{"as_of":"2026-08-18T00:40:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:4316a78394fd79019c5b96f4ad17388297fed0e0d04bf6c00ebfd9ae60dbc984","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":8,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":8,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-17T06:30:58.91139+00:00","state":"measured"},{"denominator":8,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":8,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T14:25:15.831596Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"pith","source_observed_at":"2026-07-11T02:47:50.407349Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2504.00018","last_updated":"2025-03-27T19:56:00Z","snapshot_observed_at":"2026-08-16T12:46:09.126788Z","submitted_at":"2025-03-27T19:56:00Z","title":"SandboxEval: Towards Securing Test Environment for Untrusted Code","version":1},"cited_work":{"arxiv_id":"2504.00018","doi":null,"metadata_source":"pith","pith_arxiv_id":"2504.00018","snapshot_observed_at":"2026-07-11T02:47:50.407349Z","title":"Rabin, J","venue":"cs.CR","work_id":"1950e489-e7f2-4a81-b29c-8afa5d0a2ca3","year":2025},"citing_paper":{"arxiv_id":"2506.23978","last_updated":"2026-05-16T17:29:09Z","snapshot_observed_at":"2026-08-16T23:05:27.604472Z","submitted_at":"2025-06-30T15:45:17Z","title":"LLM Agents Are the Antidote to Walled Gardens","version":3},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-05-22T00:41:19.750928Z"},"links":{"cited_paper":"/paper/2504.00018","citing_paper":"/paper/2506.23978"},"observation_digest":"sha256:468264200306e79fcae8e57db2a8e038b4479d8bbc39c0a2b90c9b2f5d620338","observation_id":"757a066a-c992-4e16-941d-852acb3c799c","resolution":{"observed_at":"2026-05-22T00:44:29.338949Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.00018","last_updated":"2025-03-27T19:56:00Z","snapshot_observed_at":"2026-08-16T12:46:09.126788Z","submitted_at":"2025-03-27T19:56:00Z","title":"SandboxEval: Towards Securing Test Environment for Untrusted Code","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.00018","snapshot_observed_at":"2026-08-06T14:25:15.831596Z","title":"Sandboxeval: Towards securing test environment for untrusted code, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.19399","last_updated":"2025-07-25T16:06:16Z","snapshot_observed_at":"2026-08-16T16:08:33.634938Z","submitted_at":"2025-07-25T16:06:16Z","title":"Running in CIRCLE? A Simple Benchmark for LLM Code Interpreter Security","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-06T14:25:15.831596Z"},"links":{"cited_paper":"/paper/2504.00018","citing_paper":"/paper/2507.19399"},"observation_digest":"sha256:b6f6e8d9a048ef60f68e671f68286b0516951a919bf5fd60ce12116f21da27c0","observation_id":"4b7dc307-f238-4f90-a136-5d74533e6078","resolution":{"observed_at":"2026-08-06T14:25:15.831596Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.00018","last_updated":"2025-03-27T19:56:00Z","snapshot_observed_at":"2026-08-16T12:46:09.126788Z","submitted_at":"2025-03-27T19:56:00Z","title":"SandboxEval: Towards Securing Test Environment for Untrusted Code","version":1},"cited_work":{"arxiv_id":"2504.00018","doi":null,"metadata_source":"pith","pith_arxiv_id":"2504.00018","snapshot_observed_at":"2026-07-11T02:47:50.407349Z","title":"Rabin, J","venue":"cs.CR","work_id":"1950e489-e7f2-4a81-b29c-8afa5d0a2ca3","year":2025},"citing_paper":{"arxiv_id":"2510.23883","last_updated":"2026-04-03T16:27:34Z","snapshot_observed_at":"2026-08-13T20:52:15.127327Z","submitted_at":"2025-10-27T21:48:11Z","title":"Agentic