{"as_of":"2026-08-14T13:17:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:472f0970867079fd17822e65681231f5b633e4980d4cdb64d7501c9c66c1443d","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":25,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":25,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-14T06:32:32.682623+00:00","state":"measured"},{"denominator":25,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":25,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-11T05:06:49.729303Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":1,"source":"pith","source_observed_at":"2026-08-05T02:28:24.338817Z","state":"measured"}],"external_citation_measurements":[{"count":0,"observed_at":"2026-08-05T02:28:24.338817Z","source":"pith"}],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2411.02391","last_updated":"2025-05-24T16:15:46Z","snapshot_observed_at":"2026-08-12T22:07:58.132030Z","submitted_at":"2024-11-04T18:56:42Z","title":"Attacking Vision-Language Computer Agents via Pop-ups","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.02391","snapshot_observed_at":"2026-08-11T05:06:49.729303Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.18116","last_updated":"2025-05-06T12:24:43Z","snapshot_observed_at":"2026-08-13T21:19:16.754745Z","submitted_at":"2024-12-24T02:54:56Z","title":"AutoDroid-V2: Boosting SLM-based GUI Agents via Code Generation","version":3},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-11T05:06:49.729303Z"},"links":{"cited_paper":"/paper/2411.02391","citing_paper":"/paper/2412.18116"},"observation_digest":"sha256:c3842519278315fda482f66747a7c5c7599a151edaf23cc21bdb019110d2aca8","observation_id":"2fa52eb3-2e20-4373-b088-394b10bb56ac","resolution":{"observed_at":"2026-08-11T05:06:49.729303Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.02391","last_updated":"2025-05-24T16:15:46Z","snapshot_observed_at":"2026-08-12T22:07:58.132030Z","submitted_at":"2024-11-04T18:56:42Z","title":"Attacking Vision-Language Computer Agents via Pop-ups","version":2},"cited_work":{"arxiv_id":"2411.02391","doi":"10.48550/arxiv.2411.02391","metadata_source":"pith","pith_arxiv_id":"2411.02391","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Attacking vision- language computer agents via pop-ups","venue":"cs.CL","work_id":"74121ae8-d170-456a-86e7-6590edee179a","year":2024},"citing_paper":{"arxiv_id":"2504.11703","last_updated":"2026-05-14T02:36:38Z","snapshot_observed_at":"2026-08-12T23:26:44.716922Z","submitted_at":"2025-04-16T01:58:40Z","title":"Progent: Securing AI Agents with Privilege Control","version":3},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-05-22T21:09:51.782808Z"},"links":{"cited_paper":"/paper/2411.02391","citing_paper":"/paper/2504.11703"},"observation_digest":"sha256:8239ab8e81c3d54c3d6e37fa037da9944732644316fb5aa0aac550c22d8de7c6","observation_id":"27182ec8-d805-4145-a0f5-abbb8ce74d72","resolution":{"observed_at":"2026-05-22T21:12:08.519192Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2411.02391","last_updated":"2025-05-24T16:15:46Z","snapshot_observed_at":"2026-08-12T22:07:58.132030Z","submitted_at":"2024-11-04T18:56:42Z","title":"Attacking Vision-Language Computer Agents via Pop-ups","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.02391","snapshot_observed_at":"2026-08-07T15:41:21.338499Z","title":"Attacking vision-language computer agents via pop-ups","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.14289","last_updated":"2026-06-05T10:24:33Z","snapshot_observed_at":"2026-08-14T05:02:11.760378Z","submitted_at":"2025-05-20T12:41:05Z","title":"EVA: Evolving Semantic Adversaries for