{"as_of":"2026-08-23T22:48:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:192d954906fea8db4b9523fe6b8a4274f8671e5c085040f97d73d22f19648b66","coverage":[{"denominator":68,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":68,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-15T20:35:56.083109Z","state":"measured"},{"denominator":74,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":74,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-23T06:30:58.430688+00:00","state":"measured"},{"denominator":6,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":6,"source":"paper_references, paper_reference_links","source_observed_at":"2026-06-27T21:42:29.461467Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-02T19:07:17.568442Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2505.12490","last_updated":"2025-08-28T20:13:32Z","snapshot_observed_at":"2026-08-17T00:58:48.187939Z","submitted_at":"2025-05-18T16:25:21Z","title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems","version":3},"cited_work":{"arxiv_id":"2505.12490","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.12490","snapshot_observed_at":"2026-07-02T19:07:17.568442Z","title":"Louck, A","venue":null,"work_id":"0ddb51c4-7ccc-46d6-a191-1a00c0ab897d","year":2025},"citing_paper":{"arxiv_id":"2602.11327","last_updated":"2026-04-17T15:12:16Z","snapshot_observed_at":"2026-08-22T04:51:18.141787Z","submitted_at":"2026-02-11T19:58:23Z","title":"Security Threat Modeling for Emerging AI-Agent Protocols: A Comparative Analysis of MCP, A2A, Agora, and ANP","version":2},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-05-16T05:05:16.370606Z"},"links":{"cited_paper":"/paper/2505.12490","citing_paper":"/paper/2602.11327"},"observation_digest":"sha256:0ba5af7fb75073a644390ac7c7b61629dd1f696df9bb86b035480c67d2795899","observation_id":"b2f68937-7aa6-470c-8495-26e61bb99e01","resolution":{"observed_at":"2026-05-16T05:07:20.625042Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.12490","last_updated":"2025-08-28T20:13:32Z","snapshot_observed_at":"2026-08-17T00:58:48.187939Z","submitted_at":"2025-05-18T16:25:21Z","title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems","version":3},"cited_work":{"arxiv_id":"2505.12490","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.12490","snapshot_observed_at":"2026-07-02T19:07:17.568442Z","title":"Louck, A","venue":null,"work_id":"0ddb51c4-7ccc-46d6-a191-1a00c0ab897d","year":2025},"citing_paper":{"arxiv_id":"2605.06933","last_updated":"2026-05-18T15:00:37Z","snapshot_observed_at":"2026-08-15T14:29:02.058442Z","submitted_at":"2026-05-07T20:46:07Z","title":"MAGIQ: A Post-Quantum Multi-Agentic AI Governance System with Provable Security","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-05-11T01:08:47.097355Z"},"links":{"cited_paper":"/paper/2505.12490","citing_paper":"/paper/2605.06933"},"observation_digest":"sha256:c8e6d1391e7f78c1f9205ad7b8e0351e96e3b4177dad767193789714409ee133","observation_id":"b96460e5-6dd7-45c5-bbca-635d11f8192e","resolution":{"observed_at":"2026-05-11T04:41:00.461653Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.12490","last_updated":"2025-08-28T20:13:32Z","snapshot_observed_at":"2026-08-17T00:58:48.187939Z","submitted_at":"2025-05-18T16:25:21Z","title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems","version":3},"cited_work":{"arxiv_id":"2505.12490","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.12490","snapshot_observed_at":"2026-07-02T19:07:17.568442Z","title":"Louck, A","venue":null,"work_id":"0ddb51c4-7ccc-46d6-a191-1a00c0ab897d","year":2025},"citing_paper":{"arxiv_id":"2605.06933","last_updated":"2026-05-18T15:00:37Z","snapshot_observed_at":"2026-08-15T14:29:02.058442Z","submitted_at":"2026-05-07T20:46:07Z","title":"MAGIQ: A Post-Quantum Multi-Agentic AI Governance System with Provable Security","version":2},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-05-20T22:31:48.507150Z"},"links":{"cited_paper":"/paper/2505.12490","citing_paper":"/paper/2605.06933"},"observation_digest":"sha256:d5fc01a3fbb4ac338fa66561af490ed9262c6e7cdd4eb8b3c63474ca1490348e","observation_id":"6fb4a10e-8f12-4580-8672-3eaedaf9c2f4","resolution":{"observed_at":"2026-05-20T22:33:48.472128Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.12490","last_updated":"2025-08-28T20:13:32Z","snapshot_observed_at":"2026-08-17T00:58:48.187939Z","submitted_at":"2025-05-18T16:25:21Z","title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems","version":3},"cited_work":{"arxiv_id":"2505.12490","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.12490","snapshot_observed_at":"2026-07-02T19:07:17.568442Z","title":"Louck, A","venue":null,"work_id":"0ddb51c4-7ccc-46d6-a191-1a00c0ab897d","year":2025},"citing_paper":{"arxiv_id":"2605.08460","last_updated":"2026-05-08T20:27:23Z","snapshot_observed_at":"2026-08-18T18:38:53.632948Z","submitted_at":"2026-05-08T20:27:23Z","title":"When Child Inherits: Modeling and Exploiting Subagent Spawn in Multi-Agent Networks","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-05-12T01:20:55.221345Z"},"links":{"cited_paper":"/paper/2505.12490","citing_paper":"/paper/2605.08460"},"observation_digest":"sha256:64583320674ccf6de05391d9881bb0647d41dc6a24f6b0ce901865cc0f0381c7","observation_id":"462c3749-5d03-40a4-af68-8397c6bc46ee","resolution":{"observed_at":"2026-05-12T08:06:26.153668Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.12490","last_updated":"2025-08-28T20:13:32Z","snapshot_observed_at":"2026-08-17T00:58:48.187939Z","submitted_at":"2025-05-18T16:25:21Z","title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems","version":3},"cited_work":{"arxiv_id":"2505.12490","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.12490","snapshot_observed_at":"2026-07-02T19:07:17.568442Z","title":"Louck, A","venue":null,"work_id":"0ddb51c4-7ccc-46d6-a191-1a00c0ab897d","year":2025},"citing_paper":{"arxiv_id":"2605.12364","last_updated":"2026-05-12T16:33:50Z","snapshot_observed_at":"2026-08-13T00:38:20.592731Z","submitted_at":"2026-05-12T16:33:50Z","title":"Attacks and Mitigations for Distributed Governance of Agentic AI under Byzantine Adversaries","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-05-13T04:04:41.439968Z"},"links":{"cited_paper":"/paper/2505.12490","citing_paper":"/paper/2605.12364"},"observation_digest":"sha256:022b748c6ca0cb7b1d63f0c964c26e89cf045bedc0c94c690339c40e7863034c","observation_id":"540f2ce4-62a9-453d-886c-cbae9ac0f5df","resolution":{"observed_at":"2026-05-13T04:07:13.237486Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.12490","last_updated":"2025-08-28T20:13:32Z","snapshot_observed_at":"2026-08-17T00:58:48.187939Z","submitted_at":"2025-05-18T16:25:21Z","title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems","version":3},"cited_work":{"arxiv_id":"2505.12490","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.12490","snapshot_observed_at":"2026-07-02T19:07:17.568442Z","title":"Louck, A","venue":null,"work_id":"0ddb51c4-7ccc-46d6-a191-1a00c0ab897d","year":2025},"citing_paper":{"arxiv_id":"2606.07150","last_updated":"2026-06-17T17:01:06Z","snapshot_observed_at":"2026-08-14T02:13:39.054226Z","submitted_at":"2026-06-05T11:07:55Z","title":"From Privacy to Workflow Integrity: Communication-Graph Metadata in Autonomous Agent Interoperability","version":3},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-06-27T21:42:29.461467Z"},"links":{"cited_paper":"/paper/2505.12490","citing_paper":"/paper/2606.07150"},"observation_digest":"sha256:739db5b4f21835b495d088876e15cbe5a5cdb229fb52e0c7f22fa84eb2a64f6c","observation_id":"c4cfb648-7070-445b-8400-1c3808a6b6c2","resolution":{"observed_at":"2026-07-02T19:07:17.569880Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2505.12490/citation-record","integrity":"/paper/2505.12490/integrity","json":"/paper/2505.12490/citation-record.json","paper":"/paper/2505.12490"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:35:55.767099Z","title":"Agentic ai: Autonomous intelligence for complex goals–a comprehensive