{"as_of":"2026-08-20T00:45:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:d29db04f49032a1887ce51f7ef0696dbf8f574eac2cf28dd08898a135b4bac6a","coverage":[{"denominator":18,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":18,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T04:46:11.845318Z","state":"measured"},{"denominator":21,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":21,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-19T06:32:44.657259+00:00","state":"measured"},{"denominator":3,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":3,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-05T22:07:42.304265Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"pith","source_observed_at":"2026-07-10T20:57:34.795349Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2508.03125","last_updated":"2025-08-05T06:14:53Z","snapshot_observed_at":"2026-08-19T23:51:15.789651Z","submitted_at":"2025-08-05T06:14:53Z","title":"Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS","version":1},"cited_work":{"arxiv_id":"2508.03125","doi":null,"metadata_source":"pith","pith_arxiv_id":"2508.03125","snapshot_observed_at":"2026-07-10T20:57:34.795349Z","title":"Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS","venue":"cs.CR","work_id":"7261bcb2-6754-4be6-8e9c-f084e7d1fade","year":2025},"citing_paper":{"arxiv_id":"2604.24477","last_updated":"2026-04-27T13:45:14Z","snapshot_observed_at":"2026-08-12T18:59:54.103670Z","submitted_at":"2026-04-27T13:45:14Z","title":"GAMMAF: A Common Framework for Graph-Based Anomaly Monitoring Benchmarking in LLM Multi-Agent Systems","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-05-08T02:42:20.121207Z"},"links":{"cited_paper":"/paper/2508.03125","citing_paper":"/paper/2604.24477"},"observation_digest":"sha256:39703ce1e1ebbe2b04325f1d65d3b9951d09ce99453df2ac4527d419b388b1bf","observation_id":"ce20d99f-4d1d-475e-b6f8-128d419e93e4","resolution":{"observed_at":"2026-05-11T22:41:15.018458Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2508.03125","last_updated":"2025-08-05T06:14:53Z","snapshot_observed_at":"2026-08-19T23:51:15.789651Z","submitted_at":"2025-08-05T06:14:53Z","title":"Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS","version":1},"cited_work":{"arxiv_id":"2508.03125","doi":null,"metadata_source":"pith","pith_arxiv_id":"2508.03125","snapshot_observed_at":"2026-07-10T20:57:34.795349Z","title":"Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS","venue":"cs.CR","work_id":"7261bcb2-6754-4be6-8e9c-f084e7d1fade","year":2025},"citing_paper":{"arxiv_id":"2607.06807","last_updated":"2026-07-07T21:12:27Z","snapshot_observed_at":"2026-08-17T03:24:12.985218Z","submitted_at":"2026-07-07T21:12:27Z","title":"When Agents Go Rogue: Activation-Based Detection of Malicious Behaviors in Multi-Agent Systems","version":1},"reference_index":79,"source":"arxiv_source","source_observed_at":"2026-07-10T20:55:21.031591Z"},"links":{"cited_paper":"/paper/2508.03125","citing_paper":"/paper/2607.06807"},"observation_digest":"sha256:436827afcf7287a9d1e7925c6aca08088a345d6bc9d48a186daef2dde031c3cf","observation_id":"5b6114b8-3d60-4d89-9034-5b3a49d97c3f","resolution":{"observed_at":"2026-07-10T20:57:34.810598Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2508.03125","last_updated":"2025-08-05T06:14:53Z","snapshot_observed_at":"2026-08-19T23:51:15.789651Z","submitted_at":"2025-08-05T06:14:53Z","title":"Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2508.03125","snapshot_observed_at":"2026-08-05T22:07:42.304265Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