{"as_of":"2026-08-07T05:38:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:8c9552feacf0b4cc667c3a396a4cd5f245385a2d9ff6f59c5b3fad0e980109a2","coverage":[{"denominator":21,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":21,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T19:29:54.026039Z","state":"measured"},{"denominator":25,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":25,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-06T06:34:29.942622+00:00","state":"measured"},{"denominator":4,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":4,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-03T09:54:57.493112Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":1,"source":"arxiv_reference","source_observed_at":"2026-08-05T02:28:24.338817Z","state":"measured"}],"external_citation_measurements":[{"count":0,"observed_at":"2026-08-05T02:28:24.338817Z","source":"arxiv_reference"}],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2507.05445","last_updated":"2025-07-07T19:50:21Z","snapshot_observed_at":"2026-08-06T19:23:54.638215Z","submitted_at":"2025-07-07T19:50:21Z","title":"A Systematization of Security Vulnerabilities in Computer Use Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2507.05445","snapshot_observed_at":"2026-08-03T09:54:57.493112Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.12349","last_updated":"2026-07-15T15:32:11Z","snapshot_observed_at":"2026-08-04T21:39:28.308547Z","submitted_at":"2026-01-18T10:54:54Z","title":"Mind the Gap: Action Rebinding Attacks against Android GUI Agents","version":3},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-03T09:54:57.493112Z"},"links":{"cited_paper":"/paper/2507.05445","citing_paper":"/paper/2601.12349"},"observation_digest":"sha256:d5332b5f755324a57451b2914fb82a96360d27a6754d4afb957c27f95a9855a1","observation_id":"1eabc1c6-2842-458f-aa59-1c8aaf26e4a1","resolution":{"observed_at":"2026-08-03T09:54:57.493112Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2507.05445","last_updated":"2025-07-07T19:50:21Z","snapshot_observed_at":"2026-08-06T19:23:54.638215Z","submitted_at":"2025-07-07T19:50:21Z","title":"A Systematization of Security Vulnerabilities in Computer Use Agents","version":1},"cited_work":{"arxiv_id":"2507.05445","doi":"10.48550/arxiv.2507.05445","metadata_source":"arxiv_reference","pith_arxiv_id":"2507.05445","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"A systematization of security vulnerabilities in computer use agents","venue":"ArXiv.org","work_id":"f6d8d62b-ac2a-49ee-b6ba-b4b11b3f7819","year":2025},"citing_paper":{"arxiv_id":"2605.07110","last_updated":"2026-05-08T01:38:46Z","snapshot_observed_at":"2026-07-06T23:19:30.387067Z","submitted_at":"2026-05-08T01:38:46Z","title":"Securing Computer-Use Agents: A Unified Architecture-Lifecycle Framework for Deployment-Grounded Reliability","version":1},"reference_index":153,"source":"pdf_text","source_observed_at":"2026-05-11T01:15:19.239355Z"},"links":{"cited_paper":"/paper/2507.05445","citing_paper":"/paper/2605.07110"},"observation_digest":"sha256:602723a8543fce64d33242daeabb0c67017ff88f4aea00d0411627c1b7ac8897","observation_id":"21cc77c1-16e6-4650-ab73-9dd794afba19","resolution":{"observed_at":"2026-05-11T04:35:55.938663Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.05445","last_updated":"2025-07-07T19:50:21Z","snapshot_observed_at":"2026-08-06T19:23:54.638215Z","submitted_at":"2025-07-07T19:50:21Z","title":"A Systematization of Security Vulnerabilities in Computer Use Agents","version":1},"cited_work":{"arxiv_id":"2507.05445","doi":"10.48550/arxiv.2507.05445","metadata_source":"arxiv_reference","pith_arxiv_id":"2507.05445","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"A systematization of security vulnerabilities in