{"as_of":"2026-08-22T10:46:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:84db53d4c23f5abbe7dff6b010189bb2a087e69ee4d3e720904c52aa5256dcb6","coverage":[{"denominator":50,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":50,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-04T13:45:49.786314Z","state":"measured"},{"denominator":59,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":59,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-22T06:32:14.747728+00:00","state":"measured"},{"denominator":9,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":9,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-01T15:07:25.693636Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-06-30T19:45:01.632999Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2509.25624","last_updated":"2026-07-19T03:06:33Z","snapshot_observed_at":"2026-08-18T07:13:14.326527Z","submitted_at":"2025-09-30T00:31:44Z","title":"STAC: When Innocent Tools Form Dangerous Chains for LLM Agents","version":3},"cited_work":{"arxiv_id":"2509.25624","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2509.25624","snapshot_observed_at":"2026-07-21T02:20:30.992532Z","title":"Stac: When innocent tools form dangerous chains to jailbreak llm agents","venue":null,"work_id":"8e63908a-ff3a-4dc2-8177-a5bf1670b4e5","year":2025},"citing_paper":{"arxiv_id":"2603.09002","last_updated":"2026-04-26T14:13:48Z","snapshot_observed_at":"2026-08-14T21:45:56.224919Z","submitted_at":"2026-03-09T22:46:27Z","title":"Security Considerations for Multi-agent Systems","version":2},"reference_index":201,"source":"pdf_text","source_observed_at":"2026-05-15T14:12:14.160789Z"},"links":{"cited_paper":"/paper/2509.25624","citing_paper":"/paper/2603.09002"},"observation_digest":"sha256:e7097de27cad460736e571464c876d740cf55640dd7d001bef9c735d1767f22c","observation_id":"2b6e55ef-e4ba-4d02-9ec7-5c4a261b80e3","resolution":{"observed_at":"2026-07-21T02:20:30.992532Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2509.25624","last_updated":"2026-07-19T03:06:33Z","snapshot_observed_at":"2026-08-18T07:13:14.326527Z","submitted_at":"2025-09-30T00:31:44Z","title":"STAC: When Innocent Tools Form Dangerous Chains for LLM Agents","version":3},"cited_work":{"arxiv_id":"2509.25624","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2509.25624","snapshot_observed_at":"2026-07-21T02:20:30.992532Z","title":"Stac: When innocent tools form dangerous chains to jailbreak llm agents","venue":null,"work_id":"8e63908a-ff3a-4dc2-8177-a5bf1670b4e5","year":2025},"citing_paper":{"arxiv_id":"2604.02767","last_updated":"2026-04-03T06:25:18Z","snapshot_observed_at":"2026-08-02T15:11:57.622955Z","submitted_at":"2026-04-03T06:25:18Z","title":"SentinelAgent: Intent-Verified Delegation Chains for Securing Federal Multi-Agent AI Systems","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-05-13T20:14:56.132341Z"},"links":{"cited_paper":"/paper/2509.25624","citing_paper":"/paper/2604.02767"},"observation_digest":"sha256:e76db615c20f3136ec05d3651f2bfccbec8b6f051e90e6c5d4523b2ea57aedab","observation_id":"4d6e1ecb-604b-4a39-93bf-5c831f97d734","resolution":{"observed_at":"2026-07-21T02:20:30.992532Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2509.25624","last_updated":"2026-07-19T03:06:33Z","snapshot_observed_at":"2026-08-18T07:13:14.326527Z","submitted_at":"2025-09-30T00:31:44Z","title":"STAC: When Innocent Tools Form Dangerous Chains for LLM Agents","version":3},"cited_work":{"arxiv_id":"2509.25624","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2509.25624","snapshot_observed_at":"2026-07-21T02:20:30.992532Z","title":"Stac: When innocent tools form dangerous chains to jailbreak llm agents","venue":null,"work_id":"8e63908a-ff3a-4dc2-8177-a5bf1670b4e5","year":2025},"citing_paper":{"arxiv_id":"2605.02900","last_updated":"2026-05-24T13:33:45Z","snapshot_observed_at":"2026-08-12T06:42:35.267467Z","submitted_at":"2026-03-28T13:21:44Z","title":"Safety in Embodied AI: A Survey of Risks, Attacks, and Defenses","version":1},"reference_index":223,"source":"pdf_text","source_observed_at":"2026-05-14T22:20:31.623849Z"},"links":{"cited_paper":"/paper/2509.25624","citing_paper":"/paper/2605.02900"},"observation_digest":"sha256:aa424069e36b38d2e6698cd20a808d1b4c457c8c29cedd223070a3ddc391416f","observation_id":"4d8a93df-d017-47e1-9ef5-63cd1501cbdc","resolution":{"observed_at":"2026-07-21T02:20:30.992532Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2509.25624","last_updated":"2026-07-19T03:06:33Z","snapshot_observed_at":"2026-08-18T07:13:14.326527Z","submitted_at":"2025-09-30T00:31:44Z","title":"STAC: When Innocent Tools Form Dangerous Chains for LLM Agents","version":3},"cited_work":{"arxiv_id":"2509.25624","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2509.25624","snapshot_observed_at":"2026-07-21T02:20:30.992532Z","title":"Stac: When innocent tools form dangerous chains to jailbreak llm agents","venue":null,"work_id":"8e63908a-ff3a-4dc2-8177-a5bf1670b4e5","year":2025},"citing_paper":{"arxiv_id":"2605.23989","last_updated":"2026-05-17T10:26:37Z","snapshot_observed_at":"2026-07-06T23:34:08.786038Z","submitted_at":"2026-05-17T10:26:37Z","title":"Towards trustworthy agentic AI: a comprehensive survey of safety, robustness, privacy, and system security","version":1},"reference_index":100,"source":"pdf_text","source_observed_at":"2026-06-30T19:18:40.244556Z"},"links":{"cited_paper":"/paper/2509.25624","citing_paper":"/paper/2605.23989"},"observation_digest":"sha256:eca65ae8fe9a73084c3ffef521bceb92bb02cd5dd57e659a8afee768869c7188","observation_id":"d51a2655-05b6-49c3-ac66-9f28581c24c6","resolution":{"observed_at":"2026-07-21T02:20:30.992532Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2509.25624","last_updated":"2026-07-19T03:06:33Z","snapshot_observed_at":"2026-08-18T07:13:14.326527Z","submitted_at":"2025-09-30T00:31:44Z","title":"STAC: When Innocent Tools Form Dangerous Chains for LLM