{"as_of":"2026-08-19T12:03:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:48f5ade188293cd75862dc58bcdc066bc738baf22f72e098eaeef99c01e9f47f","coverage":[{"denominator":107,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":100,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-15T17:47:19.340716Z","state":"measured"},{"denominator":107,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":107,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-19T06:32:44.657259+00:00","state":"measured"},{"denominator":7,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":7,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-14T10:10:53.588133Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"pith","source_observed_at":"2026-07-09T20:16:29.371056Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"cited_work":{"arxiv_id":"2507.20526","doi":null,"metadata_source":"pith","pith_arxiv_id":"2507.20526","snapshot_observed_at":"2026-07-09T20:16:29.371056Z","title":"Security challenges in ai agent deployment: Insights from a large scale public competition","venue":"cs.AI","work_id":"67bad570-dc1a-499c-a3ec-5d3fd8fd2677","year":2025},"citing_paper":{"arxiv_id":"2512.10100","last_updated":"2026-04-07T12:47:26Z","snapshot_observed_at":"2026-08-13T07:45:00.165890Z","submitted_at":"2025-12-10T21:44:10Z","title":"Robust AI Security and Alignment: A Sisyphean Endeavor?","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-05-16T22:58:29.306435Z"},"links":{"cited_paper":"/paper/2507.20526","citing_paper":"/paper/2512.10100"},"observation_digest":"sha256:ffd510f107701208fcc5d8a59952a55751cac4d57ef72c6057f78ea4ef772d91","observation_id":"e410cc53-d242-462d-ae9f-a25a3c8b14c4","resolution":{"observed_at":"2026-05-16T22:58:38.506348Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"cited_work":{"arxiv_id":"2507.20526","doi":null,"metadata_source":"pith","pith_arxiv_id":"2507.20526","snapshot_observed_at":"2026-07-09T20:16:29.371056Z","title":"Security challenges in ai agent deployment: Insights from a large scale public competition","venue":"cs.AI","work_id":"67bad570-dc1a-499c-a3ec-5d3fd8fd2677","year":2025},"citing_paper":{"arxiv_id":"2605.01970","last_updated":"2026-05-15T06:42:15Z","snapshot_observed_at":"2026-08-17T08:09:03.966597Z","submitted_at":"2026-05-03T17:07:20Z","title":"Trojan Hippo: Weaponizing Agent Memory for Data Exfiltration","version":2},"reference_index":98,"source":"pdf_text","source_observed_at":"2026-05-09T17:13:47.722098Z"},"links":{"cited_paper":"/paper/2507.20526","citing_paper":"/paper/2605.01970"},"observation_digest":"sha256:0b25c41b6a8c4b1feb235199328dfad548c593650aa1d0de9d3b85eb7364ebec","observation_id":"e0c7cfb0-c723-460b-b20a-f6a34f627326","resolution":{"observed_at":"2026-05-11T16:21:10.196407Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"cited_work":{"arxiv_id":"2507.20526","doi":null,"metadata_source":"pith","pith_arxiv_id":"2507.20526","snapshot_observed_at":"2026-07-09T20:16:29.371056Z","title":"Security challenges in ai agent deployment: Insights from a large scale public competition","venue":"cs.AI","work_id":"67bad570-dc1a-499c-a3ec-5d3fd8fd2677","year":2025},"citing_paper":{"arxiv_id":"2605.01970","last_updated":"2026-05-15T06:42:15Z","snapshot_observed_at":"2026-08-17T08:09:03.966597Z","submitted_at":"2026-05-03T17:07:20Z","title":"Trojan Hippo: Weaponizing Agent Memory for Data Exfiltration","version":3},"reference_index":96,"source":"pdf_text","source_observed_at":"2026-05-19T17:30:22.481943Z"},"links":{"cited_paper":"/paper/2507.20526","citing_paper":"/paper/2605.01970"},"observation_digest":"sha256:5c07dc9a53462c28ba650519ad07a849a39e21a5c3c9f2a9904c646f6c0cf702","observation_id":"1b1003e8-5630-4ad1-bb7c-6bce0d332f62","resolution":{"observed_at":"2026-05-19T17:32:41.563586Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"cited_work":{"arxiv_id":"2507.20526","doi":null,"metadata_source":"pith","pith_arxiv_id":"2507.20526","snapshot_observed_at":"2026-07-09T20:16:29.371056Z","title":"Security challenges in ai agent deployment: Insights from a large scale public competition","venue":"cs.AI","work_id":"67bad570-dc1a-499c-a3ec-5d3fd8fd2677","year":2025},"citing_paper":{"arxiv_id":"2605.07986","last_updated":"2026-05-08T16:44:55Z","snapshot_observed_at":"2026-08-15T01:53:59.811523Z","submitted_at":"2026-05-08T16:44:55Z","title":"Towards Apples to Apples for AI Evaluations: From Real-World Use Cases to Evaluation Scenarios","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-05-11T02:54:52.984994Z"},"links":{"cited_paper":"/paper/2507.20526","citing_paper":"/paper/2605.07986"},"observation_digest":"sha256:73c47e663368adcfa7e123c22f3e4ea3c97b8bc309aaec0fcd972be7fcb61313","observation_id":"b3646d0a-d843-4619-9445-91cd122cc094","resolution":{"observed_at":"2026-05-11T02:55:53.062845Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"cited_work":{"arxiv_id":"2507.20526","doi":null,"metadata_source":"pith","pith_arxiv_id":"2507.20526","snapshot_observed_at":"2026-07-09T20:16:29.371056Z","title":"Security challenges in ai agent deployment: Insights from a large scale public competition","venue":"cs.AI","work_id":"67bad570-dc1a-499c-a3ec-5d3fd8fd2677","year":2025},"citing_paper":{"arxiv_id":"2607.07097","last_updated":"2026-07-08T07:31:37Z","snapshot_observed_at":"2026-08-14T13:02:55.241554Z","submitted_at":"2026-07-08T07:31:37Z","title":"Operational Reframing and Approval-Framed Delegation in Multi-Agent LLM Safety","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-07-09T20:14:36.433937Z"},"links":{"cited_paper":"/paper/2507.20526","citing_paper":"/paper/2607.07097"},"observation_digest":"sha256:57c7cfe2181d80c5e1af40aa26c94fcd4a2cff8b8147e97f29557fa790291a43","observation_id":"cd95b6ca-93a4-4171-a9fa-3a20fc84a7db","resolution":{"observed_at":"2026-07-09T20:16:29.372532Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2507.20526","snapshot_observed_at":"2026-08-01T01:12:44.201592Z","title":"content\":","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.26115","last_updated":"2026-07-28T16:03:39Z","snapshot_observed_at":"2026-08-13T19:33:22.724755Z","submitted_at":"2026-07-28T16:03:39Z","title":"GPT-Red: Automated Red Teaming via Self-Play at Scale","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-01T01:12:44.201592Z"},"links":{"cited_paper":"/paper/2507.20526","citing_paper":"/paper/2607.26115"},"observation_digest":"sha256:2e8511adcbd921eaf548217484154d2290221960deaff810ed86a6fe5549df56","observation_id":"c442ccb6-1671-4e00-a6cb-4a169654a8a0","resolution":{"observed_at":"2026-08-01T01:12:44.201592Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2507.20526","snapshot_observed_at":"2026-08-14T10:10:53.588133Z","title":"20 Appendix Contents A Data Curation Details","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.13482","last_updated":"2026-08-13T17:12:04Z","snapshot_observed_at":"2026-08-19T01:04:05.975307Z","submitted_at":"2026-08-13T17:12:04Z","title":"Synthetic Persona Pretraining: Alignment from Token Zero","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-14T10:10:53.588133Z"},"links":{"cited_paper":"/paper/2507.20526","citing_paper":"/paper/2608.13482"},"observation_digest":"sha256:6c99fb5027e6714b9eb659cb2da268c36d2c1fae590f438a78fabd437dcc656c","observation_id":"043ddbc3-aea2-4d9b-bb9a-fdfed5df6892","resolution":{"observed_at":"2026-08-14T10:10:53.588133Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2507.20526/citation-record","integrity":"/paper/2507.20526/integrity","json":"/paper/2507.20526/citation-record.json","paper":"/paper/2507.20526"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2204.01691","last_updated":"2022-08-16T16:06:33Z","snapshot_observed_at":"2026-08-18T11:44:22.813405Z","submitted_at":"2022-04-04T17:57:11Z","title":"Do