{"as_of":"2026-08-07T17:39:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:7de496b7750b8ea966afa3df86afff3065223894e2c4f6559fe26ef1861287f0","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":16,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":16,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":16,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":16,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T11:18:55.303303Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":1,"source":"arxiv_reference","source_observed_at":"2026-08-05T02:28:24.338817Z","state":"measured"}],"external_citation_measurements":[{"count":0,"observed_at":"2026-08-05T02:28:24.338817Z","source":"arxiv_reference"}],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2504.19956","last_updated":"2025-05-02T18:42:42Z","snapshot_observed_at":"2026-08-07T15:58:32.319366Z","submitted_at":"2025-04-28T16:29:24Z","title":"Securing Agentic AI: A Comprehensive Threat Model and Mitigation Framework for Generative AI Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.19956","snapshot_observed_at":"2026-08-07T11:18:55.303303Z","title":"Available: https://arxiv.org/abs/2504.19956","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.02859","last_updated":"2025-06-03T13:25:40Z","snapshot_observed_at":"2026-08-07T11:11:39.176556Z","submitted_at":"2025-06-03T13:25:40Z","title":"ATAG: AI-Agent Application Threat Assessment with Attack Graphs","version":1},"reference_index":2025,"source":"pdf_text","source_observed_at":"2026-08-07T11:18:55.303303Z"},"links":{"cited_paper":"/paper/2504.19956","citing_paper":"/paper/2506.02859"},"observation_digest":"sha256:eecf3dc37e0a1b7049afa1f08ca164d8fe850ccbeb9e217dfacb0e41957f625a","observation_id":"bca5b16d-1e19-4cbd-8de6-ca1af8db510a","resolution":{"observed_at":"2026-08-07T11:18:55.303303Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.19956","last_updated":"2025-05-02T18:42:42Z","snapshot_observed_at":"2026-08-07T15:58:32.319366Z","submitted_at":"2025-04-28T16:29:24Z","title":"Securing Agentic AI: A Comprehensive Threat Model and Mitigation Framework for Generative AI Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.19956","snapshot_observed_at":"2026-08-06T21:34:41.202535Z","title":"Securing agentic ai: A compre- hensive threat model and mitigation framework for generative ai agents,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T01:32:39.568333Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:41.202535Z"},"links":{"cited_paper":"/paper/2504.19956","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:9ed03ea1ea7b8cb8fa1f7b2cf3bab7da85bc7ed3c9c10bbc0322cf738a34ae57","observation_id":"81654916-8d80-4015-9ae5-5f06c436e780","resolution":{"observed_at":"2026-08-06T21:34:41.202535Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.19956","last_updated":"2025-05-02T18:42:42Z","snapshot_observed_at":"2026-08-07T15:58:32.319366Z","submitted_at":"2025-04-28T16:29:24Z","title":"Securing Agentic AI: A Comprehensive Threat Model and Mitigation Framework for Generative AI Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.19956","snapshot_observed_at":"2026-08-06T19:12:23.063124Z","title":"Securing agentic ai: A comprehensive threat model and mitigation framework for generative ai agents,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.06323","last_updated":"2025-07-08T18:24:28Z","snapshot_observed_at":"2026-08-06T19:05:12.143746Z","submitted_at":"2025-07-08T18:24:28Z","title":"Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-06T19:12:23.063124Z"},"links":{"cited_paper":"/paper/2504.19956","citing_paper":"/paper/2507.06323"},"observation_digest":"sha256:2dd15ce2337cd6b30ececb10eb99ba24557227d4deac3f2f05360574cc1ab892","observation_id":"5b0874b2-7f8d-43a0-b11c-7e937cc8cca1","resolution":{"observed_at":"2026-08-06T19:12:23.063124Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.19956","last_updated":"2025-05-02T18:42:42Z","snapshot_observed_at":"2026-08-07T15:58:32.319366Z","submitted_at":"2025-04-28T16:29:24Z","title":"Securing Agentic AI: A Comprehensive Threat Model and Mitigation Framework for Generative AI Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.19956","snapshot_observed_at":"2026-08-06T13:05:39.660053Z","title":"Securing