{"as_of":"2026-08-08T08:32:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:b49ee852fa0e845eab5854457d0adc90db0f124ae5babd3b2a58ab74fc17e390","coverage":[{"denominator":124,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":100,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T13:05:36.436653Z","state":"measured"},{"denominator":108,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":108,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":8,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":8,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-05T15:26:33.416300Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":1,"source":"arxiv_reference","source_observed_at":"2026-08-05T02:28:24.338817Z","state":"measured"}],"external_citation_measurements":[{"count":2,"observed_at":"2026-08-05T02:28:24.338817Z","source":"arxiv_reference"}],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"cited_work":{"arxiv_id":"2505.23847","doi":"10.48550/arxiv.2505.23847","metadata_source":"arxiv_reference","pith_arxiv_id":"2505.23847","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Seven security challenges that must be solved in cross-domain multi-agent llm systems","venue":"ArXiv.org","work_id":"4d59b752-59f5-4e11-bad2-b6c79364a0e3","year":2025},"citing_paper":{"arxiv_id":"2508.07407","last_updated":"2025-08-31T14:55:05Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-08-10T16:07:32Z","title":"A Comprehensive Survey of Self-Evolving AI Agents: A New Paradigm Bridging Foundation Models and Lifelong Agentic Systems","version":2},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-05-15T23:21:42.029285Z"},"links":{"cited_paper":"/paper/2505.23847","citing_paper":"/paper/2508.07407"},"observation_digest":"sha256:357834413a0d47715652694544909d0b405910fc5c7b0b957855637f6f166e74","observation_id":"2915ae9e-bd2d-430b-8003-bbd5263a619d","resolution":{"observed_at":"2026-06-29T02:14:01.661949Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.23847","snapshot_observed_at":"2026-08-05T15:26:33.416300Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.19870","last_updated":"2025-08-27T13:33:35Z","snapshot_observed_at":"2026-08-07T05:20:03.066438Z","submitted_at":"2025-08-27T13:33:35Z","title":"Secure Multi-LLM Agentic AI and Agentification for Edge General Intelligence by Zero-Trust: A Survey","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-05T15:26:33.416300Z"},"links":{"cited_paper":"/paper/2505.23847","citing_paper":"/paper/2508.19870"},"observation_digest":"sha256:e8859734176757c1f7d566fc05db5832ad634381d9793a9e8e02d38bb33b0c79","observation_id":"b8382a21-5ab8-4358-8333-eb5e825dbb01","resolution":{"observed_at":"2026-08-05T15:26:33.416300Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"cited_work":{"arxiv_id":"2505.23847","doi":"10.48550/arxiv.2505.23847","metadata_source":"arxiv_reference","pith_arxiv_id":"2505.23847","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Seven security challenges that must be solved in cross-domain multi-agent llm systems","venue":"ArXiv.org","work_id":"4d59b752-59f5-4e11-bad2-b6c79364a0e3","year":2025},"citing_paper":{"arxiv_id":"2510.23883","last_updated":"2026-04-03T16:27:34Z","snapshot_observed_at":"2026-08-02T13:42:34.526072Z","submitted_at":"2025-10-27T21:48:11Z","title":"Agentic AI Security: Threats, Defenses, Evaluation, and Open Challenges","version":3},"reference_index":109,"source":"pdf_text","source_observed_at":"2026-05-18T03:42:10.703369Z"},"links":{"cited_paper":"/paper/2505.23847","citing_paper":"/paper/2510.23883"},"observation_digest":"sha256:0513547c96f47d53abefe98ed2d53cb4b098848fa3fcad9188e524877916f7de","observation_id":"24904a41-cf8d-4242-a026-a9cf68b7b0be","resolution":{"observed_at":"2026-06-29T02:14:01.661949Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.23847","snapshot_observed_at":"2026-08-04T13:26:46.211876Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2511.02841","last_updated":"2025-12-15T16:24:03Z","snapshot_observed_at":"2026-08-06T19:00:43.621115Z","submitted_at":"2025-10-01T08:10:37Z","title":"AI Agents with Decentralized Identifiers and Verifiable Credentials","version":2},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-04T13:26:46.211876Z"},"links":{"cited_paper":"/paper/2505.23847","citing_paper":"/paper/2511.02841"},"observation_digest":"sha256:eab24d84329c270b9a072aebc8d714ec7ab69a9ba99bab4cec73e14a92892d1f","observation_id":"e16ad482-d1cd-4192-98d5-c30e8fbbcfa6","resolution":{"observed_at":"2026-08-04T13:26:46.211876Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"cited_work":{"arxiv_id":"2505.23847","doi":"10.48550/arxiv.2505.23847","metadata_source":"arxiv_reference","pith_arxiv_id":"2505.23847","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Seven security challenges that must be solved in cross-domain multi-agent llm systems","venue":"ArXiv.org","work_id":"4d59b752-59f5-4e11-bad2-b6c79364a0e3","year":2025},"citing_paper":{"arxiv_id":"2604.15367","last_updated":"2026-05-01T15:12:59Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2026-04-15T01:55:40Z","title":"SoK: Security of Autonomous LLM Agents in Agentic Commerce","version":2},"reference_index":91,"source":"pdf_text","source_observed_at":"2026-05-10T13:55:48.290563Z"},"links":{"cited_paper":"/paper/2505.23847","citing_paper":"/paper/2604.15367"},"observation_digest":"sha256:901f29ac39396797ef87e3c304886720ff65b44923a21ae188f4af7392420a36","observation_id":"b2668b3d-c34a-4594-ad7a-086a3857165a","resolution":{"observed_at":"2026-06-29T02:14:01.661949Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"cited_work":{"arxiv_id":"2505.23847","doi":"10.48550/arxiv.2505.23847","metadata_source":"arxiv_reference","pith_arxiv_id":"2505.23847","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Seven security challenges that must be solved in cross-domain multi-agent llm systems","venue":"ArXiv.org","work_id":"4d59b752-59f5-4e11-bad2-b6c79364a0e3","year":2025},"citing_paper":{"arxiv_id":"2606.10749","last_updated":"2026-06-09T12:01:07Z","snapshot_observed_at":"2026-07-31T21:35:18.696472Z","submitted_at":"2026-06-09T12:01:07Z","title":"Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation","version":1},"reference_index":86,"source":"pdf_text","source_observed_at":"2026-06-27T12:55:22.831264Z"},"links":{"cited_paper":"/paper/2505.23847","citing_paper":"/paper/2606.10749"},"observation_digest":"sha256:8bb411a2c33aa746c432857842f54364c6c36cf652eb816a73cabc5a055e72d7","observation_id":"a08e440f-48d7-48c4-b0bc-3dc98b810d00","resolution":{"observed_at":"2026-06-29T02:14:01.661949Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.23847","snapshot_observed_at":"2026-08-01T06:04:46.337829Z","title":"arXiv preprint arXiv:2505.23847 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.22024","last_updated":"2026-07-24T06:43:09Z","snapshot_observed_at":"2026-08-06T15:37:49.497100Z","submitted_at":"2026-07-24T06:43:09Z","title":"Agent Security Needs Redefinition through a Holistic Framework","version":1},"reference_index":213,"source":"arxiv_source","source_observed_at":"2026-08-01T06:04:46.337829Z"},"links":{"cited_paper":"/paper/2505.23847","citing_paper":"/paper/2607.22024"},"observation_digest":"sha256:62d26bf98b9ff9f6168a22a3d38505f20acd4952e8566daab6b329254152c42f","observation_id":"05eb9c01-18bf-4b82-956d-6863ac98f1fd","resolution":{"observed_at":"2026-08-01T06:04:46.337829Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.23847","snapshot_observed_at":"2026-08-04T01:03:45.269216Z","title":"Seven