{"as_of":"2026-08-07T05:47:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:4ef2e566a0eac441e4a6abde90b093ce6b6b19a3ae23eb79d6d0c9dd1bc76254","coverage":[{"denominator":59,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":59,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T19:12:25.287588Z","state":"measured"},{"denominator":63,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":63,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-06T06:34:29.942622+00:00","state":"measured"},{"denominator":4,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":4,"source":"paper_references, paper_reference_links","source_observed_at":"2026-06-30T16:22:23.857438Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":1,"source":"arxiv_reference","source_observed_at":"2026-08-05T02:28:24.338817Z","state":"measured"}],"external_citation_measurements":[{"count":0,"observed_at":"2026-08-05T02:28:24.338817Z","source":"arxiv_reference"}],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2507.06323","last_updated":"2025-07-08T18:24:28Z","snapshot_observed_at":"2026-08-06T19:05:12.143746Z","submitted_at":"2025-07-08T18:24:28Z","title":"Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms","version":1},"cited_work":{"arxiv_id":"2507.06323","doi":"10.48550/arxiv.2507.06323","metadata_source":"arxiv_reference","pith_arxiv_id":"2507.06323","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Bridging ai and software security: A comparative vulnerability assessment of llm agent deployment paradigms","venue":"ArXiv.org","work_id":"997a9b40-9315-4aac-a047-de9e674e2ce6","year":2025},"citing_paper":{"arxiv_id":"2603.09002","last_updated":"2026-04-26T14:13:48Z","snapshot_observed_at":"2026-07-06T22:48:26.306802Z","submitted_at":"2026-03-09T22:46:27Z","title":"Security Considerations for Multi-agent Systems","version":2},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-05-15T14:12:14.160789Z"},"links":{"cited_paper":"/paper/2507.06323","citing_paper":"/paper/2603.09002"},"observation_digest":"sha256:f5088391eaf25e116e6c22926bb8fd5f3dc3572d41eba85519fa0780c4bfff32","observation_id":"924101e4-0ab0-4a3a-9abd-6f8b927b4c61","resolution":{"observed_at":"2026-05-15T14:15:55.149878Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.06323","last_updated":"2025-07-08T18:24:28Z","snapshot_observed_at":"2026-08-06T19:05:12.143746Z","submitted_at":"2025-07-08T18:24:28Z","title":"Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms","version":1},"cited_work":{"arxiv_id":"2507.06323","doi":"10.48550/arxiv.2507.06323","metadata_source":"arxiv_reference","pith_arxiv_id":"2507.06323","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Bridging ai and software security: A comparative vulnerability assessment of llm agent deployment paradigms","venue":"ArXiv.org","work_id":"997a9b40-9315-4aac-a047-de9e674e2ce6","year":2025},"citing_paper":{"arxiv_id":"2604.07551","last_updated":"2026-04-08T19:53:26Z","snapshot_observed_at":"2026-07-06T22:55:46.307881Z","submitted_at":"2026-04-08T19:53:26Z","title":"MCP-DPT: A Defense-Placement Taxonomy and Coverage Analysis for Model Context Protocol Security","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-05-10T17:10:50.283791Z"},"links":{"cited_paper":"/paper/2507.06323","citing_paper":"/paper/2604.07551"},"observation_digest":"sha256:3e749bf7e56c3a0413b47fec4bb19d4e671cc47a52fd0405719748506d619b59","observation_id":"ea9ee587-932a-4b72-8c3a-0561cc5184bd","resolution":{"observed_at":"2026-05-10T21:10:46.776527Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.06323","last_updated":"2025-07-08T18:24:28Z","snapshot_observed_at":"2026-08-06T19:05:12.143746Z","submitted_at":"2025-07-08T18:24:28Z","title":"Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms","version":1},"cited_work":{"arxiv_id":"2507.06323","doi":"10.48550/arxiv.2507.06323","metadata_source":"arxiv_reference","pith_arxiv_id":"2507.06323","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Bridging ai and software security: A comparative vulnerability assessment of llm agent deployment paradigms","venue":"ArXiv.org","work_id":"997a9b40-9315-4aac-a047-de9e674e2ce6","year":2025},"citing_paper":{"arxiv_id":"2604.20179","last_updated":"2026-04-22T04:50:48Z","snapshot_observed_at":"2026-08-05T12:23:29.421477Z","submitted_at":"2026-04-22T04:50:48Z","title":"Taint-Style Vulnerability Detection and Confirmation for Node.js Packages Using LLM Agent Reasoning","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-05-10T00:56:42.767929Z"},"links":{"cited_paper":"/paper/2507.06323","citing_paper":"/paper/2604.20179"},"observation_digest":"sha256:dfa4beac7bfe277c97d9fc0a112d30ef995a32765a783f37c35003799792dd6d","observation_id":"e2c16454-fe69-4978-a19e-ee75efcac0f0","resolution":{"observed_at":"2026-05-10T00:59:49.651726Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.06323","last_updated":"2025-07-08T18:24:28Z","snapshot_observed_at":"2026-08-06T19:05:12.143746Z","submitted_at":"2025-07-08T18:24:28Z","title":"Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms","version":1},"cited_work":{"arxiv_id":"2507.06323","doi":"10.48550/arxiv.2507.06323","metadata_source":"arxiv_reference","pith_arxiv_id":"2507.06323","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Bridging ai and software security: A comparative vulnerability assessment of llm agent deployment paradigms","venue":"ArXiv.org","work_id":"997a9b40-9315-4aac-a047-de9e674e2ce6","year":2025},"citing_paper":{"arxiv_id":"2605.24069","last_updated":"2026-05-22T08:34:48Z","snapshot_observed_at":"2026-08-02T10:17:43.608511Z","submitted_at":"2026-05-22T08:34:48Z","title":"When the Manual Lies: A Realistic Benchmark to Evaluate MCP Poisoning Attacks for LLM Agents","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-06-30T16:22:23.857438Z"},"links":{"cited_paper":"/paper/2507.06323","citing_paper":"/paper/2605.24069"},"observation_digest":"sha256:89c3cff97d0b2794b5e1d2003b6e7abb3d74b93d304037f74f952eb4574f8fec","observation_id":"f4860675-e085-447a-9f07-a689cd75cd1f","resolution":{"observed_at":"2026-06-30T16:24:55.174155Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2507.06323/citation-record","integrity":"/paper/2507.06323/integrity","json":"/paper/2507.06323/citation-record.json","paper":"/paper/2507.06323"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:12:31.813187Z","title":"Chain-of- thought prompting elicits reasoning in large language models,","venue":null,"work_id":"c2f34195-d964-4739-853d-d904a2ca7ae3","year":2022},"citing_paper":{"arxiv_id":"2507.06323","last_updated":"2025-07-08T18:24:28Z","snapshot_observed_at":"2026-08-06T19:05:12.143746Z","submitted_at":"2025-07-08T18:24:28Z","title":"Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-06T19:12:22.794115Z"},"links":{"citing_paper":"/paper/2507.06323"},"observation_digest":"sha256:0b99f39a4f8fd46158871434812e03d3dfc6bb8ea2f16e745f81ad2d88236ee5","observation_id":"dc585828-52c2-4e24-b44c-f38069accc36","resolution":{"observed_at":"2026-08-06T19:12:31.823365Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:12:31.778315Z","title":"A