{"as_of":"2026-08-06T20:44:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:1452fef8205cb22a47a9e41cdaca9643f503c8267dcfa5e9898c665761615c1e","coverage":[{"denominator":60,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":60,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T16:12:52.032965Z","state":"measured"},{"denominator":68,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":68,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-06T06:34:29.942622+00:00","state":"measured"},{"denominator":8,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":8,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-01T23:03:15.423940Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"pith","source_observed_at":"2026-07-10T18:15:00.821465Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-06T15:57:20.673152Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"cited_work":{"arxiv_id":"2507.14293","doi":"10.48550/arxiv.2507.14293","metadata_source":"pith","pith_arxiv_id":"2507.14293","snapshot_observed_at":"2026-07-10T18:15:00.821465Z","title":"Webguard: Building a generalizable guardrail for web agents","venue":"cs.AI","work_id":"0fe67f59-aa4e-4588-844e-53c56b0bee61","year":2025},"citing_paper":{"arxiv_id":"2510.13727","last_updated":"2026-05-19T04:39:26Z","snapshot_observed_at":"2026-08-02T19:37:00.796741Z","submitted_at":"2025-10-15T16:30:57Z","title":"From Refusal to Recovery: A Control-Theoretic Approach to Generative AI Guardrails","version":2},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-05-21T20:42:40.823721Z"},"links":{"cited_paper":"/paper/2507.14293","citing_paper":"/paper/2510.13727"},"observation_digest":"sha256:523bba91f0b95c46b0625ccc77a824b6d74e392da211e907be019e764ce070d1","observation_id":"daae51b8-515a-4eef-84a3-91e3d663eaf9","resolution":{"observed_at":"2026-05-21T20:44:21.961440Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-06T15:57:20.673152Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"cited_work":{"arxiv_id":"2507.14293","doi":"10.48550/arxiv.2507.14293","metadata_source":"pith","pith_arxiv_id":"2507.14293","snapshot_observed_at":"2026-07-10T18:15:00.821465Z","title":"Webguard: Building a generalizable guardrail for web agents","venue":"cs.AI","work_id":"0fe67f59-aa4e-4588-844e-53c56b0bee61","year":2025},"citing_paper":{"arxiv_id":"2604.05229","last_updated":"2026-04-06T22:49:28Z","snapshot_observed_at":"2026-07-06T22:54:00.211106Z","submitted_at":"2026-04-06T22:49:28Z","title":"From Governance Norms to Enforceable Controls: A Layered Translation Method for Runtime Guardrails in Agentic AI","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-05-10T18:47:09.928166Z"},"links":{"cited_paper":"/paper/2507.14293","citing_paper":"/paper/2604.05229"},"observation_digest":"sha256:db49f3ca616e39ff1d03ca0288c8bc09676e1a40d436e76fe575c34140b17398","observation_id":"588c5e88-bda0-401d-ab71-d3f2b019f187","resolution":{"observed_at":"2026-05-10T23:55:51.776496Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-06T15:57:20.673152Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"cited_work":{"arxiv_id":"2507.14293","doi":"10.48550/arxiv.2507.14293","metadata_source":"pith","pith_arxiv_id":"2507.14293","snapshot_observed_at":"2026-07-10T18:15:00.821465Z","title":"Webguard: Building a generalizable guardrail for web agents","venue":"cs.AI","work_id":"0fe67f59-aa4e-4588-844e-53c56b0bee61","year":2025},"citing_paper":{"arxiv_id":"2604.19818","last_updated":"2026-04-18T20:28:26Z","snapshot_observed_at":"2026-07-06T23:06:21.774788Z","submitted_at":"2026-04-18T20:28:26Z","title":"Beyond Task Success: An Evidence-Synthesis Framework for Evaluating, Governing, and Orchestrating Agentic AI","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-05-10T06:03:19.805349Z"},"links":{"cited_paper":"/paper/2507.14293","citing_paper":"/paper/2604.19818"},"observation_digest":"sha256:d7c08e25fc0ea99860eb10b5a4ee5c0310050500f190fc2ba9cb5c789c71f461","observation_id":"942fdad7-9d8a-466e-80a4-8992e0276220","resolution":{"observed_at":"2026-05-10T06:06:18.907983Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-06T15:57:20.673152Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"cited_work":{"arxiv_id":"2507.14293","doi":"10.48550/arxiv.2507.14293","metadata_source":"pith","pith_arxiv_id":"2507.14293","snapshot_observed_at":"2026-07-10T18:15:00.821465Z","title":"Webguard: Building a generalizable guardrail for web agents","venue":"cs.AI","work_id":"0fe67f59-aa4e-4588-844e-53c56b0bee61","year":2025},"citing_paper":{"arxiv_id":"2604.25562","last_updated":"2026-04-28T12:32:21Z","snapshot_observed_at":"2026-07-06T23:11:25.757664Z","submitted_at":"2026-04-28T12:32:21Z","title":"SnapGuard: Lightweight Prompt Injection Detection for Screenshot-Based Web Agents","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-05-07T15:48:28.869796Z"},"links":{"cited_paper":"/paper/2507.14293","citing_paper":"/paper/2604.25562"},"observation_digest":"sha256:55b708c56272802237ca17788eea0255ad6582c08a384bdaaac6a1dfd235249e","observation_id":"11395251-2489-44e8-8fe2-6930d95ac106","resolution":{"observed_at":"2026-05-12T00:06:17.759432Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-06T15:57:20.673152Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"cited_work":{"arxiv_id":"2507.14293","doi":"10.48550/arxiv.2507.14293","metadata_source":"pith","pith_arxiv_id":"2507.14293","snapshot_observed_at":"2026-07-10T18:15:00.821465Z","title":"Webguard: Building a generalizable guardrail for web agents","venue":"cs.AI","work_id":"0fe67f59-aa4e-4588-844e-53c56b0bee61","year":2025},"citing_paper":{"arxiv_id":"2605.23989","last_updated":"2026-05-17T10:26:37Z","snapshot_observed_at":"2026-07-06T23:34:08.786038Z","submitted_at":"2026-05-17T10:26:37Z","title":"Towards trustworthy agentic AI: a comprehensive survey of safety, robustness, privacy, and system security","version":1},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-06-30T19:18:40.244556Z"},"links":{"cited_paper":"/paper/2507.14293","citing_paper":"/paper/2605.23989"},"observation_digest":"sha256:c5e897c915fc1efb6dc16574545b8a07770430189d46218bd9e1044423587daf","observation_id":"79087acc-2e94-4bfc-b6cd-abe4d88b6d19","resolution":{"observed_at":"2026-06-30T19:45:01.625265Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-06T15:57:20.673152Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"cited_work":{"arxiv_id":"2507.14293","doi":"10.48550/arxiv.2507.14293","metadata_source":"pith","pith_arxiv_id":"2507.14293","snapshot_observed_at":"2026-07-10T18:15:00.821465Z","title":"Webguard: Building a generalizable guardrail for web agents","venue":"cs.AI","work_id":"0fe67f59-aa4e-4588-844e-53c56b0bee61","year":2025},"citing_paper":{"arxiv_id":"2606.14517","last_updated":"2026-06-16T09:28:39Z","snapshot_observed_at":"2026-07-06T23:52:28.557859Z","submitted_at":"2026-06-12T14:49:00Z","title":"From