survey,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.12490","last_updated":"2025-08-28T20:13:32Z","snapshot_observed_at":"2026-08-17T00:58:48.187939Z","submitted_at":"2025-05-18T16:25:21Z","title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems","version":3},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-15T20:35:55.767099Z"},"links":{"citing_paper":"/paper/2505.12490"},"observation_digest":"sha256:381f2fed0a0d76ed5b38246b4362b22d50990b55fcea2e892cf900e4a402fbd2","observation_id":"ee571820-3233-40a5-8706-28dacabbad5b","resolution":{"observed_at":"2026-08-15T20:35:55.767099Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:35:57.395314Z","title":"Announcing the agent2agent protocol (a2a),","venue":null,"work_id":"37394cde-4986-44cc-89cf-591661afb98b","year":null},"citing_paper":{"arxiv_id":"2505.12490","last_updated":"2025-08-28T20:13:32Z","snapshot_observed_at":"2026-08-17T00:58:48.187939Z","submitted_at":"2025-05-18T16:25:21Z","title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems","version":3},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-15T20:35:55.772723Z"},"links":{"citing_paper":"/paper/2505.12490"},"observation_digest":"sha256:41cb48345ebad14594d384e43476ce9d2066df5087b1d2398d68c5a04902a8f5","observation_id":"6a53e9be-c935-4c9a-8521-17bbc58374e0","resolution":{"observed_at":"2026-08-15T20:35:57.400142Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:35:57.364390Z","title":"Introducing the model context protocol,","venue":null,"work_id":"64d25ae4-c64d-4f6b-b277-b04c11930d33","year":2025},"citing_paper":{"arxiv_id":"2505.12490","last_updated":"2025-08-28T20:13:32Z","snapshot_observed_at":"2026-08-17T00:58:48.187939Z","submitted_at":"2025-05-18T16:25:21Z","title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems","version":3},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-15T20:35:55.782876Z"},"links":{"citing_paper":"/paper/2505.12490"},"observation_digest":"sha256:b0b3600bba9a49f10dbd94e2643781041f5581c0b543e9ecead82c7f00606f4f","observation_id":"2a178086-ec71-4123-99e8-a17bead09aa1","resolution":{"observed_at":"2026-08-15T20:35:57.369541Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.16902","last_updated":"2025-05-02T18:28:07Z","snapshot_observed_at":"2026-08-20T11:11:40.257061Z","submitted_at":"2025-04-23T17:27:49Z","title":"Building A Secure Agentic AI Application Leveraging A2A Protocol","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.16902","snapshot_observed_at":"2026-08-15T20:35:55.787646Z","title":"Building a secure agentic ai application leveraging a2a protocol,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.12490","last_updated":"2025-08-28T20:13:32Z","snapshot_observed_at":"2026-08-17T00:58:48.187939Z","submitted_at":"2025-05-18T16:25:21Z","title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems","version":3},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-15T20:35:55.787646Z"},"links":{"cited_paper":"/paper/2504.16902","citing_paper":"/paper/2505.12490"},"observation_digest":"sha256:f9d81dce4d4497eb8f893910d394df5a77cb0a5f07d8e4fdddc0a86178d444fe","observation_id":"0d9c7592-5d96-4621-935b-ad9fe8fe059d","resolution":{"observed_at":"2026-08-15T20:35:55.787646Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.23278","last_updated":"2025-10-07T07:13:32Z","snapshot_observed_at":"2026-08-23T08:14:33.814382Z","submitted_at":"2025-03-30T01:58:22Z","title":"Model Context Protocol (MCP): Landscape, Security Threats, and Future Research Directions","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.23278","snapshot_observed_at":"2026-08-15T20:35:55.792752Z","title":"Model context protocol (mcp): Landscape, security threats, and future research directions,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.12490","last_updated":"2025-08-28T20:13:32Z","snapshot_observed_at":"2026-08-17T00:58:48.187939Z","submitted_at":"2025-05-18T16:25:21Z","title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems","version":3},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-15T20:35:55.792752Z"},"links":{"cited_paper":"/paper/2503.23278","citing_paper":"/paper/2505.12490"},"observation_digest":"sha256:ac2ba2b1c986c9f6f368eb47ed033a62332ea102a406afb45011d1dded61ea0f","observation_id":"86b22b87-c99b-4312-b2d6-8b813402a6a5","resolution":{"observed_at":"2026-08-15T20:35:55.792752Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:35:57.348846Z","title":"Deep dive: Mcp and a2a attack vectors for ai agents,","venue":null,"work_id":"236c10f3-9bf8-46af-b509-aac1e130797e","year":2025},"citing_paper":{"arxiv_id":"2505.12490","last_updated":"2025-08-28T20:13:32Z","snapshot_observed_at":"2026-08-17T00:58:48.187939Z","submitted_at":"2025-05-18T16:25:21Z","title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems","version":3},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-15T20:35:55.798124Z"},"links":{"citing_paper":"/paper/2505.12490"},"observation_digest":"sha256:db693d72b061b2540e2864dc910294403caa1aa26373db2442e02a165c1ed594","observation_id":"c42ce7f3-c60a-4478-a34c-e32753bb9a36","resolution":{"observed_at":"2026-08-15T20:35:57.353955Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:35:57.333072Z","title":"Ai agents under threat: A survey of key security challenges and future pathways,","venue":null,"work_id":"bf3d3359-01ae-48b5-9d66-52c7a820f16c","year":2025},"citing_paper":{"arxiv_id":"2505.12490","last_updated":"2025-08-28T20:13:32Z","snapshot_observed_at":"2026-08-17T00:58:48.187939Z","submitted_at":"2025-05-18T16:25:21Z","title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems","version":3},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-15T20:35:55.802662Z"},"links":{"citing_paper":"/paper/2505.12490"},"observation_digest":"sha256:7022b075c976f47b956755f785204906f203bffb01860dd1562cbbd1428eaf58","observation_id":"b4e40b6f-34e9-4752-8315-375fde0e1436","resolution":{"observed_at":"2026-08-15T20:35:57.337991Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:35:55.807723Z","title":"Ai agents meet blockchain: A survey on secure and scalable collaboration for multi-agents,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.12490","last_updated":"2025-08-28T20:13:32Z","snapshot_observed_at":"2026-08-17T00:58:48.187939Z","submitted_at":"2025-05-18T16:25:21Z","title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems","version":3},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-15T20:35:55.807723Z"},"links":{"citing_paper":"/paper/2505.12490"},"observation_digest":"sha256:dd687af160daac478dd811709bb57fd66a0c4e34a071621b08f8a3d1c549d3de","observation_id":"44ca7222-3a33-4cf8-bc91-3440233f176e","resolution":{"observed_at":"2026-08-15T20:35:55.807723Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:35:55.812348Z","title":"A survey on model context protocol: Architecture, state-of- the-art, challenges and future directions,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.12490","last_updated":"2025-08-28T20:13:32Z","snapshot_observed_at":"2026-08-17T00:58:48.187939Z","submitted_at":"2025-05-18T16:25:21Z","title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems","version":3},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-15T20:35:55.812348Z"},"links":{"citing_paper":"/paper/2505.12490"},"observation_digest":"sha256:2aef55035cb94ea7d64ebc62dfae58cf00e03974d32a8020b7e6adeec68a7cce","observation_id":"47406299-6016-40e5-a568-3ca413b00045","resolution":{"observed_at":"2026-08-15T20:35:55.812348Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:35:57.297511Z","title":"Enterprise-grade security for the model context protocol (mcp): Frameworks and mitigation strategies,","venue":null,"work_id":"9f977731-9625-4647-874c-ca77447cabc6","year":2025},"citing_paper":{"arxiv_id":"2505.12490","last_updated":"2025-08-28T20:13:32Z","snapshot_observed_at":"2026-08-17T00:58:48.187939Z","submitted_at":"2025-05-18T16:25:21Z","title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems","version":3},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-15T20:35:55.816817Z"},"links":{"citing_paper":"/paper/2505.12490"},"observation_digest":"sha256:ed3c285409c35e9db2ff179aeee2b89928201f03d835fc31409a635e8a884008","observation_id":"3fa207cf-c91f-45dd-b410-754897932859","resolution":{"observed_at":"2026-08-15T20:35:57.302829Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:35:57.280446Z","title":"The OAuth 2.0 Authorization