-15T01:16:11.611065Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.304265Z"},"links":{"cited_paper":"/paper/2508.03125","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:1cba1f7e059555f06698e0ae084acecd7ebd7ab5653bfe881afab36b3c13f445","observation_id":"8909be5d-67d9-4685-99c1-96fccbf5d288","resolution":{"observed_at":"2026-08-05T22:07:42.304265Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2508.03125/citation-record","integrity":"/paper/2508.03125/integrity","json":"/paper/2508.03125/citation-record.json","paper":"/paper/2508.03125"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:46:14.366172Z","title":null,"venue":null,"work_id":"668a76ca-2a3b-4cea-bcee-48dcfdd77f63","year":null},"citing_paper":{"arxiv_id":"2508.03125","last_updated":"2025-08-05T06:14:53Z","snapshot_observed_at":"2026-08-19T23:51:15.789651Z","submitted_at":"2025-08-05T06:14:53Z","title":"Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-06T04:46:10.669642Z"},"links":{"citing_paper":"/paper/2508.03125"},"observation_digest":"sha256:9886e718b8973598652f33e8f0e4f319531dbf489b2cf1f7d0a90e26b992d93a","observation_id":"c0f86c1d-014a-4142-bffe-ed05bf0efcf8","resolution":{"observed_at":"2026-08-06T04:46:14.452881Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.03314","last_updated":"2023-06-05T23:55:37Z","snapshot_observed_at":"2026-08-16T16:19:58.635969Z","submitted_at":"2023-06-05T23:55:37Z","title":"Multi-Agent Collaboration: Harnessing the Power of Intelligent LLM Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.03314","snapshot_observed_at":"2026-08-06T04:46:10.472401Z","title":"In Proceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security, 1671–1685","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.03125","last_updated":"2025-08-05T06:14:53Z","snapshot_observed_at":"2026-08-19T23:51:15.789651Z","submitted_at":"2025-08-05T06:14:53Z","title":"Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-06T04:46:10.472401Z"},"links":{"cited_paper":"/paper/2306.03314","citing_paper":"/paper/2508.03125"},"observation_digest":"sha256:fe01167c0b38ae36ca627df581cbfc75ff081493403858d72e26596bf5341210","observation_id":"fe076a48-d3bd-410e-9027-70371b3697be","resolution":{"observed_at":"2026-08-06T04:46:10.472401Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.14529","last_updated":"2025-02-20T13:02:00Z","snapshot_observed_at":"2026-08-17T06:13:46.401607Z","submitted_at":"2025-02-20T13:02:00Z","title":"CORBA: Contagious Recursive Blocking Attacks on Multi-Agent Systems Based on Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.14529","snapshot_observed_at":"2026-08-06T04:46:10.566080Z","title":"do not attack","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.03125","last_updated":"2025-08-05T06:14:53Z","snapshot_observed_at":"2026-08-19T23:51:15.789651Z","submitted_at":"2025-08-05T06:14:53Z","title":"Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-06T04:46:10.566080Z"},"links":{"cited_paper":"/paper/2502.14529","citing_paper":"/paper/2508.03125"},"observation_digest":"sha256:b5262c1ff901ef1e1a1103af7a934c1d4aa50b1efd2bc3c70b0326cc41de8342","observation_id":"1a094781-add8-4a0b-a6e4-8dc7afdff49a","resolution":{"observed_at":"2026-08-06T04:46:10.566080Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:46:13.302244Z","title":null,"venue":null,"work_id":"f2ef77fe-49da-47eb-ad91-56b108e38175","year":null},"citing_paper":{"arxiv_id":"2508.03125","last_updated":"2025-08-05T06:14:53Z","snapshot_observed_at":"2026-08-19T23:51:15.789651Z","submitted_at":"2025-08-05T06:14:53Z","title