security challenges that must be solved in cross- domain multi-agent llm systems,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.00202","last_updated":"2026-07-31T18:27:12Z","snapshot_observed_at":"2026-08-07T03:19:41.307598Z","submitted_at":"2026-07-31T18:27:12Z","title":"From Monoliths to Swarms: A Study of Attack Surface Evolution in the Transition to Multi-Agent Web Systems","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-04T01:03:45.269216Z"},"links":{"cited_paper":"/paper/2505.23847","citing_paper":"/paper/2608.00202"},"observation_digest":"sha256:1f24072b13c5dd2fd75a4a76d5a43897ebbc8ede470f444c5f2a85ecc33440da","observation_id":"2aeaa6cf-7ac2-4189-9985-d34b853d03c6","resolution":{"observed_at":"2026-08-04T01:03:45.269216Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2505.23847/citation-record","integrity":"/paper/2505.23847/integrity","json":"/paper/2505.23847/citation-record.json","paper":"/paper/2505.23847"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:28.745112Z","title":"N-agent ad hoc teamwork","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:28.745112Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:b6794c02d03449b8df4b62e053724fb2ed26692b644f24781094c1170689b5e5","observation_id":"cd5d8044-0d4a-4d9f-a780-0aed17a5bd8b","resolution":{"observed_at":"2026-08-07T13:05:28.745112Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:28.838290Z","title":"Camel: Communicative agents for \"mind\" exploration of large language model society","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:28.838290Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:4ab93bbecc874ef281778060b805c1bc4f3fc50b866cf30c47b9f1236da05956","observation_id":"82b655e1-027c-4ef5-a0de-20622e45110b","resolution":{"observed_at":"2026-08-07T13:05:28.838290Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:28.912946Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:28.912946Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:55a9713eb00cf7f42372062b2985c29a1f765afe9c63e781e0dda870ca7122b0","observation_id":"9a15f36d-14d3-4fee-9317-b45990b7776a","resolution":{"observed_at":"2026-08-07T13:05:28.912946Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:28.956692Z","title":"Kaminka, Sarit Kraus, and Jeffrey S","venue":null,"work_id":null,"year":2010},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:28.956692Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:b1a750e27286903cb8e442ed01059954513af80157cdbddf15a6d252161b7d7b","observation_id":"2df60225-f53e-4dee-a04c-12dc02ba7e59","resolution":{"observed_at":"2026-08-07T13:05:28.956692Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:29.032367Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:29.032367Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:41fffb6e7616d554034ed8b432848c4c6bc5c4a4b45a9d5d6af0cd752e6eada4","observation_id":"42a7dd7c-f7a9-4958-9e41-1021dec7b702","resolution":{"observed_at":"2026-08-07T13:05:29.032367Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:29.102014Z","title":"Theory of mind for multi-agent collaboration via large language models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:29.102014Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:a3793d926ec263ba9735a259d757cf74f29480f26b3d4edc9fc58c11ac767fb8","observation_id":"fb260161-523d-4243-834c-3328a122ee80","resolution":{"observed_at":"2026-08-07T13:05:29.102014Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:29.248370Z","title":"Privacy preserving multi-agent reinforcement learning in supply chains, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:29.248370Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:e3839397a8494e37ffe42a53cb239cd1b2b8a6decbb22cb2e72ef951f3857106","observation_id":"213c117d-1655-49b1-9168-800ea3aa77a3","resolution":{"observed_at":"2026-08-07T13:05:29.248370Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:29.292281Z","title":"Reflective multi-agent collaboration based on large language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:29.292281Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:b45c2f96c0721cc62cab38eb6c356d09050dcd90f10478b83ed092f2f318171a","observation_id":"e5d98d0b-a61d-428c-a195-80923671a0a8","resolution":{"observed_at":"2026-08-07T13:05:29.292281Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:29.380901Z","title":"Tenenbaum, Antonio Torralba, Shuang Li, and Igor Mordatch","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:29.380901Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:dbff0f7a6a950738ef22996981d4ca4f2bf65968aacf0f678fe151450f90485c","observation_id":"c3874868-d5fa-4aec-89ee-03d51bed5a9d","resolution":{"observed_at":"2026-08-07T13:05:29.380901Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:29.447650Z","title":"Training language models to follow instructions with human feedback","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:29.447650Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:b2914eaad4457ec7cfdd4342e3960ebf0a0cfe629a5ea3d7b7adcc58747a3270","observation_id":"0d6ddf26-19ac-4f83-b067-c1e5f7968545","resolution":{"observed_at":"2026-08-07T13:05:29.447650Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:29.520206Z","title":"Torr, Lewis Hammond, and Christian Schroeder de Witt","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:29.520206Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:d0b872597da889ea3d8d38c32e50162d7edd30f96b82b4202df4a9a81cc82da6","observation_id":"9afa9a95-ceb4-4451-8cff-4e3cee2d56d6","resolution":{"observed_at":"2026-08-07T13:05:29.520206Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:29.604745Z","title":"Ramchurn, and Xiaowei Huang","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:29.604745Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:18fdab970df7688a54390470192f746dab4375e2ae7c5927bdb511b3554108d3","observation_id":"08f0a48d-cf9d-453a-84a7-b1778bed443d","resolution":{"observed_at":"2026-08-07T13:05:29.604745Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:29.652768Z","title":"K-level reasoning for zero-shot coordination in hanabi","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:29.652768Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:f5bd0ff13196335955b80db6496446e1d9c8b368cbcd495bbe6ac01bda064257","observation_id":"9f8a9219-1d97-4a94-8b64-42b3c9c70d0c","resolution":{"observed_at":"2026-08-07T13:05:29.652768Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:29.745372Z","title":"Cooperation, competition, and maliciousness: Llm-stakeholders interactive negotiation","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:29.745372Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:a1084b3d7a066a86b265b8541bfaacf654959c7fd43d1b39f10a684e4e4bd65d","observation_id":"cef1de8e-44f4-408a-a801-30e73f7d41b4","resolution":{"observed_at":"2026-08-07T13:05:29.745372Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:29.817538Z","title":"Honesty is the best policy: defining and mitigating ai deception","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:29.817538Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:b1932f2ef3b5273ee0579bf8035b5ff47cd2947bc99a9d0c03c7ddc0f9a22fb7","observation_id":"9d1094d7-4f55-4fa6-b9ef-c0fc2920218e","resolution":{"observed_at":"2026-08-07T13:05:29.817538Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:29.902590Z","title":"Adversarial