computer use agents","venue":"ArXiv.org","work_id":"f6d8d62b-ac2a-49ee-b6ba-b4b11b3f7819","year":2025},"citing_paper":{"arxiv_id":"2606.05233","last_updated":"2026-06-03T01:21:59Z","snapshot_observed_at":"2026-08-03T04:28:49.622809Z","submitted_at":"2026-06-03T01:21:59Z","title":"Domain-Conditioned Safety in Frontier Computer-Using Agents: A 793-Episode Browser Benchmark, a Coding-Domain Cross-Reference, and a Reproducibility Audit of Recent Red-Teaming","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-06-28T06:22:03.848058Z"},"links":{"cited_paper":"/paper/2507.05445","citing_paper":"/paper/2606.05233"},"observation_digest":"sha256:239e6bea8996c2c1dfca7959375658d83bb3549f61da4d9a382a12a82aa679a0","observation_id":"669e3427-683f-4b85-9a42-cb778c125cd9","resolution":{"observed_at":"2026-07-02T08:06:48.215369Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.05445","last_updated":"2025-07-07T19:50:21Z","snapshot_observed_at":"2026-08-06T19:23:54.638215Z","submitted_at":"2025-07-07T19:50:21Z","title":"A Systematization of Security Vulnerabilities in Computer Use Agents","version":1},"cited_work":{"arxiv_id":"2507.05445","doi":"10.48550/arxiv.2507.05445","metadata_source":"arxiv_reference","pith_arxiv_id":"2507.05445","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"A systematization of security vulnerabilities in computer use agents","venue":"ArXiv.org","work_id":"f6d8d62b-ac2a-49ee-b6ba-b4b11b3f7819","year":2025},"citing_paper":{"arxiv_id":"2606.10749","last_updated":"2026-06-09T12:01:07Z","snapshot_observed_at":"2026-07-31T21:35:18.696472Z","submitted_at":"2026-06-09T12:01:07Z","title":"Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation","version":1},"reference_index":82,"source":"pdf_text","source_observed_at":"2026-06-27T12:55:22.831264Z"},"links":{"cited_paper":"/paper/2507.05445","citing_paper":"/paper/2606.10749"},"observation_digest":"sha256:1786a067ee4cf7a50806ac00ffe73f03a8e547e3d46d3653809a08d0ef495a7c","observation_id":"efbdd2d8-8a16-4267-99db-810cf7ae5262","resolution":{"observed_at":"2026-06-27T13:20:57.086752Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2507.05445/citation-record","integrity":"/paper/2507.05445/integrity","json":"/paper/2507.05445/citation-record.json","paper":"/paper/2507.05445"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:29:57.347917Z","title":"Osworld: Benchmarking multimodal agents for open-ended tasks in real computer environments,","venue":null,"work_id":"aead908f-94f1-48e6-a9fe-6727c53ea270","year":2024},"citing_paper":{"arxiv_id":"2507.05445","last_updated":"2025-07-07T19:50:21Z","snapshot_observed_at":"2026-08-06T19:23:54.638215Z","submitted_at":"2025-07-07T19:50:21Z","title":"A Systematization of Security Vulnerabilities in Computer Use Agents","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-06T19:29:51.427889Z"},"links":{"citing_paper":"/paper/2507.05445"},"observation_digest":"sha256:46c6ac40054c0add32f1c3bcc58751ebc96e5b9258ead60f67c40cf4356f5f46","observation_id":"2c5ae4a9-0f4a-4d18-9edc-59d9b2993dc7","resolution":{"observed_at":"2026-08-06T19:29:57.504280Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:29:57.074540Z","title":"Operator system card,","venue":null,"work_id":"cee15fe6-a13e-46f5-8e46-30009e351253","year":2025},"citing_paper":{"arxiv_id":"2507.05445","last_updated":"2025-07-07T19:50:21Z","snapshot_observed_at":"2026-08-06T19:23:54.638215Z","submitted_at":"2025-07-07T19:50:21Z","title":"A Systematization of Security Vulnerabilities in Computer Use Agents","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-06T19:29:51.525962Z"},"links":{"citing_paper":"/paper/2507.05445"},"observation_digest":"sha256:5c9c7899f513dd62ed9563fa8036b10b17cc9876a8cb56ba5d6424c5b0fb9903","observation_id":"98314f42-e14d-4148-a681-3ac05e9d1eaa","resolution":{"observed_at":"2026-08-06T19:29:57.206439Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:29:56.817790Z","title":"Developing