Red-Teaming GUI Agents Against Environmental Injection Attacks","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T15:41:21.338499Z"},"links":{"cited_paper":"/paper/2411.02391","citing_paper":"/paper/2505.14289"},"observation_digest":"sha256:b086b12f8b40c2252197ec6cfc5b49bf368f746a8425a96a8704ee276c4c13ce","observation_id":"46373db7-78df-4a76-b062-6c08040f8c11","resolution":{"observed_at":"2026-08-07T15:41:21.338499Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.02391","last_updated":"2025-05-24T16:15:46Z","snapshot_observed_at":"2026-08-12T22:07:58.132030Z","submitted_at":"2024-11-04T18:56:42Z","title":"Attacking Vision-Language Computer Agents via Pop-ups","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.02391","snapshot_observed_at":"2026-08-07T14:44:48.689068Z","title":"Attacking vision-language computer agents via pop-ups","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.17735","last_updated":"2025-07-18T07:34:40Z","snapshot_observed_at":"2026-08-12T21:31:18.524742Z","submitted_at":"2025-05-23T10:56:06Z","title":"SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator","version":2},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-07T14:44:48.689068Z"},"links":{"cited_paper":"/paper/2411.02391","citing_paper":"/paper/2505.17735"},"observation_digest":"sha256:67129c944a1002ed4631e16944194093a4a751499339823e32a8260a154c09ca","observation_id":"788665c1-1e45-4c88-aaf9-b361feaadfa8","resolution":{"observed_at":"2026-08-07T14:44:48.689068Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.02391","last_updated":"2025-05-24T16:15:46Z","snapshot_observed_at":"2026-08-12T22:07:58.132030Z","submitted_at":"2024-11-04T18:56:42Z","title":"Attacking Vision-Language Computer Agents via Pop-ups","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.02391","snapshot_observed_at":"2026-08-07T14:42:38.645474Z","title":"Attacking vision-language computer agents via pop-ups","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.17861","last_updated":"2025-05-23T13:13:44Z","snapshot_observed_at":"2026-08-08T15:07:52.945830Z","submitted_at":"2025-05-23T13:13:44Z","title":"Superplatforms Have to Attack AI Agents","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-07T14:42:38.645474Z"},"links":{"cited_paper":"/paper/2411.02391","citing_paper":"/paper/2505.17861"},"observation_digest":"sha256:0506f3c3df10cc56ca3ada8614b69a120eb0b7771260f1268b56b54536c36eaf","observation_id":"a8bb3688-7ea9-44aa-b4e6-28b1a804b001","resolution":{"observed_at":"2026-08-07T14:42:38.645474Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.02391","last_updated":"2025-05-24T16:15:46Z","snapshot_observed_at":"2026-08-12T22:07:58.132030Z","submitted_at":"2024-11-04T18:56:42Z","title":"Attacking Vision-Language Computer Agents via Pop-ups","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.02391","snapshot_observed_at":"2026-08-07T13:32:47.969437Z","title":"Attacking vision-language computer agents via pop-ups","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.21499","last_updated":"2025-05-27T17:59:05Z","snapshot_observed_at":"2026-08-07T13:24:27.400642Z","submitted_at":"2025-05-27T17:59:05Z","title":"AdInject: Real-World Black-Box Attacks on Web Agents via Advertising Delivery","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-07T13:32:47.969437Z"},"links":{"cited_paper":"/paper/2411.02391","citing_paper":"/paper/2505.21499"},"observation_digest":"sha256:9ea7340ecaf60d6dccd4166de63aa053809fb24f883a89c2f54e9bf7250e4332","observation_id":"22c533b9-0d1d-4f0b-9559-2b9eb12de8af","resolution":{"observed_at":"2026-08-07T13:32:47.969437Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.02391","last_updated":"2025-05-24T16:15:46Z","snapshot_observed_at":"2026-08-12T22:07:58.132030Z","submitted_at":"2024-11-04T18:56:42Z","title":"Attacking