policies: Attacking deep reinforcement learning","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:29.902590Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:5d7b7961a1294ca465d0b061206a1b1d42dd798c240a889d4f8ce897eabf1abc","observation_id":"c7f2b831-5985-4828-b54a-875f21359eb6","resolution":{"observed_at":"2026-08-07T13:05:29.902590Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:29.977547Z","title":"Minimum coverage sets for training robust ad hoc teamwork agents","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:29.977547Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:5b1713477c4e0bb3ab40ec91d0994d11306c3486f8fa9e6b20c2b5dd1932221d","observation_id":"c8cdff5f-e23d-49ea-9ecb-6a609bbab56d","resolution":{"observed_at":"2026-08-07T13:05:29.977547Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:30.071896Z","title":"Other–Play","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:30.071896Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:79f80620bd335549922da42f7e1a415eac85da2b8e03ad5add7c0a9517d691b8","observation_id":"d7e65dce-80d9-4144-8486-c9bb2c912c08","resolution":{"observed_at":"2026-08-07T13:05:30.071896Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:30.145355Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:30.145355Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:1f2e8cb420f81a3764af4b9d0a65156cb3033ddb28028d397bd19043b187b5e0","observation_id":"0f36c422-beb3-4792-8564-5c634e71f6c4","resolution":{"observed_at":"2026-08-07T13:05:30.145355Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:30.203370Z","title":"Agents Under Siege: Breaking pragmatic multi-agent llm systems with optimized prompt attacks, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:30.203370Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:41f5a02099c7b25a879c16559f23d90c940bc1fcb72db746f266aa5237f3614b","observation_id":"340912fe-7078-45b8-a56d-de8e48935cb3","resolution":{"observed_at":"2026-08-07T13:05:30.203370Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:30.276909Z","title":"Prompt infection: LLM-to-LLM prompt injection within multi-agent systems, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:30.276909Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:6f73663105ed268298e1b152dc1c411c51bf830b73357ac30f16d704e5fac57b","observation_id":"02418556-4818-46a8-9066-51bf9ec5703f","resolution":{"observed_at":"2026-08-07T13:05:30.276909Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:30.377639Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:30.377639Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:2374e6bca6f403deec5cb55d867c85bf202a3830e2debdfb675bd1ea5cdc4417","observation_id":"0ced904c-5dd2-48a7-a1dd-0e28416f37d3","resolution":{"observed_at":"2026-08-07T13:05:30.377639Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:30.450923Z","title":"Teams of llm agents can exploit zero-day vulnerabilities, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:30.450923Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:cc5818ea15fda8c7283797541c248c90f7feb4c85ee5e3978b2a142750771dd1","observation_id":"9ea3ddad-57b2-4414-962e-7ca4ccf1af06","resolution":{"observed_at":"2026-08-07T13:05:30.450923Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:30.540076Z","title":"Robust multi-agent reinforcement learning via adversarial regu- larization: theoretical foundation and stable algorithms","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:30.540076Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:54b6dd2d74f3a7b8052ba88d0673f2daf9e7f3fbd9361cc947e32b032055e3ea","observation_id":"68f30e25-4595-427a-b745-42a0ea17ee02","resolution":{"observed_at":"2026-08-07T13:05:30.540076Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:30.600286Z","title":"Aligning individual and collective objectives in multi-agent cooperation","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:30.600286Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:1d0ce285dd7af72a7c4302e8ee6708c9359a6ad888e6484563f2c705b435ca75","observation_id":"57c5ee46-adfa-48f3-a263-aa3439efc15f","resolution":{"observed_at":"2026-08-07T13:05:30.600286Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:30.689776Z","title":"Emergent reciprocity and team formation from randomized uncertain social preferences","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:30.689776Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:c83df3ba6bd9cfcb1f5a1e3a04eede28755b1980002c03f16904f3e7ee42148a","observation_id":"5f31ac4f-0f86-4518-b5c8-14c60451d694","resolution":{"observed_at":"2026-08-07T13:05:30.689776Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:30.791468Z","title":"Navigating the risks: A survey of security, privacy, and ethics threats in llm-based agents, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:30.791468Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:efae1b903b6b244ffc5e28c612895edf8c529c8ddb0da4beb7c8a0f38b53e559","observation_id":"b368abec-5cfd-45bd-9a34-d237c9fbc18b","resolution":{"observed_at":"2026-08-07T13:05:30.791468Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:30.878785Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:30.878785Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:01bad1111b770bdc72b1033c98cdbe422d3082fd2f6b0531dd3dd2fe3a11848e","observation_id":"29f2f745-7ae9-4652-8b86-adbaa13239b8","resolution":{"observed_at":"2026-08-07T13:05:30.878785Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:30.950332Z","title":"Efficient adversarial attacks on online multi-agent reinforcement learning","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:30.950332Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:774014afacafe005a966a9d71fa53c4b10db6cef27cda9d3257b426fc28e770d","observation_id":"c9872209-0d68-41aa-81da-73443577a9b0","resolution":{"observed_at":"2026-08-07T13:05:30.950332Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:31.037737Z","title":"Zico Kolter, and Matt Fredrikson","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:31.037737Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:cc20d7be4d3273529ecdd29d954ca54f2b9de283abfef86a21ccbfac976411a3","observation_id":"bab261bd-fe1f-4b11-bd1a-b538d793599d","resolution":{"observed_at":"2026-08-07T13:05:31.037737Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:31.112749Z","title":"Prompt injection attack against llm- integrated applications, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:31.112749Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:ee92f9874881ab682dcac9e2d109de450f77e7e004ceca0da585987bbd7c1a21","observation_id":"9f751df3-66e4-41e1-ab0e-c7035b5b74b1","resolution":{"observed_at":"2026-08-07T13:05:31.112749Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:31.222704Z","title":"BERT-ATTACK: Adversarial attack against BERT using BERT","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:31.222704Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:87682e2b63ec7852cf2582816899cfc8bb7142136f03c21c0881af70c8cc354a","observation_id":"f9d3f1a7-bb7e-4e52-bdc6-caf186b7b981","resolution":{"observed_at":"2026-08-07T13:05:31.222704Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:31.303513Z","title":"Jailbreaking gpt-4v via self- adversarial attacks with system