{"as_of":"2026-08-05T23:26:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:92d5d3d668bfa57ff35dc74bf67d05f697d1f53e5e234b07bc4072be1e42a717","coverage":[{"denominator":56,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":56,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-03T09:55:01.568953Z","state":"measured"},{"denominator":60,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":60,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-05T06:32:48.257954+00:00","state":"measured"},{"denominator":4,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":4,"source":"paper_references, paper_reference_links","source_observed_at":"2026-07-01T09:01:22.412685Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-01T09:05:36.658222Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2601.12349","last_updated":"2026-07-15T15:32:11Z","snapshot_observed_at":"2026-08-04T21:39:28.308547Z","submitted_at":"2026-01-18T10:54:54Z","title":"Mind the Gap: Action Rebinding Attacks against Android GUI Agents","version":3},"cited_work":{"arxiv_id":"2601.12349","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2601.12349","snapshot_observed_at":"2026-07-16T02:22:32.277203Z","title":"Zero-permission manipulation: Can we trust large multimodal model powered gui agents?","venue":null,"work_id":"a81dd481-8f05-421a-ae0d-6d4119d26d65","year":2026},"citing_paper":{"arxiv_id":"2604.18860","last_updated":"2026-04-20T21:36:16Z","snapshot_observed_at":"2026-07-06T23:05:39.724237Z","submitted_at":"2026-04-20T21:36:16Z","title":"Temporal UI State Inconsistency in Desktop GUI Agents: Formalizing and Defending Against TOCTOU Attacks on Computer-Use Agents","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-05-10T03:51:47.820649Z"},"links":{"cited_paper":"/paper/2601.12349","citing_paper":"/paper/2604.18860"},"observation_digest":"sha256:e579366e2b10a9bd1cac3431a63b0fe27ec824ab598fb05756bee4f1c5cdd1ce","observation_id":"989cc4ce-26aa-42d4-994b-415561cdfa9b","resolution":{"observed_at":"2026-07-16T02:22:32.277203Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2601.12349","last_updated":"2026-07-15T15:32:11Z","snapshot_observed_at":"2026-08-04T21:39:28.308547Z","submitted_at":"2026-01-18T10:54:54Z","title":"Mind the Gap: Action Rebinding Attacks against Android GUI Agents","version":3},"cited_work":{"arxiv_id":"2601.12349","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2601.12349","snapshot_observed_at":"2026-07-16T02:22:32.277203Z","title":"Zero-permission manipulation: Can we trust large multimodal model powered gui agents?","venue":null,"work_id":"a81dd481-8f05-421a-ae0d-6d4119d26d65","year":2026},"citing_paper":{"arxiv_id":"2605.07110","last_updated":"2026-05-08T01:38:46Z","snapshot_observed_at":"2026-07-06T23:19:30.387067Z","submitted_at":"2026-05-08T01:38:46Z","title":"Securing Computer-Use Agents: A Unified Architecture-Lifecycle Framework for Deployment-Grounded Reliability","version":1},"reference_index":177,"source":"pdf_text","source_observed_at":"2026-05-11T01:15:19.239355Z"},"links":{"cited_paper":"/paper/2601.12349","citing_paper":"/paper/2605.07110"},"observation_digest":"sha256:17bcfd92c1c94f8a12ae17fdfe0ffe8a9d3b5ff4434d16002ac026ce9390546f","observation_id":"6516dc63-0ce5-4a16-bdba-1f76d7bc64fa","resolution":{"observed_at":"2026-07-16T02:22:32.277203Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2601.12349","last_updated":"2026-07-15T15:32:11Z","snapshot_observed_at":"2026-08-04T21:39:28.308547Z","submitted_at":"2026-01-18T10:54:54Z","title":"Mind the Gap: Action Rebinding Attacks against Android GUI Agents","version":3},"cited_work":{"arxiv_id":"2601.12349","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2601.12349","snapshot_observed_at":"2026-07-16T02:22:32.277203Z","title":"Zero-permission manipulation: Can we trust large multimodal model powered gui agents?","venue":null,"work_id":"a81dd481-8f05-421a-ae0d-6d4119d26d65","year":2026},"citing_paper":{"arxiv_id":"2605.07630","last_updated":"2026-05-08T11:58:57Z","snapshot_observed_at":"2026-07-06T23:20:01.856093Z","submitted_at":"2026-05-08T11:58:57Z","title":"Safe, or