Agents","version":3},"cited_work":{"arxiv_id":"2509.25624","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2509.25624","snapshot_observed_at":"2026-07-21T02:20:30.992532Z","title":"Stac: When innocent tools form dangerous chains to jailbreak llm agents","venue":null,"work_id":"8e63908a-ff3a-4dc2-8177-a5bf1670b4e5","year":2025},"citing_paper":{"arxiv_id":"2605.25435","last_updated":"2026-05-25T05:25:39Z","snapshot_observed_at":"2026-08-11T18:07:35.765662Z","submitted_at":"2026-05-25T05:25:39Z","title":"Security of OpenClaw Agents: Fundamentals, Attacks, and Countermeasures","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-06-29T22:00:03.325985Z"},"links":{"cited_paper":"/paper/2509.25624","citing_paper":"/paper/2605.25435"},"observation_digest":"sha256:ddc58cace13f1eeb3037d482d42005776aa2efe4693eb8dddd566b040c98be24","observation_id":"a1bf3742-e478-4925-9402-84cffa79e642","resolution":{"observed_at":"2026-07-21T02:20:30.992532Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2509.25624","last_updated":"2026-07-19T03:06:33Z","snapshot_observed_at":"2026-08-18T07:13:14.326527Z","submitted_at":"2025-09-30T00:31:44Z","title":"STAC: When Innocent Tools Form Dangerous Chains for LLM Agents","version":3},"cited_work":{"arxiv_id":"2509.25624","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2509.25624","snapshot_observed_at":"2026-07-21T02:20:30.992532Z","title":"Stac: When innocent tools form dangerous chains to jailbreak llm agents","venue":null,"work_id":"8e63908a-ff3a-4dc2-8177-a5bf1670b4e5","year":2025},"citing_paper":{"arxiv_id":"2605.29224","last_updated":"2026-05-28T01:23:48Z","snapshot_observed_at":"2026-08-16T16:06:47.494825Z","submitted_at":"2026-05-28T01:23:48Z","title":"Relevance as a Vulnerability: How Web Retrieval Degrades Safety Alignment in LLM Agents","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-06-29T08:21:44.993917Z"},"links":{"cited_paper":"/paper/2509.25624","citing_paper":"/paper/2605.29224"},"observation_digest":"sha256:e345723bd12905883eda7fbf8b5358fcfc14a600abe67cb98654876c928b219b","observation_id":"53c25b30-92a6-4b1e-aea9-0482126b388b","resolution":{"observed_at":"2026-07-21T02:20:30.992532Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2509.25624","last_updated":"2026-07-19T03:06:33Z","snapshot_observed_at":"2026-08-18T07:13:14.326527Z","submitted_at":"2025-09-30T00:31:44Z","title":"STAC: When Innocent Tools Form Dangerous Chains for LLM Agents","version":3},"cited_work":{"arxiv_id":"2509.25624","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2509.25624","snapshot_observed_at":"2026-07-21T02:20:30.992532Z","title":"Stac: When innocent tools form dangerous chains to jailbreak llm agents","venue":null,"work_id":"8e63908a-ff3a-4dc2-8177-a5bf1670b4e5","year":2025},"citing_paper":{"arxiv_id":"2605.29251","last_updated":"2026-05-28T02:12:41Z","snapshot_observed_at":"2026-08-21T06:49:58.607576Z","submitted_at":"2026-05-28T02:12:41Z","title":"Provably Secure Agent Guardrail","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-06-29T07:43:17.593344Z"},"links":{"cited_paper":"/paper/2509.25624","citing_paper":"/paper/2605.29251"},"observation_digest":"sha256:0068f26458329c974f2ddb1a2f8b53d2ebc923938db0777bd4eb204600b20018","observation_id":"9050c6bc-9741-41fb-8ee4-59f368075613","resolution":{"observed_at":"2026-07-21T02:20:30.992532Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2509.25624","last_updated":"2026-07-19T03:06:33Z","snapshot_observed_at":"2026-08-18T07:13:14.326527Z","submitted_at":"2025-09-30T00:31:44Z","title":"STAC: When Innocent Tools Form Dangerous Chains for LLM Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2509.25624","snapshot_observed_at":"2026-08-01T15:07:25.693636Z","title":"STAC: When Innocent Tools Form Dangerous Chains to Jailbreak LLM Agents,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.19432","last_updated":"2026-07-20T22:36:26Z","snapshot_observed_at":"2026-08-18T10:01:01.057485Z","submitted_at":"2026-07-20T22:36:26Z","title":"ChainWatch: A Kill Chain-Aligned Sequential Detection Framework for Multi-Step Attacks in MCP-Based AI Agent Systems","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-01T15:07:25.693636Z"},"links":{"cited_paper":"/paper/2509.25624","citing_paper":"/paper/2607.19432"},"observation_digest":"sha256:60dbc8405befd30ee5e686f6a86f7857fef9527ff7fd4d39c2f5fec7c50de919","observation_id":"0881bdf9-edf7-46d9-bf0c-d7d0962ec40f","resolution":{"observed_at":"2026-08-01T15:07:25.693636Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2509.25624","last_updated":"2026-07-19T03:06:33Z","snapshot_observed_at":"2026-08-18T07:13:14.326527Z","submitted_at":"2025-09-30T00:31:44Z","title":"STAC: When Innocent Tools Form Dangerous Chains for LLM Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2509.25624","snapshot_observed_at":"2026-07-30T19:58:40.476567Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.23532","last_updated":"2026-07-26T08:02:20Z","snapshot_observed_at":"2026-08-18T07:19:34.433537Z","submitted_at":"2026-07-26T08:02:20Z","title":"Mission-Level Runtime Assurance for LLM-Assisted ISR Swarms over a Verification-Aware Fabric","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-07-30T19:58:40.476567Z"},"links":{"cited_paper":"/paper/2509.25624","citing_paper":"/paper/2607.23532"},"observation_digest":"sha256:8fcc1199105c078cbb97a6534c40dd4b7622a3fac8e1ed18bb3d481331b5bb9a","observation_id":"168dbd91-c101-4e2c-9b1e-da517958981c","resolution":{"observed_at":"2026-07-30T19:58:40.476567Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2509.25624/citation-record","integrity":"/paper/2509.25624/integrity","json":"/paper/2509.25624/citation-record.json","paper":"/paper/2509.25624"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T13:45:47.380628Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.25624","last_updated":"2026-07-19T03:06:33Z","snapshot_observed_at":"2026-08-18T07:13:14.326527Z","submitted_at":"2025-09-30T00:31:44Z","title":"STAC: When Innocent Tools Form Dangerous Chains for LLM