{"as_of":"2026-08-08T02:53:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:470eda0ed0f57b206384e1294a48524c2cd681c8afd11e6743c17f5003afbca4","coverage":[{"denominator":90,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":90,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T12:42:18.393562Z","state":"measured"},{"denominator":108,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":108,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":18,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":18,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T04:33:17.074410Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":1,"source":"arxiv_reference","source_observed_at":"2026-08-05T02:28:24.338817Z","state":"measured"}],"external_citation_measurements":[{"count":2,"observed_at":"2026-08-05T02:28:24.338817Z","source":"arxiv_reference"}],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.24019","snapshot_observed_at":"2026-08-07T04:33:17.074410Z","title":"LLM agents should employ security principles","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.10424","last_updated":"2025-06-12T07:23:56Z","snapshot_observed_at":"2026-08-07T04:24:32.582994Z","submitted_at":"2025-06-12T07:23:56Z","title":"SOFT: Selective Data Obfuscation for Protecting LLM Fine-tuning against Membership Inference Attacks","version":1},"reference_index":100,"source":"pdf_text","source_observed_at":"2026-08-07T04:33:17.074410Z"},"links":{"cited_paper":"/paper/2505.24019","citing_paper":"/paper/2506.10424"},"observation_digest":"sha256:9e1f031bcdd524a1d25fbc75cd5ab9de00330716e92958554726ddf20442e3a1","observation_id":"16f8fd0f-70db-4624-818d-15468c6f285e","resolution":{"observed_at":"2026-08-07T04:33:17.074410Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.24019","snapshot_observed_at":"2026-08-06T21:22:59.187197Z","title":"Llm agents should employ security principles","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.02977","last_updated":"2025-06-30T21:37:00Z","snapshot_observed_at":"2026-08-07T20:59:40.244517Z","submitted_at":"2025-06-30T21:37:00Z","title":"LLMs are Capable of Misaligned Behavior Under Explicit Prohibition and Surveillance","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-06T21:22:59.187197Z"},"links":{"cited_paper":"/paper/2505.24019","citing_paper":"/paper/2507.02977"},"observation_digest":"sha256:c041c126b5cfeb9a09ef917f1db4284db1960f23fb77ad575b9ac1a963bca23e","observation_id":"ac2932f3-7626-4f90-8d04-0933120e2807","resolution":{"observed_at":"2026-08-06T21:22:59.187197Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"cited_work":{"arxiv_id":"2505.24019","doi":"10.48550/arxiv.2505.24019","metadata_source":"arxiv_reference","pith_arxiv_id":"2505.24019","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Zhang, Z","venue":"ArXiv.org","work_id":"7748a50c-4eb9-4799-8ccc-bb3875ff148b","year":2025},"citing_paper":{"arxiv_id":"2603.12230","last_updated":"2026-04-05T08:33:19Z","snapshot_observed_at":"2026-08-04T04:27:19.804842Z","submitted_at":"2026-03-12T17:49:39Z","title":"Security Considerations for Artificial Intelligence Agents","version":2},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-05-15T12:37:27.153365Z"},"links":{"cited_paper":"/paper/2505.24019","citing_paper":"/paper/2603.12230"},"observation_digest":"sha256:d84a6cf1b6e62c10ed297176ef29753a6d3f48ec0cb5db6bc947092c7d00cc5f","observation_id":"7c43d2ea-12ac-4812-93c2-e9bc600e31ab","resolution":{"observed_at":"2026-05-15T12:40:00.295146Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"cited_work":{"arxiv_id":"2505.24019","doi":"10.48550/arxiv.2505.24019","metadata_source":"arxiv_reference","pith_arxiv_id":"2505.24019","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Zhang, Z","venue":"ArXiv.org","work_id":"7748a50c-4eb9-4799-8ccc-bb3875ff148b","year":2025},"citing_paper":{"arxiv_id":"2604.12986","last_updated":"2026-04-14T17:20:48Z","snapshot_observed_at":"2026-08-02T13:53:51.797960Z","submitted_at":"2026-04-14T17:20:48Z","title":"Parallax: Why AI Agents That Think Must Never Act","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-05-10T15:13:07.178551Z"},"links":{"cited_paper":"/paper/2505.24019","citing_paper":"/paper/2604.12986"},"observation_digest":"sha256:37c5da0e785cabf593eef4d306e158e8d1bfb648d5296595a3bbe5d8af4f05ba","observation_id":"10df942f-6b11-48c7-a27b-d46eaacc960b","resolution":{"observed_at":"2026-05-11T11:01:04.817173Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"cited_work":{"arxiv_id":"2505.24019","doi":"10.48550/arxiv.2505.24019","metadata_source":"arxiv_reference","pith_arxiv_id":"2505.24019","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Zhang, Z","venue":"ArXiv.org","work_id":"7748a50c-4eb9-4799-8ccc-bb3875ff148b","year":2025},"citing_paper":{"arxiv_id":"2605.01143","last_updated":"2026-05-01T22:35:59Z","snapshot_observed_at":"2026-08-01T03:21:40.202658Z","submitted_at":"2026-05-01T22:35:59Z","title":"A Low-Latency Fraud Detection Layer for Detecting Adversarial Interaction Patterns in LLM-Powered Agents","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-05-09T18:56:12.400565Z"},"links":{"cited_paper":"/paper/2505.24019","citing_paper":"/paper/2605.01143"},"observation_digest":"sha256:894e3a2550c7b0641d276b27b7a4a9b1c515cd58949336c819a5bedb5a694329","observation_id":"a4819020-cad8-41ab-9560-085e22e71429","resolution":{"observed_at":"2026-05-11T16:01:14.315710Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"cited_work":{"arxiv_id":"2505.24019","doi":"10.48550/arxiv.2505.24019","metadata_source":"arxiv_reference","pith_arxiv_id":"2505.24019","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Zhang, Z","venue":"ArXiv.org","work_id":"7748a50c-4eb9-4799-8ccc-bb3875ff148b","year":2025},"citing_paper":{"arxiv_id":"2605.03213","last_updated":"2026-05-07T16:46:43Z","snapshot_observed_at":"2026-08-05T12:14:18.955884Z","submitted_at":"2026-05-04T23:09:16Z","title":"When Agents Handle Secrets: A Survey of Confidential Computing for Agentic AI","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-05-07T02:12:30.086152Z"},"links":{"cited_paper":"/paper/2505.24019","citing_paper":"/paper/2605.03213"},"observation_digest":"sha256:5712d1873e1ff5b5ea344b19f94d839585e76f43a39edd1dcb3d0dad5b7f4383","observation_id":"e4e679a8-f1a2-420d-a7ab-a670893e7829","resolution":{"observed_at":"2026-05-12T10:46:31.792945Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"cited_work":{"arxiv_id":"2505.24019","doi":"10.48550/arxiv.2505.24019","metadata_source":"arxiv_reference","pith_arxiv_id":"2505.24019","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Zhang, Z","venue":"ArXiv.org","work_id":"7748a50c-4eb9-4799-8ccc-bb3875ff148b","year":2025},"citing_paper":{"arxiv_id":"2605.03213","last_updated":"2026-05-07T16:46:43Z","snapshot_observed_at":"2026-08-05T12:14:18.955884Z","submitted_at":"2026-05-04T23:09:16Z","title":"When Agents Handle Secrets: A Survey of Confidential Computing for Agentic AI","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-05-08T17:56:09.884837Z"},"links":{"cited_paper":"/paper/2505.24019","citing_paper":"/paper/2605.03213"},"observation_digest":"sha256:23f47de73bf5e008e2ad562c81eaeafb265724d5ed7909ad8ef70cc41d1b04d7","observation_id":"cb51a1bf-cc9b-4d9b-b170-fe13e60abd32","resolution":{"observed_at":"2026-05-09T06:55:44.451126Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"cited_work":{"arxiv_id":"2505.24019","doi":"10.48550/arxiv.2505.24019","metadata_source":"arxiv_reference","pith_arxiv_id":"2505.24019","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Zhang, Z","venue":"ArXiv.org","work_id":"7748a50c-4eb9-4799-8ccc-bb3875ff148b","year":2025},"citing_paper":{"arxiv_id":"2605.08460","last_updated":"2026-05-08T20:27:23Z","snapshot_observed_at":"2026-07-06T23:20:43.010758Z","submitted_at":"2026-05-08T20:27:23Z","title":"When Child Inherits: Modeling and Exploiting Subagent Spawn in Multi-Agent Networks","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-05-12T01:20:55.221345Z"},"links":{"cited_paper":"/paper/2505.24019","citing_paper":"/paper/2605.08460"},"observation_digest":"sha256:da48b0b1edbccd017c0ed5d6845a754ffdefc2040683b8941df8ae16d0a74cd7","observation_id":"e4d2c026-00c6-45b8-b140-e16f5678ab00","resolution":{"observed_at":"2026-05-12T08:01:33.084545Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"cited_work":{"arxiv_id":"2505.24019","doi":"10.48550/arxiv.2505.24019","metadata_source":"arxiv_reference","pith_arxiv_id":"2505.24019","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Zhang, Z","venue":"ArXiv.org","work_id":"7748a50c-4eb9-4799-8ccc-bb3875ff148b","year":2025},"citing_paper":{"arxiv_id":"2605.12535","last_updated":"2026-07-01T09:34:06Z","snapshot_observed_at":"2026-07-06T23:24:13.851504Z","submitted_at":"2026-05-02T18:07:42Z","title":"Ghost in the Context: Policy-Carriage Integrity in LLM Agents","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-05-14T21:23:48.061702Z"},"links":{"cited_paper":"/paper/2505.24019","citing_paper":"/paper/2605.12535"},"observation_digest":"sha256:ef7e736d309e939fb6c3d80b27377f8d8e712416a8ea2fd20a090702ba126a59","observation_id":"65f35965-3cb2-4e70-9c1f-4339f87c9b74","resolution":{"observed_at":"2026-05-14T21:28:00.169507Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"cited_work":{"arxiv_id":"2505.24019","doi":"10.48550/arxiv.2505.24019","metadata_source":"arxiv_reference","pith_arxiv_id":"2505.24019","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Zhang, Z","venue":"ArXiv.org","work_id":"7748a50c-4eb9-4799-8ccc-bb3875ff148b","year":2025},"citing_paper":{"arxiv_id":"2605.12535","last_updated":"2026-07-01T09:34:06Z","snapshot_observed_at":"2026-07-06T23:24:13.851504Z","submitted_at":"2026-05-02T18:07:42Z","title":"Ghost