{"as_of":"2026-08-08T12:50:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:7cb191f13a5b5dfa9a7fe471066c75ffe416a920924d667c275813cdf63e329a","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":18,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":18,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":18,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":18,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T15:41:25.119934Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-02T17:37:14.704219Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2504.11281","last_updated":"2025-04-15T15:21:09Z","snapshot_observed_at":"2026-08-07T16:02:08.308014Z","submitted_at":"2025-04-15T15:21:09Z","title":"The Obvious Invisible Threat: LLM-Powered GUI Agents' Vulnerability to Fine-Print Injections","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.11281","snapshot_observed_at":"2026-08-07T15:41:25.119934Z","title":"The obvious invisible threat: Llm-powered gui agents’ vulnerability to fine-print injections","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.14289","last_updated":"2026-06-05T10:24:33Z","snapshot_observed_at":"2026-08-07T15:34:54.479489Z","submitted_at":"2025-05-20T12:41:05Z","title":"EVA: Evolving Semantic Adversaries for Red-Teaming GUI Agents Against Environmental Injection Attacks","version":2},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-07T15:41:25.119934Z"},"links":{"cited_paper":"/paper/2504.11281","citing_paper":"/paper/2505.14289"},"observation_digest":"sha256:43ae0271c3e842779f8c9d3e0cae8bec5f5efb59b8e6317a9d100f97490c81d2","observation_id":"baf02ff0-1b57-416d-a408-90a52e025bba","resolution":{"observed_at":"2026-08-07T15:41:25.119934Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.11281","last_updated":"2025-04-15T15:21:09Z","snapshot_observed_at":"2026-08-07T16:02:08.308014Z","submitted_at":"2025-04-15T15:21:09Z","title":"The Obvious Invisible Threat: LLM-Powered GUI Agents' Vulnerability to Fine-Print Injections","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.11281","snapshot_observed_at":"2026-08-07T14:44:22.237391Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.17716","last_updated":"2025-05-23T10:33:14Z","snapshot_observed_at":"2026-08-07T14:39:39.671650Z","submitted_at":"2025-05-23T10:33:14Z","title":"Get Experience from Practice: LLM Agents with Record & Replay","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-07T14:44:22.237391Z"},"links":{"cited_paper":"/paper/2504.11281","citing_paper":"/paper/2505.17716"},"observation_digest":"sha256:a77ff93757e80367442a1b30ac5d5d388286f2abc0353fe75e3da42f0fa29f08","observation_id":"150a8806-5a0c-47bd-bad3-3e2fe54f5d5d","resolution":{"observed_at":"2026-08-07T14:44:22.237391Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.11281","last_updated":"2025-04-15T15:21:09Z","snapshot_observed_at":"2026-08-07T16:02:08.308014Z","submitted_at":"2025-04-15T15:21:09Z","title":"The Obvious Invisible Threat: LLM-Powered GUI Agents' Vulnerability to Fine-Print Injections","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.11281","snapshot_observed_at":"2026-08-07T14:42:36.620074Z","title":"The obvious invisible threat: Llm-powered gui agents’ vulnerability to fine-print injections","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.17861","last_updated":"2025-05-23T13:13:44Z","snapshot_observed_at":"2026-08-08T05:48:49.326203Z","submitted_at":"2025-05-23T13:13:44Z","title":"Superplatforms Have to Attack AI Agents","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T14:42:36.620074Z"},"links":{"cited_paper":"/paper/2504.11281","citing_paper":"/paper/2505.17861"},"observation_digest":"sha256:ae503b7487472c7a51b5861d814761f0704498339c7d1c8f6d3b530a5f6d64b8","observation_id":"9f5c4307-9121-4ec8-83ab-86af83737893","resolution":{"observed_at":"2026-08-07T14:42:36.620074Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.11281","last_updated":"2025-04-15T15:21:09Z","snapshot_observed_at":"2026-08-07T16:02:08.308014Z","submitted_at":"2025-04-15T15:21:09Z","title":"The Obvious Invisible Threat: LLM-Powered GUI Agents' Vulnerability to Fine-Print Injections","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.11281","snapshot_observed_at":"2026-08-07T11:42:34.196721Z","title":"The obvious invisible