As I Can, Not As I Say: Grounding Language in Robotic Affordances","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2204.01691","snapshot_observed_at":"2026-08-15T17:47:19.071254Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.071254Z"},"links":{"cited_paper":"/paper/2204.01691","citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:c0f82518f30ec8d56daedfbf7fbb414eef8b5b2a377a0019139dceabae7ff22b","observation_id":"6a4792f4-8e15-47ab-95d6-be4cad63fe20","resolution":{"observed_at":"2026-08-15T17:47:19.071254Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.02151","last_updated":"2025-04-17T18:55:45Z","snapshot_observed_at":"2026-08-16T14:04:12.947538Z","submitted_at":"2024-04-02T17:58:27Z","title":"Jailbreaking Leading Safety-Aligned LLMs with Simple Adaptive Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.02151","snapshot_observed_at":"2026-08-15T17:47:19.075371Z","title":"Andriushchenko, F","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.075371Z"},"links":{"cited_paper":"/paper/2404.02151","citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:20ed4e3a7db814c9cb666b0354de33112a8e5a8a1283c9ff6f9fc9c66cb2c84c","observation_id":"def8f676-eb00-41cc-b1f9-7fd8fb932a00","resolution":{"observed_at":"2026-08-15T17:47:19.075371Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.09024","last_updated":"2025-04-18T14:30:31Z","snapshot_observed_at":"2026-08-16T05:17:43.289570Z","submitted_at":"2024-10-11T17:39:22Z","title":"AgentHarm: A Benchmark for Measuring Harmfulness of LLM Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.09024","snapshot_observed_at":"2026-08-15T17:47:19.078291Z","title":"Andriushchenko, A","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.078291Z"},"links":{"cited_paper":"/paper/2410.09024","citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:af284836ef92299552fe35c939517ba734eb57ff818345e9ccbe88f0def89dc3","observation_id":"02df7741-8ea6-4de8-b320-5ac292355d48","resolution":{"observed_at":"2026-08-15T17:47:19.078291Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:47:19.081155Z","title":"Expanding our model safety bug bounty program","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.081155Z"},"links":{"citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:d72341d4ab2207bdf7399a8db1548ad645d3df355e3e100c65ba524319829331","observation_id":"b6856078-1218-4d3d-9745-438248ede2bc","resolution":{"observed_at":"2026-08-15T17:47:19.081155Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:47:19.083673Z","title":"Claude 3.7 sonnet system card","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.083673Z"},"links":{"citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:a363ab52730f69aa743874d5be839364a44cc9089f6dd20a084b1c5c79847fbe","observation_id":"c4b9706c-16d7-4047-99b4-5077ec019f70","resolution":{"observed_at":"2026-08-15T17:47:19.083673Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:47:19.086593Z","title":"Bhatt, S","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.086593Z"},"links":{"citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:46fbaa5e28d9e357887f0fb95a517f16a91a97fbcbaaa483cc1157b0e6038ee3","observation_id":"57174dce-4521-4dbd-a684-8633a6529b7f","resolution":{"observed_at":"2026-08-15T17:47:19.086593Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:47:19.089464Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.089464Z"},"links":{"citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:f906df27adf21e503cf3372d93417a15bfe8edaeea5b80c5dbbc305a16617298","observation_id":"6db0972f-9635-4e38-b2cc-ba2540fd6267","resolution":{"observed_at":"2026-08-15T17:47:19.089464Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:47:19.091959Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.091959Z"},"links":{"citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:560bebd684c8f378978e4275d0aaad4cfcb987d4e8a13dd0a360c8907dad0bb4","observation_id":"3bca5035-c1af-43e8-8982-816ff3c700b8","resolution":{"observed_at":"2026-08-15T17:47:19.091959Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:47:19.094371Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.094371Z"},"links":{"citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:fcc6c23d13665b3c8fbc297b774a554a20fc89a3beed758949370968d8147108","observation_id":"63293715-170d-457e-9115-44c4e34a86c9","resolution":{"observed_at":"2026-08-15T17:47:19.094371Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.02817","last_updated":"2025-01-30T11:11:37Z","snapshot_observed_at":"2026-08-16T14:12:43.743148Z","submitted_at":"2024-03-05T09:37:13Z","title":"Here Comes The AI Worm: Unleashing Zero-click Worms that Target GenAI-Powered Applications","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.02817","snapshot_observed_at":"2026-08-15T17:47:19.096474Z","title":"Cohen, R","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.096474Z"},"links":{"cited_paper":"/paper/2403.02817","citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:eecab3f3e39589a188ae83297b8fc011c387462b842ee79de0e2aba0152c9df7","observation_id":"7b864638-df42-475c-b507-a8db817b05e6","resolution":{"observed_at":"2026-08-15T17:47:19.096474Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:47:19.098906Z","title":"Debenedetti, J","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.098906Z"},"links":{"citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:c5378a78a8c0125122f454189c691a1afeb5d3847a807d334b76dad836d616bc","observation_id":"27cf2763-0a5f-4254-b864-2ea95aeec20e","resolution":{"observed_at":"2026-08-15T17:47:19.098906Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:47:19.103384Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.103384Z"},"links":{"citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:6612549ee17d26f8e8dbffbb684006ade13d732c841c0a7d4cc14201ddf626d5","observation_id":"94c45ae6-0389-4c1f-b566-6c114ecfe555","resolution":{"observed_at":"2026-08-15T17:47:19.103384Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.18575","last_updated":"2025-05-16T22:42:29Z","snapshot_observed_at":"2026-08-15T08:43:14.412859Z","submitted_at":"2025-04-22T17:51:03Z","title":"WASP: Benchmarking Web Agent Security Against Prompt Injection Attacks","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.18575","snapshot_observed_at":"2026-08-15T17:47:19.105920Z","title":"Evtimov, A","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.105920Z"},"links":{"cited_paper":"/paper/2504.18575","citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:fdd9b054c2abfbea558476624509d976e327c1b4684b1795fa887da1c9b75285","observation_id":"48d48abb-2be6-4ce2-b2f5-663a533e31b1","resolution":{"observed_at":"2026-08-15T17:47:19.105920Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:47:19.108892Z","title":"Faria and N","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.108892Z"},"links":{"citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:3f2384edd39041e00e66f064effa42e9d08132bea261d1dc2cc73dca780fdf6c","observation_id":"32fb7604-4fbe-4633-9681-1233d4c41ea0","resolution":{"observed_at":"2026-08-15T17:47:19.108892Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.15897","last_updated":"2024-08-27T18:23:44Z","snapshot_observed_at":"2026-08-18T14:41:00.471771Z","submitted_at":"2024-01-29T05:46:14Z","title":"Red-Teaming for Generative AI: Silver Bullet or Security