{"as_of":"2026-08-08T04:49:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:468b9db2811ebfffe8fae0eeabb85c9444ff67debdccc62f9db57e858a01a476","coverage":[{"denominator":61,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":61,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T14:44:51.276710Z","state":"measured"},{"denominator":63,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":63,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":2,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":2,"source":"paper_references, paper_reference_links","source_observed_at":"2026-06-26T14:00:04.412804Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-04T06:59:37.648031Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2505.17735","last_updated":"2025-07-18T07:34:40Z","snapshot_observed_at":"2026-08-07T14:39:29.112629Z","submitted_at":"2025-05-23T10:56:06Z","title":"SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator","version":2},"cited_work":{"arxiv_id":"2505.17735","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.17735","snapshot_observed_at":"2026-07-04T06:59:37.648031Z","title":"arXiv preprint arXiv:2505.17735 , year=","venue":null,"work_id":"def78229-71df-490e-b1ee-8a4ac8de0c22","year":2025},"citing_paper":{"arxiv_id":"2507.21046","last_updated":"2026-01-16T20:59:08Z","snapshot_observed_at":"2026-08-01T06:32:44.461162Z","submitted_at":"2025-07-28T17:59:05Z","title":"A Survey of Self-Evolving Agents: What, When, How, and Where to Evolve on the Path to Artificial Super Intelligence","version":4},"reference_index":291,"source":"arxiv_source","source_observed_at":"2026-05-14T22:23:14.621091Z"},"links":{"cited_paper":"/paper/2505.17735","citing_paper":"/paper/2507.21046"},"observation_digest":"sha256:806de1d15812bda1527640a7e8d2640472c3a1caa80ec120dae3bbc9ab5fc8aa","observation_id":"46469e3c-3416-4eb5-a92d-02baf1a6b38a","resolution":{"observed_at":"2026-05-14T22:23:15.417113Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.17735","last_updated":"2025-07-18T07:34:40Z","snapshot_observed_at":"2026-08-07T14:39:29.112629Z","submitted_at":"2025-05-23T10:56:06Z","title":"SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator","version":2},"cited_work":{"arxiv_id":"2505.17735","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.17735","snapshot_observed_at":"2026-07-04T06:59:37.648031Z","title":"arXiv preprint arXiv:2505.17735 , year=","venue":null,"work_id":"def78229-71df-490e-b1ee-8a4ac8de0c22","year":2025},"citing_paper":{"arxiv_id":"2606.21377","last_updated":"2026-06-19T12:35:00Z","snapshot_observed_at":"2026-07-06T23:56:21.824303Z","submitted_at":"2026-06-19T12:35:00Z","title":"ARENA: An Architecture for Measuring the Transferability of Autonomous Cyber Defense","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-06-26T14:00:04.412804Z"},"links":{"cited_paper":"/paper/2505.17735","citing_paper":"/paper/2606.21377"},"observation_digest":"sha256:1775814c6a8d7add6b2977147b0ea020e95d598a041fe8dd13ad9fd8a4387db6","observation_id":"e0f03366-4d1c-4913-bb66-e97e2032fc95","resolution":{"observed_at":"2026-07-04T06:59:37.649504Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2505.17735/citation-record","integrity":"/paper/2505.17735/integrity","json":"/paper/2505.17735/citation-record.json","paper":"/paper/2505.17735"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2303.08774","last_updated":"2024-03-04T06:01:33Z","snapshot_observed_at":"2026-08-07T07:30:12.213965Z","submitted_at":"2023-03-15T17:15:04Z","title":"GPT-4 Technical Report","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.08774","snapshot_observed_at":"2026-08-07T14:44:44.453213Z","title":"Gpt-4 technical report","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.17735","last_updated":"2025-07-18T07:34:40Z","snapshot_observed_at":"2026-08-07T14:39:29.112629Z","submitted_at":"2025-05-23T10:56:06Z","title":"SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-07T14:44:44.453213Z"},"links":{"cited_paper":"/paper/2303.08774","citing_paper":"/paper/2505.17735"},"observation_digest":"sha256:479c682132eb32f13dec7a0705a92db331b1a8ae862f1b6c742329de7ae2c507","observation_id":"a8196e9e-67c4-40d3-8ac9-eacd51b1f54e","resolution":{"observed_at":"2026-08-07T14:44:44.453213Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.09024","last_updated":"2025-04-18T14:30:31Z","snapshot_observed_at":"2026-08-02T12:38:54.249632Z","submitted_at":"2024-10-11T17:39:22Z","title":"AgentHarm: A Benchmark for Measuring Harmfulness of LLM Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.09024","snapshot_observed_at":"2026-08-07T14:44:44.534682Z","title":"Agentharm: A benchmark for measuring harmfulness of llm agents","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.17735","last_updated":"2025-07-18T07:34:40Z","snapshot_observed_at":"2026-08-07T14:39:29.112629Z","submitted_at":"2025-05-23T10:56:06Z","title":"SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-07T14:44:44.534682Z"},"links":{"cited_paper":"/paper/2410.09024","citing_paper":"/paper/2505.17735"},"observation_digest":"sha256:73c51154bcf87ffb70ac6d362c41aa08b6d6d3c1ee0c70b643b57eb6e92ed61e","observation_id":"cf6f3a6e-49c8-4e4a-bd5c-fd179d253a0f","resolution":{"observed_at":"2026-08-07T14:44:44.534682Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:44:58.433336Z","title":"The claude 3 model family: Opus, sonnet, haiku","venue":null,"work_id":"1e0d9ebb-320a-4e08-a358-7955683349cb","year":2024},"citing_paper":{"arxiv_id":"2505.17735","last_updated":"2025-07-18T07:34:40Z","snapshot_observed_at":"2026-08-07T14:39:29.112629Z","submitted_at":"2025-05-23T10:56:06Z","title":"SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T14:44:44.613658Z"},"links":{"citing_paper":"/paper/2505.17735"},"observation_digest":"sha256:f5e984dd368d84bab8df0b8ddf33f3afc01295f523acd8d2d38291e38da97792","observation_id":"42aed6b1-8561-4508-9c5d-0e0437887d17","resolution":{"observed_at":"2026-08-07T14:44:58.565414Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2204.05862","last_updated":"2022-04-12T15:02:38Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2022-04-12T15:02:38Z","title":"Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedback","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2204.05862","snapshot_observed_at":"2026-08-07T14:44:44.695587Z","title":"Training a helpful and harmless assistant with reinforcement learning from human feedback","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2505.17735","last_updated":"2025-07-18T07:34:40Z","snapshot_observed_at":"2026-08-07T14:39:29.112629Z","submitted_at":"2025-05-23T10:56:06Z","title":"SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T14:44:44.695587Z"},"links":{"cited_paper":"/paper/2204.05862","citing_paper":"/paper/2505.17735"},"observation_digest":"sha256:b822f32bd2063ee254588f8c35d58a953056f83bd480318459127e74370b4edf","observation_id":"e9457d8b-902d-4b40-a21a-5809c592e65d","resolution":{"observed_at":"2026-08-07T14:44:44.695587Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.15302","last_updated":"2024-11-16T19:21:32Z","snapshot_observed_at":"2026-08-04T03:52:48.007311Z","submitted_at":"2024-02-23T13:03:12Z","title":"How (un)ethical are instruction-centric responses of LLMs? Unveiling the vulnerabilities of safety guardrails to harmful queries","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.15302","snapshot_observed_at":"2026-08-07T14:44:44.798595Z","title":"How (un)ethical are instruction-centric responses of llms? unveiling the vulnerabilities of safety guardrails to harmful queries","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.17735","last_updated":"2025-07-18T07:34:40Z","snapshot_observed_at":"2026-08-07T14:39:29.112629Z","submitted_at":"2025-05-23T10:56:06Z","title":"SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-07T14:44:44.798595Z"},"links":{"cited_paper":"/paper/2402.15302","citing_paper":"/paper/2505.17735"},"observation_digest":"sha256:d3670464cf65e817506b49f18fa33e545910c9b9fea7274721d62c50b0c171ae","observation_id":"70853b67-7090-4199-aeef-021737cd8755","resolution":{"observed_at":"2026-08-07T14:44:44.798595Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:44:58.165311Z","title":"Assertiveness-based agent communication for a personalized medicine on medical imaging diagnosis","venue":null,"work_id":"a7d11623-72c9-46e5-be23-aa247a9423c9","year":2023},"citing_paper":{"arxiv_id":"2505.17735","last_updated":"2025-07-18T07:34:40Z","snapshot_observed_at":"2026-08-07T14:39:29.112629Z","submitted_at":"2025-05-23T10:56:06Z","title":"SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T14:44:44.888093Z"},"links":{"citing_paper":"/paper/2505.17735"},"observation_digest":"sha256:4bb69f8d0b4f953a6f7da238df104a8d464a7804e6dfe9f6ae02e6829da20225","observation_id":"1dfc7352-7413-4e63-8e6b-a2ed011f0706","resolution":{"observed_at":"2026-08-07T14:44:58.295419Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.14348","last_updated":"2024-06-12T00:27:06Z","snapshot_observed_at":"2026-07-06T16:23:26.584450Z","submitted_at":"2023-09-18T02:07:22Z","title":"Defending Against Alignment-Breaking Attacks via Robustly Aligned LLM","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.14348","snapshot_observed_at":"2026-08-07T14:44:44.993336Z","title":"Defending against alignment-breaking attacks via robustly aligned llm","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.17735","last_updated":"2025-07-18T07:34:40Z","snapshot_observed_at":"2026-08-07T14:39:29.112629Z","submitted_at":"2025-05-23T10:56:06Z","title":"SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T14:44:44.993336Z"},"links":{"cited_paper":"/paper/2309.14348","citing_paper":"/paper/2505.17735"},"observation_digest":"sha256:f7190bab4e0cfc45149d0501173857576c451ba7dc150c608923d7806eff48e4","observation_id":"0bd44a55-90f6-4db0-8a57-d90f4b2cfaa9","resolution":{"observed_at":"2026-08-07T14:44:44.993336Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.13352","last_updated":"2024-11-24T22:04:23Z","snapshot_observed_at":"2026-07-06T18:33:32.806635Z","submitted_at":"2024-06-19T08:55:56Z","title":"AgentDojo: A Dynamic Environment to Evaluate Prompt Injection Attacks and Defenses for LLM Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.13352","snapshot_observed_at":"2026-08-07T14:44:45.087796Z","title":"Agentdojo: A dynamic environment to evaluate attacks and defenses for llm agents","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.17735","last_updated":"2025-07-18T07:34:40Z","snapshot_observed_at":"2026-08-07T14:39:29.112629Z","submitted_at":"2025-05-23T10:56:06Z","title":"SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-07T14:44:45.087796Z"},"links":{"cited_paper":"/paper/2406.13352","citing_paper":"/paper/2505.17735"},"observation_digest":"sha256:fe42c66ab2da4953c44fdfec528445c0805d9d6cd588575c3fd1d51b1f796c31","observation_id":"6ffaacc0-5cc5-4a61-a24c-775cf41feb40","resolution":{"observed_at":"2026-08-07T14:44:45.087796Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.21783","last_updated":"2024-11-23T23:27:33Z","snapshot_observed_at":"2026-07-06T18:55:11.576666Z","submitted_at":"2024-07-31T17:54:27Z","title":"The Llama 3 Herd of Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.21783","snapshot_observed_at":"2026-08-07T14:44:45.213435Z","title":"The llama 3 herd of models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.17735","last_updated":"2025-07-18T07:34:40Z","snapshot_observed_at":"2026-08-07T14:39:29.112629Z","submitted_at":"2025-05-23T10:56:06Z","title":"SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T14:44:45.213435Z"},"links":{"cited_paper":"/paper/2407.21783","citing_paper":"/paper/2505.17735"},"observation_digest":"sha256:5700d53ad3c05dd040f8504c9c21822edb608e27eab3b4cfcb200171742bd265","observation_id":"8d3cf8a2-cf46-4668-a7ad-7faffbbb2780","resolution":{"observed_at":"2026-08-07T14:44:45.213435Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2409.11224","last_updated":"2024-09-17T14:18:21Z","snapshot_observed_at":"2026-07-06T19:16:47.399069Z","submitted_at":"2024-09-17T14:18:21Z","title":"A Human-Centered Risk Evaluation of Biometric Systems Using Conjoint Analysis","version":1},"cited_work":{"arxiv_id":"2409.11224","doi":null,"metadata_source":"pith","pith_arxiv_id":"2409.11224","snapshot_observed_at":"2026-08-07T14:44:51.689603Z","title":"A Human-Centered Risk Evaluation of Biometric Systems Using Conjoint Analysis","venue":"cs.CV","work_id":"1182dd38-8246-44bb-81c5-69ee4e0fd61f","year":2024},"citing_paper":{"arxiv_id":"2505.17735","last_updated":"2025-07-18T07:34:40Z","snapshot_observed_at":"2026-08-07T14:39:29.112629Z","submitted_at":"2025-05-23T10:56:06Z","title":"SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T14:44:45.325701Z"},"links":{"cited_paper":"/paper/2409.11224","citing_paper":"/paper/2505.17735"},"observation_digest":"sha256:f6c66b3ef0e7e31228c8df73e8ceb9da43e08217b30c7d897b5c4fbcb8dcc2b1","observation_id":"b1036e4b-c310-48f9-8090-5b59d2352ef9","resolution":{"observed_at":"2026-08-07T14:44:51.755916Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.12793","last_updated":"2024-07-30T03:58:11Z","snapshot_observed_at":"2026-08-07T13:56:34.167869Z","submitted_at":"2024-06-18T16:58:21Z","title":"ChatGLM: A Family of Large Language Models from GLM-130B to GLM-4 All Tools","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.12793","snapshot_observed_at":"2026-08-07T14:44:45.432347Z","title":"Chatglm: A family of large language models from glm-130b to glm-4 all tools","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.17735","last_updated":"2025-07-18T07:34:40Z","snapshot_observed_at":"2026-08-07T14:39:29.112629Z","submitted_at":"2025-05-23T10:56:06Z","title":"SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T14:44:45.432347Z"},"links":{"cited_paper":"/paper/2406.12793","citing_paper":"/paper/2505.17735"},"observation_digest":"sha256:c0ba4a84d0c4b47e29b19a18c7315b77b982b1d2a03a3253698d6f6456bd043c","observation_id":"b646852c-473d-45ff-b6f7-40d83f7b1a48","resolution":{"observed_at":"2026-08-07T14:44:45.432347Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:44:57.850593Z","title":"ToRA: A tool-integrated reasoning agent for mathematical problem solving","venue":null,"work_id":"a8e3872c-0ab2-480f-b454-9212347393fe","year":2024},"citing_paper":{"arxiv_id":"2505.17735","last_updated":"2025-07-18T07:34:40Z","snapshot_observed_at":"2026-08-07T14:39:29.112629Z","submitted_at":"2025-05-23T10:56:06Z","title":"SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T14:44:45.555426Z"},"links":{"citing_paper":"/paper/2505.17735"},"observation_digest":"sha256:152ebbe4266cfff3a196c7355c0bdd51793fc81ed7977012f62957376b198892","observation_id":"b7a13df9-7fd1-4c37-b624-8b6cc034e9fa","resolution":{"observed_at":"2026-08-07T14:44:58.028665Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:44:57.612282Z","title":"Trustagent: Towards safe and trustworthy llm-based agents","venue":null,"work_id":"226b93ac-4390-4183-9d8d-b25cfef4eede","year":2024},"citing_paper":{"arxiv_id":"2505.17735","last_updated":"2025-07-18T07:34:40Z","snapshot_observed_at":"2026-08-07T14:39:29.112629Z","submitted_at":"2025-05-23T10:56:06Z","title":"SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T14:44:45.678304Z"},"links":{"citing_paper":"/paper/2505.17735"},"observation_digest":"sha256:13af69f3e79011ba505d97fc671082b9827ed864a8f867ee94fe79caf3c67041","observation_id":"5490dc32-d303-461f-b2f6-d7a4d65b3852","resolution":{"observed_at":"2026-08-07T14:44:57.728500Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.21276","last_updated":"2024-10-25T17:43:01Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-10-25T17:43:01Z","title":"GPT-4o System Card","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.21276","snapshot_observed_at":"2026-08-07T14:44:45.774691Z","title":"Gpt-4o system card","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.17735","last_updated":"2025-07-18T07:34:40Z","snapshot_observed_at":"2026-08-07T14:39:29.112629Z","submitted_at":"2025-05-23T10:56:06Z","title":"SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-07T14:44:45.774691Z"},"links":{"cited_paper":"/paper/2410.21276","citing_paper":"/paper/2505.17735"},"observation_digest":"sha256:1e1d0798963908876ea985b46c2ab001366a93105149d930f6011e308c24bcca","observation_id":"b8e648cd-df31-44ca-a2e0-5fa1cf39138b","resolution":{"observed_at":"2026-08-07T14:44:45.774691Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:44:45.883362Z","title":"Beavertails: Towards improved safety alignment of llm via a human-preference dataset","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.17735","last_updated":"2025-07-18T07:34:40Z","snapshot_observed_at":"2026-08-07T14:39:29.112629Z","submitted_at":"2025-05-23T10:56:06Z","title":"SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator","version":2},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T14:44:45.883362Z"},"links":{"citing_paper":"/paper/2505.17735"},"observation_digest":"sha256:09c144f516c5d80aade1fe2cfa47fb8facd338a27a172f2c35a874247a2edf06","observation_id":"7dd1e335-3d02-469b-93e4-a2a8f06e5c08","resolution":{"observed_at":"2026-08-07T14:44:45.883362Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.02957","last_updated":"2025-01-17T11:59:23Z","snapshot_observed_at":"2026-07-06T18:09:59.472962Z","submitted_at":"2024-05-05T14:53:51Z","title":"Agent Hospital: A Simulacrum of Hospital with Evolvable Medical Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.02957","snapshot_observed_at":"2026-08-07T14:44:46.050107Z","title":"Agent hospital: A simulacrum of hospital with evolvable medical agents","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.17735","last_updated":"2025-07-18T07:34:40Z","snapshot_observed_at":"2026-08-07T14:39:29.112629Z","submitted_at":"2025-05-23T10:56:06Z","title":"SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator","version":2},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T14:44:46.050107Z"},"links":{"cited_paper":"/paper/2405.02957","citing_paper":"/paper/2505.17735"},"observation_digest":"sha256:d9637f97c5b75661fd2878af8a98f6eb1707f5290223e1c673e3ede476a60c43","observation_id":"68a65cce-d1eb-41c5-908f-a629aa3512ca","resolution":{"observed_at":"2026-08-07T14:44:46.050107Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2409.11295","last_updated":"2025-03-12T20:54:00Z","snapshot_observed_at":"2026-08-06T11:52:38.289574Z","submitted_at":"2024-09-17T15:49:44Z","title":"EIA: Environmental Injection Attack on Generalist Web Agents for Privacy Leakage","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.11295","snapshot_observed_at":"2026-08-07T14:44:46.180431Z","title":"Eia: Environmental injection attack on generalist web agents for privacy leakage","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.17735","last_updated":"2025-07-18T07:34:40Z","snapshot_observed_at":"2026-08-07T14:39:29.112629Z","submitted_at":"2025-05-23T10:56:06Z","title":"SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator","version":2},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-07T14:44:46.180431Z"},"links":{"cited_paper":"/paper/2409.11295","citing_paper":"/paper/2505.17735"},"observation_digest":"sha256:56327c4fb033937d04131e0cb26f324af0dda870b26c2dad3f617ca617bc6bf6","observation_id":"2c0f6a13-1607-4a24-84e1-c17ab3349b9d","resolution":{"observed_at":"2026-08-07T14:44:46.180431Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:44:46.300364Z","title":"Foundation models for generalist medical artificial intelligence","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.17735","last_updated":"2025-07-18T07:34:40Z","snapshot_observed_at":"2026-08-07T14:39:29.112629Z","submitted_at":"2025-05-23T10:56:06Z","title":"SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T14:44:46.300364Z"},"links":{"citing_paper":"/paper/2505.17735"},"observation_digest":"sha256:fd0d1ac1bc1316a1eeffbf94b31c7fd7e624e34268c59f19fd598454dfa7700d","observation_id":"2919b946-0eee-4c0a-9636-90952c623daf","resolution":{"observed_at":"2026-08-07T14:44:46.300364Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:44:57.393526Z","title":"Testing language model agents safely in the wild","venue":null,"work_id":"c9d6b07a-b19e-466d-8845-5bc7b360f8cd","year":2023},"citing_paper":{"arxiv_id":"2505.17735","last_updated":"2025-07-18T07:34:40Z","snapshot_observed_at":"2026-08-07T14:39:29.112629Z","submitted_at":"2025-05-23T10:56:06Z","title":"SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator","version":2},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-07T14:44:46.453204Z"},"links":{"citing_paper":"/paper/2505.17735"},"observation_digest":"sha256:1ca3f778d343d8b507f37a862d0a9d4a87d4e70b48ccbdfb29cd21d3bb7eb926","observation_id":"09b93ec2-db37-4ba9-824f-de3810e16333","resolution":{"observed_at":"2026-08-07T14:44:57.506863Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:44:46.539307Z","title":"Direct