Shield to Target: Denial-of-Service Attacks on LLM-Based Agent Guardrails","version":2},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-06-27T04:42:05.886984Z"},"links":{"cited_paper":"/paper/2507.14293","citing_paper":"/paper/2606.14517"},"observation_digest":"sha256:ac167585ea9fa8513ddfeecb8669800eca63f46d72d745ed1bfe61af414849a9","observation_id":"9930e089-a556-466e-ba8d-7aa32fd51964","resolution":{"observed_at":"2026-07-03T16:58:43.533023Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-06T15:57:20.673152Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"cited_work":{"arxiv_id":"2507.14293","doi":"10.48550/arxiv.2507.14293","metadata_source":"pith","pith_arxiv_id":"2507.14293","snapshot_observed_at":"2026-07-10T18:15:00.821465Z","title":"Webguard: Building a generalizable guardrail for web agents","venue":"cs.AI","work_id":"0fe67f59-aa4e-4588-844e-53c56b0bee61","year":2025},"citing_paper":{"arxiv_id":"2607.08147","last_updated":"2026-07-09T06:37:52Z","snapshot_observed_at":"2026-08-06T02:05:16.233314Z","submitted_at":"2026-07-09T06:37:52Z","title":"Prismata: Confining Cross-Site Prompt Injection in Web Agents","version":1},"reference_index":100,"source":"pdf_text","source_observed_at":"2026-07-10T12:20:03.672480Z"},"links":{"cited_paper":"/paper/2507.14293","citing_paper":"/paper/2607.08147"},"observation_digest":"sha256:e81d089420b4af7ea4f721baf7faccc6726e6eff65880f2dfafad53ca593dc92","observation_id":"e33b4044-cd5d-4fb9-a931-f3dfbcbf16fe","resolution":{"observed_at":"2026-07-10T12:27:04.085771Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-06T15:57:20.673152Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2507.14293","snapshot_observed_at":"2026-08-01T23:03:15.423940Z","title":"Webguard: Building a generalizable guardrail for web agents","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.15550","last_updated":"2026-07-17T01:45:54Z","snapshot_observed_at":"2026-08-06T02:17:46.037638Z","submitted_at":"2026-07-17T01:45:54Z","title":"SeerGuard: A Safety Framework for Mobile GUI Agents via World Model Prediction","version":1},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-08-01T23:03:15.423940Z"},"links":{"cited_paper":"/paper/2507.14293","citing_paper":"/paper/2607.15550"},"observation_digest":"sha256:f557cae7db9d26efb4deb639a54d57282c549ab71d5db3d610dd30e16481c8f7","observation_id":"c4195ba8-2e4e-4806-931d-5db729aca21e","resolution":{"observed_at":"2026-08-01T23:03:15.423940Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2507.14293/citation-record","integrity":"/paper/2507.14293/integrity","json":"/paper/2507.14293/citation-record.json","paper":"/paper/2507.14293"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:12:57.237094Z","title":"Agent S: an open agentic framework that uses computers like a human","venue":null,"work_id":"9cfa233f-892c-4b51-913e-9b0011a489b2","year":2025},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-06T15:57:20.673152Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:47.109846Z"},"links":{"citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:af51c52b7de8a27f6dcf32f8e351d75798198c2f5b3caa00a1345eb1ab25363b","observation_id":"c2e7c5bd-4227-492e-a0ac-3f2b6e3c5b18","resolution":{"observed_at":"2026-08-06T16:12:57.242460Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:12:47.194194Z","title":"Digirl: Training in-the-wild device-control agents with autonomous reinforcement learning, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-06T15:57:20.673152Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:47.194194Z"},"links":{"citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:73a5ecf6ba1b2f6000586dbb1df44c38d117400a5a5e3926769d4a7d2f536152","observation_id":"5d8808d4-7d10-4fd7-9f1c-22c94096ca56","resolution":{"observed_at":"2026-08-06T16:12:47.194194Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.13923","last_updated":"2025-02-19T18:00:14Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-02-19T18:00:14Z","title":"Qwen2.5-VL Technical Report","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.13923","snapshot_observed_at":"2026-08-06T16:12:47.275932Z","title":"Qwen2.5-vl technical report","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-06T15:57:20.673152Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:47.275932Z"},"links":{"cited_paper":"/paper/2502.13923","citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:7008c01d0f08a5717de8c5978b685801961fc38fbd2cd23bcb29a431d30a9df8","observation_id":"4a189b8f-4e06-43a1-b6c2-40b8e6d5aa20","resolution":{"observed_at":"2026-08-06T16:12:47.275932Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:12:47.374120Z","title":"Doomarena: A framework for testing ai agents against evolving security threats","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-06T15:57:20.673152Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:47.374120Z"},"links":{"citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:a73e10060e1c0b09d1214c2c82ba2b440c5f7cc226f2ea50df414d68bc8ca333","observation_id":"43b8b139-df9a-4f4e-b7ad-9bee3f44e930","resolution":{"observed_at":"2026-08-06T16:12:47.374120Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.11281","last_updated":"2025-04-15T15:21:09Z","snapshot_observed_at":"2026-07-06T21:09:50.780345Z","submitted_at":"2025-04-15T15:21:09Z","title":"The Obvious Invisible Threat: LLM-Powered GUI Agents' Vulnerability to Fine-Print Injections","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.11281","snapshot_observed_at":"2026-08-06T16:12:47.459876Z","title":"The obvious invisible threat: Llm-powered gui agents’ vulnerability to fine-print injections","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-06T15:57:20.673152Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:47.459876Z"},"links":{"cited_paper":"/paper/2504.11281","citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:e4df2c86c17bdf33ab6252407eb0c4bc5971acc4634505667efbc54244363e10","observation_id":"1095f92a-4d4e-47c4-a14f-766e8757ff8c","resolution":{"observed_at":"2026-08-06T16:12:47.459876Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.09809","last_updated":"2025-02-13T23:00:33Z","snapshot_observed_at":"2026-07-06T20:36:21.623337Z","submitted_at":"2025-02-13T23:00:33Z","title":"AgentGuard: Repurposing Agentic Orchestrator for Safety Evaluation of Tool Orchestration","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.09809","snapshot_observed_at":"2026-08-06T16:12:47.563041Z","title":"Agentguard: Repurposing agentic orchestrator for safety evaluation of tool