threat: Llm- powered gui agents’ vulnerability to fine-print injections,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.01616","last_updated":"2025-06-02T12:56:27Z","snapshot_observed_at":"2026-08-07T14:38:41.358384Z","submitted_at":"2025-06-02T12:56:27Z","title":"MLA-Trust: Benchmarking Trustworthiness of Multimodal LLM Agents in GUI Environments","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-07T11:42:34.196721Z"},"links":{"cited_paper":"/paper/2504.11281","citing_paper":"/paper/2506.01616"},"observation_digest":"sha256:199e7cb1e7935d7963f1db1ce4c127691374931033c471f8509f7fe92bcc945a","observation_id":"d4f3d604-3347-46d1-9a55-af913c0b0a43","resolution":{"observed_at":"2026-08-07T11:42:34.196721Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.11281","last_updated":"2025-04-15T15:21:09Z","snapshot_observed_at":"2026-08-07T16:02:08.308014Z","submitted_at":"2025-04-15T15:21:09Z","title":"The Obvious Invisible Threat: LLM-Powered GUI Agents' Vulnerability to Fine-Print Injections","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.11281","snapshot_observed_at":"2026-08-07T12:11:18.999964Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.05376","last_updated":"2025-06-09T05:48:22Z","snapshot_observed_at":"2026-08-07T12:39:09.825243Z","submitted_at":"2025-05-30T22:58:54Z","title":"A Red Teaming Roadmap Towards System-Level Safety","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T12:11:18.999964Z"},"links":{"cited_paper":"/paper/2504.11281","citing_paper":"/paper/2506.05376"},"observation_digest":"sha256:04e340249d2951839d3700b1a3c16f6a0aeb29bb620cc32981eac43ebc4335a3","observation_id":"30c1c094-28c6-4366-84f6-883adf8665bb","resolution":{"observed_at":"2026-08-07T12:11:18.999964Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.11281","last_updated":"2025-04-15T15:21:09Z","snapshot_observed_at":"2026-08-07T16:02:08.308014Z","submitted_at":"2025-04-15T15:21:09Z","title":"The Obvious Invisible Threat: LLM-Powered GUI Agents' Vulnerability to Fine-Print Injections","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.11281","snapshot_observed_at":"2026-08-06T21:34:41.144903Z","title":"The obvious invisible threat: Llm-powered gui agents’ vulnerability to fine-print injections,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:41.144903Z"},"links":{"cited_paper":"/paper/2504.11281","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:685ff412208ce1b0730260806b2f6b77c1a4ae5e6c93e3f7b3cd1f55db9a5b4f","observation_id":"22d115e0-8aca-4c8c-bb73-4c8cc98bfe99","resolution":{"observed_at":"2026-08-06T21:34:41.144903Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.11281","last_updated":"2025-04-15T15:21:09Z","snapshot_observed_at":"2026-08-07T16:02:08.308014Z","submitted_at":"2025-04-15T15:21:09Z","title":"The Obvious Invisible Threat: LLM-Powered GUI Agents' Vulnerability to Fine-Print Injections","version":1},"cited_work":{"arxiv_id":"2504.11281","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2504.11281","snapshot_observed_at":"2026-07-02T17:37:14.704219Z","title":"The obvious invisible threat: Llm-powered gui agents’ vulnerability to fine-print injections","venue":null,"work_id":"a8521bd4-146e-4fdc-b3fc-de409072a5b1","year":2025},"citing_paper":{"arxiv_id":"2507.10610","last_updated":"2026-04-07T11:46:55Z","snapshot_observed_at":"2026-08-08T01:14:25.294761Z","submitted_at":"2025-07-13T08:36:09Z","title":"LaSM: Layer-wise Scaling Mechanism for Defending Pop-up Attack on GUI Agents","version":3},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-05-19T04:10:57.882345Z"},"links":{"cited_paper":"/paper/2504.11281","citing_paper":"/paper/2507.10610"},"observation_digest":"sha256:9a09df322609ed7df5eaf08585a183a483bd710a8d7166e63b67d719da3e29dd","observation_id":"99296258-533c-4967-8ff6-35c670ae96a8","resolution":{"observed_at":"2026-05-19T04:12:02.144146Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.11281","last_updated":"2025-04-15T15:21:09Z","snapshot_observed_at":"2026-08-07T16:02:08.308014Z","submitted_at":"2025-04-15T15:21:09Z","title":"The Obvious Invisible Threat: LLM-Powered GUI Agents' Vulnerability to Fine-Print Injections","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.11281","snapshot_observed_at":"2026-08-06T16:12:47.459876Z","title":"The obvious invisible