{"as_of":"2026-08-08T03:40:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:36e58a26f7c2759f9bda63603cd7c830efb3fd7216e5414b0be2170b009b4975","coverage":[{"denominator":169,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":100,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T21:34:45.025473Z","state":"measured"},{"denominator":114,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":114,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":14,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":14,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T04:46:04.507862Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-10T12:15:01.137692Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.23844","snapshot_observed_at":"2026-08-07T04:46:04.507862Z","title":"A survey on autonomy-induced security risks in large model-based agents,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.09656","last_updated":"2025-08-07T08:42:17Z","snapshot_observed_at":"2026-08-07T09:52:29.305428Z","submitted_at":"2025-06-11T12:25:38Z","title":"Multi-level Value Alignment in Agentic AI Systems: Survey and Perspectives","version":2},"reference_index":130,"source":"pdf_text","source_observed_at":"2026-08-07T04:46:04.507862Z"},"links":{"cited_paper":"/paper/2506.23844","citing_paper":"/paper/2506.09656"},"observation_digest":"sha256:7ded5558b6c0e3a0e6d07676b7065c7c0df05ab7dae5d1410bb37142dbbdf441","observation_id":"6d615243-9779-4637-8288-f93623c453cc","resolution":{"observed_at":"2026-08-07T04:46:04.507862Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.23844","snapshot_observed_at":"2026-08-05T16:20:59.375929Z","title":"A survey on autonomy-induced security risks in large model-based agents,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.18725","last_updated":"2025-08-26T06:50:11Z","snapshot_observed_at":"2026-08-06T22:55:46.437867Z","submitted_at":"2025-08-26T06:50:11Z","title":"Toward Edge General Intelligence with Agentic AI and Agentification: Concepts, Technologies, and Future Directions","version":1},"reference_index":84,"source":"pdf_text","source_observed_at":"2026-08-05T16:20:59.375929Z"},"links":{"cited_paper":"/paper/2506.23844","citing_paper":"/paper/2508.18725"},"observation_digest":"sha256:68571199eb8b6229616ba5cbd8c76b3318e3ecd07cc98ae48ce34655ee5417b6","observation_id":"198721d6-9188-4e9d-8c49-5cbfa1f872b3","resolution":{"observed_at":"2026-08-05T16:20:59.375929Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.23844","snapshot_observed_at":"2026-08-03T05:16:36.777650Z","title":"Su, H., Luo, J., Liu, C., Yang, X., Zhang, Y ., Dong, Y ., and Zhu, J","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2602.03012","last_updated":"2026-05-29T09:26:03Z","snapshot_observed_at":"2026-08-03T10:03:43.407282Z","submitted_at":"2026-02-03T02:27:16Z","title":"CVE-Factory: Scaling Expert-Level Agentic Tasks for Code Security Vulnerability","version":3},"reference_index":2025,"source":"pdf_text","source_observed_at":"2026-08-03T05:16:36.777650Z"},"links":{"cited_paper":"/paper/2506.23844","citing_paper":"/paper/2602.03012"},"observation_digest":"sha256:d94a049ceda81c8ff889c04e2cfe47bdaeaff5a84e18b950eeca001c1ef42cb0","observation_id":"76dcc5d5-da65-4bcc-b2a4-18d5d6f85307","resolution":{"observed_at":"2026-08-03T05:16:36.777650Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"cited_work":{"arxiv_id":"2506.23844","doi":"10.48550/arxiv.2506.23844","metadata_source":"arxiv_reference","pith_arxiv_id":"2506.23844","snapshot_observed_at":"2026-07-10T12:15:01.137692Z","title":"arXiv preprint arXiv:2506.23844 , year=","venue":null,"work_id":"3200fe16-11a1-46ba-827b-0ff9f7622fb6","year":2025},"citing_paper":{"arxiv_id":"2605.01970","last_updated":"2026-05-15T06:42:15Z","snapshot_observed_at":"2026-07-06T23:15:07.159340Z","submitted_at":"2026-05-03T17:07:20Z","title":"Trojan Hippo: Weaponizing Agent Memory for Data Exfiltration","version":2},"reference_index":84,"source":"pdf_text","source_observed_at":"2026-05-09T17:13:47.722098Z"},"links":{"cited_paper":"/paper/2506.23844","citing_paper":"/paper/2605.01970"},"observation_digest":"sha256:4ba8ab38406e4198e985a9aa973324f94280d4d68d444a993e00f5bc9543c55f","observation_id":"fa963aa1-030b-4ef8-8c35-0caa6ebf4845","resolution":{"observed_at":"2026-05-09T21:38:30.745446Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"cited_work":{"arxiv_id":"2506.23844","doi":"10.48550/arxiv.2506.23844","metadata_source":"arxiv_reference","pith_arxiv_id":"2506.23844","snapshot_observed_at":"2026-07-10T12:15:01.137692Z","title":"arXiv preprint arXiv:2506.23844 , year=","venue":null,"work_id":"3200fe16-11a1-46ba-827b-0ff9f7622fb6","year":2025},"citing_paper":{"arxiv_id":"2605.01970","last_updated":"2026-05-15T06:42:15Z","snapshot_observed_at":"2026-07-06T23:15:07.159340Z","submitted_at":"2026-05-03T17:07:20Z","title":"Trojan Hippo: Weaponizing Agent Memory for Data Exfiltration","version":3},"reference_index":83,"source":"pdf_text","source_observed_at":"2026-05-19T17:30:22.481943Z"},"links":{"cited_paper":"/paper/2506.23844","citing_paper":"/paper/2605.01970"},"observation_digest":"sha256:2d6d0553354401f0bd6c589a0f353a7666c381c8051bb7cd1999495d5adbb2db","observation_id":"99c944da-b795-4d7a-b5cf-0e7df443db51","resolution":{"observed_at":"2026-05-19T17:32:41.256434Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"cited_work":{"arxiv_id":"2506.23844","doi":"10.48550/arxiv.2506.23844","metadata_source":"arxiv_reference","pith_arxiv_id":"2506.23844","snapshot_observed_at":"2026-07-10T12:15:01.137692Z","title":"arXiv preprint arXiv:2506.23844 , year=","venue":null,"work_id":"3200fe16-11a1-46ba-827b-0ff9f7622fb6","year":2025},"citing_paper":{"arxiv_id":"2605.17830","last_updated":"2026-05-18T04:06:34Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2026-05-18T04:06:34Z","title":"Remembering More, Risking More: Longitudinal Safety Risks in Memory-Equipped LLM Agents","version":1},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-05-20T10:51:19.555985Z"},"links":{"cited_paper":"/paper/2506.23844","citing_paper":"/paper/2605.17830"},"observation_digest":"sha256:294460b685f4c5f3d33b44c4b5a127b6ee4e41bdc872cf0485d40d885a60fb83","observation_id":"69c97b4e-13d7-4f7e-a6fc-2838e9f710b9","resolution":{"observed_at":"2026-05-20T10:53:13.292678Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"cited_work":{"arxiv_id":"2506.23844","doi":"10.48550/arxiv.2506.23844","metadata_source":"arxiv_reference","pith_arxiv_id":"2506.23844","snapshot_observed_at":"2026-07-10T12:15:01.137692Z","title":"arXiv preprint arXiv:2506.23844 , year=","venue":null,"work_id":"3200fe16-11a1-46ba-827b-0ff9f7622fb6","year":2025},"citing_paper":{"arxiv_id":"2605.22643","last_updated":"2026-05-22T14:53:30Z","snapshot_observed_at":"2026-07-06T23:32:59.663926Z","submitted_at":"2026-05-21T15:50:18Z","title":"Boiling the Frog: A Multi-Turn Benchmark for Agentic Safety","version":1},"reference_index":79,"source":"pdf_text","source_observed_at":"2026-05-22T05:50:28.114140Z"},"links":{"cited_paper":"/paper/2506.23844","citing_paper":"/paper/2605.22643"},"observation_digest":"sha256:5f033946e842747217c029f94abe75ddf8dda4ada93694a3bb2020eca8f129b9","observation_id":"cfccb24e-48fd-4179-881f-b2f6be633756","resolution":{"observed_at":"2026-05-22T05:51:07.870483Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"cited_work":{"arxiv_id":"2506.23844","doi":"10.48550/arxiv.2506.23844","metadata_source":"arxiv_reference","pith_arxiv_id":"2506.23844","snapshot_observed_at":"2026-07-10T12:15:01.137692Z","title":"arXiv preprint arXiv:2506.23844 , year=","venue":null,"work_id":"3200fe16-11a1-46ba-827b-0ff9f7622fb6","year":2025},"citing_paper":{"arxiv_id":"2605.22643","last_updated":"2026-05-22T14:53:30Z","snapshot_observed_at":"2026-07-06T23:32:59.663926Z","submitted_at":"2026-05-21T15:50:18Z","title":"Boiling the Frog: A Multi-Turn Benchmark for Agentic Safety","version":2},"reference_index":79,"source":"pdf_text","source_observed_at":"2026-05-25T06:05:27.736494Z"},"links":{"cited_paper":"/paper/2506.23844","citing_paper":"/paper/2605.22643"},"observation_digest":"sha256:53827ed328e4aa55d9347f402f03ae1ea9d0b611b2296fb55e8c59636d69ad45","observation_id":"006ca104-d0c7-4469-9126-3673c4dd0f86","resolution":{"observed_at":"2026-05-25T06:06:42.923114Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"cited_work":{"arxiv_id":"2506.23844","doi":"10.48550/arxiv.2506.23844","metadata_source":"arxiv_reference","pith_arxiv_id":"2506.23844","snapshot_observed_at":"2026-07-10T12:15:01.137692Z","title":"arXiv preprint arXiv:2506.23844 , year=","venue":null,"work_id":"3200fe16-11a1-46ba-827b-0ff9f7622fb6","year":2025},"citing_paper":{"arxiv_id":"2605.23330","last_updated":"2026-05-22T07:45:04Z","snapshot_observed_at":"2026-08-02T05:47:41.731065Z","submitted_at":"2026-05-22T07:45:04Z","title":"Security, Privacy, and Ethical Risks in OpenClaw","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-05-25T04:25:49.102385Z"},"links":{"cited_paper":"/paper/2506.23844","citing_paper":"/paper/2605.23330"},"observation_digest":"sha256:a0e19321547506b82e81fa52b41a4fecfbea918fabe0a804940e4ace993798e2","observation_id":"a5112819-29d0-4716-a6ba-1b1731cd6ac5","resolution":{"observed_at":"2026-05-25T04:26:37.732685Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"cited_work":{"arxiv_id":"2506.23844","doi":"10.48550/arxiv.2506.23844","metadata_source":"arxiv_reference","pith_arxiv_id":"2506.23844","snapshot_observed_at":"2026-07-10T12:15:01.137692Z","title":"arXiv preprint arXiv:2506.23844 , year=","venue":null,"work_id":"3200fe16-11a1-46ba-827b-0ff9f7622fb6","year":2025},"citing_paper":{"arxiv_id":"2606.10749","last_updated":"2026-06-09T12:01:07Z","snapshot_observed_at":"2026-07-31T21:35:18.696472Z","submitted_at":"2026-06-09T12:01:07Z","title":"Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation","version":1},"reference_index":163,"source":"pdf_text","source_observed_at":"2026-06-27T12:55:22.831264Z"},"links":{"cited_paper":"/paper/2506.23844","citing_paper":"/paper/2606.10749"},"observation_digest":"sha256:2d795e5a8050faa6fad1627e1b1cee1fe226d9d34c89b00e91f920244c162b7e","observation_id":"0f516829-59bb-4286-b29b-ed24ae91203b","resolution":{"observed_at":"2026-06-27T13:20:56.839599Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"cited_work":{"arxiv_id":"2506.23844","doi":"10.48550/arxiv.2506.23844","metadata_source":"arxiv_reference","pith_arxiv_id":"2506.23844","snapshot_observed_at":"2026-07-10T12:15:01.137692Z","title":"arXiv