Theater?","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.15897","snapshot_observed_at":"2026-08-15T17:47:19.111577Z","title":"Feffer, A","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.111577Z"},"links":{"cited_paper":"/paper/2401.15897","citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:8ccc869ca8cd561a97c5a388ecb28f8f6b40cb7c4384f6c5609aeb18de360d85","observation_id":"cf608a58-26d5-4274-a24e-27e57af12d5a","resolution":{"observed_at":"2026-08-15T17:47:19.111577Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:47:19.115035Z","title":"Uk aisi × gray swan agent red-teaming chal- lenge: Results snapshot","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.115035Z"},"links":{"citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:70217d432f74dd4288a6be1673520ed17d28a77210edd872401ef81ab2972805","observation_id":"588825ab-d9d2-4c11-af23-d937547b13fa","resolution":{"observed_at":"2026-08-15T17:47:19.115035Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:47:19.117832Z","title":"Greshake, S","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.117832Z"},"links":{"citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:a08d52aac38a9a113028aea2bd8a2df63d34df94b9d9ddb993aabeeccdee62c3","observation_id":"f004b6c5-e53b-4305-a3ef-6a6614375626","resolution":{"observed_at":"2026-08-15T17:47:19.117832Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.00586","last_updated":"2024-11-30T21:02:06Z","snapshot_observed_at":"2026-08-16T21:48:36.525936Z","submitted_at":"2024-11-30T21:02:06Z","title":"Evaluating Large Language Models' Capability to Launch Fully Automated Spear Phishing Campaigns: Validated on Human Subjects","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.00586","snapshot_observed_at":"2026-08-15T17:47:19.124153Z","title":"Heiding, S","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.124153Z"},"links":{"cited_paper":"/paper/2412.00586","citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:5ffca5496b2fffe8ea0feed32f09ff29f74d6bc76a92e056a5531287bd310d28","observation_id":"074f70ba-9d23-4083-91ed-dd387aeb3b71","resolution":{"observed_at":"2026-08-15T17:47:19.124153Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.01050","last_updated":"2025-05-02T06:51:11Z","snapshot_observed_at":"2026-08-16T09:52:00.421136Z","submitted_at":"2025-05-02T06:51:11Z","title":"Transferable Adversarial Attacks on Black-Box Vision-Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.01050","snapshot_observed_at":"2026-08-15T17:47:19.126970Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.126970Z"},"links":{"cited_paper":"/paper/2505.01050","citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:ebde1a6af442ee689e395cb44fe4b2ccfa0bf1eadc52c4d435283d71c66d325d","observation_id":"083f7259-0d1d-4bde-8eca-180cf529d63e","resolution":{"observed_at":"2026-08-15T17:47:19.126970Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.03556","last_updated":"2024-12-19T22:37:45Z","snapshot_observed_at":"2026-08-16T14:32:35.895208Z","submitted_at":"2024-12-04T18:51:32Z","title":"Best-of-N Jailbreaking","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.03556","snapshot_observed_at":"2026-08-15T17:47:19.129525Z","title":"Hughes, S","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.129525Z"},"links":{"cited_paper":"/paper/2412.03556","citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:fc9bdab9e112729529ff42e4f2c06f034a3b2b497c9bd117793d62daf885b6b8","observation_id":"0c3eca0e-339e-4065-a39d-f77dd9b5837d","resolution":{"observed_at":"2026-08-15T17:47:19.129525Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:47:19.132154Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.132154Z"},"links":{"citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:826a93b278ef4c6748641c48628961a35b7f58160b83c71fd79b498afe29b4fc","observation_id":"e401b796-770e-4400-9ddf-488a25610696","resolution":{"observed_at":"2026-08-15T17:47:19.132154Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:47:19.134457Z","title":"Johnson, M","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.134457Z"},"links":{"citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:d45c87e8b514f04aa98cbca0d8b919e080e3960b8118e82b5b4aa44f6d4d2602","observation_id":"bfbffe20-f380-4b1e-aeea-81950610f670","resolution":{"observed_at":"2026-08-15T17:47:19.134457Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.07791","last_updated":"2024-07-23T01:59:54Z","snapshot_observed_at":"2026-08-16T16:14:48.420207Z","submitted_at":"2024-07-10T16:08:46Z","title":"Flooding Spread of Manipulated Knowledge in LLM-Based Multi-Agent Communities","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.07791","snapshot_observed_at":"2026-08-15T17:47:19.136981Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.136981Z"},"links":{"cited_paper":"/paper/2407.07791","citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:30f17e062b4b3bcfe4d61485a12acb23b7159c314a39e54aeedd1ac2d830df82","observation_id":"fdfdedef-5d10-4686-9e3a-c5188a3f8bb6","resolution":{"observed_at":"2026-08-15T17:47:19.136981Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:47:19.139627Z","title":"Kumar, E","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.139627Z"},"links":{"citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:8e19b63301caf62767f4ef038524074a8b914e45d9f9790c7dc6822eea6f741c","observation_id":"3f1724cb-a159-4887-b993-1e8929b567c8","resolution":{"observed_at":"2026-08-15T17:47:19.139627Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.07283","last_updated":"2024-10-09T11:01:29Z","snapshot_observed_at":"2026-08-11T20:32:18.138792Z","submitted_at":"2024-10-09T11:01:29Z","title":"Prompt Infection: LLM-to-LLM Prompt Injection within Multi-Agent Systems","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.07283","snapshot_observed_at":"2026-08-15T17:47:19.142175Z","title":"Lee and M","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.142175Z"},"links":{"cited_paper":"/paper/2410.07283","citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:5f7d8821ddf87779bce5391548d4bc363603600fbcb81b87d49df165d17b5f38","observation_id":"a7d4f0c9-357c-4214-a983-f0d31fcbaa8e","resolution":{"observed_at":"2026-08-15T17:47:19.142175Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:47:19.144902Z","title":"Lermen, M","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.144902Z"},"links":{"citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:82c5c8a0a681f1d54b33be8c8e0570378e069b752c4279e22745cbf208aa5f3b","observation_id":"e64bc88c-f15b-4dcd-91af-cdfa2553d9ed","resolution":{"observed_at":"2026-08-15T17:47:19.144902Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.15221","last_updated":"2024-09-04T00:58:59Z","snapshot_observed_at":"2026-08-16T13:23:25.577041Z","submitted_at":"2024-08-27T17:33:30Z","title":"LLM Defenses Are Not Robust to Multi-Turn Human Jailbreaks