a computer use model,","venue":null,"work_id":"851f13b8-7d5f-4f82-aee5-32467898927b","year":2025},"citing_paper":{"arxiv_id":"2507.05445","last_updated":"2025-07-07T19:50:21Z","snapshot_observed_at":"2026-08-06T19:23:54.638215Z","submitted_at":"2025-07-07T19:50:21Z","title":"A Systematization of Security Vulnerabilities in Computer Use Agents","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-06T19:29:51.634118Z"},"links":{"citing_paper":"/paper/2507.05445"},"observation_digest":"sha256:583581b2f8e929c975eb4002d20e288b0a221750b2b4360910152873bffba75b","observation_id":"e00b2d44-7333-498f-bb0b-8511f017eb28","resolution":{"observed_at":"2026-08-06T19:29:56.964829Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:29:56.528068Z","title":"Project Astra: Multimodal AI Assistants,","venue":null,"work_id":"190d5116-2d66-4a3a-b451-4fc7f503d707","year":2024},"citing_paper":{"arxiv_id":"2507.05445","last_updated":"2025-07-07T19:50:21Z","snapshot_observed_at":"2026-08-06T19:23:54.638215Z","submitted_at":"2025-07-07T19:50:21Z","title":"A Systematization of Security Vulnerabilities in Computer Use Agents","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-06T19:29:51.794479Z"},"links":{"citing_paper":"/paper/2507.05445"},"observation_digest":"sha256:98553933414b0d040c73bb5a9bf598d63f4e27f145831fce131f7475bfdd52b5","observation_id":"396a6059-6148-4ef6-b660-eeb21578bcc0","resolution":{"observed_at":"2026-08-06T19:29:56.655400Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.12345","last_updated":"2023-07-23T14:57:44Z","snapshot_observed_at":"2026-07-06T15:57:28.087697Z","submitted_at":"2023-07-23T14:57:44Z","title":"Tell me, what are you most afraid of? Exploring the Effects of Agent Representation on Information Disclosure in Human-Chatbot Interaction","version":1},"cited_work":{"arxiv_id":"2307.12345","doi":null,"metadata_source":"pith","pith_arxiv_id":"2307.12345","snapshot_observed_at":"2026-08-06T19:29:54.272830Z","title":"Tell me, what are you most afraid of? Exploring the Effects of Agent Representation on Information Disclosure in Human-Chatbot Interaction","venue":"cs.HC","work_id":"ac3a53f8-05b5-47bd-9f87-557532deeab4","year":2023},"citing_paper":{"arxiv_id":"2507.05445","last_updated":"2025-07-07T19:50:21Z","snapshot_observed_at":"2026-08-06T19:23:54.638215Z","submitted_at":"2025-07-07T19:50:21Z","title":"A Systematization of Security Vulnerabilities in Computer Use Agents","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-06T19:29:51.903812Z"},"links":{"cited_paper":"/paper/2307.12345","citing_paper":"/paper/2507.05445"},"observation_digest":"sha256:1b4b6c58c242873b3e0f4973e62ef3c12598cf7d29b11b734f02ac1745986284","observation_id":"178ed3ab-35c5-4cf8-8bfb-9d1d531330c4","resolution":{"observed_at":"2026-08-06T19:29:54.389245Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:29:56.276683Z","title":"Hello gpt-4o,","venue":null,"work_id":"2c844a2d-76e6-4ff8-9d6b-e3038844b860","year":2024},"citing_paper":{"arxiv_id":"2507.05445","last_updated":"2025-07-07T19:50:21Z","snapshot_observed_at":"2026-08-06T19:23:54.638215Z","submitted_at":"2025-07-07T19:50:21Z","title":"A Systematization of Security Vulnerabilities in Computer Use Agents","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-06T19:29:52.036861Z"},"links":{"citing_paper":"/paper/2507.05445"},"observation_digest":"sha256:41aa9584cb09ac3943cb93d3c05b6c67ab2f2cc36628810c8b4e9067e6a356a5","observation_id":"1573ad1d-0fd5-4f94-8be9-da1b4eb335b9","resolution":{"observed_at":"2026-08-06T19:29:56.390520Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2210.03629","last_updated":"2023-03-10T01:00:17Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2022-10-06T01:00:32Z","title":"ReAct: Synergizing Reasoning and Acting in Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2210.03629","snapshot_observed_at":"2026-08-06T19:29:52.169152Z","title":"React: Synergizing reasoning and acting in language models,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.05445","last_updated":"2025-07-07T19:50:21Z","snapshot_observed_at":"2026-08-06T19:23:54.638215Z","submitted_at":"2025-07-07T19:50:21Z","title":"A Systematization of Security Vulnerabilities in Computer Use Agents","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-06T19:29:52.169152Z"},"links":{"cited_paper":"/paper/2210.03629","citing_paper":"/paper/2507.05445"},"observation_digest":"sha256:7081ed27d0ce7eda410e55cff1dffa265eaf7be9a6d7bd9191f7e274062534bf","observation_id":"85b7d1bc-eae4-4750-85ac-b64822e7cbcf","resolution":{"observed_at":"2026-08-06T19:29:52.169152Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2303.11366","last_updated":"2023-10-10T05:21:45Z","snapshot_observed_at":"2026-07-06T15:05:53.556198Z","submitted_at":"2023-03-20T18:08:50Z","title":"Reflexion: Language Agents with Verbal Reinforcement Learning","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.11366","snapshot_observed_at":"2026-08-06T19:29:52.269959Z","title":"Reflexion: Lan- guage agents with verbal reinforcement learning,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.05445","last_updated":"2025-07-07T19:50:21Z","snapshot_observed_at":"2026-08-06T19:23:54.638215Z","submitted_at":"2025-07-07T19:50:21Z","title":"A Systematization of Security Vulnerabilities in Computer Use Agents","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-06T19:29:52.269959Z"},"links":{"cited_paper":"/paper/2303.11366","citing_paper":"/paper/2507.05445"},"observation_digest":"sha256:ec8b49ae0f957d8e2575c9c6cbeec8966a8d83a8c361584582e33d85dd9cda69","observation_id":"fdb3d9f0-2aa6-4218-8a1e-8f3ee26ff203","resolution":{"observed_at":"2026-08-06T19:29:52.269959Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2202.03286","last_updated":"2022-02-07T15:22:17Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2022-02-07T15:22:17Z","title":"Red Teaming Language Models with Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2202.03286","snapshot_observed_at":"2026-08-06T19:29:52.397415Z","title":"Red teaming language models with language models,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.05445","last_updated":"2025-07-07T19:50:21Z","snapshot_observed_at":"2026-08-06T19:23:54.638215Z","submitted_at":"2025-07-07T19:50:21Z","title":"A Systematization of Security Vulnerabilities in Computer Use Agents","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-06T19:29:52.397415Z"},"links":{"cited_paper":"/paper/2202.03286","citing_paper":"/paper/2507.05445"},"observation_digest":"sha256:b4e268c442e4b0c2994e58a9244af1f8dbb6a98c87dcfea724ce1b27d490d891","observation_id":"cba173f1-9883-4ec5-b723-bef3f93899bb","resolution":{"observed_at":"2026-08-06T19:29:52.397415Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2211.09527","last_updated":"2022-11-17T13:43:20Z","snapshot_observed_at":"2026-07-06T14:19:47.424778Z","submitted_at":"2022-11-17T13:43:20Z","title":"Ignore Previous Prompt: Attack Techniques For Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2211.09527","snapshot_observed_at":"2026-08-06T19:29:52.554579Z","title":"Ignore previous prompt: Attack techniques for language models,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.05445","last_updated":"2025-07-07T19:50:21Z","snapshot_observed_at":"2026-08-06T19:23:54.638215Z","submitted_at":"2025-07-07T19:50:21Z","title":"A Systematization of Security Vulnerabilities in Computer Use