preprint arXiv:2506.23844 , year=","venue":null,"work_id":"3200fe16-11a1-46ba-827b-0ff9f7622fb6","year":2025},"citing_paper":{"arxiv_id":"2607.01236","last_updated":"2026-05-01T03:16:35Z","snapshot_observed_at":"2026-07-07T00:06:49.412663Z","submitted_at":"2026-05-01T03:16:35Z","title":"Safeguarding LLM Agents from Misalignment through Provenance Analysis","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-07-04T01:26:25.858521Z"},"links":{"cited_paper":"/paper/2506.23844","citing_paper":"/paper/2607.01236"},"observation_digest":"sha256:23c142f5d0e17969030dcb10bc5e399bdf1d06b521ee5a88b381dda55591490d","observation_id":"7c9986a8-daa3-41cb-ad0a-a8ae03215b34","resolution":{"observed_at":"2026-07-04T01:29:22.014001Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.23844","snapshot_observed_at":"2026-08-02T04:49:08.830507Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.13594","last_updated":"2026-07-15T08:38:16Z","snapshot_observed_at":"2026-08-03T04:36:41.120672Z","submitted_at":"2026-07-15T08:38:16Z","title":"SAFETY SENTRY: Context-Aware Human Intervention via EXECUTE-ASK-REFUSE Routing","version":1},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-02T04:49:08.830507Z"},"links":{"cited_paper":"/paper/2506.23844","citing_paper":"/paper/2607.13594"},"observation_digest":"sha256:100f2d7ef7ec1d3e8583ee5125d92176436b4f1b6ed1c2ca2753b58ea11a94dd","observation_id":"230e8562-811b-4a14-9e38-05fd0b5e3836","resolution":{"observed_at":"2026-08-02T04:49:08.830507Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.23844","snapshot_observed_at":"2026-08-02T15:17:29.469563Z","title":"arXiv preprint arXiv:2506.23844 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.16199","last_updated":"2026-04-30T07:22:06Z","snapshot_observed_at":"2026-08-06T11:01:04.860071Z","submitted_at":"2026-04-30T07:22:06Z","title":"PlanFlip: Attacking Multi-Agent LLM Systems via Planning-Phase Prompt Injection","version":1},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-08-02T15:17:29.469563Z"},"links":{"cited_paper":"/paper/2506.23844","citing_paper":"/paper/2607.16199"},"observation_digest":"sha256:834c40c90b26360bd1b0d2665c49fc81a0733b97385c140f8a3567a7b3153967","observation_id":"be1d85a4-5975-489e-9f0b-6517f3b994b3","resolution":{"observed_at":"2026-08-02T15:17:29.469563Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.23844","snapshot_observed_at":"2026-08-06T20:27:08.543275Z","title":"A survey on autonomy-induced security risks in large model-based agents,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.04626","last_updated":"2026-08-05T09:32:35Z","snapshot_observed_at":"2026-08-08T03:11:30.293116Z","submitted_at":"2026-08-05T09:32:35Z","title":"Blockchain Empowered Trustworthy Agent Networks: Foundations, Taxonomy, and Future Directions","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-06T20:27:08.543275Z"},"links":{"cited_paper":"/paper/2506.23844","citing_paper":"/paper/2608.04626"},"observation_digest":"sha256:100004723bccc7986348d2398f6ad16c503d2cce85cb1b1fce4a74e8a373d708","observation_id":"ec008fe7-5924-4d3d-8983-ec8e088c102e","resolution":{"observed_at":"2026-08-06T20:27:08.543275Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2506.23844/citation-record","integrity":"/paper/2506.23844/integrity","json":"/paper/2506.23844/citation-record.json","paper":"/paper/2506.23844"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:38.557275Z","title":"AI agents vs. agentic AI: A conceptual taxonomy, applications and challenge,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:38.557275Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:65426323eb6bfec7ed396bb004e2806f13078dff994e87b340298535745ea0ac","observation_id":"6eeb3704-47b8-4281-811a-c9d9d2c7e51f","resolution":{"observed_at":"2026-08-06T21:34:38.557275Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.07864","last_updated":"2023-09-19T08:29:18Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-09-14T17:12:03Z","title":"The Rise and Potential of Large Language Model Based Agents: A Survey","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.07864","snapshot_observed_at":"2026-08-06T21:34:38.623175Z","title":"The rise and potential of large language model based agents: A survey,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:38.623175Z"},"links":{"cited_paper":"/paper/2309.07864","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:e649f983db79a57301417eaec544261b00284fe76f0aa37639ce1bdc5b57d138","observation_id":"2e603862-59e6-43c2-aebd-d2e39fc77603","resolution":{"observed_at":"2026-08-06T21:34:38.623175Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2108.07258","last_updated":"2022-07-12T23:45:14Z","snapshot_observed_at":"2026-08-02T09:20:40.804790Z","submitted_at":"2021-08-16T17:50:08Z","title":"On the Opportunities and Risks of Foundation Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2108.07258","snapshot_observed_at":"2026-08-06T21:34:38.701289Z","title":"On the opportunities and risks of foundation models,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:38.701289Z"},"links":{"cited_paper":"/paper/2108.07258","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:54d3cebc2a87e9658c345d2bc3e562fdca8f2787b5c1d7a2139261b0a20f753d","observation_id":"e834dbcd-986a-4867-b7e2-0ed5f569c16a","resolution":{"observed_at":"2026-08-06T21:34:38.701289Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2303.08774","last_updated":"2024-03-04T06:01:33Z","snapshot_observed_at":"2026-08-07T07:30:12.213965Z","submitted_at":"2023-03-15T17:15:04Z","title":"GPT-4 Technical Report","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.08774","snapshot_observed_at":"2026-08-06T21:34:38.780461Z","title":"GPT-4 technical report,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:38.780461Z"},"links":{"cited_paper":"/paper/2303.08774","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:9158c0716cd523b884c06e04e48029f2673ff1867877dad5a2ea208f47f9a802","observation_id":"2e6f2507-0caa-4342-8004-93f63fe9c509","resolution":{"observed_at":"2026-08-06T21:34:38.780461Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.21783","last_updated":"2024-11-23T23:27:33Z","snapshot_observed_at":"2026-07-06T18:55:11.576666Z","submitted_at":"2024-07-31T17:54:27Z","title":"The Llama 3 Herd of Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.21783","snapshot_observed_at":"2026-08-06T21:34:38.849175Z","title":"The llama 3 herd of models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:38.849175Z"},"links":{"cited_paper":"/paper/2407.21783","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:3c893428a65fa63b732fa24e2c738873d8b0293806da3381b2ca45d5b1f45ea0","observation_id":"abb029f8-8b2b-4e05-bed7-a8c89db01836","resolution":{"observed_at":"2026-08-06T21:34:38.849175Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:38.925865Z","title":"React: Synergizing reasoning and acting in language models,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:38.925865Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:9455bc55ab1126d1d556c16f09b8b2c5cb504da67ed85b2cbd2afe01691ce802","observation_id":"e7883aee-4a51-42f8-8012-518524869186","resolution":{"observed_at":"2026-08-06T21:34:38.925865Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:39.006117Z","title":"Tool- former: Language models can teach themselves to use tools,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:39.006117Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:2c93a2b2e6970c26137076baa729698fac2d8bbd8d8c96dd8f4f8c5bf74b3397","observation_id":"dad2ead9-5940-461e-a1d2-38722464a5ce","resolution":{"observed_at":"2026-08-06T21:34:39.006117Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2112.09332","last_updated":"2022-06-01T19:08:11Z","snapshot_observed_at":"2026-08-07T17:14:39.278754Z","submitted_at":"2021-12-17T05:43:43Z","title":"WebGPT: Browser-assisted question-answering with human feedback","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2112.09332","snapshot_observed_at":"2026-08-06T21:34:39.093898Z","title":"We- bgpt: Browser-assisted question-answering with human feed- back,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:39.093898Z"},"links":{"cited_paper":"/paper/2112.09332","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:91e619c1a01f4ee71a520e6f56f3ac32f2295a7322bbe848e516c9227a7b0e45","observation_id":"ecb99e3d-37b8-4420-b4ff-5a0cc0ce9e85","resolution":{"observed_at":"2026-08-06T21:34:39.093898Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.16291","last_updated":"2023-10-19T16:27:03Z","snapshot_observed_at":"2026-08-07T08:29:46.650400Z","submitted_at":"2023-05-25T17:46:38Z","title":"Voyager: An Open-Ended Embodied Agent with Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.16291","snapshot_observed_at":"2026-08-06T21:34:39.161124Z","title":"Voyager: An open-ended embodied agent with large language models,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:39.161124Z"},"links":{"cited_paper":"/paper/2305.16291","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:931038bbf6a0a9434f830fd00c9eec3156ea8d1889d2048ab2dcef05f27a8553","observation_id":"27832121-fb5b-4432-a2bd-475c1b4f1055","resolution":{"observed_at":"2026-08-06T21:34:39.161124Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2306.02224","last_updated":"2023-06-04T01:07:20Z","snapshot_observed_at":"2026-08-03T03:58:33.818386Z","submitted_at":"2023-06-04T01:07:20Z","title":"Auto-GPT for Online Decision Making: Benchmarks and Additional Opinions","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.02224","snapshot_observed_at":"2026-08-06T21:34:39.227221Z","title":"Auto-GPT for online decision making: Benchmarks and additional opinions,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:39.227221Z"},"links":{"cited_paper":"/paper/2306.02224","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:e9ef684ccbc310b89b2d25c2510593e6e13fb713efe6da2eba1de32a727bcc29","observation_id":"087a670e-3cec-4945-b4f7-792fb174b780","resolution":{"observed_at":"2026-08-06T21:34:39.227221Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.08689","last_updated":"2024-12-17T21:58:19Z","snapshot_observed_at":"2026-08-06T15:16:52.542703Z","submitted_at":"2024-06-12T23:16:45Z","title":"Security