survey on large language model based autonomous agents,","venue":null,"work_id":"497e6c9e-073a-44d2-976b-75286b1250fd","year":2024},"citing_paper":{"arxiv_id":"2507.06323","last_updated":"2025-07-08T18:24:28Z","snapshot_observed_at":"2026-08-06T19:05:12.143746Z","submitted_at":"2025-07-08T18:24:28Z","title":"Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-06T19:12:22.800709Z"},"links":{"citing_paper":"/paper/2507.06323"},"observation_digest":"sha256:8c6edb6a44c81b200a944184e4864ba01013fdc3d5c69ecc3a84442cfeee8c3b","observation_id":"8a83cbae-e6e1-4bf7-b41c-ca7f2f374239","resolution":{"observed_at":"2026-08-06T19:12:31.787972Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:12:31.726731Z","title":"The rise and potential of large language model based agents: A survey,","venue":null,"work_id":"efaf3eb6-3625-4322-8133-f1254fef9e95","year":2025},"citing_paper":{"arxiv_id":"2507.06323","last_updated":"2025-07-08T18:24:28Z","snapshot_observed_at":"2026-08-06T19:05:12.143746Z","submitted_at":"2025-07-08T18:24:28Z","title":"Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-06T19:12:22.805840Z"},"links":{"citing_paper":"/paper/2507.06323"},"observation_digest":"sha256:515e139fae498228fddb587b228ca43f5ddb2d74f8c84d239291808768a78acc","observation_id":"4b80b2ae-3ea3-48b9-b910-34a72a1b7620","resolution":{"observed_at":"2026-08-06T19:12:31.744000Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:12:31.681590Z","title":"Llm- based agentic systems in medicine and healthcare,","venue":null,"work_id":"a0c6baad-a884-419f-9202-67c45fb6d9f6","year":2024},"citing_paper":{"arxiv_id":"2507.06323","last_updated":"2025-07-08T18:24:28Z","snapshot_observed_at":"2026-08-06T19:05:12.143746Z","submitted_at":"2025-07-08T18:24:28Z","title":"Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-06T19:12:22.811754Z"},"links":{"citing_paper":"/paper/2507.06323"},"observation_digest":"sha256:fabcb9e5d13df9937110f2145009b920ad7bd863af31226dcac9beeb9bcbbfdc","observation_id":"d7f66e71-0099-4cf2-ae28-58c4040a5f4c","resolution":{"observed_at":"2026-08-06T19:12:31.690977Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:12:31.639053Z","title":"Trends of ai in financial services and its applications,","venue":null,"work_id":"0cf671a7-baa8-40fb-ac94-2d223d6b7a22","year":2025},"citing_paper":{"arxiv_id":"2507.06323","last_updated":"2025-07-08T18:24:28Z","snapshot_observed_at":"2026-08-06T19:05:12.143746Z","submitted_at":"2025-07-08T18:24:28Z","title":"Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-06T19:12:22.817276Z"},"links":{"citing_paper":"/paper/2507.06323"},"observation_digest":"sha256:7a783764e2a182b3ab7ca436c155999400fa30b006f894988bb138053a68bfbf","observation_id":"ae352158-f003-4de5-b2a7-bc06bb9535d4","resolution":{"observed_at":"2026-08-06T19:12:31.647606Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:12:31.594354Z","title":"Guardrails for large language models: A review of techniques and challenges,","venue":null,"work_id":"d475c401-7b59-47c8-8fb1-c2a44fa2d00b","year":2025},"citing_paper":{"arxiv_id":"2507.06323","last_updated":"2025-07-08T18:24:28Z","snapshot_observed_at":"2026-08-06T19:05:12.143746Z","submitted_at":"2025-07-08T18:24:28Z","title":"Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-06T19:12:22.823209Z"},"links":{"citing_paper":"/paper/2507.06323"},"observation_digest":"sha256:e8c543c910ac972c6cd13c7de5aabb8ac6b0242a00273d34da7a9cadf7833848","observation_id":"f3025e86-7422-47ba-986b-96f285317b3c","resolution":{"observed_at":"2026-08-06T19:12:31.610482Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:12:31.539329Z","title":"Superagency in the workplace: Empowering people to unlock ai’s full potential,","venue":null,"work_id":"a8ca625d-dd22-4e01-95a1-99a44b3a5a4d","year":2025},"citing_paper":{"arxiv_id":"2507.06323","last_updated":"2025-07-08T18:24:28Z","snapshot_observed_at":"2026-08-06T19:05:12.143746Z","submitted_at":"2025-07-08T18:24:28Z","title":"Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-06T19:12:22.829839Z"},"links":{"citing_paper":"/paper/2507.06323"},"observation_digest":"sha256:902470e9269b3635cb91aaa72460952d84e5e6f68637b6ccde34a215bec04675","observation_id":"194cb6a6-cc8c-4c3c-b7f0-26ab9562aff9","resolution":{"observed_at":"2026-08-06T19:12:31.563666Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2409.00608","last_updated":"2024-10-25T01:16:55Z","snapshot_observed_at":"2026-07-06T19:08:48.648862Z","submitted_at":"2024-09-01T04:23:48Z","title":"TinyAgent: Function Calling at the Edge","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.00608","snapshot_observed_at":"2026-08-06T19:12:22.835647Z","title":"Tinyagent: Function calling at the edge,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.06323","last_updated":"2025-07-08T18:24:28Z","snapshot_observed_at":"2026-08-06T19:05:12.143746Z","submitted_at":"2025-07-08T18:24:28Z","title":"Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-06T19:12:22.835647Z"},"links":{"cited_paper":"/paper/2409.00608","citing_paper":"/paper/2507.06323"},"observation_digest":"sha256:15555db062c9eb97c46104668902e39ee1b83f06b86fd628478ed889cf68d30f","observation_id":"6dddc414-a94f-48d3-b476-5213ee8ce759","resolution":{"observed_at":"2026-08-06T19:12:22.835647Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:12:31.488581Z","title":"An llm compiler for parallel function calling,","venue":null,"work_id":"1d412f8f-48de-476a-9100-b733fb4c485b","year":2024},"citing_paper":{"arxiv_id":"2507.06323","last_updated":"2025-07-08T18:24:28Z","snapshot_observed_at":"2026-08-06T19:05:12.143746Z","submitted_at":"2025-07-08T18:24:28Z","title":"Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-06T19:12:22.843560Z"},"links":{"citing_paper":"/paper/2507.06323"},"observation_digest":"sha256:4821baecdc7132cbe408480cf658a45d9e61861686f4d357a4d185d681bd2529","observation_id":"0acf3b10-8967-4569-9e1b-43aace7af954","resolution":{"observed_at":"2026-08-06T19:12:31.502797Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:12:31.454396Z","title":"Microsoft copilot and anthropic claude ai in education and library service,","venue":null,"work_id":"3df52c19-39a1-475f-b285-33fcf4116492","year":2024},"citing_paper":{"arxiv_id":"2507.06323","last_updated":"2025-07-08T18:24:28Z","snapshot_observed_at":"2026-08-06T19:05:12.143746Z","submitted_at":"2025-07-08T18:24:28Z","title":"Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-06T19:12:22.853395Z"},"links":{"citing_paper":"/paper/2507.06323"},"observation_digest":"sha256:1a1dc04faf29b202fb0a7fdc804083e54ecb06cf4fff0fa612d827208ff3a6f9","observation_id":"11684f3e-eed5-4124-9ff1-cf754ac496e1","resolution":{"observed_at":"2026-08-06T19:12:31.467522Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2503.23278","last_updated":"2025-10-07T07:13:32Z","snapshot_observed_at":"2026-07-06T21:00:55.979837Z","submitted_at":"2025-03-30T01:58:22Z","title":"Model Context Protocol (MCP): Landscape, Security Threats, and Future Research Directions","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.23278","snapshot_observed_at":"2026-08-06T19:12:22.866264Z","title":"Model