{"as_of":"2026-08-08T10:13:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:e9f0b930a9cdd2e9cf6540926f75671ede7f3f34336ed53f3e391fbad801fe95","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":11,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":11,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":11,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":11,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T14:20:59.844074Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-05-21T10:44:08.023327Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2504.19951","last_updated":"2025-04-28T16:22:21Z","snapshot_observed_at":"2026-08-07T15:58:32.775937Z","submitted_at":"2025-04-28T16:22:21Z","title":"Securing GenAI Multi-Agent Systems Against Tool Squatting: A Zero Trust Registry-Based Approach","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.19951","snapshot_observed_at":"2026-08-07T14:20:59.844074Z","title":"Securing genai multi- agent systems against tool squatting: A zero trust registry-based approach,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.19301","last_updated":"2025-05-28T17:37:25Z","snapshot_observed_at":"2026-08-07T14:15:00.137379Z","submitted_at":"2025-05-25T20:21:55Z","title":"A Novel Zero-Trust Identity Framework for Agentic AI: Decentralized Authentication and Fine-Grained Access Control","version":2},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-07T14:20:59.844074Z"},"links":{"cited_paper":"/paper/2504.19951","citing_paper":"/paper/2505.19301"},"observation_digest":"sha256:24224d3c207d719e0294c7bb213900ed93a3decdf458470cc5e1fb19116ea371","observation_id":"f7153ac0-31ec-4ff0-9df8-ce9cc889afe8","resolution":{"observed_at":"2026-08-07T14:20:59.844074Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.19951","last_updated":"2025-04-28T16:22:21Z","snapshot_observed_at":"2026-08-07T15:58:32.775937Z","submitted_at":"2025-04-28T16:22:21Z","title":"Securing GenAI Multi-Agent Systems Against Tool Squatting: A Zero Trust Registry-Based Approach","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.19951","snapshot_observed_at":"2026-08-07T11:49:18.396852Z","title":"Securing genai multi-agent systems against tool squatting: A zero trust registry-based approach,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.01333","last_updated":"2025-06-02T05:22:38Z","snapshot_observed_at":"2026-08-07T12:33:40.874784Z","submitted_at":"2025-06-02T05:22:38Z","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T11:49:18.396852Z"},"links":{"cited_paper":"/paper/2504.19951","citing_paper":"/paper/2506.01333"},"observation_digest":"sha256:20cc8ff8830ee3626becba580983d4f0371100fcfb24ba87f73b6b32094bfa0e","observation_id":"dc863da8-ffee-40a7-ba5f-6536273d983a","resolution":{"observed_at":"2026-08-07T11:49:18.396852Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.19951","last_updated":"2025-04-28T16:22:21Z","snapshot_observed_at":"2026-08-07T15:58:32.775937Z","submitted_at":"2025-04-28T16:22:21Z","title":"Securing GenAI Multi-Agent Systems Against Tool Squatting: A Zero Trust Registry-Based Approach","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.19951","snapshot_observed_at":"2026-08-07T11:38:15.518747Z","title":"Securing genai multi- agent systems against tool squatting: A zero trust registry-based approach,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.01900","last_updated":"2025-06-02T17:22:47Z","snapshot_observed_at":"2026-08-07T11:29:34.128414Z","submitted_at":"2025-06-02T17:22:47Z","title":"COALESCE: Economic and Security Dynamics of Skill-Based Task Outsourcing Among Team of Autonomous LLM Agents","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-07T11:38:15.518747Z"},"links":{"cited_paper":"/paper/2504.19951","citing_paper":"/paper/2506.01900"},"observation_digest":"sha256:05a12fb25be11eecea9cea0f9c9a2c649fd28e98fb89a98355216d783d59f2d7","observation_id":"f3435362-20a0-4c73-b76d-1b2c538fd480","resolution":{"observed_at":"2026-08-07T11:38:15.518747Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.19951","last_updated":"2025-04-28T16:22:21Z","snapshot_observed_at":"2026-08-07T15:58:32.775937Z","submitted_at":"2025-04-28T16:22:21Z","title":"Securing GenAI Multi-Agent Systems Against Tool Squatting: A Zero Trust Registry-Based Approach","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.19951","snapshot_observed_at":"2026-08-07T00:34:15.013981Z","title":"Securing genai multi- agent systems against tool squatting: A zero trust registry-based