{"as_of":"2026-08-06T20:44:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:797de28482c643d88c22300de827e8b2b55d23bffeb0789de1ed1c0a515d3a05","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":18,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":18,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-06T06:34:29.942622+00:00","state":"measured"},{"denominator":18,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":18,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T16:12:51.111978Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"pith","source_observed_at":"2026-07-10T12:27:04.225516Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2410.17401","last_updated":"2025-05-31T18:34:01Z","snapshot_observed_at":"2026-08-01T16:54:45.609883Z","submitted_at":"2024-10-22T20:18:26Z","title":"AdvAgent: Controllable Blackbox Red-teaming on Web Agents","version":4},"cited_work":{"arxiv_id":"2410.17401","doi":null,"metadata_source":"pith","pith_arxiv_id":"2410.17401","snapshot_observed_at":"2026-07-10T12:27:04.225516Z","title":"Ad- vweb: Controllable black-box attacks on vlm-powered web agents","venue":"cs.CR","work_id":"2a343e0b-c7ca-43e4-a88b-e942d6efea85","year":2024},"citing_paper":{"arxiv_id":"2504.11703","last_updated":"2026-05-14T02:36:38Z","snapshot_observed_at":"2026-07-06T21:10:09.129714Z","submitted_at":"2025-04-16T01:58:40Z","title":"Progent: Securing AI Agents with Privilege Control","version":3},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-05-22T21:09:51.782808Z"},"links":{"cited_paper":"/paper/2410.17401","citing_paper":"/paper/2504.11703"},"observation_digest":"sha256:3a478b091d6ae69d33b595ef0f7934942404047067d98849b1af92c613c9c846","observation_id":"9c106925-bb18-4564-b5d7-683637fa0ab3","resolution":{"observed_at":"2026-05-22T21:12:08.473581Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.17401","last_updated":"2025-05-31T18:34:01Z","snapshot_observed_at":"2026-08-01T16:54:45.609883Z","submitted_at":"2024-10-22T20:18:26Z","title":"AdvAgent: Controllable Blackbox Red-teaming on Web Agents","version":4},"cited_work":{"arxiv_id":"2410.17401","doi":null,"metadata_source":"pith","pith_arxiv_id":"2410.17401","snapshot_observed_at":"2026-07-10T12:27:04.225516Z","title":"Ad- vweb: Controllable black-box attacks on vlm-powered web agents","venue":"cs.CR","work_id":"2a343e0b-c7ca-43e4-a88b-e942d6efea85","year":2024},"citing_paper":{"arxiv_id":"2505.10924","last_updated":"2026-04-29T05:56:22Z","snapshot_observed_at":"2026-07-06T21:24:49.058355Z","submitted_at":"2025-05-16T06:56:42Z","title":"A Survey on the Safety and Security Threats of Computer-Using Agents: JARVIS or Ultron?","version":4},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-05-22T15:22:11.766850Z"},"links":{"cited_paper":"/paper/2410.17401","citing_paper":"/paper/2505.10924"},"observation_digest":"sha256:d94c3341b5419bc1ff502dc0da8c1f85af58f2b73e4558c3768cb98a0b47020d","observation_id":"3e968913-e5f0-440f-ab50-4695e34851d6","resolution":{"observed_at":"2026-05-22T15:24:57.825168Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.17401","last_updated":"2025-05-31T18:34:01Z","snapshot_observed_at":"2026-08-01T16:54:45.609883Z","submitted_at":"2024-10-22T20:18:26Z","title":"AdvAgent: Controllable Blackbox Red-teaming on Web Agents","version":4},"cited_work":{"arxiv_id":"2410.17401","doi":null,"metadata_source":"pith","pith_arxiv_id":"2410.17401","snapshot_observed_at":"2026-07-10T12:27:04.225516Z","title":"Ad- vweb: Controllable black-box attacks on vlm-powered web