in the Context: Policy-Carriage Integrity in LLM Agents","version":2},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-05-20T23:28:47.424991Z"},"links":{"cited_paper":"/paper/2505.24019","citing_paper":"/paper/2605.12535"},"observation_digest":"sha256:f6bc0869f72c30559093f6e2f0707b67494ca61d122546747434adcc4f9d2950","observation_id":"f948f307-afc6-420e-b662-4c12c1ff14cc","resolution":{"observed_at":"2026-05-20T23:29:12.644850Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"cited_work":{"arxiv_id":"2505.24019","doi":"10.48550/arxiv.2505.24019","metadata_source":"arxiv_reference","pith_arxiv_id":"2505.24019","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Zhang, Z","venue":"ArXiv.org","work_id":"7748a50c-4eb9-4799-8ccc-bb3875ff148b","year":2025},"citing_paper":{"arxiv_id":"2605.12535","last_updated":"2026-07-01T09:34:06Z","snapshot_observed_at":"2026-07-06T23:24:13.851504Z","submitted_at":"2026-05-02T18:07:42Z","title":"Ghost in the Context: Policy-Carriage Integrity in LLM Agents","version":3},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-07-02T23:59:14.667099Z"},"links":{"cited_paper":"/paper/2505.24019","citing_paper":"/paper/2605.12535"},"observation_digest":"sha256:7f736d23f1cd4d07b60cfe4b9bc692274561e99a61390e0f0439fa192187b3da","observation_id":"0d2ef391-5e3f-409c-b30e-6059138001f7","resolution":{"observed_at":"2026-07-03T00:07:27.596565Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"cited_work":{"arxiv_id":"2505.24019","doi":"10.48550/arxiv.2505.24019","metadata_source":"arxiv_reference","pith_arxiv_id":"2505.24019","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Zhang, Z","venue":"ArXiv.org","work_id":"7748a50c-4eb9-4799-8ccc-bb3875ff148b","year":2025},"citing_paper":{"arxiv_id":"2606.03518","last_updated":"2026-06-02T11:39:39Z","snapshot_observed_at":"2026-08-04T23:00:21.163980Z","submitted_at":"2026-06-02T11:39:39Z","title":"Overlaying Governance: A Compositional Authorization Framework for Delegation and Scope in Agentic AI","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-06-28T10:04:44.962968Z"},"links":{"cited_paper":"/paper/2505.24019","citing_paper":"/paper/2606.03518"},"observation_digest":"sha256:7e59917c86d5f54115e3aae8b1d42279edbe431871bb98795cf3c56ee8ebe498","observation_id":"7c7b7853-fdc2-4fea-8023-43dc2990d156","resolution":{"observed_at":"2026-07-02T03:26:29.052170Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"cited_work":{"arxiv_id":"2505.24019","doi":"10.48550/arxiv.2505.24019","metadata_source":"arxiv_reference","pith_arxiv_id":"2505.24019","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Zhang, Z","venue":"ArXiv.org","work_id":"7748a50c-4eb9-4799-8ccc-bb3875ff148b","year":2025},"citing_paper":{"arxiv_id":"2606.10749","last_updated":"2026-06-09T12:01:07Z","snapshot_observed_at":"2026-07-31T21:35:18.696472Z","submitted_at":"2026-06-09T12:01:07Z","title":"Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation","version":1},"reference_index":244,"source":"pdf_text","source_observed_at":"2026-06-27T12:55:22.831264Z"},"links":{"cited_paper":"/paper/2505.24019","citing_paper":"/paper/2606.10749"},"observation_digest":"sha256:567dbe587be96f1b7a0235a7821076044b43f424bd4930ea5786a6d4e357f3da","observation_id":"71e6500c-65af-4abf-8e9d-d28e894d7da6","resolution":{"observed_at":"2026-06-27T13:20:57.050204Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"cited_work":{"arxiv_id":"2505.24019","doi":"10.48550/arxiv.2505.24019","metadata_source":"arxiv_reference","pith_arxiv_id":"2505.24019","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Zhang, Z","venue":"ArXiv.org","work_id":"7748a50c-4eb9-4799-8ccc-bb3875ff148b","year":2025},"citing_paper":{"arxiv_id":"2606.24245","last_updated":"2026-07-07T11:14:39Z","snapshot_observed_at":"2026-07-12T12:34:57.565441Z","submitted_at":"2026-06-23T07:31:03Z","title":"AutoSpec: Safety Rule Evolution for LLM Agents via Inductive Logic Programming","version":2},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-06-25T23:17:58.968269Z"},"links":{"cited_paper":"/paper/2505.24019","citing_paper":"/paper/2606.24245"},"observation_digest":"sha256:965ee619c8d91d4e03a1649bf70e8a1f7a07442e6270a2c93a84a449c5859a4d","observation_id":"90a16c7c-2cd5-4ae4-86c9-ef72ddf6ee7f","resolution":{"observed_at":"2026-07-04T18:00:00.381118Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.24019","snapshot_observed_at":"2026-07-12T12:34:58.460933Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.24245","last_updated":"2026-07-07T11:14:39Z","snapshot_observed_at":"2026-07-12T12:34:57.565441Z","submitted_at":"2026-06-23T07:31:03Z","title":"AutoSpec: Safety Rule Evolution for LLM Agents via Inductive Logic Programming","version":3},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-07-12T12:34:58.460933Z"},"links":{"cited_paper":"/paper/2505.24019","citing_paper":"/paper/2606.24245"},"observation_digest":"sha256:de6ceb1fd140ec3d850d6c894a3035b0f9232e2a82e10911bd72c8c3ea64521a","observation_id":"32bf28b6-f117-4c6b-8aa9-951c366ffe89","resolution":{"observed_at":"2026-07-12T12:34:58.460933Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"cited_work":{"arxiv_id":"2505.24019","doi":"10.48550/arxiv.2505.24019","metadata_source":"arxiv_reference","pith_arxiv_id":"2505.24019","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Zhang, Z","venue":"ArXiv.org","work_id":"7748a50c-4eb9-4799-8ccc-bb3875ff148b","year":2025},"citing_paper":{"arxiv_id":"2606.26479","last_updated":"2026-06-25T00:35:23Z","snapshot_observed_at":"2026-07-07T00:00:46.505337Z","submitted_at":"2026-06-25T00:35:23Z","title":"Adaptive Evaluation of Out-of-Band Defenses Against Prompt Injection in LLM Agents","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-06-26T04:58:59.046289Z"},"links":{"cited_paper":"/paper/2505.24019","citing_paper":"/paper/2606.26479"},"observation_digest":"sha256:f7d838a72bb24a83cac8de401d47099daf146dcfc394ce60d5cd8233c1636fe6","observation_id":"c8d7d5bb-4367-4626-a82c-7e3f4a68c151","resolution":{"observed_at":"2026-07-04T13:39:51.356324Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"cited_work":{"arxiv_id":"2505.24019","doi":"10.48550/arxiv.2505.24019","metadata_source":"arxiv_reference","pith_arxiv_id":"2505.24019","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Zhang, Z","venue":"ArXiv.org","work_id":"7748a50c-4eb9-4799-8ccc-bb3875ff148b","year":2025},"citing_paper":{"arxiv_id":"2607.01236","last_updated":"2026-05-01T03:16:35Z","snapshot_observed_at":"2026-07-07T00:06:49.412663Z","submitted_at":"2026-05-01T03:16:35Z","title":"Safeguarding LLM Agents from Misalignment through Provenance Analysis","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-07-04T01:26:25.858521Z"},"links":{"cited_paper":"/paper/2505.24019","citing_paper":"/paper/2607.01236"},"observation_digest":"sha256:bfe5f627f61886c808b75239b54be3284d56b62c675bf799af17f37b27aabaa9","observation_id":"58d014e1-8893-40b7-9413-4900eec7ff11","resolution":{"observed_at":"2026-07-04T01:29:22.001648Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.24019","snapshot_observed_at":"2026-08-02T13:11:53.371921Z","title":"trusted partner","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.19356","last_updated":"2026-05-25T22:24:09Z","snapshot_observed_at":"2026-08-02T13:11:51.169975Z","submitted_at":"2026-05-25T22:24:09Z","title":"NEXUS: Structured Runtime Safety for Tool-Using LLM Agents","version":1},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-02T13:11:53.371921Z"},"links":{"cited_paper":"/paper/2505.24019","citing_paper":"/paper/2607.19356"},"observation_digest":"sha256:022327755021938509a4a176f6cc7185af0105b2e733aae3ab470ee823434a87","observation_id":"2cc1333c-e2fb-42b6-9c5b-f243dd227d9f","resolution":{"observed_at":"2026-08-02T13:11:53.371921Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2505.24019/citation-record","integrity":"/paper/2505.24019/integrity","json":"/paper/2505.24019/citation-record.json","paper":"/paper/2505.24019"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2502.01822","last_updated":"2026-06-23T10:00:29Z","snapshot_observed_at":"2026-07-06T20:30:36.418341Z","submitted_at":"2025-02-03T21:00:14Z","title":"Firewalls to Secure Dynamic LLM Agentic Networks","version":7},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.01822","snapshot_observed_at":"2026-08-07T12:42:10.530457Z","title":"Firewalls to secure dynamic LLM agentic networks.arXiv preprint arXiv:2502.01822, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:10.530457Z"},"links":{"cited_paper":"/paper/2502.01822","citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:e3c21561c6ca7366df9ac755bd0c8b912ce407f18d56f29cb697fc6a0c095f98","observation_id":"bd985b7c-b0df-459b-8000-298db5310957","resolution":{"observed_at":"2026-08-07T12:42:10.530457Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:42:10.608335Z","title":"Jimenez, Farshad Khorrami, Prashanth Krishnamurthy, Brendan Dolan-Gavitt, Muhammad Shafique, Karthik Narasimhan, Ramesh Karri, and Ofir Press","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:10.608335Z"},"links":{"citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:7e02b29a6e4eee8fc0239807fb39f3cf03cdd0c5760a49157167643fab5ce396","observation_id":"d5d6c0d8-f456-42ec-a9f2-834243d80537","resolution":{"observed_at":"2026-08-07T12:42:10.608335Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2308.14132","last_updated":"2023-11-07T03:30:15Z","snapshot_observed_at":"2026-07-06T16:10:54.723336Z","submitted_at":"2023-08-27T15:20:06Z","title":"Detecting