Yet","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.15221","snapshot_observed_at":"2026-08-15T17:47:19.147366Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.147366Z"},"links":{"cited_paper":"/paper/2408.15221","citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:8fb7ec807fc7d5e6c80d01033b215b4099fddc47eebcad151bd744d09aa2f1f3","observation_id":"cfa6401f-8ffc-4abb-8f91-c8e965f06af6","resolution":{"observed_at":"2026-08-15T17:47:19.147366Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:47:19.150052Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.150052Z"},"links":{"citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:02f1ca49e796f98e00e44994978cc9f169b68240fb3b42b4768979e24557c3cd","observation_id":"e65a18b4-ed58-43c1-86b9-5318cc5b9608","resolution":{"observed_at":"2026-08-15T17:47:19.150052Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05295","last_updated":"2025-04-22T05:20:39Z","snapshot_observed_at":"2026-08-18T07:13:43.269338Z","submitted_at":"2024-10-03T17:59:01Z","title":"AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.05295","snapshot_observed_at":"2026-08-15T17:47:19.153136Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.153136Z"},"links":{"cited_paper":"/paper/2410.05295","citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:08de3900cd26db64c0eee8eb6619cc3ba9c86dfbbb254350fb8fdf8cbfd1fc65","observation_id":"6c933c65-6373-425f-9219-02017561cbad","resolution":{"observed_at":"2026-08-15T17:47:19.153136Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:47:19.156009Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.156009Z"},"links":{"citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:ad98892708311293a6d43fcc63d66625fef63e30b2e704ae59e67967ce74372d","observation_id":"1b5a9ea4-d4af-4b0d-acea-952c26af61f1","resolution":{"observed_at":"2026-08-15T17:47:19.156009Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:47:19.158261Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.158261Z"},"links":{"citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:85df5918fc213a2c82838c8f76919e27482d84e9cdeb33b355591d33e19584cb","observation_id":"25f3b27b-deca-41de-88c0-3f0c3a9d87fa","resolution":{"observed_at":"2026-08-15T17:47:19.158261Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:47:19.160183Z","title":"Mazeika, L","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.160183Z"},"links":{"citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:520055a208482578ef7ac0d42398fa7418ac698c32e0723492121355ebb8b258","observation_id":"409187ee-40e2-41ac-8856-d001f43d3442","resolution":{"observed_at":"2026-08-15T17:47:19.160183Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:47:19.162177Z","title":"McInnes, J","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.162177Z"},"links":{"citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:7276dcff77caeed7eeba0d85b0ab70fd0aa97518e178bdeff278234c22a13a62","observation_id":"1862cae9-aa5f-45f2-8895-a150c316d39c","resolution":{"observed_at":"2026-08-15T17:47:19.162177Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.02119","last_updated":"2024-10-31T15:57:42Z","snapshot_observed_at":"2026-08-18T18:32:32.343266Z","submitted_at":"2023-12-04T18:49:23Z","title":"Tree of Attacks: Jailbreaking Black-Box LLMs Automatically","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.02119","snapshot_observed_at":"2026-08-15T17:47:19.165122Z","title":"Mehrotra, M","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.165122Z"},"links":{"cited_paper":"/paper/2312.02119","citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:bb5407ef2af754ee68b27236cb61889d37c8d27739c540153735d32a60a1d488","observation_id":"4836e682-5024-4df1-8b7b-0d5e60a3d946","resolution":{"observed_at":"2026-08-15T17:47:19.165122Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:47:19.168478Z","title":"Details about metr’s preliminary evaluation of openai’s o3 and o4-mini","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.168478Z"},"links":{"citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:6faee45f5e394b0adb56a90a9b779020aa7b43598849c259fe61892c1cd26b11","observation_id":"f226e831-0d5d-4b80-8ee9-b4063b68529f","resolution":{"observed_at":"2026-08-15T17:47:19.168478Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:47:19.171399Z","title":"Measuring ai ability to complete long tasks","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.171399Z"},"links":{"citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:e0e8b6df363987e37ee346fa2bcadbdaf3498b75106a5ee9dda4106e44f3a329","observation_id":"2b62b90f-c2cb-443f-9244-d425bb66ca26","resolution":{"observed_at":"2026-08-15T17:47:19.171399Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2302.07842","last_updated":"2023-02-15T18:25:52Z","snapshot_observed_at":"2026-08-15T09:25:47.428131Z","submitted_at":"2023-02-15T18:25:52Z","title":"Augmented Language Models: a Survey","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2302.07842","snapshot_observed_at":"2026-08-15T17:47:19.173910Z","title":"Mialon, R","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.173910Z"},"links":{"cited_paper":"/paper/2302.07842","citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:e27de8e777606534eef12e681fd32e69f45349302b50c6228a6bd0e34bdfee40","observation_id":"bf5c7a19-82fa-4e3c-904a-5537485b0ee3","resolution":{"observed_at":"2026-08-15T17:47:19.173910Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.12983","last_updated":"2023-11-21T20:34:47Z","snapshot_observed_at":"2026-08-13T10:06:26.439949Z","submitted_at":"2023-11-21T20:34:47Z","title":"GAIA: a benchmark for General AI Assistants","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.12983","snapshot_observed_at":"2026-08-15T17:47:19.177135Z","title":"Mialon, C","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.177135Z"},"links":{"cited_paper":"/paper/2311.12983","citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:4c23d1cfff3f15ceb664e35303f50bfb5ae2744e7b48c982bd7b3f2f6ed4753a","observation_id":"3d5a116f-309c-4e6c-8a19-56afdc227578","resolution":{"observed_at":"2026-08-15T17:47:19.177135Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:47:19.179818Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.179818Z"},"links":{"citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:6c4b7ab135e7d74376939d83635f91c3b0f1f0dc71d5a24c965830adbb964208","observation_id":"0f682b50-589b-448b-bb0c-9abe09c5616a","resolution":{"observed_at":"2026-08-15T17:47:19.179818Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:47:19.182117Z","title":"Preparedness — openai.com","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.182117Z"},"links":{"citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:51615ec803b64ceb7dda5b0e841f29bcba334ff1755655e159d9a0e1b8f326f5","observation_id":"fa13db13-6a9e-489e-822e-bcfaa4b3d13c","resolution":{"observed_at":"2026-08-15T17:47:19.182117Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:47:19.184766Z","title":"Chatgpt agents system card","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.184766Z"},"links":{"citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:32ff2e85df51395164994ed45c9e04ed323dd4f4d668b730140ac38fefe99e3c","observation_id":"84eba54b-f470-4784-a898-1f2c523efbe7","resolution":{"observed_at":"2026-08-15T17:47:19.184766Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:47:19.187619Z","title":"Deep research system card","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.187619Z"},"links":{"citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:3704fc472963cda5d4e211484f541f9abe92be819647b920509871e9f3e3baed","observation_id":"d3ac1728-34b0-4dc3-a721-f288d25ecc5a","resolution":{"observed_at":"2026-08-15T17:47:19.187619Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:47:19.189984Z","title":"Operator system