Simply Incapable? Rethinking Safety Evaluation for Phone-Use Agents","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-05-11T02:00:17.765986Z"},"links":{"cited_paper":"/paper/2601.12349","citing_paper":"/paper/2605.07630"},"observation_digest":"sha256:08f1e6c9fde7367c9f3ae96d90944b56647f108900cba0d9442ea54d99336e32","observation_id":"377dfc56-2591-42af-8622-822a491aaf02","resolution":{"observed_at":"2026-07-16T02:22:32.277203Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2601.12349","last_updated":"2026-07-15T15:32:11Z","snapshot_observed_at":"2026-08-04T21:39:28.308547Z","submitted_at":"2026-01-18T10:54:54Z","title":"Mind the Gap: Action Rebinding Attacks against Android GUI Agents","version":3},"cited_work":{"arxiv_id":"2601.12349","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2601.12349","snapshot_observed_at":"2026-07-16T02:22:32.277203Z","title":"Zero-permission manipulation: Can we trust large multimodal model powered gui agents?","venue":null,"work_id":"a81dd481-8f05-421a-ae0d-6d4119d26d65","year":2026},"citing_paper":{"arxiv_id":"2605.23939","last_updated":"2026-04-28T11:39:20Z","snapshot_observed_at":"2026-07-31T15:29:41.171388Z","submitted_at":"2026-04-28T11:39:20Z","title":"DRIVE: Modeling Skills at the Reasoning and Interaction Levels for Web Agents under Continual Learning","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-07-01T09:01:22.412685Z"},"links":{"cited_paper":"/paper/2601.12349","citing_paper":"/paper/2605.23939"},"observation_digest":"sha256:26e0566d238f17671ea5ee95b51fd3c0dabd3a0f06b59f2d3af4f9ecba38608c","observation_id":"b81d5a4d-4826-4370-9639-924e5332d7b1","resolution":{"observed_at":"2026-07-16T02:22:32.277203Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2601.12349/citation-record","integrity":"/paper/2601.12349/integrity","json":"/paper/2601.12349/citation-record.json","paper":"/paper/2601.12349"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T09:54:54.877631Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.12349","last_updated":"2026-07-15T15:32:11Z","snapshot_observed_at":"2026-08-04T21:39:28.308547Z","submitted_at":"2026-01-18T10:54:54Z","title":"Mind the Gap: Action Rebinding Attacks against Android GUI Agents","version":3},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-03T09:54:54.877631Z"},"links":{"citing_paper":"/paper/2601.12349"},"observation_digest":"sha256:f7a75cdd9bf7731809cfed5fbc2afcafde0f6c6c5825a1247ac7a0b97d9fabd3","observation_id":"ce54a11d-6597-4a7b-9bf1-188e0ac40d3d","resolution":{"observed_at":"2026-08-03T09:54:54.877631Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T09:54:55.012913Z","title":null,"venue":null,"work_id":null,"year":1996},"citing_paper":{"arxiv_id":"2601.12349","last_updated":"2026-07-15T15:32:11Z","snapshot_observed_at":"2026-08-04T21:39:28.308547Z","submitted_at":"2026-01-18T10:54:54Z","title":"Mind the Gap: Action Rebinding Attacks against Android GUI Agents","version":3},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-03T09:54:55.012913Z"},"links":{"citing_paper":"/paper/2601.12349"},"observation_digest":"sha256:73f987306e1c0592257ea56b9b891e3c6f10cd7b656291f72ee08df6debac276","observation_id":"6a12d344-f063-4f31-a5ad-df4a38e14bfa","resolution":{"observed_at":"2026-08-03T09:54:55.012913Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T09:54:55.161525Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.12349","last_updated":"2026-07-15T15:32:11Z","snapshot_observed_at":"2026-08-04T21:39:28.308547Z","submitted_at":"2026-01-18T10:54:54Z","title":"Mind the Gap: Action Rebinding Attacks against Android GUI Agents","version":3},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-03T09:54:55.161525Z"},"links":{"citing_paper":"/paper/2601.12349"},"observation_digest":"sha256:fcefb3dbe40d496a47be7fa17c7aefacbddcf79131a2e383f5e50ca33ea93b9f","observation_id":"7f83d43b-9517-4f01-bee4-859a4fe646d4","resolution":{"observed_at":"2026-08-03T09:54:55.161525Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T09:54:55.300212Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.12349","last_updated":"2026-07-15T15:32:11Z","snapshot_observed_at":"2026-08-04T21:39:28.308547Z","submitted_at":"2026-01-18T10:54:54Z","title":"Mind