Framework,","venue":null,"work_id":"5f7dc9b5-adab-489c-a73b-77d855cecbc6","year":null},"citing_paper":{"arxiv_id":"2505.12490","last_updated":"2025-08-28T20:13:32Z","snapshot_observed_at":"2026-08-17T00:58:48.187939Z","submitted_at":"2025-05-18T16:25:21Z","title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems","version":3},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-15T20:35:55.821732Z"},"links":{"citing_paper":"/paper/2505.12490"},"observation_digest":"sha256:7d65aa1a15a3fa5e96dd0d0967ae70ad09cf6a24f3fd2880ef6f56f94b109594","observation_id":"7a1c5893-f906-4a08-82a6-d41c16c6963e","resolution":{"observed_at":"2026-08-15T20:35:57.286935Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:35:57.250764Z","title":"JSON Web Token (JWT),","venue":null,"work_id":"6a0f7eba-a146-436a-b4c9-932090d4a4f8","year":2015},"citing_paper":{"arxiv_id":"2505.12490","last_updated":"2025-08-28T20:13:32Z","snapshot_observed_at":"2026-08-17T00:58:48.187939Z","submitted_at":"2025-05-18T16:25:21Z","title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems","version":3},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-15T20:35:55.831081Z"},"links":{"citing_paper":"/paper/2505.12490"},"observation_digest":"sha256:645dfadb25014ecbdfde34a8a905ec88008012101668006e759b0e14681c412d","observation_id":"25d7fc52-4811-40c8-ac8b-93ae2752be66","resolution":{"observed_at":"2026-08-15T20:35:57.255403Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:35:57.235923Z","title":"Multi-agent security tax: Trading off security and collaboration capabilities in multi-agent systems,","venue":null,"work_id":"59507a8a-ad76-48d8-a1c5-5688b2cea049","year":2025},"citing_paper":{"arxiv_id":"2505.12490","last_updated":"2025-08-28T20:13:32Z","snapshot_observed_at":"2026-08-17T00:58:48.187939Z","submitted_at":"2025-05-18T16:25:21Z","title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems","version":3},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-15T20:35:55.835682Z"},"links":{"citing_paper":"/paper/2505.12490"},"observation_digest":"sha256:7dc221f81c96fd45903f0662d5e3c15be1413e3f018b8982a2281cfac2f04435","observation_id":"13609d55-bcc2-4bdf-92fd-b546ab133422","resolution":{"observed_at":"2026-08-15T20:35:57.240731Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2508.12538","last_updated":"2026-05-25T07:08:19Z","snapshot_observed_at":"2026-08-16T00:53:33.343674Z","submitted_at":"2025-08-18T00:23:41Z","title":"MCPXKIT: The Unified Toolkit for Analyzing Model Context Protocol Security","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2508.12538","snapshot_observed_at":"2026-08-15T20:35:55.840495Z","title":"Systematic analysis of mcp security,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.12490","last_updated":"2025-08-28T20:13:32Z","snapshot_observed_at":"2026-08-17T00:58:48.187939Z","submitted_at":"2025-05-18T16:25:21Z","title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems","version":3},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-15T20:35:55.840495Z"},"links":{"cited_paper":"/paper/2508.12538","citing_paper":"/paper/2505.12490"},"observation_digest":"sha256:70c514d6735f047649b0061187253b3a0d4b42c642c3e796ac67c4fea234ec2e","observation_id":"4d5ef43e-c82b-4b0a-813c-cc2b7154c5f8","resolution":{"observed_at":"2026-08-15T20:35:55.840495Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:35:55.845491Z","title":"A survey of llm-driven ai agent communication: Protocols, security risks, and defense countermeasures,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.12490","last_updated":"2025-08-28T20:13:32Z","snapshot_observed_at":"2026-08-17T00:58:48.187939Z","submitted_at":"2025-05-18T16:25:21Z","title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems","version":3},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-15T20:35:55.845491Z"},"links":{"citing_paper":"/paper/2505.12490"},"observation_digest":"sha256:e1c8cf494092917f0a3526fe380756e26ece4f97a247a5898c5486eb333c8e82","observation_id":"c5a15960-b9cc-4fdc-9b9b-47d67663c7f3","resolution":{"observed_at":"2026-08-15T20:35:55.845491Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:35:55.850097Z","title":"From prompt injections to protocol exploits: Threats in llm-powered ai agents workflows,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.12490","last_updated":"2025-08-28T20:13:32Z","snapshot_observed_at":"2026-08-17T00:58:48.187939Z","submitted_at":"2025-05-18T16:25:21Z","title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems","version":3},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-15T20:35:55.850097Z"},"links":{"citing_paper":"/paper/2505.12490"},"observation_digest":"sha256:12388756be07bbb6c7e4a4ff70b62e271126e6cce5ec1c56e7bf7a3712a9c221","observation_id":"22b62759-9b6f-4cd6-b8dd-22c76fbffdcc","resolution":{"observed_at":"2026-08-15T20:35:55.850097Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:35:57.220468Z","title":"Agentic misalignment: How llms could be insider threats,","venue":null,"work_id":"680a0ad2-956c-4b31-be0c-e0f129890532","year":null},"citing_paper":{"arxiv_id":"2505.12490","last_updated":"2025-08-28T20:13:32Z","snapshot_observed_at":"2026-08-17T00:58:48.187939Z","submitted_at":"2025-05-18T16:25:21Z","title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems","version":3},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-15T20:35:55.854866Z"},"links":{"citing_paper":"/paper/2505.12490"},"observation_digest":"sha256:567ed28a2749ca436627816cc37600b43e81e27639858604f464ad42c4129e8d","observation_id":"7711cb76-89d2-4a1d-b673-0e7a1e0bccde","resolution":{"observed_at":"2026-08-15T20:35:57.225620Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:35:57.190373Z","title":"Ai coding tool wipes production database, fabricates 4,000 users, and lies to cover its tracks,","venue":null,"work_id":"fe0e0131-3bef-4794-85e5-5c2eec7d7702","year":2025},"citing_paper":{"arxiv_id":"2505.12490","last_updated":"2025-08-28T20:13:32Z","snapshot_observed_at":"2026-08-17T00:58:48.187939Z","submitted_at":"2025-05-18T16:25:21Z","title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems","version":3},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-15T20:35:55.865128Z"},"links":{"citing_paper":"/paper/2505.12490"},"observation_digest":"sha256:9b139729619a83a1f59efe1a073e3825ff52dc83084dd44e88c4e3e2bec67cd1","observation_id":"76db316e-d3f1-48ed-9cb4-b6236b30a44f","resolution":{"observed_at":"2026-08-15T20:35:57.195264Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:35:57.174580Z","title":"When llms autonomously attack,","venue":null,"work_id":"070a69ed-5fe6-4dc1-bc2b-fa8c3d1937dd","year":2025},"citing_paper":{"arxiv_id":"2505.12490","last_updated":"2025-08-28T20:13:32Z","snapshot_observed_at":"2026-08-17T00:58:48.187939Z","submitted_at":"2025-05-18T16:25:21Z","title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems","version":3},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-15T20:35:55.869908Z"},"links":{"citing_paper":"/paper/2505.12490"},"observation_digest":"sha256:9c6d4f54304c3fd01499767f056634778022d43dc59f4709419c8c7f5e33fb95","observation_id":"b204e2a0-5376-44f9-ad51-9dc11b6dbd12","resolution":{"observed_at":"2026-08-15T20:35:57.180247Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:35:57.205320Z","title":"Available: https://www.anthropic.com/research/agentic- misalignment","venue":null,"work_id":"f0a02ae4-c47b-49e1-9629-fee0438e3a01","year":null},"citing_paper":{"arxiv_id":"2505.12490","last_updated":"2025-08-28T20:13:32Z","snapshot_observed_at":"2026-08-17T00:58:48.187939Z","submitted_at":"2025-05-18T16:25:21Z","title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems","version":3},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-15T20:35:55.859958Z"},"links":{"citing_paper":"/paper/2505.12490"},"observation_digest":"sha256:dc68553f3ec623f9cbdd39b10cd8bacff949e6d9eb034463c6d2be27b475af31","observation_id":"6cdbe510-e810-4031-a2b8-a8b3dbaac13f","resolution":{"observed_at":"2026-08-15T20:35:57.210531Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:35:57.144582Z","title":"Scamlexity: When agentic ai browsers clicked, paid, and