{"as_of":"2026-08-22T11:56:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:7ea86e269ad5f35558c1872b9c5a45653d964586d4081cecbb3bdde7493ed501","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":7,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":7,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-22T06:32:14.747728+00:00","state":"measured"},{"denominator":7,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":7,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-04T07:06:38.138263Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":1,"source":"pith","source_observed_at":"2026-08-05T02:28:24.338817Z","state":"measured"}],"external_citation_measurements":[{"count":0,"observed_at":"2026-08-05T02:28:24.338817Z","source":"pith"}],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2503.09241","last_updated":"2025-03-12T10:38:15Z","snapshot_observed_at":"2026-08-19T20:26:19.678570Z","submitted_at":"2025-03-12T10:38:15Z","title":"In-Context Defense in Computer Agents: An Empirical Study","version":1},"cited_work":{"arxiv_id":"2503.09241","doi":"10.48550/arxiv.2503.09241","metadata_source":"pith","pith_arxiv_id":"2503.09241","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"In-context defense in computer agents: An empirical study","venue":"cs.AI","work_id":"f82c2050-1efb-4bc6-8966-30a08781b78a","year":2025},"citing_paper":{"arxiv_id":"2507.10610","last_updated":"2026-04-07T11:46:55Z","snapshot_observed_at":"2026-08-16T01:05:49.667917Z","submitted_at":"2025-07-13T08:36:09Z","title":"LaSM: Layer-wise Scaling Mechanism for Defending Pop-up Attack on GUI Agents","version":3},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-05-19T04:10:57.882345Z"},"links":{"cited_paper":"/paper/2503.09241","citing_paper":"/paper/2507.10610"},"observation_digest":"sha256:2a27c6c86e0bedc130870bc74f0ec5e3dbc04b111eee41899c2c94403ddc1194","observation_id":"eb4c5cf8-4824-4a95-83e2-4923831df33c","resolution":{"observed_at":"2026-05-19T04:12:02.182512Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2503.09241","last_updated":"2025-03-12T10:38:15Z","snapshot_observed_at":"2026-08-19T20:26:19.678570Z","submitted_at":"2025-03-12T10:38:15Z","title":"In-Context Defense in Computer Agents: An Empirical Study","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.09241","snapshot_observed_at":"2026-08-04T07:06:38.138263Z","title":"In-context de- fense in computer agents: An empirical study.arXiv preprint arXiv:2503.09241, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-15T21:43:41.146119Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":80,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.138263Z"},"links":{"cited_paper":"/paper/2503.09241","citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:d7ab5f689f12c6eeed126122ff0e24c383f4f4ef053f7c6bbcc94c06b31d146b","observation_id":"685663bc-a762-4cc2-a462-ddb1c8deee68","resolution":{"observed_at":"2026-08-04T07:06:38.138263Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.09241","last_updated":"2025-03-12T10:38:15Z","snapshot_observed_at":"2026-08-19T20:26:19.678570Z","submitted_at":"2025-03-12T10:38:15Z","title":"In-Context Defense in Computer Agents: An Empirical Study","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.09241","snapshot_observed_at":"2026-08-03T10:32:33.291273Z","title":"In-context defense in computer agents: An empirical study.arXiv preprint arXiv:2503.09241,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2601.09923","last_updated":"2026-06-04T15:38:02Z","snapshot_observed_at":"2026-08-19T21:09:59.831114Z","submitted_at":"2026-01-14T23:06:35Z","title":"CaMeLs Can Use Computers Too: System-level Security for Computer Use Agents","version":3},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-03T10:32:33.291273Z"},"links":{"cited_paper":"/paper/2503.09241","citing_paper":"/paper/2601.09923"},"observation_digest":"sha256:5282cf5724bd8a69a8cfa1b4fcb41b13e1be80089d3771d73309f246b75b77b4","observation_id":"76f0df4d-a8cf-47fc-affd-de250796b175","resolution":{"observed_at":"2026-08-03T10:32:33.291273Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.09241","last_updated":"2025-03-12T10:38:15Z","snapshot_observed_at":"2026-08-19T20:26:19.678570Z","submitted_at":"2025-03-12T10:38:15Z","title":"In-Context Defense in Computer Agents: An Empirical Study","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.09241","snapshot_observed_at":"2026-08-03T09:55:00.662424Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.12349","last_updated":"2026-07-15T15:32:11Z","snapshot_observed_at":"2026-08-17T17:42:01.615940Z","submitted_at":"2026-01-18T10:54:54Z","title":"Mind the Gap: Action Rebinding Attacks against Android GUI