Agents","version":3},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-04T13:45:47.380628Z"},"links":{"citing_paper":"/paper/2509.25624"},"observation_digest":"sha256:48e11aba39cb59d63e9f0c9fbebe94230fb83b45e67b738c6aff6ff73e4bb400","observation_id":"6bc23454-c48f-4f78-ab81-ec08ad8fed97","resolution":{"observed_at":"2026-08-04T13:45:47.380628Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T13:45:47.492666Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.25624","last_updated":"2026-07-19T03:06:33Z","snapshot_observed_at":"2026-08-18T07:13:14.326527Z","submitted_at":"2025-09-30T00:31:44Z","title":"STAC: When Innocent Tools Form Dangerous Chains for LLM Agents","version":3},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-04T13:45:47.492666Z"},"links":{"citing_paper":"/paper/2509.25624"},"observation_digest":"sha256:ec20383c446bebdab11344d786e599f9d82915111a2f0bf600b8831316b47ac2","observation_id":"9d622c20-8028-4b93-a156-9327f7e1c310","resolution":{"observed_at":"2026-08-04T13:45:47.492666Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T13:45:47.604064Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.25624","last_updated":"2026-07-19T03:06:33Z","snapshot_observed_at":"2026-08-18T07:13:14.326527Z","submitted_at":"2025-09-30T00:31:44Z","title":"STAC: When Innocent Tools Form Dangerous Chains for LLM Agents","version":3},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-04T13:45:47.604064Z"},"links":{"citing_paper":"/paper/2509.25624"},"observation_digest":"sha256:a4bb3f3cbb8e303d1ff018fc0037f4981b539807e9c211dedf1617f8cb6eb03e","observation_id":"9e01c312-d071-4d41-82ba-7efe1e4d02d0","resolution":{"observed_at":"2026-08-04T13:45:47.604064Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T13:45:47.726578Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.25624","last_updated":"2026-07-19T03:06:33Z","snapshot_observed_at":"2026-08-18T07:13:14.326527Z","submitted_at":"2025-09-30T00:31:44Z","title":"STAC: When Innocent Tools Form Dangerous Chains for LLM Agents","version":3},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-04T13:45:47.726578Z"},"links":{"citing_paper":"/paper/2509.25624"},"observation_digest":"sha256:f0383e506c4cf5dff5f33b6756a35ee1000b06b332da01002e274d14efafd886","observation_id":"a075a1f2-6ba7-41f8-b6c3-7baf32695ce1","resolution":{"observed_at":"2026-08-04T13:45:47.726578Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T13:45:47.858987Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.25624","last_updated":"2026-07-19T03:06:33Z","snapshot_observed_at":"2026-08-18T07:13:14.326527Z","submitted_at":"2025-09-30T00:31:44Z","title":"STAC: When Innocent Tools Form Dangerous Chains for LLM Agents","version":3},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-04T13:45:47.858987Z"},"links":{"citing_paper":"/paper/2509.25624"},"observation_digest":"sha256:aa26734c5d3d6da7332a4954bec7079a149c7ca27042a8643b3c5d5f048ec253","observation_id":"055981f4-b94e-43d8-9849-9c87c0e044f2","resolution":{"observed_at":"2026-08-04T13:45:47.858987Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T13:45:48.024425Z","title":"Under review","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.25624","last_updated":"2026-07-19T03:06:33Z","snapshot_observed_at":"2026-08-18T07:13:14.326527Z","submitted_at":"2025-09-30T00:31:44Z","title":"STAC: When Innocent Tools Form Dangerous Chains for LLM Agents","version":3},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-04T13:45:48.024425Z"},"links":{"citing_paper":"/paper/2509.25624"},"observation_digest":"sha256:d31f95a0b6e614c489881c4614e01473e9a394afaa0eafd6c6b93fa004e51ddc","observation_id":"ff638c44-7a4b-43c7-8562-d5f338dbd397","resolution":{"observed_at":"2026-08-04T13:45:48.024425Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T13:45:48.146909Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.25624","last_updated":"2026-07-19T03:06:33Z","snapshot_observed_at":"2026-08-18T07:13:14.326527Z","submitted_at":"2025-09-30T00:31:44Z","title":"STAC: When Innocent Tools Form Dangerous Chains for LLM Agents","version":3},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-04T13:45:48.146909Z"},"links":{"citing_paper":"/paper/2509.25624"},"observation_digest":"sha256:d24658d3ffdb959559fc90b83b9ab56e35d1f582eeafa4361009b1834d70fbbd","observation_id":"0905d2e4-d758-4f0e-a59f-98bc554171c1","resolution":{"observed_at":"2026-08-04T13:45:48.146909Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T13:45:48.265974Z","title":"prompt\":","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.25624","last_updated":"2026-07-19T03:06:33Z","snapshot_observed_at":"2026-08-18T07:13:14.326527Z","submitted_at":"2025-09-30T00:31:44Z","title":"STAC: When Innocent Tools Form Dangerous Chains for LLM Agents","version":3},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-04T13:45:48.265974Z"},"links":{"citing_paper":"/paper/2509.25624"},"observation_digest":"sha256:d68d7bcbb82bf1f327d190af14a8e1e1e982648158ab646b25bbb5b68db781f1","observation_id":"0def23ae-568e-4bfb-bf30-526759d46008","resolution":{"observed_at":"2026-08-04T13:45:48.265974Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T13:45:48.413922Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.25624","last_updated":"2026-07-19T03:06:33Z","snapshot_observed_at":"2026-08-18T07:13:14.326527Z","submitted_at":"2025-09-30T00:31:44Z","title":"STAC: When Innocent Tools Form Dangerous Chains for LLM Agents","version":3},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-04T13:45:48.413922Z"},"links":{"citing_paper":"/paper/2509.25624"},"observation_digest":"sha256:73ae64c15a4849305f09422a1c3d29736c888db910419ed9cff169c8238dd0bc","observation_id":"1a7f505a-986a-46ba-af60-ed99c0ccb997","resolution":{"observed_at":"2026-08-04T13:45:48.413922Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T13:45:48.574045Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.25624","last_updated":"2026-07-19T03:06:33Z","snapshot_observed_at":"2026-08-18T07:13:14.326527Z","submitted_at":"2025-09-30T00:31:44Z","title":"STAC: When