of AI Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.08689","snapshot_observed_at":"2026-08-06T21:34:39.298616Z","title":"Security of AI agents,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:39.298616Z"},"links":{"cited_paper":"/paper/2406.08689","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:c162bd3dfe0d8712fb4e70837e7e607138c7a0d74e90d9485b34a2feaa0d2b03","observation_id":"f14cd851-dca3-4ec3-b21e-3f9e191860d3","resolution":{"observed_at":"2026-08-06T21:34:39.298616Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2308.08155","last_updated":"2023-10-03T20:47:10Z","snapshot_observed_at":"2026-07-31T19:03:03.494918Z","submitted_at":"2023-08-16T05:57:52Z","title":"AutoGen: Enabling Next-Gen LLM Applications via Multi-Agent Conversation","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.08155","snapshot_observed_at":"2026-08-06T21:34:39.369708Z","title":"Autogen: Enabling next-gen llm applications via multi-agent conversation,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:39.369708Z"},"links":{"cited_paper":"/paper/2308.08155","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:95c8640d84f78fcb24e8863b543ce9d38134bc023babd5aef5b7dc23cb54001a","observation_id":"1c747047-170c-4dc4-bad8-2a627d409aaf","resolution":{"observed_at":"2026-08-06T21:34:39.369708Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:39.459312Z","title":"Russell and P","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:39.459312Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:43a95c201601d78b1aa0bda36521dbe20ddccd8ca8e6a00b43b570ba61439584","observation_id":"06d94858-2182-40a4-9cce-105f64cb65f9","resolution":{"observed_at":"2026-08-06T21:34:39.459312Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:39.538544Z","title":"A comprehensive review of autonomous agents powered by large language models,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:39.538544Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:b11fa7774ce3fb0a688cdd89d68669ca16472fef4d4dddc92f480c4fc7af8792","observation_id":"fd34a26c-09cb-4949-8b39-11ee4bd26c32","resolution":{"observed_at":"2026-08-06T21:34:39.538544Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2308.11432","last_updated":"2025-03-02T04:04:03Z","snapshot_observed_at":"2026-08-02T07:33:16.089197Z","submitted_at":"2023-08-22T13:30:37Z","title":"A Survey on Large Language Model based Autonomous Agents","version":7},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.11432","snapshot_observed_at":"2026-08-06T21:34:39.594616Z","title":"A survey on large language model based autonomous agents,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:39.594616Z"},"links":{"cited_paper":"/paper/2308.11432","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:8c6adc1d5a74abfd78356a5983522918a7d9ec97ce1d40dba9b2ae3db6e94423","observation_id":"91404c7b-0159-4abd-88b8-c48212744891","resolution":{"observed_at":"2026-08-06T21:34:39.594616Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:39.658799Z","title":"Large language model agent: A survey on methodology, applications and challenges,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:39.658799Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:2adfc300f88ab4579083a8a963550e1f5a8be0a0fa96efc7d506445dac659398","observation_id":"5b8b7097-6e55-43f9-b178-8404e3c809b6","resolution":{"observed_at":"2026-08-06T21:34:39.658799Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:39.828186Z","title":"Managing Extreme AI Risks Amid Rapid Progress,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:39.828186Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:2cff83f1938afeeac253d2885b2650d957c9ce7a0f0f8f6179ab23396bafafe8","observation_id":"2d4590b4-5384-4a3f-a762-c947903a5961","resolution":{"observed_at":"2026-08-06T21:34:39.828186Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:39.911481Z","title":"Intelligence explosion: Evi- dence and import,","venue":null,"work_id":null,"year":2012},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:39.911481Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:e81caa11ab51887453a4519632c73409d0f81a3c3c9f16b4a0a99a351eff3fc7","observation_id":"00255d8c-58e8-4a13-a7af-e012feafece5","resolution":{"observed_at":"2026-08-06T21:34:39.911481Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:39.977939Z","title":"The basic ai drives,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:39.977939Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:9323b3baf46c82f3c15de6d5bb5c40675b8e3e4f560db507e76fe546865021f7","observation_id":"0f759ec0-29d6-49a6-92ac-2de28f35b40b","resolution":{"observed_at":"2026-08-06T21:34:39.977939Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.15657","last_updated":"2025-02-24T18:14:15Z","snapshot_observed_at":"2026-08-07T17:57:49.114113Z","submitted_at":"2025-02-21T18:28:36Z","title":"Superintelligent Agents Pose Catastrophic Risks: Can Scientist AI Offer a Safer Path?","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.15657","snapshot_observed_at":"2026-08-06T21:34:40.081690Z","title":"Superintelligent Agents Pose Catastrophic Risks: Can Scientist AI Offer a Safer Path?","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:40.081690Z"},"links":{"cited_paper":"/paper/2502.15657","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:824eb61cc72f484f469f081aea0f89f8998d2b6f830c772a988a9c7904ea1cda","observation_id":"6e4f2dc1-ae3a-4d51-819b-a562338971c1","resolution":{"observed_at":"2026-08-06T21:34:40.081690Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.05282","last_updated":"2025-04-09T11:34:12Z","snapshot_observed_at":"2026-08-03T19:50:55.239079Z","submitted_at":"2024-11-05T15:47:23Z","title":"International Scientific Report on the Safety of Advanced AI (Interim Report)","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.05282","snapshot_observed_at":"2026-08-06T21:34:40.175733Z","title":"International Scientific Report on the Safety of Advanced AI: Interim Report,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:40.175733Z"},"links":{"cited_paper":"/paper/2412.05282","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:3e164aeda8750cc0e6397d24bb4c3b0fedeefaac971a5840c0017da17c56ed35","observation_id":"03136766-48f2-497b-b624-74be998cbbde","resolution":{"observed_at":"2026-08-06T21:34:40.175733Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:40.262576Z","title":"Human-artificial in- teraction in the age of agentic ai: a system-theoretical approach,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:40.262576Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:07ba56ec57f23264c3a3d45abcfc55287f0e658e7249656928a86363ff4c7a07","observation_id":"8b8cbb28-9cb1-4e77-be1a-cf6550e816bd","resolution":{"observed_at":"2026-08-06T21:34:40.262576Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:40.353642Z","title":"Agent foundations for aligning machine intelligence with human interests: a technical research agenda,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:40.353642Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:c484ed4b46bb87b6a4b55903277a8fe37c4b1252552295861ec523a66c999dc6","observation_id":"4f37e41e-8222-40f6-b40a-584f6b3b09c6","resolution":{"observed_at":"2026-08-06T21:34:40.353642Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2302.01560","last_updated":"2024-07-08T05:56:47Z","snapshot_observed_at":"2026-08-02T14:50:04.461434Z","submitted_at":"2023-02-03T06:06:27Z","title":"Describe, Explain, Plan and Select: Interactive Planning with Large Language Models Enables Open-World Multi-Task Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2302.01560","snapshot_observed_at":"2026-08-06T21:34:40.436061Z","title":"Describe, explain, plan and select: Interactive planning with large language models enables open-world multi-task agents,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:40.436061Z"},"links":{"cited_paper":"/paper/2302.01560","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:68635935d590a04fb136a650083cfa93e481978fa94c670524e4e5fa5fa278bd","observation_id":"5f4ecb32-0cc7-4968-ba6b-2d35d5ec0ff1","resolution":{"observed_at":"2026-08-06T21:34:40.436061Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:40.522064Z","title":"AI agent security: Emerging threats and defense paradigms,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:40.522064Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:695e4be739f22b4268329260bcc38a40bc6d71f0da501dca984ba35c71671309","observation_id":"64d71958-ee2e-4f26-b1bb-ca5535f760d4","resolution":{"observed_at":"2026-08-06T21:34:40.522064Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:40.589837Z","title":"AdvLM: Visual adversarial attacks on autonomous driving vision-language models,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:40.589837Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:c0811960a13a273307fae8fe10ac8f8a0032403bd494a0915d5e96fac5eb12d6","observation_id":"1c882dd1-6f23-471b-836c-71330cbf59dd","resolution":{"observed_at":"2026-08-06T21:34:40.589837Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.02644","last_updated":"2025-05-30T03:50:33Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-10-03T16:30:47Z","title":"Agent Security Bench (ASB): Formalizing and Benchmarking Attacks and Defenses in LLM-based Agents","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.02644","snapshot_observed_at":"2026-08-06T21:34:40.687619Z","title":"Agent Security Bench (ASB): Formalizing and benchmarking attacks and defenses in LLM-based agents,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:40.687619Z"},"links":{"cited_paper":"/paper/2410.02644","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:0d3b5d3e93295421a02ee259f5014f85c69f83cf6bac633fc6acedade7a80813","observation_id":"8674ac8d-2cdd-43ec-b332-a80abb8dfd35","resolution":{"observed_at":"2026-08-06T21:34:40.687619Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:40.745087Z","title":"ASB: A security bench- mark for LLM-based autonomous agents,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:40.745087Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:b57228e90b7295ab9a6f4c168999da1020d14990145fafc7a8e5a30474ad3b77","observation_id":"2272082c-a451-4bf2-ae4a-16ba984047d5","resolution":{"observed_at":"2026-08-06T21:34:40.745087Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.20859","last_updated":"2024-07-30T14:35:31Z","snapshot_observed_at":"2026-07-06T18:53:57.980865Z","submitted_at":"2024-07-30T14:35:31Z","title":"Breaking