threat: Llm-powered gui agents’ vulnerability to fine-print injections","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-06T15:57:20.673152Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:47.459876Z"},"links":{"cited_paper":"/paper/2504.11281","citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:74b2fcdcb24947c6a97de21e85e6e3900132b7a34e41b08df8454639c13f1688","observation_id":"1095f92a-4d4e-47c4-a14f-766e8757ff8c","resolution":{"observed_at":"2026-08-06T16:12:47.459876Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.11281","last_updated":"2025-04-15T15:21:09Z","snapshot_observed_at":"2026-08-07T16:02:08.308014Z","submitted_at":"2025-04-15T15:21:09Z","title":"The Obvious Invisible Threat: LLM-Powered GUI Agents' Vulnerability to Fine-Print Injections","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.11281","snapshot_observed_at":"2026-08-05T22:01:05.327178Z","title":"arXiv preprint arXiv:2504.11281 (2025)","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.07672","last_updated":"2025-08-11T06:51:44Z","snapshot_observed_at":"2026-08-06T19:34:03.887089Z","submitted_at":"2025-08-11T06:51:44Z","title":"Towards Aligning Personalized Conversational Recommendation Agents with Users' Privacy Preferences","version":1},"reference_index":2025,"source":"pdf_text","source_observed_at":"2026-08-05T22:01:05.327178Z"},"links":{"cited_paper":"/paper/2504.11281","citing_paper":"/paper/2508.07672"},"observation_digest":"sha256:1450f8036bc900a6e229d8f8e969652bca780b8f8bda846cdd637612bea25067","observation_id":"3822e4e0-dbff-4d16-9b92-1cf9f2f10c2f","resolution":{"observed_at":"2026-08-05T22:01:05.327178Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.11281","last_updated":"2025-04-15T15:21:09Z","snapshot_observed_at":"2026-08-07T16:02:08.308014Z","submitted_at":"2025-04-15T15:21:09Z","title":"The Obvious Invisible Threat: LLM-Powered GUI Agents' Vulnerability to Fine-Print Injections","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.11281","snapshot_observed_at":"2026-08-04T17:40:08.160733Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2509.10723","last_updated":"2025-09-12T22:26:31Z","snapshot_observed_at":"2026-08-04T17:40:07.040846Z","submitted_at":"2025-09-12T22:26:31Z","title":"Dark Patterns Meet GUI Agents: LLM Agent Susceptibility to Manipulative Interfaces and the Role of Human Oversight","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-04T17:40:08.160733Z"},"links":{"cited_paper":"/paper/2504.11281","citing_paper":"/paper/2509.10723"},"observation_digest":"sha256:450795559121a4c391423506c6c179fdee7f8b9ea413f3306be679633cf7f391","observation_id":"c9d787bb-0a79-4f97-b984-840f0d353a57","resolution":{"observed_at":"2026-08-04T17:40:08.160733Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.11281","last_updated":"2025-04-15T15:21:09Z","snapshot_observed_at":"2026-08-07T16:02:08.308014Z","submitted_at":"2025-04-15T15:21:09Z","title":"The Obvious Invisible Threat: LLM-Powered GUI Agents' Vulnerability to Fine-Print Injections","version":1},"cited_work":{"arxiv_id":"2504.11281","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2504.11281","snapshot_observed_at":"2026-07-02T17:37:14.704219Z","title":"The obvious invisible threat: Llm-powered gui agents’ vulnerability to fine-print injections","venue":null,"work_id":"a8521bd4-146e-4fdc-b3fc-de409072a5b1","year":2025},"citing_paper":{"arxiv_id":"2510.04465","last_updated":"2026-04-06T00:31:22Z","snapshot_observed_at":"2026-07-06T22:31:49.574184Z","submitted_at":"2025-10-06T03:38:54Z","title":"Autonomy Reshapes How Personalization Affects Privacy Concerns and Trust in LLM Agents","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-05-18T10:09:47.433345Z"},"links":{"cited_paper":"/paper/2504.11281","citing_paper":"/paper/2510.04465"},"observation_digest":"sha256:583f8a471690a44601bc1e7b8bc5ea8ffc72a05cae6860189d0e1a35e40c1be9","observation_id":"5146ffee-6d90-4e45-9314-8dedadf7d659","resolution":{"observed_at":"2026-05-18T10:11:13.880302Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.11281","last_updated":"2025-04-15T15:21:09Z","snapshot_observed_at":"2026-08-07T16:02:08.308014Z","submitted_at":"2025-04-15T15:21:09Z","title":"The Obvious Invisible Threat: LLM-Powered GUI Agents' Vulnerability to Fine-Print