Innocent Tools Form Dangerous Chains for LLM Agents","version":3},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-04T13:45:48.574045Z"},"links":{"citing_paper":"/paper/2509.25624"},"observation_digest":"sha256:3ecc4a4e19b4a3c2a6ba9fe7e0cc79159611e546c11dd030d76c92f491df2aec","observation_id":"59f856da-11a5-433b-9574-f2e8ddacfeac","resolution":{"observed_at":"2026-08-04T13:45:48.574045Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T13:45:48.682076Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.25624","last_updated":"2026-07-19T03:06:33Z","snapshot_observed_at":"2026-08-18T07:13:14.326527Z","submitted_at":"2025-09-30T00:31:44Z","title":"STAC: When Innocent Tools Form Dangerous Chains for LLM Agents","version":3},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-04T13:45:48.682076Z"},"links":{"citing_paper":"/paper/2509.25624"},"observation_digest":"sha256:9cfa2542fec99d91b41f5618a7e05a4687869f8060cbf95681ef44fd5602b21f","observation_id":"8520956a-790f-49b4-b25d-1fbe447c6e07","resolution":{"observed_at":"2026-08-04T13:45:48.682076Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T13:45:48.795733Z","title":"Under review","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.25624","last_updated":"2026-07-19T03:06:33Z","snapshot_observed_at":"2026-08-18T07:13:14.326527Z","submitted_at":"2025-09-30T00:31:44Z","title":"STAC: When Innocent Tools Form Dangerous Chains for LLM Agents","version":3},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-04T13:45:48.795733Z"},"links":{"citing_paper":"/paper/2509.25624"},"observation_digest":"sha256:caee13dd4a94f51822d77f94eb0c77174c296096a824055615046516561a1d2b","observation_id":"bf8981ea-6971-4a6b-a365-8c2a57751a7e","resolution":{"observed_at":"2026-08-04T13:45:48.795733Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T13:45:48.925798Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.25624","last_updated":"2026-07-19T03:06:33Z","snapshot_observed_at":"2026-08-18T07:13:14.326527Z","submitted_at":"2025-09-30T00:31:44Z","title":"STAC: When Innocent Tools Form Dangerous Chains for LLM Agents","version":3},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-04T13:45:48.925798Z"},"links":{"citing_paper":"/paper/2509.25624"},"observation_digest":"sha256:80f96e111ccf981b5028bbce0cc68f08537a66f5ef9ac881ec910e8a40e6d56e","observation_id":"b5f727f9-28bc-4417-9b8f-02176898018c","resolution":{"observed_at":"2026-08-04T13:45:48.925798Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T13:45:49.045981Z","title":"Uti- lize any helpful information in the agent’s previous responses to understand its capabilities and constraints","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.25624","last_updated":"2026-07-19T03:06:33Z","snapshot_observed_at":"2026-08-18T07:13:14.326527Z","submitted_at":"2025-09-30T00:31:44Z","title":"STAC: When Innocent Tools Form Dangerous Chains for LLM Agents","version":3},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-04T13:45:49.045981Z"},"links":{"citing_paper":"/paper/2509.25624"},"observation_digest":"sha256:8f04e7c06749d776e4731ca222dcf4960a4a6789886480650faef3a543a54c1a","observation_id":"5e29281e-6768-4e2d-baaf-dbe83906f8b5","resolution":{"observed_at":"2026-08-04T13:45:49.045981Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T13:45:49.172875Z","title":"strategy_prediction","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.25624","last_updated":"2026-07-19T03:06:33Z","snapshot_observed_at":"2026-08-18T07:13:14.326527Z","submitted_at":"2025-09-30T00:31:44Z","title":"STAC: When Innocent Tools Form Dangerous Chains for LLM Agents","version":3},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-04T13:45:49.172875Z"},"links":{"citing_paper":"/paper/2509.25624"},"observation_digest":"sha256:4dc4d3ee21c59b72faeda701e97812733bcb84c2e5e88681df798dc092a9e22f","observation_id":"969cff38-62dc-4156-904d-b76f5ee93d94","resolution":{"observed_at":"2026-08-04T13:45:49.172875Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T13:45:49.264383Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.25624","last_updated":"2026-07-19T03:06:33Z","snapshot_observed_at":"2026-08-18T07:13:14.326527Z","submitted_at":"2025-09-30T00:31:44Z","title":"STAC: When Innocent Tools Form Dangerous Chains for LLM Agents","version":3},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-04T13:45:49.264383Z"},"links":{"citing_paper":"/paper/2509.25624"},"observation_digest":"sha256:3d10768650aebe93d1e49a5d2981c7813d624791f1ac5b3ade9a3ff7a013a5b0","observation_id":"ba1c082f-7f22-478b-b7de-d3b15167aea9","resolution":{"observed_at":"2026-08-04T13:45:49.264383Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T13:45:49.412484Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.25624","last_updated":"2026-07-19T03:06:33Z","snapshot_observed_at":"2026-08-18T07:13:14.326527Z","submitted_at":"2025-09-30T00:31:44Z","title":"STAC: When Innocent Tools Form Dangerous Chains for LLM Agents","version":3},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-04T13:45:49.412484Z"},"links":{"citing_paper":"/paper/2509.25624"},"observation_digest":"sha256:f127ef28db2de9399572eb335603e3d317f297edd41fdb871720b0bb167287be","observation_id":"c3da63e8-9168-4a61-9408-6524103bd21d","resolution":{"observed_at":"2026-08-04T13:45:49.412484Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T13:45:49.537352Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.25624","last_updated":"2026-07-19T03:06:33Z","snapshot_observed_at":"2026-08-18T07:13:14.326527Z","submitted_at":"2025-09-30T00:31:44Z","title":"STAC: When Innocent Tools Form Dangerous Chains for LLM Agents","version":3},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-04T13:45:49.537352Z"},"links":{"citing_paper":"/paper/2509.25624"},"observation_digest":"sha256:9f54b81907f6922acc28b344674d6ee69ef69cf40f0c95e4a9b398c05b1a8990","observation_id":"7e837d03-fec4-4fa5-b315-d19530fb2d48","resolution":{"observed_at":"2026-08-04T13:45:49.537352Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T13:45:49.652625Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.25624","last_updated":"2026-07-19T03:06:33Z","snapshot_observed_at":"2026-08-18T07:13:14.326527Z","submitted_at":"2025-09-30T00:31:44Z","title":"STAC: When Innocent Tools Form Dangerous Chains for LLM Agents","version":3},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-04T13:45:49.652625Z"},"links":{"citing_paper":"/paper/2509.25624"},"observation_digest":"sha256:159c70bf21826e221895db3693e3b1dc107fd09d255ac5874d1e767e7e233354","observation_id":"7c685370-fac9-4234-9c86-d5ad7c97db4a","resolution":{"observed_at":"2026-08-04T13:45:49.652625Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T13:45:49.657330Z","title":"Under review","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.25624","last_updated":"2026-07-19T03:06:33Z","snapshot_observed_at":"2026-08-18T07:13:14.326527Z","submitted_at":"2025-09-30T00:31:44Z","title":"STAC: When Innocent Tools Form Dangerous Chains for LLM Agents","version":3},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-04T13:45:49.657330Z"},"links":{"citing_paper":"/paper/2509.25624"},"observation_digest":"sha256:0b44878a9eed30465bd33f9f23c93cf26b89a6502ed24fb008765781d5d947af","observation_id":"93f9197a-a778-4c3c-9e67-256244cd7bbb","resolution":{"observed_at":"2026-08-04T13:45:49.657330Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T13:45:49.661717Z","title":"name\": \"search files by filename","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.25624","last_updated":"2026-07-19T03:06:33Z","snapshot_observed_at":"2026-08-18T07:13:14.326527Z","submitted_at":"2025-09-30T00:31:44Z","title":"STAC: When Innocent Tools Form Dangerous Chains for LLM Agents","version":3},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-04T13:45:49.661717Z"},"links":{"citing_paper":"/paper/2509.25624"},"observation_digest":"sha256:c1d5c6a5a1266c2841df2c7f6930c4373d0f2608c1f199295c0511de2c79b915","observation_id":"ededa174-8a05-4fdd-a654-c303cc565c60","resolution":{"observed_at":"2026-08-04T13:45:49.661717Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T13:45:49.666266Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.25624","last_updated":"2026-07-19T03:06:33Z","snapshot_observed_at":"2026-08-18T07:13:14.326527Z","submitted_at":"2025-09-30T00:31:44Z","title":"STAC: When Innocent Tools Form Dangerous Chains for LLM Agents","version":3},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-04T13:45:49.666266Z"},"links":{"citing_paper":"/paper/2509.25624"},"observation_digest":"sha256:28c36423c661165c30e14015ea64da417ec104834f514207bbfcb612f1527ebe","observation_id":"abca72f1-f4b0-4302-a9fb-5605968eedd7","resolution":{"observed_at":"2026-08-04T13:45:49.666266Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T13:45:49.670516Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.25624","last_updated":"2026-07-19T03:06:33Z","snapshot_observed_at":"2026-08-18T07:13:14.326527Z","submitted_at":"2025-09-30T00:31:44Z","title":"STAC: When Innocent Tools Form Dangerous Chains for LLM Agents","version":3},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-04T13:45:49.670516Z"},"links":{"citing_paper":"/paper/2509.25624"},"observation_digest":"sha256:88a0572eff922ee45ada7c664224ed5ee319cd758353495905e92b758b9a8a3c","observation_id":"3da30e47-ffc2-4f9c-a822-c0ab8101dc56","resolution":{"observed_at":"2026-08-04T13:45:49.670516Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T13:45:49.674648Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.25624","last_updated":"2026-07-19T03:06:33Z","snapshot_observed_at":"2026-08-18T07:13:14.326527Z","submitted_at":"2025-09-30T00:31:44Z","title":"STAC: When Innocent Tools Form Dangerous Chains for LLM Agents","version":3},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-04T13:45:49.674648Z"},"links":{"citing_paper":"/paper/2509.25624"},"observation_digest":"sha256:5a71a508e15b4fab0f8dc3fe0186b78f4eea31c87763243eab1cb9f2809d593d","observation_id":"f4ff7d62-dcfa-4890-848c-0fccc6b16a56","resolution":{"observed_at":"2026-08-04T13:45:49.674648Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T13:45:49.678939Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.25624","last_updated":"2026-07-19T03:06:33Z","snapshot_observed_at":"2026-08-18T07:13:14.326527Z","submitted_at":"2025-09-30T00:31:44Z","title":"STAC: When Innocent Tools Form Dangerous Chains for LLM Agents","version":3},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-04T13:45:49.678939Z"},"links":{"citing_paper":"/paper/2509.25624"},"observation_digest":"sha256:9c61229a363e2946d077b27c873df14c09042f0e030f36942363c06ba4bc5301","observation_id":"391c6ac0-4685-4854-bab1-d4819bcd7acb","resolution":{"observed_at":"2026-08-04T13:45:49.678939Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T13:45:49.683441Z","title":"23 Preprint","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.25624","last_updated":"2026-07-19T03:06:33Z","snapshot_observed_at":"2026-08-18T07:13:14.326527Z","submitted_at":"2025-09-30T00:31:44Z","title":"STAC: When Innocent Tools Form Dangerous Chains for LLM Agents","version":3},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-04T13:45:49.683441Z"},"links":{"citing_paper":"/paper/2509.25624"},"observation_digest":"sha256:0c1eb360e0c90ec64f7a45e121ece7af17745d7660b288e8b34df9e694a130f0","observation_id":"06f0a9dd-56f6-473a-853c-c24e8ab06370","resolution":{"observed_at":"2026-08-04T13:45:49.683441Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T13:45:49.688227Z","title":"Remember that I won’t talk with you again after providing the task description","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.25624","last_updated":"2026-07-19T03:06:33Z","snapshot_observed_at":"2026-08-18T07:13:14.326527Z","submitted_at":"2025-09-30T00:31:44Z","title":"STAC: When Innocent Tools Form Dangerous Chains for LLM