Vision-Language Computer Agents via Pop-ups","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.02391","snapshot_observed_at":"2026-08-07T12:06:27.951327Z","title":"Attacking vision-language computer agents via pop-ups","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-14T03:16:20.343826Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:27.951327Z"},"links":{"cited_paper":"/paper/2411.02391","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:550821a5750fd4270a8279d038a9bfbc571f32d806a6c0c374248156a03ea1bb","observation_id":"f232dac0-63ab-4f5c-ad68-c9c6f86410e4","resolution":{"observed_at":"2026-08-07T12:06:27.951327Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.02391","last_updated":"2025-05-24T16:15:46Z","snapshot_observed_at":"2026-08-12T22:07:58.132030Z","submitted_at":"2024-11-04T18:56:42Z","title":"Attacking Vision-Language Computer Agents via Pop-ups","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.02391","snapshot_observed_at":"2026-08-07T12:11:26.307178Z","title":"Zhang, T","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.05376","last_updated":"2025-06-09T05:48:22Z","snapshot_observed_at":"2026-08-10T02:41:13.540113Z","submitted_at":"2025-05-30T22:58:54Z","title":"A Red Teaming Roadmap Towards System-Level Safety","version":2},"reference_index":104,"source":"pdf_text","source_observed_at":"2026-08-07T12:11:26.307178Z"},"links":{"cited_paper":"/paper/2411.02391","citing_paper":"/paper/2506.05376"},"observation_digest":"sha256:218875ede4f733d35d39f212b845ab8adea962f1f955be66b18ed4ede25d02f4","observation_id":"3b7793aa-899f-4e01-a6d7-aa9c8c496f5e","resolution":{"observed_at":"2026-08-07T12:11:26.307178Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.02391","last_updated":"2025-05-24T16:15:46Z","snapshot_observed_at":"2026-08-12T22:07:58.132030Z","submitted_at":"2024-11-04T18:56:42Z","title":"Attacking Vision-Language Computer Agents via Pop-ups","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.02391","snapshot_observed_at":"2026-08-07T04:35:39.259264Z","title":"Attacking vision-language computer agents via pop-ups","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.10387","last_updated":"2025-06-12T06:21:19Z","snapshot_observed_at":"2026-08-09T11:09:09.637889Z","submitted_at":"2025-06-12T06:21:19Z","title":"Mirage-1: Augmenting and Updating GUI Agent with Hierarchical Multimodal Skills","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-07T04:35:39.259264Z"},"links":{"cited_paper":"/paper/2411.02391","citing_paper":"/paper/2506.10387"},"observation_digest":"sha256:86a7672cd1945a3269f1e4f9f7a63033f3190ce546604b92b9105a116b86e7bc","observation_id":"14ea2d07-feb1-4b1d-90b2-3989b43dcdde","resolution":{"observed_at":"2026-08-07T04:35:39.259264Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.02391","last_updated":"2025-05-24T16:15:46Z","snapshot_observed_at":"2026-08-12T22:07:58.132030Z","submitted_at":"2024-11-04T18:56:42Z","title":"Attacking Vision-Language Computer Agents via Pop-ups","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.02391","snapshot_observed_at":"2026-08-06T22:36:45.668547Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.21252","last_updated":"2025-06-26T13:36:12Z","snapshot_observed_at":"2026-08-12T14:50:33.270952Z","submitted_at":"2025-06-26T13:36:12Z","title":"Agent-RewardBench: Towards a Unified Benchmark for Reward Modeling across Perception, Planning, and Safety in Real-World Multimodal