Agents","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-06T19:29:52.554579Z"},"links":{"cited_paper":"/paper/2211.09527","citing_paper":"/paper/2507.05445"},"observation_digest":"sha256:7ebf5bd13d76b2551b0bbc36d81f9a68e395b53a5cf75a2eab1c0f6943aa60db","observation_id":"79d601b8-8a3f-4fd5-b438-cd9aa93d5d4f","resolution":{"observed_at":"2026-08-06T19:29:52.554579Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2306.05499","last_updated":"2025-12-29T02:25:27Z","snapshot_observed_at":"2026-07-06T15:40:27.639368Z","submitted_at":"2023-06-08T18:43:11Z","title":"Prompt Injection attack against LLM-integrated Applications","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.05499","snapshot_observed_at":"2026-08-06T19:29:52.672797Z","title":"Prompt injection attack against llm-integrated applications,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.05445","last_updated":"2025-07-07T19:50:21Z","snapshot_observed_at":"2026-08-06T19:23:54.638215Z","submitted_at":"2025-07-07T19:50:21Z","title":"A Systematization of Security Vulnerabilities in Computer Use Agents","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-06T19:29:52.672797Z"},"links":{"cited_paper":"/paper/2306.05499","citing_paper":"/paper/2507.05445"},"observation_digest":"sha256:21fd61f47fbcfdc364687e484a4fa9aa7565c7cbaa097baca47fdf13e5817130","observation_id":"b6db69d7-b6fc-489e-a989-964a2dc1024c","resolution":{"observed_at":"2026-08-06T19:29:52.672797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2201.11903","last_updated":"2023-01-10T23:07:57Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2022-01-28T02:33:07Z","title":"Chain-of-Thought Prompting Elicits Reasoning in Large Language Models","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2201.11903","snapshot_observed_at":"2026-08-06T19:29:52.818079Z","title":"Chain-of-thought prompting elicits reasoning in large language models,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.05445","last_updated":"2025-07-07T19:50:21Z","snapshot_observed_at":"2026-08-06T19:23:54.638215Z","submitted_at":"2025-07-07T19:50:21Z","title":"A Systematization of Security Vulnerabilities in Computer Use Agents","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-06T19:29:52.818079Z"},"links":{"cited_paper":"/paper/2201.11903","citing_paper":"/paper/2507.05445"},"observation_digest":"sha256:596b5b6e1ed60b9019ee9ce0998363acd3b2738b02656d66cd4051a0c5f27cba","observation_id":"5638b48c-59fa-44dc-b712-2d22af042eaf","resolution":{"observed_at":"2026-08-06T19:29:52.818079Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2501.12948","last_updated":"2026-01-04T03:57:36Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-01-22T15:19:35Z","title":"DeepSeek-R1: Incentivizing Reasoning Capability in LLMs via Reinforcement Learning","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.12948","snapshot_observed_at":"2026-08-06T19:29:52.931899Z","title":"Deepseek-r1: Incentivizing reasoning capability in llms via reinforcement learning,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.05445","last_updated":"2025-07-07T19:50:21Z","snapshot_observed_at":"2026-08-06T19:23:54.638215Z","submitted_at":"2025-07-07T19:50:21Z","title":"A Systematization of Security Vulnerabilities in Computer Use Agents","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-06T19:29:52.931899Z"},"links":{"cited_paper":"/paper/2501.12948","citing_paper":"/paper/2507.05445"},"observation_digest":"sha256:05cb4853a7153bcedb60c590ce7e9957b4238d2239d4e1f2551aa5ddc76cb63d","observation_id":"a89e7da2-0fcd-4f3b-9963-83564f8a3383","resolution":{"observed_at":"2026-08-06T19:29:52.931899Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.13919","last_updated":"2024-06-06T18:37:34Z","snapshot_observed_at":"2026-07-06T17:20:11.913242Z","submitted_at":"2024-01-25T03:33:18Z","title":"WebVoyager: Building an End-to-End Web Agent with Large Multimodal Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.13919","snapshot_observed_at":"2026-08-06T19:29:53.054555Z","title":"Webvoyager: Building an end-to-end web agent with large multimodal models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.05445","last_updated":"2025-07-07T19:50:21Z","snapshot_observed_at":"2026-08-06T19:23:54.638215Z","submitted_at":"2025-07-07T19:50:21Z","title":"A Systematization of Security Vulnerabilities in Computer Use Agents","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-06T19:29:53.054555Z"},"links":{"cited_paper":"/paper/2401.13919","citing_paper":"/paper/2507.05445"},"observation_digest":"sha256:4f0ca3eba65ee9c4c4c2740924ec2bb4de407d63f1417884bcf341de53a24b59","observation_id":"8e51e3a2-faff-41f9-8f52-95feb05b7748","resolution":{"observed_at":"2026-08-06T19:29:53.054555Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.09346","last_updated":"2024-05-22T17:17:03Z","snapshot_observed_at":"2026-07-06T17:30:08.206972Z","submitted_at":"2024-02-14T17:49:31Z","title":"LLMAuditor: A Framework for Auditing Large Language Models Using Human-in-the-Loop","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.09346","snapshot_observed_at":"2026-08-06T19:29:53.202993Z","title":"Llmauditor: A framework for auditing large language models using human-in-the-loop,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.05445","last_updated":"2025-07-07T19:50:21Z","snapshot_observed_at":"2026-08-06T19:23:54.638215Z","submitted_at":"2025-07-07T19:50:21Z","title":"A Systematization of Security Vulnerabilities in Computer Use Agents","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-06T19:29:53.202993Z"},"links":{"cited_paper":"/paper/2402.09346","citing_paper":"/paper/2507.05445"},"observation_digest":"sha256:ba0239b862f52bc077628c4fb2d30d2c4b5bc2a8ff984c3ec03a71a68bb54e0e","observation_id":"3e3c3894-2598-4393-8ac4-428333da0efa","resolution":{"observed_at":"2026-08-06T19:29:53.202993Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:29:55.950181Z","title":"Preventing ai hallucinations with human-in-the-loop test- ing,","venue":null,"work_id":"736cb06c-d006-4770-85fc-20ff82aed493","year":2024},"citing_paper":{"arxiv_id":"2507.05445","last_updated":"2025-07-07T19:50:21Z","snapshot_observed_at":"2026-08-06T19:23:54.638215Z","submitted_at":"2025-07-07T19:50:21Z","title":"A Systematization of Security Vulnerabilities in Computer Use Agents","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-06T19:29:53.310524Z"},"links":{"citing_paper":"/paper/2507.05445"},"observation_digest":"sha256:4e3523c6f68a9ceb462a354676704f702d86a384f907b29e08f9c84461b3bec7","observation_id":"f77d285a-97a6-4c6e-b9e7-743a42db37f3","resolution":{"observed_at":"2026-08-06T19:29:56.084386Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:29:55.656664Z","title":"Reducing hallucinations in large language models with custom intervention using amazon bedrock agents,","venue":null,"work_id":"645f5464-0d9c-40da-b8c1-b67f1d7d7500","year":2024},"citing_paper":{"arxiv_id":"2507.05445","last_updated":"2025-07-07T19:50:21Z","snapshot_observed_at":"2026-08-06T19:23:54.638215Z","submitted_at":"2025-07-07T19:50:21Z","title":"A Systematization of Security Vulnerabilities in Computer Use Agents","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-06T19:29:53.418006Z"},"links":{"citing_paper":"/paper/2507.05445"},"observation_digest":"sha256:30558e745c61d07bf9f8d4055fa50f1eca702408f63afb1017b20a5bb91d9dd1","observation_id":"5855dcb5-14eb-414a-8cb3-09c250c74116","resolution":{"observed_at":"2026-08-06T19:29:55.816777Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:29:55.359162Z","title":"Prompt