orchestration","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-06T15:57:20.673152Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:47.563041Z"},"links":{"cited_paper":"/paper/2502.09809","citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:f6bc3df16c424a5e89d06a4052538561b1006aa6ce0269d379252fc41e9e229b","observation_id":"a8d481dd-6c7e-4b82-9855-b9dc97a5beb5","resolution":{"observed_at":"2026-08-06T16:12:47.563041Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.05410","last_updated":"2025-05-08T16:51:43Z","snapshot_observed_at":"2026-07-06T21:21:01.070459Z","submitted_at":"2025-05-08T16:51:43Z","title":"Reasoning Models Don't Always Say What They Think","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.05410","snapshot_observed_at":"2026-08-06T16:12:47.648456Z","title":"Reasoning models don’t always say what they think","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-06T15:57:20.673152Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:47.648456Z"},"links":{"cited_paper":"/paper/2505.05410","citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:47093ebc23e9e0f6538d8d005df43eb1cc626623f72036e685addeae49f49a73","observation_id":"caa0589b-8752-4308-b471-8fef84c0721a","resolution":{"observed_at":"2026-08-06T16:12:47.648456Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:12:57.193647Z","title":"Shieldagent: Shielding LLM agents via verifiable safety policy reasoning","venue":null,"work_id":"382117c0-aea6-4cba-b935-d39ea4589a86","year":2025},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-06T15:57:20.673152Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:47.698278Z"},"links":{"citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:c02014dd0854585963e8a87f6979ccb09495fae5bf25fc50943c26253c3aa2bf","observation_id":"ce47d939-6281-4a7b-bc73-a5e2336e5405","resolution":{"observed_at":"2026-08-06T16:12:57.203321Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:12:57.173819Z","title":"SeeClick: Harnessing GUI grounding for advanced visual GUI agents","venue":null,"work_id":"2ec96358-5405-4319-8f1c-88943f33f642","year":2024},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-06T15:57:20.673152Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:47.757629Z"},"links":{"citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:2d7cc833db16de7dd9a316f5ef087ceed2c98df1574ffee92dcc9a4d1fb54af7","observation_id":"c0349a46-98c2-4cd1-9121-69be27e9ecde","resolution":{"observed_at":"2026-08-06T16:12:57.180123Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2412.05467","last_updated":"2025-02-28T16:02:27Z","snapshot_observed_at":"2026-08-06T15:44:08.375632Z","submitted_at":"2024-12-06T23:43:59Z","title":"The BrowserGym Ecosystem for Web Agent Research","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.05467","snapshot_observed_at":"2026-08-06T16:12:47.846998Z","title":"Xu, Siva Reddy, Quentin Cappart, Graham Neubig, Ruslan Salakhutdinov, Nicolas Chapados, and Alexandre Lacoste","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-06T15:57:20.673152Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:47.846998Z"},"links":{"cited_paper":"/paper/2412.05467","citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:1e4810dede2df35d996025f41cd3ddefce3a31bc125b11c076950865384c4d1e","observation_id":"ca3e99d4-9116-4cc3-a3cc-fd74372bafaf","resolution":{"observed_at":"2026-08-06T16:12:47.846998Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.10414","last_updated":"2024-11-15T18:34:07Z","snapshot_observed_at":"2026-08-06T19:21:24.933454Z","submitted_at":"2024-11-15T18:34:07Z","title":"Llama Guard 3 Vision: Safeguarding Human-AI Image Understanding Conversations","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.10414","snapshot_observed_at":"2026-08-06T16:12:47.921568Z","title":"Llama guard 3 vision: Safeguarding human-ai image understanding conversations","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-06T15:57:20.673152Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:47.921568Z"},"links":{"cited_paper":"/paper/2411.10414","citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:061df532303f5445f33187c978347038c11c0f242e9fa6a0d4e4cc706440a477","observation_id":"e8ec850e-642c-49aa-9266-b79e0230029d","resolution":{"observed_at":"2026-08-06T16:12:47.921568Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:12:57.149553Z","title":"Mind2web: Towards a generalist agent for the web","venue":null,"work_id":"47c1091b-d0d8-473c-870e-780830b510e8","year":2023},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-06T15:57:20.673152Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:47.972534Z"},"links":{"citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:46c336001f0fb964067f0dfbd4d39494bc92e2d96439baaea43130b3f8cac884","observation_id":"c4b9e735-d5a1-4e3f-90ac-9ef9f676f7fb","resolution":{"observed_at":"2026-08-06T16:12:57.156040Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:12:57.129606Z","title":"Preemptive detection and correction of misaligned actions in llm agents, 2024","venue":null,"work_id":"38a996e5-4c48-46df-87d7-0c121894f536","year":2024},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-06T15:57:20.673152Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:48.042754Z"},"links":{"citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:141abd80ae9d90c06a40e1568d7ae77f06553e7b3433b40c69463c5ccb9fc495","observation_id":"1ed7cfe6-692a-4242-86f3-61850465974f","resolution":{"observed_at":"2026-08-06T16:12:57.135336Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2411.17713","last_updated":"2024-11-18T21:42:17Z","snapshot_observed_at":"2026-08-04T04:44:30.205389Z","submitted_at":"2024-11-18T21:42:17Z","title":"Llama Guard 3-1B-INT4: Compact and Efficient Safeguard for Human-AI Conversations","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.17713","snapshot_observed_at":"2026-08-06T16:12:48.091007Z","title":"Llama guard 3-1b-int4: Compact and efficient safeguard for human-ai conversations","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-06T15:57:20.673152Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:48.091007Z"},"links":{"cited_paper":"/paper/2411.17713","citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:285783a77d755c1e81248111b47ecd55246e49a3a139b024dada7e8f7ebc284e","observation_id":"432a2faf-6660-47e1-bc12-ef20d58c848c","resolution":{"observed_at":"2026-08-06T16:12:48.091007Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:12:57.106957Z","title":"Navigating the digital world as humans do: Universal visual grounding for GUI agents","venue":null,"work_id":"b67aa2ba-9643-46e7-8776-c6d3e78986b0","year":2025},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-06T15:57:20.673152Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:48.229784Z"},"links":{"citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:8e4da69449d38c2a9ea84a5dd645fd30f63c941d2456598e56cb73adf47154a7","observation_id":"b7ab8103-17eb-4be4-b087-5f97783066aa","resolution":{"observed_at":"2026-08-06T16:12:57.113912Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:12:48.306232Z","title":"Not