the Gap: Action Rebinding Attacks against Android GUI Agents","version":3},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-03T09:54:55.300212Z"},"links":{"citing_paper":"/paper/2601.12349"},"observation_digest":"sha256:11d04c67cbafe964e13e49ae53cadc4064817b0c5e31ea76a6ac6d894cd36d26","observation_id":"78d56363-1cc7-4222-87fd-70ffbafecf57","resolution":{"observed_at":"2026-08-03T09:54:55.300212Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T09:54:55.440813Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2601.12349","last_updated":"2026-07-15T15:32:11Z","snapshot_observed_at":"2026-08-04T21:39:28.308547Z","submitted_at":"2026-01-18T10:54:54Z","title":"Mind the Gap: Action Rebinding Attacks against Android GUI Agents","version":3},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-03T09:54:55.440813Z"},"links":{"citing_paper":"/paper/2601.12349"},"observation_digest":"sha256:766d8ef863e6900748c3dac602041765679b217ea01b8ef57f73bef1be4aa385","observation_id":"569f2d63-99dc-4992-8bef-0b4009708a5a","resolution":{"observed_at":"2026-08-03T09:54:55.440813Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T09:54:55.660303Z","title":null,"venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2601.12349","last_updated":"2026-07-15T15:32:11Z","snapshot_observed_at":"2026-08-04T21:39:28.308547Z","submitted_at":"2026-01-18T10:54:54Z","title":"Mind the Gap: Action Rebinding Attacks against Android GUI Agents","version":3},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-03T09:54:55.660303Z"},"links":{"citing_paper":"/paper/2601.12349"},"observation_digest":"sha256:a88116f152e90404202d420a88a52da11936b1c78efca12bc2724ac9a1865d9f","observation_id":"2cba40ba-1390-4009-b201-d42fed290c7c","resolution":{"observed_at":"2026-08-03T09:54:55.660303Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T09:54:55.780500Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.12349","last_updated":"2026-07-15T15:32:11Z","snapshot_observed_at":"2026-08-04T21:39:28.308547Z","submitted_at":"2026-01-18T10:54:54Z","title":"Mind the Gap: Action Rebinding Attacks against Android GUI Agents","version":3},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-03T09:54:55.780500Z"},"links":{"citing_paper":"/paper/2601.12349"},"observation_digest":"sha256:1eabf0ced05b48753f46ebcf1f64591550a4b597dacd25a9e2ed153bdf066831","observation_id":"ec8e906a-e67c-42c4-b7d4-de0e237d2535","resolution":{"observed_at":"2026-08-03T09:54:55.780500Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T09:54:55.881787Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.12349","last_updated":"2026-07-15T15:32:11Z","snapshot_observed_at":"2026-08-04T21:39:28.308547Z","submitted_at":"2026-01-18T10:54:54Z","title":"Mind the Gap: Action Rebinding Attacks against Android GUI Agents","version":3},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-03T09:54:55.881787Z"},"links":{"citing_paper":"/paper/2601.12349"},"observation_digest":"sha256:574cf49e2d0c75e2d094c290ee22a33f6447b0a7f738d0266de9d9fec404b43d","observation_id":"38442a34-de8b-4c81-8d03-820b047eb00c","resolution":{"observed_at":"2026-08-03T09:54:55.881787Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.03766","last_updated":"2024-02-06T07:16:36Z","snapshot_observed_at":"2026-07-06T17:26:02.434883Z","submitted_at":"2024-02-06T07:16:36Z","title":"MobileVLM V2: Faster and Stronger Baseline for Vision Language Model","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.03766","snapshot_observed_at":"2026-08-03T09:54:55.990620Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2601.12349","last_updated":"2026-07-15T15:32:11Z","snapshot_observed_at":"2026-08-04T21:39:28.308547Z","submitted_at":"2026-01-18T10:54:54Z","title":"Mind the Gap: Action Rebinding Attacks against Android GUI