failed,","venue":null,"work_id":"5b8517c4-e6f8-4105-8dc4-fcc65593aff6","year":2025},"citing_paper":{"arxiv_id":"2505.12490","last_updated":"2025-08-28T20:13:32Z","snapshot_observed_at":"2026-08-17T00:58:48.187939Z","submitted_at":"2025-05-18T16:25:21Z","title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems","version":3},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-15T20:35:55.878783Z"},"links":{"citing_paper":"/paper/2505.12490"},"observation_digest":"sha256:a999a70778b1d2bd49261916dea94d7778125b8d5717e2cf388c79e5c7f419da","observation_id":"66b27b24-6689-4f0e-a882-c00afbfefbc7","resolution":{"observed_at":"2026-08-15T20:35:57.149530Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2508.14231","last_updated":"2025-08-19T19:39:37Z","snapshot_observed_at":"2026-08-20T11:14:38.645992Z","submitted_at":"2025-08-19T19:39:37Z","title":"Incident Analysis for AI Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2508.14231","snapshot_observed_at":"2026-08-15T20:35:55.883304Z","title":"Incident analysis for ai agents,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.12490","last_updated":"2025-08-28T20:13:32Z","snapshot_observed_at":"2026-08-17T00:58:48.187939Z","submitted_at":"2025-05-18T16:25:21Z","title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems","version":3},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-15T20:35:55.883304Z"},"links":{"cited_paper":"/paper/2508.14231","citing_paper":"/paper/2505.12490"},"observation_digest":"sha256:fa98107bb8b9d9b340e767e60512429cbafd1c751f8e94331220cabdd4c61234","observation_id":"75291424-e7ce-4f3d-9863-b08ae7c49f4e","resolution":{"observed_at":"2026-08-15T20:35:55.883304Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:35:57.159551Z","title":"Applestorm: Investigating 13 privacy risks in apple intelligence and siri,","venue":null,"work_id":"3ec44b0c-f5fa-4338-9740-2f732c5e5d5b","year":2025},"citing_paper":{"arxiv_id":"2505.12490","last_updated":"2025-08-28T20:13:32Z","snapshot_observed_at":"2026-08-17T00:58:48.187939Z","submitted_at":"2025-05-18T16:25:21Z","title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems","version":3},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-15T20:35:55.874428Z"},"links":{"citing_paper":"/paper/2505.12490"},"observation_digest":"sha256:6938d3c429d9d8a8fdaf13934f83520b7a0d3fdceb54b12e4609a1cfb0944cd0","observation_id":"c1217b76-0a24-4696-926e-9d98272fd29a","resolution":{"observed_at":"2026-08-15T20:35:57.164472Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:35:55.892315Z","title":"Is your prompt safe? investigating prompt injection attacks against open-source llms,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.12490","last_updated":"2025-08-28T20:13:32Z","snapshot_observed_at":"2026-08-17T00:58:48.187939Z","submitted_at":"2025-05-18T16:25:21Z","title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems","version":3},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-15T20:35:55.892315Z"},"links":{"citing_paper":"/paper/2505.12490"},"observation_digest":"sha256:f639e333913d653f7bbeb5eb55550825eb11260f8348811c733fa40bbe00e935","observation_id":"e06884a5-a975-47cf-9d56-f0df1ae19fbf","resolution":{"observed_at":"2026-08-15T20:35:55.892315Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-15T10:52:39.381322Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.01055","snapshot_observed_at":"2026-08-15T20:35:55.897109Z","title":"Simple prompt injection attacks can leak personal data observed by llm agents during task execution,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.12490","last_updated":"2025-08-28T20:13:32Z","snapshot_observed_at":"2026-08-17T00:58:48.187939Z","submitted_at":"2025-05-18T16:25:21Z","title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems","version":3},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-15T20:35:55.897109Z"},"links":{"cited_paper":"/paper/2506.01055","citing_paper":"/paper/2505.12490"},"observation_digest":"sha256:aae6b1749e84668a5989e956feab0a57ee4c03ebdb106a955f4eb4b879eadcbd","observation_id":"8fbfceb6-2ac0-40c6-b041-4553dd2a324f","resolution":{"observed_at":"2026-08-15T20:35:55.897109Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2306.05499","last_updated":"2025-12-29T02:25:27Z","snapshot_observed_at":"2026-08-21T23:11:31.486806Z","submitted_at":"2023-06-08T18:43:11Z","title":"Prompt Injection attack against LLM-integrated Applications","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.05499","snapshot_observed_at":"2026-08-15T20:35:55.888164Z","title":"Prompt injection attack against llm-integrated applications,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.12490","last_updated":"2025-08-28T20:13:32Z","snapshot_observed_at":"2026-08-17T00:58:48.187939Z","submitted_at":"2025-05-18T16:25:21Z","title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems","version":3},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-15T20:35:55.888164Z"},"links":{"cited_paper":"/paper/2306.05499","citing_paper":"/paper/2505.12490"},"observation_digest":"sha256:1974e4b0fc34479eb0e28b6b40dd75edd576030a9b87c7dd97328828f0af7ebf","observation_id":"358abcf2-5317-4f9d-b4d8-798f8c655c35","resolution":{"observed_at":"2026-08-15T20:35:55.888164Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:35:57.113754Z","title":"Cve-2025-1198: Gitlab personal access token revocation bypass via ac- tioncable,","venue":null,"work_id":"0bda911e-9aad-41d0-b867-67819565db39","year":2025},"citing_paper":{"arxiv_id":"2505.12490","last_updated":"2025-08-28T20:13:32Z","snapshot_observed_at":"2026-08-17T00:58:48.187939Z","submitted_at":"2025-05-18T16:25:21Z","title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems","version":3},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-15T20:35:55.906196Z"},"links":{"citing_paper":"/paper/2505.12490"},"observation_digest":"sha256:5736fce9cf8de6e4ec79cdf94d3cab89b1748ff041b8362928d036815bcc7559","observation_id":"e5148eb4-9d6b-4125-9391-9aa3e75a80c8","resolution":{"observed_at":"2026-08-15T20:35:57.118698Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:35:57.098613Z","title":"Cve-2025-1801: Jwt exposure via race condition in ansible gateway,","venue":null,"work_id":"81046a12-71ab-4850-8571-3e77b5fcfce8","year":2025},"citing_paper":{"arxiv_id":"2505.12490","last_updated":"2025-08-28T20:13:32Z","snapshot_observed_at":"2026-08-17T00:58:48.187939Z","submitted_at":"2025-05-18T16:25:21Z","title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems","version":3},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-15T20:35:55.910648Z"},"links":{"citing_paper":"/paper/2505.12490"},"observation_digest":"sha256:7b46d1532a5ff63f023c6d2dfd037783ab4d24a7ecccbed65bf4314806ad8555","observation_id":"f2794214-7933-4b2d-bf88-05b8769ef1c6","resolution":{"observed_at":"2026-08-15T20:35:57.103563Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:35:57.129120Z","title":"Agnet: A novel ai agent network architec- ture,","venue":null,"work_id":"66acfa3b-92e8-47a8-a51d-a936ed548335","year":2024},"citing_paper":{"arxiv_id":"2505.12490","last_updated":"2025-08-28T20:13:32Z","snapshot_observed_at":"2026-08-17T00:58:48.187939Z","submitted_at":"2025-05-18T16:25:21Z","title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems","version":3},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-15T20:35:55.901843Z"},"links":{"citing_paper":"/paper/2505.12490"},"observation_digest":"sha256:dcdf3c8de0000a902ecc3c98d53e6f46f49daf9247fe322d3ab487a395349393","observation_id":"2a5a0581-08c6-4bc1-b181-698cab7eaf54","resolution":{"observed_at":"2026-08-15T20:35:57.134027Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:35:57.068439Z","title":"Hybrid privacy-preserving access control mechanism using blockchain and attribute-based access control for smart home,","venue":null,"work_id":"444bb28f-8891-4c0b-9809-2b036fa7a66b","year":2024},"citing_paper":{"arxiv_id":"2505.12490","last_updated":"2025-08-28T20:13:32Z","snapshot_observed_at":"2026-08-17T00:58:48.187939Z","submitted_at":"2025-05-18T16:25:21Z","title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems","version":3},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-15T20:35:55.920078Z"},"links":{"citing_paper":"/paper/2505.12490"},"observation_digest":"sha256:f8572d3f0b31465085a1a6a251f77b7b85cd75d1e65ef2a83277b4b1095b4b78","observation_id":"a3b85a8e-615d-49d1-a48a-c3f89b7bd024","resolution":{"observed_at":"2026-08-15T20:35:57.073259Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.19951","last_updated":"2025-04-28T16:22:21Z","snapshot_observed_at":"2026-08-20T06:23:07.754347Z","submitted_at":"2025-04-28T16:22:21Z","title":"Securing