AI Security: Threats, Defenses, Evaluation, and Open Challenges","version":3},"reference_index":211,"source":"pdf_text","source_observed_at":"2026-05-18T03:42:10.703369Z"},"links":{"cited_paper":"/paper/2504.00018","citing_paper":"/paper/2510.23883"},"observation_digest":"sha256:39ee3cdb9d7ed089aff96ed0a656ff53ceaec5b94b8552d7312c74636cdf19b8","observation_id":"4c2ee53f-ba9e-469c-a30a-566d3ea05e3f","resolution":{"observed_at":"2026-05-18T03:42:21.992547Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.00018","last_updated":"2025-03-27T19:56:00Z","snapshot_observed_at":"2026-08-16T12:46:09.126788Z","submitted_at":"2025-03-27T19:56:00Z","title":"SandboxEval: Towards Securing Test Environment for Untrusted Code","version":1},"cited_work":{"arxiv_id":"2504.00018","doi":null,"metadata_source":"pith","pith_arxiv_id":"2504.00018","snapshot_observed_at":"2026-07-11T02:47:50.407349Z","title":"Rabin, J","venue":"cs.CR","work_id":"1950e489-e7f2-4a81-b29c-8afa5d0a2ca3","year":2025},"citing_paper":{"arxiv_id":"2604.11477","last_updated":"2026-04-13T13:45:42Z","snapshot_observed_at":"2026-08-15T21:48:50.846214Z","submitted_at":"2026-04-13T13:45:42Z","title":"OOM-RL: Out-of-Money Reinforcement Learning Market-Driven Alignment for LLM-Based Multi-Agent Systems","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-05-10T16:40:14.537670Z"},"links":{"cited_paper":"/paper/2504.00018","citing_paper":"/paper/2604.11477"},"observation_digest":"sha256:fd852006472004d177e10856cab5a793ab4e9c27e8affe1d63a3d7792ed5a979","observation_id":"f6e49bfa-0f43-4eb9-8754-e76c1c33aafd","resolution":{"observed_at":"2026-05-11T08:25:58.773890Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.00018","last_updated":"2025-03-27T19:56:00Z","snapshot_observed_at":"2026-08-16T12:46:09.126788Z","submitted_at":"2025-03-27T19:56:00Z","title":"SandboxEval: Towards Securing Test Environment for Untrusted Code","version":1},"cited_work":{"arxiv_id":"2504.00018","doi":null,"metadata_source":"pith","pith_arxiv_id":"2504.00018","snapshot_observed_at":"2026-07-11T02:47:50.407349Z","title":"Rabin, J","venue":"cs.CR","work_id":"1950e489-e7f2-4a81-b29c-8afa5d0a2ca3","year":2025},"citing_paper":{"arxiv_id":"2605.08468","last_updated":"2026-05-08T20:39:32Z","snapshot_observed_at":"2026-08-02T16:12:56.247576Z","submitted_at":"2026-05-08T20:39:32Z","title":"PYTHALAB-MERA: Validation-Grounded Memory, Retrieval, and Acceptance Control for Frozen-LLM Coding Agents","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-05-12T01:12:37.970638Z"},"links":{"cited_paper":"/paper/2504.00018","citing_paper":"/paper/2605.08468"},"observation_digest":"sha256:b320e1cfa68f26ce0fdeb06aeea74ff602bb52e9a250d35a37b4001aa01d005d","observation_id":"ebda6e72-cbbd-465d-91fd-0b42df582b41","resolution":{"observed_at":"2026-05-12T08:21:26.006427Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.00018","last_updated":"2025-03-27T19:56:00Z","snapshot_observed_at":"2026-08-16T12:46:09.126788Z","submitted_at":"2025-03-27T19:56:00Z","title":"SandboxEval: Towards Securing Test Environment for Untrusted Code","version":1},"cited_work":{"arxiv_id":"2504.00018","doi":null,"metadata_source":"pith","pith_arxiv_id":"2504.00018","snapshot_observed_at":"2026-07-11T02:47:50.407349Z","title":"Rabin, J","venue":"cs.CR","work_id":"1950e489-e7f2-4a81-b29c-8afa5d0a2ca3","year":2025},"citing_paper":{"arxiv_id":"2605.14859","last_updated":"2026-05-15T03:53:20Z","snapshot_observed_at":"2026-08-16T16:39:04.165278Z","submitted_at":"2026-05-14T14:05:58Z","title":"Do