Agents","version":3},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-03T09:54:55.990620Z"},"links":{"cited_paper":"/paper/2402.03766","citing_paper":"/paper/2601.12349"},"observation_digest":"sha256:e2d3d38b2fd154560e9ef9ab4b613b11a0f0a84aac227f5f34a67c16efc343cc","observation_id":"d9a9b26d-283c-4c63-a30d-df97864bca55","resolution":{"observed_at":"2026-08-03T09:54:55.990620Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T09:54:56.107293Z","title":null,"venue":null,"work_id":null,"year":2004},"citing_paper":{"arxiv_id":"2601.12349","last_updated":"2026-07-15T15:32:11Z","snapshot_observed_at":"2026-08-04T21:39:28.308547Z","submitted_at":"2026-01-18T10:54:54Z","title":"Mind the Gap: Action Rebinding Attacks against Android GUI Agents","version":3},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-03T09:54:56.107293Z"},"links":{"citing_paper":"/paper/2601.12349"},"observation_digest":"sha256:935ebb6471f43b44f8d0bf719c6f906b65b7107ffaa5082746191691bfa1e77d","observation_id":"f0aa1590-1e19-4e0f-8abe-699b8a2b2455","resolution":{"observed_at":"2026-08-03T09:54:56.107293Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T09:54:56.220117Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2601.12349","last_updated":"2026-07-15T15:32:11Z","snapshot_observed_at":"2026-08-04T21:39:28.308547Z","submitted_at":"2026-01-18T10:54:54Z","title":"Mind the Gap: Action Rebinding Attacks against Android GUI Agents","version":3},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-03T09:54:56.220117Z"},"links":{"citing_paper":"/paper/2601.12349"},"observation_digest":"sha256:c3b0c8450d6ffb53957257df0a7eb23e81e3cbb29d213e568ea292987c9e8f75","observation_id":"8553201f-51ee-4e1c-ba29-c777d406efb6","resolution":{"observed_at":"2026-08-03T09:54:56.220117Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T09:54:56.340087Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2601.12349","last_updated":"2026-07-15T15:32:11Z","snapshot_observed_at":"2026-08-04T21:39:28.308547Z","submitted_at":"2026-01-18T10:54:54Z","title":"Mind the Gap: Action Rebinding Attacks against Android GUI Agents","version":3},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-03T09:54:56.340087Z"},"links":{"citing_paper":"/paper/2601.12349"},"observation_digest":"sha256:c50cc017a2f25f7b419ab0078b205f6856bf3c64c38fce98924608f58c146bf8","observation_id":"e3dfbb88-9d31-48dd-8c25-80ec30ac1c84","resolution":{"observed_at":"2026-08-03T09:54:56.340087Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T09:54:56.511601Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2601.12349","last_updated":"2026-07-15T15:32:11Z","snapshot_observed_at":"2026-08-04T21:39:28.308547Z","submitted_at":"2026-01-18T10:54:54Z","title":"Mind the Gap: Action Rebinding Attacks against Android GUI Agents","version":3},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-03T09:54:56.511601Z"},"links":{"citing_paper":"/paper/2601.12349"},"observation_digest":"sha256:3f83ff1af91dca9eba269407d76a05104e1008d590756283dc741b00461f9b5f","observation_id":"fd6e88ea-3b94-4a0c-bd93-8b1dfb0e80fa","resolution":{"observed_at":"2026-08-03T09:54:56.511601Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T09:54:56.735423Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.12349","last_updated":"2026-07-15T15:32:11Z","snapshot_observed_at":"2026-08-04T21:39:28.308547Z","submitted_at":"2026-01-18T10:54:54Z","title":"Mind the Gap: Action Rebinding Attacks against Android GUI Agents","version":3},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-03T09:54:56.735423Z"},"links":{"citing_paper":"/paper/2601.12349"},"observation_digest":"sha256:ceee8409d6be4bd64829013d324073fa0fd52c185441c7d281648356f5a56be8","observation_id":"7ca532e0-749f-480c-af64-be167d01b5ec","resolution":{"observed_at":"2026-08-03T09:54:56.735423Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T09:54:56.815801Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.12349","last_updated":"2026-07-15T15:32:11Z","snapshot_observed_at":"2026-08-04T21:39:28.308547Z","submitted_at":"2026-01-18T10:54:54Z","title":"Mind the Gap: Action Rebinding Attacks against Android GUI