what you’ve signed up for: Compromising real-world llm-integrated applications with indirect prompt injection","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-06T15:57:20.673152Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:48.306232Z"},"links":{"citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:b700a7382ab491f563eda7c4eccac2650fcb069d9b9493ea8a096c5e9c093aba","observation_id":"4259e9c4-a863-49cc-8190-351f3356e6a6","resolution":{"observed_at":"2026-08-06T16:12:48.306232Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:12:56.990826Z","title":"Is your llm secretly a world model of the internet? model-based planning for web agents, 2024","venue":null,"work_id":"065a969f-a4c6-4f76-a1fb-f09adbc11ba3","year":2024},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-06T15:57:20.673152Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:48.398699Z"},"links":{"citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:897ffff808600701298b610a87aa558edd2d2890bd6bd7dfdfa6322150844e21","observation_id":"d55bd2a6-f801-45c4-a88c-db846a3dd196","resolution":{"observed_at":"2026-08-06T16:12:57.074699Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:12:56.820111Z","title":"Cogagent: A visual language model for gui agents","venue":null,"work_id":"a4317d82-3166-4523-8a66-d63d6e56382a","year":2024},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-06T15:57:20.673152Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:48.490849Z"},"links":{"citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:05dcccdcfe9b0233819323a8edaa2642aee863d19b50a7786c9267527d0661c1","observation_id":"4bb771c3-77e6-4b39-8f09-070af4eea194","resolution":{"observed_at":"2026-08-06T16:12:56.908262Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2401.05566","last_updated":"2024-01-17T20:26:01Z","snapshot_observed_at":"2026-07-06T17:14:03.152949Z","submitted_at":"2024-01-10T22:14:35Z","title":"Sleeper Agents: Training Deceptive LLMs that Persist Through Safety Training","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.05566","snapshot_observed_at":"2026-08-06T16:12:48.546694Z","title":"Sleeper agents: Training deceptive llms that persist through safety training","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-06T15:57:20.673152Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:48.546694Z"},"links":{"cited_paper":"/paper/2401.05566","citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:6ac7de9feead460d9af3e16a53a32498cd827d73accf4d85662b8a97fa8f84ce","observation_id":"c5ff6590-c9ab-4da8-a2f7-01cb2a09a9b3","resolution":{"observed_at":"2026-08-06T16:12:48.546694Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.21276","last_updated":"2024-10-25T17:43:01Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-10-25T17:43:01Z","title":"GPT-4o System Card","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.21276","snapshot_observed_at":"2026-08-06T16:12:48.636906Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-06T15:57:20.673152Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:48.636906Z"},"links":{"cited_paper":"/paper/2410.21276","citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:9541d312e459e628b3de996c6eac447da949ab720a7efbe69969f361aecce2d5","observation_id":"2773b1bd-c4af-4f50-84bc-b984f998ef0e","resolution":{"observed_at":"2026-08-06T16:12:48.636906Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.06674","last_updated":"2023-12-07T19:40:50Z","snapshot_observed_at":"2026-07-06T17:00:00.321552Z","submitted_at":"2023-12-07T19:40:50Z","title":"Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversations","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.06674","snapshot_observed_at":"2026-08-06T16:12:48.722673Z","title":"Llama guard: Llm-based input-output safeguard for human-ai conversations","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-06T15:57:20.673152Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:48.722673Z"},"links":{"cited_paper":"/paper/2312.06674","citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:c189b829789aae4efd058a0b63933274b8152c0f5a502292d43358bc52deb3bf","observation_id":"30f7ec07-3d44-4cf9-95d7-a88ae65cc2ed","resolution":{"observed_at":"2026-08-06T16:12:48.722673Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.13649","last_updated":"2024-06-06T02:01:09Z","snapshot_observed_at":"2026-08-05T16:01:54.847394Z","submitted_at":"2024-01-24T18:35:21Z","title":"VisualWebArena: Evaluating Multimodal Agents on Realistic Visual Web Tasks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.13649","snapshot_observed_at":"2026-08-06T16:12:48.800326Z","title":"Visualwebarena: Evaluating multimodal agents on realistic visual web tasks","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-06T15:57:20.673152Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:48.800326Z"},"links":{"cited_paper":"/paper/2401.13649","citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:8066ffb2aed831bd14fc3c92bb946bf19dd9379f3df37fae07c41fbf6235ad7f","observation_id":"30e41809-1982-4906-8e8b-968b5d22145e","resolution":{"observed_at":"2026-08-06T16:12:48.800326Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:12:48.886850Z","title":"Tree search for language model agents","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-06T15:57:20.673152Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:48.886850Z"},"links":{"citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:72df2a0357798d720f714e9c38e705c38b2fbca36316f54e1e16b0bb919d91d2","observation_id":"475ea7df-b219-4e32-aa0b-7d30cb443103","resolution":{"observed_at":"2026-08-06T16:12:48.886850Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:12:56.493946Z","title":"Hendryx, Summer Yue, and Zifan Wang","venue":null,"work_id":"2985f59b-2346-45b6-8e49-9a3b738f3c18","year":2025},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-06T15:57:20.673152Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:48.949194Z"},"links":{"citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:a45a7b9ec061c2d058e05a6b498cb1bfb2b562cc2abd4f538f4f0444ec69fafb","observation_id":"1a667747-59a2-4b01-b7b3-918cfde2669c","resolution":{"observed_at":"2026-08-06T16:12:56.636403Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:12:56.137708Z","title":"Refusal-trained llms are easily jailbroken as browser agents, 2024","venue":null,"work_id":"9d70a500-f203-4853-802a-d7385c7b12c0","year":2024},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-06T15:57:20.673152Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:49.034234Z"},"links":{"citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:5d57a94d2ccfd75e32ac978849d269d8c519bb97672730ebd9f75773a37b78b6","observation_id":"a43d976b-691e-442a-953c-420ff553abce","resolution":{"observed_at":"2026-08-06T16:12:56.261080Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:12:49.133062Z","title":"Bradley