Language Model Attacks with Perplexity","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.14132","snapshot_observed_at":"2026-08-07T12:42:10.698195Z","title":"Detecting language model attacks with perplexity.arXiv preprint arXiv:2308.14132, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:10.698195Z"},"links":{"cited_paper":"/paper/2308.14132","citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:c16f8864223096028a82d4cf833350c099b6b64990eabf58f0917bf9fe5d2e9a","observation_id":"cdec2bb5-bbf7-450e-a9ff-048260c07d27","resolution":{"observed_at":"2026-08-07T12:42:10.698195Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:42:10.809393Z","title":"Generative AI on AWS.https://aws.amazon.com/ai/generative-ai/","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:10.809393Z"},"links":{"citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:8194fc0344a5aa398d3ec65522a1abe69e90e3dc1e2e5d28f0d818e260709c37","observation_id":"d05109fa-289d-4952-ad75-ecd264b038e0","resolution":{"observed_at":"2026-08-07T12:42:10.809393Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.09024","last_updated":"2025-04-18T14:30:31Z","snapshot_observed_at":"2026-08-02T12:38:54.249632Z","submitted_at":"2024-10-11T17:39:22Z","title":"AgentHarm: A Benchmark for Measuring Harmfulness of LLM Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.09024","snapshot_observed_at":"2026-08-07T12:42:10.942106Z","title":"Agentharm: A benchmark for measuring harmfulness of LLM agents.arXiv preprint arXiv:2410.09024, 2024","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:10.942106Z"},"links":{"cited_paper":"/paper/2410.09024","citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:ddeb3d368e8e5eaa18298b865834372e7ff0efc3964ca832834a9baf3e890442","observation_id":"089e5c0d-478b-43ef-bfa3-b3b54410e83b","resolution":{"observed_at":"2026-08-07T12:42:10.942106Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:42:11.032707Z","title":"Monitoring computer use via hierarchical summarization","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:11.032707Z"},"links":{"citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:9f2a7f15552f84193591ebee69a6be628f41f282f8fe01fef3c93b489278d6d5","observation_id":"dd089303-22eb-46fd-9132-1b9724232760","resolution":{"observed_at":"2026-08-07T12:42:11.032707Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:42:11.133502Z","title":"Introducing the Model Context Protocol, 2024.https://www.anthropic.com/news/model-context-protocol","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:11.133502Z"},"links":{"citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:1d66eb958acf0f787c60d43f2b46b8f5e9e38425f6b151aefb58f9d1c245c974","observation_id":"9ff1aaba-0123-4546-9680-1d68c64f885f","resolution":{"observed_at":"2026-08-07T12:42:11.133502Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:42:11.217203Z","title":"https://github.com/microsoft/autogen/","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:11.217203Z"},"links":{"citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:380534f699bcad0cc4e7630e626fadddc094b9fc0737f554c2875d18f1ce52c2","observation_id":"be791b63-2bd7-4f41-afd4-8331c45673cb","resolution":{"observed_at":"2026-08-07T12:42:11.217203Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:42:11.321358Z","title":"AirGapAgent: Protecting privacy-conscious conversational agents","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:11.321358Z"},"links":{"citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:afd7017c818781d7914c489444463d4b72a60da34718ba2709e072d74627b891","observation_id":"d65cd2b0-10c3-4be9-bb2e-824e744adbb6","resolution":{"observed_at":"2026-08-07T12:42:11.321358Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2501.17805","last_updated":"2025-01-29T17:47:36Z","snapshot_observed_at":"2026-08-02T14:12:38.024671Z","submitted_at":"2025-01-29T17:47:36Z","title":"International AI Safety Report","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.17805","snapshot_observed_at":"2026-08-07T12:42:11.396694Z","title":"International ai safety report.arXiv preprint arXiv:2501.17805, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:11.396694Z"},"links":{"cited_paper":"/paper/2501.17805","citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:34b462cd16e36220f387834fd04237bc208ab66def96361d789d7de53e0747a4","observation_id":"d64ee457-9957-4055-8516-91b05dfbe8bd","resolution":{"observed_at":"2026-08-07T12:42:11.396694Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2308.09662","last_updated":"2023-08-30T10:21:00Z","snapshot_observed_at":"2026-08-06T17:01:00.147032Z","submitted_at":"2023-08-18T16:27:04Z","title":"Red-Teaming Large Language Models using Chain of Utterances for Safety-Alignment","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.09662","snapshot_observed_at":"2026-08-07T12:42:11.476447Z","title":"Red-teaming large language models using chain of utterances for safety-alignment","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:11.476447Z"},"links":{"cited_paper":"/paper/2308.09662","citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:66e4bbf5e0e77dea6ddfc606c53c64554768677ea5ed9af1d3b36f7f2d498747","observation_id":"dbcb2b21-ad46-4d62-a163-76dcfe37b233","resolution":{"observed_at":"2026-08-07T12:42:11.476447Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:42:11.571062Z","title":"Computer Security: Art and Science","venue":null,"work_id":null,"year":2003},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:11.571062Z"},"links":{"citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:f2c6570e7a8f9a806715eba1d180e1beedd9e57c409606df920aede30c02404a","observation_id":"bd117973-b3e8-4121-a09d-423378211520","resolution":{"observed_at":"2026-08-07T12:42:11.571062Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:42:11.674312Z","title":"Language models are few-shot learners.Advances in neural information processing systems, 33:1877–1901, 2020","venue":null,"work_id":null,"year":1901},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:11.674312Z"},"links":{"citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:7f0559a494d8a9f05250b9de13a22b2ce9117b7de3baba331b3119e63f3e4324","observation_id":"8d9940fd-8a91-4caa-9895-691e6f6f76d3","resolution":{"observed_at":"2026-08-07T12:42:11.674312Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.08419","last_updated":"2024-07-18T18:24:57Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-10-12T15:38:28Z","title":"Jailbreaking Black Box Large Language Models in Twenty Queries","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.08419","snapshot_observed_at":"2026-08-07T12:42:11.749191Z","title":"Jailbreaking black box large language models in twenty queries.arXiv preprint arXiv:2310.08419, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:11.749191Z"},"links":{"cited_paper":"/paper/2310.08419","citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:ef67c7fc50024b54388e328d60dc7731ae367dc3b8049187f09d0ab659a36222","observation_id":"d347328e-ca07-425f-b855-b3af2492b132","resolution":{"observed_at":"2026-08-07T12:42:11.749191Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:42:11.823955Z","title":"Agentpoison: Red-teaming LLM agents via poisoning memory or knowledge bases.Advances in Neural Information Processing Systems, 37:130185–130213, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:11.823955Z"},"links":{"citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:cc6b7f538945d2c6dfc6a82cc8d59e7fc87bcd653d0c8918b8af9b4e32c983ed","observation_id":"867af2a8-de4d-4a33-8869-65aa2047e972","resolution":{"observed_at":"2026-08-07T12:42:11.823955Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.03574","last_updated":"2025-05-06T14:34:21Z","snapshot_observed_at":"2026-08-07T15:49:30.311074Z","submitted_at":"2025-05-06T14:34:21Z","title":"LlamaFirewall: An open source guardrail system for building secure AI agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.03574","snapshot_observed_at":"2026-08-07T12:42:11.956892Z","title":"Llamafirewall: An open source guardrail system for building secure ai agents.arXiv preprint arXiv:2505.03574, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:11.956892Z"},"links":{"cited_paper":"/paper/2505.03574","citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:2e3a9060487abba759ead9fea974fe63ab4b9505625ba8689872fd24a5df51c4","observation_id":"596ee284-0ea0-4129-8f46-0a457afe19d0","resolution":{"observed_at":"2026-08-07T12:42:11.956892Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.02817","last_updated":"2025-01-30T11:11:37Z","snapshot_observed_at":"2026-08-07T20:57:52.378876Z","submitted_at":"2024-03-05T09:37:13Z","title":"Here Comes The AI Worm: Unleashing Zero-click Worms that Target GenAI-Powered Applications","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.02817","snapshot_observed_at":"2026-08-07T12:42:12.078265Z","title":"Here comes the ai worm: Unleashing zero-click worms that target genai-powered applications","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:12.078265Z"},"links":{"cited_paper":"/paper/2403.02817","citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:3be774b57124d91c4dcb4275a905fdeed7053ca032c170d8cddd51300ea29d9b","observation_id":"2892f98d-6ca6-4c1c-a487-fc9581d063d9","resolution":{"observed_at":"2026-08-07T12:42:12.078265Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:42:12.185759Z","title":"LLMs