prompts, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:31.303513Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:39c7102ffc9fbe3770f044ff57abbadd9df3826921e91f6703296ada81610529","observation_id":"c571e03a-df64-43c8-80fb-3dcc8643547c","resolution":{"observed_at":"2026-08-07T13:05:31.303513Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:31.371649Z","title":"GPT-4 jailbreaks itself with near-perfect success using self-explanation","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:31.371649Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:aaceaace363c546e3ef42a068f96d97e4330ce88e0ef0ee2779273d9946f36e0","observation_id":"f7416a4d-eba3-4257-8ae5-756ffba3f2d3","resolution":{"observed_at":"2026-08-07T13:05:31.371649Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:31.457214Z","title":"Bowman, Ethan Perez, Roger Baker Grosse, and David Duvenaud","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:31.457214Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:869852ca1b9909eb2193f24549086c1c690cc8b2486dd7d9e943b89920d467c1","observation_id":"edcb3014-d23a-4a3b-af64-48db5af545ed","resolution":{"observed_at":"2026-08-07T13:05:31.457214Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:31.589274Z","title":"Universal adver- sarial triggers for attacking and analyzing NLP","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:31.589274Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:f6e427dc9d7e6eea815f4752eaac09933d19d0a893e11e021bc45d1a217715e0","observation_id":"9c329e5f-b8e8-48d0-94fe-e42dc2fb3edd","resolution":{"observed_at":"2026-08-07T13:05:31.589274Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:31.665231Z","title":"Tree of attacks: Jailbreaking black-box llms automatically","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:31.665231Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:e830dfd05d3c66921c5cf3d26c0ba9d12089b6cdf47a7c6d0b29178b25fa8d01","observation_id":"1e24a2e6-aa23-46b7-910f-1b8757c5396e","resolution":{"observed_at":"2026-08-07T13:05:31.665231Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:31.744314Z","title":"Jailbroken: How does LLM safety training fail? In Thirty-seventh Conference on Neural Information Processing Systems, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:31.744314Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:7c65e662559934a2ccf9f93ce0d8142388c0c8ad63032455684f480e5787ad60","observation_id":"a35f0f1c-29b7-4ae3-84a8-1a8a8f3c94bd","resolution":{"observed_at":"2026-08-07T13:05:31.744314Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:31.858459Z","title":"TruthfulQA: Measuring how models mimic human falsehoods","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:31.858459Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:efab87c1e82987719d730cb2593e43d78ce23db14e4128504c12e2c1007ba8f2","observation_id":"e17839b3-345f-4c8a-af30-edd9343f9fe0","resolution":{"observed_at":"2026-08-07T13:05:31.858459Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:31.980380Z","title":"Shadow alignment: The ease of subverting safely-aligned language models, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:31.980380Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:f3c1942d8279f6f997c2a8f415789f3045d9df07d5092821d8e36fcfd9927552","observation_id":"6c0d13c4-29d1-4dc5-9f7e-deb0ebc73c6e","resolution":{"observed_at":"2026-08-07T13:05:31.980380Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:32.067401Z","title":"Maddison, and Tatsunori Hashimoto","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:32.067401Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:ec7694c7af8f79b927115ef41a9ac2e6edfa88d93d75f2301cbb8e0d354cd457","observation_id":"8948c4e3-bea6-43b1-96d9-6966459af042","resolution":{"observed_at":"2026-08-07T13:05:32.067401Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:32.144382Z","title":"Visual adversarial examples jailbreak aligned large language models.Proceedings of the AAAI Conference on Artificial Intelligence, 38(19):21527–21536, Mar","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:32.144382Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:ee1bde5ecacfc8dc994c25cc9b6351bd52ee04729529c071aba306b530f47fab","observation_id":"1bdcccd0-68b4-44aa-b841-535f4656534b","resolution":{"observed_at":"2026-08-07T13:05:32.144382Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:32.211777Z","title":"React: Synergizing reasoning and acting in language models.International Conference on Learning Representations (ICLR)","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:32.211777Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:9d55e4b8219e4998a8d36250fed2c1dd07d6fcddb95d5d398554a7c0af3d32dd","observation_id":"8fb87bd0-c9c5-48f8-a695-7c6922e1a13d","resolution":{"observed_at":"2026-08-07T13:05:32.211777Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:32.331651Z","title":"Toolformer: Language models can teach themselves to use tools","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:32.331651Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:57100d0aea1ab790f39b279462cb60c9549953c12d20fa2d502e9c3d55c23cc0","observation_id":"e3bf585e-55b9-485d-b9cc-7dc964e90925","resolution":{"observed_at":"2026-08-07T13:05:32.331651Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:32.425184Z","title":"Llm agents can autonomously hack websites, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:32.425184Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:30a9933615af1b687ecbdd8fe8cb6fcc56f3dba828bbe14306ec438b1afbbeab","observation_id":"88f4ff58-724a-42fa-acd2-c2b9f0433cbe","resolution":{"observed_at":"2026-08-07T13:05:32.425184Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:49.326126Z","title":"Gpt-4 hired unwitting taskrabbit worker by pretending to be ‘vision-impaired’ human, 2023","venue":null,"work_id":"b5d85a21-e983-4f90-abb7-7b765a33ebd5","year":2023},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:32.531913Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:dade3d58e61bb28a24b2f4af81e5158216429517c3b460e42cebb755d57d5a73","observation_id":"e00a7e9d-b027-42f3-a481-f2b8fa441f22","resolution":{"observed_at":"2026-08-07T13:05:49.377622Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:49.133965Z","title":null,"venue":null,"work_id":"3f58d484-9a8b-47c0-9fca-6fe3b2999667","year":2024},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:32.609454Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:f2b3d5226ea7bb74361ae0e8be7713a6e3710e82c55f934031af22dc139d5586","observation_id":"dbe0c9c5-3b8d-4da8-a60b-4d731dcaea96","resolution":{"observed_at":"2026-08-07T13:05:49.231746Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:48.944503Z","title":"Poisoning language models during instruction tuning","venue":null,"work_id":"959b3296-4fcf-4805-8bea-0cb6073c589b","year":2023},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:32.700538Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:fc18f0f500674482c7b6aedb8dd29c116e4e8fdce2ae7ec43ae899206216ac8c","observation_id":"b1f78769-ab10-4c5c-8f63-9bbfbe7b5f24","resolution":{"observed_at":"2026-08-07T13:05:49.031103Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:48.766842Z","title":"Imperio: language-guided backdoor attacks for arbitrary model control","venue":null,"work_id":"50905a68-8f2d-45ff-bc70-c0149fb37214","year":2024},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:32.798302Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:104d2fa7a6c2fc2d48b7bf81710b438041e4059f41b88d16e8ece2431be69ed3","observation_id":"e13f8022-6229-4a3a-9faa-780e049ab9b5","resolution":{"observed_at":"2026-08-07T13:05:48.846592Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:48.607879Z","title":"Membership