Agents","version":3},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-03T09:54:56.815801Z"},"links":{"citing_paper":"/paper/2601.12349"},"observation_digest":"sha256:912efa0e829b90dbca311bb447a95487789760d692ede91cd2793dd00d33e248","observation_id":"12a72da1-47e7-49a0-805b-98704d92cdc4","resolution":{"observed_at":"2026-08-03T09:54:56.815801Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T09:54:56.927842Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.12349","last_updated":"2026-07-15T15:32:11Z","snapshot_observed_at":"2026-08-04T21:39:28.308547Z","submitted_at":"2026-01-18T10:54:54Z","title":"Mind the Gap: Action Rebinding Attacks against Android GUI Agents","version":3},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-03T09:54:56.927842Z"},"links":{"citing_paper":"/paper/2601.12349"},"observation_digest":"sha256:9797f3cac78f2a2de906a0a2107d948646054efb77d92d11ba25b36712293604","observation_id":"f9a5b06f-2392-4fa4-892b-3c855ec2ac50","resolution":{"observed_at":"2026-08-03T09:54:56.927842Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T09:54:57.038888Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.12349","last_updated":"2026-07-15T15:32:11Z","snapshot_observed_at":"2026-08-04T21:39:28.308547Z","submitted_at":"2026-01-18T10:54:54Z","title":"Mind the Gap: Action Rebinding Attacks against Android GUI Agents","version":3},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-03T09:54:57.038888Z"},"links":{"citing_paper":"/paper/2601.12349"},"observation_digest":"sha256:d96e8bfb80744e3d19550e3f44b2d81cc7242560aa702a2a3a3f50b828a081c4","observation_id":"20fdb11b-513f-4247-a058-183234539fbe","resolution":{"observed_at":"2026-08-03T09:54:57.038888Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T09:54:57.097740Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.12349","last_updated":"2026-07-15T15:32:11Z","snapshot_observed_at":"2026-08-04T21:39:28.308547Z","submitted_at":"2026-01-18T10:54:54Z","title":"Mind the Gap: Action Rebinding Attacks against Android GUI Agents","version":3},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-03T09:54:57.097740Z"},"links":{"citing_paper":"/paper/2601.12349"},"observation_digest":"sha256:985406bd62d7ba53298adbc0df863dc82edb2511e201298823e51fef4d281d9b","observation_id":"37aa0405-9c32-4eef-80f1-459113d8bd00","resolution":{"observed_at":"2026-08-03T09:54:57.097740Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T09:54:57.273505Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2601.12349","last_updated":"2026-07-15T15:32:11Z","snapshot_observed_at":"2026-08-04T21:39:28.308547Z","submitted_at":"2026-01-18T10:54:54Z","title":"Mind the Gap: Action Rebinding Attacks against Android GUI Agents","version":3},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-03T09:54:57.273505Z"},"links":{"citing_paper":"/paper/2601.12349"},"observation_digest":"sha256:dfbe245695c2a981973b3c098d9f82969437f618d8c3014ec364f5b17be2fa12","observation_id":"d9892054-f919-4d33-813f-fce698974752","resolution":{"observed_at":"2026-08-03T09:54:57.273505Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T09:54:57.359636Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.12349","last_updated":"2026-07-15T15:32:11Z","snapshot_observed_at":"2026-08-04T21:39:28.308547Z","submitted_at":"2026-01-18T10:54:54Z","title":"Mind the Gap: Action Rebinding Attacks against Android GUI Agents","version":3},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-03T09:54:57.359636Z"},"links":{"citing_paper":"/paper/2601.12349"},"observation_digest":"sha256:35fa70b406d01167ce69597fa189b9484c844439b79d33d3c5a77ee35fd97f8a","observation_id":"fdc4470f-8bf7-4286-9e18-671b79bb132b","resolution":{"observed_at":"2026-08-03T09:54:57.359636Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T09:54:57.413701Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2601.12349","last_updated":"2026-07-15T15:32:11Z","snapshot_observed_at":"2026-08-04T21:39:28.308547Z","submitted_at":"2026-01-18T10:54:54Z","title":"Mind the Gap: Action Rebinding Attacks against Android GUI