for Customer Service and Support","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:12.185759Z"},"links":{"citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:887aa086e943f1c6a6d940b69a89f3aad88be975eaea8d77406c8d902d1dd85e","observation_id":"4fcb89fa-0184-401d-bb07-7ef9b69a6a92","resolution":{"observed_at":"2026-08-07T12:42:12.185759Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.13352","last_updated":"2024-11-24T22:04:23Z","snapshot_observed_at":"2026-07-06T18:33:32.806635Z","submitted_at":"2024-06-19T08:55:56Z","title":"AgentDojo: A Dynamic Environment to Evaluate Prompt Injection Attacks and Defenses for LLM Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.13352","snapshot_observed_at":"2026-08-07T12:42:12.263611Z","title":"AgentDojo: A dynamic environment to evaluate prompt injection attacks and defenses for LLM agents.arXiv preprint arXiv:2406.13352, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:12.263611Z"},"links":{"cited_paper":"/paper/2406.13352","citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:67c25b3827b99dd806c50cc710c7d9442775fccdf1eab1b33cf591a6dbc8a546","observation_id":"ceb442c8-68b9-40a3-8631-22abaefc089f","resolution":{"observed_at":"2026-08-07T12:42:12.263611Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:42:12.351103Z","title":"A practical memory injection attack against LLM agents.arXiv preprint arXiv:2503.03704, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:12.351103Z"},"links":{"citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:93075b0e737b5f09d5a7b5c59535f9a7f49544e507816b12a002d7e90d54322c","observation_id":"25525d58-b3c5-4ba9-805e-03c7bf4cf5dc","resolution":{"observed_at":"2026-08-07T12:42:12.351103Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.06664","last_updated":"2024-02-16T04:02:51Z","snapshot_observed_at":"2026-08-07T10:02:21.156103Z","submitted_at":"2024-02-06T14:46:08Z","title":"LLM Agents can Autonomously Hack Websites","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.06664","snapshot_observed_at":"2026-08-07T12:42:12.460789Z","title":"LLM agents can autonomously hack websites.arXiv preprint arXiv:2402.06664, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:12.460789Z"},"links":{"cited_paper":"/paper/2402.06664","citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:d23864e11be0b5b40f9c18db097f89ad0f71491b46ff55ba1a2182c82019eda1","observation_id":"daed623c-b688-44db-a438-1e84c1d74c33","resolution":{"observed_at":"2026-08-07T12:42:12.460789Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:42:25.922215Z","title":"Papillon: Efficient and stealthy fuzz testing-powered jailbreaks for llms","venue":null,"work_id":"fa1d9bfe-1f43-4d01-aa22-f30df3eae528","year":2025},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:12.564782Z"},"links":{"citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:ed50ab0c0a71d58587f414f09806dfa4d16da60f0c7d098952dbb29379da9429","observation_id":"b98b3fef-4049-4ffc-ac4c-0154f96d31d3","resolution":{"observed_at":"2026-08-07T12:42:25.991712Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:42:25.860660Z","title":"Announcing the Agent2Agent Protocol (A2A), 2025","venue":null,"work_id":"e9289b42-0203-4112-bab7-e130fb479821","year":2025},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:12.637148Z"},"links":{"citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:a434046cabf1d5e64079f9163b09a646039c9558c052a1f951c0780b6524087d","observation_id":"59849ad6-626a-4837-baa2-6e83386a7dcd","resolution":{"observed_at":"2026-08-07T12:42:25.889907Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:42:25.752679Z","title":"Redcode: Risky code execution and generation benchmark for code agents.Advances in Neural Information Processing Systems, 37:106190–106236, 2024","venue":null,"work_id":"26212583-a4fb-4354-8f82-8e8678803ad4","year":2024},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:12.733210Z"},"links":{"citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:04022e4b161416d014ae7590a96ded3dcfb3ee01eee0dabe6a90d471b4beafe6","observation_id":"eef13c70-b45a-442e-ae02-560f42321cae","resolution":{"observed_at":"2026-08-07T12:42:25.790524Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.14720","last_updated":"2024-03-20T15:26:23Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-03-20T15:26:23Z","title":"Defending Against Indirect Prompt Injection Attacks With Spotlighting","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.14720","snapshot_observed_at":"2026-08-07T12:42:12.836704Z","title":"Defending against indirect prompt injection attacks with spotlighting.arXiv preprint arXiv:2403.14720, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:12.836704Z"},"links":{"cited_paper":"/paper/2403.14720","citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:013528343bad6ef2668bbfe324824be853a4a556b1cd96dc299f75ccd56b7918","observation_id":"96993d6c-dce1-4cbf-b163-c9a0afd3c2b9","resolution":{"observed_at":"2026-08-07T12:42:12.836704Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.01586","last_updated":"2024-10-03T22:12:05Z","snapshot_observed_at":"2026-08-06T06:52:40.785580Z","submitted_at":"2024-02-02T17:26:23Z","title":"TrustAgent: Towards Safe and Trustworthy LLM-based Agents","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.01586","snapshot_observed_at":"2026-08-07T12:42:12.942186Z","title":"Trustagent: Towards safe and trustworthy llm-based agents.arXiv preprint arXiv:2402.01586, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:12.942186Z"},"links":{"cited_paper":"/paper/2402.01586","citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:1cde8abf73b9ea345b9f5181ba58bd89518006ece633e59031b410ddbb0d96b2","observation_id":"83cb01ea-f7e7-4ada-a985-5faed646f991","resolution":{"observed_at":"2026-08-07T12:42:12.942186Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.00614","last_updated":"2023-09-04T17:47:36Z","snapshot_observed_at":"2026-07-06T16:13:23.343694Z","submitted_at":"2023-09-01T17:59:44Z","title":"Baseline Defenses for Adversarial Attacks Against Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.00614","snapshot_observed_at":"2026-08-07T12:42:13.041837Z","title":"Baseline defenses for adversarial attacks against aligned language models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:13.041837Z"},"links":{"cited_paper":"/paper/2309.00614","citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:d58c11b3c1a5bd5f90055420d7d077776bd0c539718c1c1a93a9db402ac99c67","observation_id":"1c1f3d12-d2ea-4e88-a032-f246d074d031","resolution":{"observed_at":"2026-08-07T12:42:13.041837Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.03714","last_updated":"2023-10-05T17:37:25Z","snapshot_observed_at":"2026-08-04T05:21:05.846165Z","submitted_at":"2023-10-05T17:37:25Z","title":"DSPy: Compiling Declarative Language Model Calls into Self-Improving Pipelines","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.03714","snapshot_observed_at":"2026-08-07T12:42:13.159532Z","title":"Dspy: Compiling declarative language model calls into self-improving pipelines","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:13.159532Z"},"links":{"cited_paper":"/paper/2310.03714","citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:a2622e22d39bb3748a11415bf04499764ef8cd6134687286ac556349fee73c5b","observation_id":"e070e8a2-7038-46cc-8d1e-ec256ef640c2","resolution":{"observed_at":"2026-08-07T12:42:13.159532Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:42:25.498131Z","title":"https://github.com/langchain-ai/langchain","venue":null,"work_id":"3a3c9d0d-3f80-497c-abd1-e6fb0d3a5465","year":2025},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:13.243542Z"},"links":{"citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:e03cc0ad4aa7b6e3c10686bfe1d6212522561ede7bd77601c67ae699b2b9643a","observation_id":"30dc0c33-a749-4094-8680-eaa2a1479476","resolution":{"observed_at":"2026-08-07T12:42:25.630328Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.07283","last_updated":"2024-10-09T11:01:29Z","snapshot_observed_at":"2026-08-02T17:12:52.352951Z","submitted_at":"2024-10-09T11:01:29Z","title":"Prompt Infection: LLM-to-LLM Prompt Injection within Multi-Agent Systems","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.07283","snapshot_observed_at":"2026-08-07T12:42:13.333338Z","title":"Prompt infection: LLM-to-LLM prompt injection within multi-agent systems.arXiv preprint arXiv:2410.07283, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:13.333338Z"},"links":{"cited_paper":"/paper/2410.07283","citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:380e6271f5d68fc017efe7c39ef6e57c1271c0feeb60b107f6b5e1defe66de46","observation_id":"03efd940-4c6a-4584-833c-436b070c380c","resolution":{"observed_at":"2026-08-07T12:42:13.333338Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.03191","last_updated":"2024-11-28T13:43:50Z","snapshot_observed_at":"2026-08-04T19:12:56.970085Z","submitted_at":"2023-11-06T15:29:30Z","title":"DeepInception: Hypnotize Large Language Model to Be Jailbreaker","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.03191","snapshot_observed_at":"2026-08-07T12:42:13.406934Z","title":"Deepinception: Hypnotize large language model to be jailbreaker.arXiv preprint