Agents","version":3},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-04T13:45:49.688227Z"},"links":{"citing_paper":"/paper/2509.25624"},"observation_digest":"sha256:f912cb26315db1f9c9025138a990e795f4b43698df0ac11aebdbd59310fe6849","observation_id":"b5f89051-7a55-403e-b26a-718fe1e3b22d","resolution":{"observed_at":"2026-08-04T13:45:49.688227Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T13:45:49.692924Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.25624","last_updated":"2026-07-19T03:06:33Z","snapshot_observed_at":"2026-08-18T07:13:14.326527Z","submitted_at":"2025-09-30T00:31:44Z","title":"STAC: When Innocent Tools Form Dangerous Chains for LLM Agents","version":3},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-04T13:45:49.692924Z"},"links":{"citing_paper":"/paper/2509.25624"},"observation_digest":"sha256:3259651adb071c6a0cd368beb2608dd50146d52d342101b0e612b13f1f6dcb4a","observation_id":"d77d1373-6a98-4bcc-87aa-a2a15f746914","resolution":{"observed_at":"2026-08-04T13:45:49.692924Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T13:45:49.697457Z","title":"You should not call multiple tools or one tool with different arguments simultaneously before receiving the return result from a tool call","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.25624","last_updated":"2026-07-19T03:06:33Z","snapshot_observed_at":"2026-08-18T07:13:14.326527Z","submitted_at":"2025-09-30T00:31:44Z","title":"STAC: When Innocent Tools Form Dangerous Chains for LLM Agents","version":3},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-04T13:45:49.697457Z"},"links":{"citing_paper":"/paper/2509.25624"},"observation_digest":"sha256:99e3b5a3ca544ca2d5e60269d35e1d58bb63f02f04b59a759fba39b660cf88a6","observation_id":"6f68c464-4905-4a73-b3da-8b5455e9c6e7","resolution":{"observed_at":"2026-08-04T13:45:49.697457Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T13:45:49.701739Z","title":"name\": \"function name","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.25624","last_updated":"2026-07-19T03:06:33Z","snapshot_observed_at":"2026-08-18T07:13:14.326527Z","submitted_at":"2025-09-30T00:31:44Z","title":"STAC: When Innocent Tools Form Dangerous Chains for LLM Agents","version":3},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-04T13:45:49.701739Z"},"links":{"citing_paper":"/paper/2509.25624"},"observation_digest":"sha256:793c3cc6f5855bf6cb24487eeb5a4611ff3a56745eae0d70b94018916802f50e","observation_id":"fafac4df-7540-4563-8ddb-3e9bba03c97a","resolution":{"observed_at":"2026-08-04T13:45:49.701739Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T13:45:49.706030Z","title":"Sub- sequently, you will analyze your current status, make decisions about the next steps, and repeat this process","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.25624","last_updated":"2026-07-19T03:06:33Z","snapshot_observed_at":"2026-08-18T07:13:14.326527Z","submitted_at":"2025-09-30T00:31:44Z","title":"STAC: When Innocent Tools Form Dangerous Chains for LLM Agents","version":3},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-04T13:45:49.706030Z"},"links":{"citing_paper":"/paper/2509.25624"},"observation_digest":"sha256:c5ca88cd70b2cbe4f969e352b7d08c2451c6bc84243b0d4cb60d3e1f45be2a29","observation_id":"cd10feb6-e632-4730-b907-58153fb6a1ac","resolution":{"observed_at":"2026-08-04T13:45:49.706030Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T13:45:49.710179Z","title":"For example, if you have already sent an email, do not send the same email again","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.25624","last_updated":"2026-07-19T03:06:33Z","snapshot_observed_at":"2026-08-18T07:13:14.326527Z","submitted_at":"2025-09-30T00:31:44Z","title":"STAC: When Innocent Tools Form Dangerous Chains for LLM Agents","version":3},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-04T13:45:49.710179Z"},"links":{"citing_paper":"/paper/2509.25624"},"observation_digest":"sha256:bb9da9ee8a4149154915b0279ffd76d27ffc598eca0a909423faaa81f93c9ac5","observation_id":"7a04b881-17c1-4f7e-813e-e2fd7d6ee0d9","resolution":{"observed_at":"2026-08-04T13:45:49.710179Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T13:45:49.714386Z","title":"Once you choose not to execute a function call, the task will be seen as completed, and your final output will be regarded as the result","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.25624","last_updated":"2026-07-19T03:06:33Z","snapshot_observed_at":"2026-08-18T07:13:14.326527Z","submitted_at":"2025-09-30T00:31:44Z","title":"STAC: When Innocent Tools Form Dangerous Chains for LLM Agents","version":3},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-04T13:45:49.714386Z"},"links":{"citing_paper":"/paper/2509.25624"},"observation_digest":"sha256:05b9d095a5a71144fc0c822bd17a48f01898fef927c3a474a6fd342afaacbe8e","observation_id":"b1f00ce5-f958-4a98-a250-757c3bfd4b34","resolution":{"observed_at":"2026-08-04T13:45:49.714386Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T13:45:49.718631Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.25624","last_updated":"2026-07-19T03:06:33Z","snapshot_observed_at":"2026-08-18T07:13:14.326527Z","submitted_at":"2025-09-30T00:31:44Z","title":"STAC: When Innocent Tools Form Dangerous Chains for LLM Agents","version":3},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-04T13:45:49.718631Z"},"links":{"citing_paper":"/paper/2509.25624"},"observation_digest":"sha256:602a6fd324a9e25b92bae3e2aeeeba942c1b96007c696774d2b620a47489ab4a","observation_id":"1bbdd803-40de-40ee-b1e8-b87d7ff220d2","resolution":{"observed_at":"2026-08-04T13:45:49.718631Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T13:45:49.723027Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.25624","last_updated":"2026-07-19T03:06:33Z","snapshot_observed_at":"2026-08-18T07:13:14.326527Z","submitted_at":"2025-09-30T00:31:44Z","title":"STAC: When Innocent Tools Form Dangerous Chains for LLM