injection attacks in multimodal and tool-augmented language models,","venue":null,"work_id":"8ee9a4d7-ffec-4504-8b81-f0a03419854b","year":2024},"citing_paper":{"arxiv_id":"2507.05445","last_updated":"2025-07-07T19:50:21Z","snapshot_observed_at":"2026-08-06T19:23:54.638215Z","submitted_at":"2025-07-07T19:50:21Z","title":"A Systematization of Security Vulnerabilities in Computer Use Agents","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-06T19:29:53.579676Z"},"links":{"citing_paper":"/paper/2507.05445"},"observation_digest":"sha256:2bbf4edf4090c332afaa035daa9abd4239f228fd1a40b38934da803aeef809fa","observation_id":"c7df287c-8d36-434a-9a8a-ba965ec6cfb5","resolution":{"observed_at":"2026-08-06T19:29:55.488803Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:29:55.075529Z","title":"”human in the loop","venue":null,"work_id":"50198776-72e4-4d7e-a2fb-3e6ac68a6ff6","year":2024},"citing_paper":{"arxiv_id":"2507.05445","last_updated":"2025-07-07T19:50:21Z","snapshot_observed_at":"2026-08-06T19:23:54.638215Z","submitted_at":"2025-07-07T19:50:21Z","title":"A Systematization of Security Vulnerabilities in Computer Use Agents","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-06T19:29:53.742996Z"},"links":{"citing_paper":"/paper/2507.05445"},"observation_digest":"sha256:2c998543a671d0c3d0e9145551f48616f7ca47089aebd0b35a53c6ca0c9dcb98","observation_id":"a1502e58-5060-4b25-976a-98be8d422714","resolution":{"observed_at":"2026-08-06T19:29:55.202558Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:29:54.795247Z","title":"From object transition to rce in the chrome renderer,","venue":null,"work_id":"933f3c10-410c-448d-88b3-acec04b70e7f","year":2024},"citing_paper":{"arxiv_id":"2507.05445","last_updated":"2025-07-07T19:50:21Z","snapshot_observed_at":"2026-08-06T19:23:54.638215Z","submitted_at":"2025-07-07T19:50:21Z","title":"A Systematization of Security Vulnerabilities in Computer Use Agents","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-06T19:29:53.901317Z"},"links":{"citing_paper":"/paper/2507.05445"},"observation_digest":"sha256:a306fcee81c561deb930b9dd07950a965df9b4b3f44bda0f0ce086626c8b99fc","observation_id":"339e9d24-e2e9-4b75-81ec-740c43044e29","resolution":{"observed_at":"2026-08-06T19:29:54.916401Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:29:54.536667Z","title":"Announcing the responses api and computer using agent in azure ai foundry,","venue":null,"work_id":"5323fd57-de98-4fcc-84b0-9eb1ec22a741","year":2024},"citing_paper":{"arxiv_id":"2507.05445","last_updated":"2025-07-07T19:50:21Z","snapshot_observed_at":"2026-08-06T19:23:54.638215Z","submitted_at":"2025-07-07T19:50:21Z","title":"A Systematization of Security Vulnerabilities in Computer Use Agents","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-06T19:29:54.026039Z"},"links":{"citing_paper":"/paper/2507.05445"},"observation_digest":"sha256:bbd5a074c77027d618e02886f830b2f0f34f29c7933088428956c3afb7b0fcdd","observation_id":"92b5b938-5ae6-4d55-9d23-57d54fcf9108","resolution":{"observed_at":"2026-08-06T19:29:54.660640Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2507.05445","last_updated":"2025-07-07T19:50:21Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-06T19:23:54.638215Z","submitted_at":"2025-07-07T19:50:21Z","title":"A Systematization of Security Vulnerabilities in Computer Use Agents"},"reference_resolution":{"displayed":21,"state_counts":{"malformed_identifier":0,"metadata_mismatch":1,"parse_uncertain":0,"unresolved":9,"verified_exact":0,"verified_fuzzy":11},"total_outbound_references":21},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"thesis":"As of 7 August 2026, this Paper Citation Record lists 21 of 21 outbound references and 4 inbound Pith citation observations for arXiv:2507.05445."}