":"Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-06T04:46:10.990354Z"},"links":{"citing_paper":"/paper/2508.03125"},"observation_digest":"sha256:10a32063ec5827a835bd63ab04d8761af46477d15d0b5d15df477e7d09cb5392","observation_id":"677407c8-c0e7-4811-8d4d-fb769219dee7","resolution":{"observed_at":"2026-08-06T04:46:13.323288Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:46:14.213629Z","title":null,"venue":null,"work_id":"d10f22c5-d02d-47bd-bc60-b9a9c224a137","year":null},"citing_paper":{"arxiv_id":"2508.03125","last_updated":"2025-08-05T06:14:53Z","snapshot_observed_at":"2026-08-19T23:51:15.789651Z","submitted_at":"2025-08-05T06:14:53Z","title":"Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-06T04:46:10.730600Z"},"links":{"citing_paper":"/paper/2508.03125"},"observation_digest":"sha256:6ab8aa0e71180f30df6051fc0f2f78ad225b3494144e161b3f2a2d6263a94473","observation_id":"74df91b9-18b1-42a9-b6c3-a53e76462dd9","resolution":{"observed_at":"2026-08-06T04:46:14.263127Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:46:14.045602Z","title":"Consider:","venue":null,"work_id":"ab70b4b0-7026-43b5-b998-903058be2780","year":null},"citing_paper":{"arxiv_id":"2508.03125","last_updated":"2025-08-05T06:14:53Z","snapshot_observed_at":"2026-08-19T23:51:15.789651Z","submitted_at":"2025-08-05T06:14:53Z","title":"Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-06T04:46:10.799714Z"},"links":{"citing_paper":"/paper/2508.03125"},"observation_digest":"sha256:01e29987b96e7bd49fe195c6d8229883001557a78f755f4e9c746507e8809ce1","observation_id":"51563ef3-f45c-4dd7-8822-b63a46618124","resolution":{"observed_at":"2026-08-06T04:46:14.100238Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:46:13.846458Z","title":null,"venue":null,"work_id":"06bbe361-d258-4eb7-bf60-e2305d3f9b51","year":null},"citing_paper":{"arxiv_id":"2508.03125","last_updated":"2025-08-05T06:14:53Z","snapshot_observed_at":"2026-08-19T23:51:15.789651Z","submitted_at":"2025-08-05T06:14:53Z","title":"Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-06T04:46:10.859601Z"},"links":{"citing_paper":"/paper/2508.03125"},"observation_digest":"sha256:b819976c6efda7f17bb1f894e1caf9be8b78a184b3deed3d8cbd5a95589dfa21","observation_id":"e6e6c720-e9bb-41b6-9983-35e5e43fc005","resolution":{"observed_at":"2026-08-06T04:46:13.934181Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:46:13.705574Z","title":null,"venue":null,"work_id":"e21f6702-250a-4294-862e-484d29062d7c","year":null},"citing_paper":{"arxiv_id":"2508.03125","last_updated":"2025-08-05T06:14:53Z","snapshot_observed_at":"2026-08-19T23:51:15.789651Z","submitted_at":"2025-08-05T06:14:53Z","title":"Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-06T04:46:10.900457Z"},"links":{"citing_paper":"/paper/2508.03125"},"observation_digest":"sha256:fc46357666bf51da67e5edae7ef7ef61cad81a90431dc374981d9810a9f1c0e5","observation_id":"d0bb996a-8dfb-4cff-9f5d-048756aabe45","resolution":{"observed_at":"2026-08-06T04:46:13.755727Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:46:13.467806Z","title":null,"venue":null,"work_id":"f00cde83-09c0-4c0a-8f1f-2aadbd3470d6","year":null},"citing_paper":{"arxiv_id":"2508.03125","last_updated":"2025-08-05T06:14:53Z","snapshot_observed_at":"2026-08-19T23:51:15.789651Z","submitted_at":"2025-08-05T06:14:53Z","title":"Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-06T04:46:10.961554Z"},"links":{"citing_paper":"/paper/2508.03125"},"observation_digest":"sha256:4a2421b79f551be73d6f31fcbb731a1a053f1b7f7076569eaf4e8c8d4aa88b31","observation_id":"dd7d138f-30ff-4021-9492-38678be69478","resolution":{"observed_at":"2026-08-06T04:46:13.539913Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:46:13.135580Z","title":"Your