inference attacks against fine-tuned large language models via self-prompt calibration","venue":null,"work_id":"eb6b640c-2613-4922-9a10-1a9bc65e449d","year":null},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:32.918722Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:6c1fb4612cd9a927fceb707cdcc1faa95b3515adda08fd3aba044613104ce2ce","observation_id":"74cacfe3-5ff9-4fd6-bf09-a2fa17c748fd","resolution":{"observed_at":"2026-08-07T13:05:48.671969Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:48.387200Z","title":"Quantifying memorization across neural language models","venue":null,"work_id":"63262db3-2a9d-436c-b8cc-9d572a6f739d","year":2023},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:33.017398Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:38152578dab2b5fa8dcb528356c55022680537cbba9806aa3848111f14c47a4b","observation_id":"f8f2d202-a0dd-4785-ae3c-70abc7a85900","resolution":{"observed_at":"2026-08-07T13:05:48.482670Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:48.211986Z","title":null,"venue":null,"work_id":"bda7d285-28a8-4ffe-a734-9614bab9dee2","year":2020},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:33.101241Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:857284ab820f2a3b05b8f71e7f513bc30f79e95268aefc30463a5d93d5831079","observation_id":"23428347-1607-43a4-a8f9-5b8c6a686d66","resolution":{"observed_at":"2026-08-07T13:05:48.283905Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:48.034211Z","title":"Is bert really robust? a strong baseline for natural language attack on text classification and entailment","venue":null,"work_id":"1b5b0001-e3b8-4866-b813-39cb3db4bb57","year":2020},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:33.178874Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:2f488f191fe845c9602d38e977b79ec28fcf3fb6c2e8e4aae2c9db52a8d86cb5","observation_id":"b51fa7eb-10e4-4ced-8573-7e46d94d565e","resolution":{"observed_at":"2026-08-07T13:05:48.121686Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:47.878191Z","title":"Llama Guard: LLM-based input–output safeguard for human–ai conversations, 2023","venue":null,"work_id":"84ab0eef-54b4-4c62-9a7c-ea74ffe72e49","year":2023},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:33.255035Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:80dee659018863de95d2d3edf54715919d7df396eec3306f592963489c146806","observation_id":"583b7b98-3598-41fb-a632-4217697d86bb","resolution":{"observed_at":"2026-08-07T13:05:47.950929Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:47.754071Z","title":null,"venue":null,"work_id":"9cfc8f09-9c05-485d-9b45-c8d3b8a2f4c7","year":2023},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:33.323374Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:2dc0e82176cce29785cb4ad59770e050a1c1d5812bf271bd607cf682d6dc2977","observation_id":"3453d995-0b0f-40a3-84bf-9a79c44bcf8f","resolution":{"observed_at":"2026-08-07T13:05:47.836039Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:47.602688Z","title":"Toxicity in chatgpt: Analyzing persona-assigned language models","venue":null,"work_id":"2dd74978-9c3f-4653-a747-df8f6c82be65","year":2023},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:33.391251Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:7d4618d02ebd8b88008fa235c03aaec2f5d323ba0fb0aaece475f0b96d623bc8","observation_id":"aaa07675-66d5-403e-972f-4a7601ac92cb","resolution":{"observed_at":"2026-08-07T13:05:47.664631Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:47.455344Z","title":"Fight back against jailbreaking via prompt adversarial tuning","venue":null,"work_id":"bc688156-b17a-4fcb-8bf5-cb00d556ef80","year":2024},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:33.433609Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:9a6b384454e88aa6ea3ab366499edb721bf0069586d7954cf705107cd52b1ff6","observation_id":"2e777191-1e18-4908-8167-c27014ba0e4f","resolution":{"observed_at":"2026-08-07T13:05:47.531898Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:47.342357Z","title":"Robust prompt optimization for defending language models against jailbreaking attacks","venue":null,"work_id":"3874d895-dbec-4a13-bd62-1eda1fa2096e","year":2024},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:33.535612Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:82f27bd6b5bb12ba200ed25d1d837b2f3c54c3275ecc860406bb42c0576da225","observation_id":"73b85902-a625-4522-aabe-44c935ac5676","resolution":{"observed_at":"2026-08-07T13:05:47.404794Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:33.606451Z","title":"Freelb: Enhanced adversarial training for natural language understanding","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:33.606451Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:1e34ba882f02aec531101fdc7a1f27d006b7f3e413c2993e508a656c15961e9a","observation_id":"dc6bc80d-88fe-4e97-9ce9-1558f8da7112","resolution":{"observed_at":"2026-08-07T13:05:33.606451Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:47.214201Z","title":"Mat: mixed-strategy game of adversarial training in fine-tuning","venue":null,"work_id":"7815d95c-a184-4571-b0c4-0aeae6338ffc","year":2023},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:33.708418Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:ef2591ae2b6e60c8d1808014dd2eb5f7ff3b570aa05813de6c4295b38d8f60e0","observation_id":"9d1cd925-9bd2-4348-8fef-4d5b7d3e3f71","resolution":{"observed_at":"2026-08-07T13:05:47.293956Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:47.090756Z","title":"Adversarial self-attention for language understanding","venue":null,"work_id":"ee37e734-c4d0-489b-8e4e-49b263d6da30","year":2023},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:33.777050Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:f78e398f94a9d2e84efbadff5ec832b99f23b127a82f2c1e210181fcbe78cdaf","observation_id":"7f89c5a0-d730-401a-8d7b-90c1b3210300","resolution":{"observed_at":"2026-08-07T13:05:47.141969Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:46.950877Z","title":"RoAST: Robustifying language models via adversarial perturbation with selective training","venue":null,"work_id":"eafe0d12-11a9-43f6-bc65-987e95c611ef","year":2023},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:33.847043Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:62652ce3f8b4cf19b1398bb06e5f29e96a2344e7205aa7976a400ec4f79f9afd","observation_id":"1aab8434-abd4-44ee-b20f-9cd2d028629d","resolution":{"observed_at":"2026-08-07T13:05:47.006148Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:33.975563Z","title":"Fast model editing at scale","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:33.975563Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:69321d25884e375aed0ed92e9b166777f30e0ca8c4bb41a268176e1ce105d6ad","observation_id":"bc07d6eb-4f1a-4764-a201-ebedf6ab9127","resolution":{"observed_at":"2026-08-07T13:05:33.975563Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:46.813392Z","title":"Evil geniuses: Delving into the safety of llm-based agents, 