Coding Agents Understand Least-Privilege Authorization?","version":2},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-05-19T16:34:14.379419Z"},"links":{"cited_paper":"/paper/2504.00018","citing_paper":"/paper/2605.14859"},"observation_digest":"sha256:66a7304e32fb4cbd76263bc035de0612cfa65199f2cb4bed2a40eb5a95d892ac","observation_id":"40d3a104-0017-49a6-8a6e-9865b2295591","resolution":{"observed_at":"2026-05-19T16:37:40.136547Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.00018","last_updated":"2025-03-27T19:56:00Z","snapshot_observed_at":"2026-08-16T12:46:09.126788Z","submitted_at":"2025-03-27T19:56:00Z","title":"SandboxEval: Towards Securing Test Environment for Untrusted Code","version":1},"cited_work":{"arxiv_id":"2504.00018","doi":null,"metadata_source":"pith","pith_arxiv_id":"2504.00018","snapshot_observed_at":"2026-07-11T02:47:50.407349Z","title":"Rabin, J","venue":"cs.CR","work_id":"1950e489-e7f2-4a81-b29c-8afa5d0a2ca3","year":2025},"citing_paper":{"arxiv_id":"2607.05743","last_updated":"2026-07-07T01:56:18Z","snapshot_observed_at":"2026-08-06T20:18:50.545716Z","submitted_at":"2026-07-07T01:56:18Z","title":"The Balkanization of Execution-Security Research for AI Coding Agents: Isolation, Access Control, and Time-of-Check-to-Time-of-Use Vulnerabilities","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-07-11T02:41:24.813416Z"},"links":{"cited_paper":"/paper/2504.00018","citing_paper":"/paper/2607.05743"},"observation_digest":"sha256:d7937f0ce75e6536e7a26e1dfb9ed7f36f1d19785741e4fcff6ac605e9cf9667","observation_id":"a03ea466-55b2-47b0-8f75-01d42dd90425","resolution":{"observed_at":"2026-07-11T02:47:50.429009Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.00018","last_updated":"2025-03-27T19:56:00Z","snapshot_observed_at":"2026-08-16T12:46:09.126788Z","submitted_at":"2025-03-27T19:56:00Z","title":"SandboxEval: Towards Securing Test Environment for Untrusted Code","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.00018","snapshot_observed_at":"2026-08-01T06:04:46.410322Z","title":"arXiv preprint arXiv:2504.00018 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.22024","last_updated":"2026-07-24T06:43:09Z","snapshot_observed_at":"2026-08-15T17:15:20.495803Z","submitted_at":"2026-07-24T06:43:09Z","title":"Agent Security Needs Redefinition through a Holistic Framework","version":1},"reference_index":228,"source":"arxiv_source","source_observed_at":"2026-08-01T06:04:46.410322Z"},"links":{"cited_paper":"/paper/2504.00018","citing_paper":"/paper/2607.22024"},"observation_digest":"sha256:723325a1ec52463f3c69a4a0d48229a4d43d75971e39917e69e52d49efba3b6a","observation_id":"9132506f-f561-45ec-9d9e-6ae928114e8c","resolution":{"observed_at":"2026-08-01T06:04:46.410322Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2504.00018/citation-record","integrity":"/paper/2504.00018/integrity","json":"/paper/2504.00018/citation-record.json","paper":"/paper/2504.00018"},"outbound":[],"paper":{"arxiv_id":"2504.00018","last_updated":"2025-03-27T19:56:00Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-16T12:46:09.126788Z","submitted_at":"2025-03-27T19:56:00Z","title":"SandboxEval: Towards Securing Test Environment for Untrusted Code"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"thesis":"As of 18 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 8 inbound Pith citation observations for arXiv:2504.00018."}