Agents: Compromising Autonomous LLM Agents Through Malfunction Amplification","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.20859","snapshot_observed_at":"2026-08-06T21:34:40.846006Z","title":"Breaking agents: Compromising autonomous LLM agents through malfunction amplification,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:40.846006Z"},"links":{"cited_paper":"/paper/2407.20859","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:6aa8ffcf0d1df2eac5589380a14ecccf9608f243571aa2d56ffed407b38048d6","observation_id":"38da46af-33d6-4c90-9f1c-191963725db3","resolution":{"observed_at":"2026-08-06T21:34:40.846006Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:40.920603Z","title":"TrustAgent: Towards safe and trustworthy LLM-based agents,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:40.920603Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:be2f09f72382dbaa5c2643e8b3bce4ccec9d37151839acc7d8587a09ff7d7111","observation_id":"32d3bc86-65ec-468a-9044-f6e34df00996","resolution":{"observed_at":"2026-08-06T21:34:40.920603Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.09648","last_updated":"2025-03-12T08:42:05Z","snapshot_observed_at":"2026-08-07T17:10:45.463485Z","submitted_at":"2025-03-12T08:42:05Z","title":"A Survey on Trustworthy LLM Agents: Threats and Countermeasures","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.09648","snapshot_observed_at":"2026-08-06T21:34:40.994120Z","title":"A survey on trustwor- thy llm agents: Threats and countermeasures,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:40.994120Z"},"links":{"cited_paper":"/paper/2503.09648","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:b54f7a6e16240ce5c0984feb1ea9f423b9f1482165a75e67c36a8a6d27107792","observation_id":"428af265-4750-4626-988a-3b99fc665b03","resolution":{"observed_at":"2026-08-06T21:34:40.994120Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.08586","last_updated":"2025-02-12T17:19:36Z","snapshot_observed_at":"2026-08-07T02:35:55.161197Z","submitted_at":"2025-02-12T17:19:36Z","title":"Commercial LLM Agents Are Already Vulnerable to Simple Yet Dangerous Attacks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.08586","snapshot_observed_at":"2026-08-06T21:34:41.058806Z","title":"Commercial llm agents are already vulnerable to simple yet dangerous attacks,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:41.058806Z"},"links":{"cited_paper":"/paper/2502.08586","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:b4bcfd89ed341c878597c2faed2d4a7f8552dd3dc173ede35bb25c43f789be0e","observation_id":"26006061-4145-4732-9dd9-8613a9c4af73","resolution":{"observed_at":"2026-08-06T21:34:41.058806Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.11281","last_updated":"2025-04-15T15:21:09Z","snapshot_observed_at":"2026-08-07T16:02:08.308014Z","submitted_at":"2025-04-15T15:21:09Z","title":"The Obvious Invisible Threat: LLM-Powered GUI Agents' Vulnerability to Fine-Print Injections","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.11281","snapshot_observed_at":"2026-08-06T21:34:41.144903Z","title":"The obvious invisible threat: Llm-powered gui agents’ vulnerability to fine-print injections,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:41.144903Z"},"links":{"cited_paper":"/paper/2504.11281","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:685ff412208ce1b0730260806b2f6b77c1a4ae5e6c93e3f7b3cd1f55db9a5b4f","observation_id":"22d115e0-8aca-4c8c-bb73-4c8cc98bfe99","resolution":{"observed_at":"2026-08-06T21:34:41.144903Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.19956","last_updated":"2025-05-02T18:42:42Z","snapshot_observed_at":"2026-08-07T15:58:32.319366Z","submitted_at":"2025-04-28T16:29:24Z","title":"Securing Agentic AI: A Comprehensive Threat Model and Mitigation Framework for Generative AI Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.19956","snapshot_observed_at":"2026-08-06T21:34:41.202535Z","title":"Securing agentic ai: A compre- hensive threat model and mitigation framework for generative ai agents,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:41.202535Z"},"links":{"cited_paper":"/paper/2504.19956","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:a8aa6a6a404a249a034eab75816f05c26101e7d478e165103da913fb1a79784a","observation_id":"81654916-8d80-4015-9ae5-5f06c436e780","resolution":{"observed_at":"2026-08-06T21:34:41.202535Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.03428","last_updated":"2024-01-07T09:08:24Z","snapshot_observed_at":"2026-07-06T17:12:26.471069Z","submitted_at":"2024-01-07T09:08:24Z","title":"Exploring Large Language Model based Intelligent Agents: Definitions, Methods, and Prospects","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.03428","snapshot_observed_at":"2026-08-06T21:34:41.287590Z","title":"Exploring large language model based intelligent agents: Definitions, methods, and prospects,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:41.287590Z"},"links":{"cited_paper":"/paper/2401.03428","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:7829c93845816817eb597be78bada4a7ddee0c215dad19354af6acc49797c06c","observation_id":"8a2d8925-c878-4c34-add3-807a6e124bd9","resolution":{"observed_at":"2026-08-06T21:34:41.287590Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.01616","last_updated":"2025-06-02T12:56:27Z","snapshot_observed_at":"2026-08-07T14:38:41.358384Z","submitted_at":"2025-06-02T12:56:27Z","title":"MLA-Trust: Benchmarking Trustworthiness of Multimodal LLM Agents in GUI Environments","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.01616","snapshot_observed_at":"2026-08-06T21:34:41.371201Z","title":"Mla-trust: Benchmarking trustworthiness of multimodal llm agents in gui environments,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:41.371201Z"},"links":{"cited_paper":"/paper/2506.01616","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:9738c0c720cb17cc37bedf6275aea16e1f60bce278297c582b9ea534287f082f","observation_id":"264fee2f-c180-46c9-9f0c-de7b6b451ea7","resolution":{"observed_at":"2026-08-06T21:34:41.371201Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.17815","last_updated":"2024-05-08T17:25:29Z","snapshot_observed_at":"2026-07-06T17:51:24.261505Z","submitted_at":"2024-03-26T15:52:51Z","title":"Ultrafast Heating Induced Suppression of $d$-band Dominance in the Electronic Excitation Spectrum of Cuprum","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.17815","snapshot_observed_at":"2026-08-06T21:34:41.417648Z","title":"Alignment challenges in autonomous language agents,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:41.417648Z"},"links":{"cited_paper":"/paper/2403.17815","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:c5a5218daf981afb66621d36e9751ebefbb35a6526faf29cd0d4078607613597","observation_id":"f3712925-f4d9-409d-bac9-bcbdba263b5d","resolution":{"observed_at":"2026-08-06T21:34:41.417648Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.02544","last_updated":"2025-09-05T09:21:10Z","snapshot_observed_at":"2026-08-07T14:37:21.533706Z","submitted_at":"2024-08-05T15:16:22Z","title":"Caution for the Environment: Multimodal LLM Agents are Susceptible to Environmental Distractions","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.02544","snapshot_observed_at":"2026-08-06T21:34:41.494159Z","title":"Caution for the environment: Multimodal agents are susceptible to environmental distractions,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:41.494159Z"},"links":{"cited_paper":"/paper/2408.02544","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:aab1a43a701fe9f0ae2dd196af161ed289c9211b6216a0d01d2c8bbec679d4b0","observation_id":"909901f2-88d7-4faf-95bb-c12875a4b8e7","resolution":{"observed_at":"2026-08-06T21:34:41.494159Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.13352","last_updated":"2024-11-24T22:04:23Z","snapshot_observed_at":"2026-07-06T18:33:32.806635Z","submitted_at":"2024-06-19T08:55:56Z","title":"AgentDojo: A Dynamic Environment to Evaluate Prompt Injection Attacks and Defenses for LLM Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.13352","snapshot_observed_at":"2026-08-06T21:34:41.548239Z","title":"AgentDojo: A dynamic environment to evaluate prompt injection attacks and defenses for LLM agents,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:41.548239Z"},"links":{"cited_paper":"/paper/2406.13352","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:bafdb3ade33cac8ea965085121f2ccf60c8100a830072c7d5e27d993b90ef5c6","observation_id":"69267f17-4138-4585-856b-e550a0694b7c","resolution":{"observed_at":"2026-08-06T21:34:41.548239Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.10807","last_updated":"2025-06-12T10:17:02Z","snapshot_observed_at":"2026-07-06T20:07:01.648579Z","submitted_at":"2024-12-14T12:11:26Z","title":"Towards Action Hijacking of Large Language Model-based Agent","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.10807","snapshot_observed_at":"2026-08-06T21:34:41.624343Z","title":"Towards action hijacking of large language model-based agent,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:41.624343Z"},"links":{"cited_paper":"/paper/2412.10807","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:5b07d6e562d706ace5901ba3efb222e65dbe1b6433baa030e0e31d2038cd214b","observation_id":"a7f02b92-2c31-43f7-afec-5de2bedf923e","resolution":{"observed_at":"2026-08-06T21:34:41.624343Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:41.684835Z","title":"AgentPoison: Red-teaming LLM agents via poisoning memory or knowledge bases,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:41.684835Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:3f4ae8ec800d2d9b79dbdcf5e3b756bf0006ea200509bdf0d9fc66c85fa56c75","observation_id":"4c8c80be-8613-4fde-9bec-2ca2ac4bac74","resolution":{"observed_at":"2026-08-06T21:34:41.684835Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.08026","last_updated":"2025-07-28T00:39:17Z","snapshot_observed_at":"2026-08-07T17:14:26.196304Z","submitted_at":"2025-03-11T04:15:52Z","title":"In Prospect and Retrospect: Reflective Memory Management for Long-term Personalized