agentic ai: A comprehensive threat model and mitigation framework for generative ai agents","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.21206","last_updated":"2025-07-28T17:58:12Z","snapshot_observed_at":"2026-08-07T09:13:21.958176Z","submitted_at":"2025-07-28T17:58:12Z","title":"Agentic Web: Weaving the Next Web with AI Agents","version":1},"reference_index":154,"source":"arxiv_source","source_observed_at":"2026-08-06T13:05:39.660053Z"},"links":{"cited_paper":"/paper/2504.19956","citing_paper":"/paper/2507.21206"},"observation_digest":"sha256:5376d1a5795cd099b5f2fb78f4ec2e9a57c60dc461bd79c1c15e72a2746fde7e","observation_id":"248bf087-8004-4536-bd8d-768ccdf781eb","resolution":{"observed_at":"2026-08-06T13:05:39.660053Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.19956","last_updated":"2025-05-02T18:42:42Z","snapshot_observed_at":"2026-08-07T15:58:32.319366Z","submitted_at":"2025-04-28T16:29:24Z","title":"Securing Agentic AI: A Comprehensive Threat Model and Mitigation Framework for Generative AI Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.19956","snapshot_observed_at":"2026-08-05T18:55:33.613439Z","title":"Securing agentic ai: A comprehensive threat model and mitigation framework for generative ai agents","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.13787","last_updated":"2025-08-19T12:43:49Z","snapshot_observed_at":"2026-08-07T07:31:50.924156Z","submitted_at":"2025-08-19T12:43:49Z","title":"BetaWeb: Towards a Blockchain-enabled Trustworthy Agentic Web","version":1},"reference_index":58,"source":"arxiv_source","source_observed_at":"2026-08-05T18:55:33.613439Z"},"links":{"cited_paper":"/paper/2504.19956","citing_paper":"/paper/2508.13787"},"observation_digest":"sha256:ae134781c39fbb0b37357685485a780e9965ca2a5cd2c8325776f397212a41b8","observation_id":"bfc0d4a6-7bea-4794-812f-c00bd635b2fd","resolution":{"observed_at":"2026-08-05T18:55:33.613439Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.19956","last_updated":"2025-05-02T18:42:42Z","snapshot_observed_at":"2026-08-07T15:58:32.319366Z","submitted_at":"2025-04-28T16:29:24Z","title":"Securing Agentic AI: A Comprehensive Threat Model and Mitigation Framework for Generative AI Agents","version":2},"cited_work":{"arxiv_id":"2504.19956","doi":"10.48550/arxiv.2504.19956","metadata_source":"arxiv_reference","pith_arxiv_id":"2504.19956","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Securing agentic ai: A comprehensive threat model and mitigation framework for generative ai agents","venue":"ArXiv.org","work_id":"25c3230d-f082-44ee-82ed-f84d95b9842e","year":2025},"citing_paper":{"arxiv_id":"2603.09002","last_updated":"2026-04-26T14:13:48Z","snapshot_observed_at":"2026-07-06T22:48:26.306802Z","submitted_at":"2026-03-09T22:46:27Z","title":"Security Considerations for Multi-agent Systems","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-05-15T14:12:14.160789Z"},"links":{"cited_paper":"/paper/2504.19956","citing_paper":"/paper/2603.09002"},"observation_digest":"sha256:6b2c0a4add98ece8daf29e6e56155373925fee52d63c7cc51743521b49c0ec75","observation_id":"f7b5d787-e093-4955-ae76-37c50336dc90","resolution":{"observed_at":"2026-05-15T14:15:55.138997Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.19956","last_updated":"2025-05-02T18:42:42Z","snapshot_observed_at":"2026-08-07T15:58:32.319366Z","submitted_at":"2025-04-28T16:29:24Z","title":"Securing Agentic AI: A Comprehensive Threat Model and Mitigation Framework for Generative AI Agents","version":2},"cited_work":{"arxiv_id":"2504.19956","doi":"10.48550/arxiv.2504.19956","metadata_source":"arxiv_reference","pith_arxiv_id":"2504.19956","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Securing agentic ai: A comprehensive threat model and mitigation framework for generative ai agents","venue":"ArXiv.org","work_id":"25c3230d-f082-44ee-82ed-f84d95b9842e","year":2025},"citing_paper":{"arxiv_id":"2604.12986","last_updated":"2026-04-14T17:20:48Z","snapshot_observed_at":"2026-08-02T13:53:51.797960Z","submitted_at":"2026-04-14T17:20:48Z","title":"Parallax: Why AI Agents That Think Must Never