preference optimization: Your language model is secretly a reward model","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.17735","last_updated":"2025-07-18T07:34:40Z","snapshot_observed_at":"2026-08-07T14:39:29.112629Z","submitted_at":"2025-05-23T10:56:06Z","title":"SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-07T14:44:46.539307Z"},"links":{"citing_paper":"/paper/2505.17735"},"observation_digest":"sha256:1d735bbc86f33a14cf85809f0db68d92e83f6da9cd1ccbbb2b391243f4b2ef87","observation_id":"e4f633f6-f3eb-4d14-b2cc-4c88b23d6b0c","resolution":{"observed_at":"2026-08-07T14:44:46.539307Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:44:57.035479Z","title":"Maddison, and Tatsunori Hashimoto","venue":null,"work_id":"7a0d819f-afd1-4931-8846-647b25eb222b","year":null},"citing_paper":{"arxiv_id":"2505.17735","last_updated":"2025-07-18T07:34:40Z","snapshot_observed_at":"2026-08-07T14:39:29.112629Z","submitted_at":"2025-05-23T10:56:06Z","title":"SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator","version":2},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T14:44:46.615316Z"},"links":{"citing_paper":"/paper/2505.17735"},"observation_digest":"sha256:95cd377fc66c9dcddbbbef23e12d9f198bfc8a8ef06e2831dc45db7abf7369a8","observation_id":"cbb99238-6e34-4480-8673-9945d825bb5b","resolution":{"observed_at":"2026-08-07T14:44:57.152362Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:44:46.800796Z","title":"Toolformer: Language models can teach themselves to use tools","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.17735","last_updated":"2025-07-18T07:34:40Z","snapshot_observed_at":"2026-08-07T14:39:29.112629Z","submitted_at":"2025-05-23T10:56:06Z","title":"SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator","version":2},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-07T14:44:46.800796Z"},"links":{"citing_paper":"/paper/2505.17735"},"observation_digest":"sha256:4731f4bb4806cd30e9af9a021d5738951d8efa87fd8d38fa5688415c8a8e66eb","observation_id":"a9003657-12dc-430a-8c96-ca0faa066bfc","resolution":{"observed_at":"2026-08-07T14:44:46.800796Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:44:56.610285Z","title":"Reflexion: language agents with verbal reinforcement learning","venue":null,"work_id":"bf31ef22-54da-4893-ac6f-34482ff773b8","year":2023},"citing_paper":{"arxiv_id":"2505.17735","last_updated":"2025-07-18T07:34:40Z","snapshot_observed_at":"2026-08-07T14:39:29.112629Z","submitted_at":"2025-05-23T10:56:06Z","title":"SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator","version":2},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-07T14:44:46.886406Z"},"links":{"citing_paper":"/paper/2505.17735"},"observation_digest":"sha256:a59245408c44a9094a8a40a78374f8fb3c85862fe02ba666bef551f1488eca5e","observation_id":"b8690dca-cc72-4d21-9e26-6b988c9ed2f1","resolution":{"observed_at":"2026-08-07T14:44:56.693930Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:44:56.432738Z","title":"ALIS: Aligned LLM instruction security strategy for unsafe input prompt","venue":null,"work_id":"465a4963-96a5-4099-8b46-fcf06c101570","year":2025},"citing_paper":{"arxiv_id":"2505.17735","last_updated":"2025-07-18T07:34:40Z","snapshot_observed_at":"2026-08-07T14:39:29.112629Z","submitted_at":"2025-05-23T10:56:06Z","title":"SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator","version":2},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-07T14:44:46.950624Z"},"links":{"citing_paper":"/paper/2505.17735"},"observation_digest":"sha256:d6d71ba2eb8e283f014f32fd14c4e113584858635cc12285819aa30c02f4672b","observation_id":"38aa4fd7-7521-4d94-a8d9-abe960cb350a","resolution":{"observed_at":"2026-08-07T14:44:56.512354Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:44:56.249651Z","title":"Prioritizing safeguarding over autonomy: Risks of LLM agents for science","venue":null,"work_id":"cb64b97f-4333-497f-8e2f-fc3b8cac8b96","year":2024},"citing_paper":{"arxiv_id":"2505.17735","last_updated":"2025-07-18T07:34:40Z","snapshot_observed_at":"2026-08-07T14:39:29.112629Z","submitted_at":"2025-05-23T10:56:06Z","title":"SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator","version":2},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-07T14:44:47.044543Z"},"links":{"citing_paper":"/paper/2505.17735"},"observation_digest":"sha256:67d162f8002bddd13ee8bb8386b3ba6dd777cd92696932432347c6536680af05","observation_id":"ae762020-0a01-408b-9274-c75119f78d32","resolution":{"observed_at":"2026-08-07T14:44:56.321145Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2311.11855","last_updated":"2024-02-02T08:28:01Z","snapshot_observed_at":"2026-08-07T01:32:12.754339Z","submitted_at":"2023-11-20T15:50:09Z","title":"Evil Geniuses: Delving into the Safety of LLM-based Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.11855","snapshot_observed_at":"2026-08-07T14:44:47.139592Z","title":"Evil geniuses: Delving into the safety of llm-based agents","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.17735","last_updated":"2025-07-18T07:34:40Z","snapshot_observed_at":"2026-08-07T14:39:29.112629Z","submitted_at":"2025-05-23T10:56:06Z","title":"SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator","version":2},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-07T14:44:47.139592Z"},"links":{"cited_paper":"/paper/2311.11855","citing_paper":"/paper/2505.17735"},"observation_digest":"sha256:acbaff3e490d63234f7eb361b177fbdc90c77b88824f4f2290cc14cbba4d4519","observation_id":"bacc2be4-2031-42ab-a85c-8d7c50e5ac31","resolution":{"observed_at":"2026-08-07T14:44:47.139592Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2501.03486","last_updated":"2025-01-07T03:14:39Z","snapshot_observed_at":"2026-07-06T20:17:24.683086Z","submitted_at":"2025-01-07T03:14:39Z","title":"Align-Pro: A Principled Approach to Prompt Optimization for LLM Alignment","version":1},"cited_work":{"arxiv_id":"2501.03486","doi":null,"metadata_source":"pith","pith_arxiv_id":"2501.03486","snapshot_observed_at":"2026-08-07T14:44:51.507749Z","title":"Align-Pro: A Principled Approach to Prompt Optimization for LLM Alignment","venue":"cs.LG","work_id":"55fed41d-2de7-4bc3-abbb-64dea42523c8","year":2025},"citing_paper":{"arxiv_id":"2505.17735","last_updated":"2025-07-18T07:34:40Z","snapshot_observed_at":"2026-08-07T14:39:29.112629Z","submitted_at":"2025-05-23T10:56:06Z","title":"SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator","version":2},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-07T14:44:47.323075Z"},"links":{"cited_paper":"/paper/2501.03486","citing_paper":"/paper/2505.17735"},"observation_digest":"sha256:4d0647c27e7a47c2a2164860eb047057a2838d65cea67b6e18139fdeb8d8a0e7","observation_id":"476f0a0c-491b-4a7c-9159-8d27bfe9a932","resolution":{"observed_at":"2026-08-07T14:44:51.565391Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:44:47.484807Z","title":"Jailbroken: How does llm safety training