agents","venue":"cs.CR","work_id":"2a343e0b-c7ca-43e4-a88b-e942d6efea85","year":2024},"citing_paper":{"arxiv_id":"2506.23978","last_updated":"2026-05-16T17:29:09Z","snapshot_observed_at":"2026-08-04T08:40:19.416980Z","submitted_at":"2025-06-30T15:45:17Z","title":"LLM Agents Are the Antidote to Walled Gardens","version":3},"reference_index":101,"source":"pdf_text","source_observed_at":"2026-05-22T00:41:19.750928Z"},"links":{"cited_paper":"/paper/2410.17401","citing_paper":"/paper/2506.23978"},"observation_digest":"sha256:4cefd767b22f371b2d9022dd07b174f0cbfd0404ea0d928898cb7b62f170728f","observation_id":"d554829c-d246-4a8d-ba50-f2c560642faa","resolution":{"observed_at":"2026-05-22T00:44:29.385051Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.17401","last_updated":"2025-05-31T18:34:01Z","snapshot_observed_at":"2026-08-01T16:54:45.609883Z","submitted_at":"2024-10-22T20:18:26Z","title":"AdvAgent: Controllable Blackbox Red-teaming on Web Agents","version":4},"cited_work":{"arxiv_id":"2410.17401","doi":null,"metadata_source":"pith","pith_arxiv_id":"2410.17401","snapshot_observed_at":"2026-07-10T12:27:04.225516Z","title":"Ad- vweb: Controllable black-box attacks on vlm-powered web agents","venue":"cs.CR","work_id":"2a343e0b-c7ca-43e4-a88b-e942d6efea85","year":2024},"citing_paper":{"arxiv_id":"2507.04227","last_updated":"2026-04-14T14:47:25Z","snapshot_observed_at":"2026-08-01T14:12:08.736574Z","submitted_at":"2025-07-06T03:31:36Z","title":"Mobile GUI Agents under Real-world Threats: Are We There Yet?","version":2},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-05-19T06:57:25.257775Z"},"links":{"cited_paper":"/paper/2410.17401","citing_paper":"/paper/2507.04227"},"observation_digest":"sha256:5423e6c9ee6ddc47b99e57b2d8d5b7c20e4d93a31d3737d23e09b34cf2d65dc9","observation_id":"edb5e66b-55fd-4313-b530-04c568e6292a","resolution":{"observed_at":"2026-05-19T07:02:07.912856Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.17401","last_updated":"2025-05-31T18:34:01Z","snapshot_observed_at":"2026-08-01T16:54:45.609883Z","submitted_at":"2024-10-22T20:18:26Z","title":"AdvAgent: Controllable Blackbox Red-teaming on Web Agents","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.17401","snapshot_observed_at":"2026-08-06T16:12:51.111978Z","title":"Advweb: Controllable black-box attacks on vlm-powered web agents","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-06T15:57:20.673152Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:51.111978Z"},"links":{"cited_paper":"/paper/2410.17401","citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:7b80e760162c246315d2f9da6e8d90bf2cecf78b312b5e88709adecdba31c38b","observation_id":"10569b72-f8b6-470e-b0a8-8290ce82ad5a","resolution":{"observed_at":"2026-08-06T16:12:51.111978Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.17401","last_updated":"2025-05-31T18:34:01Z","snapshot_observed_at":"2026-08-01T16:54:45.609883Z","submitted_at":"2024-10-22T20:18:26Z","title":"AdvAgent: Controllable Blackbox Red-teaming on Web Agents","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.17401","snapshot_observed_at":"2026-08-06T13:06:39.378280Z","title":"Advweb: Controllable black-box attacks on vlm-powered web agents","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.21017","last_updated":"2025-07-28T17:38:29Z","snapshot_observed_at":"2026-08-06T13:06:35.018218Z","submitted_at":"2025-07-28T17:38:29Z","title":"MIRAGE-Bench: LLM Agent is Hallucinating and Where to Find