Knox, and Kimin Lee","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-06T15:57:20.673152Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:49.133062Z"},"links":{"citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:d078da6dfa078f366eda6dd6a257a799f1fe5f340cd9beaae234855c55fdfd3a","observation_id":"da90a2ff-5c49-4f9e-8c7d-ba1e45c0051b","resolution":{"observed_at":"2026-08-06T16:12:49.133062Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.20279","last_updated":"2025-06-08T05:39:56Z","snapshot_observed_at":"2026-07-31T03:21:54.450410Z","submitted_at":"2025-03-26T07:08:15Z","title":"sudo rm -rf agentic_security","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.20279","snapshot_observed_at":"2026-08-06T16:12:49.199465Z","title":"sudo rm-rf agentic_security","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-06T15:57:20.673152Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:49.199465Z"},"links":{"cited_paper":"/paper/2503.20279","citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:dc52f71a4b55df146c16e6b7b81d8cc5ce0e8800c3d5a911105580d148af917a","observation_id":"85b4494c-94af-4783-bbe6-2165075d40d3","resolution":{"observed_at":"2026-08-06T16:12:49.199465Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.06703","last_updated":"2026-06-04T09:59:28Z","snapshot_observed_at":"2026-08-05T07:12:18.604381Z","submitted_at":"2024-10-09T09:13:38Z","title":"ST-WebAgentBench: A Benchmark for Evaluating Safety and Trustworthiness in Web Agents","version":7},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.06703","snapshot_observed_at":"2026-08-06T16:12:49.302488Z","title":"St- webagentbench: A benchmark for evaluating safety and trustworthiness in web agents","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-06T15:57:20.673152Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:49.302488Z"},"links":{"cited_paper":"/paper/2410.06703","citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:dfc33f1749948bfbf771465479c1ded372a8d607e627cfab0e76869b58d1929f","observation_id":"d2305a9a-1075-4d55-b33d-24dd96bffe81","resolution":{"observed_at":"2026-08-06T16:12:49.302488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:12:49.383511Z","title":"Redteamcua: Realistic adversarial testing of computer-use agents in hybrid web-os environments","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-06T15:57:20.673152Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:49.383511Z"},"links":{"citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:f6f0d2e20a742e4c84896f24d2a4dd9a3eba100d5730b5fa802210516422c1f4","observation_id":"0262b0ef-e33f-42d1-ad1a-18c090be34ea","resolution":{"observed_at":"2026-08-06T16:12:49.383511Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2409.11295","last_updated":"2025-03-12T20:54:00Z","snapshot_observed_at":"2026-08-06T11:52:38.289574Z","submitted_at":"2024-09-17T15:49:44Z","title":"EIA: Environmental Injection Attack on Generalist Web Agents for Privacy Leakage","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.11295","snapshot_observed_at":"2026-08-06T16:12:49.478511Z","title":"EIA: environmental injection attack on generalist web agents for privacy leakage","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-06T15:57:20.673152Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:49.478511Z"},"links":{"cited_paper":"/paper/2409.11295","citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:1eabfd3cdfa05da45fca576d5bab4f4bd2a253bfc29760f968de73e75a48de6f","observation_id":"abae9612-218d-498a-8634-014caef4db11","resolution":{"observed_at":"2026-08-06T16:12:49.478511Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.15287","last_updated":"2024-11-22T16:56:49Z","snapshot_observed_at":"2026-07-06T19:55:46.467982Z","submitted_at":"2024-11-22T16:56:49Z","title":"Sycophancy in Large Language Models: Causes and Mitigations","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.15287","snapshot_observed_at":"2026-08-06T16:12:49.594341Z","title":"Sycophancy in large language models: Causes and mitigations","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-06T15:57:20.673152Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:49.594341Z"},"links":{"cited_paper":"/paper/2411.15287","citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:ffadbb71924dd5a5c77b1cf631368ee96f33a87d9e8ec7b12a702ccf896c230f","observation_id":"d5e4330f-4c62-4e20-8c42-8eee2f5eaa92","resolution":{"observed_at":"2026-08-06T16:12:49.594341Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.04984","last_updated":"2025-01-14T20:16:01Z","snapshot_observed_at":"2026-07-29T23:20:20.918596Z","submitted_at":"2024-12-06T12:09:50Z","title":"Frontier Models are Capable of In-context Scheming","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.04984","snapshot_observed_at":"2026-08-06T16:12:49.659835Z","title":"Frontier models are capable of in-context scheming","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-06T15:57:20.673152Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:49.659835Z"},"links":{"cited_paper":"/paper/2412.04984","citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:dc563fccb4b0789c185c86c3418df79cfdeabf057ed82d046e5ae720d14dfa15","observation_id":"02e8079a-db48-43d1-b8be-752f9b509781","resolution":{"observed_at":"2026-08-06T16:12:49.659835Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.02907","last_updated":"2025-02-05T18:56:51Z","snapshot_observed_at":"2026-07-06T19:27:20.458797Z","submitted_at":"2024-10-03T18:56:51Z","title":"NNetNav: Unsupervised Learning of Browser Agents Through Environment Interaction in the Wild","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.02907","snapshot_observed_at":"2026-08-06T16:12:49.754196Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-06T15:57:20.673152Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:49.754196Z"},"links":{"cited_paper":"/paper/2410.02907","citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:0a05ab34674540481c4a06df93124ff45b00e4e60c2831e603b0c91bfbe6d540","observation_id":"f7ba4ca9-95b0-4ad4-bdf0-4d44b305f6bd","resolution":{"observed_at":"2026-08-06T16:12:49.754196Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:12:55.896260Z","title":"Testing language model agents safely in the wild","venue":null,"work_id":"42b085b7-5850-4581-a9fa-e7a6872a7a7a","year":2023},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-06T15:57:20.673152Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:49.874527Z"},"links":{"citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:1c38c814d21f1255539a2614a3d7eb2706b290e8cac8947a1823a51995827e03","observation_id":"13f45acc-65b0-40e2-b566-b18e14637aef","resolution":{"observed_at":"2026-08-06T16:12:56.007571Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:12:55.569620Z","title":"Operator