{"as_of":"2026-08-07T23:49:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:d00048f6a8b78b7e81c30ea3a12f9af1d41b0c9eed966df82ce82412c0058944","coverage":[{"denominator":40,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":40,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T05:20:51.574942Z","state":"measured"},{"denominator":43,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":43,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":3,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":3,"source":"paper_references, paper_reference_links","source_observed_at":"2026-07-14T03:26:15.676915Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-05-13T16:48:02.786346Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2506.08336","last_updated":"2025-06-11T01:39:01Z","snapshot_observed_at":"2026-08-07T22:32:21.983693Z","submitted_at":"2025-06-10T01:45:56Z","title":"Your Agent Can Defend Itself against Backdoor Attacks","version":2},"cited_work":{"arxiv_id":"2506.08336","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2506.08336","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Your agent can defend itself against backdoor attacks","venue":null,"work_id":"b38bf471-603b-4e6a-bb02-d9749d85c88a","year":2025},"citing_paper":{"arxiv_id":"2604.03890","last_updated":"2026-04-04T23:06:16Z","snapshot_observed_at":"2026-07-06T22:52:57.182669Z","submitted_at":"2026-04-04T23:06:16Z","title":"From Prompt to Physical Action: Structured Backdoor Attacks on LLM-Mediated Robotic Control Systems","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-05-13T16:47:10.678447Z"},"links":{"cited_paper":"/paper/2506.08336","citing_paper":"/paper/2604.03890"},"observation_digest":"sha256:ee6784f8965a0b123705d5c97d5827c32c0269aa82efc484bedcb362cfc6f690","observation_id":"776aa649-0a09-47d3-86c7-b9131ecdfb8b","resolution":{"observed_at":"2026-05-13T16:48:02.788326Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.08336","last_updated":"2025-06-11T01:39:01Z","snapshot_observed_at":"2026-08-07T22:32:21.983693Z","submitted_at":"2025-06-10T01:45:56Z","title":"Your Agent Can Defend Itself against Backdoor Attacks","version":2},"cited_work":{"arxiv_id":"2506.08336","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2506.08336","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Your agent can defend itself against backdoor attacks","venue":null,"work_id":"b38bf471-603b-4e6a-bb02-d9749d85c88a","year":2025},"citing_paper":{"arxiv_id":"2605.08612","last_updated":"2026-05-09T02:15:10Z","snapshot_observed_at":"2026-07-06T23:20:47.880233Z","submitted_at":"2026-05-09T02:15:10Z","title":"ATAAT: Adaptive Threat-Aware Adversarial Tuning Framework against Backdoor Attacks on Vision-Language-Action Models","version":1},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-05-12T01:16:35.508455Z"},"links":{"cited_paper":"/paper/2506.08336","citing_paper":"/paper/2605.08612"},"observation_digest":"sha256:038ea4cd8a6a99dfc054955e5b014f57e3ac6126113e8d12dc28bc69ba9ac5e5","observation_id":"382a000c-c827-4da4-892a-afda204cce05","resolution":{"observed_at":"2026-05-12T08:06:32.647173Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.08336","last_updated":"2025-06-11T01:39:01Z","snapshot_observed_at":"2026-08-07T22:32:21.983693Z","submitted_at":"2025-06-10T01:45:56Z","title":"Your Agent Can Defend Itself against Backdoor Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.08336","snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":66,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"cited_paper":"/paper/2506.08336","citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:7e419adcda21ac96225c9bbbba5eeea3104c156020265ef2a978acab141a2fa6","observation_id":"d78d9c3f-a3a1-4006-93c7-a17061f72b00","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2506.08336/citation-record","integrity":"/paper/2506.08336/integrity","json":"/paper/2506.08336/citation-record.json","paper":"/paper/2506.08336"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:20:51.385745Z","title":"online\" 'onlinestring :=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.08336","last_updated":"2025-06-11T01:39:01Z","snapshot_observed_at":"2026-08-07T22:32:21.983693Z","submitted_at":"2025-06-10T01:45:56Z","title":"Your Agent Can Defend Itself against Backdoor Attacks","version":2},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-07T05:20:51.385745Z"},"links":{"citing_paper":"/paper/2506.08336"},"observation_digest":"sha256:1b14a90a6465f2dad2bd468ad27d9f0bb40b46507bb80abeb21b4376162e3e8c","observation_id":"33d8e3ef-8f5f-44e7-a182-8b9b49bebeec","resolution":{"observed_at":"2026-08-07T05:20:51.385745Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:20:51.391716Z","title":"write newline","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.08336","last_updated":"2025-06-11T01:39:01Z","snapshot_observed_at":"2026-08-07T22:32:21.983693Z","submitted_at":"2025-06-10T01:45:56Z","title":"Your