Them","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-06T13:06:39.378280Z"},"links":{"cited_paper":"/paper/2410.17401","citing_paper":"/paper/2507.21017"},"observation_digest":"sha256:36e7cc1652fb74fccc975586796e6df9cfe361cc7708c07a61a268969dea7cd4","observation_id":"93533467-36d7-41de-9837-9439022d3a6a","resolution":{"observed_at":"2026-08-06T13:06:39.378280Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.17401","last_updated":"2025-05-31T18:34:01Z","snapshot_observed_at":"2026-08-01T16:54:45.609883Z","submitted_at":"2024-10-22T20:18:26Z","title":"AdvAgent: Controllable Blackbox Red-teaming on Web Agents","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.17401","snapshot_observed_at":"2026-08-06T13:05:40.441993Z","title":"Advweb: Controllable black-box attacks on vlm-powered web agents","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.21206","last_updated":"2025-07-28T17:58:12Z","snapshot_observed_at":"2026-08-06T16:18:05.402782Z","submitted_at":"2025-07-28T17:58:12Z","title":"Agentic Web: Weaving the Next Web with AI Agents","version":1},"reference_index":237,"source":"arxiv_source","source_observed_at":"2026-08-06T13:05:40.441993Z"},"links":{"cited_paper":"/paper/2410.17401","citing_paper":"/paper/2507.21206"},"observation_digest":"sha256:31a33df5562e1fd76901d3b071af41ae9cc4b71d98ac324d38ae04a62b8145c2","observation_id":"10e90b88-ef6f-40a2-8efb-f88a6454f95b","resolution":{"observed_at":"2026-08-06T13:05:40.441993Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.17401","last_updated":"2025-05-31T18:34:01Z","snapshot_observed_at":"2026-08-01T16:54:45.609883Z","submitted_at":"2024-10-22T20:18:26Z","title":"AdvAgent: Controllable Blackbox Red-teaming on Web Agents","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.17401","snapshot_observed_at":"2026-08-05T05:09:39.975185Z","title":"Advweb: Controllable black-box attacks on vlm-powered web agents.arXiv preprint arXiv:2410.17401, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.05755","last_updated":"2026-06-28T05:20:23Z","snapshot_observed_at":"2026-08-05T05:09:38.175982Z","submitted_at":"2025-09-06T15:48:49Z","title":"Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment","version":6},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-05T05:09:39.975185Z"},"links":{"cited_paper":"/paper/2410.17401","citing_paper":"/paper/2509.05755"},"observation_digest":"sha256:da4e242cbeeafb32c4adf01679a0819ab8c3ef5473c817af239edf8dbeae1f77","observation_id":"9c655096-f07b-42c1-b1cc-3548e9f88d27","resolution":{"observed_at":"2026-08-05T05:09:39.975185Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.17401","last_updated":"2025-05-31T18:34:01Z","snapshot_observed_at":"2026-08-01T16:54:45.609883Z","submitted_at":"2024-10-22T20:18:26Z","title":"AdvAgent: Controllable Blackbox Red-teaming on Web Agents","version":4},"cited_work":{"arxiv_id":"2410.17401","doi":null,"metadata_source":"pith","pith_arxiv_id":"2410.17401","snapshot_observed_at":"2026-07-10T12:27:04.225516Z","title":"Ad- vweb: Controllable black-box attacks on vlm-powered web agents","venue":"cs.CR","work_id":"2a343e0b-c7ca-43e4-a88b-e942d6efea85","year":2024},"citing_paper":{"arxiv_id":"2510.23883","last_updated":"2026-04-03T16:27:34Z","snapshot_observed_at":"2026-08-02T13:42:34.526072Z","submitted_at":"2025-10-27T21:48:11Z","title":"Agentic AI Security: Threats, Defenses, Evaluation, and Open Challenges","version":3},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-05-18T03:42:10.703369Z"},"links":{"cited_paper":"/paper/2410.17401","citing_paper":"/paper/2510.23883"},"observation_digest":"sha256:e4a4217f7bca5ca4995b27cd8c43009e4e6f1625bf274b6ccefa4d0a41d142e0","observation_id":"8af6d729-c9ed-4f2f-9f76-ca0858ec5dc5","resolution":{"observed_at":"2026-05-18T03:42:22.033296Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.17401","last_updated":"2025-05-31T18:34:01Z","snapshot_observed_at":"2026-08-01T16:54:45.609883Z","submitted_at":"2024-10-22T20:18:26Z","title":"AdvAgent: Controllable Blackbox Red-teaming on Web Agents","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.17401","snapshot_observed_at":"2026-08-03T10:45:19.642964Z","title":"arXiv preprint arXiv:2410.17401 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-06T11:00:52.802245Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:19.642964Z"},"links":{"cited_paper":"/paper/2410.17401","citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:148c7882aceed9b42f063c243467b30fa1158a517035939b7b49cdc8d8001ead","observation_id":"b149cb52-69c8-4166-9817-38d256c2f88f","resolution":{"observed_at":"2026-08-03T10:45:19.642964Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.17401","last_updated":"2025-05-31T18:34:01Z","snapshot_observed_at":"2026-08-01T16:54:45.609883Z","submitted_at":"2024-10-22T20:18:26Z","title":"AdvAgent: Controllable Blackbox Red-teaming on Web Agents","version":4},"cited_work":{"arxiv_id":"2410.17401","doi":null,"metadata_source":"pith","pith_arxiv_id":"2410.17401","snapshot_observed_at":"2026-07-10T12:27:04.225516Z","title":"Ad- vweb: Controllable black-box attacks on vlm-powered web agents","venue":"cs.CR","work_id":"2a343e0b-c7ca-43e4-a88b-e942d6efea85","year":2024},"citing_paper":{"arxiv_id":"2604.04426","last_updated":"2026-04-06T05:15:00Z","snapshot_observed_at":"2026-07-06T22:53:24.585766Z","submitted_at":"2026-04-06T05:15:00Z","title":"ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-05-10T20:25:58.113363Z"},"links":{"cited_paper":"/paper/2410.17401","citing_paper":"/paper/2604.04426"},"observation_digest":"sha256:c59001e3cf398fe82f95fb9f14ca28ed6eec4571b7d6ab4ae0b5abbe1c818300","observation_id":"e104e959-3b76-41c6-8dae-fc303042de65","resolution":{"observed_at":"2026-05-10T21:55:52.954590Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.17401","last_updated":"2025-05-31T18:34:01Z","snapshot_observed_at":"2026-08-01T16:54:45.609883Z","submitted_at":"2024-10-22T20:18:26Z","title":"AdvAgent: Controllable Blackbox Red-teaming on Web Agents","version":4},"cited_work":{"arxiv_id":"2410.17401","doi":null,"metadata_source":"pith","pith_arxiv_id":"2410.17401","snapshot_observed_at":"2026-07-10T12:27:04.225516Z","title":"Ad- vweb: Controllable black-box attacks on vlm-powered web agents","venue":"cs.CR","work_id":"2a343e0b-c7ca-43e4-a88b-e942d6efea85","year":2024},"citing_paper":{"arxiv_id":"2604.06811","last_updated":"2026-05-28T07:57:37Z","snapshot_observed_at":"2026-07-13T08:51:18.197463Z","submitted_at":"2026-04-08T08:24:48Z","title":"SkillTrojan: Backdoor Attacks on Skill-Based Agent Systems","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-05-10T17:36:19.694339Z"},"links":{"cited_paper":"/paper/2410.17401","citing_paper":"/paper/2604.06811"},"observation_digest":"sha256:8f80fa2fcd73e2c360c8d7c4911f216ff628acc46a100d7193b4d74889224e45","observation_id":"16532d4d-f6ef-4fd1-85f5-bd52dbd3b549","resolution":{"observed_at":"2026-05-11T06:31:02.019262Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.17401","last_updated":"2025-05-31T18:34:01Z","snapshot_observed_at":"2026-08-01T16:54:45.609883Z","submitted_at":"2024-10-22T20:18:26Z","title":"AdvAgent: Controllable Blackbox Red-teaming on Web Agents","version":4},"cited_work":{"arxiv_id":"2410.17401","doi":null,"metadata_source":"pith","pith_arxiv_id":"2410.17401","snapshot_observed_at":"2026-07-10T12:27:04.225516Z","title":"Ad- vweb: Controllable black-box attacks on vlm-powered web agents","venue":"cs.CR","work_id":"2a343e0b-c7ca-43e4-a88b-e942d6efea85","year":2024},"citing_paper":{"arxiv_id":"2605.15030","last_updated":"2026-05-14T16:26:27Z","snapshot_observed_at":"2026-07-06T23:26:23.179482Z","submitted_at":"2026-05-14T16:26:27Z","title":"WARD: Adversarially Robust Defense of Web Agents Against Prompt Injections","version":1},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-06-30T20:16:13.413064Z"},"links":{"cited_paper":"/paper/2410.17401","citing_paper":"/paper/2605.15030"},"observation_digest":"sha256:54fd1225841c3ba73496a0c3a309136ab5b852ffe2249abebd3afd09ae8bae4b","observation_id":"5f421e42-7406-4f35-88fa-7c4b5930ca08","resolution":{"observed_at":"2026-07-01T14:35:47.827461Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.17401","last_updated":"2025-05-31T18:34:01Z","snapshot_observed_at":"2026-08-01T16:54:45.609883Z","submitted_at":"2024-10-22T20:18:26Z","title":"AdvAgent: Controllable Blackbox Red-teaming on Web Agents","version":4},"cited_work":{"arxiv_id":"2410.17401","doi":null,"metadata_source":"pith","pith_arxiv_id":"2410.17401","snapshot_observed_at":"2026-07-10T12:27:04.225516Z","title":"Ad- vweb: Controllable black-box attacks on vlm-powered web agents","venue":"cs.CR","work_id":"2a343e0b-c7ca-43e4-a88b-e942d6efea85","year":2024},"citing_paper":{"arxiv_id":"2606.02449","last_updated":"2026-06-01T16:20:45Z","snapshot_observed_at":"2026-07-06T23:42:49.173711Z","submitted_at":"2026-06-01T16:20:45Z","title":"HLL: Can Agents Cross Humanity's Last Line of Verification?","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-06-28T14:57:57.218669Z"},"links":{"cited_paper":"/paper/2410.17401","citing_paper":"/paper/2606.02449"},"observation_digest":"sha256:49f0c294d5209552d72a0aac6df4a61723dc6c46dd9fddece2d3837b3da5a041","observation_id":"2463621c-1a0e-4eca-af75-b74831448b05","resolution":{"observed_at":"2026-07-01T22:56:19.639725Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.17401","last_updated":"2025-05-31T18:34:01Z","snapshot_observed_at":"2026-08-01T16:54:45.609883Z","submitted_at":"2024-10-22T20:18:26Z","title":"AdvAgent: Controllable Blackbox Red-teaming on Web Agents","version":4},"cited_work":{"arxiv_id":"2410.17401","doi":null,"metadata_source":"pith","pith_arxiv_id":"2410.17401","snapshot_observed_at":"2026-07-10T12:27:04.225516Z","title":"Ad- vweb: Controllable black-box attacks on vlm-powered web agents","venue":"cs.CR","work_id":"2a343e0b-c7ca-43e4-a88b-e942d6efea85","year":2024},"citing_paper":{"arxiv_id":"2606.20717","last_updated":"2026-06-16T15:31:33Z","snapshot_observed_at":"2026-08-03T03:41:11.931921Z","submitted_at":"2026-06-16T15:31:33Z","title":"MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-06-27T00:54:00.944706Z"},"links":{"cited_paper":"/paper/2410.17401","citing_paper":"/paper/2606.20717"},"observation_digest":"sha256:a10d4739e24addcc760dc8e165ad67d4709afb9fae70f62f290b1fdf8856e677","observation_id":"3d91a8ab-2976-40cd-80b9-2f318ec326d7","resolution":{"observed_at":"2026-07-03T21:08:58.366599Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.17401","last_updated":"2025-05-31T18:34:01Z","snapshot_observed_at":"2026-08-01T16:54:45.609883Z","submitted_at":"2024-10-22T20:18:26Z","title":"AdvAgent: Controllable Blackbox Red-teaming on Web Agents","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.17401","snapshot_observed_at":"2026-07-11T14:39:55.782891Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.04718","last_updated":"2026-07-06T06:43:21Z","snapshot_observed_at":"2026-08-06T02:04:11.416626Z","submitted_at":"2026-07-06T06:43:21Z","title":"FORGE: Research-Trajectory Hijacking Attacks on Deep Research Agents","version":1},"reference_index":98,"source":"arxiv_source","source_observed_at":"2026-07-11T14:39:55.782891Z"},"links":{"cited_paper":"/paper/2410.17401","citing_paper":"/paper/2607.04718"},"observation_digest":"sha256:babb3e99e77e4d3da0d50cf24ad8c859241e052a246ee55bd0fc67f1a2ed5690","observation_id":"fa67aa11-7fb1-4ed2-bc83-b5857ffef034","resolution":{"observed_at":"2026-07-11T14:39:55.782891Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.17401","last_updated":"2025-05-31T18:34:01Z","snapshot_observed_at":"2026-08-01T16:54:45.609883Z","submitted_at":"2024-10-22T20:18:26Z","title":"AdvAgent: Controllable Blackbox Red-teaming on Web Agents","version":4},"cited_work":{"arxiv_id":"2410.17401","doi":null,"metadata_source":"pith","pith_arxiv_id":"2410.17401","snapshot_observed_at":"2026-07-10T12:27:04.225516Z","title":"Ad- vweb: Controllable black-box attacks on vlm-powered web agents","venue":"cs.CR","work_id":"2a343e0b-c7ca-43e4-a88b-e942d6efea85","year":2024},"citing_paper":{"arxiv_id":"2607.08147","last_updated":"2026-07-09T06:37:52Z","snapshot_observed_at":"2026-08-06T02:05:16.233314Z","submitted_at":"2026-07-09T06:37:52Z","title":"Prismata: Confining Cross-Site Prompt Injection in Web Agents","version":1},"reference_index":88,"source":"pdf_text","source_observed_at":"2026-07-10T12:20:03.672480Z"},"links":{"cited_paper":"/paper/2410.17401","citing_paper":"/paper/2607.08147"},"observation_digest":"sha256:4537749dc09cabd179e189ce600e9d8bd1275743eb4a9721cc6b4663b40d563f","observation_id":"c9a13f31-a8b4-478e-9db2-77d30dd93cac","resolution":{"observed_at":"2026-07-10T12:27:04.226700Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.17401","last_updated":"2025-05-31T18:34:01Z","snapshot_observed_at":"2026-08-01T16:54:45.609883Z","submitted_at":"2024-10-22T20:18:26Z","title":"AdvAgent: Controllable Blackbox Red-teaming on Web Agents","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.17401","snapshot_observed_at":"2026-08-01T06:04:46.674969Z","title":"arXiv preprint arXiv:2410.17401 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.22024","last_updated":"2026-07-24T06:43:09Z","snapshot_observed_at":"2026-08-06T15:37:49.497100Z","submitted_at":"2026-07-24T06:43:09Z","title":"Agent Security Needs Redefinition through a Holistic Framework","version":1},"reference_index":283,"source":"arxiv_source","source_observed_at":"2026-08-01T06:04:46.674969Z"},"links":{"cited_paper":"/paper/2410.17401","citing_paper":"/paper/2607.22024"},"observation_digest":"sha256:a1e857b58c41546b34f586d0120ae8cbea124b0ddb2f1cdf56df1f95a5973e3f","observation_id":"f49a09b2-52bf-44b8-93c4-5ef84f5a5a29","resolution":{"observed_at":"2026-08-01T06:04:46.674969Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2410.17401/citation-record","integrity":"/paper/2410.17401/integrity","json":"/paper/2410.17401/citation-record.json","paper":"/paper/2410.17401"},"outbound":[],"paper":{"arxiv_id":"2410.17401","last_updated":"2025-05-31T18:34:01Z","latest_version":4,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-01T16:54:45.609883Z","submitted_at":"2024-10-22T20:18:26Z","title":"AdvAgent: Controllable Blackbox Red-teaming on Web Agents"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"thesis":"As of 6 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 18 inbound Pith citation observations for arXiv:2410.17401."}