system card., 2025","venue":null,"work_id":"3009d5bc-5102-4f22-8279-1c5c2c00ef61","year":2025},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-06T15:57:20.673152Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:49.949585Z"},"links":{"citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:88e96d4c89c24cdcb46108ce3555612c24185ef7676d2dfd1083b1a814fbb1e4","observation_id":"4e67643d-8a91-4a05-8320-f454f3343446","resolution":{"observed_at":"2026-08-06T16:12:55.758295Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2502.11357","last_updated":"2025-05-30T02:30:57Z","snapshot_observed_at":"2026-07-06T20:37:28.247735Z","submitted_at":"2025-02-17T02:13:48Z","title":"Explorer: Scaling Exploration-driven Web Trajectory Synthesis for Multimodal Web Agents","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.11357","snapshot_observed_at":"2026-08-06T16:12:50.052388Z","title":"Explorer: Scaling exploration-driven web trajectory synthesis for multimodal web agents","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-06T15:57:20.673152Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:50.052388Z"},"links":{"cited_paper":"/paper/2502.11357","citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:ae40dd432b774f737e6639525aa0de721510b1afef0b42dfc55d4932cddedb12","observation_id":"4a81bf5e-1a03-41a2-bfc7-a20bbd1e56bc","resolution":{"observed_at":"2026-08-06T16:12:50.052388Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.07199","last_updated":"2024-08-13T20:52:13Z","snapshot_observed_at":"2026-08-01T22:07:45.419539Z","submitted_at":"2024-08-13T20:52:13Z","title":"Agent Q: Advanced Reasoning and Learning for Autonomous AI Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.07199","snapshot_observed_at":"2026-08-06T16:12:50.130722Z","title":"Agent Q: advanced reasoning and learning for autonomous AI agents","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-06T15:57:20.673152Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:50.130722Z"},"links":{"cited_paper":"/paper/2408.07199","citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:64112472e01dbaebfec53a3f9e37be271c321320ef52cc0622acfca1f2ff242e","observation_id":"e6905d58-8fda-4dc7-95a2-00730b0da54a","resolution":{"observed_at":"2026-08-06T16:12:50.130722Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:12:55.335916Z","title":"Webrl: Training LLM web agents via self- evolving online curriculum reinforcement learning","venue":null,"work_id":"728d8ba5-5d64-4a5e-874c-f6058bbeac19","year":2025},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-06T15:57:20.673152Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:50.189066Z"},"links":{"citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:d4096c288fb24af41f42a22bd83f99fda1c4b0d640847b8e406040bb67a2fc43","observation_id":"354f27ed-7fc2-4b1c-94b4-385219666d31","resolution":{"observed_at":"2026-08-06T16:12:55.424353Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2501.12326","last_updated":"2025-01-21T17:48:10Z","snapshot_observed_at":"2026-07-06T20:23:58.426780Z","submitted_at":"2025-01-21T17:48:10Z","title":"UI-TARS: Pioneering Automated GUI Interaction with Native Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.12326","snapshot_observed_at":"2026-08-06T16:12:50.263359Z","title":"UI-TARS: pioneering automated GUI interaction with native agents","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-06T15:57:20.673152Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:50.263359Z"},"links":{"cited_paper":"/paper/2501.12326","citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:19bdd096614f06ff6cfaa9ff8f09218ec652fe2197c1cb6ad8f71fc36411859c","observation_id":"52101733-bf6f-4e3e-802d-50e7f88ab6b9","resolution":{"observed_at":"2026-08-06T16:12:50.263359Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.13548","last_updated":"2025-05-10T07:10:46Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-10-20T14:46:48Z","title":"Towards Understanding Sycophancy in Language Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.13548","snapshot_observed_at":"2026-08-06T16:12:50.339267Z","title":"Towards understanding sycophancy in language models","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-06T15:57:20.673152Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:50.339267Z"},"links":{"cited_paper":"/paper/2310.13548","citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:7c912794923725d52d8e22149929cf468f84826da9e18fe100e17a370bf88079","observation_id":"8649ffeb-edf7-41dd-bf06-e35c8d85d5df","resolution":{"observed_at":"2026-08-06T16:12:50.339267Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2501.10893","last_updated":"2025-01-18T22:34:41Z","snapshot_observed_at":"2026-08-06T19:08:52.634844Z","submitted_at":"2025-01-18T22:34:41Z","title":"Learn-by-interact: A Data-Centric Framework for Self-Adaptive Agents in Realistic Environments","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.10893","snapshot_observed_at":"2026-08-06T16:12:50.409392Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-06T15:57:20.673152Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:50.409392Z"},"links":{"cited_paper":"/paper/2501.10893","citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:a436dae6a625ba8c52dce004a7566cfcef79c86516a39717da5f8b64d8b9ac67","observation_id":"98bfbb10-97bd-4952-954a-b2f5a33dd205","resolution":{"observed_at":"2026-08-06T16:12:50.409392Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:12:50.486326Z","title":"Qwen2.5: A party of foundation models, September 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-06T15:57:20.673152Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:50.486326Z"},"links":{"citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:a726d45393b97c86b7aca129955dc6496970c4f80706f7a1d9a1e02ddcaef2ed","observation_id":"83040be3-a4a0-49a5-9392-b7921466beb6","resolution":{"observed_at":"2026-08-06T16:12:50.486326Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.04957","last_updated":"2025-03-06T20:43:14Z","snapshot_observed_at":"2026-07-06T20:48:13.849680Z","submitted_at":"2025-03-06T20:43:14Z","title":"SafeArena: Evaluating the Safety of Autonomous Web Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.04957","snapshot_observed_at":"2026-08-06T16:12:50.559312Z","title":"Safearena: Evaluating the safety of autonomous web agents","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-06T15:57:20.673152Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:50.559312Z"},"links":{"cited_paper":"/paper/2503.04957","citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:c7cf3b18ea9f219950825cc1d83377267b1eff5d09e76542e45b667c2ca003b9","observation_id":"31e8bf2d-f917-47fb-a33f-041eded685a2","resolution":{"observed_at":"2026-08-06T16:12:50.559312Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:12:55.059058Z","title":"Can