context protocol (mcp): Landscape, security threats, and future research directions,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.06323","last_updated":"2025-07-08T18:24:28Z","snapshot_observed_at":"2026-08-06T19:05:12.143746Z","submitted_at":"2025-07-08T18:24:28Z","title":"Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-06T19:12:22.866264Z"},"links":{"cited_paper":"/paper/2503.23278","citing_paper":"/paper/2507.06323"},"observation_digest":"sha256:47d97560b746cc7afc014bed85b392dc7231211c4807f35b9d3107e2a6dd1a33","observation_id":"b4aeb1b6-42d4-49fd-8e36-9a8ec02dfdae","resolution":{"observed_at":"2026-08-06T19:12:22.866264Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04957","last_updated":"2024-03-07T23:46:20Z","snapshot_observed_at":"2026-07-06T17:41:19.171822Z","submitted_at":"2024-03-07T23:46:20Z","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.04957","snapshot_observed_at":"2026-08-06T19:12:22.873103Z","title":"Automatic and universal prompt injection attacks against large language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.06323","last_updated":"2025-07-08T18:24:28Z","snapshot_observed_at":"2026-08-06T19:05:12.143746Z","submitted_at":"2025-07-08T18:24:28Z","title":"Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-06T19:12:22.873103Z"},"links":{"cited_paper":"/paper/2403.04957","citing_paper":"/paper/2507.06323"},"observation_digest":"sha256:f78e3d44435d224beb99063f611e998cbad0fa40a1ede36d70f5794503a2a288","observation_id":"4941f215-fcae-4a57-a01e-eb1d0761141e","resolution":{"observed_at":"2026-08-06T19:12:22.873103Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:12:31.426395Z","title":"Jailbreaking black box large language models in twenty queries,","venue":null,"work_id":"8d63069c-3c12-4aac-bf32-33558b2107f4","year":2025},"citing_paper":{"arxiv_id":"2507.06323","last_updated":"2025-07-08T18:24:28Z","snapshot_observed_at":"2026-08-06T19:05:12.143746Z","submitted_at":"2025-07-08T18:24:28Z","title":"Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-06T19:12:22.880058Z"},"links":{"citing_paper":"/paper/2507.06323"},"observation_digest":"sha256:5d872b4b0770275685abe93b0734fc783a474371e48a83068f71d4d2a0799ada","observation_id":"4f38b878-edae-449d-b926-42a765313f50","resolution":{"observed_at":"2026-08-06T19:12:31.434731Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.18889","last_updated":"2025-08-24T03:15:13Z","snapshot_observed_at":"2026-07-06T21:29:55.740715Z","submitted_at":"2025-05-24T22:22:43Z","title":"Security Concerns for Large Language Models: A Survey","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.18889","snapshot_observed_at":"2026-08-06T19:12:22.885999Z","title":"Security concerns for large language models: A survey,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.06323","last_updated":"2025-07-08T18:24:28Z","snapshot_observed_at":"2026-08-06T19:05:12.143746Z","submitted_at":"2025-07-08T18:24:28Z","title":"Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-06T19:12:22.885999Z"},"links":{"cited_paper":"/paper/2505.18889","citing_paper":"/paper/2507.06323"},"observation_digest":"sha256:cde01d4412d649471ed306a27e328dedcbcf59986fdf89a68804b88a1b1da7d0","observation_id":"2ee4e6f2-7cd7-497b-b623-98bf6ffa8b58","resolution":{"observed_at":"2026-08-06T19:12:22.885999Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.02691","last_updated":"2024-08-04T04:52:35Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-03-05T06:21:45Z","title":"InjecAgent: Benchmarking Indirect Prompt Injections in Tool-Integrated Large Language Model Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.02691","snapshot_observed_at":"2026-08-06T19:12:22.895677Z","title":"Injecagent: Benchmarking indirect prompt injections in tool-integrated large language model agents,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.06323","last_updated":"2025-07-08T18:24:28Z","snapshot_observed_at":"2026-08-06T19:05:12.143746Z","submitted_at":"2025-07-08T18:24:28Z","title":"Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-06T19:12:22.895677Z"},"links":{"cited_paper":"/paper/2403.02691","citing_paper":"/paper/2507.06323"},"observation_digest":"sha256:422f848e156bd0b7ee03f6d821e34d992081f3b4ddaf27ca989707c4fdcb8d20","observation_id":"1e485ce9-9a34-46ae-93d7-3f75e51899f3","resolution":{"observed_at":"2026-08-06T19:12:22.895677Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:12:31.399446Z","title":"Agent- dojo: A dynamic environment to evaluate prompt injection attacks and defenses for llm agents,","venue":null,"work_id":"135e8d40-6542-458a-b2cf-c854c6447453","year":2024},"citing_paper":{"arxiv_id":"2507.06323","last_updated":"2025-07-08T18:24:28Z","snapshot_observed_at":"2026-08-06T19:05:12.143746Z","submitted_at":"2025-07-08T18:24:28Z","title":"Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-06T19:12:22.905424Z"},"links":{"citing_paper":"/paper/2507.06323"},"observation_digest":"sha256:25aadd3e29d9ab8b4f05854cf2eab76bcbe99ce3687c9259e5e7340232370d6d","observation_id":"dc4d3fcb-9ff1-48bd-a580-d292c5cbe81d","resolution":{"observed_at":"2026-08-06T19:12:31.407797Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.06674","last_updated":"2023-12-07T19:40:50Z","snapshot_observed_at":"2026-07-06T17:00:00.321552Z","submitted_at":"2023-12-07T19:40:50Z","title":"Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversations","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.06674","snapshot_observed_at":"2026-08-06T19:12:22.912261Z","title":"Llama guard: Llm-based input-output safeguard for human-ai conversations,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.06323","last_updated":"2025-07-08T18:24:28Z","snapshot_observed_at":"2026-08-06T19:05:12.143746Z","submitted_at":"2025-07-08T18:24:28Z","title":"Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-06T19:12:22.912261Z"},"links":{"cited_paper":"/paper/2312.06674","citing_paper":"/paper/2507.06323"},"observation_digest":"sha256:0d192824fe980ea462c2d26491a2e27dafee9a4d3510fbdddee180cbc0dbf714","observation_id":"d70c4c11-6f58-4a53-84d6-f1905a37804f","resolution":{"observed_at":"2026-08-06T19:12:22.912261Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2210.03629","last_updated":"2023-03-10T01:00:17Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2022-10-06T01:00:32Z","title":"ReAct: Synergizing Reasoning and Acting in Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2210.03629","snapshot_observed_at":"2026-08-06T19:12:22.923937Z","title":"React: Synergizing reasoning and acting in language models, 2023,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.06323","last_updated":"2025-07-08T18:24:28Z","snapshot_observed_at":"2026-08-06T19:05:12.143746Z","submitted_at":"2025-07-08T18:24:28Z","title":"Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-06T19:12:22.923937Z"},"links":{"cited_paper":"/paper/2210.03629","citing_paper":"/paper/2507.06323"},"observation_digest":"sha256:e28160a54bde105c7f4eec4f4bf5f64eab100e923453a685d90c33dbff865a10","observation_id":"e6feb5b5-c997-49a9-b090-13f7ab1e35c7","resolution":{"observed_at":"2026-08-06T19:12:22.923937Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.12773","last_updated":"2023-10-19T14:22:03Z","snapshot_observed_at":"2026-08-02T16:56:38.535065Z","submitted_at":"2023-10-19T14:22:03Z","title":"Safe