arXiv:2311.03191, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:13.406934Z"},"links":{"cited_paper":"/paper/2311.03191","citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:c2a85967bdfaf90a07b3840a2e074ab9fdb2fe9c04c6e91cc333705e64e8d726","observation_id":"9961eabc-da01-4075-8d8c-7ca6e07d3d7a","resolution":{"observed_at":"2026-08-07T12:42:13.406934Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:42:25.386879Z","title":"RAIN: Your language models can align themselves without finetuning","venue":null,"work_id":"8af8b285-8955-4499-8b95-4f20d9c24957","year":2024},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:13.445643Z"},"links":{"citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:b41f3d8ec218513b54a595c3246c89b03191e1cf6713deaf9a1ee2f6549b21f5","observation_id":"9efe313b-f1dc-4273-a168-662a114e3017","resolution":{"observed_at":"2026-08-07T12:42:25.448589Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:42:25.248748Z","title":"Agentorca: A dual-system framework to evaluate language agents on operational routine and constraint adherence, 2025","venue":null,"work_id":"ae10be58-f87e-4c21-85e8-e0e99a8b2b2e","year":2025},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:13.503135Z"},"links":{"citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:8ea1211aa4619577bbd242c230e082c96182cf6b1939b4dd503ed327399379a5","observation_id":"ef746f30-99ce-46c0-b78d-883f9882a0a9","resolution":{"observed_at":"2026-08-07T12:42:25.310516Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.04451","last_updated":"2024-03-20T21:34:56Z","snapshot_observed_at":"2026-08-06T02:57:30.438059Z","submitted_at":"2023-10-03T19:44:37Z","title":"AutoDAN: Generating Stealthy Jailbreak Prompts on Aligned Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.04451","snapshot_observed_at":"2026-08-07T12:42:13.581416Z","title":"Autodan: Generating stealthy jailbreak prompts on aligned large language models.arXiv preprint arXiv:2310.04451, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:13.581416Z"},"links":{"cited_paper":"/paper/2310.04451","citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:0c9bfb5e4a6496685293fc1ff5f8bd8199f20904528ded3494330b405030944f","observation_id":"c56f5cee-ca82-4ebd-9976-a68fe5bcdde3","resolution":{"observed_at":"2026-08-07T12:42:13.581416Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04957","last_updated":"2024-03-07T23:46:20Z","snapshot_observed_at":"2026-07-06T17:41:19.171822Z","submitted_at":"2024-03-07T23:46:20Z","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.04957","snapshot_observed_at":"2026-08-07T12:42:13.656779Z","title":"Automatic and universal prompt injection attacks against large language models.arXiv preprint arXiv:2403.04957, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:13.656779Z"},"links":{"cited_paper":"/paper/2403.04957","citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:0430c6ea1b0e790c5dedb9a3139f2671842ca0434d30fefe2a699c7ee7769106","observation_id":"4ba3acef-79e5-48ee-86b5-c7196eac569b","resolution":{"observed_at":"2026-08-07T12:42:13.656779Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2306.05499","last_updated":"2025-12-29T02:25:27Z","snapshot_observed_at":"2026-07-06T15:40:27.639368Z","submitted_at":"2023-06-08T18:43:11Z","title":"Prompt Injection attack against LLM-integrated Applications","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.05499","snapshot_observed_at":"2026-08-07T12:42:13.736788Z","title":"Prompt injection attack against llm-integrated applications.arXiv preprint arXiv:2306.05499, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:13.736788Z"},"links":{"cited_paper":"/paper/2306.05499","citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:aae86b4a5ab6865a583d7debd64f76098f35804298d6c767dfb6a09c92bd6b99","observation_id":"94717349-e1fe-4ad4-a098-bb4a1eefcca5","resolution":{"observed_at":"2026-08-07T12:42:13.736788Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:42:13.810103Z","title":"Formalizing and benchmarking prompt injection attacks and defenses","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:13.810103Z"},"links":{"citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:fd74cbad7a2dae855547da91f828f3d77a55f704893f6f97bd5924099282ebe7","observation_id":"4076bcf0-2259-46ef-b7b3-4336c42dee73","resolution":{"observed_at":"2026-08-07T12:42:13.810103Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:42:24.994767Z","title":"Tree of attacks: Jailbreaking black-box llms automatically.NeurIPS, 2024","venue":null,"work_id":"f7035c44-b819-4ab3-89b9-bdf5f06d46df","year":2024},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:13.859636Z"},"links":{"citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:f0b0275c66699b5fefaefc31bb8d15691f110b406c287ab0b264cb2fc5c76c52","observation_id":"63ce2e3b-8681-4ef4-932a-ae59ee8ac81d","resolution":{"observed_at":"2026-08-07T12:42:25.058794Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:42:24.835104Z","title":"Secure data with zero trust.https://learn.microsoft.com/en-us/security/zero-trust/deploy/data","venue":null,"work_id":"f1a4e34f-ea5a-4a82-9095-86f2de8aaa54","year":2025},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:13.934623Z"},"links":{"citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:d5e35a842e2a5c261b948754490784c892991b0ffb2c7a941277f4b1ad87487b","observation_id":"58de7286-4c36-43da-907b-85ec38fcfd78","resolution":{"observed_at":"2026-08-07T12:42:24.926146Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:42:14.016657Z","title":"GPT-4 technical report, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:14.016657Z"},"links":{"citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:fdeeac45b22c901e6279b4f82174974b4c93820c07f965c56eab0faf7a2c1b4f","observation_id":"01f8cddd-f5a4-45f6-9135-eaae55082fa6","resolution":{"observed_at":"2026-08-07T12:42:14.016657Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:42:24.653785Z","title":"Optimizing instructions and demonstrations for multi-stage language model programs","venue":null,"work_id":"bbaffb87-46d9-4be4-9336-5224ab5626e4","year":2024},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:14.102885Z"},"links":{"citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:33f1bdf2e3c0d9e76cf3aa5c1df1784f9c5d731adedeea3cc1814a416e6b930d","observation_id":"b3203619-4d85-4a8c-ab2a-f8420dd879cf","resolution":{"observed_at":"2026-08-07T12:42:24.731074Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2211.09527","last_updated":"2022-11-17T13:43:20Z","snapshot_observed_at":"2026-07-06T14:19:47.424778Z","submitted_at":"2022-11-17T13:43:20Z","title":"Ignore Previous Prompt: Attack Techniques For Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2211.09527","snapshot_observed_at":"2026-08-07T12:42:14.183326Z","title":"Ignore previous prompt: Attack techniques for language models.arXiv preprint arXiv:2211.09527, 2022","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:14.183326Z"},"links":{"cited_paper":"/paper/2211.09527","citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:eb573cc13e33f4e07a96416867c1c121cb393d64ebbb905ff701ece8017c570a","observation_id":"b6d67e25-53c6-461b-aa1d-e997e1b703d6","resolution":{"observed_at":"2026-08-07T12:42:14.183326Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:42:24.558964Z","title":"The sandwich defense, 2024","venue":null,"work_id":"734122dd-aeb5-4487-8f2f-9deb18eadca2","year":2024},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:14.231663Z"},"links":{"citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:a6ffde8d2f070675224f711b245d08e56df5c8d0a0139ff7d5bec7099154b9fa","observation_id":"8526a788-4653-4897-8018-f8bda732c331","resolution":{"observed_at":"2026-08-07T12:42:24.609888Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:42:24.279554Z","title":"Fine-tuned deberta-v3-base for prompt injection detection, 2024","venue":null,"work_id":"7c4d29b7-d25c-48a2-a1ef-590b873ed08c","year":2024},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:14.309044Z"},"links":{"citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:d7e5650c86d85d666190c3105052ac9fd1c52e1d663fca41854fe9f29c39260e","observation_id":"6a19f497-1e9f-4732-8da4-fc51e0ab031d","resolution":{"observed_at":"2026-08-07T12:42:24.391206Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:42:14.349072Z","title":"Llm-based agentic systems in medicine and healthcare.Nature Machine Intelligence, 6(12):1418–1420, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:14.349072Z"},"links":{"citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:8ba6a6b3940d1a9fc0a7f27186f68d344c099e6812d2a55577537e7891a7ae14","observation_id":"39a7815c-9f5a-4977-b7ee-6fcf06d14461","resolution":{"observed_at":"2026-08-07T12:42:14.349072Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:42:14.458743Z","title":"Improving language understanding by generative pre-training","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:14.458743Z"},"links":{"citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:018886bf506fc31d021a6585b342cabfdd90c0fe2f63d435d1212d77f786430b","observation_id":"cf62a05f-e636-4597-af89-a63000ad4fd1","resolution":{"observed_at":"2026-08-07T12:42:14.458743Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:42:23.977940Z","title":"Language models are unsupervised multitask learners.OpenAI blog, 1(8):9, 2019","venue":null,"work_id":"aeb92ccc-92ab-4ad0-8ed9-fd8a9321abd9","year":2019},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:14.532396Z"},"links":{"citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:8af194a57c0e884fd95b31ab09144be696d2a6695763f6e67f74ec5c6b64cbe6","observation_id":"b095827c-cbd0-499c-9369-795dbcd17625","resolution":{"observed_at":"2026-08-07T12:42:24.067470Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:42:14.597041Z","title":"Identifying