GenAI Multi-Agent Systems Against Tool Squatting: A Zero Trust Registry-Based Approach","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.19951","snapshot_observed_at":"2026-08-15T20:35:55.924297Z","title":"Securing genai multi-agent systems against tool squatting: A zero trust registry-based approach,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.12490","last_updated":"2025-08-28T20:13:32Z","snapshot_observed_at":"2026-08-17T00:58:48.187939Z","submitted_at":"2025-05-18T16:25:21Z","title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems","version":3},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-15T20:35:55.924297Z"},"links":{"cited_paper":"/paper/2504.19951","citing_paper":"/paper/2505.12490"},"observation_digest":"sha256:40ecca5a2b91100435374f4da5dadb76d9f502e67a6959283f90eb0933be7272","observation_id":"dc1de91a-99f4-4410-a884-06a4ad494e29","resolution":{"observed_at":"2026-08-15T20:35:55.924297Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:35:57.083511Z","title":"Actions speak louder than passwords: Dynamic identity for machine-to-machine communication,","venue":null,"work_id":"f4406158-ec7c-4838-9e18-ddbde1cdab42","year":2023},"citing_paper":{"arxiv_id":"2505.12490","last_updated":"2025-08-28T20:13:32Z","snapshot_observed_at":"2026-08-17T00:58:48.187939Z","submitted_at":"2025-05-18T16:25:21Z","title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems","version":3},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-15T20:35:55.915689Z"},"links":{"citing_paper":"/paper/2505.12490"},"observation_digest":"sha256:6858ce58741102cfe3b8fd9001cadf2b4f892c9a48af4444e274ba1e919a7da0","observation_id":"b7208411-c4c3-4164-a9f7-d0b4b1763a6e","resolution":{"observed_at":"2026-08-15T20:35:57.088698Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:35:57.053240Z","title":"Identity theft: a small step towards big financial crimes,","venue":null,"work_id":"b517d3ee-ad20-433d-b26c-d84fc8b9b91d","year":2020},"citing_paper":{"arxiv_id":"2505.12490","last_updated":"2025-08-28T20:13:32Z","snapshot_observed_at":"2026-08-17T00:58:48.187939Z","submitted_at":"2025-05-18T16:25:21Z","title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems","version":3},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-15T20:35:55.934086Z"},"links":{"citing_paper":"/paper/2505.12490"},"observation_digest":"sha256:acd91551c70be3c6f6b481053e0510f4d4958df6a0ab19af95946098e44b1dea","observation_id":"118b2384-3c88-4f69-9cfc-5b09fd3fc257","resolution":{"observed_at":"2026-08-15T20:35:57.058199Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:35:57.037516Z","title":"Multifactor authentication could have prevented 9.7 million record medibank data breach,","venue":null,"work_id":"b8a6bba5-8bef-4c73-a55a-a04cdb06c785","year":2022},"citing_paper":{"arxiv_id":"2505.12490","last_updated":"2025-08-28T20:13:32Z","snapshot_observed_at":"2026-08-17T00:58:48.187939Z","submitted_at":"2025-05-18T16:25:21Z","title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems","version":3},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-15T20:35:55.938748Z"},"links":{"citing_paper":"/paper/2505.12490"},"observation_digest":"sha256:ea1495f39958667d4cccaebce001569b991a805aa82711e5a4db2cf76971235a","observation_id":"7617c0b5-5477-4ca1-92c7-4313e95f40d1","resolution":{"observed_at":"2026-08-15T20:35:57.042292Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.15271","last_updated":"2024-03-22T15:15:28Z","snapshot_observed_at":"2026-08-20T11:14:39.224723Z","submitted_at":"2024-03-22T15:15:28Z","title":"From Hardware Fingerprint to Access Token: Enhancing the Authentication on IoT Devices","version":1},"cited_work":{"arxiv_id":"2403.15271","doi":null,"metadata_source":"pith","pith_arxiv_id":"2403.15271","snapshot_observed_at":"2026-08-15T20:35:56.319514Z","title":"From Hardware Fingerprint to Access Token: Enhancing the Authentication on IoT Devices","venue":"cs.CR","work_id":"7ffdfda4-7580-4bf3-aa81-3fa7a8c86875","year":2024},"citing_paper":{"arxiv_id":"2505.12490","last_updated":"2025-08-28T20:13:32Z","snapshot_observed_at":"2026-08-17T00:58:48.187939Z","submitted_at":"2025-05-18T16:25:21Z","title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems","version":3},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-15T20:35:55.928902Z"},"links":{"cited_paper":"/paper/2403.15271","citing_paper":"/paper/2505.12490"},"observation_digest":"sha256:3be4012b44810c1cc6ee21380d1a3733a359873c833a1ca9bc934a40e94cf7e6","observation_id":"c3ed85ef-f617-4430-9393-3ceab4ff1f58","resolution":{"observed_at":"2026-08-15T20:35:56.324493Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:35:57.006673Z","title":"A trustworthy and untraceable centralised payment protocol for mobile payment,","venue":null,"work_id":"f20c7252-4c45-46c5-88b8-c67ccf68652d","year":2025},"citing_paper":{"arxiv_id":"2505.12490","last_updated":"2025-08-28T20:13:32Z","snapshot_observed_at":"2026-08-17T00:58:48.187939Z","submitted_at":"2025-05-18T16:25:21Z","title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems","version":3},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-15T20:35:55.947807Z"},"links":{"citing_paper":"/paper/2505.12490"},"observation_digest":"sha256:71cb58b25914640a381ae3ca60b1a07d51d7c1cbecf156e8314d816647df1f42","observation_id":"a8660990-5b59-4d21-b1b3-b3dbfd3ae33f","resolution":{"observed_at":"2026-08-15T20:35:57.011704Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:35:56.991610Z","title":"Bauth-zkp—a blockchain-based multi-factor authentication mechanism for securing smart cities,","venue":null,"work_id":"38cc032f-216f-4027-819a-4bc0e54ba744","year":2023},"citing_paper":{"arxiv_id":"2505.12490","last_updated":"2025-08-28T20:13:32Z","snapshot_observed_at":"2026-08-17T00:58:48.187939Z","submitted_at":"2025-05-18T16:25:21Z","title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems","version":3},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-15T20:35:55.953081Z"},"links":{"citing_paper":"/paper/2505.12490"},"observation_digest":"sha256:ce94e80d5e39f55e8e96c574cfba3a1d8158fa132858ad2fc5c8e854f2a17857","observation_id":"c11bffba-4eb5-47c6-a3b4-ac1206325662","resolution":{"observed_at":"2026-08-15T20:35:56.996325Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:35:57.022083Z","title":"Cwe-306: Missing authentication for critical function,","venue":null,"work_id":"2c866742-b029-42ec-a56a-004f0d5cef28","year":2024},"citing_paper":{"arxiv_id":"2505.12490","last_updated":"2025-08-28T20:13:32Z","snapshot_observed_at":"2026-08-17T00:58:48.187939Z","submitted_at":"2025-05-18T16:25:21Z","title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems","version":3},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-15T20:35:55.943280Z"},"links":{"citing_paper":"/paper/2505.12490"},"observation_digest":"sha256:3328ca5bb30e959b43ec663097080b3104ca0c8ef883637034ddedd2777584fe","observation_id":"6544dc0c-234a-4c07-9d81-4a8a3602a42c","resolution":{"observed_at":"2026-08-15T20:35:57.027128Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:35:56.961610Z","title":"A systematic study of the consistency of two-factor authentication user journeys on top-ranked websites,","venue":null,"work_id":"961a419f-b254-4995-9ea2-d29f9baeca96","year":2023},"citing_paper":{"arxiv_id":"2505.12490","last_updated":"2025-08-28T20:13:32Z","snapshot_observed_at":"2026-08-17T00:58:48.187939Z","submitted_at":"2025-05-18T16:25:21Z","title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems","version":3},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-15T20:35:55.962959Z"},"links":{"citing_paper":"/paper/2505.12490"},"observation_digest":"sha256:d5768f180138247c487d59835aa1068bffc0132b12be0ecc82fcc75c4dd9af38","observation_id":"4e6d14c5-6f36-44c5-8107-5f422eac6da0","resolution":{"observed_at":"2026-08-15T20:35:56.966843Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:35:56.946938Z","title":"Cve-2023-4456: Lokistack token cache scope