Act","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-05-10T15:13:07.178551Z"},"links":{"cited_paper":"/paper/2504.19956","citing_paper":"/paper/2604.12986"},"observation_digest":"sha256:0ae58577aa938e9335446fcc19cfe8b7cb8a3535c2d34cf61c9bcb8709a95f44","observation_id":"029ced35-2b0d-48d1-9996-7edff60d2f1e","resolution":{"observed_at":"2026-05-11T11:01:04.888758Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.19956","last_updated":"2025-05-02T18:42:42Z","snapshot_observed_at":"2026-08-07T15:58:32.319366Z","submitted_at":"2025-04-28T16:29:24Z","title":"Securing Agentic AI: A Comprehensive Threat Model and Mitigation Framework for Generative AI Agents","version":2},"cited_work":{"arxiv_id":"2504.19956","doi":"10.48550/arxiv.2504.19956","metadata_source":"arxiv_reference","pith_arxiv_id":"2504.19956","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Securing agentic ai: A comprehensive threat model and mitigation framework for generative ai agents","venue":"ArXiv.org","work_id":"25c3230d-f082-44ee-82ed-f84d95b9842e","year":2025},"citing_paper":{"arxiv_id":"2605.01970","last_updated":"2026-05-15T06:42:15Z","snapshot_observed_at":"2026-07-06T23:15:07.159340Z","submitted_at":"2026-05-03T17:07:20Z","title":"Trojan Hippo: Weaponizing Agent Memory for Data Exfiltration","version":2},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-05-09T17:13:47.722098Z"},"links":{"cited_paper":"/paper/2504.19956","citing_paper":"/paper/2605.01970"},"observation_digest":"sha256:e6f9e67a50f2aa16a67839584f819039beacec71fc0bef64557e197bfe05a5a6","observation_id":"eae49c7b-05a0-4eb2-bc93-f9a252933be7","resolution":{"observed_at":"2026-05-09T21:38:30.701939Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.19956","last_updated":"2025-05-02T18:42:42Z","snapshot_observed_at":"2026-08-07T15:58:32.319366Z","submitted_at":"2025-04-28T16:29:24Z","title":"Securing Agentic AI: A Comprehensive Threat Model and Mitigation Framework for Generative AI Agents","version":2},"cited_work":{"arxiv_id":"2504.19956","doi":"10.48550/arxiv.2504.19956","metadata_source":"arxiv_reference","pith_arxiv_id":"2504.19956","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Securing agentic ai: A comprehensive threat model and mitigation framework for generative ai agents","venue":"ArXiv.org","work_id":"25c3230d-f082-44ee-82ed-f84d95b9842e","year":2025},"citing_paper":{"arxiv_id":"2605.01970","last_updated":"2026-05-15T06:42:15Z","snapshot_observed_at":"2026-07-06T23:15:07.159340Z","submitted_at":"2026-05-03T17:07:20Z","title":"Trojan Hippo: Weaponizing Agent Memory for Data Exfiltration","version":3},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-05-19T17:30:22.481943Z"},"links":{"cited_paper":"/paper/2504.19956","citing_paper":"/paper/2605.01970"},"observation_digest":"sha256:d0e89dee0ee48dfb785feef3e90bc272107cecc84d8eeaed1e529e7886c41aaf","observation_id":"0da86ea3-87f1-4465-976a-40862e20dbb3","resolution":{"observed_at":"2026-05-19T17:32:41.538736Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.19956","last_updated":"2025-05-02T18:42:42Z","snapshot_observed_at":"2026-08-07T15:58:32.319366Z","submitted_at":"2025-04-28T16:29:24Z","title":"Securing Agentic AI: A Comprehensive Threat Model and Mitigation Framework for Generative AI Agents","version":2},"cited_work":{"arxiv_id":"2504.19956","doi":"10.48550/arxiv.2504.19956","metadata_source":"arxiv_reference","pith_arxiv_id":"2504.19956","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Securing agentic ai: A comprehensive threat model and mitigation framework for generative ai agents","venue":"ArXiv.org","work_id":"25c3230d-f082-44ee-82ed-f84d95b9842e","year":2025},"citing_paper":{"arxiv_id":"2605.08468","last_updated":"2026-05-08T20:39:32Z","snapshot_observed_at":"2026-08-02T16:12:56.247576Z","submitted_at":"2026-05-08T20:39:32Z","title":"PYTHALAB-MERA: Validation-Grounded Memory, Retrieval, and Acceptance Control for Frozen-LLM Coding Agents","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-05-12T01:12:37.970638Z"},"links":{"cited_paper":"/paper/2504.19956","citing_paper":"/paper/2605.08468"},"observation_digest":"sha256:ac275e69ff3668b0cdd1edfc13e56959085a8acd0acaf770f32980d82b9f7526","observation_id":"b854337e-0b4d-4f0c-91f6-571cb97bf8e4","resolution":{"observed_at":"2026-05-12T08:21:26.071889Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.19956","last_updated":"2025-05-02T18:42:42Z","snapshot_observed_at":"2026-08-07T15:58:32.319366Z","submitted_at":"2025-04-28T16:29:24Z","title":"Securing