card","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.189984Z"},"links":{"citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:99bf49cbda6457cee59349c2facbcf6625fa2206785c7074766266fdd5817e84","observation_id":"39abe4ed-1615-441d-8660-da66a3a09521","resolution":{"observed_at":"2026-08-15T17:47:19.189984Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:47:19.195238Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.195238Z"},"links":{"citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:2ef6541ae12267c3c62f6feb2df2b713bd9224a8a44938f7274de8420d018b06","observation_id":"7c319e5e-fa0c-46ad-88e1-976fc751ca7d","resolution":{"observed_at":"2026-08-15T17:47:19.195238Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:47:19.197325Z","title":"Purpura, S","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.197325Z"},"links":{"citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:f2513c902c55dceb3fdf1dde47e62b4bb3b9900d0ba89af5ff60aab2d8ac52b5","observation_id":"209f223a-6ff2-429a-8376-65168a195b8f","resolution":{"observed_at":"2026-08-15T17:47:19.197325Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.15115","last_updated":"2025-01-03T02:18:21Z","snapshot_observed_at":"2026-08-17T18:50:07.059564Z","submitted_at":"2024-12-19T17:56:09Z","title":"Qwen2.5 Technical Report","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.15115","snapshot_observed_at":"2026-08-15T17:47:19.199659Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.199659Z"},"links":{"cited_paper":"/paper/2412.15115","citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:9f3cd3211482312eaee3d8b274c44467091c8f28df1e3755a709527abb3233e4","observation_id":"368ea187-4c4a-49f5-b511-219c17b2e4e1","resolution":{"observed_at":"2026-08-15T17:47:19.199659Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:47:19.931484Z","title":"Rahmatullaev, P","venue":null,"work_id":"8d8401a6-aee5-4253-92b2-39c1d382a6d9","year":2025},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.202229Z"},"links":{"citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:f22b5890df2674d49520c282964cef284f0fce9926cd57599ed9ad1bb4f53b8d","observation_id":"5848f8a5-53b3-4f3d-920d-b4ffff5e2933","resolution":{"observed_at":"2026-08-15T17:47:19.933943Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:47:19.204832Z","title":"Reimers and I","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.204832Z"},"links":{"citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:717a0670c69077b8f0ac063208f3df204cab74db042ec0373e79cc9f78cae1ac","observation_id":"937c2cc3-10ff-46df-8a36-04b5474ea46d","resolution":{"observed_at":"2026-08-15T17:47:19.204832Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.12022","last_updated":"2023-11-20T18:57:34Z","snapshot_observed_at":"2026-08-18T14:12:03.598270Z","submitted_at":"2023-11-20T18:57:34Z","title":"GPQA: A Graduate-Level Google-Proof Q&A Benchmark","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.12022","snapshot_observed_at":"2026-08-15T17:47:19.207929Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.207929Z"},"links":{"cited_paper":"/paper/2311.12022","citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:a8266fb067b96c230980b5c7d0ec926fdc2f13050859fe390b2004178cca24c2","observation_id":"7200a0d4-a498-4d2a-bb7e-03c1462fc867","resolution":{"observed_at":"2026-08-15T17:47:19.207929Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.13691","last_updated":"2024-11-09T20:00:07Z","snapshot_observed_at":"2026-08-17T16:53:16.288007Z","submitted_at":"2024-10-17T15:55:36Z","title":"Jailbreaking LLM-Controlled Robots","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.13691","snapshot_observed_at":"2026-08-15T17:47:19.211093Z","title":"Robey, Z","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.211093Z"},"links":{"cited_paper":"/paper/2410.13691","citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:4e3f67f149ba62515882b1f83e2027683d68055b168b1ea0afcfae89caa46320","observation_id":"6caf2cf7-f2ad-4c72-9b1a-373e7d114583","resolution":{"observed_at":"2026-08-15T17:47:19.211093Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:47:19.925029Z","title":"Roucher, A","venue":null,"work_id":"c67adce0-51a8-4448-a026-d8caf553a19f","year":2025},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.213996Z"},"links":{"citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:b624c235777eda70a7adce882e16283e39dbaa2f217a88605aef4147206da457","observation_id":"d54c6be4-0c87-4bc6-8d64-bdf834eddc92","resolution":{"observed_at":"2026-08-15T17:47:19.927551Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:47:19.917747Z","title":null,"venue":null,"work_id":"ce06045d-c246-4ae4-96ed-f7a778a8a35c","year":2023},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.217333Z"},"links":{"citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:f00d0691c6115209fd22de6c6c2c3cccb0bd2ed4aa2adab8e70f08fd7f34de04","observation_id":"493e19ec-7cc7-47bd-90b7-2679145717a4","resolution":{"observed_at":"2026-08-15T17:47:19.920162Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:47:19.911405Z","title":null,"venue":null,"work_id":"dc8e0bdf-e1b3-4d1f-974f-868ec54ce920","year":2020},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.219557Z"},"links":{"citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:933727c97e446e284fd5656feeeb818d3da472a6946456c37a597a791bf5cd59","observation_id":"eba75b72-9139-4770-9ce7-ca58ce8f94ec","resolution":{"observed_at":"2026-08-15T17:47:19.913603Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:47:19.221378Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.221378Z"},"links":{"citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:f14a8bdad54afaf8b9ead4276e05ab0ad175639786cb8aec69c0d0a1136130ad","observation_id":"978e8c9c-71cc-46d5-90d6-d6816a664187","resolution":{"observed_at":"2026-08-15T17:47:19.221378Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:47:19.902528Z","title":null,"venue":null,"work_id":"3a661708-da47-47fa-9e5a-b4c1923f4c74","year":2020},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.223638Z"},"links":{"citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:a694fc6f11c6a8593305526c5e92eeb55d1d0112e4c5d1ffd822f7fc35b1787d","observation_id":"9307e310-239d-4831-8c1b-b30d37e90ad5","resolution":{"observed_at":"2026-08-15T17:47:19.904617Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.13208","last_updated":"2024-04-19T22:55:23Z","snapshot_observed_at":"2026-08-11T23:45:02.178667Z","submitted_at":"2024-04-19T22:55:23Z","title":"The Instruction Hierarchy: Training LLMs to Prioritize Privileged Instructions","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.13208","snapshot_observed_at":"2026-08-15T17:47:19.225798Z","title":"Wallace, K","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.225798Z"},"links":{"cited_paper":"/paper/2404.13208","citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:b34a58b4f2a87d3a8a5574143f0afc8ed1bfc4947c1b5ce18d8fc536a899158d","observation_id":"4cd8bfdb-3ee2-45dd-83e7-d30072eecbd6","resolution":{"observed_at":"2026-08-15T17:47:19.225798Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:47:19.896712Z","title":null,"venue":null,"work_id":"4b6c0f67-a4fa-4026-bb86-fd16e873c6d4","year":2023},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.227876Z"},"links":{"citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:700dd5fddf290da7bb12354a9c165bf48364b2816555c9dfc6d9be8b1134b512","observation_id":"c10b5f23-f9d5-4a67-8244-5826bd7f7810","resolution":{"observed_at":"2026-08-15T17:47:19.898975Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.14197","last_updated":"2025-01-27T08:51:16Z","snapshot_observed_at":"2026-08-16T18:17:43.393858Z","submitted_at":"2023-12-21T01:08:39Z","title":"Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.14197","snapshot_observed_at":"2026-08-15T17:47:19.229712Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.229712Z"},"links":{"cited_paper":"/paper/2312.14197","citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:45952060dd55a9c88b13aa084a5752a453f8cb9096865b72a44023efe73b4714","observation_id":"20415c1e-99fa-4753-a550-13545332c0d0","resolution":{"observed_at":"2026-08-15T17:47:19.229712Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2501.18841","last_updated":"2025-01-31T01:20:44Z","snapshot_observed_at":"2026-08-18T02:49:23.189544Z","submitted_at":"2025-01-31T01:20:44Z","title":"Trading