ai change your view? evidence from a large-scale online field experiment, April 2025","venue":null,"work_id":"d5ab1321-a1c9-461e-aa7f-e6a61c3a7d9a","year":2025},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-06T15:57:20.673152Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:50.630985Z"},"links":{"citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:c447d895e1b255a060d61e0722d1bf47bf3a83ddfcbb9721cc5ab90b3f5a8d6e","observation_id":"140ba2fb-313b-4d14-b637-eb18d8e94be6","resolution":{"observed_at":"2026-08-06T16:12:55.187072Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2212.10001","last_updated":"2023-06-01T05:38:00Z","snapshot_observed_at":"2026-07-06T14:32:44.453180Z","submitted_at":"2022-12-20T05:20:54Z","title":"Towards Understanding Chain-of-Thought Prompting: An Empirical Study of What Matters","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2212.10001","snapshot_observed_at":"2026-08-06T16:12:50.719954Z","title":"Towards understanding chain-of-thought prompting: An empirical study of what matters","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-06T15:57:20.673152Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:50.719954Z"},"links":{"cited_paper":"/paper/2212.10001","citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:d8b1eab1c52a77a7791d28ed7ae6e6d6d2060546ebc29e7af780035bf6e591ca","observation_id":"3bbc517c-394d-4f27-b53a-39185559dc19","resolution":{"observed_at":"2026-08-06T16:12:50.719954Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:12:54.781651Z","title":"Dissecting adversarial robustness of multimodal LM agents","venue":null,"work_id":"81530a13-bf12-43df-99f5-589e16c8bcb6","year":2025},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-06T15:57:20.673152Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:50.834857Z"},"links":{"citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:a23fc3c710fc1e9e6535a3242df662aee243b7798d94a7fec28c7ed680ea40a1","observation_id":"bd4d4d49-5c32-40a6-a7fc-f92f9c5c6f87","resolution":{"observed_at":"2026-08-06T16:12:54.903323Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.09187","last_updated":"2025-05-29T03:09:05Z","snapshot_observed_at":"2026-07-06T18:30:23.849880Z","submitted_at":"2024-06-13T14:49:26Z","title":"GuardAgent: Safeguard LLM Agents by a Guard Agent via Knowledge-Enabled Reasoning","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.09187","snapshot_observed_at":"2026-08-06T16:12:50.914742Z","title":"Guardagent: Safeguard LLM agents by a guard agent via knowledge-enabled reasoning","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-06T15:57:20.673152Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:50.914742Z"},"links":{"cited_paper":"/paper/2406.09187","citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:c00a4dfae7b2dd7e2f7e753414cd3c34f5d2a5100e69fe4a5d04b02a55d14533","observation_id":"d402eb36-565c-4176-a53a-60161258d2dc","resolution":{"observed_at":"2026-08-06T16:12:50.914742Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10634","last_updated":"2023-10-16T17:54:53Z","snapshot_observed_at":"2026-07-06T16:34:04.003157Z","submitted_at":"2023-10-16T17:54:53Z","title":"OpenAgents: An Open Platform for Language Agents in the Wild","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.10634","snapshot_observed_at":"2026-08-06T16:12:51.044093Z","title":"Liu, Yiheng Xu, Hongjin Su, Dongchan Shin, Caiming Xiong, and Tao Yu","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-06T15:57:20.673152Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:51.044093Z"},"links":{"cited_paper":"/paper/2310.10634","citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:c431b1041edf8bc15a4ebed9c41b39023622b8f772e7aeb6c00cad89af3a5ccd","observation_id":"4e881b8c-86f4-46dd-a444-8be366c975d8","resolution":{"observed_at":"2026-08-06T16:12:51.044093Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.17401","last_updated":"2025-05-31T18:34:01Z","snapshot_observed_at":"2026-08-01T16:54:45.609883Z","submitted_at":"2024-10-22T20:18:26Z","title":"AdvAgent: Controllable Blackbox Red-teaming on Web Agents","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.17401","snapshot_observed_at":"2026-08-06T16:12:51.111978Z","title":"Advweb: Controllable black-box attacks on vlm-powered web agents","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-06T15:57:20.673152Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:51.111978Z"},"links":{"cited_paper":"/paper/2410.17401","citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:7b80e760162c246315d2f9da6e8d90bf2cecf78b312b5e88709adecdba31c38b","observation_id":"10569b72-f8b6-470e-b0a8-8290ce82ad5a","resolution":{"observed_at":"2026-08-06T16:12:51.111978Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.11441","last_updated":"2023-11-06T07:39:49Z","snapshot_observed_at":"2026-08-04T03:29:49.409446Z","submitted_at":"2023-10-17T17:51:31Z","title":"Set-of-Mark Prompting Unleashes Extraordinary Visual Grounding in GPT-4V","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.11441","snapshot_observed_at":"2026-08-06T16:12:51.205216Z","title":"Set-of-mark prompting unleashes extraordinary visual grounding in gpt-4v","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-06T15:57:20.673152Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:51.205216Z"},"links":{"cited_paper":"/paper/2310.11441","citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:6ba51d079f7148afeae89c08ceede1e80d930146851e315f80fc92adf2a588ab","observation_id":"9b5202bd-1c0d-4e8d-aa5f-4415d66decd6","resolution":{"observed_at":"2026-08-06T16:12:51.205216Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.14197","last_updated":"2025-01-27T08:51:16Z","snapshot_observed_at":"2026-07-06T17:06:45.522731Z","submitted_at":"2023-12-21T01:08:39Z","title":"Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.14197","snapshot_observed_at":"2026-08-06T16:12:51.333428Z","title":"Benchmarking and defending against indirect prompt injection attacks on large language models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-06T15:57:20.673152Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:51.333428Z"},"links":{"cited_paper":"/paper/2312.14197","citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:22b86b0314e03aa5998f39d744c798b5e799ef6300deca69d9ed3c5ed72e18a9","observation_id":"176dae2d-28d1-42fe-8986-b5645525b5c9","resolution":{"observed_at":"2026-08-06T16:12:51.333428Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.02052","last_updated":"2025-02-27T20:13:19Z","snapshot_observed_at":"2026-07-06T19:26:38.002071Z","submitted_at":"2024-10-02T21:42:35Z","title":"ExACT: Teaching AI Agents to Explore with Reflective-MCTS and Exploratory