Agents","version":3},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-03T09:54:57.413701Z"},"links":{"citing_paper":"/paper/2601.12349"},"observation_digest":"sha256:7cbe3fc1ce8464163d2fbe07216aee9de97de4904f6c60d38e8e374072cc0768","observation_id":"1a2d4562-92e0-4ac8-a863-760a3f4d88d1","resolution":{"observed_at":"2026-08-03T09:54:57.413701Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.02268","last_updated":"2025-04-15T02:32:21Z","snapshot_observed_at":"2026-08-01T16:50:04.611101Z","submitted_at":"2025-03-04T04:34:09Z","title":"AppAgentX: Evolving GUI Agents as Proficient Smartphone Users","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.02268","snapshot_observed_at":"2026-08-03T09:54:57.460389Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.12349","last_updated":"2026-07-15T15:32:11Z","snapshot_observed_at":"2026-08-04T21:39:28.308547Z","submitted_at":"2026-01-18T10:54:54Z","title":"Mind the Gap: Action Rebinding Attacks against Android GUI Agents","version":3},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-03T09:54:57.460389Z"},"links":{"cited_paper":"/paper/2503.02268","citing_paper":"/paper/2601.12349"},"observation_digest":"sha256:4c9a60c576b372f6fb0897ac4729f343e96f7499b0b2652887a9ebe96e4b74be","observation_id":"d270462f-e084-4922-b81b-b03fb5ead43a","resolution":{"observed_at":"2026-08-03T09:54:57.460389Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2507.05445","last_updated":"2025-07-07T19:50:21Z","snapshot_observed_at":"2026-07-06T21:53:32.678356Z","submitted_at":"2025-07-07T19:50:21Z","title":"A Systematization of Security Vulnerabilities in Computer Use Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2507.05445","snapshot_observed_at":"2026-08-03T09:54:57.493112Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.12349","last_updated":"2026-07-15T15:32:11Z","snapshot_observed_at":"2026-08-04T21:39:28.308547Z","submitted_at":"2026-01-18T10:54:54Z","title":"Mind the Gap: Action Rebinding Attacks against Android GUI Agents","version":3},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-03T09:54:57.493112Z"},"links":{"cited_paper":"/paper/2507.05445","citing_paper":"/paper/2601.12349"},"observation_digest":"sha256:b382e424736745a78d3d023ecc7fedde5859cb4c288c1f2df54c18b9c066e395","observation_id":"1eabc1c6-2842-458f-aa59-1c8aaf26e4a1","resolution":{"observed_at":"2026-08-03T09:54:57.493112Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T09:54:57.499958Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2601.12349","last_updated":"2026-07-15T15:32:11Z","snapshot_observed_at":"2026-08-04T21:39:28.308547Z","submitted_at":"2026-01-18T10:54:54Z","title":"Mind the Gap: Action Rebinding Attacks against Android GUI Agents","version":3},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-03T09:54:57.499958Z"},"links":{"citing_paper":"/paper/2601.12349"},"observation_digest":"sha256:9a000e09d710ad692b5b8c10593bb43742d011a49d3e96b9701cc6022b043d0d","observation_id":"ad603347-bdd1-42c3-a6ef-482b42eebc14","resolution":{"observed_at":"2026-08-03T09:54:57.499958Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2409.11295","last_updated":"2025-03-12T20:54:00Z","snapshot_observed_at":"2026-08-05T08:35:51.041008Z","submitted_at":"2024-09-17T15:49:44Z","title":"EIA: Environmental Injection Attack on Generalist Web Agents for Privacy Leakage","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.11295","snapshot_observed_at":"2026-08-03T09:54:57.641440Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2601.12349","last_updated":"2026-07-15T15:32:11Z","snapshot_observed_at":"2026-08-04T21:39:28.308547Z","submitted_at":"2026-01-18T10:54:54Z","title":"Mind the Gap: Action Rebinding Attacks against Android GUI Agents","version":3},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-03T09:54:57.641440Z"},"links":{"cited_paper":"/paper/2409.11295","citing_paper":"/paper/2601.12349"},"observation_digest":"sha256:140dbded4b6a2c925cdbd51a054c9245528c269ed69413049c51ac8df5612261","observation_id":"1dca5052-1c53-465f-835c-927dc08e41e1","resolution":{"observed_at":"2026-08-03T09:54:57.641440Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2508.17155","last_updated":"2025-08-23T22:41:49Z","snapshot_observed_at":"2026-08-05T17:01:25.903491Z","submitted_at":"2025-08-23T22:41:49Z","title":"Mind the Gap: Time-of-Check to Time-of-Use Vulnerabilities in