Agentic AI: A Comprehensive Threat Model and Mitigation Framework for Generative AI Agents","version":2},"cited_work":{"arxiv_id":"2504.19956","doi":"10.48550/arxiv.2504.19956","metadata_source":"arxiv_reference","pith_arxiv_id":"2504.19956","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Securing agentic ai: A comprehensive threat model and mitigation framework for generative ai agents","venue":"ArXiv.org","work_id":"25c3230d-f082-44ee-82ed-f84d95b9842e","year":2025},"citing_paper":{"arxiv_id":"2605.09721","last_updated":"2026-05-10T19:38:57Z","snapshot_observed_at":"2026-07-06T23:21:44.900680Z","submitted_at":"2026-05-10T19:38:57Z","title":"Security Risks in Tool-Enabled AI Agents: A Systematic Analysis of Privileged Execution Environments","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-05-12T02:43:51.698740Z"},"links":{"cited_paper":"/paper/2504.19956","citing_paper":"/paper/2605.09721"},"observation_digest":"sha256:966cc46629facf6f201e5fde32ce61667f07f286c9a57a4261562393911d9c70","observation_id":"42fc1481-766e-46b5-b999-9cd53403ed1d","resolution":{"observed_at":"2026-05-12T02:46:19.167134Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.19956","last_updated":"2025-05-02T18:42:42Z","snapshot_observed_at":"2026-08-07T15:58:32.319366Z","submitted_at":"2025-04-28T16:29:24Z","title":"Securing Agentic AI: A Comprehensive Threat Model and Mitigation Framework for Generative AI Agents","version":2},"cited_work":{"arxiv_id":"2504.19956","doi":"10.48550/arxiv.2504.19956","metadata_source":"arxiv_reference","pith_arxiv_id":"2504.19956","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Securing agentic ai: A comprehensive threat model and mitigation framework for generative ai agents","venue":"ArXiv.org","work_id":"25c3230d-f082-44ee-82ed-f84d95b9842e","year":2025},"citing_paper":{"arxiv_id":"2605.22842","last_updated":"2026-05-12T20:21:47Z","snapshot_observed_at":"2026-08-02T07:12:56.313557Z","submitted_at":"2026-05-12T20:21:47Z","title":"The Misattribution Gap: When Memory Poisoning Looks Like Model Failure in Agentic AI Systems","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-05-25T00:43:34.500801Z"},"links":{"cited_paper":"/paper/2504.19956","citing_paper":"/paper/2605.22842"},"observation_digest":"sha256:02a7eee388bfc48634a74cd2b64c024e5fdde66ca74487fe1858cd858e125d75","observation_id":"f234ebd3-1978-451d-bdf3-1c585585e24f","resolution":{"observed_at":"2026-05-25T00:45:09.295367Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.19956","last_updated":"2025-05-02T18:42:42Z","snapshot_observed_at":"2026-08-07T15:58:32.319366Z","submitted_at":"2025-04-28T16:29:24Z","title":"Securing Agentic AI: A Comprehensive Threat Model and Mitigation Framework for Generative AI Agents","version":2},"cited_work":{"arxiv_id":"2504.19956","doi":"10.48550/arxiv.2504.19956","metadata_source":"arxiv_reference","pith_arxiv_id":"2504.19956","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Securing agentic ai: A comprehensive threat model and mitigation framework for generative ai agents","venue":"ArXiv.org","work_id":"25c3230d-f082-44ee-82ed-f84d95b9842e","year":2025},"citing_paper":{"arxiv_id":"2605.23330","last_updated":"2026-05-22T07:45:04Z","snapshot_observed_at":"2026-08-02T05:47:41.731065Z","submitted_at":"2026-05-22T07:45:04Z","title":"Security, Privacy, and Ethical Risks in OpenClaw","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-05-25T04:25:49.102385Z"},"links":{"cited_paper":"/paper/2504.19956","citing_paper":"/paper/2605.23330"},"observation_digest":"sha256:eb33ca17744816cd359735e18e0cbcfa67697433475747dcee553c7baf2cf95c","observation_id":"5ce70f4a-2c5a-4623-a4bc-b24366c7a29a","resolution":{"observed_at":"2026-05-25T04:26:37.743104Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.19956","last_updated":"2025-05-02T18:42:42Z","snapshot_observed_at":"2026-08-07T15:58:32.319366Z","submitted_at":"2025-04-28T16:29:24Z","title":"Securing Agentic AI: A Comprehensive Threat Model and Mitigation Framework for Generative AI Agents","version":2},"cited_work":{"arxiv_id":"2504.19956","doi":"10.48550/arxiv.2504.19956","metadata_source":"arxiv_reference","pith_arxiv_id":"2504.19956","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Securing