{"as_of":"2026-08-07T09:16:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:d999cbaedf257f17c7156c573548aa452ed1a4520e3088f7883e165205fdc3c2","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":16,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":16,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":16,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":16,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T15:42:01.058771Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-04T10:09:45.177863Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2505.05849","last_updated":"2025-06-14T01:50:21Z","snapshot_observed_at":"2026-07-06T21:21:20.149404Z","submitted_at":"2025-05-09T07:40:17Z","title":"AgentVigil: Generic Black-Box Red-teaming for Indirect Prompt Injection against LLM Agents","version":4},"cited_work":{"arxiv_id":"2505.05849","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.05849","snapshot_observed_at":"2026-07-04T10:09:45.177863Z","title":"Agentvigil: Generic black-box red- teaming for indirect prompt injection against llm agents","venue":null,"work_id":"78036d3e-3022-41fc-a844-76366394ab0d","year":2025},"citing_paper":{"arxiv_id":"2504.11703","last_updated":"2026-05-14T02:36:38Z","snapshot_observed_at":"2026-07-06T21:10:09.129714Z","submitted_at":"2025-04-16T01:58:40Z","title":"Progent: Securing AI Agents with Privilege Control","version":3},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-05-22T21:09:51.782808Z"},"links":{"cited_paper":"/paper/2505.05849","citing_paper":"/paper/2504.11703"},"observation_digest":"sha256:d26f8bfa4f371e08f45faa02083b1e3531870f29e33ea8cfa2e8bbcb2abf177e","observation_id":"1b69edd8-c974-46b4-8663-438abb005067","resolution":{"observed_at":"2026-05-22T21:12:08.484176Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.05849","last_updated":"2025-06-14T01:50:21Z","snapshot_observed_at":"2026-07-06T21:21:20.149404Z","submitted_at":"2025-05-09T07:40:17Z","title":"AgentVigil: Generic Black-Box Red-teaming for Indirect Prompt Injection against LLM Agents","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.05849","snapshot_observed_at":"2026-08-06T15:42:01.058771Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.15219","last_updated":"2025-07-21T03:41:44Z","snapshot_observed_at":"2026-08-06T15:35:31.690602Z","submitted_at":"2025-07-21T03:41:44Z","title":"PromptArmor: Simple yet Effective Prompt Injection Defenses","version":1},"reference_index":41,"source":"arxiv_source","source_observed_at":"2026-08-06T15:42:01.058771Z"},"links":{"cited_paper":"/paper/2505.05849","citing_paper":"/paper/2507.15219"},"observation_digest":"sha256:012efd859a187912e1ac565a8afc65b327a10a94d5b33fd057482296d154c516","observation_id":"3f6dbd46-137c-4c4a-b0c3-bd62c8ba26ba","resolution":{"observed_at":"2026-08-06T15:42:01.058771Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.05849","last_updated":"2025-06-14T01:50:21Z","snapshot_observed_at":"2026-07-06T21:21:20.149404Z","submitted_at":"2025-05-09T07:40:17Z","title":"AgentVigil: Generic Black-Box Red-teaming for Indirect Prompt Injection against LLM Agents","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.05849","snapshot_observed_at":"2026-08-06T13:05:40.367994Z","title":"Agentvigil: Generic black-box red-teaming for indirect prompt injection against llm agents","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.21206","last_updated":"2025-07-28T17:58:12Z","snapshot_observed_at":"2026-08-07T09:13:21.958176Z","submitted_at":"2025-07-28T17:58:12Z","title":"Agentic Web: Weaving the Next Web with AI Agents","version":1},"reference_index":224,"source":"arxiv_source","source_observed_at":"2026-08-06T13:05:40.367994Z"},"links":{"cited_paper":"/paper/2505.05849","citing_paper":"/paper/2507.21206"},"observation_digest":"sha256:a91fbd58df5f469023cda9e6171af135f8b26c4b42408980dec2c86f347d8f74","observation_id":"59e59dd2-a947-4309-b9b2-8a72a1bf3145","resolution":{"observed_at":"2026-08-06T13:05:40.367994Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.05849","last_updated":"2025-06-14T01:50:21Z","snapshot_observed_at":"2026-07-06T21:21:20.149404Z","submitted_at":"2025-05-09T07:40:17Z","title":"AgentVigil: Generic Black-Box Red-teaming for Indirect Prompt Injection against LLM Agents","version":4},"cited_work":{"arxiv_id":"2505.05849","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.05849","snapshot_observed_at":"2026-07-04T10:09:45.177863Z","title":"Agentvigil: Generic black-box red- teaming for indirect prompt injection against llm agents","venue":null,"work_id":"78036d3e-3022-41fc-a844-76366394ab0d","year":2025},"citing_paper":{"arxiv_id":"2605.06393","last_updated":"2026-05-07T15:08:40Z","snapshot_observed_at":"2026-07-06T23:18:51.157048Z","submitted_at":"2026-05-07T15:08:40Z","title":"Constraining Host-Level Abuse in Self-Hosted Computer-Use Agents via TEE-Backed Isolation","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-05-08T09:08:30.102711Z"},"links":{"cited_paper":"/paper/2505.05849","citing_paper":"/paper/2605.06393"},"observation_digest":"sha256:1b7a847dc34c680962476cae11c803559b298dcb8f8ec67f1677bf2fca5424a2","observation_id":"e01b55d3-0550-41b1-b9e0-7a7aaf50e233","resolution":{"observed_at":"2026-05-11T20:26:11.054246Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.05849","last_updated":"2025-06-14T01:50:21Z","snapshot_observed_at":"2026-07-06T21:21:20.149404Z","submitted_at":"2025-05-09T07:40:17Z","title":"AgentVigil: Generic Black-Box Red-teaming for Indirect Prompt Injection against LLM Agents","version":4},"cited_work":{"arxiv_id":"2505.05849","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.05849","snapshot_observed_at":"2026-07-04T10:09:45.177863Z","title":"Agentvigil: Generic black-box red- teaming for indirect prompt injection against llm agents","venue":null,"work_id":"78036d3e-3022-41fc-a844-76366394ab0d","year":2025},"citing_paper":{"arxiv_id":"2605.18991","last_updated":"2026-05-20T17:25:38Z","snapshot_observed_at":"2026-07-06T23:29:47.081347Z","submitted_at":"2026-05-18T18:11:17Z","title":"Agent Security is a Systems Problem","version":1},"reference_index":75,"source":"pdf_text","source_observed_at":"2026-05-20T09:02:59.719090Z"},"links":{"cited_paper":"/paper/2505.05849","citing_paper":"/paper/2605.18991"},"observation_digest":"sha256:5d63766d22263330c3b5bf430e00de4987eefab5846f5c0f4410a9e82f578366","observation_id":"3ef61d7f-ae1b-4ee4-92bc-5f80b0238b63","resolution":{"observed_at":"2026-05-20T09:03:09.842181Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.05849","last_updated":"2025-06-14T01:50:21Z","snapshot_observed_at":"2026-07-06T21:21:20.149404Z","submitted_at":"2025-05-09T07:40:17Z","title":"AgentVigil: Generic Black-Box Red-teaming for Indirect Prompt Injection against LLM Agents","version":4},"cited_work":{"arxiv_id":"2505.05849","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.05849","snapshot_observed_at":"2026-07-04T10:09:45.177863Z","title":"Agentvigil: Generic black-box red- teaming for indirect prompt injection against llm agents","venue":null,"work_id":"78036d3e-3022-41fc-a844-76366394ab0d","year":2025},"citing_paper":{"arxiv_id":"2605.18991","last_updated":"2026-05-20T17:25:38Z","snapshot_observed_at":"2026-07-06T23:29:47.081347Z","submitted_at":"2026-05-18T18:11:17Z","title":"Agent Security is a Systems Problem","version":2},"reference_index":75,"source":"pdf_text","source_observed_at":"2026-05-21T07:43:14.250188Z"},"links":{"cited_paper":"/paper/2505.05849","citing_paper":"/paper/2605.18991"},"observation_digest":"sha256:74774e15d5fe2c2a1776b317e9243ad70480b5cfb50e3bd8ecc10f59a25068a2","observation_id":"f3353e1c-a6ab-42ad-94a8-a09152700dd7","resolution":{"observed_at":"2026-05-21T07:44:02.914269Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.05849","last_updated":"2025-06-14T01:50:21Z","snapshot_observed_at":"2026-07-06T21:21:20.149404Z","submitted_at":"2025-05-09T07:40:17Z","title":"AgentVigil: Generic Black-Box Red-teaming for Indirect Prompt Injection against LLM Agents","version":4},"cited_work":{"arxiv_id":"2505.05849","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.05849","snapshot_observed_at":"2026-07-04T10:09:45.177863Z","title":"Agentvigil: Generic black-box red- teaming for indirect prompt injection against llm agents","venue":null,"work_id":"78036d3e-3022-41fc-a844-76366394ab0d","year":2025},"citing_paper":{"arxiv_id":"2605.19192","last_updated":"2026-05-20T21:49:08Z","snapshot_observed_at":"2026-08-03T06:06:31.296336Z","submitted_at":"2026-05-18T23:40:43Z","title":"Hallucination as Exploit: Evidence-Carrying Multimodal Agents","version":1},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-05-20T09:46:42.413501Z"},"links":{"cited_paper":"/paper/2505.05849","citing_paper":"/paper/2605.19192"},"observation_digest":"sha256:6a662cf4b5837436a887a031ab0a8067cec93751f65370f6bc84d968e13c6b87","observation_id":"403464f2-3a56-4ea4-ac84-709e17e2fe54","resolution":{"observed_at":"2026-05-20T09:48:11.589903Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.05849","last_updated":"2025-06-14T01:50:21Z","snapshot_observed_at":"2026-07-06T21:21:20.149404Z","submitted_at":"2025-05-09T07:40:17Z","title":"AgentVigil: Generic Black-Box Red-teaming for Indirect Prompt Injection against LLM Agents","version":4},"cited_work":{"arxiv_id":"2505.05849","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.05849","snapshot_observed_at":"2026-07-04T10:09:45.177863Z","title":"Agentvigil: Generic black-box red- teaming for indirect prompt injection against llm agents","venue":null,"work_id":"78036d3e-3022-41fc-a844-76366394ab0d","year":2025},"citing_paper":{"arxiv_id":"2605.19192","last_updated":"2026-05-20T21:49:08Z","snapshot_observed_at":"2026-08-03T06:06:31.296336Z","submitted_at":"2026-05-18T23:40:43Z","title":"Hallucination as Exploit: Evidence-Carrying Multimodal Agents","version":2},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-05-22T08:57:29.491043Z"},"links":{"cited_paper":"/paper/2505.05849","citing_paper":"/paper/2605.19192"},"observation_digest":"sha256:74fb84822fdd8626cb1604a9e3b8dd8ef3286cb0d8e1529ba03a4201215ea23b","observation_id":"d44f66e0-cfef-4cdc-b84b-b769a5bd773c","resolution":{"observed_at":"2026-05-22T09:01:19.894756Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.05849","last_updated":"2025-06-14T01:50:21Z","snapshot_observed_at":"2026-07-06T21:21:20.149404Z","submitted_at":"2025-05-09T07:40:17Z","title":"AgentVigil: Generic Black-Box Red-teaming for Indirect Prompt Injection against LLM Agents","version":4},"cited_work":{"arxiv_id":"2505.05849","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.05849","snapshot_observed_at":"2026-07-04T10:09:45.177863Z","title":"Agentvigil: Generic black-box red- teaming for indirect prompt injection against llm agents","venue":null,"work_id":"78036d3e-3022-41fc-a844-76366394ab0d","year":2025},"citing_paper":{"arxiv_id":"2606.00566","last_updated":"2026-05-30T06:38:41Z","snapshot_observed_at":"2026-07-06T23:41:15.410587Z","submitted_at":"2026-05-30T06:38:41Z","title":"Same Payload, Different Channel: Measuring Trust Asymmetry in Tool-Using Language Models","version":1},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-06-28T19:19:17.673497Z"},"links":{"cited_paper":"/paper/2505.05849","citing_paper":"/paper/2606.00566"},"observation_digest":"sha256:39f143be3b38ad8949f1dc16ff2a8d7f8aaca05beafa89e04da602b26cafe427","observation_id":"eb3ef02b-eb9b-4acb-8c6b-1a6272bf5342","resolution":{"observed_at":"2026-06-28T19:22:34.394638Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.05849","last_updated":"2025-06-14T01:50:21Z","snapshot_observed_at":"2026-07-06T21:21:20.149404Z","submitted_at":"2025-05-09T07:40:17Z","title":"AgentVigil: Generic Black-Box Red-teaming for Indirect Prompt Injection against LLM Agents","version":4},"cited_work":{"arxiv_id":"2505.05849","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.05849","snapshot_observed_at":"2026-07-04T10:09:45.177863Z","title":"Agentvigil: Generic black-box red- teaming for indirect prompt injection against llm agents","venue":null,"work_id":"78036d3e-3022-41fc-a844-76366394ab0d","year":2025},"citing_paper":{"arxiv_id":"2606.10525","last_updated":"2026-06-09T07:54:58Z","snapshot_observed_at":"2026-08-01T16:42:50.356614Z","submitted_at":"2026-06-09T07:54:58Z","title":"Assessing