approach,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.13590","last_updated":"2025-06-16T15:18:24Z","snapshot_observed_at":"2026-08-07T00:27:19.660301Z","submitted_at":"2025-06-16T15:18:24Z","title":"Agent Capability Negotiation and Binding Protocol (ACNBP)","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T00:34:15.013981Z"},"links":{"cited_paper":"/paper/2504.19951","citing_paper":"/paper/2506.13590"},"observation_digest":"sha256:dabed696544014c283dbf6ce161eb60ef1ee4ac33d220001b81a55b99f3efced","observation_id":"ff381ae6-4891-4584-83ca-96c7e350fb24","resolution":{"observed_at":"2026-08-07T00:34:15.013981Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.19951","last_updated":"2025-04-28T16:22:21Z","snapshot_observed_at":"2026-08-07T15:58:32.775937Z","submitted_at":"2025-04-28T16:22:21Z","title":"Securing GenAI Multi-Agent Systems Against Tool Squatting: A Zero Trust Registry-Based Approach","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.19951","snapshot_observed_at":"2026-08-06T21:08:51.135164Z","title":"Securing GenAI Multi-Agent Systems Against Tool Squatting: A Zero Trust Registry-Based Approach [Preprint]","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.00907","last_updated":"2025-07-01T16:11:41Z","snapshot_observed_at":"2026-08-08T08:15:02.488868Z","submitted_at":"2025-07-01T16:11:41Z","title":"The Age of Sensorial Zero Trust: Why We Can No Longer Trust Our Senses","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-06T21:08:51.135164Z"},"links":{"cited_paper":"/paper/2504.19951","citing_paper":"/paper/2507.00907"},"observation_digest":"sha256:672e0cae58cdeec8a26abbd629006201079830c0510ce0b7c3abaa58f729ff75","observation_id":"32f39cdc-cbc3-4fff-acdb-4c86179ef281","resolution":{"observed_at":"2026-08-06T21:08:51.135164Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.19951","last_updated":"2025-04-28T16:22:21Z","snapshot_observed_at":"2026-08-07T15:58:32.775937Z","submitted_at":"2025-04-28T16:22:21Z","title":"Securing GenAI Multi-Agent Systems Against Tool Squatting: A Zero Trust Registry-Based Approach","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.19951","snapshot_observed_at":"2026-08-05T22:51:28.127341Z","title":"S.; Huang, K.; and Habler, I","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.06418","last_updated":"2025-08-08T16:05:27Z","snapshot_observed_at":"2026-08-08T02:10:57.539722Z","submitted_at":"2025-08-08T16:05:27Z","title":"Quantifying Conversation Drift in MCP via Latent Polytope","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-05T22:51:28.127341Z"},"links":{"cited_paper":"/paper/2504.19951","citing_paper":"/paper/2508.06418"},"observation_digest":"sha256:996769315563c87ffcdd36ae82ce64cb9c2264e87ddcc7e3b6e6a21d5d137814","observation_id":"e30bdcf6-6307-4918-9df7-d79bc69dd08e","resolution":{"observed_at":"2026-08-05T22:51:28.127341Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.19951","last_updated":"2025-04-28T16:22:21Z","snapshot_observed_at":"2026-08-07T15:58:32.775937Z","submitted_at":"2025-04-28T16:22:21Z","title":"Securing GenAI Multi-Agent Systems Against Tool Squatting: A Zero Trust Registry-Based Approach","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.19951","snapshot_observed_at":"2026-07-15T12:11:00.253650Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2603.09133","last_updated":"2026-07-10T10:10:02Z","snapshot_observed_at":"2026-08-06T13:22:32.646364Z","submitted_at":"2026-03-10T03:13:24Z","title":"Detailed analysis of possible new-physics effects in the semileptonic decay $B_s \\to D_s^{(*)}\\tau\\bar{\\nu}$","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-07-15T12:11:00.253650Z"},"links":{"cited_paper":"/paper/2504.19951","citing_paper":"/paper/2603.09133"},"observation_digest":"sha256:02d121d88156c0f8e0cf01e297b656cc030a5dee132dc510777c236e39dd7062","observation_id":"2c567bf7-93e7-43b3-922e-f07b46820a13","resolution":{"observed_at":"2026-07-15T12:11:00.253650Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.19951","last_updated":"2025-04-28T16:22:21Z","snapshot_observed_at":"2026-08-07T15:58:32.775937Z","submitted_at":"2025-04-28T16:22:21Z","title":"Securing GenAI Multi-Agent Systems Against Tool Squatting: A Zero Trust Registry-Based Approach","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.19951","snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":"Securing genai multi-agent systems against tool squatting: A zero trust registry-based