Agent Can Defend Itself against Backdoor Attacks","version":2},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-07T05:20:51.391716Z"},"links":{"citing_paper":"/paper/2506.08336"},"observation_digest":"sha256:2157dafa7742542fcead34a20f465b5b25e8667d3e805e09ebff0cad8baae3ce","observation_id":"508d7764-32d1-4bdf-9fd7-7ea88da89387","resolution":{"observed_at":"2026-08-07T05:20:51.391716Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:20:51.396958Z","title":"write newline","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.08336","last_updated":"2025-06-11T01:39:01Z","snapshot_observed_at":"2026-08-07T22:32:21.983693Z","submitted_at":"2025-06-10T01:45:56Z","title":"Your Agent Can Defend Itself against Backdoor Attacks","version":2},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-07T05:20:51.396958Z"},"links":{"citing_paper":"/paper/2506.08336"},"observation_digest":"sha256:a6ca064d52b38e853c6979db3997eef036a1b95ea91b22234f30d368e8f6856d","observation_id":"7d938bd2-ae37-4e72-a5c6-1df42f82f10f","resolution":{"observed_at":"2026-08-07T05:20:51.396958Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:20:52.117156Z","title":null,"venue":null,"work_id":"0d015320-6c47-46b4-89ac-933bf13d314d","year":2021},"citing_paper":{"arxiv_id":"2506.08336","last_updated":"2025-06-11T01:39:01Z","snapshot_observed_at":"2026-08-07T22:32:21.983693Z","submitted_at":"2025-06-10T01:45:56Z","title":"Your Agent Can Defend Itself against Backdoor Attacks","version":2},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-07T05:20:51.402954Z"},"links":{"citing_paper":"/paper/2506.08336"},"observation_digest":"sha256:d9de972552ee9a31c0e44ccc452fa3d00603a23641fa8830efffd5760893afbf","observation_id":"3124a7e8-bb3d-440f-a919-3847d1c1962b","resolution":{"observed_at":"2026-08-07T05:20:52.121533Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:20:52.102926Z","title":null,"venue":null,"work_id":"7f459f57-0c35-4b54-bd69-d6b055c08c63","year":2021},"citing_paper":{"arxiv_id":"2506.08336","last_updated":"2025-06-11T01:39:01Z","snapshot_observed_at":"2026-08-07T22:32:21.983693Z","submitted_at":"2025-06-10T01:45:56Z","title":"Your Agent Can Defend Itself against Backdoor Attacks","version":2},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-07T05:20:51.407546Z"},"links":{"citing_paper":"/paper/2506.08336"},"observation_digest":"sha256:dcb81c3d0a47eb5a2be9a5034d829b52e329339306ae7e259a6e0f3a41745570","observation_id":"31cb21c7-ad73-4ce3-bff3-febfe6024bd7","resolution":{"observed_at":"2026-08-07T05:20:52.107386Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2407.21783","last_updated":"2024-11-23T23:27:33Z","snapshot_observed_at":"2026-07-06T18:55:11.576666Z","submitted_at":"2024-07-31T17:54:27Z","title":"The Llama 3 Herd of Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.21783","snapshot_observed_at":"2026-08-07T05:20:51.412130Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.08336","last_updated":"2025-06-11T01:39:01Z","snapshot_observed_at":"2026-08-07T22:32:21.983693Z","submitted_at":"2025-06-10T01:45:56Z","title":"Your Agent Can Defend Itself against Backdoor Attacks","version":2},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-07T05:20:51.412130Z"},"links":{"cited_paper":"/paper/2407.21783","citing_paper":"/paper/2506.08336"},"observation_digest":"sha256:7aad022d4d4305f49e623ec331af1902d1c09bdb5cff6cd69b4bb09424a00d3c","observation_id":"f37e26f4-6514-4097-b053-2af2ae217a0c","resolution":{"observed_at":"2026-08-07T05:20:51.412130Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:20:52.087044Z","title":null,"venue":null,"work_id":"b0b07283-26a9-4297-8dd5-85c06992fc01","year":2018},"citing_paper":{"arxiv_id":"2506.08336","last_updated":"2025-06-11T01:39:01Z","snapshot_observed_at":"2026-08-07T22:32:21.983693Z","submitted_at":"2025-06-10T01:45:56Z","title":"Your Agent Can Defend Itself against Backdoor Attacks","version":2},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-07T05:20:51.416945Z"},"links":{"citing_paper":"/paper/2506.08336"},"observation_digest":"sha256:17162c59747b2a589c4fd4b5d904e372bb425247b24259a9ccf787690c2a6467","observation_id":"b18318e7-3b97-4807-8b7e-65359f56ab91","resolution":{"observed_at":"2026-08-07T05:20:52.092108Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.06825","last_updated":"2023-10-10T17:54:58Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-10-10T17:54:58Z","title":"Mistral 7B","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.06825","snapshot_observed_at":"2026-08-07T05:20:51.421814Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.08336","last_updated":"2025-06-11T01:39:01Z","snapshot_observed_at":"2026-08-07T22:32:21.983693Z","submitted_at":"2025-06-10T01:45:56Z","title":"Your Agent Can Defend Itself against Backdoor