Agents","version":1},"reference_index":41,"source":"arxiv_source","source_observed_at":"2026-08-06T22:36:45.668547Z"},"links":{"cited_paper":"/paper/2411.02391","citing_paper":"/paper/2506.21252"},"observation_digest":"sha256:309b5a094c990ff730140b1bb832c8d27aef225b90d017166968776d79e9c910","observation_id":"8a5f0f52-67b2-4554-a6b8-26260ebf08cb","resolution":{"observed_at":"2026-08-06T22:36:45.668547Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.02391","last_updated":"2025-05-24T16:15:46Z","snapshot_observed_at":"2026-08-12T22:07:58.132030Z","submitted_at":"2024-11-04T18:56:42Z","title":"Attacking Vision-Language Computer Agents via Pop-ups","version":2},"cited_work":{"arxiv_id":"2411.02391","doi":"10.48550/arxiv.2411.02391","metadata_source":"pith","pith_arxiv_id":"2411.02391","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Attacking vision- language computer agents via pop-ups","venue":"cs.CL","work_id":"74121ae8-d170-456a-86e7-6590edee179a","year":2024},"citing_paper":{"arxiv_id":"2506.23978","last_updated":"2026-05-16T17:29:09Z","snapshot_observed_at":"2026-08-13T21:35:45.157814Z","submitted_at":"2025-06-30T15:45:17Z","title":"LLM Agents Are the Antidote to Walled Gardens","version":3},"reference_index":106,"source":"pdf_text","source_observed_at":"2026-05-22T00:41:19.750928Z"},"links":{"cited_paper":"/paper/2411.02391","citing_paper":"/paper/2506.23978"},"observation_digest":"sha256:ab1c22a7d065da141554344e3db54f4e97eeed810e6feb6f45556f7ea9b741d4","observation_id":"8538ec90-4c8d-49ae-a9f0-641769fd7a1d","resolution":{"observed_at":"2026-05-22T00:44:29.323746Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2411.02391","last_updated":"2025-05-24T16:15:46Z","snapshot_observed_at":"2026-08-12T22:07:58.132030Z","submitted_at":"2024-11-04T18:56:42Z","title":"Attacking Vision-Language Computer Agents via Pop-ups","version":2},"cited_work":{"arxiv_id":"2411.02391","doi":"10.48550/arxiv.2411.02391","metadata_source":"pith","pith_arxiv_id":"2411.02391","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Attacking vision- language computer agents via pop-ups","venue":"cs.CL","work_id":"74121ae8-d170-456a-86e7-6590edee179a","year":2024},"citing_paper":{"arxiv_id":"2507.04227","last_updated":"2026-04-14T14:47:25Z","snapshot_observed_at":"2026-08-13T21:04:16.780390Z","submitted_at":"2025-07-06T03:31:36Z","title":"Mobile GUI Agents under Real-world Threats: Are We There Yet?","version":2},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-05-19T06:57:25.257775Z"},"links":{"cited_paper":"/paper/2411.02391","citing_paper":"/paper/2507.04227"},"observation_digest":"sha256:9f2499c01d6d8af6546f6113f30b1ca9a4ba3e5896240643c2a2ee4be3a79a93","observation_id":"16678d5c-d80f-4e86-8c4e-24800839c19c","resolution":{"observed_at":"2026-05-19T07:02:07.903154Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2411.02391","last_updated":"2025-05-24T16:15:46Z","snapshot_observed_at":"2026-08-12T22:07:58.132030Z","submitted_at":"2024-11-04T18:56:42Z","title":"Attacking Vision-Language Computer Agents via Pop-ups","version":2},"cited_work":{"arxiv_id":"2411.02391","doi":"10.48550/arxiv.2411.02391","metadata_source":"pith","pith_arxiv_id":"2411.02391","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Attacking vision- language computer agents via pop-ups","venue":"cs.CL","work_id":"74121ae8-d170-456a-86e7-6590edee179a","year":2024},"citing_paper":{"arxiv_id":"2507.10610","last_updated":"2026-04-07T11:46:55Z","snapshot_observed_at":"2026-08-11T12:41:29.359318Z","submitted_at":"2025-07-13T08:36:09Z","title":"LaSM: Layer-wise Scaling Mechanism for Defending Pop-up Attack on GUI