RLHF: Safe Reinforcement Learning from Human Feedback","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.12773","snapshot_observed_at":"2026-08-06T19:12:22.932742Z","title":"Safe rlhf: Safe reinforce- ment learning from human feedback,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.06323","last_updated":"2025-07-08T18:24:28Z","snapshot_observed_at":"2026-08-06T19:05:12.143746Z","submitted_at":"2025-07-08T18:24:28Z","title":"Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-06T19:12:22.932742Z"},"links":{"cited_paper":"/paper/2310.12773","citing_paper":"/paper/2507.06323"},"observation_digest":"sha256:3bb1e5894372716446361d5a2ce8b6cd791a005b26aac153bc35ff1281ef24a8","observation_id":"fb1fea16-61ed-42a0-94e1-fdea8e0a6110","resolution":{"observed_at":"2026-08-06T19:12:22.932742Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2409.11393","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:12:26.259917Z","title":"Llm-agent-umf: Llm-based agent unified mod- eling framework for seamless integration of multi active/passive core-agents,","venue":null,"work_id":"ddba77b8-d88e-4f66-a8b5-1aafc21b989e","year":2024},"citing_paper":{"arxiv_id":"2507.06323","last_updated":"2025-07-08T18:24:28Z","snapshot_observed_at":"2026-08-06T19:05:12.143746Z","submitted_at":"2025-07-08T18:24:28Z","title":"Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-06T19:12:22.942177Z"},"links":{"citing_paper":"/paper/2507.06323"},"observation_digest":"sha256:ab2c8b758e8bf07a1fd93209114550a0ffbd6843aca95a510cba4e4a18b76786","observation_id":"a8ef2939-ae65-48a3-acb7-4b158638467e","resolution":{"observed_at":"2026-08-06T19:12:26.332412Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-07-06T15:59:23.019044Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-08-06T19:12:22.950253Z","title":"Universal and transferable adversarial attacks on aligned language models, 2023,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.06323","last_updated":"2025-07-08T18:24:28Z","snapshot_observed_at":"2026-08-06T19:05:12.143746Z","submitted_at":"2025-07-08T18:24:28Z","title":"Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-06T19:12:22.950253Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2507.06323"},"observation_digest":"sha256:87f632fa40d4a952481882a6c8ebd7bb98c54a4ef6a4f3a75054c3f021ce6f2c","observation_id":"81543be5-060c-4908-a8f5-81c9cc76f904","resolution":{"observed_at":"2026-08-06T19:12:22.950253Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:12:31.367070Z","title":"A comprehensive overview of backdoor attacks in large language models within communication networks,","venue":null,"work_id":"b8aa7f93-bf6a-43f5-af58-c266a2bf4888","year":2024},"citing_paper":{"arxiv_id":"2507.06323","last_updated":"2025-07-08T18:24:28Z","snapshot_observed_at":"2026-08-06T19:05:12.143746Z","submitted_at":"2025-07-08T18:24:28Z","title":"Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-06T19:12:22.960319Z"},"links":{"citing_paper":"/paper/2507.06323"},"observation_digest":"sha256:164014bc704ea784edff90f4972719a9b1eff62097310c22fb43923300564436","observation_id":"74246ff1-e740-49a5-b501-4da057e9398f","resolution":{"observed_at":"2026-08-06T19:12:31.373124Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:12:31.341862Z","title":"Large language model supply chain: Open prob- lems from the security perspective,","venue":null,"work_id":"e0b18e94-f577-426b-af3a-59682c77ed7c","year":2025},"citing_paper":{"arxiv_id":"2507.06323","last_updated":"2025-07-08T18:24:28Z","snapshot_observed_at":"2026-08-06T19:05:12.143746Z","submitted_at":"2025-07-08T18:24:28Z","title":"Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-06T19:12:22.966885Z"},"links":{"citing_paper":"/paper/2507.06323"},"observation_digest":"sha256:333aee8cb69734775b1b0fa178c773fcc320c479ecdd5021fe8bb0e892cf7b9e","observation_id":"69c0d81a-63c5-48c2-9ca0-2853767bbe8e","resolution":{"observed_at":"2026-08-06T19:12:31.352768Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2502.12497","last_updated":"2026-07-09T13:05:41Z","snapshot_observed_at":"2026-07-12T23:18:37.267136Z","submitted_at":"2025-02-18T03:22:38Z","title":"Demystifying LLM Supply Chain Vulnerabilities in the Wild: Distribution, Root Cause, and Real-World Impact","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.12497","snapshot_observed_at":"2026-08-06T19:12:22.978264Z","title":"Sok: Understanding vulnerabilities in the large language model supply chain,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.06323","last_updated":"2025-07-08T18:24:28Z","snapshot_observed_at":"2026-08-06T19:05:12.143746Z","submitted_at":"2025-07-08T18:24:28Z","title":"Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-06T19:12:22.978264Z"},"links":{"cited_paper":"/paper/2502.12497","citing_paper":"/paper/2507.06323"},"observation_digest":"sha256:ec8069d23accb3396606feaebaab677ae96ce0db46ae5dcdd575a7d0c5dd7c06","observation_id":"dd8f7104-56ce-4e61-99e2-8d72edd28033","resolution":{"observed_at":"2026-08-06T19:12:22.978264Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:12:31.124319Z","title":"Identifying and mitigating vulnerabilities in llm-integrated applications,","venue":null,"work_id":"55216656-d9b6-4141-925c-ff03cb412850","year":2024},"citing_paper":{"arxiv_id":"2507.06323","last_updated":"2025-07-08T18:24:28Z","snapshot_observed_at":"2026-08-06T19:05:12.143746Z","submitted_at":"2025-07-08T18:24:28Z","title":"Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-06T19:12:22.988649Z"},"links":{"citing_paper":"/paper/2507.06323"},"observation_digest":"sha256:348f01b6eb45bfcde7156f7f28c4f23e34c3646c47f1132d3b3830803a24045c","observation_id":"e8fc17fc-b3a3-4c49-a559-308b4e0e9750","resolution":{"observed_at":"2026-08-06T19:12:31.226795Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:12:30.912067Z","title":"Ifrah,Getting Started with Azure OpenAI: Deploying and Managing Azure AI and Azure OpenAI Solutions","venue":null,"work_id":"f574c636-e6c4-4022-aaf7-23ec76d2944d","year":2024},"citing_paper":{"arxiv_id":"2507.06323","last_updated":"2025-07-08T18:24:28Z","snapshot_observed_at":"2026-08-06T19:05:12.143746Z","submitted_at":"2025-07-08T18:24:28Z","title":"Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-06T19:12:23.006026Z"},"links":{"citing_paper":"/paper/2507.06323"},"observation_digest":"sha256:fb8000307bb79278fdd7618e2fb970364caa12aa600beba4e6efd856533052c3","observation_id":"6e5ecc03-9127-4ae6-94e1-2bf4f4114726","resolution":{"observed_at":"2026-08-06T19:12:30.988000Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:12:30.694295Z","title":"Model context protocol (mcp): Landscape, security threats, and future research