Attacks","version":2},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-07T05:20:51.421814Z"},"links":{"cited_paper":"/paper/2310.06825","citing_paper":"/paper/2506.08336"},"observation_digest":"sha256:59fe7efbef02a9e69e855261f7f7a6bb0c66d1536deba06fdbe5f4571baee1a2","observation_id":"f6d62163-d3b1-4cf9-aa59-25a73f0ac248","resolution":{"observed_at":"2026-08-07T05:20:51.421814Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:20:51.427123Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.08336","last_updated":"2025-06-11T01:39:01Z","snapshot_observed_at":"2026-08-07T22:32:21.983693Z","submitted_at":"2025-06-10T01:45:56Z","title":"Your Agent Can Defend Itself against Backdoor Attacks","version":2},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-07T05:20:51.427123Z"},"links":{"citing_paper":"/paper/2506.08336"},"observation_digest":"sha256:45634d3e2de6d84f80816e17f7da908cdcadba865810a41b3302b66cd10e7efa","observation_id":"873b1849-dcde-4b69-859f-f25d281bd5a8","resolution":{"observed_at":"2026-08-07T05:20:51.427123Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:20:52.063995Z","title":null,"venue":null,"work_id":"dfd8ca96-d6b1-47b9-b6fe-b173400dece2","year":2020},"citing_paper":{"arxiv_id":"2506.08336","last_updated":"2025-06-11T01:39:01Z","snapshot_observed_at":"2026-08-07T22:32:21.983693Z","submitted_at":"2025-06-10T01:45:56Z","title":"Your Agent Can Defend Itself against Backdoor Attacks","version":2},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-07T05:20:51.431900Z"},"links":{"citing_paper":"/paper/2506.08336"},"observation_digest":"sha256:52e4b4e2521282670128a2c5d8ca52bbea64dbfe1f6e4f3fc698eb5f347f096a","observation_id":"5789aff8-f215-4f16-9ed8-490090ff1318","resolution":{"observed_at":"2026-08-07T05:20:52.068687Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2308.03688","last_updated":"2025-10-04T03:54:18Z","snapshot_observed_at":"2026-08-06T20:36:41.418114Z","submitted_at":"2023-08-07T16:08:11Z","title":"AgentBench: Evaluating LLMs as Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.03688","snapshot_observed_at":"2026-08-07T05:20:51.436234Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.08336","last_updated":"2025-06-11T01:39:01Z","snapshot_observed_at":"2026-08-07T22:32:21.983693Z","submitted_at":"2025-06-10T01:45:56Z","title":"Your Agent Can Defend Itself against Backdoor Attacks","version":2},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-07T05:20:51.436234Z"},"links":{"cited_paper":"/paper/2308.03688","citing_paper":"/paper/2506.08336"},"observation_digest":"sha256:4e0d77d2ff10e0a44a6c9dd4f706ddb29acc1c95e8478f187f9010637f9c06bd","observation_id":"f088228c-2462-4359-8a4b-430fa0185a6a","resolution":{"observed_at":"2026-08-07T05:20:51.436234Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2303.15621","last_updated":"2023-04-13T10:59:39Z","snapshot_observed_at":"2026-07-06T15:08:41.430154Z","submitted_at":"2023-03-27T22:30:39Z","title":"ChatGPT as a Factual Inconsistency Evaluator for Text Summarization","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.15621","snapshot_observed_at":"2026-08-07T05:20:51.441130Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.08336","last_updated":"2025-06-11T01:39:01Z","snapshot_observed_at":"2026-08-07T22:32:21.983693Z","submitted_at":"2025-06-10T01:45:56Z","title":"Your Agent Can Defend Itself against Backdoor Attacks","version":2},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-07T05:20:51.441130Z"},"links":{"cited_paper":"/paper/2303.15621","citing_paper":"/paper/2506.08336"},"observation_digest":"sha256:46db99d022de5e858f64e1b5995721c866aa72bd40297304a80dd0431910cc1a","observation_id":"be5503e8-261d-406a-8ea2-69aa96378dee","resolution":{"observed_at":"2026-08-07T05:20:51.441130Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2303.08896","last_updated":"2023-10-11T17:43:28Z","snapshot_observed_at":"2026-07-06T15:03:55.982628Z","submitted_at":"2023-03-15T19:31:21Z","title":"SelfCheckGPT: Zero-Resource Black-Box Hallucination Detection for Generative Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.08896","snapshot_observed_at":"2026-08-07T05:20:51.445842Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.08336","last_updated":"2025-06-11T01:39:01Z","snapshot_observed_at":"2026-08-07T22:32:21.983693Z","submitted_at":"2025-06-10T01:45:56Z","title":"Your Agent Can Defend Itself against Backdoor Attacks","version":2},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-07T05:20:51.445842Z"},"links":{"cited_paper":"/paper/2303.08896","citing_paper":"/paper/2506.08336"},"observation_digest":"sha256:7d5d8cbaa53cc8dab7bc340abde431bdbc1ac4509dbb4c1b0af7984c6b218a9f","observation_id":"5a4adddb-c1aa-4721-8ba0-6cf69e36aa49","resolution":{"observed_at":"2026-08-07T05:20:51.445842Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2308.00436","last_updated":"2023-10-05T12:59:59Z","snapshot_observed_at":"2026-08-05T10:40:40.562724Z","submitted_at":"2023-08-01T10:31:36Z","title":"SelfCheck: Using LLMs to Zero-Shot Check Their Own Step-by-Step Reasoning","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.00436","snapshot_observed_at":"2026-08-07T05:20:51.450599Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.08336","last_updated":"2025-06-11T01:39:01Z","snapshot_observed_at":"2026-08-07T22:32:21.983693Z","submitted_at":"2025-06-10T01:45:56Z","title":"Your Agent Can Defend Itself against Backdoor Attacks","version":2},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-07T05:20:51.450599Z"},"links":{"cited_paper":"/paper/2308.00436","citing_paper":"/paper/2506.08336"},"observation_digest":"sha256:868dd8a5f1cf9c80a90d07c3eaaa9575e987533c949c088c4ad840bac5272b06","observation_id":"577bdf80-2172-450c-ae09-bc05272ed337","resolution":{"observed_at":"2026-08-07T05:20:51.450599Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:20:52.048928Z","title":null,"venue":null,"work_id":"5eae64d8-4a8b-4aea-8065-8804659bd127","year":2015},"citing_paper":{"arxiv_id":"2506.08336","last_updated":"2025-06-11T01:39:01Z","snapshot_observed_at":"2026-08-07T22:32:21.983693Z","submitted_at":"2025-06-10T01:45:56Z","title":"Your Agent Can Defend Itself against Backdoor Attacks","version":2},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-07T05:20:51.455472Z"},"links":{"citing_paper":"/paper/2506.08336"},"observation_digest":"sha256:e85d6ccca686b67ead8a55e8717647169a1ea81900111ee516af5b6932c13f19","observation_id":"0f0327a5-dcfb-463d-8d57-8f39cb972233","resolution":{"observed_at":"2026-08-07T05:20:52.053535Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2305.14322","last_updated":"2024-10-24T17:59:20Z","snapshot_observed_at":"2026-07-06T15:31:41.985646Z","submitted_at":"2023-05-23T17:53:38Z","title":"RET-LLM: Towards a General Read-Write Memory for Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.14322","snapshot_observed_at":"2026-08-07T05:20:51.459554Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.08336","last_updated":"2025-06-11T01:39:01Z","snapshot_observed_at":"2026-08-07T22:32:21.983693Z","submitted_at":"2025-06-10T01:45:56Z","title":"Your Agent Can Defend Itself against Backdoor Attacks","version":2},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-07T05:20:51.459554Z"},"links":{"cited_paper":"/paper/2305.14322","citing_paper":"/paper/2506.08336"},"observation_digest":"sha256:308e720ef7cfdfe25a3ffb96513d36b6b95bb912998cbabe9f5ccf7b5516c032","observation_id":"511758a7-f72f-4daf-b795-07d78305997b","resolution":{"observed_at":"2026-08-07T05:20:51.459554Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.16783","last_updated":"2024-05-27T03:10:57Z","snapshot_observed_at":"2026-07-06T18:20:18.770090Z","submitted_at":"2024-05-27T03:10:57Z","title":"TrojFM: Resource-efficient Backdoor Attacks against Very Large Foundation Models","version":1},"cited_work":{"arxiv_id":"2405.16783","doi":null,"metadata_source":"pith","pith_arxiv_id":"2405.16783","snapshot_observed_at":"2026-08-07T05:20:51.795164Z","title":"TrojFM: Resource-efficient Backdoor Attacks against Very Large Foundation Models","venue":"cs.CR","work_id":"3d1b78ae-fc17-4488-b564-40d8ea2eb611","year":2024},"citing_paper":{"arxiv_id":"2506.08336","last_updated":"2025-06-11T01:39:01Z","snapshot_observed_at":"2026-08-07T22:32:21.983693Z","submitted_at":"2025-06-10T01:45:56Z","title":"Your Agent Can Defend Itself against Backdoor Attacks","version":2},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-07T05:20:51.464083Z"},"links":{"cited_paper":"/paper/2405.16783","citing_paper":"/paper/2506.08336"},"observation_digest":"sha256:ad243d75e9353d0dfb1693a31398b0b7efafdae06d1a05e4f5fd784f882178a1","observation_id":"96b7f61a-9b1e-44d5-994e-b4c8fbd662ec","resolution":{"observed_at":"2026-08-07T05:20:51.800586Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2308.07308","last_updated":"2024-05-02T14:28:39Z","snapshot_observed_at":"2026-08-01T14:42:09.926151Z","submitted_at":"2023-08-14T17:54:10Z","title":"LLM Self Defense: By Self Examination, LLMs Know They Are Being Tricked","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.07308","snapshot_observed_at":"2026-08-07T05:20:51.468584Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.08336","last_updated":"2025-06-11T01:39:01Z","snapshot_observed_at":"2026-08-07T22:32:21.983693Z","submitted_at":"2025-06-10T01:45:56Z","title":"Your Agent Can Defend Itself against Backdoor Attacks","version":2},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-07T05:20:51.468584Z"},"links":{"cited_paper":"/paper/2308.07308","citing_paper":"/paper/2506.08336"},"observation_digest":"sha256:482d63c8c01ffe78ec19d9fa8701f36e65297910da2b497dc4679974081d4881","observation_id":"8c279b25-7c78-4611-8158-36ff45632a9f","resolution":{"observed_at":"2026-08-07T05:20:51.468584Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2011.10369","last_updated":"2021-11-03T18:21:00Z","snapshot_observed_at":"2026-07-06T10:16:22.473995Z","submitted_at":"2020-11-20T12:17:21Z","title":"ONION: A Simple and Effective Defense Against Textual Backdoor Attacks","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2011.10369","snapshot_observed_at":"2026-08-07T05:20:51.473274Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2506.08336","last_updated":"2025-06-11T01:39:01Z","snapshot_observed_at":"2026-08-07T22:32:21.983693Z","submitted_at":"2025-06-10T01:45:56Z","title":"Your Agent Can Defend Itself against Backdoor Attacks","version":2},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-07T05:20:51.473274Z"},"links":{"cited_paper":"/paper/2011.10369","citing_paper":"/paper/2506.08336"},"observation_digest":"sha256:9ceca405dbc3966235f8cf9700b315964c5b5d7c79a3469c07169038b1029aa9","observation_id":"fc910d12-2f81-468e-a5ae-a01dfd8992e4","resolution":{"observed_at":"2026-08-07T05:20:51.473274Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:20:51.478489Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.08336","last_updated":"2025-06-11T01:39:01Z","snapshot_observed_at":"2026-08-07T22:32:21.983693Z","submitted_at":"2025-06-10T01:45:56Z","title":"Your Agent Can Defend Itself against Backdoor Attacks","version":2},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-07T05:20:51.478489Z"},"links":{"citing_paper":"/paper/2506.08336"},"observation_digest":"sha256:8dd4cd34ec78937aa2c3aa72bd3b3d68c506af8bad7acaf51c3c3159dfbad45f","observation_id":"569e79b6-ebe9-496c-a997-fa7cda9261a7","resolution":{"observed_at":"2026-08-07T05:20:51.478489Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:20:52.024325Z","title":null,"venue":null,"work_id":"a6554b24-3009-4d2b-a57e-3f5e62f37981","year":2022},"citing_paper":{"arxiv_id":"2506.08336","last_updated":"2025-06-11T01:39:01Z","snapshot_observed_at":"2026-08-07T22:32:21.983693Z","submitted_at":"2025-06-10T01:45:56Z","title":"Your Agent Can Defend Itself against Backdoor Attacks","version":2},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-07T05:20:51.482894Z"},"links":{"citing_paper":"/paper/2506.08336"},"observation_digest":"sha256:a6c2124f1737df0eb177e7ce741f8c3affa8b06f0ae3e57a093f0eacb377e7c6","observation_id":"34682129-c720-45cc-aadc-4afe191daf86","resolution":{"observed_at":"2026-08-07T05:20:52.030055Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:20:52.009807Z","title":null,"venue":null,"work_id":"1c539f95-e716-4df8-8d70-fa46449690b8","year":2024},"citing_paper":{"arxiv_id":"2506.08336","last_updated":"2025-06-11T01:39:01Z","snapshot_observed_at":"2026-08-07T22:32:21.983693Z","submitted_at":"2025-06-10T01:45:56Z","title":"Your Agent Can Defend Itself against Backdoor Attacks","version":2},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-07T05:20:51.487220Z"},"links":{"citing_paper":"/paper/2506.08336"},"observation_digest":"sha256:4b7e0cce8728ca8cdaa36cdfa74a93ded96e8303d870bd51242cfacfcae29d13","observation_id":"2fef6dc1-6742-4c74-95f9-48971ab30437","resolution":{"observed_at":"2026-08-07T05:20:52.014437Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2305.16291","last_updated":"2023-10-19T16:27:03Z","snapshot_observed_at":"2026-08-07T08:29:46.650400Z","submitted_at":"2023-05-25T17:46:38Z","title":"Voyager: An Open-Ended Embodied Agent with Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.16291","snapshot_observed_at":"2026-08-07T05:20:51.492099Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.08336","last_updated":"2025-06-11T01:39:01Z","snapshot_observed_at":"2026-08-07T22:32:21.983693Z","submitted_at":"2025-06-10T01:45:56Z","title":"Your Agent Can Defend Itself against Backdoor Attacks","version":2},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-07T05:20:51.492099Z"},"links":{"cited_paper":"/paper/2305.16291","citing_paper":"/paper/2506.08336"},"observation_digest":"sha256:0d7d49b14b09685441390b84a3da70d189b13625bc031966af6d6a5f3524d8cb","observation_id":"bf91c59a-08d3-46b5-a166-371d6175d971","resolution":{"observed_at":"2026-08-07T05:20:51.492099Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:20:51.498004Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.08336","last_updated":"2025-06-11T01:39:01Z","snapshot_observed_at":"2026-08-07T22:32:21.983693Z","submitted_at":"2025-06-10T01:45:56Z","title":"Your Agent Can Defend Itself against Backdoor Attacks","version":2},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-07T05:20:51.498004Z"},"links":{"citing_paper":"/paper/2506.08336"},"observation_digest":"sha256:6283c31b6dcd63d5fbf7be8056df24599a0c51a2c8d2ded4dfcbcd6c08b7a5fe","observation_id":"c226d49f-ff6a-4a8f-b929-49dd2d7ae2f3","resolution":{"observed_at":"2026-08-07T05:20:51.498004Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.03007","last_updated":"2024-06-05T07:14:28Z","snapshot_observed_at":"2026-07-06T18:25:44.620682Z","submitted_at":"2024-06-05T07:14:28Z","title":"BadAgent: Inserting and Activating Backdoor Attacks in LLM Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.03007","snapshot_observed_at":"2026-08-07T05:20:51.502855Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.08336","last_updated":"2025-06-11T01:39:01Z","snapshot_observed_at":"2026-08-07T22:32:21.983693Z","submitted_at":"2025-06-10T01:45:56Z","title":"Your Agent Can Defend Itself against Backdoor Attacks","version":2},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-07T05:20:51.502855Z"},"links":{"cited_paper":"/paper/2406.03007","citing_paper":"/paper/2506.08336"},"observation_digest":"sha256:85dceb90846fff57c752b1f72d8d1a3ca7fcb3774592b365698dbc3309e09d9f","observation_id":"ae5fd4c0-37c0-4e12-80bf-38cfccaf4151","resolution":{"observed_at":"2026-08-07T05:20:51.502855Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:20:51.507455Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.08336","last_updated":"2025-06-11T01:39:01Z","snapshot_observed_at":"2026-08-07T22:32:21.983693Z","submitted_at":"2025-06-10T01:45:56Z","title":"Your Agent Can Defend Itself against Backdoor Attacks","version":2},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-08-07T05:20:51.507455Z"},"links":{"citing_paper":"/paper/2506.08336"},"observation_digest":"sha256:a53ff7d299e2e927f05a4688290519e2fb9b06a3707d57a08b0f3f7c387d6f27","observation_id":"832668f5-86ba-43ea-9824-d6c78edea72a","resolution":{"observed_at":"2026-08-07T05:20:51.507455Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.07864","last_updated":"2023-09-19T08:29:18Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-09-14T17:12:03Z","title":"The Rise and Potential of Large Language Model Based Agents: A Survey","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.07864","snapshot_observed_at":"2026-08-07T05:20:51.511937Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.08336","last_updated":"2025-06-11T01:39:01Z","snapshot_observed_at":"2026-08-07T22:32:21.983693Z","submitted_at":"2025-06-10T01:45:56Z","title":"Your Agent Can Defend Itself against Backdoor Attacks","version":2},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-08-07T05:20:51.511937Z"},"links":{"cited_paper":"/paper/2309.07864","citing_paper":"/paper/2506.08336"},"observation_digest":"sha256:b9f8d9fd5bd104fe2e0e69bcb3fa80e12f4032ef0e36fdd3fb342c52dbdffc43","observation_id":"52801b94-5167-43d7-96fa-5836fcc3b98e","resolution":{"observed_at":"2026-08-07T05:20:51.511937Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:20:51.976353Z","title":null,"venue":null,"work_id":"458db19c-9533-4b62-8228-a8fca89f3bff","year":2023},"citing_paper":{"arxiv_id":"2506.08336","last_updated":"2025-06-11T01:39:01Z","snapshot_observed_at":"2026-08-07T22:32:21.983693Z","submitted_at":"2025-06-10T01:45:56Z","title":"Your Agent Can Defend Itself against Backdoor Attacks","version":2},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-08-07T05:20:51.517047Z"},"links":{"citing_paper":"/paper/2506.08336"},"observation_digest":"sha256:ca631210a4197e3ddf6c0b52d6afa9a9c55f34d1ea18bfb01321480557e61a90","observation_id":"df9e9c34-7b45-4a19-b9c8-6fdfa56e20dc","resolution":{"observed_at":"2026-08-07T05:20:51.981105Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:20:51.960266Z","title":null,"venue":null,"work_id":"b3a0396f-8412-4867-b98c-f81a7a1f4856","year":2023},"citing_paper":{"arxiv_id":"2506.08336","last_updated":"2025-06-11T01:39:01Z","snapshot_observed_at":"2026-08-07T22:32:21.983693Z","submitted_at":"2025-06-10T01:45:56Z","title":"Your Agent Can Defend Itself against Backdoor Attacks","version":2},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-08-07T05:20:51.521546Z"},"links":{"citing_paper":"/paper/2506.08336"},"observation_digest":"sha256:55bfb1524aff82f2e6a74c869632b1572b21d563af881a7fbe314fed5d0da5db","observation_id":"37ee37ab-782f-4f1e-b9ce-d4816c5b0250","resolution":{"observed_at":"2026-08-07T05:20:51.965612Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.02224","last_updated":"2023-06-04T01:07:20Z","snapshot_observed_at":"2026-08-03T03:58:33.818386Z","submitted_at":"2023-06-04T01:07:20Z","title":"Auto-GPT for Online Decision Making: Benchmarks and Additional Opinions","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.02224","snapshot_observed_at":"2026-08-07T05:20:51.525816Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.08336","last_updated":"2025-06-11T01:39:01Z","snapshot_observed_at":"2026-08-07T22:32:21.983693Z","submitted_at":"2025-06-10T01:45:56Z","title":"Your Agent Can Defend Itself against Backdoor Attacks","version":2},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-08-07T05:20:51.525816Z"},"links":{"cited_paper":"/paper/2306.02224","citing_paper":"/paper/2506.08336"},"observation_digest":"sha256:2595d7f1f40f873426770870739fc788c73fc92a429867ccce81558116c1db79","observation_id":"0b5c57fc-419b-40f5-9140-ca2d5ba4c4d7","resolution":{"observed_at":"2026-08-07T05:20:51.525816Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.11208","last_updated":"2024-10-29T15:32:04Z","snapshot_observed_at":"2026-08-04T19:17:04.690837Z","submitted_at":"2024-02-17T06:48:45Z","title":"Watch