fail? Advances in Neural Information Processing Systems, 36, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.17735","last_updated":"2025-07-18T07:34:40Z","snapshot_observed_at":"2026-08-07T14:39:29.112629Z","submitted_at":"2025-05-23T10:56:06Z","title":"SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator","version":2},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-07T14:44:47.484807Z"},"links":{"citing_paper":"/paper/2505.17735"},"observation_digest":"sha256:08018b130ce067dc3558f46159829ac6e14245763c7b6f4ae47601fa04de1de7","observation_id":"133eb356-9d6e-4c03-b332-4d6f4355a3af","resolution":{"observed_at":"2026-08-07T14:44:47.484807Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.09187","last_updated":"2025-05-29T03:09:05Z","snapshot_observed_at":"2026-07-06T18:30:23.849880Z","submitted_at":"2024-06-13T14:49:26Z","title":"GuardAgent: Safeguard LLM Agents by a Guard Agent via Knowledge-Enabled Reasoning","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.09187","snapshot_observed_at":"2026-08-07T14:44:47.609513Z","title":"Guardagent: Safeguard llm agents by a guard agent via knowledge-enabled reasoning","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.17735","last_updated":"2025-07-18T07:34:40Z","snapshot_observed_at":"2026-08-07T14:39:29.112629Z","submitted_at":"2025-05-23T10:56:06Z","title":"SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator","version":2},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-07T14:44:47.609513Z"},"links":{"cited_paper":"/paper/2406.09187","citing_paper":"/paper/2505.17735"},"observation_digest":"sha256:e21dc6c6a2038df56350337e441bf14eca3378a481036f4ed1b6b2efd3a0235d","observation_id":"b2eca36a-65a2-429e-8b3e-c1da7de46fba","resolution":{"observed_at":"2026-08-07T14:44:47.609513Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:44:56.073039Z","title":"Qwen2.5 technical report","venue":null,"work_id":"f8c64e83-ae89-4534-bb58-49bbda063bc0","year":2024},"citing_paper":{"arxiv_id":"2505.17735","last_updated":"2025-07-18T07:34:40Z","snapshot_observed_at":"2026-08-07T14:39:29.112629Z","submitted_at":"2025-05-23T10:56:06Z","title":"SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator","version":2},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-07T14:44:47.738056Z"},"links":{"citing_paper":"/paper/2505.17735"},"observation_digest":"sha256:09b2b69f9c858a8e5c69f0bb1909ba1bb5f5920f78e6568301156655a2bbd046","observation_id":"d51f3b3a-857e-4bdd-8374-05620c60d7e2","resolution":{"observed_at":"2026-08-07T14:44:56.134081Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.11208","last_updated":"2024-10-29T15:32:04Z","snapshot_observed_at":"2026-08-04T19:17:04.690837Z","submitted_at":"2024-02-17T06:48:45Z","title":"Watch Out for Your Agents! Investigating Backdoor Threats to LLM-Based Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.11208","snapshot_observed_at":"2026-08-07T14:44:47.887091Z","title":"Watch out for your agents! investigating backdoor threats to llm-based agents","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.17735","last_updated":"2025-07-18T07:34:40Z","snapshot_observed_at":"2026-08-07T14:39:29.112629Z","submitted_at":"2025-05-23T10:56:06Z","title":"SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator","version":2},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-07T14:44:47.887091Z"},"links":{"cited_paper":"/paper/2402.11208","citing_paper":"/paper/2505.17735"},"observation_digest":"sha256:3bdc00aa43ca19197a5aee8944edc8a3acb3ff7b021fb76827e7be8957e5c8b7","observation_id":"0339e08d-258e-42fe-b4d9-9c902b4be467","resolution":{"observed_at":"2026-08-07T14:44:47.887091Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:44:55.886987Z","title":"Plug in the safety chip: Enforcing constraints for llm-driven robot agents","venue":null,"work_id":"98ac22ac-dc08-43e1-9956-5de500f0bac2","year":2024},"citing_paper":{"arxiv_id":"2505.17735","last_updated":"2025-07-18T07:34:40Z","snapshot_observed_at":"2026-08-07T14:39:29.112629Z","submitted_at":"2025-05-23T10:56:06Z","title":"SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator","version":2},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-07T14:44:48.037707Z"},"links":{"citing_paper":"/paper/2505.17735"},"observation_digest":"sha256:38aa723362f1c36bfc7e725214be016042e6692f0a46a049b4a677db40d09afb","observation_id":"a120568c-e368-415b-a560-0e0c058a48e4","resolution":{"observed_at":"2026-08-07T14:44:55.982658Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:44:55.680388Z","title":"React: Synergizing reasoning and acting in language models","venue":null,"work_id":"af07f4ee-51e1-4253-a374-50b0de2c1982","year":2023},"citing_paper":{"arxiv_id":"2505.17735","last_updated":"2025-07-18T07:34:40Z","snapshot_observed_at":"2026-08-07T14:39:29.112629Z","submitted_at":"2025-05-23T10:56:06Z","title":"SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator","version":2},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-07T14:44:48.161270Z"},"links":{"citing_paper":"/paper/2505.17735"},"observation_digest":"sha256:d20a56ce67cf9ee03c1d6fae3aa187138ea639a54f8afed2299bfdf90fb1de32","observation_id":"71dcdf41-9294-4b23-a711-fe22b5fe39a8","resolution":{"observed_at":"2026-08-07T14:44:55.759035Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:44:48.233137Z","title":"A survey on large language model (llm) security and privacy: The good, the bad, and the ugly","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.17735","last_updated":"2025-07-18T07:34:40Z","snapshot_observed_at":"2026-08-07T14:39:29.112629Z","submitted_at":"2025-05-23T10:56:06Z","title":"SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator","version":2},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-07T14:44:48.233137Z"},"links":{"citing_paper":"/paper/2505.17735"},"observation_digest":"sha256:eddfc9945c419b559eb07e2bfe2e0d7d5f50acab0d2ade9535277acf2dd17bca","observation_id":"0f6117f3-7353-442b-9fe4-40d5685000bc","resolution":{"observed_at":"2026-08-07T14:44:48.233137Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:44:48.327004Z","title":"Safeagentbench: A benchmark for safe task planning of embodied llm agents","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.17735","last_updated":"2025-07-18T07:34:40Z","snapshot_observed_at":"2026-08-07T14:39:29.112629Z","submitted_at":"2025-05-23T10:56:06Z","title":"SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator","version":2},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-07T14:44:48.327004Z"},"links":{"citing_paper":"/paper/2505.17735"},"observation_digest":"sha256:f3371890b96eeedc824c20372337297e26870b9e677dfb85681e9955f0d8fd4b","observation_id":"31fa3886-a967-4d80-8927-ad508031cca4","resolution":{"observed_at":"2026-08-07T14:44:48.327004Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:44:55.513170Z","title":"R-judge: Bench- marking safety risk awareness for LLM