directions,","venue":null,"work_id":"afcfbfd3-18d3-4cc1-b4ee-a71fb2cba541","year":2025},"citing_paper":{"arxiv_id":"2507.06323","last_updated":"2025-07-08T18:24:28Z","snapshot_observed_at":"2026-08-06T19:05:12.143746Z","submitted_at":"2025-07-08T18:24:28Z","title":"Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-06T19:12:23.031655Z"},"links":{"citing_paper":"/paper/2507.06323"},"observation_digest":"sha256:fadbd98b62985c264231f23859cdb4e01e39d17404c082a67afa19375df797c1","observation_id":"400f5e56-5de2-4c47-9c7d-e04aacab67da","resolution":{"observed_at":"2026-08-06T19:12:30.773330Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:12:30.497152Z","title":"A descriptive study of microsoft’s threat modeling technique,","venue":null,"work_id":"f78be741-19e6-49ba-ba87-d542df69f6f3","year":2015},"citing_paper":{"arxiv_id":"2507.06323","last_updated":"2025-07-08T18:24:28Z","snapshot_observed_at":"2026-08-06T19:05:12.143746Z","submitted_at":"2025-07-08T18:24:28Z","title":"Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-06T19:12:23.051483Z"},"links":{"citing_paper":"/paper/2507.06323"},"observation_digest":"sha256:075c13965e91e5cdb2872941e16c26e0ccb0ffef8a668cb61b9e334af950b0c2","observation_id":"f22b498b-48c8-4e0b-abb9-f6f194376336","resolution":{"observed_at":"2026-08-06T19:12:30.571742Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.19956","last_updated":"2025-05-02T18:42:42Z","snapshot_observed_at":"2026-07-06T21:15:54.445465Z","submitted_at":"2025-04-28T16:29:24Z","title":"Securing Agentic AI: A Comprehensive Threat Model and Mitigation Framework for Generative AI Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.19956","snapshot_observed_at":"2026-08-06T19:12:23.063124Z","title":"Securing agentic ai: A comprehensive threat model and mitigation framework for generative ai agents,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.06323","last_updated":"2025-07-08T18:24:28Z","snapshot_observed_at":"2026-08-06T19:05:12.143746Z","submitted_at":"2025-07-08T18:24:28Z","title":"Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-06T19:12:23.063124Z"},"links":{"cited_paper":"/paper/2504.19956","citing_paper":"/paper/2507.06323"},"observation_digest":"sha256:5d2ff2cb95b23d16825306710a63fb17365e46beef83b3ef62f55a45766e7221","observation_id":"5b0874b2-7f8d-43a0-b11c-7e937cc8cca1","resolution":{"observed_at":"2026-08-06T19:12:23.063124Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:12:30.293721Z","title":"Addressing bias in big data and ai for health care: A call for open science,","venue":null,"work_id":"b4c8122f-41f1-4dca-924b-538f934c2acc","year":2021},"citing_paper":{"arxiv_id":"2507.06323","last_updated":"2025-07-08T18:24:28Z","snapshot_observed_at":"2026-08-06T19:05:12.143746Z","submitted_at":"2025-07-08T18:24:28Z","title":"Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-06T19:12:23.078365Z"},"links":{"citing_paper":"/paper/2507.06323"},"observation_digest":"sha256:b336a94e75063bde1fe19d3798b765dba61e4fe9a5d82c4def9ec71fbda28f64","observation_id":"d191fb22-8070-4c5c-8299-e93c80fcb318","resolution":{"observed_at":"2026-08-06T19:12:30.361653Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:12:30.053255Z","title":"Technical guide to information security testing and assessment,","venue":null,"work_id":"2daf6341-6ed6-448f-b033-9a271e8e51fd","year":2008},"citing_paper":{"arxiv_id":"2507.06323","last_updated":"2025-07-08T18:24:28Z","snapshot_observed_at":"2026-08-06T19:05:12.143746Z","submitted_at":"2025-07-08T18:24:28Z","title":"Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-06T19:12:23.094325Z"},"links":{"citing_paper":"/paper/2507.06323"},"observation_digest":"sha256:ca426774ea17004c2bc8962220955ceab82443361906a9c322c46b25289da5a8","observation_id":"eeaecc3e-e835-432d-a9de-7898ce1d66a2","resolution":{"observed_at":"2026-08-06T19:12:30.198262Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:12:29.962709Z","title":"An introduction to information security,","venue":null,"work_id":"8eb2a68c-3003-444e-b50d-a24b8bbd1c4b","year":2017},"citing_paper":{"arxiv_id":"2507.06323","last_updated":"2025-07-08T18:24:28Z","snapshot_observed_at":"2026-08-06T19:05:12.143746Z","submitted_at":"2025-07-08T18:24:28Z","title":"Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-06T19:12:23.108525Z"},"links":{"citing_paper":"/paper/2507.06323"},"observation_digest":"sha256:aa0bf4f564ce3ec4754ee3dc7666d9b4299fa3d0eed25258aed9e7fe508388a8","observation_id":"ac5b0533-5d66-4209-996d-735e016d9949","resolution":{"observed_at":"2026-08-06T19:12:29.975453Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:12:29.735499Z","title":"A systematic litera- ture review and meta-analysis on artificial intelligence in penetration testing and vulnerability assessment,","venue":null,"work_id":"64675299-f897-428f-aa2a-1dd9ca3f3dd1","year":2019},"citing_paper":{"arxiv_id":"2507.06323","last_updated":"2025-07-08T18:24:28Z","snapshot_observed_at":"2026-08-06T19:05:12.143746Z","submitted_at":"2025-07-08T18:24:28Z","title":"Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-06T19:12:23.123523Z"},"links":{"citing_paper":"/paper/2507.06323"},"observation_digest":"sha256:bea255f5821e812da5f6daa5fa783d2553101e64118155531478a08b7b5e1f75","observation_id":"a1b6ad79-2689-441c-86d9-04112987e6b9","resolution":{"observed_at":"2026-08-06T19:12:29.823683Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:12:29.506464Z","title":"Large language model for vulnerability detection: Emerg- ing results and future directions,","venue":null,"work_id":"8a9b8d75-28aa-4651-a193-44f4a55cfc38","year":2024},"citing_paper":{"arxiv_id":"2507.06323","last_updated":"2025-07-08T18:24:28Z","snapshot_observed_at":"2026-08-06T19:05:12.143746Z","submitted_at":"2025-07-08T18:24:28Z","title":"Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-06T19:12:23.131316Z"},"links":{"citing_paper":"/paper/2507.06323"},"observation_digest":"sha256:e08624dc3cb3361e8c0c17c1cd81814d8fa1e286e49a14efbfacb40d1595fd94","observation_id":"67911943-6ad5-45f5-a073-fd4dc07e9c5d","resolution":{"observed_at":"2026-08-06T19:12:29.579281Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:12:29.324078Z","title":"Judging llm-as-a-judge with mt-bench and chatbot arena,","venue":null,"work_id":"46545688-9e7c-4a6f-b2fe-51d1f2f09485","year":2023},"citing_paper":{"arxiv_id":"2507.06323","last_updated":"2025-07-08T18:24:28Z","snapshot_observed_at":"2026-08-06T19:05:12.143746Z","submitted_at":"2025-07-08T18:24:28Z","title":"Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-06T19:12:23.138998Z"},"links":{"citing_paper":"/paper/2507.06323"},"observation_digest":"sha256:203ab8dc26769149475d749277535303bd7825490de5792228902ac9ced1f900","observation_id":"ced57e2d-97f7-488e-b21d-9101c6bd855c","resolution":{"observed_at":"2026-08-06T19:12:29.400998Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2303.16634","last_updated":"2023-05-23T22:12:16Z","snapshot_observed_at":"2026-08-02T04:02:36.848064Z","submitted_at":"2023-03-29T12:46:54Z","title":"G-Eval: NLG Evaluation using GPT-4 with Better Human Alignment","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.16634","snapshot_observed_at":"2026-08-06T19:12:23.243617Z","title":"G-eval: Nlg evaluation using gpt-4 with better