2024","venue":null,"work_id":"b328ed2a-9478-4f8b-8778-50fd550e8350","year":2024},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:34.045650Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:20c0ff6d7ac5a52dcb5e48edd567fd8d703a8c83d6756a4f721794b6c42afb89","observation_id":"fc57019a-1b69-4205-8b57-3a1b4fb46caf","resolution":{"observed_at":"2026-08-07T13:05:46.886940Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:46.672081Z","title":"A survey on trustworthy llm agents: Threats and countermeasures, 2025","venue":null,"work_id":"c6a181cc-7efc-496e-9be0-37c345019815","year":2025},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:34.122891Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:79af761546971dba4160f117d59c7c5c54b002d4783c8c2dac1df507476c144d","observation_id":"b78de146-a0a6-4dbc-862b-ab98bc74b22e","resolution":{"observed_at":"2026-08-07T13:05:46.734182Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:46.541778Z","title":"Agentsafe: Safeguarding large language model-based multi-agent systems via hierarchical data management, 2025","venue":null,"work_id":"b1afe0f7-a081-4b5f-a1e6-41a7632965ac","year":2025},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:34.224637Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:c55efdf2051f0950713e6456fb525af5c3f12aca686af97ef31fcc765f13d26a","observation_id":"58d2a244-a430-45b0-ae49-82aa988c6bb9","resolution":{"observed_at":"2026-08-07T13:05:46.602115Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:46.403169Z","title":"Watch out for your agents! investigating backdoor threats to LLM-based agents","venue":null,"work_id":"06e0b7d6-e4f2-4ec4-99b5-df7050632276","year":2024},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:34.302679Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:e382415a9e165e8c2823b43ce9cf4ecb104c019488be022d1878feffc3a11a7e","observation_id":"7fb51940-4e11-43cb-8927-b991b8dc7246","resolution":{"observed_at":"2026-08-07T13:05:46.441948Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:46.254916Z","title":"Backdooring instruction-tuned large language models with virtual prompt injection","venue":null,"work_id":"6c0e5428-4583-467c-960c-3db2f79047a2","year":2024},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:34.374601Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:cea416976dc77e360e32871c93addda6f2b3a3b542dc94dbe7340466815819ff","observation_id":"3ca89800-0bf1-4fd9-a63a-2b137eef6c0d","resolution":{"observed_at":"2026-08-07T13:05:46.309645Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:46.094682Z","title":"Ignore this title and HackAPrompt: Exposing systemic vulnerabilities of LLMs through a global prompt hacking competition","venue":null,"work_id":"949e69c3-5a6b-44d6-a477-031a2474b8fc","year":2023},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:34.473332Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:f3427df2f9287b2dfddfe7ec331302cfa8743dde7c55eb2f4d8d72a6c0c8a8c5","observation_id":"7731c074-91a4-4f5f-ac16-a2bdec2d8b75","resolution":{"observed_at":"2026-08-07T13:05:46.192684Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:45.963800Z","title":"Assessing vulnerabilities in state-of-the-art large language models through hex injection (student abstract)","venue":null,"work_id":"6cb1a7da-1208-4423-8020-ffbdc9588b19","year":2025},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:34.534294Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:70f0150333c8c6196eb6476fa5186debe797fce548e0d2bdfe97670fe4d6c8c9","observation_id":"82056beb-b79e-45aa-8460-adf82730efe4","resolution":{"observed_at":"2026-08-07T13:05:46.053018Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:45.814259Z","title":"A hitchhiker’s guide to jailbreaking chatgpt via prompt engineering","venue":null,"work_id":"22fc9f19-8b2e-4dc7-82dd-019d464e983d","year":2024},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:34.608422Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:44f724ac9e9847b05572ce6e79d6da3034e1da38353a3011573fcd1182af49bc","observation_id":"3958708b-67f6-4fdd-a61d-4cb96369ca94","resolution":{"observed_at":"2026-08-07T13:05:45.903056Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:45.679533Z","title":"Infecting LLM agents via generalizable adversarial attack","venue":null,"work_id":"aaa75842-de80-49a9-bd29-d1154fc85eca","year":2025},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:34.667400Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:824b94777ad7c32208ed3652e4e654c690bffe7c3cc41673341a32d35e24d758","observation_id":"b3bfe75c-85aa-4907-81f5-394cad00daa0","resolution":{"observed_at":"2026-08-07T13:05:45.751439Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.01637","last_updated":"2025-03-30T00:26:48Z","snapshot_observed_at":"2026-08-08T04:41:33.967516Z","submitted_at":"2024-06-02T16:25:26Z","title":"Teams of LLM Agents can Exploit Zero-Day Vulnerabilities","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.01637","snapshot_observed_at":"2026-08-07T13:05:34.718603Z","title":"Teams of llm agents can exploit zero-day vulnerabilities","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:34.718603Z"},"links":{"cited_paper":"/paper/2406.01637","citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:d09abb9adff8aabd2d1aae5683ccdf8ab7664cc27a0878b993b653e34e414771","observation_id":"4d55c973-ec46-439f-b677-0cfab1509288","resolution":{"observed_at":"2026-08-07T13:05:34.718603Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:45.577305Z","title":"Assessing risks of using autonomous language models in military and diplomatic planning","venue":null,"work_id":"cebb12e5-8b2d-491b-9234-c2cc3246845b","year":2023},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":74,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:34.811464Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:61ff6c9371578df3deef4b0be78cff3a33be4c5c1f901eabd7f411d7c1825c4c","observation_id":"7497bd97-823e-4e68-8bff-2faf266bc9de","resolution":{"observed_at":"2026-08-07T13:05:45.617312Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.10490","last_updated":"2023-10-03T17:03:10Z","snapshot_observed_at":"2026-08-04T02:19:57.679295Z","submitted_at":"2023-07-19T23:03:20Z","title":"Abusing Images and Sounds for Indirect Instruction Injection in Multi-Modal LLMs","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.10490","snapshot_observed_at":"2026-08-07T13:05:34.852642Z","title":"(ab)using images and sounds for indirect instruction injection in multi-modal llms.CoRR, abs/2307.10490, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":75,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:34.852642Z"},"links":{"cited_paper":"/paper/2307.10490","citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:1df3eef5726248ce283642401936d6aaeb1ecc4513ce2d96a2f36eee8d94fbe0","observation_id":"e177162d-e68a-4e9f-a1e1-382d99dbc1e8","resolution":{"observed_at":"2026-08-07T13:05:34.852642Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:45.445322Z","title":"Revisiting character-level adversarial attacks for language models","venue":null,"work_id":"8eb31d0b-6e13-4a8f-8bc8-3720b1b1fabb","year":2024},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":76,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:34.909149Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:c4b7f9b8c200a641d37f130f6384a4c1b74113962f922174fb64067b70e194b1","observation_id":"022f275d-7bff-4875-a3f2-6189ac02ea30","resolution":{"observed_at":"2026-08-07T13:05:45.486931Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:45.299558Z","title":"MultiAgent collaboration attack: Investigating adversarial attacks in