Agents","version":3},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-04T13:45:49.723027Z"},"links":{"citing_paper":"/paper/2509.25624"},"observation_digest":"sha256:fcf8bab2460b8c235efb406cbc923b88e319a055eaab678ae18e9b5c5b58af7f","observation_id":"495658b0-9913-4886-8df3-c526598862db","resolution":{"observed_at":"2026-08-04T13:45:49.723027Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T13:45:49.727293Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.25624","last_updated":"2026-07-19T03:06:33Z","snapshot_observed_at":"2026-08-18T07:13:14.326527Z","submitted_at":"2025-09-30T00:31:44Z","title":"STAC: When Innocent Tools Form Dangerous Chains for LLM Agents","version":3},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-04T13:45:49.727293Z"},"links":{"citing_paper":"/paper/2509.25624"},"observation_digest":"sha256:aac11469dfd4b7ac3dd5350f718dab94bdbc468db98b864fb73e56480d9173a2","observation_id":"a2a07908-ac6e-4def-aca9-7ea5beb2eaec","resolution":{"observed_at":"2026-08-04T13:45:49.727293Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T13:45:49.731423Z","title":"type\": \"object","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.25624","last_updated":"2026-07-19T03:06:33Z","snapshot_observed_at":"2026-08-18T07:13:14.326527Z","submitted_at":"2025-09-30T00:31:44Z","title":"STAC: When Innocent Tools Form Dangerous Chains for LLM Agents","version":3},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-04T13:45:49.731423Z"},"links":{"citing_paper":"/paper/2509.25624"},"observation_digest":"sha256:fade140132d058324974aa8dfc28704fe8d2fd1c59adbd5131451f5759f757c0","observation_id":"2ed7251f-8a2f-4da6-b565-12f93771741b","resolution":{"observed_at":"2026-08-04T13:45:49.731423Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T13:45:49.736008Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.25624","last_updated":"2026-07-19T03:06:33Z","snapshot_observed_at":"2026-08-18T07:13:14.326527Z","submitted_at":"2025-09-30T00:31:44Z","title":"STAC: When Innocent Tools Form Dangerous Chains for LLM Agents","version":3},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-04T13:45:49.736008Z"},"links":{"citing_paper":"/paper/2509.25624"},"observation_digest":"sha256:a8c2cf09c7badda6beab185487dba09637cc44a3c6bcbcd867b261a686efc68c","observation_id":"26bd2b8a-13ee-4b17-a1b4-699be6155c7e","resolution":{"observed_at":"2026-08-04T13:45:49.736008Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T13:45:49.740108Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.25624","last_updated":"2026-07-19T03:06:33Z","snapshot_observed_at":"2026-08-18T07:13:14.326527Z","submitted_at":"2025-09-30T00:31:44Z","title":"STAC: When Innocent Tools Form Dangerous Chains for LLM Agents","version":3},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-04T13:45:49.740108Z"},"links":{"citing_paper":"/paper/2509.25624"},"observation_digest":"sha256:2250800e120ad7b634e34386d2a17715bca4af32b5cf1940e25318351fbc174e","observation_id":"59d745c4-88fc-489b-acf3-98b7e875aed1","resolution":{"observed_at":"2026-08-04T13:45:49.740108Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T13:45:49.744358Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.25624","last_updated":"2026-07-19T03:06:33Z","snapshot_observed_at":"2026-08-18T07:13:14.326527Z","submitted_at":"2025-09-30T00:31:44Z","title":"STAC: When Innocent Tools Form Dangerous Chains for LLM Agents","version":3},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-04T13:45:49.744358Z"},"links":{"citing_paper":"/paper/2509.25624"},"observation_digest":"sha256:935c8e0e1a45d969aa2896518d4e522988cbee7919308f770f472df6d939358f","observation_id":"acd16376-7383-4f7e-8de8-3110a5d0f00d","resolution":{"observed_at":"2026-08-04T13:45:49.744358Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T13:45:49.748653Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.25624","last_updated":"2026-07-19T03:06:33Z","snapshot_observed_at":"2026-08-18T07:13:14.326527Z","submitted_at":"2025-09-30T00:31:44Z","title":"STAC: When Innocent Tools Form Dangerous Chains for LLM Agents","version":3},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-04T13:45:49.748653Z"},"links":{"citing_paper":"/paper/2509.25624"},"observation_digest":"sha256:dd8b2f477bdf60847fd53951f0d025d6352c58e57b886646c9f0431b248a1701","observation_id":"7314ac91-7bbc-4cd6-886b-42e05f0f3466","resolution":{"observed_at":"2026-08-04T13:45:49.748653Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T13:45:49.752968Z","title":"Figure 4: The defense prompt based on summarizing the user’s intent over the multi-turn interaction history","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.25624","last_updated":"2026-07-19T03:06:33Z","snapshot_observed_at":"2026-08-18T07:13:14.326527Z","submitted_at":"2025-09-30T00:31:44Z","title":"STAC: When Innocent Tools Form Dangerous Chains for LLM Agents","version":3},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-04T13:45:49.752968Z"},"links":{"citing_paper":"/paper/2509.25624"},"observation_digest":"sha256:75427785a5965152d51b378b80e4576257b80e10de32afded467d739ab8d995b","observation_id":"0b86e029-dfe8-42c4-b8d8-bf2858d59bcb","resolution":{"observed_at":"2026-08-04T13:45:49.752968Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T13:45:49.757414Z","title":"For example, if you need to send an email to John, but notice multiple Johns in the contact list, you should seek clarification with the user before sending the email","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.25624","last_updated":"2026-07-19T03:06:33Z","snapshot_observed_at":"2026-08-18T07:13:14.326527Z","submitted_at":"2025-09-30T00:31:44Z","title":"STAC: When Innocent Tools Form Dangerous Chains for LLM Agents","version":3},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-04T13:45:49.757414Z"},"links":{"citing_paper":"/paper/2509.25624"},"observation_digest":"sha256:e8728032d08c625822899c9f20a24128f3d02167095b869d0d22f71474202f12","observation_id":"ba352089-5f3c-4a4a-a7c8-7bc95f6817a1","resolution":{"observed_at":"2026-08-04T13:45:49.757414Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T13:45:49.761346Z","title":"For instance, before conducting a science experiments for the user, you should use your tools