human alignment,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.06323","last_updated":"2025-07-08T18:24:28Z","snapshot_observed_at":"2026-08-06T19:05:12.143746Z","submitted_at":"2025-07-08T18:24:28Z","title":"Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-06T19:12:23.243617Z"},"links":{"cited_paper":"/paper/2303.16634","citing_paper":"/paper/2507.06323"},"observation_digest":"sha256:17a01ede4f331462eb891aa6e9a0e58f37e0b79b396dec26764902a798eee23f","observation_id":"110afdba-9838-4a69-b7bb-e1a411fa62da","resolution":{"observed_at":"2026-08-06T19:12:23.243617Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:12:29.140329Z","title":"Cyber signals: Defending against cyber threats with the latest research, insights, and trends,","venue":null,"work_id":"3d842d6c-51c9-4434-806d-0d197809f0f6","year":2022},"citing_paper":{"arxiv_id":"2507.06323","last_updated":"2025-07-08T18:24:28Z","snapshot_observed_at":"2026-08-06T19:05:12.143746Z","submitted_at":"2025-07-08T18:24:28Z","title":"Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-06T19:12:23.312778Z"},"links":{"citing_paper":"/paper/2507.06323"},"observation_digest":"sha256:3f5ad250418e854bf82ecf900c08c5770c3cdb8e8abb2c6fcea9384f2d740a7d","observation_id":"1b24a2a4-48c0-4e73-b139-d981fadf8591","resolution":{"observed_at":"2026-08-06T19:12:29.193809Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:12:28.943678Z","title":"Enhancing security and scalability by ai/ml workload optimization in the cloud,","venue":null,"work_id":"fb42a4fb-30cd-4413-a618-07c3ba0dc8b9","year":2024},"citing_paper":{"arxiv_id":"2507.06323","last_updated":"2025-07-08T18:24:28Z","snapshot_observed_at":"2026-08-06T19:05:12.143746Z","submitted_at":"2025-07-08T18:24:28Z","title":"Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-06T19:12:23.431838Z"},"links":{"citing_paper":"/paper/2507.06323"},"observation_digest":"sha256:cde116829e9c05bf6fb4f4f3bdc7bbf3cf32322c1991901f65be5306bcab8ec3","observation_id":"d64bb768-d071-4aa0-ae2f-45aaebe1bf57","resolution":{"observed_at":"2026-08-06T19:12:29.046855Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2409.08751","last_updated":"2024-09-13T12:01:55Z","snapshot_observed_at":"2026-08-03T22:28:44.661281Z","submitted_at":"2024-09-13T12:01:55Z","title":"A Grading Rubric for AI Safety Frameworks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.08751","snapshot_observed_at":"2026-08-06T19:12:23.477658Z","title":"A grading rubric for ai safety frameworks,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.06323","last_updated":"2025-07-08T18:24:28Z","snapshot_observed_at":"2026-08-06T19:05:12.143746Z","submitted_at":"2025-07-08T18:24:28Z","title":"Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-06T19:12:23.477658Z"},"links":{"cited_paper":"/paper/2409.08751","citing_paper":"/paper/2507.06323"},"observation_digest":"sha256:79e62a1c70e1344c81b7d80788b5909a30610fd4e7b6931d59959610980ec0fe","observation_id":"4d709654-3fcc-4609-8f29-8950df6daced","resolution":{"observed_at":"2026-08-06T19:12:23.477658Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.00416","last_updated":"2025-03-01T09:32:17Z","snapshot_observed_at":"2026-07-06T20:44:49.893232Z","submitted_at":"2025-03-01T09:32:17Z","title":"Breaking the Loop: Detecting and Mitigating Denial-of-Service Vulnerabilities in Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.00416","snapshot_observed_at":"2026-08-06T19:12:23.584283Z","title":"Breaking the loop: Detecting and mitigating denial-of-service vulnerabilities in large language models,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.06323","last_updated":"2025-07-08T18:24:28Z","snapshot_observed_at":"2026-08-06T19:05:12.143746Z","submitted_at":"2025-07-08T18:24:28Z","title":"Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-06T19:12:23.584283Z"},"links":{"cited_paper":"/paper/2503.00416","citing_paper":"/paper/2507.06323"},"observation_digest":"sha256:b23c210b58704bb22e981bc4a7b2aa78a5db7575d4a297249624317457f3828b","observation_id":"0b7c81ad-5b12-4e7b-8545-2ac328f0991c","resolution":{"observed_at":"2026-08-06T19:12:23.584283Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04960","last_updated":"2025-01-30T22:55:18Z","snapshot_observed_at":"2026-08-06T11:42:59.851078Z","submitted_at":"2024-03-08T00:02:30Z","title":"IsolateGPT: An Execution Isolation Architecture for LLM-Based Agentic Systems","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.04960","snapshot_observed_at":"2026-08-06T19:12:23.664475Z","title":"Isolategpt: An execution isolation architecture for llm-based agentic systems,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.06323","last_updated":"2025-07-08T18:24:28Z","snapshot_observed_at":"2026-08-06T19:05:12.143746Z","submitted_at":"2025-07-08T18:24:28Z","title":"Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-06T19:12:23.664475Z"},"links":{"cited_paper":"/paper/2403.04960","citing_paper":"/paper/2507.06323"},"observation_digest":"sha256:21965e6ab753007f9b451493966f04c7053c859cc6e4242dcb63147f66575c6b","observation_id":"9d98ec79-afb2-4b6d-93cc-3883821e0c43","resolution":{"observed_at":"2026-08-06T19:12:23.664475Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:12:28.761616Z","title":"Agentic ai: Autonomous intelligence for complex goals–a comprehensive survey,","venue":null,"work_id":"bb98a8e9-877a-4771-a7fd-189f43220495","year":2025},"citing_paper":{"arxiv_id":"2507.06323","last_updated":"2025-07-08T18:24:28Z","snapshot_observed_at":"2026-08-06T19:05:12.143746Z","submitted_at":"2025-07-08T18:24:28Z","title":"Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-06T19:12:23.768076Z"},"links":{"citing_paper":"/paper/2507.06323"},"observation_digest":"sha256:cf1e7d817a5c6008c2ac990ce600ee475c106eed9b3c7f152b7894d5c036b577","observation_id":"5eb94e4d-d03a-4fac-bca5-79966ea91d79","resolution":{"observed_at":"2026-08-06T19:12:28.819154Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:12:28.558107Z","title":"Advancing the safety, performance, and adaptability of large language models: Re- view of fine-tuning and guardrails,","venue":null,"work_id":"2e21d889-76f2-4b73-a9dc-05709cd8fd6c","year":2025},"citing_paper":{"arxiv_id":"2507.06323","last_updated":"2025-07-08T18:24:28Z","snapshot_observed_at":"2026-08-06T19:05:12.143746Z","submitted_at":"2025-07-08T18:24:28Z","title":"Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-06T19:12:23.873779Z"},"links":{"citing_paper":"/paper/2507.06323"},"observation_digest":"sha256:bcb90b7d6a0bc2f24da30e6cc1cf31baa3fdfa22d8da7a017ff5aeb2d3f6dd03","observation_id":"8ea48ba4-f168-44f7-8593-120ac5269e44","resolution":{"observed_at":"2026-08-06T19:12:28.638491Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.08837","last_updated":"2025-06-27T11:13:27Z","snapshot_observed_at":"2026-08-07T04:58:26.428959Z","submitted_at":"2025-06-10T14:23:55Z","title":"Design Patterns for Securing LLM Agents against Prompt Injections","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.08837","snapshot_observed_at":"2026-08-06T19:12:23.941196Z","title":"Design patterns for securing llm