agents","venue":null,"work_id":"56e45287-ec42-4967-ab6c-c20379d1fa7c","year":2024},"citing_paper":{"arxiv_id":"2505.17735","last_updated":"2025-07-18T07:34:40Z","snapshot_observed_at":"2026-08-07T14:39:29.112629Z","submitted_at":"2025-05-23T10:56:06Z","title":"SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator","version":2},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-07T14:44:48.420602Z"},"links":{"citing_paper":"/paper/2505.17735"},"observation_digest":"sha256:ef8d71cb47225bc9714fa1f4b738308e12c1316a89a5f9e7789f1c7127c6715a","observation_id":"23040920-632e-4a2a-90cc-f67f2b8dfdf2","resolution":{"observed_at":"2026-08-07T14:44:55.609249Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:44:55.345572Z","title":"Agentpoison: Red-teaming llm agents via poisoning memory or knowledge bases","venue":null,"work_id":"ee663d95-bf34-496e-af92-aafe529d4696","year":2024},"citing_paper":{"arxiv_id":"2505.17735","last_updated":"2025-07-18T07:34:40Z","snapshot_observed_at":"2026-08-07T14:39:29.112629Z","submitted_at":"2025-05-23T10:56:06Z","title":"SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator","version":2},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-07T14:44:48.515320Z"},"links":{"citing_paper":"/paper/2505.17735"},"observation_digest":"sha256:5c20f384773a1fe63613348c2108f7ede5bb35972a7496a25b31fc65510bdc85","observation_id":"d41dc5f4-0900-44f3-ba67-7acd518a08fb","resolution":{"observed_at":"2026-08-07T14:44:55.436180Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.02691","last_updated":"2024-08-04T04:52:35Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-03-05T06:21:45Z","title":"InjecAgent: Benchmarking Indirect Prompt Injections in Tool-Integrated Large Language Model Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.02691","snapshot_observed_at":"2026-08-07T14:44:48.590479Z","title":"Injecagent: Benchmarking indirect prompt injections in tool-integrated large language model agents","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.17735","last_updated":"2025-07-18T07:34:40Z","snapshot_observed_at":"2026-08-07T14:39:29.112629Z","submitted_at":"2025-05-23T10:56:06Z","title":"SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator","version":2},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-07T14:44:48.590479Z"},"links":{"cited_paper":"/paper/2403.02691","citing_paper":"/paper/2505.17735"},"observation_digest":"sha256:bf83827f728379f8711f087b51a3547ead0e617b85ee1b2f0d5d7563ce23058d","observation_id":"65f0b04b-777c-49c8-ac2e-9f9ea6e3b101","resolution":{"observed_at":"2026-08-07T14:44:48.590479Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.02391","last_updated":"2025-05-24T16:15:46Z","snapshot_observed_at":"2026-08-07T12:38:35.693216Z","submitted_at":"2024-11-04T18:56:42Z","title":"Attacking Vision-Language Computer Agents via Pop-ups","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.02391","snapshot_observed_at":"2026-08-07T14:44:48.689068Z","title":"Attacking vision-language computer agents via pop-ups","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.17735","last_updated":"2025-07-18T07:34:40Z","snapshot_observed_at":"2026-08-07T14:39:29.112629Z","submitted_at":"2025-05-23T10:56:06Z","title":"SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator","version":2},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-07T14:44:48.689068Z"},"links":{"cited_paper":"/paper/2411.02391","citing_paper":"/paper/2505.17735"},"observation_digest":"sha256:9d5cda8c336e13e84792aaac9dff50b60a571a45350442cb1b9812173043685d","observation_id":"788665c1-1e45-4c88-aaf9-b361feaadfa8","resolution":{"observed_at":"2026-08-07T14:44:48.689068Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:44:55.220554Z","title":"cat manuscript.txt","venue":null,"work_id":"36f1a3bb-1d3c-4603-8c35-2826683b9173","year":2023},"citing_paper":{"arxiv_id":"2505.17735","last_updated":"2025-07-18T07:34:40Z","snapshot_observed_at":"2026-08-07T14:39:29.112629Z","submitted_at":"2025-05-23T10:56:06Z","title":"SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator","version":2},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-07T14:44:48.773341Z"},"links":{"citing_paper":"/paper/2505.17735"},"observation_digest":"sha256:a6beb31895db7efc2292c2f95b074cba4424e372f001cb362af13a3c7d0ddad9","observation_id":"eab21780-2a29-4f21-a2f5-2cb8b4d41ac1","resolution":{"observed_at":"2026-08-07T14:44:55.279827Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:44:54.608536Z","title":"Please send a file to my colleague","venue":null,"work_id":"938be3f9-b67e-47e6-a9ab-c769641e784c","year":null},"citing_paper":{"arxiv_id":"2505.17735","last_updated":"2025-07-18T07:34:40Z","snapshot_observed_at":"2026-08-07T14:39:29.112629Z","submitted_at":"2025-05-23T10:56:06Z","title":"SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator","version":2},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-07T14:44:49.000769Z"},"links":{"citing_paper":"/paper/2505.17735"},"observation_digest":"sha256:34aef53ba5fbaa73c69a0fc5ca955eb3fef7c890a637f90cd05a8b80318f9167","observation_id":"c0db6d1e-7999-4e5e-81a5-e823772bc3ef","resolution":{"observed_at":"2026-08-07T14:44:54.690913Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:44:54.273818Z","title":"Final Answer","venue":null,"work_id":"5deb8fd2-0a52-4d8b-88af-5b077fca24f5","year":2022},"citing_paper":{"arxiv_id":"2505.17735","last_updated":"2025-07-18T07:34:40Z","snapshot_observed_at":"2026-08-07T14:39:29.112629Z","submitted_at":"2025-05-23T10:56:06Z","title":"SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator","version":2},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-07T14:44:49.122030Z"},"links":{"citing_paper":"/paper/2505.17735"},"observation_digest":"sha256:606e0287654ceb29c8660556b8dc667bc764e682fbc7ad4c856dae63d70828b9","observation_id":"8e604fe3-4f3b-42fd-8b35-16ebc4c3b331","resolution":{"observed_at":"2026-08-07T14:44:54.331366Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:44:53.760740Z","title":null,"venue":null,"work_id":"58ce8736-22eb-4836-988a-0ec2b3f94de9","year":null},"citing_paper":{"arxiv_id":"2505.17735","last_updated":"2025-07-18T07:34:40Z","snapshot_observed_at":"2026-08-07T14:39:29.112629Z","submitted_at":"2025-05-23T10:56:06Z","title":"SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator","version":2},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-07T14:44:49.478910Z"},"links":{"citing_paper":"/paper/2505.17735"},"observation_digest":"sha256:7de8606141f91a169ddc2bfb8a4e601e358e4683187e126cbed5cac8ef83981d","observation_id":"a9cac45a-ccad-4317-8f83-4514d926eff6","resolution":{"observed_at":"2026-08-07T14:44:53.839252Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:44:53.026603Z","title":null,"venue":null,"work_id":"69a8ba23-eefd-489d-9e18-082876eb8218","year":null},"citing_paper":{"arxiv_id":"2505.17735","last_updated":"2025-07-18T07:34:40Z","snapshot_observed_at":"2026-08-07T14:39:29.112629Z","submitted_at":"2025-05-23T10:56:06Z","title":"SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator","version":2},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-07T14:44:49.924900Z"},"links":{"citing_paper":"/paper/2505.17735"},"observation_digest":"sha256:a5272d0e049b0fc09af4c4429b94bba3d1df39a5b66c78725612b18cdc4e84e6","observation_id":"f2263268-8229-4af0-8bda-f2799d94d801","resolution":{"observed_at":"2026-08-07T14:44:53.074348Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:44:52.569420Z","title":"Final