the risks of lm agents with an lm-emulated sandbox","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:14.597041Z"},"links":{"citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:9d57e739c67d504983e09ffb644d0da93fc4bf990588cbe13b147fe11dd44177","observation_id":"e92c744a-dbb5-4a26-ab6a-45083317a23a","resolution":{"observed_at":"2026-08-07T12:42:14.597041Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:42:23.887350Z","title":"Saltzer and Michael D","venue":null,"work_id":"c4c0f493-682d-4033-a0a7-07989ba3f855","year":1975},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:14.704723Z"},"links":{"citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:a478be1f80bcc5c8be8a531e6a9f01213949210db795648963d17f3e5c98e633","observation_id":"5ea5a6d0-fd10-4acd-97a8-9e32e13e4d39","resolution":{"observed_at":"2026-08-07T12:42:23.926538Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:42:23.814804Z","title":"Scalable and transferable black-box jailbreaks for language models via persona modulation","venue":null,"work_id":"e2cbed4f-41d7-4188-94bc-086ff30a981a","year":2023},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:14.809955Z"},"links":{"citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:8d8087b5cfda065362131d75ff588d10a0901e5e3c17ac39f2c45b0b01d9a335","observation_id":"12f99703-4403-4662-8a8c-f52513336761","resolution":{"observed_at":"2026-08-07T12:42:23.847173Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:42:23.637539Z","title":"PrivacyLens: Evaluating privacy norm awareness of language models in action","venue":null,"work_id":"b9301e0f-150d-491a-a6e8-e8178104a993","year":2024},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:14.862141Z"},"links":{"citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:2daf5c00b70126fdbcedc35ebbb0ee4b7adc3e37c023272ebe9249a64e1107ea","observation_id":"2c2bde08-6264-4a0e-8f08-47e16c10a20c","resolution":{"observed_at":"2026-08-07T12:42:23.711449Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:42:14.965587Z","title":"Collaborative gym: A framework for enabling and evaluating human-agent collaboration.arXiv preprint arXiv:2412.15701, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:14.965587Z"},"links":{"citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:d066d3f2496a1499cc68f5eab3d4df94d7e2195589cf869bbc4c385c6eff1f51","observation_id":"ed2e0c91-b822-4f97-aeaf-90334fe082a8","resolution":{"observed_at":"2026-08-07T12:42:14.965587Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2308.03825","last_updated":"2024-05-15T12:06:31Z","snapshot_observed_at":"2026-07-06T16:03:34.432602Z","submitted_at":"2023-08-07T16:55:20Z","title":"\"Do Anything Now\": Characterizing and Evaluating In-The-Wild Jailbreak Prompts on Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.03825","snapshot_observed_at":"2026-08-07T12:42:15.041346Z","title":"Do Anything Now","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:15.041346Z"},"links":{"cited_paper":"/paper/2308.03825","citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:8d2f34287be8ca8769363a6f033a7c87e38ffdbcc9d23bd7c0680e2ce0bc2ba3","observation_id":"490b3d32-0aaf-4692-91a5-47f4cf418e97","resolution":{"observed_at":"2026-08-07T12:42:15.041346Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:42:23.506223Z","title":"Choquette-Choo, Milad Nasr, Chawin Sitawarin, Gena Gibson, Andreas Terzis, and John \"Four\" Flynn","venue":null,"work_id":"6e80409c-958f-4f22-b36c-697160c4a531","year":2025},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:15.133715Z"},"links":{"citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:aa770c2c3b9fbda2817f948c2ae6f5344deec11dcc3572dc289812337d159bf8","observation_id":"7913acda-421d-4cda-b47a-e7e91e03b39d","resolution":{"observed_at":"2026-08-07T12:42:23.568018Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.11703","last_updated":"2026-05-14T02:36:38Z","snapshot_observed_at":"2026-07-06T21:10:09.129714Z","submitted_at":"2025-04-16T01:58:40Z","title":"Progent: Securing AI Agents with Privilege Control","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.11703","snapshot_observed_at":"2026-08-07T12:42:15.258181Z","title":"Progent: Programmable privilege control for LLM agents.arXiv preprint arXiv:2504.11703, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:15.258181Z"},"links":{"cited_paper":"/paper/2504.11703","citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:5cead9ce2d96e218b5b2b2426f4bba693c79293a7231c8ed93bc19ec478d5a46","observation_id":"62a2d446-309d-4e3a-bdec-858410c0b0e0","resolution":{"observed_at":"2026-08-07T12:42:15.258181Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.04686","last_updated":"2024-08-08T09:18:47Z","snapshot_observed_at":"2026-07-06T18:58:35.218405Z","submitted_at":"2024-08-08T09:18:47Z","title":"Multi-Turn Context Jailbreak Attack on Large Language Models From First Principles","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.04686","snapshot_observed_at":"2026-08-07T12:42:15.340645Z","title":"Multi-turn context jailbreak attack on large language models from first principles.arXiv preprint arXiv:2408.04686, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:15.340645Z"},"links":{"cited_paper":"/paper/2408.04686","citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:ede49c0279c93676a72b431e5a2670fb20a992d6b18f9f694794b7b6a5794c6c","observation_id":"66496283-4700-425d-8a6a-d96b84f88a3d","resolution":{"observed_at":"2026-08-07T12:42:15.340645Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2302.13971","last_updated":"2023-02-27T17:11:15Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-02-27T17:11:15Z","title":"LLaMA: Open and Efficient Foundation Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2302.13971","snapshot_observed_at":"2026-08-07T12:42:15.374992Z","title":"Llama: Open and efficient foundation language models.arXiv preprint arXiv:2302.13971, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:15.374992Z"},"links":{"cited_paper":"/paper/2302.13971","citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:da368b67c92cc8cc5d0d89eb7a90d6d5545b2abad8cd62d67ac334da8030013d","observation_id":"7e370c83-7e1d-49cb-bf5a-fd9b142233aa","resolution":{"observed_at":"2026-08-07T12:42:15.374992Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2501.17070","last_updated":"2025-04-17T17:48:53Z","snapshot_observed_at":"2026-08-07T02:40:01.782243Z","submitted_at":"2025-01-28T16:55:39Z","title":"Contextual Agent Security: A Policy for Every Purpose","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.17070","snapshot_observed_at":"2026-08-07T12:42:15.456892Z","title":"Context is key in agent security.arXiv preprint arXiv:2501.17070, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:15.456892Z"},"links":{"cited_paper":"/paper/2501.17070","citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:a12e44100d7874f838023776c7c8d36d531c605d23562cc61816032ae03c247b","observation_id":"49bcb3ce-1f1a-4aa2-b8ed-f22c0a351464","resolution":{"observed_at":"2026-08-07T12:42:15.456892Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.13172","last_updated":"2025-06-03T17:08:56Z","snapshot_observed_at":"2026-08-07T18:11:02.941133Z","submitted_at":"2025-02-17T19:55:53Z","title":"Unveiling Privacy Risks in LLM Agent Memory","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.13172","snapshot_observed_at":"2026-08-07T12:42:15.532647Z","title":"Unveiling privacy risks in LLM agent memory.arXiv preprint arXiv:2502.13172, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:15.532647Z"},"links":{"cited_paper":"/paper/2502.13172","citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:e6d26f1ac979214068a7336de1260ae1e297bdadfad06f66a65792f7e034686a","observation_id":"ccc84b4b-c405-43f6-a854-5b58edeb97bc","resolution":{"observed_at":"2026-08-07T12:42:15.532647Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.12507","last_updated":"2023-08-18T03:07:02Z","snapshot_observed_at":"2026-07-06T15:57:36.128928Z","submitted_at":"2023-07-24T03:44:17Z","title":"Gradient-Based Word Substitution for Obstinate Adversarial Examples Generation in Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.12507","snapshot_observed_at":"2026-08-07T12:42:15.631370Z","title":"Secret Language","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:15.631370Z"},"links":{"cited_paper":"/paper/2307.12507","citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:aa323425b519e964d0887a2f28c724b0ffbbfc8866a099ac21513585d3a09d17","observation_id":"b2416549-9e07-4fe0-a7c2-c50da359fe7e","resolution":{"observed_at":"2026-08-07T12:42:15.631370Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:42:23.401258Z","title":"Jailbroken: How does LLM safety training fail? InNeurIPS, 2023","venue":null,"work_id":"e27218a9-92ae-4647-9115-6909a17c958c","year":2023},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:15.706109Z"},"links":{"citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:581d1bdb51a3cbfcec328dfc8193b6a30df98169cf7a971eb9292b211721153a","observation_id":"6e96c548-5365-4c4e-a1c9-ae934e9cf4fd","resolution":{"observed_at":"2026-08-07T12:42:23.471413Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04960","last_updated":"2025-01-30T22:55:18Z","snapshot_observed_at":"2026-08-06T11:42:59.851078Z","submitted_at":"2024-03-08T00:02:30Z","title":"IsolateGPT: An Execution Isolation Architecture for LLM-Based Agentic