Dialogue Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.08026","snapshot_observed_at":"2026-08-06T21:34:41.770109Z","title":"In prospect and retrospect: Reflective memory management for long-term personalized dialogue agents,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:41.770109Z"},"links":{"cited_paper":"/paper/2503.08026","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:a5496dfd582a56215b09d261906f6f4f929e3fd3ba283b6fbf3d6d06af2530e6","observation_id":"9a2eae23-549a-430d-b7df-d6d9e4fe4acd","resolution":{"observed_at":"2026-08-06T21:34:41.770109Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.08197","last_updated":"2025-02-26T03:24:58Z","snapshot_observed_at":"2026-07-06T19:31:23.072307Z","submitted_at":"2024-10-10T17:58:44Z","title":"From Exploration to Mastery: Enabling LLMs to Master Tools via Self-Driven Interactions","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.08197","snapshot_observed_at":"2026-08-06T21:34:41.861450Z","title":"From exploration to mastery: Enabling LLMs to master tools via self-driven interac- tions,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:41.861450Z"},"links":{"cited_paper":"/paper/2410.08197","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:306f31e94da5bfc507fab732b68232a5cf08a5cae3814eb6b06a84daa1f8bc7b","observation_id":"aec03e9e-5784-4527-b871-ad6e804718e9","resolution":{"observed_at":"2026-08-06T21:34:41.861450Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.10174","last_updated":"2025-02-14T14:09:43Z","snapshot_observed_at":"2026-08-07T19:04:21.250218Z","submitted_at":"2025-02-14T14:09:43Z","title":"Technical Risks of (Lethal) Autonomous Weapons Systems","version":1},"cited_work":{"arxiv_id":"2502.10174","doi":null,"metadata_source":"pith","pith_arxiv_id":"2502.10174","snapshot_observed_at":"2026-08-06T21:34:46.720686Z","title":"Technical Risks of (Lethal) Autonomous Weapons Systems","venue":"cs.CY","work_id":"ab7651a5-e1f3-4ef6-86e7-43135f24c375","year":2025},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:41.921447Z"},"links":{"cited_paper":"/paper/2502.10174","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:76c56808887023a0179570daa14d5e8852e9cdd33969f44efbf70ee6fa1f1fda","observation_id":"977157d7-6733-404b-a42b-9b8d4999528b","resolution":{"observed_at":"2026-08-06T21:34:46.725127Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:42.053425Z","title":"Tool-induced misalign- ment in llm agents: A causal analysis,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:42.053425Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:4c661ef400c7ef1b07f0ad16358d2363721197f44d04b0382282dc008baf1ec1","observation_id":"d6ff52e3-31a5-41b4-a8b4-7093e0f8171a","resolution":{"observed_at":"2026-08-06T21:34:42.053425Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2409.03793","last_updated":"2025-02-28T22:26:17Z","snapshot_observed_at":"2026-07-06T19:11:09.921186Z","submitted_at":"2024-09-03T10:14:51Z","title":"Safeguarding AI Agents: Developing and Analyzing Safety Architectures","version":3},"cited_work":{"arxiv_id":"2409.03793","doi":null,"metadata_source":"pith","pith_arxiv_id":"2409.03793","snapshot_observed_at":"2026-08-06T21:34:46.696018Z","title":"Safeguarding AI Agents: Developing and Analyzing Safety Architectures","venue":"cs.CR","work_id":"834575da-da98-46ed-ad8e-1f7bdaeec3f5","year":2024},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:42.123271Z"},"links":{"cited_paper":"/paper/2409.03793","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:3303baf1a9f93d07fc00a6f1c0552634caf0b7066eed5015656eeb0c9e79b306","observation_id":"2ffc464b-6cfb-47e6-8e5f-229f9f9395d4","resolution":{"observed_at":"2026-08-06T21:34:46.700244Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:42.209958Z","title":"Levels of AGI for op- erationalizing progress on the path to AGI,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:42.209958Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:fa03f039a84427638390b9d165629119faae86bf2adb1f14ccd159d665fd413f","observation_id":"29298ee2-e3a7-44b3-9c7b-e70d1bd4b67c","resolution":{"observed_at":"2026-08-06T21:34:42.209958Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.15212","last_updated":"2025-02-21T04:58:40Z","snapshot_observed_at":"2026-08-07T17:59:52.298741Z","submitted_at":"2025-02-21T04:58:40Z","title":"Measuring AI agent autonomy: Towards a scalable approach with code inspection","version":1},"cited_work":{"arxiv_id":"2502.15212","doi":null,"metadata_source":"pith","pith_arxiv_id":"2502.15212","snapshot_observed_at":"2026-08-06T21:34:46.642340Z","title":"Measuring AI agent autonomy: Towards a scalable approach with code inspection","venue":"cs.AI","work_id":"af0042bb-7aa4-4385-a74a-a41211a3a89f","year":2025},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:42.272852Z"},"links":{"cited_paper":"/paper/2502.15212","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:76164ea8d6731818125c4f6277a4f680f44a8b403401c0419e97d68589023e3a","observation_id":"619a597c-02df-43ea-a70a-4c93ceebadf8","resolution":{"observed_at":"2026-08-06T21:34:46.646068Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:42.329388Z","title":"Levels of autonomy: Liability in the age of AI agents,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:42.329388Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:bf50668be4eebcc11a56de5a56804e789b279c172a692c063ca8644bbbc5e27a","observation_id":"3c2ceb45-0575-4099-ac6b-03b1804c430e","resolution":{"observed_at":"2026-08-06T21:34:42.329388Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.13172","last_updated":"2025-06-03T17:08:56Z","snapshot_observed_at":"2026-08-07T18:11:02.941133Z","submitted_at":"2025-02-17T19:55:53Z","title":"Unveiling Privacy Risks in LLM Agent Memory","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.13172","snapshot_observed_at":"2026-08-06T21:34:42.378224Z","title":"Unveiling privacy risks in llm agent memory,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:42.378224Z"},"links":{"cited_paper":"/paper/2502.13172","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:e07e6e3fa64bfe75a619c6239a9f3011b598a6cc210140c6eb81257455c2b092","observation_id":"f436436a-a890-4535-bc56-111238c22b25","resolution":{"observed_at":"2026-08-06T21:34:42.378224Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.11584","last_updated":"2024-04-17T17:32:41Z","snapshot_observed_at":"2026-08-04T23:37:27.678120Z","submitted_at":"2024-04-17T17:32:41Z","title":"The Landscape of Emerging AI Agent Architectures for Reasoning, Planning, and Tool Calling: A Survey","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.11584","snapshot_observed_at":"2026-08-06T21:34:42.446970Z","title":"The landscape of emerg- ing ai agent architectures for reasoning, planning, and tool call- ing: A survey,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:42.446970Z"},"links":{"cited_paper":"/paper/2404.11584","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:92d620c780b829170a9d5c88a9c0af68a715be7be5d5a86677c696a081577cd1","observation_id":"60961e07-f761-4580-b2ac-070efa9d2d47","resolution":{"observed_at":"2026-08-06T21:34:42.446970Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:42.500609Z","title":"Tptu: Task planning and tool usage of large language model-based ai agents,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:42.500609Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:e34e27a05331228af8e0504a9c674d1dd26c2e7305bfc0597f07cd547f10c96d","observation_id":"77b7a001-5b84-4a5b-bfbe-4cffdec567e6","resolution":{"observed_at":"2026-08-06T21:34:42.500609Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2304.05376","last_updated":"2023-10-02T17:03:01Z","snapshot_observed_at":"2026-07-06T15:14:32.823996Z","submitted_at":"2023-04-11T17:41:13Z","title":"ChemCrow: Augmenting large-language models with chemistry tools","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2304.05376","snapshot_observed_at":"2026-08-06T21:34:42.547508Z","title":"Chemcrow: Augmenting large-language models with chemistry tools,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:42.547508Z"},"links":{"cited_paper":"/paper/2304.05376","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:c02da9d58cd44be9bca1d501d1a903307c7adb75dadd9498d7884e9a3036cd8c","observation_id":"0df2bb78-542a-48c7-8c08-7df559393247","resolution":{"observed_at":"2026-08-06T21:34:42.547508Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2503.19263","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:46.597874Z","title":"Dwim: Towards tool-aware visual reasoning via discrepancy-aware workflow generation & instruct-masking tuning,","venue":null,"work_id":"c04ae995-8b5b-4521-aaa3-740af9c18b80","year":2025},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:42.623375Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:6ed8d9255433a6ef14da1f4ec059d8b2a314e70a2c22e04c57f27c595467014c","observation_id":"e747835f-9c20-4258-a197-52fddc4b279c","resolution":{"observed_at":"2026-08-06T21:34:46.603521Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.17574","last_updated":"2024-06-06T18:40:47Z","snapshot_observed_at":"2026-07-06T17:36:16.016176Z","submitted_at":"2024-02-27T15:09:20Z","title":"Agent-Pro: Learning to Evolve via Policy-Level Reflection and Optimization","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.17574","snapshot_observed_at":"2026-08-06T21:34:42.695008Z","title":"Agent-pro: Learning IEEE TRANSACTIONS ON PATTERN ANAL YSIS AND MACHINE INTELLIGENCE 18 to evolve via policy-level reflection and optimization,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:42.695008Z"},"links":{"cited_paper":"/paper/2402.17574","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:09aac86a0ba7bcb8fe7e7cbd7b250c9154b38887b3c9294ad841ca6a7623743d","observation_id":"69e25ffc-54ad-4ef8-b964-6658e1d7f3e8","resolution":{"observed_at":"2026-08-06T21:34:42.695008Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.07199","last_updated":"2024-08-13T20:52:13Z","snapshot_observed_at":"2026-08-01T22:07:45.419539Z","submitted_at":"2024-08-13T20:52:13Z","title":"Agent Q: Advanced Reasoning and Learning for Autonomous AI Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.07199","snapshot_observed_at":"2026-08-06T21:34:42.699357Z","title":"Agent q: Advanced reasoning and learning for autonomous ai