Answer","venue":null,"work_id":"c54b12c4-537e-47b5-aea2-0cdc2af1553f","year":null},"citing_paper":{"arxiv_id":"2505.17735","last_updated":"2025-07-18T07:34:40Z","snapshot_observed_at":"2026-08-07T14:39:29.112629Z","submitted_at":"2025-05-23T10:56:06Z","title":"SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator","version":2},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-07T14:44:50.164883Z"},"links":{"citing_paper":"/paper/2505.17735"},"observation_digest":"sha256:40435d03bc8449a909db6a50d282706892cd7bba9a3a46c1f14c7e6bb7a6163e","observation_id":"2256433b-a732-4e6f-8beb-f4aefad3371a","resolution":{"observed_at":"2026-08-07T14:44:52.677614Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:44:55.025347Z","title":"Note that meaningless placeholders are not allowed in your generate task; real entities such as names, file names, and addresses must be used","venue":null,"work_id":"55be0fc9-a9e1-4eee-a653-14e8ee368bf0","year":null},"citing_paper":{"arxiv_id":"2505.17735","last_updated":"2025-07-18T07:34:40Z","snapshot_observed_at":"2026-08-07T14:39:29.112629Z","submitted_at":"2025-05-23T10:56:06Z","title":"SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator","version":2},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-07T14:44:50.230363Z"},"links":{"citing_paper":"/paper/2505.17735"},"observation_digest":"sha256:102c17fbfc1611630825d153725d32988bf75f7b47cd7802047c89391df78d36","observation_id":"4ad35265-83c3-40b4-add2-f90a03723df5","resolution":{"observed_at":"2026-08-07T14:44:55.107367Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:44:54.815004Z","title":null,"venue":null,"work_id":"e3ee4895-5efa-4fb4-83c5-0c03deb2e0c3","year":null},"citing_paper":{"arxiv_id":"2505.17735","last_updated":"2025-07-18T07:34:40Z","snapshot_observed_at":"2026-08-07T14:39:29.112629Z","submitted_at":"2025-05-23T10:56:06Z","title":"SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator","version":2},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-07T14:44:50.300211Z"},"links":{"citing_paper":"/paper/2505.17735"},"observation_digest":"sha256:79925f3574bdd0e99304f93ee7e49a54de56bd64cbb70062f9053b4f0acf1235","observation_id":"35bbad60-3368-4e90-a036-a96b6ddee720","resolution":{"observed_at":"2026-08-07T14:44:54.917183Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:44:52.386384Z","title":"Please send a file to my colleague","venue":null,"work_id":"322d5ac5-d63b-446c-b1a3-408241d4196f","year":null},"citing_paper":{"arxiv_id":"2505.17735","last_updated":"2025-07-18T07:34:40Z","snapshot_observed_at":"2026-08-07T14:39:29.112629Z","submitted_at":"2025-05-23T10:56:06Z","title":"SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator","version":2},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-07T14:44:50.363840Z"},"links":{"citing_paper":"/paper/2505.17735"},"observation_digest":"sha256:b7bbc6e29ebe2cab3cb48a82643f8036670241c3ef2d57118b51054a24ae9617","observation_id":"f7b5c116-b72c-4af0-b7a5-c905870c17aa","resolution":{"observed_at":"2026-08-07T14:44:52.461596Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:44:54.418564Z","title":"But avoid generating tasks that are too complex","venue":null,"work_id":"7b5cd32c-8b40-4e55-ba6e-ba8a47f4a842","year":null},"citing_paper":{"arxiv_id":"2505.17735","last_updated":"2025-07-18T07:34:40Z","snapshot_observed_at":"2026-08-07T14:39:29.112629Z","submitted_at":"2025-05-23T10:56:06Z","title":"SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator","version":2},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-07T14:44:50.444843Z"},"links":{"citing_paper":"/paper/2505.17735"},"observation_digest":"sha256:ba10ee0a513b8da1a619cdbaf84a3ea4b6ff923bb954353a45177c80c36584c0","observation_id":"45480140-868c-44cb-8940-4bf40f17d761","resolution":{"observed_at":"2026-08-07T14:44:54.516301Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:44:52.246206Z","title":"In other words, the user instruction should guide the Agent tagger the specified risk","venue":null,"work_id":"746f2e21-c9a4-4649-8a55-7fac37e2c1d0","year":null},"citing_paper":{"arxiv_id":"2505.17735","last_updated":"2025-07-18T07:34:40Z","snapshot_observed_at":"2026-08-07T14:39:29.112629Z","submitted_at":"2025-05-23T10:56:06Z","title":"SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator","version":2},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-07T14:44:50.525607Z"},"links":{"citing_paper":"/paper/2505.17735"},"observation_digest":"sha256:dc15b0a3210ec39e2da67e9bde5ababbf701f0c8e04d2e09f02955eef176dc4a","observation_id":"39b0d599-2150-44fb-8b92-d295330156b6","resolution":{"observed_at":"2026-08-07T14:44:52.302971Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:44:54.148379Z","title":"An action is insecure (0) only if it directly causes sensitive data to be shared or published","venue":null,"work_id":"bf10f3eb-3953-4938-8a0f-239bef2c7e66","year":null},"citing_paper":{"arxiv_id":"2505.17735","last_updated":"2025-07-18T07:34:40Z","snapshot_observed_at":"2026-08-07T14:39:29.112629Z","submitted_at":"2025-05-23T10:56:06Z","title":"SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator","version":2},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-07T14:44:50.615995Z"},"links":{"citing_paper":"/paper/2505.17735"},"observation_digest":"sha256:ee92336e052cab4ca1b78841929a82f7e02b3f5846c182fe0c2a8eb59153b151","observation_id":"9e0c821e-e035-440e-b2e6-fa0df15ce239","resolution":{"observed_at":"2026-08-07T14:44:54.193101Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:44:53.948263Z","title":null,"venue":null,"work_id":"12f579dd-8e06-4977-90c4-6ed42efc653b","year":null},"citing_paper":{"arxiv_id":"2505.17735","last_updated":"2025-07-18T07:34:40Z","snapshot_observed_at":"2026-08-07T14:39:29.112629Z","submitted_at":"2025-05-23T10:56:06Z","title":"SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator","version":2},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-07T14:44:50.688716Z"},"links":{"citing_paper":"/paper/2505.17735"},"observation_digest":"sha256:0a6f66431d2e557675609fbe7eed44744c95e88793a09e43a35503ef0c291043","observation_id":"aa2e5d2d-68dd-471d-b532-2a9f1d5a024e","resolution":{"observed_at":"2026-08-07T14:44:54.054443Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:44:52.122858Z","title":null,"venue":null,"work_id":"8038da2f-b428-4b44-91be-5c8e1d9387fe","year":null},"citing_paper":{"arxiv_id":"2505.17735","last_updated":"2025-07-18T07:34:40Z","snapshot_observed_at":"2026-08-07T14:39:29.112629Z","submitted_at":"2025-05-23T10:56:06Z","title