to check with the lab safety guidelines and the availability of the required materials","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.25624","last_updated":"2026-07-19T03:06:33Z","snapshot_observed_at":"2026-08-18T07:13:14.326527Z","submitted_at":"2025-09-30T00:31:44Z","title":"STAC: When Innocent Tools Form Dangerous Chains for LLM Agents","version":3},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-04T13:45:49.761346Z"},"links":{"citing_paper":"/paper/2509.25624"},"observation_digest":"sha256:957ab20be31c98ed592d0ae584f53735da7473a27b473fb9491a3144a93465eb","observation_id":"58dc6f7e-f0e0-4452-8d87-cacfb778874d","resolution":{"observed_at":"2026-08-04T13:45:49.761346Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T13:45:49.765336Z","title":"For example, if you learn from previous tool calls that the user does not have the permission to call a certain tool, you should avoid calling that tool","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.25624","last_updated":"2026-07-19T03:06:33Z","snapshot_observed_at":"2026-08-18T07:13:14.326527Z","submitted_at":"2025-09-30T00:31:44Z","title":"STAC: When Innocent Tools Form Dangerous Chains for LLM Agents","version":3},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-04T13:45:49.765336Z"},"links":{"citing_paper":"/paper/2509.25624"},"observation_digest":"sha256:7d56e33251241c48ce22338a50c9e1a3cb60b82f1e32efb9adbf2e87ebabc817","observation_id":"56289480-9321-4b1a-80b9-b365be30211d","resolution":{"observed_at":"2026-08-04T13:45:49.765336Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T13:45:49.769715Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.25624","last_updated":"2026-07-19T03:06:33Z","snapshot_observed_at":"2026-08-18T07:13:14.326527Z","submitted_at":"2025-09-30T00:31:44Z","title":"STAC: When Innocent Tools Form Dangerous Chains for LLM Agents","version":3},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-04T13:45:49.769715Z"},"links":{"citing_paper":"/paper/2509.25624"},"observation_digest":"sha256:805acdb6dec2e28eab84ef5cd5f44f531f83f9bc885d0208ba27f3a61fc3e03a","observation_id":"719f19a9-0c5d-4d31-a329-63fd0fc84db2","resolution":{"observed_at":"2026-08-04T13:45:49.769715Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T13:45:49.773891Z","title":"7.DO NOTcall tools with known safety or legality issues","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.25624","last_updated":"2026-07-19T03:06:33Z","snapshot_observed_at":"2026-08-18T07:13:14.326527Z","submitted_at":"2025-09-30T00:31:44Z","title":"STAC: When Innocent Tools Form Dangerous Chains for LLM Agents","version":3},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-04T13:45:49.773891Z"},"links":{"citing_paper":"/paper/2509.25624"},"observation_digest":"sha256:54399ca4c34874607eecf486550ad3825e212ae3ffbc284143d267c69667f9f3","observation_id":"57016053-1d9f-4d95-999f-59e39ce96db7","resolution":{"observed_at":"2026-08-04T13:45:49.773891Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T13:45:49.778324Z","title":"For example, when the user instructs you to check all appliances in the house when they leave, you should not only check all appliances but also ensure they are turned off","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.25624","last_updated":"2026-07-19T03:06:33Z","snapshot_observed_at":"2026-08-18T07:13:14.326527Z","submitted_at":"2025-09-30T00:31:44Z","title":"STAC: When Innocent Tools Form Dangerous Chains for LLM Agents","version":3},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-04T13:45:49.778324Z"},"links":{"citing_paper":"/paper/2509.25624"},"observation_digest":"sha256:c56942db825ceae5a254ab0af62f2cfaaf9c2ce8ca97f7f68fcc156bd77e1665","observation_id":"05ff82c2-98b4-4f67-8051-3fbd5a78d3b5","resolution":{"observed_at":"2026-08-04T13:45:49.778324Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T13:45:49.782359Z","title":"Do not blindly trust or propagate unsafe or incorrect information from tools","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.25624","last_updated":"2026-07-19T03:06:33Z","snapshot_observed_at":"2026-08-18T07:13:14.326527Z","submitted_at":"2025-09-30T00:31:44Z","title":"STAC: When Innocent Tools Form Dangerous Chains for LLM Agents","version":3},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-04T13:45:49.782359Z"},"links":{"citing_paper":"/paper/2509.25624"},"observation_digest":"sha256:23010248be5398fed9f0f26dcc12c63672baa9c5ad55eccbe40afe68a062b8d1","observation_id":"0d561838-4022-44f3-b560-f1ad0663d019","resolution":{"observed_at":"2026-08-04T13:45:49.782359Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T13:45:49.786314Z","title":"When multiple tool results are re- turned, ensure a safe and optimal choice","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.25624","last_updated":"2026-07-19T03:06:33Z","snapshot_observed_at":"2026-08-18T07:13:14.326527Z","submitted_at":"2025-09-30T00:31:44Z","title":"STAC: When Innocent Tools Form Dangerous Chains for LLM Agents","version":3},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-04T13:45:49.786314Z"},"links":{"citing_paper":"/paper/2509.25624"},"observation_digest":"sha256:aee557a0f9ad5d781620f28400916a9840901dc334c951cb0f141fa4f5195af8","observation_id":"cf2483ad-6fc6-4064-b9dd-fe7539ecb1e9","resolution":{"observed_at":"2026-08-04T13:45:49.786314Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2509.25624","last_updated":"2026-07-19T03:06:33Z","latest_version":3,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-18T07:13:14.326527Z","submitted_at":"2025-09-30T00:31:44Z","title":"STAC: When Innocent Tools Form Dangerous Chains for LLM Agents"},"reference_resolution":{"displayed":50,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":50,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":50},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"thesis":"As of 22 August 2026, this Paper Citation Record lists 50 of 50 outbound references and 9 inbound Pith citation observations for arXiv:2509.25624."}