response should include:","venue":null,"work_id":"fcf51ba1-0cbb-4b4a-b234-9fa97df8ff49","year":null},"citing_paper":{"arxiv_id":"2508.03125","last_updated":"2025-08-05T06:14:53Z","snapshot_observed_at":"2026-08-19T23:51:15.789651Z","submitted_at":"2025-08-05T06:14:53Z","title":"Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-06T04:46:11.093082Z"},"links":{"citing_paper":"/paper/2508.03125"},"observation_digest":"sha256:11d1a6f97afb933bae781496e98cd879b8f17d2382bec587638b765ec6467fdf","observation_id":"dcfa664c-9165-4f07-8b32-75db81201654","resolution":{"observed_at":"2026-08-06T04:46:13.195379Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:46:13.019015Z","title":null,"venue":null,"work_id":"20f8a72c-f716-4611-837c-f3b8a6aaa48b","year":null},"citing_paper":{"arxiv_id":"2508.03125","last_updated":"2025-08-05T06:14:53Z","snapshot_observed_at":"2026-08-19T23:51:15.789651Z","submitted_at":"2025-08-05T06:14:53Z","title":"Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-06T04:46:11.203848Z"},"links":{"citing_paper":"/paper/2508.03125"},"observation_digest":"sha256:95cb5d9305653d7b47b1acfed0c7113ab05c219f344163013c418efb9927fac0","observation_id":"7b2ea7bf-7beb-4424-86ff-165ddb625aed","resolution":{"observed_at":"2026-08-06T04:46:13.100042Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:46:12.802222Z","title":null,"venue":null,"work_id":"f1443c72-501b-49ac-8907-04479215e9d4","year":null},"citing_paper":{"arxiv_id":"2508.03125","last_updated":"2025-08-05T06:14:53Z","snapshot_observed_at":"2026-08-19T23:51:15.789651Z","submitted_at":"2025-08-05T06:14:53Z","title":"Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-06T04:46:11.324232Z"},"links":{"citing_paper":"/paper/2508.03125"},"observation_digest":"sha256:9e6077535dfd6134333c86c6aa73bccbe81220fe86bdf93dbcc52ce0e60a0af5","observation_id":"2495a3da-cca8-4693-945f-9f588b9edfe3","resolution":{"observed_at":"2026-08-06T04:46:12.879735Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:46:12.677599Z","title":null,"venue":null,"work_id":"4f3e9578-4d28-4293-b462-e1dc7b23721e","year":null},"citing_paper":{"arxiv_id":"2508.03125","last_updated":"2025-08-05T06:14:53Z","snapshot_observed_at":"2026-08-19T23:51:15.789651Z","submitted_at":"2025-08-05T06:14:53Z","title":"Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-06T04:46:11.373601Z"},"links":{"citing_paper":"/paper/2508.03125"},"observation_digest":"sha256:fc26ff0e97c7361004046c93ae64dda34641ae94cbcbd11a8af19f2cd0155060","observation_id":"f63d8ec0-542e-4174-bb4d-1dd0e82e51d8","resolution":{"observed_at":"2026-08-06T04:46:12.697510Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:46:12.529667Z","title":"bypass security checks","venue":null,"work_id":"79471c47-5ac3-45de-b829-edc0902177d1","year":null},"citing_paper":{"arxiv_id":"2508.03125","last_updated":"2025-08-05T06:14:53Z","snapshot_observed_at":"2026-08-19T23:51:15.789651Z","submitted_at":"2025-08-05T06:14:53Z","title":"Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-06T04:46:11.505104Z"},"links":{"citing_paper":"/paper/2508.03125"},"observation_digest":"sha256:83e2c5cd03dd544a8ce9ff4aeabc453af5da4a894c38b6e8dbffca9be5b93a30","observation_id":"cb846caa-b24c-4874-83e1-fc79d10ed438","resolution":{"observed_at":"2026-08-06T04:46:12.586451Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:46:12.309110Z","title":"create back-door