","snapshot_observed_at":"2026-08-04T21:39:28.308547Z","submitted_at":"2026-01-18T10:54:54Z","title":"Mind the Gap: Action Rebinding Attacks against Android GUI Agents","version":3},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-03T09:54:57.641440Z"},"links":{"cited_paper":"/paper/2409.11295","citing_paper":"/paper/2601.12349"},"observation_digest":"sha256:092ae882c708aa708980b08478fe1c22ecdd0279f462031340bd6e8afa407a91","observation_id":"1dca5052-1c53-465f-835c-927dc08e41e1","resolution":{"observed_at":"2026-08-03T09:54:57.641440Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2409.11295","last_updated":"2025-03-12T20:54:00Z","snapshot_observed_at":"2026-08-06T11:52:38.289574Z","submitted_at":"2024-09-17T15:49:44Z","title":"EIA: Environmental Injection Attack on Generalist Web Agents for Privacy Leakage","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.11295","snapshot_observed_at":"2026-08-02T22:17:05.132343Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.17588","last_updated":"2026-07-07T23:37:46Z","snapshot_observed_at":"2026-08-02T22:17:03.948630Z","submitted_at":"2026-02-19T18:11:28Z","title":"Modeling Distinct Human Interaction in Web Agents","version":4},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-02T22:17:05.132343Z"},"links":{"cited_paper":"/paper/2409.11295","citing_paper":"/paper/2602.17588"},"observation_digest":"sha256:70ab8441e7d940de2352f4b38340dc3df0cb54c614334754a462121ff07554fc","observation_id":"5d242861-3a0f-417c-9a58-a7df5824c3ab","resolution":{"observed_at":"2026-08-02T22:17:05.132343Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2409.11295","last_updated":"2025-03-12T20:54:00Z","snapshot_observed_at":"2026-08-06T11:52:38.289574Z","submitted_at":"2024-09-17T15:49:44Z","title":"EIA: Environmental Injection Attack on Generalist Web Agents for Privacy Leakage","version":5},"cited_work":{"arxiv_id":"2409.11295","doi":"10.48550/arxiv.2409.11295","metadata_source":"pith","pith_arxiv_id":"2409.11295","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Eia: Environmental injection attack on generalist web agents for privacy leakage","venue":"cs.CR","work_id":"648feaca-04ca-4033-83b0-94571d951968","year":2024},"citing_paper":{"arxiv_id":"2604.09747","last_updated":"2026-04-10T07:22:11Z","snapshot_observed_at":"2026-07-06T22:58:34.504325Z","submitted_at":"2026-04-10T07:22:11Z","title":"ADAM: A Systematic Data Extraction Attack on Agent Memory via Adaptive Querying","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-05-10T17:57:59.918483Z"},"links":{"cited_paper":"/paper/2409.11295","citing_paper":"/paper/2604.09747"},"observation_digest":"sha256:6592316fbc1ebacabd93acb9b2bac903febd462a3b7ceaafd3bb5f2967544cbb","observation_id":"6ccfe973-97ea-404d-a1d6-460e3f42b1b4","resolution":{"observed_at":"2026-05-11T05:45:57.598580Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2409.11295","last_updated":"2025-03-12T20:54:00Z","snapshot_observed_at":"2026-08-06T11:52:38.289574Z","submitted_at":"2024-09-17T15:49:44Z","title":"EIA: Environmental Injection Attack on Generalist Web Agents for Privacy Leakage","version":5},"cited_work":{"arxiv_id":"2409.11295","doi":"10.48550/arxiv.2409.11295","metadata_source":"pith","pith_arxiv_id":"2409.11295","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Eia: Environmental injection attack on generalist web agents for privacy leakage","venue":"cs.CR","work_id":"648feaca-04ca-4033-83b0-94571d951968","year":2024},"citing_paper":{"arxiv_id":"2605.03129","last_updated":"2026-05-04T20:13:22Z","snapshot_observed_at":"2026-07-06T23:16:05.372336Z","submitted_at":"2026-05-04T20:13:22Z","title":"PIIGuard: Mitigating PII Harvesting under Adversarial Sanitization","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-05-08T17:49:39.533090Z"},"links":{"cited_paper":"/paper/2409.11295","citing_paper":"/paper/2605.03129"},"observation_digest":"sha256:f9f028f6954ffebc9ade1957b54c9186f8572e5e8fa510a57b3bc34acbb0ea77","observation_id":"0044b1e3-e3fe-4233-ba00-bd340309f7d4","resolution":{"observed_at":"2026-05-11T17:11:15.332922Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2409.11295","last_updated":"2025-03-12T20:54:00Z","snapshot_observed_at":"2026-08-06T11:52:38.289574Z","submitted_at":"2024-09-17T15:49:44Z","title":"EIA: Environmental Injection Attack on Generalist Web Agents for Privacy Leakage","version":5},"cited_work":{"arxiv_id":"2409.11295","doi":"10.48550/arxiv.2409.11295","metadata_source":"pith","pith_arxiv_id":"2409.11295","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Eia: Environmental injection attack on generalist web agents for privacy leakage","venue":"cs.CR","work_id":"648feaca-04ca-4033-83b0-94571d951968","year":2024},"citing_paper":{"arxiv_id":"2605.03378","last_updated":"2026-07-08T15:04:28Z","snapshot_observed_at":"2026-08-02T02:34:38.609069Z","submitted_at":"2026-05-05T05:37:00Z","title":"ARGUS: Defending LLM Agents Against Context-Aware Prompt Injection","version":1},"reference_index":141,"source":"arxiv_source","source_observed_at":"2026-05-07T15:59:49.513500Z"},"links":{"cited_paper":"/paper/2409.11295","citing_paper":"/paper/2605.03378"},"observation_digest":"sha256:84e25a3a435a3db47e0dc521c640b028dd440392069b9f7846ce70da42463a5d","observation_id":"3c26c6f5-cf9a-4671-bd85-3923726c167d","resolution":{"observed_at":"2026-05-11T23:56:13.822914Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2409.11295","last_updated":"2025-03-12T20:54:00Z","snapshot_observed_at":"2026-08-06T11:52:38.289574Z","submitted_at":"2024-09-17T15:49:44Z","title":"EIA: Environmental Injection Attack on Generalist Web Agents for Privacy Leakage","version":5},"cited_work":{"arxiv_id":"2409.11295","doi":"10.48550/arxiv.2409.11295","metadata_source":"pith","pith_arxiv_id":"2409.11295","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Eia: Environmental injection attack on generalist web agents for privacy leakage","venue":"cs.CR","work_id":"648feaca-04ca-4033-83b0-94571d951968","year":2024},"citing_paper":{"arxiv_id":"2605.15030","last_updated":"2026-05-14T16:26:27Z","snapshot_observed_at":"2026-07-06T23:26:23.179482Z","submitted_at":"2026-05-14T16:26:27Z","title":"WARD: Adversarially Robust Defense of Web Agents Against Prompt Injections","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-06-30T20:16:13.413064Z"},"links":{"cited_paper":"/paper/2409.11295","citing_paper":"/paper/2605.15030"},"observation_digest":"sha256:2e4730840a591b8a1d77186b896a5849246b8b25cfc57827e51ff2689c751cec","observation_id":"0e40d037-6bd5-41b2-a18b-f9557d0f2603","resolution":{"observed_at":"2026-07-01T14:45:49.587500Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2409.11295","last_updated":"2025-03-12T20:54:00Z","snapshot_observed_at":"2026-08-06T11:52:38.289574Z","submitted_at":"2024-09-17T15:49:44Z","title":"EIA: Environmental Injection Attack on Generalist Web Agents for Privacy Leakage","version":5},"cited_work":{"arxiv_id":"2409.11295","doi":"10.48550/arxiv.2409.11295","metadata_source":"pith","pith_arxiv_id":"2409.11295","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Eia: Environmental injection attack on generalist web agents for privacy leakage","venue":"cs.CR","work_id":"648feaca-04ca-4033-83b0-94571d951968","year":2024},"citing_paper":{"arxiv_id":"2606.02449","last_updated":"2026-06-01T16:20:45Z","snapshot_observed_at":"2026-07-06T23:42:49.173711Z","submitted_at":"2026-06-01T16:20:45Z","title":"HLL: Can Agents Cross Humanity's Last Line of Verification?","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-06-28T14:57:57.218669Z"},"links":{"cited_paper":"/paper/2409.11295","citing_paper":"/paper/2606.02449"},"observation_digest":"sha256:ed7d025fcf08d7a8ae28b58885ce4dee14e1af6af99d64cb222d90d2d340e7c7","observation_id":"55e884d8-c66c-42c2-b55f-62923f4267d7","resolution":{"observed_at":"2026-07-01T22:56:19.587012Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2409.11295","last_updated":"2025-03-12T20:54:00Z","snapshot_observed_at":"2026-08-06T11:52:38.289574Z","submitted_at":"2024-09-17T15:49:44Z","title":"EIA: Environmental Injection Attack on Generalist Web Agents for Privacy Leakage","version":5},"cited_work":{"arxiv_id":"2409.11295","doi":"10.48550/arxiv.2409.11295","metadata_source":"pith","pith_arxiv_id":"2409.11295","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Eia: Environmental injection attack on generalist web agents for privacy leakage","venue":"cs.CR","work_id":"648feaca-04ca-4033-83b0-94571d951968","year":2024},"citing_paper":{"arxiv_id":"2606.05233","last_updated":"2026-06-03T01:21:59Z","snapshot_observed_at":"2026-08-03T04:28:49.622809Z","submitted_at":"2026-06-03T01:21:59Z","title":"Domain-Conditioned Safety in Frontier Computer-Using Agents: A 793-Episode Browser Benchmark, a Coding-Domain Cross-Reference, and a Reproducibility Audit of Recent