Learning","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.02052","snapshot_observed_at":"2026-08-06T16:12:51.405901Z","title":"Exact: Teaching AI agents to explore with reflective-mcts and exploratory learning","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-06T15:57:20.673152Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:51.405901Z"},"links":{"cited_paper":"/paper/2410.02052","citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:71a49f948272088e2eef2ade16b8a5ac68bbc2574ee52ed9cfb7d10ba0b40706","observation_id":"434daac8-3b2d-44cc-90b4-ef956887eeee","resolution":{"observed_at":"2026-08-06T16:12:51.405901Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:12:54.486802Z","title":null,"venue":null,"work_id":"c2f5c7e6-bf27-42c4-b3ec-29329218dd3d","year":null},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-06T15:57:20.673152Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:51.484039Z"},"links":{"citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:447b7fe24716665ac2d94b45acff007e3aed2638b0f3e572930176caa40b90fc","observation_id":"5b643872-b3af-4805-a6a5-34bc3d19b471","resolution":{"observed_at":"2026-08-06T16:12:54.606093Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2411.02391","last_updated":"2025-05-24T16:15:46Z","snapshot_observed_at":"2026-08-05T21:14:08.776265Z","submitted_at":"2024-11-04T18:56:42Z","title":"Attacking Vision-Language Computer Agents via Pop-ups","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.02391","snapshot_observed_at":"2026-08-06T16:12:51.576325Z","title":"Attacking vision-language computer agents via pop-ups","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-06T15:57:20.673152Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:51.576325Z"},"links":{"cited_paper":"/paper/2411.02391","citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:fb021301682cd80601bee69653420c74fc7a28565491ca68884ea4311287cb61","observation_id":"deb16fda-5796-4beb-8290-da7d3a6c2079","resolution":{"observed_at":"2026-08-06T16:12:51.576325Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:12:54.273884Z","title":"From interaction to impact: Towards safer ai agent through understanding and evaluating mobile ui operation impacts","venue":null,"work_id":"600045fc-876f-4255-9e06-cb564f0bbee5","year":2025},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-06T15:57:20.673152Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:51.630479Z"},"links":{"citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:b8619156fdafa31039c2499f38cdaee68879addf5f78901d9fccec272b300548","observation_id":"f21657b1-bafc-4164-b794-b0f4e1f0ce8a","resolution":{"observed_at":"2026-08-06T16:12:54.374363Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.07079","last_updated":"2025-04-09T17:51:50Z","snapshot_observed_at":"2026-07-06T21:06:50.056353Z","submitted_at":"2025-04-09T17:51:50Z","title":"SkillWeaver: Web Agents can Self-Improve by Discovering and Honing Skills","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.07079","snapshot_observed_at":"2026-08-06T16:12:51.724294Z","title":"Skillweaver: Web agents can self-improve by discovering and honing skills","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-06T15:57:20.673152Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:51.724294Z"},"links":{"cited_paper":"/paper/2504.07079","citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:1eb29837fefe26a5d6cf3c79defb678d0f7023526d5b7728306bc0c899ca3f7c","observation_id":"c621420a-238f-4d62-8ea5-f2d00ec68cb7","resolution":{"observed_at":"2026-08-06T16:12:51.724294Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:12:53.991531Z","title":"Gpt-4v(ision) is a generalist web agent, if grounded","venue":null,"work_id":"ff212c7f-5528-4089-8189-1373daa630d3","year":2024},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-06T15:57:20.673152Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:51.789900Z"},"links":{"citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:86f3feb496510368bc379c11fec4b979905c64107066b991b7b34d12af89d105","observation_id":"4c7b9d0e-0d4d-4e08-912b-f47abac6ddf1","resolution":{"observed_at":"2026-08-06T16:12:54.105118Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:12:53.741492Z","title":"WebOlympus: An open platform for web agents on live websites","venue":null,"work_id":"cd1d023a-ca5f-4e1a-b050-6a775922d7a1","year":2024},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-06T15:57:20.673152Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:51.906860Z"},"links":{"citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:4746c05fe53856bf26bf395ace458fd23e36f3824f9098162878eb64b79efefc","observation_id":"96baaf2f-49f6-48ad-a77d-c87f762a7f43","resolution":{"observed_at":"2026-08-06T16:12:53.866343Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:12:53.550024Z","title":"Xu, Hao Zhu, Xuhui Zhou, Robert Lo, Abishek Sridhar, Xianyi Cheng, Tianyue Ou, Yonatan Bisk, Daniel Fried, Uri Alon, and Graham Neubig","venue":null,"work_id":"e9eba894-fe5b-4a87-b0b9-6c45408530ba","year":2024},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-06T15:57:20.673152Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:51.966506Z"},"links":{"citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:121859adee1fa6734d345ced29d740f05d9f00e438da02c592060566a7371c36","observation_id":"30a73cca-c0d5-44c2-91a1-beb71ec94a5f","resolution":{"observed_at":"2026-08-06T16:12:53.623624Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2412.13194","last_updated":"2024-12-17T18:59:50Z","snapshot_observed_at":"2026-08-03T11:34:22.888935Z","submitted_at":"2024-12-17T18:59:50Z","title":"Proposer-Agent-Evaluator(PAE): Autonomous Skill Discovery For Foundation Model Internet Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.13194","snapshot_observed_at":"2026-08-06T16:12:52.032965Z","title":"Checkout","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-06T15:57:20.673152Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:52.032965Z"},"links":{"cited_paper":"/paper/2412.13194","citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:91bfe0ecc63d9c67e77c50c39725f80404826e57a6a8ae410788c5739ebd687a","observation_id":"37e47a7e-91a5-43e4-9629-014fd5abfb46","resolution":{"observed_at":"2026-08-06T16:12:52.032965Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","latest_version":1,"primary_category":"cs.AI","snapshot_observed_at":"2026-08-06T15:57:20.673152Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents"},"reference_resolution":{"displayed":60,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":41,"verified_exact":0,"verified_fuzzy":19},"total_outbound_references":60},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"thesis":"As of 6 August 2026, this Paper Citation Record lists 60 of 60 outbound references and 8 inbound Pith citation observations for arXiv:2507.14293."}