large language model collaborations via debate","venue":null,"work_id":"81f3f40b-e435-446d-9fa3-1cbba5677bd1","year":2024},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":77,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:35.000168Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:502c16a561e6622136ac9e93561d09050b0b4fe5fbeb0305bdb2b68e8f123c1e","observation_id":"e3ffa798-ea10-4014-8c22-e8a69128400f","resolution":{"observed_at":"2026-08-07T13:05:45.377915Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:45.143891Z","title":"Multi-turn jailbreaking large language models via attention shifting","venue":null,"work_id":"ad3f79ba-d055-4d1f-9259-989f72e07bba","year":2025},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":78,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:35.056588Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:6b832adbd17d6074f296c159c21091f1516e41ed4faff6bf8275990acfd2517f","observation_id":"0607f821-af20-4477-81c6-7fb67d3ad0ff","resolution":{"observed_at":"2026-08-07T13:05:45.187546Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:44.976139Z","title":"Autosafecoder: A multi-agent framework for securing llm code generation through static analysis and fuzz testing, 2024","venue":null,"work_id":"427c2682-c641-41e1-85a2-3af7b24b8091","year":2024},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":79,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:35.114644Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:87503024b206635264b6833f5ba08209eac8e3635cf31befaec3eaeb80ffc4fe","observation_id":"d381ef4f-0db8-452f-8864-1030f641eda8","resolution":{"observed_at":"2026-08-07T13:05:45.050551Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:44.818199Z","title":"Injecagent: Benchmarking indirect prompt injections in tool-integrated large language model agents, 2024","venue":null,"work_id":"eac02046-2628-4a7d-8e5e-ee2ced6535cb","year":2024},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":80,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:35.202174Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:92f32c029494fdadd78dd3423ca7b82ab2cfb9c65441ba0c2f9afc41cfaa941d","observation_id":"87bc1f94-5f39-4ef5-b8a5-41da7bef7209","resolution":{"observed_at":"2026-08-07T13:05:44.914609Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:44.623572Z","title":"Not what you’ve signed up for: Compromising real-world llm-integrated applications with indirect prompt injection","venue":null,"work_id":"2ef74df1-21c9-4478-b5a7-d8b7db38789e","year":2023},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":81,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:35.260721Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:f8edf8967237b78a560f09d7a9e94f40e62ca2f8a71b1b0bafae4fcbdce0b1ec","observation_id":"3f987677-653a-48c7-921f-138a60f4cfbf","resolution":{"observed_at":"2026-08-07T13:05:44.722825Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:44.483882Z","title":"Removing RLHF protections in GPT-4 via fine-tuning","venue":null,"work_id":"4fabf807-15b5-4756-919f-4540b3375991","year":2024},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":82,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:35.314964Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:e8efeef7ece986930f2addc3eb62f5fdc0bdc1441bbe09f15c94ce0b72054e48","observation_id":"31aa3c04-47e7-4c5c-ae83-21cf6f396d97","resolution":{"observed_at":"2026-08-07T13:05:44.544249Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:44.356511Z","title":"Multi-agent security tax: Trading off security and collaboration capabilities in multi-agent systems","venue":null,"work_id":"925c51de-f3ab-49c9-8b93-6309cf9d0171","year":2025},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":83,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:35.381401Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:9bb6d5c4947fe6e994ca93b969933a507642618ea802fae37e5d33eabaf2c0cb","observation_id":"9c78f597-ff25-4d1f-8fd1-e21dada96d7b","resolution":{"observed_at":"2026-08-07T13:05:44.424904Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:44.177958Z","title":"Simulate and eliminate: Revoke backdoors for generative large language models.Proceedings of the AAAI Conference on Artificial Intelligence, 39(1):397–405, Apr","venue":null,"work_id":"abd9e3c2-8508-4469-97eb-f23e3dfd1f7a","year":2025},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":84,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:35.434013Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:9ec7b997f943c07739af37cca94afda85d9b41de0231bf35fb63c330d122a1fa","observation_id":"52246df9-5b81-4e58-835f-b66c8c848810","resolution":{"observed_at":"2026-08-07T13:05:44.267121Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:44.012920Z","title":"LLM-PIRATE: A benchmark for indirect prompt injection attacks in large language models","venue":null,"work_id":"013d22ac-35a9-47f4-98a0-fcbd3965c3e3","year":2024},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":85,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:35.471456Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:dc0731227664c797de5ce93179d0593f942d0b3c48bb45164d28e8f1d9c3e3b3","observation_id":"b50f2879-cb40-4131-b874-524ea00071e0","resolution":{"observed_at":"2026-08-07T13:05:44.094832Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:43.834762Z","title":"Immunization against harmful fine-tuning attacks","venue":null,"work_id":"6efe26e8-110c-4034-a6fc-1523b0ee50b5","year":2024},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":86,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:35.548630Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:06431540572783a26a43bd143804847ae9cdfdbfc24d3c67aec414e8f380969a","observation_id":"233faa9d-d152-40d9-9b0f-f34e74567d36","resolution":{"observed_at":"2026-08-07T13:05:43.913661Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:35.598120Z","title":"A dynamic llm-powered agent network for task-oriented agent collaboration, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":87,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:35.598120Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:c8bfd372b6c25d4304f16d9ddee8d5c088b86452b285b9fab17e373c331eb5a6","observation_id":"c455217a-f5c7-4cad-8f5d-0abc9f30763a","resolution":{"observed_at":"2026-08-07T13:05:35.598120Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2108.00352","last_updated":"2021-08-01T02:22:31Z","snapshot_observed_at":"2026-07-30T12:33:59.031235Z","submitted_at":"2021-08-01T02:22:31Z","title":"BadEncoder: Backdoor Attacks to Pre-trained Encoders in Self-Supervised Learning","version":1},"cited_work":{"arxiv_id":"2108.00352","doi":null,"metadata_source":"pith","pith_arxiv_id":"2108.00352","snapshot_observed_at":"2026-08-07T13:05:37.844932Z","title":"BadEncoder: Backdoor Attacks to Pre-trained Encoders in Self-Supervised Learning","venue":"cs.CR","work_id":"64ba1e12-93f8-4ad5-a383-60ee688ee17b","year":2021},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":88,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:35.656867Z"},"links":{"cited_paper":"/paper/2108.00352","citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:d680048e54df6b67c5b8c26d30fc4eb7ad308002239c35e2d873fb09e9f94f3a","observation_id":"84b04f7c-1f48-4060-826c-1b59476fa5d0","resolution":{"observed_at":"2026-08-07T13:05:37.882879Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:43.582046Z","title":"Clibe: Detecting dynamic backdoors in transformer-based nlp models","venue":null,"work_id":"c3ebfacc-beef-40ca-8bc1-93a2bfe3b3d1","year":2025},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":89,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:35.739022Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:334f677059f73cb03b4981737bcb82d5b8012c1c4b85850cbec52046e0e27cf7","observation_id":"32e9a39a-fada-4695-a8ee-8bf69182f070","resolution":{"observed_at":"2026-08-07T13:05:43.678206Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:43.476828Z","title":"Jfrog and hugging face join forces to expose malicious ml models, 2025","venue":null,"work_id":"69307e8a-4b2b-441f-acf0-b41fca888089","year":2025},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":90,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:35.802999Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:5ff63e92c05f26d685d5083277653bfde1f3ca478a008c14a51d79f6ec503232","observation_id":"bd502494-d4a0-48cb-a9f1-cf3f856f9ccc","resolution":{"observed_at":"2026-08-07T13:05:43.542181Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:43.333255Z","title":"Adversarial attacks on cooperative multi-agent deep reinforcement learning: A dynamic group-based adversarial example transferability method","venue":null,"work_id":"3cb8bc66-9c70-486c-9092-d38336b7c53c","year":2023},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":91,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:35.864092Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:319263096acb7d1a6f4967c7c718b257297a85ed3c60f63f2159c701e0329aab","observation_id":"a3750f84-319e-4f43-b66f-96076fa96c0c","resolution":{"observed_at":"2026-08-07T13:05:43.405740Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:43.193514Z","title":"Auto- matic grouping for efficient cooperative multi-agent reinforcement learning","venue":null,"work_id":"f2fee3cb-fdc1-444e-9d57-9127a9ac301f","year":2023},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":92,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:35.948856Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:3a59716df39a9fb7b4dbc62d304e381f858d9a2a855e1e74e57c30c9b8f3d24e","observation_id":"562d4d23-1d41-48c9-af6d-89ac88f74ac8","resolution":{"observed_at":"2026-08-07T13:05:43.237305Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:43.042301Z","title":"Backdoorl: Backdoor attack against competitive reinforcement learning","venue":null,"work_id":"aca52e62-5463-437d-b4fc-305893ce1f01","year":2021},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":93,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:36.003447Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:d4bb4407bf91c09a64b2496e600d8a1d2853a960e2abb440ac383d25d6e96604","observation_id":"67b537c5-4696-4557-8069-6ad9909ae02c","resolution":{"observed_at":"2026-08-07T13:05:43.125961Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:42.894421Z","title":"Group-aware coordination graph for multi-agent rein- forcement learning","venue":null,"work_id":"2cafb7a4-6fff-4627-8239-f42fab722bce","year":2024},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":94,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:36.066721Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:d7f6ee8f566aae77cba7ea0381f3eb4d5615fcda031737d78a3dab9137bf1eea","observation_id":"12071fff-309c-47ef-a630-aa4d4e42adb9","resolution":{"observed_at":"2026-08-07T13:05:42.974108Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:42.777244Z","title":"Pan, Shuyi Yang, Lakshya A","venue":null,"work_id":"c140da58-61e2-42f0-99fe-a2bb937eb9d6","year":2025},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":95,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:36.150849Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:1e6f8e522633acf43a46f60449d6c39c8c3fe83ff6d17d5aba22c1ab71bdc32b","observation_id":"5dc1ec11-4304-49f3-863a-5bbe4957fdb8","resolution":{"observed_at":"2026-08-07T13:05:42.847512Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:42.590559Z","title":"Kwon, Makoto Onizuka, Shaojie Tang, and Chuan Xiao","venue":null,"work_id":"7badccf5-3584-4126-961f-e7793db2ec24","year":2024},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":96,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:36.193479Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:8e0743a16f7bbe3b6eeb6557e0764b88e7d883598fda12639f526e332f65ebb4","observation_id":"98658d58-5c04-4dca-af28-fe425ed763f0","resolution":{"observed_at":"2026-08-07T13:05:42.698003Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:36.278584Z","title":"Certifiably robust policy learning against adversarial multi-agent communication","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":97,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:36.278584Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:bbf9be9ad066fdd246d5c9659508b7fc9bdcd5ee8ea94a5d7582fe6a3be35bc0","observation_id":"4dc71cd3-6dc5-488b-8fde-c3c63af5ef08","resolution":{"observed_at":"2026-08-07T13:05:36.278584Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:42.423489Z","title":"T2mac: targeted and trusted multi-agent communication through selective engagement and evidence-driven integration","venue":null,"work_id":"46f8e65a-ec1f-4668-a58a-0df0e6a53c38","year":2024},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":98,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:36.350927Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:4fab6b44fb3e6c46f612778594f487a615eca274e7e8bece7ce5e95f2ead4df5","observation_id":"acbb6996-6195-430c-928e-aee457bd501e","resolution":{"observed_at":"2026-08-07T13:05:42.531983Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:42.333957Z","title":"BlockAgents: Towards byzan- tine–robust llm–based multi–agent coordination via blockchain","venue":null,"work_id":"685b2344-3a70-4ac7-964f-897439166e49","year":2024},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":99,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:36.394235Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:5af6b363a15fc1b932d23a4420e282437cb2017b3db7086bfb1441d86c8e18e2","observation_id":"0444f131-5e31-43dd-afb6-2562e1c98cfc","resolution":{"observed_at":"2026-08-07T13:05:42.366433Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:36.436653Z","title":"Autogen: Enabling next-gen llm applications via multi-agent conversation, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","version":5},"reference_index":100,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:36.436653Z"},"links":{"citing_paper":"/paper/2505.23847"},"observation_digest":"sha256:a544ed849ca8a948fae6eb8cf5fe54001755035671a751344a0108fb4538b7cb","observation_id":"8216c338-629b-49e6-920c-0a84b31ef8ad","resolution":{"observed_at":"2026-08-07T13:05:36.436653Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2505.23847","last_updated":"2026-07-06T06:42:57Z","latest_version":5,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-07T12:58:56.457220Z","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems"},"reference_resolution":{"displayed":100,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":55,"verified_exact":1,"verified_fuzzy":44},"total_outbound_references":124},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 100 of 124 outbound references and 8 inbound Pith citation observations for arXiv:2505.23847."}