Agents","version":3},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-05-19T04:10:57.882345Z"},"links":{"cited_paper":"/paper/2411.02391","citing_paper":"/paper/2507.10610"},"observation_digest":"sha256:53c10419b5d557c1f1ab337f8a1d8cba11e932301bb0d502ba960fb809354be6","observation_id":"c3854d46-ccb8-49f1-8a80-19c22dfa3024","resolution":{"observed_at":"2026-05-19T04:12:02.174777Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2411.02391","last_updated":"2025-05-24T16:15:46Z","snapshot_observed_at":"2026-08-12T22:07:58.132030Z","submitted_at":"2024-11-04T18:56:42Z","title":"Attacking Vision-Language Computer Agents via Pop-ups","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.02391","snapshot_observed_at":"2026-08-06T16:12:51.576325Z","title":"Attacking vision-language computer agents via pop-ups","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-06T15:57:20.673152Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:51.576325Z"},"links":{"cited_paper":"/paper/2411.02391","citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:5c2d87224cfab495cb2cc41624f269700024b7caad58773b76ed4a19eec93d6c","observation_id":"deb16fda-5796-4beb-8290-da7d3a6c2079","resolution":{"observed_at":"2026-08-06T16:12:51.576325Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.02391","last_updated":"2025-05-24T16:15:46Z","snapshot_observed_at":"2026-08-12T22:07:58.132030Z","submitted_at":"2024-11-04T18:56:42Z","title":"Attacking Vision-Language Computer Agents via Pop-ups","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.02391","snapshot_observed_at":"2026-08-06T13:06:40.188635Z","title":"Attacking vision-language computer agents via pop-ups","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.21017","last_updated":"2025-07-28T17:38:29Z","snapshot_observed_at":"2026-08-07T12:39:13.524680Z","submitted_at":"2025-07-28T17:38:29Z","title":"MIRAGE-Bench: LLM Agent is Hallucinating and Where to Find Them","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-06T13:06:40.188635Z"},"links":{"cited_paper":"/paper/2411.02391","citing_paper":"/paper/2507.21017"},"observation_digest":"sha256:2ede670b4edf340ef833064d29a9df8863828f7da45704d5a7c806c0ee2d0aae","observation_id":"2fa0340b-5ae2-4a86-bb6e-c55395cc9725","resolution":{"observed_at":"2026-08-06T13:06:40.188635Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.02391","last_updated":"2025-05-24T16:15:46Z","snapshot_observed_at":"2026-08-12T22:07:58.132030Z","submitted_at":"2024-11-04T18:56:42Z","title":"Attacking Vision-Language Computer Agents via Pop-ups","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.02391","snapshot_observed_at":"2026-08-04T21:44:12.467965Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.07764","last_updated":"2025-09-09T13:59:00Z","snapshot_observed_at":"2026-08-12T18:59:03.291589Z","submitted_at":"2025-09-09T13:59:00Z","title":"AgentSentinel: An End-to-End and Real-Time Security Defense Framework for Computer-Use Agents","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-04T21:44:12.467965Z"},"links":{"cited_paper":"/paper/2411.02391","citing_paper":"/paper/2509.07764"},"observation_digest":"sha256:c24e8f249f4eb112fc0d36b267153b4c8833581e05151854be5f7ae7818a790c","observation_id":"20da66b8-b2a9-454a-842d-1e40c3fa04d9","resolution":{"observed_at":"2026-08-04T21:44:12.467965Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.02391","last_updated":"2025-05-24T16:15:46Z","snapshot_observed_at":"2026-08-12T22:07:58.132030Z","submitted_at":"2024-11-04T18:56:42Z","title":"Attacking Vision-Language Computer Agents via