LLM-Enabled Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2508.17155","snapshot_observed_at":"2026-08-03T09:54:57.700274Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.12349","last_updated":"2026-07-15T15:32:11Z","snapshot_observed_at":"2026-08-04T21:39:28.308547Z","submitted_at":"2026-01-18T10:54:54Z","title":"Mind the Gap: Action Rebinding Attacks against Android GUI Agents","version":3},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-03T09:54:57.700274Z"},"links":{"cited_paper":"/paper/2508.17155","citing_paper":"/paper/2601.12349"},"observation_digest":"sha256:51c1802b5df461a2f59f132d22047768deac34b063ce39cb1e8cc808fbc9e8b4","observation_id":"0fbb058d-ed5f-4277-9ce5-cd25c2c358df","resolution":{"observed_at":"2026-08-03T09:54:57.700274Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T09:54:57.805803Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.12349","last_updated":"2026-07-15T15:32:11Z","snapshot_observed_at":"2026-08-04T21:39:28.308547Z","submitted_at":"2026-01-18T10:54:54Z","title":"Mind the Gap: Action Rebinding Attacks against Android GUI Agents","version":3},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-03T09:54:57.805803Z"},"links":{"citing_paper":"/paper/2601.12349"},"observation_digest":"sha256:0d07658deba64cfdf4f7bb880121c2f0484a1b9553aac63c13ae6504bab1f65f","observation_id":"f9959e6f-321d-48ab-a52d-5bded80ea503","resolution":{"observed_at":"2026-08-03T09:54:57.805803Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.00820","last_updated":"2024-10-28T17:05:10Z","snapshot_observed_at":"2026-07-06T19:43:46.557944Z","submitted_at":"2024-10-28T17:05:10Z","title":"AutoGLM: Autonomous Foundation Agents for GUIs","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.00820","snapshot_observed_at":"2026-08-03T09:54:57.960620Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2601.12349","last_updated":"2026-07-15T15:32:11Z","snapshot_observed_at":"2026-08-04T21:39:28.308547Z","submitted_at":"2026-01-18T10:54:54Z","title":"Mind the Gap: Action Rebinding Attacks against Android GUI Agents","version":3},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-03T09:54:57.960620Z"},"links":{"cited_paper":"/paper/2411.00820","citing_paper":"/paper/2601.12349"},"observation_digest":"sha256:a446b68234a10caf7357a368186181fc117fff91506684e823df92b3b21680a0","observation_id":"3641115c-8f23-465f-bbe1-579a8d25b459","resolution":{"observed_at":"2026-08-03T09:54:57.960620Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T09:54:58.106144Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2601.12349","last_updated":"2026-07-15T15:32:11Z","snapshot_observed_at":"2026-08-04T21:39:28.308547Z","submitted_at":"2026-01-18T10:54:54Z","title":"Mind the Gap: Action Rebinding Attacks against Android GUI Agents","version":3},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-03T09:54:58.106144Z"},"links":{"citing_paper":"/paper/2601.12349"},"observation_digest":"sha256:27e7b6bddb36a240681cbb6c154071120ab3a080d5e130c1aa050fcb8a1970df","observation_id":"7522c2de-30c0-4652-9964-dc2f3dfc4d66","resolution":{"observed_at":"2026-08-03T09:54:58.106144Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T09:54:58.459570Z","title":null,"venue":null,"work_id":null,"year":2012},"citing_paper":{"arxiv_id":"2601.12349","last_updated":"2026-07-15T15:32:11Z","snapshot_observed_at":"2026-08-04T21:39:28.308547Z","submitted_at":"2026-01-18T10:54:54Z","title":"Mind the Gap: Action Rebinding Attacks against Android GUI Agents","version":3},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-03T09:54:58.459570Z"},"links":{"citing_paper":"/paper/2601.12349"},"observation_digest":"sha256:e8bb51d5d870e57e16f751b7b8db6c0447d3480ae071f298e266e0578f31bcef","observation_id":"7376c432-189a-4cf4-874c-3b92b44210b5","resolution":{"observed_at":"2026-08-03T09:54:58.459570Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T09:54:58.604165Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2601.12349","last_updated":"2026-07-15T15:32:11Z","snapshot_observed_at":"2026-08-04T21:39:28.308547Z","submitted_at":"2026-01-18T10:54:54Z","title":"Mind the Gap: Action