agents,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:42.699357Z"},"links":{"cited_paper":"/paper/2408.07199","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:4c4fefedb5c69a7feccd4188f508cc18a559966389050873e52e22c04fcb5ca8","observation_id":"ae2c4d77-18e2-46e6-b375-3b55ec4a6cc0","resolution":{"observed_at":"2026-08-06T21:34:42.699357Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2304.09701","last_updated":"2023-04-19T14:45:36Z","snapshot_observed_at":"2026-07-06T15:17:29.215781Z","submitted_at":"2023-04-19T14:45:36Z","title":"On the complexity of Dominating Set for graphs with fixed diameter","version":1},"cited_work":{"arxiv_id":"2304.09701","doi":null,"metadata_source":"pith","pith_arxiv_id":"2304.09701","snapshot_observed_at":"2026-08-06T21:34:46.480797Z","title":"On the complexity of Dominating Set for graphs with fixed diameter","venue":"math.CO","work_id":"11c44239-d489-4b97-ab21-8dc871919bc9","year":2023},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:42.752161Z"},"links":{"cited_paper":"/paper/2304.09701","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:9c14b2ceb61ef59aff65777fb0de1719cea70089b97d598770e6a2e48c40ce39","observation_id":"6df1a124-9a9b-42dc-b862-40087227c7d5","resolution":{"observed_at":"2026-08-06T21:34:46.484622Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-07-06T15:59:23.019044Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-08-06T21:34:42.876489Z","title":"Universal and transferable ad- versarial attacks on aligned language models,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:42.876489Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:e1d4e2bca61f5ce42fb5b32be389e88aeb438fe313e67e955bdb4780e7ef2d32","observation_id":"50f4deff-09c4-4ce8-ba09-7bae97978e6c","resolution":{"observed_at":"2026-08-06T21:34:42.876489Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:42.947013Z","title":"Auto-gpt: An experimental open-source attempt to make gpt-4 fully autonomous,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:42.947013Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:4cd5840a0e5785c514e6fdf277b5111dffcb298405e9261e9bc7120d69e1deb9","observation_id":"7f3f3852-5890-4fc9-99a1-908c282ba66d","resolution":{"observed_at":"2026-08-06T21:34:42.947013Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:43.057797Z","title":"Reflexion: Language agents with verbal reinforcement learn- ing,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:43.057797Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:535f13747e8d4a5f77dba334d5ec593ac3a52ce2cec4cc3730cded66f92db048","observation_id":"f04a2f7a-a352-4ca1-a4e8-c55a9bf2660a","resolution":{"observed_at":"2026-08-06T21:34:43.057797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2302.06696","last_updated":"2023-02-13T21:21:04Z","snapshot_observed_at":"2026-07-06T14:51:26.249912Z","submitted_at":"2023-02-13T21:21:04Z","title":"Current fluctuations in stochastically resetting particle systems","version":1},"cited_work":{"arxiv_id":"2302.06696","doi":null,"metadata_source":"pith","pith_arxiv_id":"2302.06696","snapshot_observed_at":"2026-08-06T21:34:46.455549Z","title":"Current fluctuations in stochastically resetting particle systems","venue":"cond-mat.stat-mech","work_id":"e8951305-0387-47e0-b5f2-284c0f35837c","year":2023},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:43.166912Z"},"links":{"cited_paper":"/paper/2302.06696","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:dc9b934e2d047b48c8fff2e3e7f32cf6d6f704371f1d48e281b19214c4bccc65","observation_id":"3a2891e2-f166-4077-8bd3-83e246021fb5","resolution":{"observed_at":"2026-08-06T21:34:46.459809Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:43.309916Z","title":"Reinforcement learning with learned world models,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:43.309916Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:cc081941ec72a3f3412762ec3bd7ddc8b65e403088b3f0acb4ad408b91e8598a","observation_id":"a47370c5-854e-4379-a5cf-9a2041e6805e","resolution":{"observed_at":"2026-08-06T21:34:43.309916Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:43.419080Z","title":"Agi ruin: A list of lethalities,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:43.419080Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:45f81d3121cb95eb94cdad586f42cce224870d649fbc76255427e5479ef792b6","observation_id":"2886ba4e-4b26-4c23-9e6d-9009e89c1bc4","resolution":{"observed_at":"2026-08-06T21:34:43.419080Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:43.505711Z","title":"Deep reinforcement learning from human preferences,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:43.505711Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:197ee1d5315b19b23cf5d4c8afeb6e1f087b877296154b862a7988b2888ac73d","observation_id":"8c9b73a3-6fbb-4e44-aa90-8ace8707679d","resolution":{"observed_at":"2026-08-06T21:34:43.505711Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.13886","last_updated":"2024-10-21T18:06:58Z","snapshot_observed_at":"2026-07-06T19:35:30.732080Z","submitted_at":"2024-10-11T06:54:12Z","title":"Refusal-Trained LLMs Are Easily Jailbroken As Browser Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.13886","snapshot_observed_at":"2026-08-06T21:34:43.602465Z","title":"Refusal- trained llms are easily jailbroken as browser agents,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:43.602465Z"},"links":{"cited_paper":"/paper/2410.13886","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:6e2748dd3f531cb64e5c317eb4d5a5755902bec0c100e2508e11940313481b93","observation_id":"e5d4f524-359c-4948-a729-9195ce0ab1da","resolution":{"observed_at":"2026-08-06T21:34:43.602465Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.10019","last_updated":"2024-10-05T06:50:15Z","snapshot_observed_at":"2026-08-06T04:21:24.397587Z","submitted_at":"2024-01-18T14:40:46Z","title":"R-Judge: Benchmarking Safety Risk Awareness for LLM Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.10019","snapshot_observed_at":"2026-08-06T21:34:43.710691Z","title":"R-judge: Benchmarking safety risk awareness for llm agents,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:43.710691Z"},"links":{"cited_paper":"/paper/2401.10019","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:c7709ad8c2b4e3ab381f64c707b20a7c0001c518d9eeaeeeaca59c56f39ec7f3","observation_id":"8c0ea063-b65e-4718-9e90-195ddb4cd025","resolution":{"observed_at":"2026-08-06T21:34:43.710691Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.15624","last_updated":"2025-06-18T16:53:38Z","snapshot_observed_at":"2026-08-07T04:33:26.196883Z","submitted_at":"2025-06-18T16:53:38Z","title":"The Effect of State Representation on LLM Agent Behavior in Dynamic Routing Games","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.15624","snapshot_observed_at":"2026-08-06T21:34:43.819324Z","title":"The effect of state represen- tation on llm agent behavior in dynamic routing games,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:43.819324Z"},"links":{"cited_paper":"/paper/2506.15624","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:ae63fe7394a43e129aef7e5b1bd363ad3d46acad00c5acef035567bf04eaf65d","observation_id":"0be2d40a-9cd3-46f0-af53-a26bd9d8feb7","resolution":{"observed_at":"2026-08-06T21:34:43.819324Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.23020","last_updated":"2025-05-29T03:02:18Z","snapshot_observed_at":"2026-08-08T01:17:46.684635Z","submitted_at":"2025-05-29T03:02:18Z","title":"AgentAlign: Navigating Safety Alignment in the Shift from Informative to Agentic Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.23020","snapshot_observed_at":"2026-08-06T21:34:43.923032Z","title":"Agentalign: Navigating safety alignment in the shift from informative to agentic large language models,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:43.923032Z"},"links":{"cited_paper":"/paper/2505.23020","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:bcee3bd926994291c8332568b34d10bb5212c268548316c491087d1d6f451f41","observation_id":"403ee0da-d620-44bd-9964-1f59e2872e81","resolution":{"observed_at":"2026-08-06T21:34:43.923032Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:43.947115Z","title":"Medical hallucinations in foundation models and their impact on healthcare,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:43.947115Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:a25c1a4af74ab0904e2c73f313adce9d6acd56116231f24d9469c3d6af723bf8","observation_id":"46dfa291-4d68-4715-830c-48ff9b9dfb43","resolution":{"observed_at":"2026-08-06T21:34:43.947115Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1909.08593","last_updated":"2020-01-08T23:02:36Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2019-09-18T17:33:39Z","title":"Fine-Tuning Language Models from Human Preferences","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1909.08593","snapshot_observed_at":"2026-08-06T21:34:43.950381Z","title":"Fine-tuning language models from human preferences,","venue":null,"work_id":null,"year":1909},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:43.950381Z"},"links":{"cited_paper":"/paper/1909.08593","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:43141a6030878f51ee4d43030767423784f188bf526a53f9002ef8a4568bd25e","observation_id":"94da9eb3-4849-4793-a8c4-bba794d1800b","resolution":{"observed_at":"2026-08-06T21:34:43.950381Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:43.953699Z","title":"Learning to sum- marize with human feedback,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:43.953699Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:3a20264b3c02ed9de340bb7b3d70fe4572ea4e290baaeb29fba811be1cbec7f4","observation_id":"22227846-4b94-472e-9aaa-14955f0ba341","resolution":{"observed_at":"2026-08-06T21:34:43.953699Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:43.956519Z","title":"Train- ing language models to follow instructions with human feed- back,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":74,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:43.956519Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:6d37b5c0f602073c3e42f381244d3c535663c308e9aa39d2a8516eab0cf8a539","observation_id":"319856d1-8632-42c6-a87f-27d88224e601","resolution":{"observed_at":"2026-08-06T21:34:43.956519Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.13295","last_updated":"2025-08-27T11:15:11Z","snapshot_observed_at":"2026-08-07T18:07:08.742124Z","submitted_at":"2025-02-18T21:32:24Z","title":"Demonstrating