agentic ai: A comprehensive threat model and mitigation framework for generative ai agents","venue":"ArXiv.org","work_id":"25c3230d-f082-44ee-82ed-f84d95b9842e","year":2025},"citing_paper":{"arxiv_id":"2606.10749","last_updated":"2026-06-09T12:01:07Z","snapshot_observed_at":"2026-07-31T21:35:18.696472Z","submitted_at":"2026-06-09T12:01:07Z","title":"Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation","version":1},"reference_index":130,"source":"pdf_text","source_observed_at":"2026-06-27T12:55:22.831264Z"},"links":{"cited_paper":"/paper/2504.19956","citing_paper":"/paper/2606.10749"},"observation_digest":"sha256:2ab38b13b9efd910398aff153f3832ff3235ec80d2e3b44fbe0891cd6d11eab1","observation_id":"ab6b625b-f3c3-4a72-8127-248d482ce7c1","resolution":{"observed_at":"2026-06-27T13:20:56.759436Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.19956","last_updated":"2025-05-02T18:42:42Z","snapshot_observed_at":"2026-08-07T15:58:32.319366Z","submitted_at":"2025-04-28T16:29:24Z","title":"Securing Agentic AI: A Comprehensive Threat Model and Mitigation Framework for Generative AI Agents","version":2},"cited_work":{"arxiv_id":"2504.19956","doi":"10.48550/arxiv.2504.19956","metadata_source":"arxiv_reference","pith_arxiv_id":"2504.19956","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Securing agentic ai: A comprehensive threat model and mitigation framework for generative ai agents","venue":"ArXiv.org","work_id":"25c3230d-f082-44ee-82ed-f84d95b9842e","year":2025},"citing_paper":{"arxiv_id":"2606.12797","last_updated":"2026-06-11T01:46:26Z","snapshot_observed_at":"2026-07-06T23:51:40.528967Z","submitted_at":"2026-06-11T01:46:26Z","title":"The Containment Gap: How Deployed Agentic AI Frameworks Fail Public-Facing Safety Requirements","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-06-27T07:25:32.556071Z"},"links":{"cited_paper":"/paper/2504.19956","citing_paper":"/paper/2606.12797"},"observation_digest":"sha256:930ba50ee8c6e94d7e89053c53d17aa28e05596aa2528b34448500da88fbd050","observation_id":"608bfa06-e51f-41b3-8b28-c329bab7db71","resolution":{"observed_at":"2026-07-03T13:58:21.501421Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.19956","last_updated":"2025-05-02T18:42:42Z","snapshot_observed_at":"2026-08-07T15:58:32.319366Z","submitted_at":"2025-04-28T16:29:24Z","title":"Securing Agentic AI: A Comprehensive Threat Model and Mitigation Framework for Generative AI Agents","version":2},"cited_work":{"arxiv_id":"2504.19956","doi":"10.48550/arxiv.2504.19956","metadata_source":"arxiv_reference","pith_arxiv_id":"2504.19956","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Securing agentic ai: A comprehensive threat model and mitigation framework for generative ai agents","venue":"ArXiv.org","work_id":"25c3230d-f082-44ee-82ed-f84d95b9842e","year":2025},"citing_paper":{"arxiv_id":"2606.29142","last_updated":"2026-06-28T01:11:00Z","snapshot_observed_at":"2026-07-07T00:03:07.870153Z","submitted_at":"2026-06-28T01:11:00Z","title":"Agent Security Meets Regulatory Reality -- A Practitioner Systematization of Autonomous-Agent Threats and Controls in Regulated Financial Systems","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-06-30T02:51:54.373984Z"},"links":{"cited_paper":"/paper/2504.19956","citing_paper":"/paper/2606.29142"},"observation_digest":"sha256:b4bdd824667a8efd0173526ed3b3f608a08c1068aae3a2de6b63dfc9d0f8fae9","observation_id":"a9713500-792f-42e3-9dbc-b43522cd42e0","resolution":{"observed_at":"2026-06-30T02:54:10.151992Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2504.19956/citation-record","integrity":"/paper/2504.19956/integrity","json":"/paper/2504.19956/citation-record.json","paper":"/paper/2504.19956"},"outbound":[],"paper":{"arxiv_id":"2504.19956","last_updated":"2025-05-02T18:42:42Z","latest_version":2,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-07T15:58:32.319366Z","submitted_at":"2025-04-28T16:29:24Z","title":"Securing Agentic AI: A Comprehensive Threat Model and Mitigation Framework for Generative AI Agents"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 7 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 16 inbound Pith citation observations for arXiv:2504.19956."}