Pop-ups","version":2},"cited_work":{"arxiv_id":"2411.02391","doi":"10.48550/arxiv.2411.02391","metadata_source":"pith","pith_arxiv_id":"2411.02391","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Attacking vision- language computer agents via pop-ups","venue":"cs.CL","work_id":"74121ae8-d170-456a-86e7-6590edee179a","year":2024},"citing_paper":{"arxiv_id":"2510.10073","last_updated":"2026-04-14T02:53:37Z","snapshot_observed_at":"2026-08-10T21:16:04.795126Z","submitted_at":"2025-10-11T07:18:12Z","title":"SecureWebArena: A Holistic Security Evaluation Benchmark for LVLM-based Web Agents","version":2},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-05-18T08:14:51.102085Z"},"links":{"cited_paper":"/paper/2411.02391","citing_paper":"/paper/2510.10073"},"observation_digest":"sha256:f51fb40588ad7a90eaf130febab159a239a1968ace270919855c25174b52f375","observation_id":"5dacde04-0c77-4eb8-926a-8fb450e972c5","resolution":{"observed_at":"2026-05-18T08:16:06.585253Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2411.02391","last_updated":"2025-05-24T16:15:46Z","snapshot_observed_at":"2026-08-12T22:07:58.132030Z","submitted_at":"2024-11-04T18:56:42Z","title":"Attacking Vision-Language Computer Agents via Pop-ups","version":2},"cited_work":{"arxiv_id":"2411.02391","doi":"10.48550/arxiv.2411.02391","metadata_source":"pith","pith_arxiv_id":"2411.02391","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Attacking vision- language computer agents via pop-ups","venue":"cs.CL","work_id":"74121ae8-d170-456a-86e7-6590edee179a","year":2024},"citing_paper":{"arxiv_id":"2510.23883","last_updated":"2026-04-03T16:27:34Z","snapshot_observed_at":"2026-08-13T20:52:15.127327Z","submitted_at":"2025-10-27T21:48:11Z","title":"Agentic AI Security: Threats, Defenses, Evaluation, and Open Challenges","version":3},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-05-18T03:42:10.703369Z"},"links":{"cited_paper":"/paper/2411.02391","citing_paper":"/paper/2510.23883"},"observation_digest":"sha256:98e5ea901adda4c91fb430e04707896d84bbe5521548faf24734c67346ad9483","observation_id":"8d7e0c16-d531-421f-8623-e0cd529e30c0","resolution":{"observed_at":"2026-05-18T03:42:21.952673Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2411.02391","last_updated":"2025-05-24T16:15:46Z","snapshot_observed_at":"2026-08-12T22:07:58.132030Z","submitted_at":"2024-11-04T18:56:42Z","title":"Attacking Vision-Language Computer Agents via Pop-ups","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.02391","snapshot_observed_at":"2026-08-04T07:06:38.159564Z","title":"Attacking vision- language computer agents via pop-ups.arXiv preprint arXiv:2411.02391, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-07T23:25:01.868478Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":90,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.159564Z"},"links":{"cited_paper":"/paper/2411.02391","citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:4e402a110cda25cccabac687466734dbb004bcc3da26c8825596926886ea00a7","observation_id":"b93f3110-dcd8-4a69-b6f1-c34dd5be42c6","resolution":{"observed_at":"2026-08-04T07:06:38.159564Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.02391","last_updated":"2025-05-24T16:15:46Z","snapshot_observed_at":"2026-08-12T22:07:58.132030Z","submitted_at":"2024-11-04T18:56:42Z","title":"Attacking Vision-Language Computer Agents via Pop-ups","version":2},"cited_work":{"arxiv_id":"2411.02391","doi":"10.48550/arxiv.2411.02391","metadata_source":"pith","pith_arxiv_id":"2411.02391","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Attacking vision- language computer agents via