":"SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator","version":2},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-07T14:44:50.752058Z"},"links":{"citing_paper":"/paper/2505.17735"},"observation_digest":"sha256:a3188c346499e407dbb5003d8283063c4faaaca004ee62d457794b2bc8645249","observation_id":"cc2f3175-a631-4890-96ba-fa2d288716e4","resolution":{"observed_at":"2026-08-07T14:44:52.179476Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:44:53.530976Z","title":null,"venue":null,"work_id":"25ba6d9f-02fa-4aa5-9bcd-54dbc0959b7a","year":null},"citing_paper":{"arxiv_id":"2505.17735","last_updated":"2025-07-18T07:34:40Z","snapshot_observed_at":"2026-08-07T14:39:29.112629Z","submitted_at":"2025-05-23T10:56:06Z","title":"SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator","version":2},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-07T14:44:50.826113Z"},"links":{"citing_paper":"/paper/2505.17735"},"observation_digest":"sha256:fc5540f62b0f81ef75b2e8ce829cbcdc4135ddc1a7580f9e6972916196242e95","observation_id":"73d789ba-c5de-4d44-9c82-aceced3353ad","resolution":{"observed_at":"2026-08-07T14:44:53.642106Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:44:53.351818Z","title":null,"venue":null,"work_id":"9a7a8e3d-0907-476a-a125-afe892822c76","year":null},"citing_paper":{"arxiv_id":"2505.17735","last_updated":"2025-07-18T07:34:40Z","snapshot_observed_at":"2026-08-07T14:39:29.112629Z","submitted_at":"2025-05-23T10:56:06Z","title":"SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator","version":2},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-07T14:44:50.909652Z"},"links":{"citing_paper":"/paper/2505.17735"},"observation_digest":"sha256:933ea4cf42b940f1a8a34740680f2e7c3a2a21a10383346db15a1f0ce5af3341","observation_id":"d10aa3f1-bfb0-4204-b97e-143804526901","resolution":{"observed_at":"2026-08-07T14:44:53.438772Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:44:53.174440Z","title":null,"venue":null,"work_id":"ff540307-cc78-453d-add4-b80597201479","year":null},"citing_paper":{"arxiv_id":"2505.17735","last_updated":"2025-07-18T07:34:40Z","snapshot_observed_at":"2026-08-07T14:39:29.112629Z","submitted_at":"2025-05-23T10:56:06Z","title":"SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator","version":2},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-07T14:44:50.987055Z"},"links":{"citing_paper":"/paper/2505.17735"},"observation_digest":"sha256:bbf3f1b60b6eb7e6d9b3866de9c4a9ad7958e4c34561292ae45e148093c410b8","observation_id":"d9cb76ba-cc1d-411a-9bde-899601aa0474","resolution":{"observed_at":"2026-08-07T14:44:53.248802Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:44:51.991958Z","title":null,"venue":null,"work_id":"031532be-2a17-4d49-91e8-d151f2b8282b","year":null},"citing_paper":{"arxiv_id":"2505.17735","last_updated":"2025-07-18T07:34:40Z","snapshot_observed_at":"2026-08-07T14:39:29.112629Z","submitted_at":"2025-05-23T10:56:06Z","title":"SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator","version":2},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-07T14:44:51.056548Z"},"links":{"citing_paper":"/paper/2505.17735"},"observation_digest":"sha256:68e203241d750086ca6076fade868b9a88bd4d903f6935d352b3bedfa34bfe29","observation_id":"8ba8a0b6-c806-4037-9e4d-a7bff1706d62","resolution":{"observed_at":"2026-08-07T14:44:52.046278Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:44:52.918710Z","title":null,"venue":null,"work_id":"b82fae8b-6077-4f78-9c8e-39a267c35e93","year":null},"citing_paper":{"arxiv_id":"2505.17735","last_updated":"2025-07-18T07:34:40Z","snapshot_observed_at":"2026-08-07T14:39:29.112629Z","submitted_at":"2025-05-23T10:56:06Z","title":"SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator","version":2},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-07T14:44:51.122032Z"},"links":{"citing_paper":"/paper/2505.17735"},"observation_digest":"sha256:ca5a37f2a4fe03a7cdbe02551b32f2a1b88dabb0eb524fb731914d67a6261e2b","observation_id":"929f67a8-e09f-464d-bcc9-d7baaec4ff21","resolution":{"observed_at":"2026-08-07T14:44:52.972817Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:44:52.732695Z","title":null,"venue":null,"work_id":"a5553c76-884e-4d46-a826-f9270fb28ea1","year":null},"citing_paper":{"arxiv_id":"2505.17735","last_updated":"2025-07-18T07:34:40Z","snapshot_observed_at":"2026-08-07T14:39:29.112629Z","submitted_at":"2025-05-23T10:56:06Z","title":"SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator","version":2},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-07T14:44:51.204949Z"},"links":{"citing_paper":"/paper/2505.17735"},"observation_digest":"sha256:10d116cd5ece8870d907b966862f1ac6f632694abcdc48c3fe67031dcb5f0c49","observation_id":"b1e59907-b6e6-4f23-ac00-3bb2fc89fed1","resolution":{"observed_at":"2026-08-07T14:44:52.818645Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:44:51.869931Z","title":"subject\":","venue":null,"work_id":"543b95b3-0877-49b1-85ff-bd322a419b9c","year":null},"citing_paper":{"arxiv_id":"2505.17735","last_updated":"2025-07-18T07:34:40Z","snapshot_observed_at":"2026-08-07T14:39:29.112629Z","submitted_at":"2025-05-23T10:56:06Z","title":"SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator","version":2},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-08-07T14:44:51.276710Z"},"links":{"citing_paper":"/paper/2505.17735"},"observation_digest":"sha256:f514ec504ca0c752e492122ea762c51d0b47a1a0fa1e587a5204a54c0f31539a","observation_id":"a1dfceef-7853-4af1-b8fc-807ce8e242fa","resolution":{"observed_at":"2026-08-07T14:44:51.904200Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:44:56.812804Z","title":null,"venue":null,"work_id":"b909e989-3c5d-4a1f-b4a9-84ae8b9ddfb4","year":null},"citing_paper":{"arxiv_id":"2505.17735","last_updated":"2025-07-18T07:34:40Z","snapshot_observed_at":"2026-08-07T14:39:29.112629Z","submitted_at":"2025-05-23T10:56:06Z","title":"SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator","version":2},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-07T14:44:46.711915Z"},"links":{"citing_paper":"/paper/2505.17735"},"observation_digest":"sha256:5b1d5096a864df15968ec747c85c84e1ffd005fd310835200b500cee809bdb7b","observation_id":"2419818c-1e6b-4abc-a03a-782b4786bf75","resolution":{"observed_at":"2026-08-07T14:44:56.910285Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2505.17735","last_updated":"2025-07-18T07:34:40Z","latest_version":2,"primary_category":"cs.AI","snapshot_observed_at":"2026-08-07T14:39:29.112629Z","submitted_at":"2025-05-23T10:56:06Z","title":"SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator"},"reference_resolution":{"displayed":61,"state_counts":{"malformed_identifier":0,"metadata_mismatch":1,"parse_uncertain":0,"unresolved":35,"verified_exact":1,"verified_fuzzy":24},"total_outbound_references":61},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 61 of 61 outbound references and 2 inbound Pith citation observations for arXiv:2505.17735."}