Agents","version":3},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-03T09:55:00.662424Z"},"links":{"cited_paper":"/paper/2503.09241","citing_paper":"/paper/2601.12349"},"observation_digest":"sha256:c1fb6d9077f262f9c2064d31a4442db5b6ab325ab7441ad94f6a951d0f885e31","observation_id":"c5a012ca-6cb2-4118-924d-b5b97a293d73","resolution":{"observed_at":"2026-08-03T09:55:00.662424Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.09241","last_updated":"2025-03-12T10:38:15Z","snapshot_observed_at":"2026-08-19T20:26:19.678570Z","submitted_at":"2025-03-12T10:38:15Z","title":"In-Context Defense in Computer Agents: An Empirical Study","version":1},"cited_work":{"arxiv_id":"2503.09241","doi":"10.48550/arxiv.2503.09241","metadata_source":"pith","pith_arxiv_id":"2503.09241","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"In-context defense in computer agents: An empirical study","venue":"cs.AI","work_id":"f82c2050-1efb-4bc6-8966-30a08781b78a","year":2025},"citing_paper":{"arxiv_id":"2605.07110","last_updated":"2026-05-08T01:38:46Z","snapshot_observed_at":"2026-08-16T18:22:57.815814Z","submitted_at":"2026-05-08T01:38:46Z","title":"Securing Computer-Use Agents: A Unified Architecture-Lifecycle Framework for Deployment-Grounded Reliability","version":1},"reference_index":126,"source":"pdf_text","source_observed_at":"2026-05-11T01:15:19.239355Z"},"links":{"cited_paper":"/paper/2503.09241","citing_paper":"/paper/2605.07110"},"observation_digest":"sha256:eeb95e4d7d36c8dc284366079fb8a98ac60467bf565088c72bff9159020d409e","observation_id":"9703d7ae-390e-4a86-a4b3-be330d95c506","resolution":{"observed_at":"2026-05-11T04:35:57.031115Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2503.09241","last_updated":"2025-03-12T10:38:15Z","snapshot_observed_at":"2026-08-19T20:26:19.678570Z","submitted_at":"2025-03-12T10:38:15Z","title":"In-Context Defense in Computer Agents: An Empirical Study","version":1},"cited_work":{"arxiv_id":"2503.09241","doi":"10.48550/arxiv.2503.09241","metadata_source":"pith","pith_arxiv_id":"2503.09241","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"In-context defense in computer agents: An empirical study","venue":"cs.AI","work_id":"f82c2050-1efb-4bc6-8966-30a08781b78a","year":2025},"citing_paper":{"arxiv_id":"2606.06904","last_updated":"2026-06-10T11:46:24Z","snapshot_observed_at":"2026-08-12T21:21:51.571053Z","submitted_at":"2026-06-05T04:42:56Z","title":"ActionMap: Robot Policy Learning via Voxel Action Heatmap","version":2},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-06-27T21:58:31.588578Z"},"links":{"cited_paper":"/paper/2503.09241","citing_paper":"/paper/2606.06904"},"observation_digest":"sha256:b173e076d6e18400c2e8ca808c29698b7310f76c582ea23075f6b7c2c72af742","observation_id":"fa526995-6b32-4131-ae7b-f6d92fb12812","resolution":{"observed_at":"2026-07-02T17:37:14.540242Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2503.09241","last_updated":"2025-03-12T10:38:15Z","snapshot_observed_at":"2026-08-19T20:26:19.678570Z","submitted_at":"2025-03-12T10:38:15Z","title":"In-Context Defense in Computer Agents: An Empirical Study","version":1},"cited_work":{"arxiv_id":"2503.09241","doi":"10.48550/arxiv.2503.09241","metadata_source":"pith","pith_arxiv_id":"2503.09241","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"In-context defense in computer agents: An empirical study","venue":"cs.AI","work_id":"f82c2050-1efb-4bc6-8966-30a08781b78a","year":2025},"citing_paper":{"arxiv_id":"2607.08147","last_updated":"2026-07-09T06:37:52Z","snapshot_observed_at":"2026-08-21T17:41:11.823713Z","submitted_at":"2026-07-09T06:37:52Z","title":"Prismata: Confining Cross-Site Prompt Injection in Web Agents","version":1},"reference_index":94,"source":"pdf_text","source_observed_at":"2026-07-10T12:20:03.672480Z"},"links":{"cited_paper":"/paper/2503.09241","citing_paper":"/paper/2607.08147"},"observation_digest":"sha256:0400b99acf7ce82e42bba06a251f0c0df27496d36cdcb9bc06dca9039ddf64b8","observation_id":"4c0466ee-3251-48fd-9c94-74ce26b92cab","resolution":{"observed_at":"2026-07-10T12:27:04.106680Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2503.09241/citation-record","integrity":"/paper/2503.09241/integrity","json":"/paper/2503.09241/citation-record.json","paper":"/paper/2503.09241"},"outbound":[],"paper":{"arxiv_id":"2503.09241","last_updated":"2025-03-12T10:38:15Z","latest_version":1,"primary_category":"cs.AI","snapshot_observed_at":"2026-08-19T20:26:19.678570Z","submitted_at":"2025-03-12T10:38:15Z","title":"In-Context Defense in Computer Agents: An Empirical Study"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"thesis":"As of 22 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 7 inbound Pith citation observations for arXiv:2503.09241."}