Out for Your Agents! Investigating Backdoor Threats to LLM-Based Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.11208","snapshot_observed_at":"2026-08-07T05:20:51.530424Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.08336","last_updated":"2025-06-11T01:39:01Z","snapshot_observed_at":"2026-08-07T22:32:21.983693Z","submitted_at":"2025-06-10T01:45:56Z","title":"Your Agent Can Defend Itself against Backdoor Attacks","version":2},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-08-07T05:20:51.530424Z"},"links":{"cited_paper":"/paper/2402.11208","citing_paper":"/paper/2506.08336"},"observation_digest":"sha256:14047e310ef3558730a67e31185e3861ece3997c3aca8a895f51fa3aaab3dd77","observation_id":"41c05918-8fd1-42f2-8f56-a1613f3a8088","resolution":{"observed_at":"2026-08-07T05:20:51.530424Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:20:51.945086Z","title":null,"venue":null,"work_id":"e1d3666c-7af6-4246-908b-3fa6267b02e2","year":2024},"citing_paper":{"arxiv_id":"2506.08336","last_updated":"2025-06-11T01:39:01Z","snapshot_observed_at":"2026-08-07T22:32:21.983693Z","submitted_at":"2025-06-10T01:45:56Z","title":"Your Agent Can Defend Itself against Backdoor Attacks","version":2},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-08-07T05:20:51.534900Z"},"links":{"citing_paper":"/paper/2506.08336"},"observation_digest":"sha256:7dd0b47d2ba1eb665fffa7dcb3329d80053371847718c381c1131635f1ebe2b8","observation_id":"718fa898-2536-49ab-a14b-c6f66374ed52","resolution":{"observed_at":"2026-08-07T05:20:51.949720Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2110.07831","last_updated":"2021-10-15T03:09:26Z","snapshot_observed_at":"2026-07-06T11:58:08.615915Z","submitted_at":"2021-10-15T03:09:26Z","title":"RAP: Robustness-Aware Perturbations for Defending against Backdoor Attacks on NLP Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2110.07831","snapshot_observed_at":"2026-08-07T05:20:51.539219Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.08336","last_updated":"2025-06-11T01:39:01Z","snapshot_observed_at":"2026-08-07T22:32:21.983693Z","submitted_at":"2025-06-10T01:45:56Z","title":"Your Agent Can Defend Itself against Backdoor Attacks","version":2},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-08-07T05:20:51.539219Z"},"links":{"cited_paper":"/paper/2110.07831","citing_paper":"/paper/2506.08336"},"observation_digest":"sha256:6f22f2eb8f238c051773ecf0b49f911dfd6ebdd7af392c22f9ac4ba2b9390c86","observation_id":"acca5bd7-abbf-4f1d-ae87-a3ac034cccb7","resolution":{"observed_at":"2026-08-07T05:20:51.539219Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1804.07754","last_updated":"2018-04-20T17:58:45Z","snapshot_observed_at":"2026-07-06T06:34:33.774205Z","submitted_at":"2018-04-20T17:58:45Z","title":"Learning Semantic Textual Similarity from Conversations","version":1},"cited_work":{"arxiv_id":"1804.07754","doi":null,"metadata_source":"pith","pith_arxiv_id":"1804.07754","snapshot_observed_at":"2026-08-07T05:20:51.655262Z","title":"Learning Semantic Textual Similarity from Conversations","venue":"cs.CL","work_id":"0a712022-65e3-4594-b5df-9816af4cbb1d","year":2018},"citing_paper":{"arxiv_id":"2506.08336","last_updated":"2025-06-11T01:39:01Z","snapshot_observed_at":"2026-08-07T22:32:21.983693Z","submitted_at":"2025-06-10T01:45:56Z","title":"Your Agent Can Defend Itself against Backdoor Attacks","version":2},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-08-07T05:20:51.544494Z"},"links":{"cited_paper":"/paper/1804.07754","citing_paper":"/paper/2506.08336"},"observation_digest":"sha256:52580e7b1411a52152af7dc6a28d850811a3355af07d1d26b6a201d0e0e32c88","observation_id":"a29784d0-353c-40ec-9880-7aed85b30541","resolution":{"observed_at":"2026-08-07T05:20:51.661769Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.12823","last_updated":"2023-10-22T16:19:16Z","snapshot_observed_at":"2026-08-07T22:31:11.195198Z","submitted_at":"2023-10-19T15:19:53Z","title":"AgentTuning: Enabling Generalized Agent Abilities for LLMs","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.12823","snapshot_observed_at":"2026-08-07T05:20:51.549345Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.08336","last_updated":"2025-06-11T01:39:01Z","snapshot_observed_at":"2026-08-07T22:32:21.983693Z","submitted_at":"2025-06-10T01:45:56Z","title":"Your Agent Can Defend Itself against Backdoor