Injections","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.11281","snapshot_observed_at":"2026-08-03T10:32:32.852827Z","title":"Chaoran Chen, Zhiping Zhang, Bingcan Guo, Shang Ma, Ibrahim Khalilov, Simret A Gebreegziabher, Yanfang Ye, Ziang Xiao, Yaxing Yao, Tianshi Li, et al","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2601.09923","last_updated":"2026-06-04T15:38:02Z","snapshot_observed_at":"2026-08-06T13:01:48.994450Z","submitted_at":"2026-01-14T23:06:35Z","title":"CaMeLs Can Use Computers Too: System-level Security for Computer Use Agents","version":3},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-03T10:32:32.852827Z"},"links":{"cited_paper":"/paper/2504.11281","citing_paper":"/paper/2601.09923"},"observation_digest":"sha256:7358ebf68e596d066308e769eff65f42c068d5c0a65f69f6dea876602ba2b41d","observation_id":"f2a96975-04c3-41cd-a0c8-b187b68935bc","resolution":{"observed_at":"2026-08-03T10:32:32.852827Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.11281","last_updated":"2025-04-15T15:21:09Z","snapshot_observed_at":"2026-08-07T16:02:08.308014Z","submitted_at":"2025-04-15T15:21:09Z","title":"The Obvious Invisible Threat: LLM-Powered GUI Agents' Vulnerability to Fine-Print Injections","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.11281","snapshot_observed_at":"2026-08-03T09:54:55.575192Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.12349","last_updated":"2026-07-15T15:32:11Z","snapshot_observed_at":"2026-08-04T21:39:28.308547Z","submitted_at":"2026-01-18T10:54:54Z","title":"Mind the Gap: Action Rebinding Attacks against Android GUI Agents","version":3},"reference_index":2025,"source":"pdf_text","source_observed_at":"2026-08-03T09:54:55.575192Z"},"links":{"cited_paper":"/paper/2504.11281","citing_paper":"/paper/2601.12349"},"observation_digest":"sha256:9d7dc1cf32d3497acff76c80213996e8e5e8869b0154f8a3c2fbe9a5a09c003a","observation_id":"5f39ac8c-c74c-4d40-abba-3c33d4fbbc1b","resolution":{"observed_at":"2026-08-03T09:54:55.575192Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.11281","last_updated":"2025-04-15T15:21:09Z","snapshot_observed_at":"2026-08-07T16:02:08.308014Z","submitted_at":"2025-04-15T15:21:09Z","title":"The Obvious Invisible Threat: LLM-Powered GUI Agents' Vulnerability to Fine-Print Injections","version":1},"cited_work":{"arxiv_id":"2504.11281","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2504.11281","snapshot_observed_at":"2026-07-02T17:37:14.704219Z","title":"The obvious invisible threat: Llm-powered gui agents’ vulnerability to fine-print injections","venue":null,"work_id":"a8521bd4-146e-4fdc-b3fc-de409072a5b1","year":2025},"citing_paper":{"arxiv_id":"2601.18842","last_updated":"2026-05-13T07:11:36Z","snapshot_observed_at":"2026-08-01T18:25:13.403669Z","submitted_at":"2026-01-26T11:33:40Z","title":"GUIGuard-Bench: Toward a General Evaluation for Privacy-Preserving GUI Agents","version":3},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-05-16T11:31:16.087579Z"},"links":{"cited_paper":"/paper/2504.11281","citing_paper":"/paper/2601.18842"},"observation_digest":"sha256:55eeb889a271d5eb3cc287cd6cb46184f41841005115fd64c654d6c8ee65687d","observation_id":"eea0e0d4-23ec-42de-ad4f-66cd3c8f0548","resolution":{"observed_at":"2026-05-16T11:32:48.261369Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.11281","last_updated":"2025-04-15T15:21:09Z","snapshot_observed_at":"2026-08-07T16:02:08.308014Z","submitted_at":"2025-04-15T15:21:09Z","title":"The Obvious Invisible Threat: LLM-Powered GUI Agents' Vulnerability to Fine-Print Injections","version":1},"cited_work":{"arxiv_id":"2504.11281","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2504.11281","snapshot_observed_at":"2026-07-02T17:37:14.704219Z","title":"The obvious invisible threat: Llm-powered gui agents’ vulnerability to fine-print injections","venue":null,"work_id":"a8521bd4-146e-4fdc-b3fc-de409072a5b1","year":2025},"citing_paper":{"arxiv_id":"2604.04918","last_updated":"2026-04-06T17:57:16Z","snapshot_observed_at":"2026-08-03T03:15:55.674748Z","submitted_at":"2026-04-06T17:57:16Z","title":"Comparing Human Oversight Strategies for Computer-Use