Inference-Time Compute for Adversarial Robustness","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.18841","snapshot_observed_at":"2026-08-15T17:47:19.232151Z","title":"Zaremba, E","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.232151Z"},"links":{"cited_paper":"/paper/2501.18841","citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:ba2d88c00927528d82c109090abe267562e58c8da20f456a31c496db32274ca6","observation_id":"6d6aad54-6660-475f-bc54-2f7eb620a7ea","resolution":{"observed_at":"2026-08-15T17:47:19.232151Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.06373","last_updated":"2024-01-23T22:46:12Z","snapshot_observed_at":"2026-08-16T14:27:54.649783Z","submitted_at":"2024-01-12T16:13:24Z","title":"How Johnny Can Persuade LLMs to Jailbreak Them: Rethinking Persuasion to Challenge AI Safety by Humanizing LLMs","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.06373","snapshot_observed_at":"2026-08-15T17:47:19.235453Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.235453Z"},"links":{"cited_paper":"/paper/2401.06373","citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:cf712401cbd2388587deec86c49e64938d1ab8eb590281260598193e9c89947d","observation_id":"030abce0-698d-484d-b01f-2ca0158a6e6a","resolution":{"observed_at":"2026-08-15T17:47:19.235453Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:47:19.890138Z","title":null,"venue":null,"work_id":"128651d0-3f20-4eb2-98c9-327e44077e2c","year":2024},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.238201Z"},"links":{"citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:ee265d8ebf664d0e4a9e990009ab04b5cc6bd83cb1f8817c029e9e1f06809eb5","observation_id":"a7bc640e-c73b-4c96-88cd-b0fe0f98fb7e","resolution":{"observed_at":"2026-08-15T17:47:19.892500Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:47:19.883905Z","title":null,"venue":null,"work_id":"55021934-c104-4c98-bec6-2b76919d7680","year":2025},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.240357Z"},"links":{"citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:ed073b66cd29b80f4d71f1190bc0c2995612f687343ac2af16b2fa729b9fe3b5","observation_id":"0e91e467-858c-4466-88f4-edb76358bb1f","resolution":{"observed_at":"2026-08-15T17:47:19.886391Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-08-12T09:06:50.363435Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-08-15T17:47:19.242657Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.242657Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:bbbcb46dcd3c0b1ab99a5b03574cf4d331a24194eeb1d8467df303fcd423f8c3","observation_id":"1a03c5cd-51d4-4542-abb7-e936020529b3","resolution":{"observed_at":"2026-08-15T17:47:19.242657Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:47:19.877762Z","title":null,"venue":null,"work_id":"41b1deb8-ec8f-467a-b406-fdc9bce7cb01","year":null},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.246042Z"},"links":{"citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:dd02e22e0bb8df4a0bf34558d9c9e994e0fb03fc691916a0a07dd14bcb537f82","observation_id":"f8dd7e76-1dff-43af-a397-240aba6d0b22","resolution":{"observed_at":"2026-08-15T17:47:19.880210Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:47:19.871532Z","title":null,"venue":null,"work_id":"4662932d-e3d7-43c7-bc5a-19ca4a817d17","year":null},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.248886Z"},"links":{"citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:ad02892b29361ffc88ff1ba958a85f31eec34a4500d13124c2261b38c725fcd4","observation_id":"715de50d-cb8e-41be-86c6-886d9ec0e8cc","resolution":{"observed_at":"2026-08-15T17:47:19.873977Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:47:19.865445Z","title":null,"venue":null,"work_id":"df5e2fd8-1b0e-4fef-b6ce-0a104759a5d0","year":null},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.251206Z"},"links":{"citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:a595606d3b2c73c513b880e2b4d37c01f48662eb815c756eb0b6414a3635129b","observation_id":"4c780335-3e09-44d4-b8fe-293e5e958597","resolution":{"observed_at":"2026-08-15T17:47:19.867800Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:47:19.859172Z","title":null,"venue":null,"work_id":"3575a591-4854-4768-973d-296fab2bd590","year":null},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.254140Z"},"links":{"citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:d8f2021ec8fe9d0f8d3e1487bb8fcbd51204273c898e241d64650272ca1f6d06","observation_id":"33f854d1-18a9-4f98-be9b-e46ce6760f4d","resolution":{"observed_at":"2026-08-15T17:47:19.861343Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:47:19.853092Z","title":null,"venue":null,"work_id":"5fac4575-4742-4923-98eb-04b3cdc79aa7","year":null},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.257780Z"},"links":{"citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:b5ff8e9606194f2e8c384767b2336dedada8b49c11a544d2b6007878872f7b8a","observation_id":"a0020fb4-0294-4f31-8eaf-0b0ebcca14c6","resolution":{"observed_at":"2026-08-15T17:47:19.855414Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:47:19.846715Z","title":null,"venue":null,"work_id":"98eca871-bc8a-4773-8bb7-cdea91995866","year":null},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.260020Z"},"links":{"citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:2158d209fdc1fa7fc030002bd57285be519879a3de7f89f25c3e11a032715f63","observation_id":"31618edc-ca69-4ff1-8015-fe92e1e18ad0","resolution":{"observed_at":"2026-08-15T17:47:19.849049Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:47:19.840267Z","title":"type\": \"function","venue":null,"work_id":"ce58b404-fe59-47f5-9399-175765fd3186","year":2022},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.262192Z"},"links":{"citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:1373994738978fc9cc34654442f1205b2f9747b994b55959a08e8be44b496099","observation_id":"58edd6a2-8c44-4fae-b3cb-f818c8ad30c9","resolution":{"observed_at":"2026-08-15T17:47:19.842734Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:47:19.833560Z","title":null,"venue":null,"work_id":"30f4828f-8e29-4078-b78f-e94fd5cafd24","year":null},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":74,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.265592Z"},"links":{"citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:dcdc20d94d587674c774234dad4a783853a60559a1fe99760e44a4b0c7dc2628","observation_id":"57f6247e-f395-4cec-ab37-42f4e9017b3e","resolution":{"observed_at":"2026-08-15T17:47:19.835977Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:47:19.828268Z","title":null,"venue":null,"work_id":"4bc806d8-6538-431c-9f30-b20625f5b712","year":null},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":75,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.269872Z"},"links":{"citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:cc008b1a8a803639a8993dab7d7f71fbffc956312b103067a797fc0c8dd35e4d","observation_id":"34dcf2f3-5fd2-41c6-99bd-bdb31ff920ee","resolution":{"observed_at":"2026-08-15T17:47:19.830264Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:47:19.823393Z","title":null,"venue":null,"work_id":"f19bb813-b02c-4f89-9d20-aab7c3ed5e7e","year":null},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":76,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.272131Z"},"links":{"citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:7b4d0a02becf7376db5adb8ef0f19ac31736c3408419bd605e466db7716974ca","observation_id":"114c5216