Automated Prompt Injection Attacks in Agentic Environments","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-06-27T12:47:09.467463Z"},"links":{"cited_paper":"/paper/2505.05849","citing_paper":"/paper/2606.10525"},"observation_digest":"sha256:9f0058a358ebbe47a42916000a6fbac1d41e46b85cd9e967f96d792221589b71","observation_id":"412cde2d-a5bb-4fc3-bbf5-52bb12fd7d8a","resolution":{"observed_at":"2026-07-03T06:17:41.945423Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.05849","last_updated":"2025-06-14T01:50:21Z","snapshot_observed_at":"2026-07-06T21:21:20.149404Z","submitted_at":"2025-05-09T07:40:17Z","title":"AgentVigil: Generic Black-Box Red-teaming for Indirect Prompt Injection against LLM Agents","version":4},"cited_work":{"arxiv_id":"2505.05849","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.05849","snapshot_observed_at":"2026-07-04T10:09:45.177863Z","title":"Agentvigil: Generic black-box red- teaming for indirect prompt injection against llm agents","venue":null,"work_id":"78036d3e-3022-41fc-a844-76366394ab0d","year":2025},"citing_paper":{"arxiv_id":"2606.12737","last_updated":"2026-06-10T22:57:02Z","snapshot_observed_at":"2026-07-06T23:51:35.904251Z","submitted_at":"2026-06-10T22:57:02Z","title":"PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections","version":1},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-06-27T08:56:12.882653Z"},"links":{"cited_paper":"/paper/2505.05849","citing_paper":"/paper/2606.12737"},"observation_digest":"sha256:82c139e240ceac14036dae573acef1497169879745a111f0b72deb0de57a4c23","observation_id":"d3594358-41db-416a-ba7e-17f323c11cce","resolution":{"observed_at":"2026-07-03T12:38:07.269748Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.05849","last_updated":"2025-06-14T01:50:21Z","snapshot_observed_at":"2026-07-06T21:21:20.149404Z","submitted_at":"2025-05-09T07:40:17Z","title":"AgentVigil: Generic Black-Box Red-teaming for Indirect Prompt Injection against LLM Agents","version":4},"cited_work":{"arxiv_id":"2505.05849","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.05849","snapshot_observed_at":"2026-07-04T10:09:45.177863Z","title":"Agentvigil: Generic black-box red- teaming for indirect prompt injection against llm agents","venue":null,"work_id":"78036d3e-3022-41fc-a844-76366394ab0d","year":2025},"citing_paper":{"arxiv_id":"2606.14027","last_updated":"2026-06-30T01:10:08Z","snapshot_observed_at":"2026-08-02T09:41:26.926011Z","submitted_at":"2026-06-12T02:01:38Z","title":"Same-Origin Policy for Agentic Browsers","version":3},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-07-01T07:29:08.355105Z"},"links":{"cited_paper":"/paper/2505.05849","citing_paper":"/paper/2606.14027"},"observation_digest":"sha256:ec1d4176198ebd19ed0e8d2bb659de4376a5db76cf969c79fc47e4fe9823ccd9","observation_id":"f47fff1d-8f9a-4b0b-a561-ff066adb7b40","resolution":{"observed_at":"2026-07-01T07:35:29.017390Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.05849","last_updated":"2025-06-14T01:50:21Z","snapshot_observed_at":"2026-07-06T21:21:20.149404Z","submitted_at":"2025-05-09T07:40:17Z","title":"AgentVigil: Generic Black-Box Red-teaming for Indirect Prompt Injection against LLM Agents","version":4},"cited_work":{"arxiv_id":"2505.05849","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.05849","snapshot_observed_at":"2026-07-04T10:09:45.177863Z","title":"Agentvigil: Generic black-box red- teaming for indirect prompt injection against llm agents","venue":null,"work_id":"78036d3e-3022-41fc-a844-76366394ab0d","year":2025},"citing_paper":{"arxiv_id":"2606.22864","last_updated":"2026-06-22T05:13:25Z","snapshot_observed_at":"2026-08-02T16:33:47.655259Z","submitted_at":"2026-06-22T05:13:25Z","title":"When AUC 0.998 Is Not Enough: A Candidate Evaluation Protocol for Hidden-State Probes of Indirect Prompt Injection in Multimodal Computer-Use