Agents","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-05-10T19:48:45.360969Z"},"links":{"cited_paper":"/paper/2504.11281","citing_paper":"/paper/2604.04918"},"observation_digest":"sha256:046b5329a7a9cb812186f2ea8b4b8d8d5a42bece936e628500075781713aaf85","observation_id":"db497fee-adff-4c88-a91f-7bcb345df51c","resolution":{"observed_at":"2026-05-10T22:30:50.458769Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.11281","last_updated":"2025-04-15T15:21:09Z","snapshot_observed_at":"2026-08-07T16:02:08.308014Z","submitted_at":"2025-04-15T15:21:09Z","title":"The Obvious Invisible Threat: LLM-Powered GUI Agents' Vulnerability to Fine-Print Injections","version":1},"cited_work":{"arxiv_id":"2504.11281","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2504.11281","snapshot_observed_at":"2026-07-02T17:37:14.704219Z","title":"The obvious invisible threat: Llm-powered gui agents’ vulnerability to fine-print injections","venue":null,"work_id":"a8521bd4-146e-4fdc-b3fc-de409072a5b1","year":2025},"citing_paper":{"arxiv_id":"2606.06914","last_updated":"2026-06-05T05:26:42Z","snapshot_observed_at":"2026-08-06T16:14:45.008616Z","submitted_at":"2026-06-05T05:26:42Z","title":"DPAgent-in-the-Middle: Agentic Defense and Repair Against AI-Groomed Deceptive Patterns","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-06-27T21:56:41.335924Z"},"links":{"cited_paper":"/paper/2504.11281","citing_paper":"/paper/2606.06914"},"observation_digest":"sha256:08410a589c439fa91d4f58c251680a48104a05d7550c79237cf9c6d7cb1a5959","observation_id":"d18b954f-e445-4913-8b7d-1d324e9fe442","resolution":{"observed_at":"2026-07-02T17:37:14.706066Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.11281","last_updated":"2025-04-15T15:21:09Z","snapshot_observed_at":"2026-08-07T16:02:08.308014Z","submitted_at":"2025-04-15T15:21:09Z","title":"The Obvious Invisible Threat: LLM-Powered GUI Agents' Vulnerability to Fine-Print Injections","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.11281","snapshot_observed_at":"2026-08-04T16:36:53.204683Z","title":"arXiv:2504.11281","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02018","last_updated":"2026-08-06T02:33:08Z","snapshot_observed_at":"2026-08-08T12:15:15.123211Z","submitted_at":"2026-08-03T10:16:53Z","title":"Invisible Ink Threats: Adversarial Goals Behind Legitimate Tasks in Computer-Use Agents","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-04T16:36:53.204683Z"},"links":{"cited_paper":"/paper/2504.11281","citing_paper":"/paper/2608.02018"},"observation_digest":"sha256:dfdf0d681730a86a2d13b48641cf03b4ec560946405b461e1320c76135d70795","observation_id":"a131bc1f-eef1-4277-a050-59151844c565","resolution":{"observed_at":"2026-08-04T16:36:53.204683Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.11281","last_updated":"2025-04-15T15:21:09Z","snapshot_observed_at":"2026-08-07T16:02:08.308014Z","submitted_at":"2025-04-15T15:21:09Z","title":"The Obvious Invisible Threat: LLM-Powered GUI Agents' Vulnerability to Fine-Print Injections","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.11281","snapshot_observed_at":"2026-08-07T00:59:39.211103Z","title":"arXiv:2504.11281","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02018","last_updated":"2026-08-06T02:33:08Z","snapshot_observed_at":"2026-08-08T12:15:15.123211Z","submitted_at":"2026-08-03T10:16:53Z","title":"Invisible Ink Threats: Adversarial Goals Behind Legitimate Tasks in Computer-Use Agents","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-07T00:59:39.211103Z"},"links":{"cited_paper":"/paper/2504.11281","citing_paper":"/paper/2608.02018"},"observation_digest":"sha256:b72128013135df9494abaf6efdbf969518bb1dafdb9a40983eaddf65b4c58b1b","observation_id":"c6e545e5-2312-4aec-81e7-14b2b7e4ff67","resolution":{"observed_at":"2026-08-07T00:59:39.211103Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2504.11281/citation-record","integrity":"/paper/2504.11281/integrity","json":"/paper/2504.11281/citation-record.json","paper":"/paper/2504.11281"},"outbound":[],"paper":{"arxiv_id":"2504.11281","last_updated":"2025-04-15T15:21:09Z","latest_version":1,"primary_category":"cs.HC","snapshot_observed_at":"2026-08-07T16:02:08.308014Z","submitted_at":"2025-04-15T15:21:09Z","title":"The Obvious Invisible Threat: LLM-Powered GUI Agents' Vulnerability to Fine-Print Injections"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 18 inbound Pith citation observations for arXiv:2504.11281."}