access","venue":null,"work_id":"f72e16a0-e84f-4ae4-a7c2-b52c4dc2a8e3","year":null},"citing_paper":{"arxiv_id":"2508.03125","last_updated":"2025-08-05T06:14:53Z","snapshot_observed_at":"2026-08-19T23:51:15.789651Z","submitted_at":"2025-08-05T06:14:53Z","title":"Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-06T04:46:11.593949Z"},"links":{"citing_paper":"/paper/2508.03125"},"observation_digest":"sha256:e8e4b431c3ed3551df21b7fa42ebd9e90c340a10aa5af6f0c89677af7b11d3b8","observation_id":"fd2fa48f-b422-4d1b-bb18-de44e1ed18ec","resolution":{"observed_at":"2026-08-06T04:46:12.418882Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:46:12.222392Z","title":null,"venue":null,"work_id":"332666d4-3fd9-41c8-be5c-ad453be0af07","year":null},"citing_paper":{"arxiv_id":"2508.03125","last_updated":"2025-08-05T06:14:53Z","snapshot_observed_at":"2026-08-19T23:51:15.789651Z","submitted_at":"2025-08-05T06:14:53Z","title":"Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-06T04:46:11.727835Z"},"links":{"citing_paper":"/paper/2508.03125"},"observation_digest":"sha256:6d427664b11ae22a6b3772b1569b5c59daeb5a2edcbb147e1188abb9d61f9d4a","observation_id":"7f3bb1e1-4f23-41da-b108-b7172c84ea93","resolution":{"observed_at":"2026-08-06T04:46:12.257934Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:46:12.035455Z","title":"INJECTION","venue":null,"work_id":"eb3da7c2-dd76-4589-bd40-dc1392c6c504","year":null},"citing_paper":{"arxiv_id":"2508.03125","last_updated":"2025-08-05T06:14:53Z","snapshot_observed_at":"2026-08-19T23:51:15.789651Z","submitted_at":"2025-08-05T06:14:53Z","title":"Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-06T04:46:11.845318Z"},"links":{"citing_paper":"/paper/2508.03125"},"observation_digest":"sha256:376fe102afdcb3f0936e676473b9605264407deae1eb1b891b776cf2fec9c65e","observation_id":"f9c30f5b-6e33-4ed7-8dbf-84cab6a37e97","resolution":{"observed_at":"2026-08-06T04:46:12.085177Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.14348","last_updated":"2024-06-12T00:27:06Z","snapshot_observed_at":"2026-08-18T09:36:32.490699Z","submitted_at":"2023-09-18T02:07:22Z","title":"Defending Against Alignment-Breaking Attacks via Robustly Aligned LLM","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.14348","snapshot_observed_at":"2026-08-06T04:46:10.420990Z","title":"thinking","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.03125","last_updated":"2025-08-05T06:14:53Z","snapshot_observed_at":"2026-08-19T23:51:15.789651Z","submitted_at":"2025-08-05T06:14:53Z","title":"Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS","version":1},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-06T04:46:10.420990Z"},"links":{"cited_paper":"/paper/2309.14348","citing_paper":"/paper/2508.03125"},"observation_digest":"sha256:79c6fb211ba067847af70b24ea2e6f7cbe1d0fed3ab2881c9212f097669ffd87","observation_id":"fd3d5b42-2e5e-4763-ab2e-2b2addca7818","resolution":{"observed_at":"2026-08-06T04:46:10.420990Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2508.03125","last_updated":"2025-08-05T06:14:53Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-19T23:51:15.789651Z","submitted_at":"2025-08-05T06:14:53Z","title":"Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS"},"reference_resolution":{"displayed":18,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":13,"verified_exact":0,"verified_fuzzy":5},"total_outbound_references":18},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"thesis":"As of 20 August 2026, this Paper Citation Record lists 18 of 18 outbound references and 3 inbound Pith citation observations for arXiv:2508.03125."}