Attacks","version":2},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-08-07T05:20:51.549345Z"},"links":{"cited_paper":"/paper/2310.12823","citing_paper":"/paper/2506.08336"},"observation_digest":"sha256:145115c5d60fb450c8ca9931d3a902f1275f5ad0d0559d85d48b9d599e20e418","observation_id":"7650df87-f3e9-4997-bd04-e53f26ed5df1","resolution":{"observed_at":"2026-08-07T05:20:51.549345Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.02485","last_updated":"2024-02-17T05:27:56Z","snapshot_observed_at":"2026-08-02T22:53:12.613357Z","submitted_at":"2023-07-05T17:59:27Z","title":"Building Cooperative Embodied Agents Modularly with Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.02485","snapshot_observed_at":"2026-08-07T05:20:51.555233Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.08336","last_updated":"2025-06-11T01:39:01Z","snapshot_observed_at":"2026-08-07T22:32:21.983693Z","submitted_at":"2025-06-10T01:45:56Z","title":"Your Agent Can Defend Itself against Backdoor Attacks","version":2},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-08-07T05:20:51.555233Z"},"links":{"cited_paper":"/paper/2307.02485","citing_paper":"/paper/2506.08336"},"observation_digest":"sha256:797493c06cd3b8e78643cd330b11ae1d283e74da506ecdc751edba0b8f6a0e2b","observation_id":"e211d3d4-d8c9-4b98-9e66-5933138feb80","resolution":{"observed_at":"2026-08-07T05:20:51.555233Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1904.09675","last_updated":"2020-02-24T18:59:28Z","snapshot_observed_at":"2026-07-29T15:42:51.774083Z","submitted_at":"2019-04-21T23:08:53Z","title":"BERTScore: Evaluating Text Generation with BERT","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1904.09675","snapshot_observed_at":"2026-08-07T05:20:51.560059Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2506.08336","last_updated":"2025-06-11T01:39:01Z","snapshot_observed_at":"2026-08-07T22:32:21.983693Z","submitted_at":"2025-06-10T01:45:56Z","title":"Your Agent Can Defend Itself against Backdoor Attacks","version":2},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-08-07T05:20:51.560059Z"},"links":{"cited_paper":"/paper/1904.09675","citing_paper":"/paper/2506.08336"},"observation_digest":"sha256:4a5e693d7b414f6f1a0322744632667bf9fcf37dd5b0468677b614e122160eb3","observation_id":"3b9dd95c-b205-48da-a920-42360134f2f9","resolution":{"observed_at":"2026-08-07T05:20:51.560059Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:20:51.564762Z","title":"@esa (Ref","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.08336","last_updated":"2025-06-11T01:39:01Z","snapshot_observed_at":"2026-08-07T22:32:21.983693Z","submitted_at":"2025-06-10T01:45:56Z","title":"Your Agent Can Defend Itself against Backdoor Attacks","version":2},"reference_index":38,"source":"arxiv_source","source_observed_at":"2026-08-07T05:20:51.564762Z"},"links":{"citing_paper":"/paper/2506.08336"},"observation_digest":"sha256:0c0892162acd2aab23fd2f3c0ff12449b6d188fb95765b357f81a8164e214f41","observation_id":"cc47d461-b498-40cb-bae6-0f846a245cf8","resolution":{"observed_at":"2026-08-07T05:20:51.564762Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:20:51.569659Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.08336","last_updated":"2025-06-11T01:39:01Z","snapshot_observed_at":"2026-08-07T22:32:21.983693Z","submitted_at":"2025-06-10T01:45:56Z","title":"Your Agent Can Defend Itself against Backdoor Attacks","version":2},"reference_index":39,"source":"arxiv_source","source_observed_at":"2026-08-07T05:20:51.569659Z"},"links":{"citing_paper":"/paper/2506.08336"},"observation_digest":"sha256:f2079c3b11b95db10851bacd4b5c107e9b93dc25a42d33e97529f46dfbd0f9b7","observation_id":"14cd1a1f-b69b-4428-8175-deb12bf75ca8","resolution":{"observed_at":"2026-08-07T05:20:51.569659Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:20:51.913363Z","title":null,"venue":null,"work_id":"abe4fa49-c6a8-43b8-889a-94dfe67af731","year":2016},"citing_paper":{"arxiv_id":"2506.08336","last_updated":"2025-06-11T01:39:01Z","snapshot_observed_at":"2026-08-07T22:32:21.983693Z","submitted_at":"2025-06-10T01:45:56Z","title":"Your Agent Can Defend Itself against Backdoor Attacks","version":2},"reference_index":40,"source":"arxiv_source","source_observed_at":"2026-08-07T05:20:51.574942Z"},"links":{"citing_paper":"/paper/2506.08336"},"observation_digest":"sha256:1d64f2aa3958d4474d64850d8dc277745c2a4c180a1bd0f5fc054d613d562510","observation_id":"85fc8b22-256d-4710-b717-0d7eb1581b63","resolution":{"observed_at":"2026-08-07T05:20:51.917758Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2506.08336","last_updated":"2025-06-11T01:39:01Z","latest_version":2,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-07T22:32:21.983693Z","submitted_at":"2025-06-10T01:45:56Z","title":"Your Agent Can Defend Itself against Backdoor Attacks"},"reference_resolution":{"displayed":40,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":38,"verified_exact":2,"verified_fuzzy":0},"total_outbound_references":40},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 7 August 2026, this Paper Citation Record lists 40 of 40 outbound references and 3 inbound Pith citation observations for arXiv:2506.08336."}