vulnerability,","venue":null,"work_id":"8740334e-6afd-4bff-ad5a-f8f7316e6a0b","year":2023},"citing_paper":{"arxiv_id":"2505.12490","last_updated":"2025-08-28T20:13:32Z","snapshot_observed_at":"2026-08-17T00:58:48.187939Z","submitted_at":"2025-05-18T16:25:21Z","title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems","version":3},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-15T20:35:55.967663Z"},"links":{"citing_paper":"/paper/2505.12490"},"observation_digest":"sha256:f500590661f98c87742fb58a78d1bb7b911911f4176f12dae30f0dec3f44077d","observation_id":"5e454bad-29cf-4e5f-9988-9d167852ce70","resolution":{"observed_at":"2026-08-15T20:35:56.951823Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:35:56.977040Z","title":"Robust biometric scheme against replay attacks using one-time biometric templates,","venue":null,"work_id":"a87a6936-a1f4-4294-9cd4-2822d35d7d0a","year":2024},"citing_paper":{"arxiv_id":"2505.12490","last_updated":"2025-08-28T20:13:32Z","snapshot_observed_at":"2026-08-17T00:58:48.187939Z","submitted_at":"2025-05-18T16:25:21Z","title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems","version":3},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-15T20:35:55.958127Z"},"links":{"citing_paper":"/paper/2505.12490"},"observation_digest":"sha256:805476658641eac8795b047cfcbbaf38e5caaef37524f0963517ada591dfb5fd","observation_id":"31edb8d8-7335-4649-a9e1-a601de42c084","resolution":{"observed_at":"2026-08-15T20:35:56.981928Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:35:56.917044Z","title":"Stateful least privilege authorization for the cloud,","venue":null,"work_id":"268cc2ec-d15e-482f-9fcc-36158ced28ad","year":2024},"citing_paper":{"arxiv_id":"2505.12490","last_updated":"2025-08-28T20:13:32Z","snapshot_observed_at":"2026-08-17T00:58:48.187939Z","submitted_at":"2025-05-18T16:25:21Z","title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems","version":3},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-15T20:35:55.976846Z"},"links":{"citing_paper":"/paper/2505.12490"},"observation_digest":"sha256:69f7a2ba4581f8aec2e57c4a63b59468a22dc83d98f0ce97b1e6d3e5ef027612","observation_id":"5d0d0d6c-c20e-4bae-962b-31244ffd9c4d","resolution":{"observed_at":"2026-08-15T20:35:56.921874Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2501.09674","last_updated":"2025-01-16T17:11:21Z","snapshot_observed_at":"2026-08-20T04:56:48.360693Z","submitted_at":"2025-01-16T17:11:21Z","title":"Authenticated Delegation and Authorized AI Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.09674","snapshot_observed_at":"2026-08-15T20:35:55.981252Z","title":"Authenticated delegation and autho- rized ai agents,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.12490","last_updated":"2025-08-28T20:13:32Z","snapshot_observed_at":"2026-08-17T00:58:48.187939Z","submitted_at":"2025-05-18T16:25:21Z","title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems","version":3},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-15T20:35:55.981252Z"},"links":{"cited_paper":"/paper/2501.09674","citing_paper":"/paper/2505.12490"},"observation_digest":"sha256:9270572b67eaeee17788ed4fa1abe4efbe9f7fa184f83827c8eacaafdf2dde0e","observation_id":"8a583d0d-c67e-4ecd-84af-14db37789a21","resolution":{"observed_at":"2026-08-15T20:35:55.981252Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:35:56.932106Z","title":"Cwe-1220: Insufficient granularity of access control,","venue":null,"work_id":"07337cd8-747e-49bc-9c63-8abc074eca2b","year":2024},"citing_paper":{"arxiv_id":"2505.12490","last_updated":"2025-08-28T20:13:32Z","snapshot_observed_at":"2026-08-17T00:58:48.187939Z","submitted_at":"2025-05-18T16:25:21Z","title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems","version":3},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-15T20:35:55.972363Z"},"links":{"citing_paper":"/paper/2505.12490"},"observation_digest":"sha256:9f30c65e1228035d99bac7e8847d76c54f53981df9aa0e09775dc6967f156b2c","observation_id":"e9cdcde2-e1d0-41fd-951a-fea285775c18","resolution":{"observed_at":"2026-08-15T20:35:56.937019Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:35:56.886922Z","title":"A zero trust single sign-on framework with attribute-based access control,","venue":null,"work_id":"6ac8cbd0-7400-44a2-8b8b-fb74ff1adef5","year":2024},"citing_paper":{"arxiv_id":"2505.12490","last_updated":"2025-08-28T20:13:32Z","snapshot_observed_at":"2026-08-17T00:58:48.187939Z","submitted_at":"2025-05-18T16:25:21Z","title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems","version":3},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-15T20:35:55.990671Z"},"links":{"citing_paper":"/paper/2505.12490"},"observation_digest":"sha256:ed8f4a5a1dc5ab3017a52b43f320df4194fbe44996b618410463ab7b65fc94da","observation_id":"c852273a-f27b-482c-9b46-809b05e1f613","resolution":{"observed_at":"2026-08-15T20:35:56.891968Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:35:56.871367Z","title":"Cve-2024-44131: Tcc bypass vulnerability in macos/ios fileprovider,","venue":null,"work_id":"670cab9b-5473-4f01-84ce-88070a939625","year":2024},"citing_paper":{"arxiv_id":"2505.12490","last_updated":"2025-08-28T20:13:32Z","snapshot_observed_at":"2026-08-17T00:58:48.187939Z","submitted_at":"2025-05-18T16:25:21Z","title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems","version":3},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-15T20:35:55.995097Z"},"links":{"citing_paper":"/paper/2505.12490"},"observation_digest":"sha256:a6ee435b110609fed515942c26fb14a11ea4bfd600f1eda2a8b0c117619d24e2","observation_id":"fd1c8ac7-59fc-4d78-abd2-01e428e0ac92","resolution":{"observed_at":"2026-08-15T20:35:56.876484Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:35:56.902059Z","title":"Everybody’s looking for ssomething: A large-scale evaluation on the privacy of oauth authenti- cation on the web,","venue":null,"work_id":"5f73b175-f7ce-4efe-9c18-78fc42a8716b","year":2023},"citing_paper":{"arxiv_id":"2505.12490","last_updated":"2025-08-28T20:13:32Z","snapshot_observed_at":"2026-08-17T00:58:48.187939Z","submitted_at":"2025-05-18T16:25:21Z","title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems","version":3},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-15T20:35:55.985958Z"},"links":{"citing_paper":"/paper/2505.12490"},"observation_digest":"sha256:2377db007accf3c89a91d167c902a885cf51944349e8d5df7fd9773ffd565df3","observation_id":"efc4ec00-2057-40a5-a24d-b3c96874af5b","resolution":{"observed_at":"2026-08-15T20:35:56.907104Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:35:56.839245Z","title":"A smart contract- based dynamic consent management system for personal data usage under gdpr,","venue":null,"work_id":"3a1c8534-9179-4024-b373-ec913a165c4d","year":2021},"citing_paper":{"arxiv_id":"2505.12490","last_updated":"2025-08-28T20:13:32Z","snapshot_observed_at":"2026-08-17T00:58:48.187939Z","submitted_at":"2025-05-18T16:25:21Z","title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems","version":3},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-15T20:35:56.004269Z"},"links":{"citing_paper":"/paper/2505.12490"},"observation_digest":"sha256:c836bff10577974ecdb4e97c2a2b77e5752ec4f737224c127eff69d4d7d886e1","observation_id":"2a9912b2-8f55-4f3d-9ad4-12d351214ed2","resolution":{"observed_at":"2026-08-15T20:35:56.844394Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:35:56.824413Z","title":null,"venue":null,"work_id":"e1048ba0-d71f-4068-a5b6-01bd27f0a71e","year":2023},"citing_paper":{"arxiv_id":"2505.12490","last_updated":"2025-08-28T20:13:32Z","snapshot_observed_at":"2026-08-17T00:58:48.187939Z","submitted_at":"2025-05-18T16:25:21Z","title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems","version":3},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-15T20:35:56.009057Z"},"links":{"citing_paper":"/paper/2505.12490"},"observation_digest":"sha256:eecc0e5cee322194c2984fc4b73acbb83569d4acd25265d3cfc050f98c51c49f","observation_id":"12d2e6eb-1c11-41d1-a514-5fbaa1cca798","resolution":{"observed_at":"2026-08-15T20:35:56.829097Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:35:56.855421Z","title":"Cwe-200: Exposure of sensitive information to an unauthorized