specification gaming in reasoning models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.13295","snapshot_observed_at":"2026-08-06T21:34:43.969499Z","title":"Demonstrat- ing specification gaming in reasoning models,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":75,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:43.969499Z"},"links":{"cited_paper":"/paper/2502.13295","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:0bb3e06ef77c75de93cfd8d1af83a4617a06fa81f25670500a0892f83daf19d0","observation_id":"3e43be03-6e6f-44e1-a570-0017ba183b36","resolution":{"observed_at":"2026-08-06T21:34:43.969499Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:44.029256Z","title":"The emerged security and privacy of llm agent: A survey with case studies,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":76,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:44.029256Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:adc7e4d56784c4fcbd2f41279ac86ce814a847af5be535b3c8617ceda87f20fb","observation_id":"e03b3156-ada0-483e-aa53-0714ed4761e2","resolution":{"observed_at":"2026-08-06T21:34:44.029256Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1606.06565","last_updated":"2016-07-25T17:23:29Z","snapshot_observed_at":"2026-07-06T05:00:46.434335Z","submitted_at":"2016-06-21T13:37:05Z","title":"Concrete Problems in AI Safety","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1606.06565","snapshot_observed_at":"2026-08-06T21:34:44.098139Z","title":"Concrete problems in AI safety,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":77,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:44.098139Z"},"links":{"cited_paper":"/paper/1606.06565","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:9b4e140e46180b862cbc34ce1b91c0b32e7ebc91fe890344d35d7ece734184d1","observation_id":"a369de90-8bb0-45b2-941b-fd13bf90ec1a","resolution":{"observed_at":"2026-08-06T21:34:44.098139Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.17259","last_updated":"2024-05-28T05:34:52Z","snapshot_observed_at":"2026-08-06T15:41:32.468926Z","submitted_at":"2023-12-22T05:59:00Z","title":"Empowering Working Memory for Large Language Model Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.17259","snapshot_observed_at":"2026-08-06T21:34:44.157801Z","title":"Empowering working memory for large language model agents,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":78,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:44.157801Z"},"links":{"cited_paper":"/paper/2312.17259","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:950ea3edabbcd50563efe2897554668082a17f15ff3fcfa216facc52c2d5f642","observation_id":"ced737db-ed17-4251-9604-b279bb611364","resolution":{"observed_at":"2026-08-06T21:34:44.157801Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:44.214415Z","title":"OpenAI red teaming network,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":79,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:44.214415Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:80f34023d8f12d075628120f13b222b9fd1bd773a63e7bfa513baf5dde23dafc","observation_id":"50076240-2803-496c-9029-60a500ccd30b","resolution":{"observed_at":"2026-08-06T21:34:44.214415Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2210.09819","last_updated":"2022-12-02T13:55:29Z","snapshot_observed_at":"2026-07-06T14:07:11.750709Z","submitted_at":"2022-10-18T12:57:30Z","title":"Eye-tracking based classification of Mandarin Chinese readers with and without dyslexia using neural sequence models","version":2},"cited_work":{"arxiv_id":"2210.09819","doi":null,"metadata_source":"pith","pith_arxiv_id":"2210.09819","snapshot_observed_at":"2026-08-06T21:34:46.307789Z","title":"Eye-tracking based classification of Mandarin Chinese readers with and without dyslexia using neural sequence models","venue":"cs.CL","work_id":"a62b18d1-140a-4259-af33-e39f1d6b0cd0","year":2022},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":80,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:44.299452Z"},"links":{"cited_paper":"/paper/2210.09819","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:fe62434c75f77b8f27f762d72d66f4d1e05fbfd304b7ab4f4923544733572d70","observation_id":"40a447bc-b110-412c-93f2-2de9eace090a","resolution":{"observed_at":"2026-08-06T21:34:46.311852Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2211.09527","last_updated":"2022-11-17T13:43:20Z","snapshot_observed_at":"2026-07-06T14:19:47.424778Z","submitted_at":"2022-11-17T13:43:20Z","title":"Ignore Previous Prompt: Attack Techniques For Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2211.09527","snapshot_observed_at":"2026-08-06T21:34:44.358707Z","title":"Ignore previous prompt: Attack tech- niques for language models,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":81,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:44.358707Z"},"links":{"cited_paper":"/paper/2211.09527","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:21983f3aef0c701fca78ed68590eb63b018a8415fe2542991460d09d5bc6405d","observation_id":"a716f632-1209-46ce-890f-f1457daefe12","resolution":{"observed_at":"2026-08-06T21:34:44.358707Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.10196","last_updated":"2024-02-15T18:51:32Z","snapshot_observed_at":"2026-08-04T06:28:18.014892Z","submitted_at":"2024-02-15T18:51:32Z","title":"A Trembling House of Cards? Mapping Adversarial Attacks against Language Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.10196","snapshot_observed_at":"2026-08-06T21:34:44.440604Z","title":"A trembling house of cards? mapping adversarial attacks against language agents,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":82,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:44.440604Z"},"links":{"cited_paper":"/paper/2402.10196","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:7aae344239a6e681b648e556afb85060bcbe47097d046f5fceb4db00fa1e5c55","observation_id":"942cee6a-06f6-463d-84d7-e70722eeac6e","resolution":{"observed_at":"2026-08-06T21:34:44.440604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.03007","last_updated":"2024-06-05T07:14:28Z","snapshot_observed_at":"2026-07-06T18:25:44.620682Z","submitted_at":"2024-06-05T07:14:28Z","title":"BadAgent: Inserting and Activating Backdoor Attacks in LLM Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.03007","snapshot_observed_at":"2026-08-06T21:34:44.473874Z","title":"Badagent: Inserting and activating backdoor attacks in llm agents,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":83,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:44.473874Z"},"links":{"cited_paper":"/paper/2406.03007","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:d2481c49c57595c73876759518c84181743bc445fa6636a10a143d59226bae65","observation_id":"e992e2d9-83e4-4241-bf08-5156052f98c2","resolution":{"observed_at":"2026-08-06T21:34:44.473874Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:44.477025Z","title":"Adversarial examples: Attacks and defenses for deep learning,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":84,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:44.477025Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:2f6e27cdb46fc756f78867bc9982e031482908527204c056fa204fa101a71311","observation_id":"b6165ef7-65b4-4de8-b1d9-7d4abd49654b","resolution":{"observed_at":"2026-08-06T21:34:44.477025Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.09024","last_updated":"2025-04-18T14:30:31Z","snapshot_observed_at":"2026-08-02T12:38:54.249632Z","submitted_at":"2024-10-11T17:39:22Z","title":"AgentHarm: A Benchmark for Measuring Harmfulness of LLM Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.09024","snapshot_observed_at":"2026-08-06T21:34:44.480516Z","title":"Agentharm: A benchmark for measuring harmfulness of llm agents,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":85,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:44.480516Z"},"links":{"cited_paper":"/paper/2410.09024","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:e6dcb910c4030d22dc2335a23ecb93ec9ff4b2e95bee95ffc2a7aacf41e6b37f","observation_id":"8bc7b98b-bd1a-42ad-9fc4-28f57c271cbc","resolution":{"observed_at":"2026-08-06T21:34:44.480516Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:44.509344Z","title":"Multitrust: A comprehensive benchmark towards trustworthy multimodal large language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":86,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:44.509344Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:4af4f7de5be19b58c6c967e082c3d9cc9b420b1fa3e53f6ddf648dff2e308f7e","observation_id":"7bf99a70-466f-4b5c-8d38-fab6e28a104c","resolution":{"observed_at":"2026-08-06T21:34:44.509344Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:44.569564Z","title":"Sensor attack taxonomy and defense for cyber- physical systems,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":87,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:44.569564Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:2ae49f3531b852d11face6b7e91c40c60653728ba0abfc8d810db2cebd580430","observation_id":"d2917586-76a8-4720-9df2-5d04ae00cae6","resolution":{"observed_at":"2026-08-06T21:34:44.569564Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.00247","last_updated":"2023-09-01T04:33:24Z","snapshot_observed_at":"2026-07-06T16:13:07.384791Z","submitted_at":"2023-09-01T04:33:24Z","title":"Further study on forbidden subgraphs of power graph","version":1},"cited_work":{"arxiv_id":"2309.00247","doi":null,"metadata_source":"pith","pith_arxiv_id":"2309.00247","snapshot_observed_at":"2026-08-06T21:34:46.254832Z","title":"Further study on forbidden subgraphs of power graph","venue":"math.CO","work_id":"9cc5a1a4-c8f9-4d47-a461-cd83d26eb4d7","year":2023},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":88,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:44.649753Z"},"links":{"cited_paper":"/paper/2309.00247","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:5ab3958c80668a82941544c2d9800ee808ad70f4128eaa39eaae463a845b2964","observation_id":"8c99aee2-c381-44db-9c51-d704ff5404c7","resolution":{"observed_at":"2026-08-06T21:34:46.258518Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:44.729192Z","title":"Extracting training