Systems","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.04960","snapshot_observed_at":"2026-08-07T12:42:15.770833Z","title":"IsolateGPT: An Execution Isolation Architecture for LLM-Based Agentic Systems.arXiv preprint arXiv:2403.04960, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:15.770833Z"},"links":{"cited_paper":"/paper/2403.04960","citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:f0143780f610485e54eaa80df8afa1b7b4256435ca0d5cdfc64622c693529136","observation_id":"002ddea9-086d-45ec-b623-7ae8f92a9849","resolution":{"observed_at":"2026-08-07T12:42:15.770833Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:42:23.198627Z","title":"Chatarena: Multi-agent language game environments for large language models.https://github.com/chatarena/chatarena, 2023","venue":null,"work_id":"1cf56411-c7d4-438a-8b21-57da65fd8557","year":2023},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:15.848097Z"},"links":{"citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:f5bc9c2ec2b5342a11cdf44230563fc1bb69b779d5721655fbbbf285e3a544c7","observation_id":"501d3fa2-9165-4f6f-9a3a-612981623685","resolution":{"observed_at":"2026-08-07T12:42:23.297070Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:42:15.919093Z","title":"Osworld: Benchmarking multimodal agents for open-ended tasks in real computer environments, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:15.919093Z"},"links":{"citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:847c5d15e26f1c2182ce986aadef77876613de88053e285c794becacd368bdb6","observation_id":"33867e88-cbca-4552-8a3e-9e4b7474d0df","resolution":{"observed_at":"2026-08-07T12:42:15.919093Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.14197","last_updated":"2025-01-27T08:51:16Z","snapshot_observed_at":"2026-07-06T17:06:45.522731Z","submitted_at":"2023-12-21T01:08:39Z","title":"Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.14197","snapshot_observed_at":"2026-08-07T12:42:15.984482Z","title":"Benchmarking and defending against indirect prompt injection attacks on large language models.arXiv preprint arXiv:2312.14197, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:15.984482Z"},"links":{"cited_paper":"/paper/2312.14197","citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:123e05aeec13f18c2afefe71b4d883a6f0986461eec5342acfe58e98b7203fed","observation_id":"54353bad-a6dc-49d0-b7fd-50f97b2bc4ab","resolution":{"observed_at":"2026-08-07T12:42:15.984482Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.10253","last_updated":"2024-06-27T16:01:27Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-09-19T02:19:48Z","title":"GPTFUZZER: Red Teaming Large Language Models with Auto-Generated Jailbreak Prompts","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.10253","snapshot_observed_at":"2026-08-07T12:42:16.057577Z","title":"Gptfuzzer: Red teaming large language models with auto-generated jailbreak prompts.arXiv preprint arXiv:2309.10253, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:16.057577Z"},"links":{"cited_paper":"/paper/2309.10253","citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:9e0b9740f884261885ade7c406cc6942c03e0048dd60e3e2ccac4ce3ec2570d3","observation_id":"ba5b2bdf-6dcb-42ea-9e6d-51a56a1db8fc","resolution":{"observed_at":"2026-08-07T12:42:16.057577Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:42:22.864134Z","title":"LLM-Fuzzer: Scaling assessment of large language model jailbreaks","venue":null,"work_id":"7e878238-ea8d-4826-8db9-3030e516ba31","year":2024},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:16.121597Z"},"links":{"citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:b915afdc4af90f313b0a7ad79e03de3cc911864f009887bbe75e7da96f8e22d0","observation_id":"a35ad4c9-6bde-41a7-aa1a-c4a918fbf45e","resolution":{"observed_at":"2026-08-07T12:42:23.038320Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:42:22.696184Z","title":null,"venue":null,"work_id":"3d42f8a9-bcd9-4441-9829-1f0848ebe4d7","year":2024},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:16.201346Z"},"links":{"citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:18a0305ce0dadb996f06db59e7f3fdaf734443f121d971582c3f0d763ce4c7c4","observation_id":"9ecd6738-1a77-4f90-b57a-10e3daf71070","resolution":{"observed_at":"2026-08-07T12:42:22.780421Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2401.10019","last_updated":"2024-10-05T06:50:15Z","snapshot_observed_at":"2026-08-06T04:21:24.397587Z","submitted_at":"2024-01-18T14:40:46Z","title":"R-Judge: Benchmarking Safety Risk Awareness for LLM Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.10019","snapshot_observed_at":"2026-08-07T12:42:16.267748Z","title":"R-judge: Benchmarking safety risk awareness for LLM agents.arXiv preprint arXiv:2401.10019, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:16.267748Z"},"links":{"cited_paper":"/paper/2401.10019","citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:4d7b450d8c79fbae3e8d37137d7acbb36e39f9dd7dfe0e9b5d34aa31636ad0ab","observation_id":"8971b96f-62de-484e-9f31-5cfc8ebf7e08","resolution":{"observed_at":"2026-08-07T12:42:16.267748Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:42:22.525171Z","title":"GPT-4 is too smart to be safe: Stealthy chat with LLMs via cipher","venue":null,"work_id":"8add0678-821c-4289-bff6-7eec97b155b1","year":2024},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:16.345626Z"},"links":{"citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:aa9df8c640eecde5525546ce1dd642882ee7a82dfa7ab635f669939d8da4c60b","observation_id":"b55ef027-4d4d-46ce-81ce-066aa0603d52","resolution":{"observed_at":"2026-08-07T12:42:22.601536Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.02691","last_updated":"2024-08-04T04:52:35Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-03-05T06:21:45Z","title":"InjecAgent: Benchmarking Indirect Prompt Injections in Tool-Integrated Large Language Model Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.02691","snapshot_observed_at":"2026-08-07T12:42:16.461006Z","title":"Injecagent: Benchmarking indirect prompt injections in tool- integrated large language model agents.arXiv preprint arXiv:2403.02691, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:16.461006Z"},"links":{"cited_paper":"/paper/2403.02691","citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:56f2de2b0f25d8b602079a8098a2be3c98647ad9ea3ce0c9f3bd54b63c9ec1e9","observation_id":"5dc51e68-0ae0-474a-82ae-456547c0ebde","resolution":{"observed_at":"2026-08-07T12:42:16.461006Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:42:22.380294Z","title":"Zhang, Joey Ji, Celeste Menders, Riya Dulepet, Thomas Qin, Ron Y","venue":null,"work_id":"45acf84a-0e6a-4855-a558-302cafcd506c","year":2025},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:16.557915Z"},"links":{"citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:f98d83c976d97a1eceff89410248f859362e39186274375806941609372bdbf7","observation_id":"8ac99a43-caa9-4b74-a84e-8675f8bc3679","resolution":{"observed_at":"2026-08-07T12:42:22.440904Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.07234","last_updated":"2024-11-09T04:01:22Z","snapshot_observed_at":"2026-07-06T17:58:25.894552Z","submitted_at":"2024-04-06T06:17:10Z","title":"Goal-guided Generative Prompt Injection Attack on Large Language Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.07234","snapshot_observed_at":"2026-08-07T12:42:16.635079Z","title":"Goal-guided generative prompt injection attack on large language models.arXiv preprint arXiv:2404.07234, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:16.635079Z"},"links":{"cited_paper":"/paper/2404.07234","citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:ece449a658b514fe1d6e19a4acf884516f44ffb80802b042f7dff8abf01a17c7","observation_id":"4adf505c-776b-47ab-bae3-822d609394ca","resolution":{"observed_at":"2026-08-07T12:42:16.635079Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:42:22.267330Z","title":"Agent security bench (ASB): Formalizing and benchmarking attacks and defenses in LLM-based agents","venue":null,"work_id":"bfb7c3ff-181e-4c49-9657-4f107f748b0e","year":2025},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":74,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:16.733672Z"},"links":{"citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:2095d36af585a08097691a4c32c51d8ccc1fd68a5776d92fb939bb32ae5e3955","observation_id":"b10c2da8-b53b-4941-aedf-cac699e19392","resolution":{"observed_at":"2026-08-07T12:42:22.322556Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2409.16783","last_updated":"2024-09-25T09:44:48Z","snapshot_observed_at":"2026-07-06T19:21:41.819005Z","submitted_at":"2024-09-25T09:44:48Z","title":"Holistic Automated Red Teaming for Large Language Models through Top-Down Test Case Generation and Multi-turn Interaction","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.16783","snapshot_observed_at":"2026-08-07T12:42:16.802912Z","title":"Holistic automated red teaming for large language models through top-down test case generation and multi-turn interaction.arXiv preprint arXiv:2409.16783, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":75,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:16.802912Z"},"links":{"cited_paper":"/paper/2409.16783","citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:0e508d704e6bcc65b070eca2826af67a512318e51f406de500609e042e2d0cd9","observation_id":"6bd88959-2a42-4211-9da3-316e90d52851","resolution":{"observed_at":"2026-08-07T12:42:16.802912Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.14470","last_updated":"2025-05-20T05:58:23Z","snapshot_observed_at":"2026-08-06T12:35:19.109481Z","submitted_at":"2024-12-19T02:35:15Z","title":"Agent-SafetyBench: Evaluating the Safety of LLM Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.14470","snapshot_observed_at":"2026-08-07T12:42:16.878014Z","title":"Agent-safetybench: Evaluating the safety of LLM agents.arXiv preprint arXiv:2412.14470, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":76,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:16.878014Z"},"links":{"cited_paper":"/paper/2412.14470","citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:2d274432159c9109befad1d74ac0ef01f3f6dd34f3c575589b11685bb873f4d7","observation_id":"9c4055af-829d-4ce2-946d-b7ff3dcb3103","resolution":{"observed_at":"2026-08-07T12:42:16.878014Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:42:16.979796Z","title":"Agentdam: Privacy leakage evaluation for autonomous web agents.arXiv preprint arXiv:2503.09780, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":77,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:16.979796Z"},"links":{"citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:25f72cf08a98447a040ae37c37836ff236b91fe8688f38a2bf31530d7254c771","observation_id":"b4aec45b-fb05-4462-b4da-1ef170ba4aa4","resolution":{"observed_at":"2026-08-07T12:42:16.979796Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.08966","last_updated":"2025-02-14T04:16:40Z","snapshot_observed_at":"2026-08-07T23:01:30.196995Z","submitted_at":"2025-02-13T05:06:22Z","title":"RTBAS: Defending LLM Agents Against Prompt Injection and Privacy Leakage","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.08966","snapshot_observed_at":"2026-08-07T12:42:17.059726Z","title":"Rtbas: Defending LLM agents against prompt injection and privacy leakage.arXiv preprint arXiv:2502.08966, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":78,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:17.059726Z"},"links":{"cited_paper":"/paper/2502.08966","citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:c18c4f0caa34333095b57108c6b1ba42a549f02395868a133d886bdb87577012","observation_id":"4755f0c4-0df9-493b-bc87-041b609ba668","resolution":{"observed_at":"2026-08-07T12:42:17.059726Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.13854","last_updated":"2024-04-16T15:13:18Z","snapshot_observed_at":"2026-08-06T12:47:01.809185Z","submitted_at":"2023-07-25T22:59:32Z","title":"WebArena: A Realistic Web Environment for Building Autonomous Agents","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.13854","snapshot_observed_at":"2026-08-07T12:42:17.145765Z","title":"Webarena: A realistic web environment for building autonomous agents.arXiv preprint arXiv:2307.13854, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":79,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:17.145765Z"},"links":{"cited_paper":"/paper/2307.13854","citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:34753ee5b795693e866350bb5291e01b65a4af617e0066d28a1e23ab7c3b1d08","observation_id":"f9c6f5a0-b45e-4e3f-b09c-c24ef5337624","resolution":{"observed_at":"2026-08-07T12:42:17.145765Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-07-06T15:59:23.019044Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-08-07T12:42:17.234871Z","title":"Make a reservation for the cheapest top-rated hotel in London for 2024-06-03","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":80,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:17.234871Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:3ae5a38472e0ba491beb34f58ece9b629da8b2a5aa0c7aa1981c6edf50b67817","observation_id":"4e6c1294-ed3f-4e98-9bd1-d33b70975e5f","resolution":{"observed_at":"2026-08-07T12:42:17.234871Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:42:22.164451Z","title":null,"venue":null,"work_id":"89b553d9-406d-4f10-aa36-35fa30365588","year":null},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":81,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:17.371158Z"},"links":{"citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:3d09cbc180d5e109c00b6bcea756d6dc6ab5c63eaf7fc2de899a0a3b60bab038","observation_id":"af664236-e50d-4876-a479-04426623bb7f","resolution":{"observed_at":"2026-08-07T12:42:22.222084Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:42:22.035990Z","title":null,"venue":null,"work_id":"d4c9ae3a-2fc3-447c-bc8a-5c2a6614af3a","year":null},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":82,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:17.414088Z"},"links":{"citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:f3e02f29bcee2e4c50764acf40fb754b6997a8297b1b8bf95e3e4489784066be","observation_id":"d893c327-457a-43bb-a07b-23da90095d20","resolution":{"observed_at":"2026-08-07T12:42:22.117728Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:42:21.946023Z","title":null,"venue":null,"work_id":"87851846-9150-4191-9d23-1c49cbc0f844","year":null},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":83,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:17.513349Z"},"links":{"citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:19743de5e36a835a8a8c319c52d7e6cef5eec3dfadb5d424567d71f4112d0908","observation_id":"6d981ffe-26a1-4e16-a9c6-f9bd07cd4b93","resolution":{"observed_at":"2026-08-07T12:42:21.981233Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:42:21.822166Z","title":null,"venue":null,"work_id":"f91737df-49e3-4f11-a308-1d17398fc9a4","year":null},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":84,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:17.692770Z"},"links":{"citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:4a34ab8d710605d24f5f99043f50cd574722b84288095f4612312ef6941183db","observation_id":"068bf66b-2211-4c74-a8f3-0b52c326865f","resolution":{"observed_at":"2026-08-07T12:42:21.877047Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:42:21.628726Z","title":"Output your analysis in a structured JSON format that clearly states permissions for each tool based on the task context and provides DETAILED reasoning","venue":null,"work_id":"4a759d15-48d3-402d-8804-c264c8ee4266","year":null},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":85,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:17.877754Z"},"links":{"citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:e89749644af022429bca0b52408225956b19ae9bd1eb0b923640855d0323228b","observation_id":"d0b69c9e-f71d-4e53-8e62-b9548e2a0acd","resolution":{"observed_at":"2026-08-07T12:42:21.708644Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:42:21.379984Z","title":null,"venue":null,"work_id":"ea27afce-ce5f-491a-a2b6-8255d1061a6a","year":null},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":86,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:18.044792Z"},"links":{"citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:58bad26bc8ef8f570b346f4ce816afadeb7fab7b087bf6c41ffeb0a47663e5db","observation_id":"3379054e-420d-48f9-b4ee-1498a4230ae7","resolution":{"observed_at":"2026-08-07T12:42:21.492939Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:42:21.164802Z","title":null,"venue":null,"work_id":"39e637ae-bb49-4103-9b40-96dc13865227","year":null},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":87,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:18.209326Z"},"links":{"citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:fcec135bbe216d1455c9a2d4b8b1850db554953d6582101246ac61562790b97e","observation_id":"fabc4ed9-d310-4eb0-a9bc-e162304cd1c5","resolution":{"observed_at":"2026-08-07T12:42:21.276654Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:42:20.795119Z","title":null,"venue":null,"work_id":"ddbbbc42-2d52-4edc-b24e-c71a823f9758","year":null},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":88,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:18.275656Z"},"links":{"citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:b766ede4a871966cfa710ca28c5b7a73a284b7dbd89af4a610cafc9ad2f3353e","observation_id":"a23379ba-d10b-4a84-8488-6a14c06a5562","resolution":{"observed_at":"2026-08-07T12:42:20.946610Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:42:20.535602Z","title":null,"venue":null,"work_id":"52bd1934-73a6-4ef4-8e51-8b622611400e","year":null},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":89,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:18.334643Z"},"links":{"citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:23d9beceddbf715d6d2fe5e3493abd0939b2fb3b32113969fed1c2eabfc69ca2","observation_id":"3bd0b09a-4f36-4946-aad4-d0ec73c114de","resolution":{"observed_at":"2026-08-07T12:42:20.646846Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:42:20.229935Z","title":null,"venue":null,"work_id":"d69e82f3-0e95-4f02-975c-cefc003d4c57","year":null},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":90,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:18.393562Z"},"links":{"citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:01d3921559f567f061f064b6158fae6be278bd3b87ba37463d108ab5077f8b66","observation_id":"3586a497-e439-41c5-bcb5-2bfc07e1b6ca","resolution":{"observed_at":"2026-08-07T12:42:20.381960Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles"},"reference_resolution":{"displayed":90,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":67,"verified_exact":0,"verified_fuzzy":23},"total_outbound_references":90},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 90 of 90 outbound references and 18 inbound Pith citation observations for arXiv:2505.24019."}