actor,","venue":null,"work_id":"5eba7940-98f0-46ee-af18-6ed3d19e5cb8","year":2024},"citing_paper":{"arxiv_id":"2505.12490","last_updated":"2025-08-28T20:13:32Z","snapshot_observed_at":"2026-08-17T00:58:48.187939Z","submitted_at":"2025-05-18T16:25:21Z","title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems","version":3},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-15T20:35:55.999815Z"},"links":{"citing_paper":"/paper/2505.12490"},"observation_digest":"sha256:3bb81e357953ab197e4c148fa3e363fdb5ea81c5437812dc78caa681ecba04f6","observation_id":"ff29bbb4-2933-4d3c-9345-22fda8803136","resolution":{"observed_at":"2026-08-15T20:35:56.860694Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:35:56.793937Z","title":"Privacy for iot: informed consent management in smart buildings,","venue":null,"work_id":"19d4c407-d4ff-4cf1-8100-816c32518ba5","year":2023},"citing_paper":{"arxiv_id":"2505.12490","last_updated":"2025-08-28T20:13:32Z","snapshot_observed_at":"2026-08-17T00:58:48.187939Z","submitted_at":"2025-05-18T16:25:21Z","title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems","version":3},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-15T20:35:56.018387Z"},"links":{"citing_paper":"/paper/2505.12490"},"observation_digest":"sha256:c220156241a02bec2f4bf635d6557eb380bca7fae2fcafe728ab123461f63c66","observation_id":"5f7220a8-2a1e-4c38-abfb-ca7d3f316b48","resolution":{"observed_at":"2026-08-15T20:35:56.799310Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:35:56.779144Z","title":"Cve-2023-41745: Excessive system data collection in acronis agent,","venue":null,"work_id":"792d23f0-1e0a-44e6-8fcf-b19c4e08cbf2","year":2023},"citing_paper":{"arxiv_id":"2505.12490","last_updated":"2025-08-28T20:13:32Z","snapshot_observed_at":"2026-08-17T00:58:48.187939Z","submitted_at":"2025-05-18T16:25:21Z","title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems","version":3},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-15T20:35:56.022837Z"},"links":{"citing_paper":"/paper/2505.12490"},"observation_digest":"sha256:099c0ced79809c7d936599c824a65c65f5c38747844762b6493f951c74e2bcb2","observation_id":"0e0b10b1-1eea-43bb-87ac-ab1b9629167d","resolution":{"observed_at":"2026-08-15T20:35:56.784037Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:35:56.809512Z","title":"Safeguard privacy for mini- mal data collection with trustworthy autonomous agents,","venue":null,"work_id":"54e5ad02-2c2b-44ad-9f63-a0240ab35ea7","year":2024},"citing_paper":{"arxiv_id":"2505.12490","last_updated":"2025-08-28T20:13:32Z","snapshot_observed_at":"2026-08-17T00:58:48.187939Z","submitted_at":"2025-05-18T16:25:21Z","title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems","version":3},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-15T20:35:56.013741Z"},"links":{"citing_paper":"/paper/2505.12490"},"observation_digest":"sha256:34970c08c20bf5eaccba31f908fd43818e579b4ac85dc95e12ace16402870c3e","observation_id":"b54e80af-711f-48aa-b4f0-16fd2fb00026","resolution":{"observed_at":"2026-08-15T20:35:56.814243Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.02077","last_updated":"2026-04-29T10:47:33Z","snapshot_observed_at":"2026-08-14T09:14:00.327752Z","submitted_at":"2025-05-04T12:03:29Z","title":"Open Challenges in Multi-Agent Security: Towards Secure Systems of Interacting AI Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.02077","snapshot_observed_at":"2026-08-15T20:35:56.031978Z","title":"Open challenges in multi-agent security: Towards secure systems of interacting ai agents,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.12490","last_updated":"2025-08-28T20:13:32Z","snapshot_observed_at":"2026-08-17T00:58:48.187939Z","submitted_at":"2025-05-18T16:25:21Z","title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems","version":3},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-15T20:35:56.031978Z"},"links":{"cited_paper":"/paper/2505.02077","citing_paper":"/paper/2505.12490"},"observation_digest":"sha256:f87f97867338f22f9725c4786f90f993d0c4fec99b389bde00ff2c407737e3fe","observation_id":"49769df0-2a32-49ac-9937-3b9ccbfbdf86","resolution":{"observed_at":"2026-08-15T20:35:56.031978Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:35:56.748131Z","title":"Cve-2024-7042: Langchain prompt injection in graphcypherqachain,","venue":null,"work_id":"0d77de80-d6d9-4ff4-af12-11194bb6e20d","year":2024},"citing_paper":{"arxiv_id":"2505.12490","last_updated":"2025-08-28T20:13:32Z","snapshot_observed_at":"2026-08-17T00:58:48.187939Z","submitted_at":"2025-05-18T16:25:21Z","title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems","version":3},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-15T20:35:56.036774Z"},"links":{"citing_paper":"/paper/2505.12490"},"observation_digest":"sha256:e3d0bd7c6f7d0ecd38dccd60c68fe37236f61a121891b809637d34f7520fcfff","observation_id":"23b3ed0a-6897-40d7-912e-2fb60c55b21e","resolution":{"observed_at":"2026-08-15T20:35:56.753209Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:35:56.763714Z","title":"Cve-2022-45449: Over-privileged access control in acronis cyber pro- tect,","venue":null,"work_id":"f63bcce9-2a53-4a00-94fb-619970bd8ff1","year":2022},"citing_paper":{"arxiv_id":"2505.12490","last_updated":"2025-08-28T20:13:32Z","snapshot_observed_at":"2026-08-17T00:58:48.187939Z","submitted_at":"2025-05-18T16:25:21Z","title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems","version":3},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-15T20:35:56.027401Z"},"links":{"citing_paper":"/paper/2505.12490"},"observation_digest":"sha256:59da84fa80c422ed0a1950b316ed7c4ef9b55714cd8af97471c59b06f1b3022b","observation_id":"44ecd683-10d1-4e49-9278-5abf91dddbd7","resolution":{"observed_at":"2026-08-15T20:35:56.768705Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"ba-p/1227143","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:35:56.263122Z","title":"Mcp security exposed: What you need to know now,","venue":null,"work_id":"d7900eb2-4c77-45cb-8296-c84441838e90","year":2025},"citing_paper":{"arxiv_id":"2505.12490","last_updated":"2025-08-28T20:13:32Z","snapshot_observed_at":"2026-08-17T00:58:48.187939Z","submitted_at":"2025-05-18T16:25:21Z","title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems","version":3},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-15T20:35:56.046048Z"},"links":{"citing_paper":"/paper/2505.12490"},"observation_digest":"sha256:f374c5c25d53d2890154af594d14cfe322d804444baa74ee845e7dc229225538","observation_id":"7b8ad4a1-042f-4414-ade3-769a3a6c9cb9","resolution":{"observed_at":"2026-08-15T20:35:56.273867Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:35:56.714993Z","title":"Role of authentication factors in fin-tech mobile transaction security,","venue":null,"work_id":"5e2c1958-1752-4688-a58c-632f450d68d7","year":2023},"citing_paper":{"arxiv_id":"2505.12490","last_updated":"2025-08-28T20:13:32Z","snapshot_observed_at":"2026-08-17T00:58:48.187939Z","submitted_at":"2025-05-18T16:25:21Z","title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems","version":3},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-15T20:35:56.050832Z"},"links":{"citing_paper":"/paper/2505.12490"},"observation_digest":"sha256:190a04de5ec38e448b99537a69ba8856132e4e2732f3711ed153d6c8a82297e4","observation_id":"28b640d1-7375-4336-ade4-72335da68cd1","resolution":{"observed_at":"2026-08-15T20:35:56.720495Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:35:56.731425Z","title":"Cve-2024-45989: Prompt injection exposing chat data in monica ai,","venue":null,"work_id":"f520c485-d4f2-4c57-a0a5-d93b9c562aa4","year":2024},"citing_paper":{"arxiv_id":"2505.12490","last_updated":"2025-08-28T20:13:32Z","snapshot_observed_at":"2026-08-17T00:58:48.187939Z","submitted_at":"2025-05-18T16:25:21Z","title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems","version":3},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-15T20:35:56.041433Z"},"links":{"citing_paper":"/paper/2505.12490"},"observation_digest":"sha256:1e937bba558a92ccbd0f0c77976d30b496f80efa82cbd01be470f0cd2606f1a3","observation_id":"480208c7-9001-42f3-9e94-82c8220dc64d","resolution":{"observed_at":"2026-08-15T20:35:56.737393Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:35:56.682522Z","title":"Secure internet financial transactions: A framework integrating multi-factor authentication and machine