agents against prompt injections,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.06323","last_updated":"2025-07-08T18:24:28Z","snapshot_observed_at":"2026-08-06T19:05:12.143746Z","submitted_at":"2025-07-08T18:24:28Z","title":"Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-06T19:12:23.941196Z"},"links":{"cited_paper":"/paper/2506.08837","citing_paper":"/paper/2507.06323"},"observation_digest":"sha256:79a5fd7e52495f1950b7e130aa7ba2a86e35810b2491ab870908966bae5887a7","observation_id":"215323b5-c3d0-48fa-ae43-bf1aaf11b527","resolution":{"observed_at":"2026-08-06T19:12:23.941196Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:12:28.361834Z","title":"A quantitative security evaluation and analysis model for web appli- cations based on owasp application security verification standard,","venue":null,"work_id":"21bf006c-9031-42dc-91f4-b3ee68ee4798","year":2023},"citing_paper":{"arxiv_id":"2507.06323","last_updated":"2025-07-08T18:24:28Z","snapshot_observed_at":"2026-08-06T19:05:12.143746Z","submitted_at":"2025-07-08T18:24:28Z","title":"Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-06T19:12:24.111874Z"},"links":{"citing_paper":"/paper/2507.06323"},"observation_digest":"sha256:ef31b531ffaa9480813b92fa99809546a9df5aeb1f84d84cc540debf39a8c4d4","observation_id":"e727e859-5b44-42a1-a096-2d67a36674f6","resolution":{"observed_at":"2026-08-06T19:12:28.445953Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:12:28.186597Z","title":"Comparative evaluation of approaches & tools for effective security testing of web applications,","venue":null,"work_id":"0054cc56-abaa-4fab-b92c-82d5d49d4932","year":2025},"citing_paper":{"arxiv_id":"2507.06323","last_updated":"2025-07-08T18:24:28Z","snapshot_observed_at":"2026-08-06T19:05:12.143746Z","submitted_at":"2025-07-08T18:24:28Z","title":"Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-06T19:12:24.203735Z"},"links":{"citing_paper":"/paper/2507.06323"},"observation_digest":"sha256:c014e3d956d3bcd34dfa1c363b104fa49c57caabd2dbb935226dfd0cbf50dd30","observation_id":"03799863-5743-47a7-bba8-f049e08e8b7d","resolution":{"observed_at":"2026-08-06T19:12:28.277143Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:12:28.022540Z","title":"Swiss cheese model for ai safety: A taxonomy and reference architecture for multi-layered guardrails of foundation model based agents,","venue":null,"work_id":"8a3dc3a2-2b10-489e-9bc8-9b348105329e","year":2025},"citing_paper":{"arxiv_id":"2507.06323","last_updated":"2025-07-08T18:24:28Z","snapshot_observed_at":"2026-08-06T19:05:12.143746Z","submitted_at":"2025-07-08T18:24:28Z","title":"Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-06T19:12:24.296720Z"},"links":{"citing_paper":"/paper/2507.06323"},"observation_digest":"sha256:bedfc70670729cc149fdfb06a06c69d8cc9e8a594ce032a39ef3bcedcd20069a","observation_id":"e4f12fa9-52f5-4ae7-8c12-95f7c97d4b19","resolution":{"observed_at":"2026-08-06T19:12:28.087576Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:12:27.790346Z","title":"Research on webassembly runtimes: A survey,","venue":null,"work_id":"dd97bee6-8143-480d-a28b-8f974b7db159","year":2024},"citing_paper":{"arxiv_id":"2507.06323","last_updated":"2025-07-08T18:24:28Z","snapshot_observed_at":"2026-08-06T19:05:12.143746Z","submitted_at":"2025-07-08T18:24:28Z","title":"Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-06T19:12:24.358502Z"},"links":{"citing_paper":"/paper/2507.06323"},"observation_digest":"sha256:8c41142e3a623edc4d478671e86f474be5e608cc680c496d924b256cf94d3d68","observation_id":"e010e163-ad4e-46d5-95a9-e8fa5ee684f7","resolution":{"observed_at":"2026-08-06T19:12:27.883668Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:12:27.598041Z","title":"A survey on large language model (llm) security and privacy: The good, the bad, and the ugly,","venue":null,"work_id":"479c9268-ddc8-438f-a6e2-b1d722b6acc9","year":2024},"citing_paper":{"arxiv_id":"2507.06323","last_updated":"2025-07-08T18:24:28Z","snapshot_observed_at":"2026-08-06T19:05:12.143746Z","submitted_at":"2025-07-08T18:24:28Z","title":"Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-06T19:12:24.468826Z"},"links":{"citing_paper":"/paper/2507.06323"},"observation_digest":"sha256:1515d655e800e359f443fbefaceeda2f438bc7f451fd00d5dbc2cc3d716aa082","observation_id":"6057064e-66e9-4737-abe8-02ba96b82a12","resolution":{"observed_at":"2026-08-06T19:12:27.695893Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:12:24.580183Z","title":"Trism for agentic ai: A review of trust, risk, and security management in llm-based agentic multi-agent systems,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.06323","last_updated":"2025-07-08T18:24:28Z","snapshot_observed_at":"2026-08-06T19:05:12.143746Z","submitted_at":"2025-07-08T18:24:28Z","title":"Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-06T19:12:24.580183Z"},"links":{"citing_paper":"/paper/2507.06323"},"observation_digest":"sha256:1b004aecca18a73e21708f8b74c0fca804cf8d85f46b172381a15f6a3fe7cead","observation_id":"054220b3-4b1b-47d9-9683-c6c3b325b51b","resolution":{"observed_at":"2026-08-06T19:12:24.580183Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.16902","last_updated":"2025-05-02T18:28:07Z","snapshot_observed_at":"2026-08-05T18:54:53.506009Z","submitted_at":"2025-04-23T17:27:49Z","title":"Building A Secure Agentic AI Application Leveraging A2A Protocol","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.16902","snapshot_observed_at":"2026-08-06T19:12:24.638640Z","title":"Building a secure agentic ai application leveraging a2a protocol,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.06323","last_updated":"2025-07-08T18:24:28Z","snapshot_observed_at":"2026-08-06T19:05:12.143746Z","submitted_at":"2025-07-08T18:24:28Z","title":"Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-06T19:12:24.638640Z"},"links":{"cited_paper":"/paper/2504.16902","citing_paper":"/paper/2507.06323"},"observation_digest":"sha256:fc1010f7e0267cb5eeb244e422e22de1ffc8083e7960b3618d5c6ce409754897","observation_id":"9ec2462a-ab02-4cee-9649-e1bad9a4f131","resolution":{"observed_at":"2026-08-06T19:12:24.638640Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:12:27.422423Z","title":"From recon to report: A multi-agent system to harden software systems,","venue":null,"work_id":"5c74ebdd-26cf-4111-81f5-8e7d6e63238f","year":2025},"citing_paper":{"arxiv_id":"2507.06323","last_updated":"2025-07-08T18:24:28Z","snapshot_observed_at":"2026-08-06T19:05:12.143746Z","submitted_at":"2025-07-08T18:24:28Z","title":"Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-06T19:12:24.734262Z"},"links":{"citing_paper":"/paper/2507.06323"},"observation_digest":"sha256:625031887a5481372ca5421f292085375ac5b8adfef953ab2e033696f3496a95","observation_id":"84d5ed24-76a1-4d5a-9d43-344cdd1db70a","resolution":{"observed_at":"2026-08-06T19:12:27.511180Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:12:27.261504Z","title":"An inter-agent communication protocol for remote pro- grammable