Agents","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-06-26T09:05:22.096955Z"},"links":{"cited_paper":"/paper/2505.05849","citing_paper":"/paper/2606.22864"},"observation_digest":"sha256:f0b4e39eae7f988d4e06fadac02a4fa79764e8e056fff8c3e09de4db22102657","observation_id":"92e8edb9-0134-4a58-9b27-8bcfe956fd8a","resolution":{"observed_at":"2026-07-04T10:09:45.179850Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.05849","last_updated":"2025-06-14T01:50:21Z","snapshot_observed_at":"2026-07-06T21:21:20.149404Z","submitted_at":"2025-05-09T07:40:17Z","title":"AgentVigil: Generic Black-Box Red-teaming for Indirect Prompt Injection against LLM Agents","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.05849","snapshot_observed_at":"2026-07-12T04:03:40.067404Z","title":"arXiv preprint arXiv:2505.05849 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.03220","last_updated":"2026-07-03T11:34:27Z","snapshot_observed_at":"2026-08-04T15:53:28.140739Z","submitted_at":"2026-07-03T11:34:27Z","title":"CONTRA: Red-Teaming Configurations of Personalizable Agents","version":1},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-07-12T04:03:40.067404Z"},"links":{"cited_paper":"/paper/2505.05849","citing_paper":"/paper/2607.03220"},"observation_digest":"sha256:39bda7ff7a89ad4fe10d993825ac2b8de7954918cefe4fe6600ab0b9f6505a0c","observation_id":"fc937447-2d5a-4b84-b05b-49bdfdbedfc9","resolution":{"observed_at":"2026-07-12T04:03:40.067404Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.05849","last_updated":"2025-06-14T01:50:21Z","snapshot_observed_at":"2026-07-06T21:21:20.149404Z","submitted_at":"2025-05-09T07:40:17Z","title":"AgentVigil: Generic Black-Box Red-teaming for Indirect Prompt Injection against LLM Agents","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.05849","snapshot_observed_at":"2026-08-01T11:38:19.674889Z","title":"Agentvigil: Generic black-box red-teaming for indirect prompt injection against llm agents,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.19837","last_updated":"2026-07-22T07:20:27Z","snapshot_observed_at":"2026-08-01T11:38:16.827167Z","submitted_at":"2026-07-22T07:20:27Z","title":"Know Your Agent: Reconnaissance-Driven Pentesting of AI Agents","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-01T11:38:19.674889Z"},"links":{"cited_paper":"/paper/2505.05849","citing_paper":"/paper/2607.19837"},"observation_digest":"sha256:27522d0df22b1fa7d31b5bce6e78ae1c87f9a4c7500f6386fe0cf4ae70b48fb0","observation_id":"1b17e9f1-3daf-4a2b-ae26-da210751b368","resolution":{"observed_at":"2026-08-01T11:38:19.674889Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.05849","last_updated":"2025-06-14T01:50:21Z","snapshot_observed_at":"2026-07-06T21:21:20.149404Z","submitted_at":"2025-05-09T07:40:17Z","title":"AgentVigil: Generic Black-Box Red-teaming for Indirect Prompt Injection against LLM Agents","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.05849","snapshot_observed_at":"2026-08-01T01:12:44.169745Z","title":"Willison, S","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26115","last_updated":"2026-07-28T16:03:39Z","snapshot_observed_at":"2026-08-03T09:49:36.555011Z","submitted_at":"2026-07-28T16:03:39Z","title":"GPT-Red: Automated Red Teaming via Self-Play at Scale","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-01T01:12:44.169745Z"},"links":{"cited_paper":"/paper/2505.05849","citing_paper":"/paper/2607.26115"},"observation_digest":"sha256:21e9f88279c8491c72d7ff1b064904e9641d3497a9b6d80ced7e3a363e45ca0d","observation_id":"c76f5e9b-e5d3-4311-b3ff-1e806e38fac5","resolution":{"observed_at":"2026-08-01T01:12:44.169745Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2505.05849/citation-record","integrity":"/paper/2505.05849/integrity","json":"/paper/2505.05849/citation-record.json","paper":"/paper/2505.05849"},"outbound":[],"paper":{"arxiv_id":"2505.05849","last_updated":"2025-06-14T01:50:21Z","latest_version":4,"primary_category":"cs.CR","snapshot_observed_at":"2026-07-06T21:21:20.149404Z","submitted_at":"2025-05-09T07:40:17Z","title":"AgentVigil: Generic Black-Box Red-teaming for Indirect Prompt Injection against LLM Agents"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 7 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 16 inbound Pith citation observations for arXiv:2505.05849."}