learning,","venue":null,"work_id":"89296d62-0f72-49d3-ad00-119238a8b265","year":2024},"citing_paper":{"arxiv_id":"2505.12490","last_updated":"2025-08-28T20:13:32Z","snapshot_observed_at":"2026-08-17T00:58:48.187939Z","submitted_at":"2025-05-18T16:25:21Z","title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems","version":3},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-15T20:35:56.059896Z"},"links":{"citing_paper":"/paper/2505.12490"},"observation_digest":"sha256:68d473fb8121a4bec9261090a578678d4998eca7248429741ff224d727a39116","observation_id":"6ceca851-a131-4486-a738-a4a59a661fdb","resolution":{"observed_at":"2026-08-15T20:35:56.687726Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:35:56.665808Z","title":"A secure and efficient multi- factor authentication algorithm for mobile money applications,","venue":null,"work_id":"8b1a5298-8bf8-49b7-b44e-50cc2a0a6064","year":2021},"citing_paper":{"arxiv_id":"2505.12490","last_updated":"2025-08-28T20:13:32Z","snapshot_observed_at":"2026-08-17T00:58:48.187939Z","submitted_at":"2025-05-18T16:25:21Z","title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems","version":3},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-15T20:35:56.064251Z"},"links":{"citing_paper":"/paper/2505.12490"},"observation_digest":"sha256:2d068a9f0c05a945ba543c52c10e6a3afa39c730e0515286073330528393852b","observation_id":"f66a13f6-f8a8-4723-bd85-71e07a3792d0","resolution":{"observed_at":"2026-08-15T20:35:56.671280Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:35:56.698030Z","title":"A systematic review of multi-factor authentication in digital payment systems: Nist standards alignment and industry implementation analysis,","venue":null,"work_id":"1c23e412-0eb1-4544-b513-158a19aa80f4","year":2025},"citing_paper":{"arxiv_id":"2505.12490","last_updated":"2025-08-28T20:13:32Z","snapshot_observed_at":"2026-08-17T00:58:48.187939Z","submitted_at":"2025-05-18T16:25:21Z","title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems","version":3},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-15T20:35:56.055269Z"},"links":{"citing_paper":"/paper/2505.12490"},"observation_digest":"sha256:0f91fc98e2b21a20f7aef4fc2678802ff57ce076b460e7dedd2a8ca12d699d8e","observation_id":"1e3a95dd-06ab-471b-9f40-3271418a63b3","resolution":{"observed_at":"2026-08-15T20:35:56.703520Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2503.05571","last_updated":"2026-04-20T12:22:46Z","snapshot_observed_at":"2026-08-05T04:02:23.677920Z","submitted_at":"2025-03-07T16:53:36Z","title":"Compliance of AI Systems","version":2},"cited_work":{"arxiv_id":"2503.05571","doi":null,"metadata_source":"pith","pith_arxiv_id":"2503.05571","snapshot_observed_at":"2026-08-15T20:35:56.136176Z","title":"Compliance of AI Systems","venue":"cs.CY","work_id":"b3b4a09c-15ad-4966-8f88-aa2c5c71fbec","year":2025},"citing_paper":{"arxiv_id":"2505.12490","last_updated":"2025-08-28T20:13:32Z","snapshot_observed_at":"2026-08-17T00:58:48.187939Z","submitted_at":"2025-05-18T16:25:21Z","title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems","version":3},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-15T20:35:56.073124Z"},"links":{"cited_paper":"/paper/2503.05571","citing_paper":"/paper/2505.12490"},"observation_digest":"sha256:3c176cb9a45628e0e381a820b8a3ffecc4b2325a65774fd3dddba69e83e3087b","observation_id":"6e64f302-8e08-4e9d-8d5b-42c77da448da","resolution":{"observed_at":"2026-08-15T20:35:56.142201Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2211.09527","last_updated":"2022-11-17T13:43:20Z","snapshot_observed_at":"2026-08-18T00:11:55.170013Z","submitted_at":"2022-11-17T13:43:20Z","title":"Ignore Previous Prompt: Attack Techniques For Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2211.09527","snapshot_observed_at":"2026-08-15T20:35:56.078017Z","title":"Ignore previous prompt: Attack techniques for language models,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2505.12490","last_updated":"2025-08-28T20:13:32Z","snapshot_observed_at":"2026-08-17T00:58:48.187939Z","submitted_at":"2025-05-18T16:25:21Z","title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems","version":3},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-15T20:35:56.078017Z"},"links":{"cited_paper":"/paper/2211.09527","citing_paper":"/paper/2505.12490"},"observation_digest":"sha256:01501b97578de695d77f22ee476f7a7e4b2c58fa4d2e2dd9b9024341185c6d55","observation_id":"2c77f071-049d-4348-86b4-94f8061411dc","resolution":{"observed_at":"2026-08-15T20:35:56.078017Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:35:56.649253Z","title":"Leveraging artificial intelligence for enhancing reg- ulatory compliance in the financial sector,","venue":null,"work_id":"1f723465-82bd-447d-bd6e-2e9a19142f82","year":2024},"citing_paper":{"arxiv_id":"2505.12490","last_updated":"2025-08-28T20:13:32Z","snapshot_observed_at":"2026-08-17T00:58:48.187939Z","submitted_at":"2025-05-18T16:25:21Z","title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems","version":3},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-15T20:35:56.068784Z"},"links":{"citing_paper":"/paper/2505.12490"},"observation_digest":"sha256:105ae3561f46a47a62dc5b98d6a480cec1f041852dbe7f25c4ff2d90739fbb8a","observation_id":"3b46f8d8-b293-4f42-a71f-2e1df7d7f4a5","resolution":{"observed_at":"2026-08-15T20:35:56.654753Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:35:56.632786Z","title":"What is a prompt injection attack? [examples & preven- tion],","venue":null,"work_id":"00107325-58db-4c5f-a777-3a865a5afea4","year":null},"citing_paper":{"arxiv_id":"2505.12490","last_updated":"2025-08-28T20:13:32Z","snapshot_observed_at":"2026-08-17T00:58:48.187939Z","submitted_at":"2025-05-18T16:25:21Z","title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems","version":3},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-15T20:35:56.083109Z"},"links":{"citing_paper":"/paper/2505.12490"},"observation_digest":"sha256:db2279e8b8775f19293ec513c0be70349a194b3d2336e52625dd54b76c31ac5e","observation_id":"28ed0269-bf10-41df-9eb0-95296eb28bee","resolution":{"observed_at":"2026-08-15T20:35:56.638542Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:35:57.265320Z","title":"Available: https://www.rfc-editor.org/info/rfc6749","venue":null,"work_id":"968af3b2-36e3-486c-bbd1-e07be3be48fd","year":null},"citing_paper":{"arxiv_id":"2505.12490","last_updated":"2025-08-28T20:13:32Z","snapshot_observed_at":"2026-08-17T00:58:48.187939Z","submitted_at":"2025-05-18T16:25:21Z","title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems","version":3},"reference_index":2012,"source":"pdf_text","source_observed_at":"2026-08-15T20:35:55.826307Z"},"links":{"citing_paper":"/paper/2505.12490"},"observation_digest":"sha256:7ae14c848b27b8fa23f7ac8c9c083aa749f6778f7e3e1841fa455f02882a9c17","observation_id":"6a5360ac-eb4b-4653-980c-eb7ba06bec3a","resolution":{"observed_at":"2026-08-15T20:35:57.270133Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:35:57.380189Z","title":"Available: https://developers.googleblog.com/en/a2a-a- new-era-of-agent-interoperability/","venue":null,"work_id":"2d889c4d-06c2-45dd-8526-f1a325cfbf69","year":null},"citing_paper":{"arxiv_id":"2505.12490","last_updated":"2025-08-28T20:13:32Z","snapshot_observed_at":"2026-08-17T00:58:48.187939Z","submitted_at":"2025-05-18T16:25:21Z","title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems","version":3},"reference_index":2025,"source":"pdf_text","source_observed_at":"2026-08-15T20:35:55.777859Z"},"links":{"citing_paper":"/paper/2505.12490"},"observation_digest":"sha256:c7cbdff5c5c94846b416514c79a91ef9096b9a8c272ccf9a9807de40ab5d7fe2","observation_id":"de03bec2-f71b-41d9-b90a-d806d6d361d4","resolution":{"observed_at":"2026-08-15T20:35:57.384958Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2505.12490","last_updated":"2025-08-28T20:13:32Z","latest_version":3,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-17T00:58:48.187939Z","submitted_at":"2025-05-18T16:25:21Z","title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems"},"reference_resolution":{"displayed":68,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":17,"verified_exact":3,"verified_fuzzy":48},"total_outbound_references":68},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"thesis":"As of 23 August 2026, this Paper Citation Record lists 68 of 68 outbound references and 6 inbound Pith citation observations for arXiv:2505.12490."}