approach","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-06T20:46:41.012304Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"cited_paper":"/paper/2504.19951","citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:b2c5496b80e4ad7b3c80fa5110474874ea091f97d28ca03f4f7b201d6940e507","observation_id":"354a8fb7-ca85-45fb-9c5c-afa06fd12253","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.19951","last_updated":"2025-04-28T16:22:21Z","snapshot_observed_at":"2026-08-07T15:58:32.775937Z","submitted_at":"2025-04-28T16:22:21Z","title":"Securing GenAI Multi-Agent Systems Against Tool Squatting: A Zero Trust Registry-Based Approach","version":1},"cited_work":{"arxiv_id":"2504.19951","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2504.19951","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Securing genai multi-agent systems against tool squatting: A zero trust registry-based approach","venue":null,"work_id":"ff57a198-75c6-4476-818a-927078df4460","year":2025},"citing_paper":{"arxiv_id":"2604.01905","last_updated":"2026-05-19T08:31:57Z","snapshot_observed_at":"2026-07-06T22:51:40.181565Z","submitted_at":"2026-04-02T11:22:07Z","title":"From Component Manipulation to System Compromise: Understanding and Detecting Malicious MCP Servers","version":2},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-05-21T10:41:17.307952Z"},"links":{"cited_paper":"/paper/2504.19951","citing_paper":"/paper/2604.01905"},"observation_digest":"sha256:70113629789ed23c2df7463e1030bc753d7544ea6a9c5cde74d28aca6f5b12f5","observation_id":"6b597d75-0048-4073-80d3-d50b82301b43","resolution":{"observed_at":"2026-05-21T10:44:08.025728Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.19951","last_updated":"2025-04-28T16:22:21Z","snapshot_observed_at":"2026-08-07T15:58:32.775937Z","submitted_at":"2025-04-28T16:22:21Z","title":"Securing GenAI Multi-Agent Systems Against Tool Squatting: A Zero Trust Registry-Based Approach","version":1},"cited_work":{"arxiv_id":"2504.19951","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2504.19951","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Securing genai multi-agent systems against tool squatting: A zero trust registry-based approach","venue":null,"work_id":"ff57a198-75c6-4476-818a-927078df4460","year":2025},"citing_paper":{"arxiv_id":"2604.03733","last_updated":"2026-04-04T13:26:17Z","snapshot_observed_at":"2026-08-02T12:48:12.684721Z","submitted_at":"2026-04-04T13:26:17Z","title":"SoK: Blockchain Agent-to-Agent Payments","version":1},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-05-13T17:37:50.514729Z"},"links":{"cited_paper":"/paper/2504.19951","citing_paper":"/paper/2604.03733"},"observation_digest":"sha256:61c521274eb3dbb01988027c9530949187dc6dce299a1d2232b03c2cdb2a375c","observation_id":"0af873ee-45fe-4b87-abca-de01999e2ef5","resolution":{"observed_at":"2026-05-13T17:38:02.478216Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.19951","last_updated":"2025-04-28T16:22:21Z","snapshot_observed_at":"2026-08-07T15:58:32.775937Z","submitted_at":"2025-04-28T16:22:21Z","title":"Securing GenAI Multi-Agent Systems Against Tool Squatting: A Zero Trust Registry-Based Approach","version":1},"cited_work":{"arxiv_id":"2504.19951","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2504.19951","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Securing genai multi-agent systems against tool squatting: A zero trust registry-based approach","venue":null,"work_id":"ff57a198-75c6-4476-818a-927078df4460","year":2025},"citing_paper":{"arxiv_id":"2604.04426","last_updated":"2026-04-06T05:15:00Z","snapshot_observed_at":"2026-07-06T22:53:24.585766Z","submitted_at":"2026-04-06T05:15:00Z","title":"ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-05-10T20:25:58.113363Z"},"links":{"cited_paper":"/paper/2504.19951","citing_paper":"/paper/2604.04426"},"observation_digest":"sha256:5137967ec9ffa98d0e39fa4d553aa63407497d16eef3a95bef46e68e63b0823b","observation_id":"e0277e4d-6285-4784-b52d-84bcfeb043d2","resolution":{"observed_at":"2026-05-10T21:55:52.991265Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2504.19951/citation-record","integrity":"/paper/2504.19951/integrity","json":"/paper/2504.19951/citation-record.json","paper":"/paper/2504.19951"},"outbound":[],"paper":{"arxiv_id":"2504.19951","last_updated":"2025-04-28T16:22:21Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-07T15:58:32.775937Z","submitted_at":"2025-04-28T16:22:21Z","title":"Securing GenAI Multi-Agent Systems Against Tool Squatting: A Zero Trust Registry-Based Approach"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 11 inbound Pith citation observations for arXiv:2504.19951."}