pop-ups","venue":"cs.CL","work_id":"74121ae8-d170-456a-86e7-6590edee179a","year":2024},"citing_paper":{"arxiv_id":"2605.15030","last_updated":"2026-05-14T16:26:27Z","snapshot_observed_at":"2026-08-13T15:20:39.475290Z","submitted_at":"2026-05-14T16:26:27Z","title":"WARD: Adversarially Robust Defense of Web Agents Against Prompt Injections","version":1},"reference_index":80,"source":"pdf_text","source_observed_at":"2026-06-30T20:16:13.413064Z"},"links":{"cited_paper":"/paper/2411.02391","citing_paper":"/paper/2605.15030"},"observation_digest":"sha256:86901e541f5c7c54a7d141a1cd052db48c2a009c6584aa3d0b9454079bd9f78c","observation_id":"275c9b65-ec56-42e9-904f-13db825cef52","resolution":{"observed_at":"2026-07-01T14:45:49.592478Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2411.02391","last_updated":"2025-05-24T16:15:46Z","snapshot_observed_at":"2026-08-12T22:07:58.132030Z","submitted_at":"2024-11-04T18:56:42Z","title":"Attacking Vision-Language Computer Agents via Pop-ups","version":2},"cited_work":{"arxiv_id":"2411.02391","doi":"10.48550/arxiv.2411.02391","metadata_source":"pith","pith_arxiv_id":"2411.02391","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Attacking vision- language computer agents via pop-ups","venue":"cs.CL","work_id":"74121ae8-d170-456a-86e7-6590edee179a","year":2024},"citing_paper":{"arxiv_id":"2606.05233","last_updated":"2026-06-03T01:21:59Z","snapshot_observed_at":"2026-08-13T15:04:13.129375Z","submitted_at":"2026-06-03T01:21:59Z","title":"Domain-Conditioned Safety in Frontier Computer-Using Agents: A 793-Episode Browser Benchmark, a Coding-Domain Cross-Reference, and a Reproducibility Audit of Recent Red-Teaming","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-06-28T06:22:03.848058Z"},"links":{"cited_paper":"/paper/2411.02391","citing_paper":"/paper/2606.05233"},"observation_digest":"sha256:8078a2ba33e999a9a99a1b9497b15369587e90a6115da469ec9061e8e6c452bf","observation_id":"57d28757-90a0-4d8f-af78-74e65918f1e9","resolution":{"observed_at":"2026-07-02T08:06:48.253773Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2411.02391","last_updated":"2025-05-24T16:15:46Z","snapshot_observed_at":"2026-08-12T22:07:58.132030Z","submitted_at":"2024-11-04T18:56:42Z","title":"Attacking Vision-Language Computer Agents via Pop-ups","version":2},"cited_work":{"arxiv_id":"2411.02391","doi":"10.48550/arxiv.2411.02391","metadata_source":"pith","pith_arxiv_id":"2411.02391","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Attacking vision- language computer agents via pop-ups","venue":"cs.CL","work_id":"74121ae8-d170-456a-86e7-6590edee179a","year":2024},"citing_paper":{"arxiv_id":"2606.06708","last_updated":"2026-08-04T18:57:23Z","snapshot_observed_at":"2026-08-13T13:55:07.463016Z","submitted_at":"2026-06-04T20:48:37Z","title":"Signal-Driven Observation for Long-Horizon Web Agents","version":1},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-06-28T01:25:11.149977Z"},"links":{"cited_paper":"/paper/2411.02391","citing_paper":"/paper/2606.06708"},"observation_digest":"sha256:4208bda3bbca155bc4e5531edc8453020773c13be419553bfba6329dfc09ec9f","observation_id":"8d864f71-1323-4519-97a2-f8f83b751798","resolution":{"observed_at":"2026-06-28T01:31:29.214061Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2411.02391","last_updated":"2025-05-24T16:15:46Z","snapshot_observed_at":"2026-08-12T22:07:58.132030Z","submitted_at":"2024-11-04T18:56:42Z","title":"Attacking Vision-Language Computer Agents via Pop-ups","version":2},"cited_work":{"arxiv_id":"2411.02391","doi":"10.48550/arxiv.2411.02391","metadata_source":"pith","pith_arxiv_id":"2411.02391","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Attacking vision- language computer agents via