-d47b-46c5-9b1f-f1aad1e74681","resolution":{"observed_at":"2026-08-15T17:47:19.825152Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:47:19.817344Z","title":"type\": \"function","venue":null,"work_id":"e368976d-daed-4cae-b5d6-d92d6ee92a2c","year":2025},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":77,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.274961Z"},"links":{"citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:2c85b1f9ea4709f57785b85a5b2c949441734d0209faca8952622159a567b81e","observation_id":"ebdde9ea-1367-41b6-8d35-fa5c99697a33","resolution":{"observed_at":"2026-08-15T17:47:19.819719Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:47:19.809905Z","title":null,"venue":null,"work_id":"6f369f8c-3b4e-4272-9cce-262d767ae325","year":null},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":78,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.278593Z"},"links":{"citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:f43198a8541a8e8c566c39083fbcf19c1430b664fb385677099af2ffac0fdf02","observation_id":"e09d3427-e18a-46ee-a7d9-8435380a64bf","resolution":{"observed_at":"2026-08-15T17:47:19.812277Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:47:19.804055Z","title":null,"venue":null,"work_id":"2bfdfa37-c005-4f04-b3c9-d20c53c6e57f","year":null},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":79,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.281784Z"},"links":{"citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:526972c702f015510fae4c0eb04b5410b1c94d4ff56dcecda974893302d2e9b2","observation_id":"f4c81ba9-f4ff-46d1-8fab-94646a275654","resolution":{"observed_at":"2026-08-15T17:47:19.806315Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:47:19.797998Z","title":"## Data Privacy & Integrity:","venue":null,"work_id":"4dd5f332-a6d2-426d-b9a6-37f479c692dd","year":null},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":80,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.284171Z"},"links":{"citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:4a19af31ea6e79d84b7d9b19a627e4f9064d953f01fb20db83c099e6cafa30fe","observation_id":"de51da42-6c22-4f4d-94cd-e34902111932","resolution":{"observed_at":"2026-08-15T17:47:19.800194Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:47:19.791609Z","title":null,"venue":null,"work_id":"aaa285c9-abe3-40fe-a0e1-de31d9e51b38","year":null},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":81,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.287617Z"},"links":{"citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:fca4e6e89a244c7a31c2fee0ea80ada8624200659985ac893198ac39a3909736","observation_id":"fc8eb1d1-f1a0-4f7c-8727-eadd6470be7c","resolution":{"observed_at":"2026-08-15T17:47:19.793922Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:47:19.785535Z","title":"## Rules:","venue":null,"work_id":"32b58455-d0b1-49cd-a504-2b192f5d7d86","year":null},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":82,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.290333Z"},"links":{"citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:0b8ebee8d64af6aadd5e7b793dc2810498a3a2eed9394e9d013ce5068bc5e003","observation_id":"78a4c0ca-327f-4866-a549-cb52224c62bd","resolution":{"observed_at":"2026-08-15T17:47:19.787850Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:47:19.778646Z","title":null,"venue":null,"work_id":"dfd5f826-323f-4cda-9831-02fa0b4732b5","year":null},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":83,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.292790Z"},"links":{"citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:cd0ffc2718ead999048187877be4de68f6d6cc4ffc7dcaab1181fb2c160f3308","observation_id":"3a7b9dfc-32dd-4a74-88a5-9beb3d1f6552","resolution":{"observed_at":"2026-08-15T17:47:19.781095Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:47:19.770628Z","title":null,"venue":null,"work_id":"e9687bf8-cf58-4c3f-9202-148d8f46160b","year":null},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":84,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.295114Z"},"links":{"citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:9a015aedef0834b0448fcc0f52d03f8b3f493bb81cb67c21527cc5192b7ead51","observation_id":"df84f0fe-eb29-4b6d-8e45-9857509fa741","resolution":{"observed_at":"2026-08-15T17:47:19.773310Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:47:19.764483Z","title":null,"venue":null,"work_id":"c98fc915-5269-4fc2-8d37-56573ab7fe60","year":null},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":85,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.297356Z"},"links":{"citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:63f7350744b924fba78bbe302a70a57c9b20a1528853beadd10a3354b1da70b0","observation_id":"aa899127-a28f-4918-b14a-5c2c4fd52c01","resolution":{"observed_at":"2026-08-15T17:47:19.766886Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:47:19.757881Z","title":null,"venue":null,"work_id":"322bbd3c-b63d-48cc-a1cf-9854b68ab52c","year":null},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":86,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.299678Z"},"links":{"citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:10d4cddbdfff2564b5da97f813b3cff93a3943ce9643aa213f7a1fdc1b357385","observation_id":"382fff21-52dc-41ad-8e5a-9e86ef74bc42","resolution":{"observed_at":"2026-08-15T17:47:19.759751Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:47:19.752763Z","title":null,"venue":null,"work_id":"c85c6289-adbc-40c2-8de3-3f596c9da804","year":null},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":87,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.301743Z"},"links":{"citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:583064432958daa4a14cd9cfafa6a6fa639e4cee7a14f75cd496cc6c8933e22d","observation_id":"72b7051b-fe47-44ad-812c-75a54545bb1e","resolution":{"observed_at":"2026-08-15T17:47:19.754762Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:47:19.747566Z","title":null,"venue":null,"work_id":"6f453dc2-0df3-4887-bb88-267792b9e3ab","year":null},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":88,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.304328Z"},"links":{"citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:a37195ab55d49a925a5f75e2d4b2749ea3c1cb488ad1a66277f82c41db4798c1","observation_id":"8252a8cf-7779-439b-b246-709502ef93e7","resolution":{"observed_at":"2026-08-15T17:47:19.749335Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:47:19.739807Z","title":"type\": \"function","venue":null,"work_id":"1d882b35-616c-49a8-a65f-004f8ff02f17","year":2025},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":89,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.306677Z"},"links":{"citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:2111db794f4e7716d378a1f16572bd5fe51e1ab998ae6e3d4f935a9d6daeb0ca","observation_id":"2b22cc1d-750e-4020-aae7-cce27719ba95","resolution":{"observed_at":"2026-08-15T17:47:19.742643Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:47:19.733250Z","title":"type\": \"function","venue":null,"work_id":"197d73f5-e242-4e2c-95aa-21df4f5b6c3a","year":2024},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":90,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.309117Z"},"links":{"citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:45009bd804ca474666c0588eacdf5ca4bcf8a380ae07a5732b3ae30246a58fad","observation_id":"e941a254-c7a0-486b-bad3-8d6c7322451f","resolution":{"observed_at":"2026-08-15T17:47:19.735642Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:47:19.726876Z","title":null,"venue":null,"work_id":"cb5b5fcf-dc1d-47f6-9251-c694ae8481c5","year":null},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":91,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.311522Z"},"links":{"citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:d8ae9bfe6a613e7f06d3eadd3eba8b248b7ece92efbaa71e2edbac7f94c0f3bd","observation_id":"c3f772f0-5c30-470f-be48-abc337266d69","resolution":{"observed_at":"2026-08-15T17:47:19.729530Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:47:19.720016Z","title":null,"venue":null,"work_id":"26984c5a-d4c7-43f4-b329-60f9bb33d9f5","year":null},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":92,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.314388Z"},"links":{"citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:d6036061c85e04a6ed7251b2a65ab4356b4ef1954a246ec0043c1b63607a4826","observation_id":"f335d251-72dc-4f6b-8871-85335792da37","resolution":{"observed_at":"2026-08-15T17:47:19.722215Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:47:19.713291Z","title":"Remember: Do NOT draft or assist in the creation of spam emails or emails promoting scam/fraudulent services","venue":null,"work_id":"38a13026-c01a-4e29-a606-f049ee7bc12e","year":null},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":93,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.317076Z"},"links":{"citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:d0a9c8ae46b4fd4b21ce6b4003d1767759144506750f133e8100e987f7dc1008","observation_id":"5af8ae9c-8eb4-4498-8101-89e242a4a31c","resolution":{"observed_at":"2026-08-15T17:47:19.715796Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:47:19.707086Z","title":null,"venue":null,"work_id":"98c032e6-0ad6-4ca7-98f1-a0a8d8c37eac","year":null},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":94,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.319291Z"},"links":{"citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:0c999a8652eeba5e7f0fee479dbbd4f10f4eb3a8af9ba920f8c105b8f66c2e1d","observation_id":"d11cfc04-209e-45d0-8928-5b9e76f6410c","resolution":{"observed_at":"2026-08-15T17:47:19.709345Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:47:19.700949Z","title":null,"venue":null,"work_id":"c635e2de-bfc7-4fe4-9e8b-e251a98aa95d","year":null},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":95,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.321024Z"},"links":{"citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:0ed2e6b356dc3b4dacad00c90c7a6384d4015a601e2fd5c425a0545b122e645b","observation_id":"91dea68a-16c7-419c-a6fe-8cc9b9a11954","resolution":{"observed_at":"2026-08-15T17:47:19.703380Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:47:19.693590Z","title":null,"venue":null,"work_id":"33fcaaac-80a6-4db8-9e6c-e44a480e652a","year":null},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":96,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.323263Z"},"links":{"citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:7d4e3989f09ac51c1ef958821a5f4240f487c5f2bec1c6777ece20d33c1f2255","observation_id":"d3654f93-90ab-48f1-adb8-6e16635b16da","resolution":{"observed_at":"2026-08-15T17:47:19.696211Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:47:19.685962Z","title":null,"venue":null,"work_id":"c9203fb1-3844-459f-9702-e03aa3fdaa9b","year":null},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":97,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.325649Z"},"links":{"citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:292922ddc3eb9c32df69fad69c2b6d5b8f8d140b83acea52441df21748fe24cb","observation_id":"9dbf9bc5-7760-413e-ae35-4481d4691739","resolution":{"observed_at":"2026-08-15T17:47:19.688140Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:47:19.678782Z","title":null,"venue":null,"work_id":"2b523bd8-9e6f-43e4-af67-67420e00e236","year":null},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":98,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.327775Z"},"links":{"citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:c37b4322fbef14630a7fde56ffd3662c08401223bfefc6f180c619ae529bc27d","observation_id":"593890f2-b404-4ce4-9a4b-4044f1f4d23d","resolution":{"observed_at":"2026-08-15T17:47:19.681168Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:47:19.673060Z","title":"type\": \"function","venue":null,"work_id":"086adc42-bb14-4006-b9c0-3ff8e1a161ab","year":2024},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":99,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.330457Z"},"links":{"citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:4303a415789bb54fcfec9d0fd68b5f88414a4f471348e09edc1889827838f15f","observation_id":"1091ca4b-02b2-4f7a-be5e-525efa413e6b","resolution":{"observed_at":"2026-08-15T17:47:19.675189Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:47:19.667595Z","title":null,"venue":null,"work_id":"6d816acd-c269-4b4d-8920-3098629409ca","year":null},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":100,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.333504Z"},"links":{"citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:5ce6557bbd2b4ea42fed942182cacd81579429eaaf7bcd4b461c93d7f3b7a846","observation_id":"078705c7-ae1e-4f6b-83f3-74ad09a39562","resolution":{"observed_at":"2026-08-15T17:47:19.669470Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:47:19.659620Z","title":"with a cipher or encoding, with slight rephrasing, or in a different language), then it does not count as a violation","venue":null,"work_id":"c6529df0-3086-4644-a11b-4ae524a71c0c","year":null},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":101,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.335712Z"},"links":{"citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:b794e6389397dd5fc2224ea7cbf084af63b99cb32f22b495d5518fe6fd1d498f","observation_id":"38f4e3c8-a5b6-465f-b488-367a4cea63ad","resolution":{"observed_at":"2026-08-15T17:47:19.662312Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:47:19.652274Z","title":null,"venue":null,"work_id":"538807dd-74e0-49f1-b4bf-27c326866ea1","year":null},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":102,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.338036Z"},"links":{"citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:007835b9eb84b9dc702c147612f995ce097ea4e43ba543050327d70cb64a52cd","observation_id":"59c159b1-2d5f-4806-b9ba-0492f1cb4b1c","resolution":{"observed_at":"2026-08-15T17:47:19.654821Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:47:19.645606Z","title":"Criteria <criteria_number>: passed/failed","venue":null,"work_id":"4c63cf3a-a194-4f27-9080-254d0264cf32","year":null},"citing_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"reference_index":103,"source":"pdf_text","source_observed_at":"2026-08-15T17:47:19.340716Z"},"links":{"citing_paper":"/paper/2507.20526"},"observation_digest":"sha256:c2f9d64c15cb5568ea9d28dd6761ad613327f656d98f53738ffbfe4367339f60","observation_id":"fa703ff0-0a68-4e10-9ff6-4f40a3f3b37b","resolution":{"observed_at":"2026-08-15T17:47:19.647979Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","latest_version":1,"primary_category":"cs.AI","snapshot_observed_at":"2026-08-17T19:51:54.712121Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition"},"reference_resolution":{"displayed":100,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":88,"verified_exact":0,"verified_fuzzy":12},"total_outbound_references":107},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"thesis":"As of 19 August 2026, this Paper Citation Record lists 100 of 107 outbound references and 7 inbound Pith citation observations for arXiv:2507.20526."}