data from large language models,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":89,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:44.729192Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:426c87757afe0a4298d8a6c8d0312f26572cd64f670d2fd83cf76d2b794ceaa2","observation_id":"c24b7468-62b5-4f23-aa44-f9b4b1834f70","resolution":{"observed_at":"2026-08-06T21:34:44.729192Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:44.793227Z","title":"Membership inference attacks on sequence-to- sequence models,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":90,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:44.793227Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:381e5fa73ce408c449c644539d8cdad275fce350bb71c8edf660abd76d420cdf","observation_id":"7611f0cc-4b57-409f-976e-59151ac12009","resolution":{"observed_at":"2026-08-06T21:34:44.793227Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:44.866752Z","title":"The surprising effectiveness of latent world models for continual reinforcement learning,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":91,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:44.866752Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:bc93687cb293a044c4057538e6e743b96b400789bd68d4e987857b81a2a116fb","observation_id":"03c648da-9a86-414b-9a8f-03afa0072b18","resolution":{"observed_at":"2026-08-06T21:34:44.866752Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2304.03277","last_updated":"2023-04-06T17:58:09Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-04-06T17:58:09Z","title":"Instruction Tuning with GPT-4","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2304.03277","snapshot_observed_at":"2026-08-06T21:34:44.946924Z","title":"Instruction tuning with gpt-4,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":92,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:44.946924Z"},"links":{"cited_paper":"/paper/2304.03277","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:d017dc20248bf0994ff37a324735812e5e3c480030ccfbb2ecacbfdfb255b873","observation_id":"d69e9233-7125-4b01-9827-13211e949a04","resolution":{"observed_at":"2026-08-06T21:34:44.946924Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2209.07858","last_updated":"2022-11-22T19:12:57Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2022-08-23T23:37:14Z","title":"Red Teaming Language Models to Reduce Harms: Methods, Scaling Behaviors, and Lessons Learned","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2209.07858","snapshot_observed_at":"2026-08-06T21:34:44.996658Z","title":"Red teaming language models to reduce harms: Methods, scaling behaviors, and lessons learned,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":93,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:44.996658Z"},"links":{"cited_paper":"/paper/2209.07858","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:1a8f591c8f89333c8105f4a2a6e862873ad97bc68b1b16cb3d7f4cefcdd69382","observation_id":"42f08bbf-97f1-4816-906f-6f32ae079bcc","resolution":{"observed_at":"2026-08-06T21:34:44.996658Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.01819","last_updated":"2024-07-18T08:57:36Z","snapshot_observed_at":"2026-07-06T16:26:58.234941Z","submitted_at":"2023-10-03T06:16:38Z","title":"TP2O: Creative Text Pair-to-Object Generation using Balance Swap-Sampling","version":4},"cited_work":{"arxiv_id":"2310.01819","doi":null,"metadata_source":"pith","pith_arxiv_id":"2310.01819","snapshot_observed_at":"2026-08-06T21:34:46.220173Z","title":"TP2O: Creative Text Pair-to-Object Generation using Balance Swap-Sampling","venue":"cs.CV","work_id":"93f2b60a-f805-47ea-afd1-4689c92372a1","year":2023},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":94,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:45.000236Z"},"links":{"cited_paper":"/paper/2310.01819","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:a5491d4568d40f6709819494dccdccb2aee5a237f1716c3f338926e805aec194","observation_id":"e6420e77-da93-44a8-a86f-fddd7885aa52","resolution":{"observed_at":"2026-08-06T21:34:46.224273Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.05499","last_updated":"2025-12-29T02:25:27Z","snapshot_observed_at":"2026-07-06T15:40:27.639368Z","submitted_at":"2023-06-08T18:43:11Z","title":"Prompt Injection attack against LLM-integrated Applications","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.05499","snapshot_observed_at":"2026-08-06T21:34:45.003279Z","title":"Prompt injec- tion attack against LLM-integrated applications,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":95,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:45.003279Z"},"links":{"cited_paper":"/paper/2306.05499","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:05f855c06fa0d66b4e09f1e2be7092f6f2cdbd0071d7be8f71b0a4375f75453f","observation_id":"e7360748-e040-4c33-bf20-bead452b7b24","resolution":{"observed_at":"2026-08-06T21:34:45.003279Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:45.006375Z","title":"Benchmarking and defending against indirect prompt injection attacks on large language models,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":96,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:45.006375Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:238d830a17c30da966e86d532e3837c22701e1884cf4d41e656d66a07ebdb6f7","observation_id":"c5957bfe-978e-4e85-881c-bbbb248cb84d","resolution":{"observed_at":"2026-08-06T21:34:45.006375Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.21277","last_updated":"2025-05-28T14:16:10Z","snapshot_observed_at":"2026-08-07T20:40:32.188265Z","submitted_at":"2025-05-27T14:48:44Z","title":"Breaking the Ceiling: Exploring the Potential of Jailbreak Attacks through Expanding Strategy Space","version":2},"cited_work":{"arxiv_id":"2505.21277","doi":null,"metadata_source":"pith","pith_arxiv_id":"2505.21277","snapshot_observed_at":"2026-08-06T21:34:46.196347Z","title":"Breaking the Ceiling: Exploring the Potential of Jailbreak Attacks through Expanding Strategy Space","venue":"cs.CR","work_id":"c863671b-f00c-4f2b-8523-fe137e5fb044","year":2025},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":97,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:45.009316Z"},"links":{"cited_paper":"/paper/2505.21277","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:fde979f159f97b5353e00aeeb2bad5a36fdddb8d8364b2ddb2481402bee72627","observation_id":"3ec1bfe1-174d-4668-82d6-8c0d72bdbeea","resolution":{"observed_at":"2026-08-06T21:34:46.200460Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:45.012604Z","title":"Attention tracker: Detecting prompt injection attacks in LLMs,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":98,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:45.012604Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:ac36fef577e0f575b6bceb1519470a5eed469f272b9288227deeb638b09f440c","observation_id":"10edd366-0997-456e-a7d8-c44306a1dd7d","resolution":{"observed_at":"2026-08-06T21:34:45.012604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.04806","last_updated":"2025-05-13T05:36:34Z","snapshot_observed_at":"2026-08-07T15:49:00.331146Z","submitted_at":"2025-05-07T21:15:40Z","title":"Red Teaming the Mind of the Machine: A Systematic Evaluation of Prompt Injection and Jailbreak Vulnerabilities in LLMs","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.04806","snapshot_observed_at":"2026-08-06T21:34:45.015831Z","title":"Red teaming the mind of the machine: A systematic evaluation of prompt injection and jailbreak vulnerabilities in llms,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":99,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:45.015831Z"},"links":{"cited_paper":"/paper/2505.04806","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:94a5ad4d2d7ce30981061799ac0141e4e22d5c07e8dc846e7540c107df49dd51","observation_id":"b4282a96-6bb9-4961-b94c-0cb55c1f85d4","resolution":{"observed_at":"2026-08-06T21:34:45.015831Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:45.018828Z","title":"How robust is google’s bard to adversarial image attacks?","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":100,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:45.018828Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:d1ca6f4459cf27a3f716a1ba98daf531a2ff84228b41e49d2f8522bd213dab83","observation_id":"668ea879-801a-4aa4-8239-dcbbb53a3447","resolution":{"observed_at":"2026-08-06T21:34:45.018828Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:45.022044Z","title":"Adversarial attacks on multimodal agents,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":101,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:45.022044Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:eba84ed0a670b421c2519d647c9964a1fa66de7403c9e6127ecd7a25c8c44f3c","observation_id":"c932d3dd-e9d8-46e4-970b-5a60f47319c6","resolution":{"observed_at":"2026-08-06T21:34:45.022044Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.13461","last_updated":"2024-08-21T11:02:40Z","snapshot_observed_at":"2026-08-05T15:24:08.933708Z","submitted_at":"2024-06-19T11:38:05Z","title":"Static neutral black holes in Kalb-Ramond gravity","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.13461","snapshot_observed_at":"2026-08-06T21:34:45.025473Z","title":"Probing the robustness of vision–language pretrained mod- els: A multimodal adversarial attack approach,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":102,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:45.025473Z"},"links":{"cited_paper":"/paper/2406.13461","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:0359e530522f37de34b4f294085e726e7ff852adc67521130780e8ee71644a58","observation_id":"5e70b4dc-5b87-43be-bec4-7686ac9365da","resolution":{"observed_at":"2026-08-06T21:34:45.025473Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","latest_version":1,"primary_category":"cs.AI","snapshot_observed_at":"2026-08-07T18:36:52.892587Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents"},"reference_resolution":{"displayed":100,"state_counts":{"malformed_identifier":0,"metadata_mismatch":5,"parse_uncertain":0,"unresolved":90,"verified_exact":5,"verified_fuzzy":0},"total_outbound_references":169},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 100 of 169 outbound references and 14 inbound Pith citation observations for arXiv:2506.23844."}