Red-Teaming","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-06-28T06:22:03.848058Z"},"links":{"cited_paper":"/paper/2409.11295","citing_paper":"/paper/2606.05233"},"observation_digest":"sha256:cea16611b1422dbf4d572c0a5eb8af92ce43bc274e1b8a57aed26569cc9a1333","observation_id":"ec0e7e28-1c72-4aeb-a31f-e010dede3038","resolution":{"observed_at":"2026-07-02T08:06:48.258146Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2409.11295","last_updated":"2025-03-12T20:54:00Z","snapshot_observed_at":"2026-08-06T11:52:38.289574Z","submitted_at":"2024-09-17T15:49:44Z","title":"EIA: Environmental Injection Attack on Generalist Web Agents for Privacy Leakage","version":5},"cited_work":{"arxiv_id":"2409.11295","doi":"10.48550/arxiv.2409.11295","metadata_source":"pith","pith_arxiv_id":"2409.11295","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Eia: Environmental injection attack on generalist web agents for privacy leakage","venue":"cs.CR","work_id":"648feaca-04ca-4033-83b0-94571d951968","year":2024},"citing_paper":{"arxiv_id":"2606.14027","last_updated":"2026-06-30T01:10:08Z","snapshot_observed_at":"2026-08-02T09:41:26.926011Z","submitted_at":"2026-06-12T02:01:38Z","title":"Same-Origin Policy for Agentic Browsers","version":3},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-07-01T07:29:08.355105Z"},"links":{"cited_paper":"/paper/2409.11295","citing_paper":"/paper/2606.14027"},"observation_digest":"sha256:ab847c51a86d4022323cbed90512c70b01d1218b64a1016261e69b4f79d4cbdc","observation_id":"0cf6bf26-8ebf-4f9f-82a5-5c6d0eb040fa","resolution":{"observed_at":"2026-07-01T07:35:29.038091Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2409.11295","last_updated":"2025-03-12T20:54:00Z","snapshot_observed_at":"2026-08-06T11:52:38.289574Z","submitted_at":"2024-09-17T15:49:44Z","title":"EIA: Environmental Injection Attack on Generalist Web Agents for Privacy Leakage","version":5},"cited_work":{"arxiv_id":"2409.11295","doi":"10.48550/arxiv.2409.11295","metadata_source":"pith","pith_arxiv_id":"2409.11295","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Eia: Environmental injection attack on generalist web agents for privacy leakage","venue":"cs.CR","work_id":"648feaca-04ca-4033-83b0-94571d951968","year":2024},"citing_paper":{"arxiv_id":"2607.08147","last_updated":"2026-07-09T06:37:52Z","snapshot_observed_at":"2026-08-06T02:05:16.233314Z","submitted_at":"2026-07-09T06:37:52Z","title":"Prismata: Confining Cross-Site Prompt Injection in Web Agents","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-07-10T12:20:03.672480Z"},"links":{"cited_paper":"/paper/2409.11295","citing_paper":"/paper/2607.08147"},"observation_digest":"sha256:64ed122ddbcea573722bc2aae151250ad97041b69b73a10abc726522a11c2f28","observation_id":"09232739-3b47-4587-adea-ada3ad50082f","resolution":{"observed_at":"2026-07-10T12:27:04.061309Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2409.11295","last_updated":"2025-03-12T20:54:00Z","snapshot_observed_at":"2026-08-06T11:52:38.289574Z","submitted_at":"2024-09-17T15:49:44Z","title":"EIA: Environmental Injection Attack on Generalist Web Agents for Privacy Leakage","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.11295","snapshot_observed_at":"2026-08-01T06:04:46.669935Z","title":"arXiv preprint arXiv:2409.11295 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.22024","last_updated":"2026-07-24T06:43:09Z","snapshot_observed_at":"2026-08-06T15:37:49.497100Z","submitted_at":"2026-07-24T06:43:09Z","title":"Agent Security Needs Redefinition through a Holistic Framework","version":1},"reference_index":282,"source":"arxiv_source","source_observed_at":"2026-08-01T06:04:46.669935Z"},"links":{"cited_paper":"/paper/2409.11295","citing_paper":"/paper/2607.22024"},"observation_digest":"sha256:d16760e50fe01ff3ec24d6acdba4ee4941e5482f0756092449dfdba64cc90126","observation_id":"d4519caf-597f-4eb7-9887-0f80966b45a6","resolution":{"observed_at":"2026-08-01T06:04:46.669935Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2409.11295/citation-record","integrity":"/paper/2409.11295/integrity","json":"/paper/2409.11295/citation-record.json","paper":"/paper/2409.11295"},"outbound":[],"paper":{"arxiv_id":"2409.11295","last_updated":"2025-03-12T20:54:00Z","latest_version":5,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-06T11:52:38.289574Z","submitted_at":"2024-09-17T15:49:44Z","title":"EIA: Environmental Injection Attack on Generalist Web Agents for Privacy Leakage"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"thesis":"As of 7 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 20 inbound Pith citation observations for arXiv:2409.11295."}