routers,","venue":null,"work_id":"c84f12ca-a30d-42dc-8f8a-fd01e456e5b9","year":2002},"citing_paper":{"arxiv_id":"2507.06323","last_updated":"2025-07-08T18:24:28Z","snapshot_observed_at":"2026-08-06T19:05:12.143746Z","submitted_at":"2025-07-08T18:24:28Z","title":"Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-06T19:12:24.820293Z"},"links":{"citing_paper":"/paper/2507.06323"},"observation_digest":"sha256:0e31b04b9d8de6a38fc14d064679a823ecafb08673de07d96e72d37e493cf219","observation_id":"7c48adc9-3ffd-4292-a53c-bb1250b46ef5","resolution":{"observed_at":"2026-08-06T19:12:27.323739Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.02279","last_updated":"2025-05-23T00:28:09Z","snapshot_observed_at":"2026-07-06T21:18:50.421957Z","submitted_at":"2025-05-04T22:18:27Z","title":"A survey of agent interoperability protocols: Model Context Protocol (MCP), Agent Communication Protocol (ACP), Agent-to-Agent Protocol (A2A), and Agent Network Protocol (ANP)","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.02279","snapshot_observed_at":"2026-08-06T19:12:24.913965Z","title":"A survey of agent interoperability protocols: Model context protocol (mcp), agent communication protocol (acp), agent-to-agent protocol (a2a), and agent network protocol (anp),","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.06323","last_updated":"2025-07-08T18:24:28Z","snapshot_observed_at":"2026-08-06T19:05:12.143746Z","submitted_at":"2025-07-08T18:24:28Z","title":"Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-06T19:12:24.913965Z"},"links":{"cited_paper":"/paper/2505.02279","citing_paper":"/paper/2507.06323"},"observation_digest":"sha256:8f6d8818c8fb0761a91c4d00b923162fbd3ce44f696beb5b8c1f33f90b2e766e","observation_id":"2574a20e-7b2b-4f39-ba1a-36352df1466d","resolution":{"observed_at":"2026-08-06T19:12:24.913965Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.11543","last_updated":"2025-04-17T16:28:46Z","snapshot_observed_at":"2026-08-06T02:17:27.458536Z","submitted_at":"2025-04-15T18:22:55Z","title":"REAL: Benchmarking Autonomous Agents on Deterministic Simulations of Real Websites","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.11543","snapshot_observed_at":"2026-08-06T19:12:25.026396Z","title":"Real: Benchmarking autonomous agents on deterministic simulations of real websites,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.06323","last_updated":"2025-07-08T18:24:28Z","snapshot_observed_at":"2026-08-06T19:05:12.143746Z","submitted_at":"2025-07-08T18:24:28Z","title":"Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-06T19:12:25.026396Z"},"links":{"cited_paper":"/paper/2504.11543","citing_paper":"/paper/2507.06323"},"observation_digest":"sha256:e18698cdb03d196d38c45fd4050598f741249c9b7fa1ca17063e9cfce19cbfef","observation_id":"0a1df70c-884c-44d5-98bf-d6d81e9a324c","resolution":{"observed_at":"2026-08-06T19:12:25.026396Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:12:26.765182Z","title":"Exploring applicability of llm-powered autonomous agents to solve real-life problems: Microsoft entra id administration agent (mean),","venue":null,"work_id":"ffa5641a-c6a7-4828-aaa2-afe955f845a7","year":2024},"citing_paper":{"arxiv_id":"2507.06323","last_updated":"2025-07-08T18:24:28Z","snapshot_observed_at":"2026-08-06T19:05:12.143746Z","submitted_at":"2025-07-08T18:24:28Z","title":"Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-06T19:12:25.104684Z"},"links":{"citing_paper":"/paper/2507.06323"},"observation_digest":"sha256:e9f80d23138fefa1b01c4b72e82d289fff6e8a1ce5157456a35b78191da27bfb","observation_id":"940d9845-b842-49df-932c-53f3b6daa02f","resolution":{"observed_at":"2026-08-06T19:12:26.895783Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:12:27.066757Z","title":"Ai agents and business workflow,","venue":null,"work_id":"051cc63f-3118-4744-ace6-032584346788","year":2025},"citing_paper":{"arxiv_id":"2507.06323","last_updated":"2025-07-08T18:24:28Z","snapshot_observed_at":"2026-08-06T19:05:12.143746Z","submitted_at":"2025-07-08T18:24:28Z","title":"Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-06T19:12:25.207046Z"},"links":{"citing_paper":"/paper/2507.06323"},"observation_digest":"sha256:efe4935e469a35d5dca30f7a504fd91196aa19f0a7cc5af21de66363445ed11a","observation_id":"85d1fa9d-c139-4e54-82c6-e5113aeb8fd4","resolution":{"observed_at":"2026-08-06T19:12:27.127699Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.21784","last_updated":"2024-10-29T06:42:27Z","snapshot_observed_at":"2026-08-03T20:26:53.404412Z","submitted_at":"2024-10-29T06:42:27Z","title":"MARCO: Multi-Agent Real-time Chat Orchestration","version":1},"cited_work":{"arxiv_id":"2410.21784","doi":null,"metadata_source":"pith","pith_arxiv_id":"2410.21784","snapshot_observed_at":"2026-08-06T19:12:25.488917Z","title":"MARCO: Multi-Agent Real-time Chat Orchestration","venue":"cs.AI","work_id":"07ea698c-ea46-4ce8-b642-910ac94fb6ae","year":2024},"citing_paper":{"arxiv_id":"2507.06323","last_updated":"2025-07-08T18:24:28Z","snapshot_observed_at":"2026-08-06T19:05:12.143746Z","submitted_at":"2025-07-08T18:24:28Z","title":"Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-06T19:12:25.250133Z"},"links":{"cited_paper":"/paper/2410.21784","citing_paper":"/paper/2507.06323"},"observation_digest":"sha256:c74a9033e5d5c005affdb453ee7823a53d904f9b278e03fac92e721f7884ace3","observation_id":"9eba2bda-8ca7-486d-b221-d6e3fdc88e6a","resolution":{"observed_at":"2026-08-06T19:12:25.537883Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.02077","last_updated":"2026-04-29T10:47:33Z","snapshot_observed_at":"2026-07-06T21:18:41.237217Z","submitted_at":"2025-05-04T12:03:29Z","title":"Open Challenges in Multi-Agent Security: Towards Secure Systems of Interacting AI Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.02077","snapshot_observed_at":"2026-08-06T19:12:25.287588Z","title":"Open challenges in multi-agent security: Towards secure systems of interacting ai agents,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.06323","last_updated":"2025-07-08T18:24:28Z","snapshot_observed_at":"2026-08-06T19:05:12.143746Z","submitted_at":"2025-07-08T18:24:28Z","title":"Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-06T19:12:25.287588Z"},"links":{"cited_paper":"/paper/2505.02077","citing_paper":"/paper/2507.06323"},"observation_digest":"sha256:2ce8bcc34c247b9713f114b46839e3c0f89edaa2b8209c4231565ce1009222a0","observation_id":"e3ef5ece-ebb2-4a03-b752-2053ca8b8342","resolution":{"observed_at":"2026-08-06T19:12:25.287588Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2507.06323","last_updated":"2025-07-08T18:24:28Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-06T19:05:12.143746Z","submitted_at":"2025-07-08T18:24:28Z","title":"Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms"},"reference_resolution":{"displayed":59,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":21,"verified_exact":2,"verified_fuzzy":36},"total_outbound_references":59},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"thesis":"As of 7 August 2026, this Paper Citation Record lists 59 of 59 outbound references and 4 inbound Pith citation observations for arXiv:2507.06323."}