pop-ups","venue":"cs.CL","work_id":"74121ae8-d170-456a-86e7-6590edee179a","year":2024},"citing_paper":{"arxiv_id":"2606.14027","last_updated":"2026-06-30T01:10:08Z","snapshot_observed_at":"2026-08-02T09:41:26.926011Z","submitted_at":"2026-06-12T02:01:38Z","title":"Same-Origin Policy for Agentic Browsers","version":3},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-07-01T07:29:08.355105Z"},"links":{"cited_paper":"/paper/2411.02391","citing_paper":"/paper/2606.14027"},"observation_digest":"sha256:cda076ec6e14fb4ec5bd2d8867f8decb0a825bd8a970804fc19d98fc2ebe2287","observation_id":"b48dd635-ad0f-426b-98ff-406ba3abe0f7","resolution":{"observed_at":"2026-07-01T07:35:29.028043Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2411.02391","last_updated":"2025-05-24T16:15:46Z","snapshot_observed_at":"2026-08-12T22:07:58.132030Z","submitted_at":"2024-11-04T18:56:42Z","title":"Attacking Vision-Language Computer Agents via Pop-ups","version":2},"cited_work":{"arxiv_id":"2411.02391","doi":"10.48550/arxiv.2411.02391","metadata_source":"pith","pith_arxiv_id":"2411.02391","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Attacking vision- language computer agents via pop-ups","venue":"cs.CL","work_id":"74121ae8-d170-456a-86e7-6590edee179a","year":2024},"citing_paper":{"arxiv_id":"2607.08147","last_updated":"2026-07-09T06:37:52Z","snapshot_observed_at":"2026-08-07T03:47:57.753615Z","submitted_at":"2026-07-09T06:37:52Z","title":"Prismata: Confining Cross-Site Prompt Injection in Web Agents","version":1},"reference_index":99,"source":"pdf_text","source_observed_at":"2026-07-10T12:20:03.672480Z"},"links":{"cited_paper":"/paper/2411.02391","citing_paper":"/paper/2607.08147"},"observation_digest":"sha256:6e536640cd36f821f7d0ac81f1ac8f035189da9f352eee039e80d5aba3c83f6c","observation_id":"e4cb4ee9-5f1b-4149-9cf8-5b7143bff42b","resolution":{"observed_at":"2026-07-10T12:27:04.206424Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2411.02391","last_updated":"2025-05-24T16:15:46Z","snapshot_observed_at":"2026-08-12T22:07:58.132030Z","submitted_at":"2024-11-04T18:56:42Z","title":"Attacking Vision-Language Computer Agents via Pop-ups","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.02391","snapshot_observed_at":"2026-08-01T06:04:46.684540Z","title":"arXiv preprint arXiv:2411.02391 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.22024","last_updated":"2026-07-24T06:43:09Z","snapshot_observed_at":"2026-08-08T12:54:01.031419Z","submitted_at":"2026-07-24T06:43:09Z","title":"Agent Security Needs Redefinition through a Holistic Framework","version":1},"reference_index":285,"source":"arxiv_source","source_observed_at":"2026-08-01T06:04:46.684540Z"},"links":{"cited_paper":"/paper/2411.02391","citing_paper":"/paper/2607.22024"},"observation_digest":"sha256:9d268a41517f42e653fed0dc9c984600793f1250413853e9a00a6e6675c17b3f","observation_id":"9d3f20fe-2bd1-4cbb-ab33-2e0f246a50b8","resolution":{"observed_at":"2026-08-01T06:04:46.684540Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2411.02391/citation-record","integrity":"/paper/2411.02391/integrity","json":"/paper/2411.02391/citation-record.json","paper":"/paper/2411.02391"},"outbound":[],"paper":{"arxiv_id":"2411.02391","last_updated":"2025-05-24T16:15:46Z","latest_version":2,"primary_category":"cs.CL","snapshot_observed_at":"2026-08-12T22:07:58.132030Z","submitted_at":"2024-11-04T18:56:42Z","title":"Attacking Vision-Language Computer Agents via Pop-ups"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"thesis":"As of 14 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 25 inbound Pith citation observations for arXiv:2411.02391."}