Rebinding Attacks against Android GUI Agents","version":3},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-03T09:54:58.604165Z"},"links":{"citing_paper":"/paper/2601.12349"},"observation_digest":"sha256:701fe01f636fc5f4ba9429422372222e5f00988ad5a63e87a482d2be5547aa87","observation_id":"b5df0e26-4621-4a23-95b2-15e748b9e002","resolution":{"observed_at":"2026-08-03T09:54:58.604165Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.14289","last_updated":"2026-06-05T10:24:33Z","snapshot_observed_at":"2026-07-31T00:52:02.918632Z","submitted_at":"2025-05-20T12:41:05Z","title":"EVA: Evolving Semantic Adversaries for Red-Teaming GUI Agents Against Environmental Injection Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.14289","snapshot_observed_at":"2026-08-03T09:54:58.322103Z","title":"arXiv preprint arXiv:2505.14289(2025)","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.12349","last_updated":"2026-07-15T15:32:11Z","snapshot_observed_at":"2026-08-04T21:39:28.308547Z","submitted_at":"2026-01-18T10:54:54Z","title":"Mind the Gap: Action Rebinding Attacks against Android GUI Agents","version":3},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-03T09:54:58.322103Z"},"links":{"cited_paper":"/paper/2505.14289","citing_paper":"/paper/2601.12349"},"observation_digest":"sha256:f97bad22bc4fcac4c059e2ae8317bb9ac6a5cb545dc5f60e7df1d331b2492b89","observation_id":"cc78233d-e366-4426-a558-aed3447313c6","resolution":{"observed_at":"2026-08-03T09:54:58.322103Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T09:54:58.847127Z","title":null,"venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2601.12349","last_updated":"2026-07-15T15:32:11Z","snapshot_observed_at":"2026-08-04T21:39:28.308547Z","submitted_at":"2026-01-18T10:54:54Z","title":"Mind the Gap: Action Rebinding Attacks against Android GUI Agents","version":3},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-03T09:54:58.847127Z"},"links":{"citing_paper":"/paper/2601.12349"},"observation_digest":"sha256:6db9b49ad58fa258a45e67b7841fb90920fb153511a461c889a0c6cafad09064","observation_id":"0fe3d266-a6b0-4d2c-aa2f-ad3a53618f36","resolution":{"observed_at":"2026-08-03T09:54:58.847127Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2510.24411","last_updated":"2026-07-26T01:16:06Z","snapshot_observed_at":"2026-08-04T07:40:01.156005Z","submitted_at":"2025-10-28T13:22:39Z","title":"OS-Sentinel: Towards Safety-Enhanced Mobile GUI Agents via Hybrid Validation in Realistic Workflows","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2510.24411","snapshot_observed_at":"2026-08-03T09:54:59.021778Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.12349","last_updated":"2026-07-15T15:32:11Z","snapshot_observed_at":"2026-08-04T21:39:28.308547Z","submitted_at":"2026-01-18T10:54:54Z","title":"Mind the Gap: Action Rebinding Attacks against Android GUI Agents","version":3},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-03T09:54:59.021778Z"},"links":{"cited_paper":"/paper/2510.24411","citing_paper":"/paper/2601.12349"},"observation_digest":"sha256:27ae3951152d57449f10ff72c3c157e2547a437cf456609638626a710a09b836","observation_id":"bbfa67e8-e2d3-42ef-90d0-377b2b2cae6f","resolution":{"observed_at":"2026-08-03T09:54:59.021778Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T09:54:58.727583Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2601.12349","last_updated":"2026-07-15T15:32:11Z","snapshot_observed_at":"2026-08-04T21:39:28.308547Z","submitted_at":"2026-01-18T10:54:54Z","title":"Mind the Gap: Action Rebinding Attacks against Android GUI Agents","version":3},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-03T09:54:58.727583Z"},"links":{"citing_paper":"/paper/2601.12349"},"observation_digest":"sha256:3c7bed4df4844ac09d776dddada8fd054b8fd20e8b71ebc9dce62d2ab626bf93","observation_id":"7d8870f9-88e2-4e40-9695-b9de964fa9af","resolution":{"observed_at":"2026-08-03T09:54:58.727583Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T09:54:59.358678Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2601.12349","last_updated":"2026-07-15T15:32:11Z","snapshot_observed_at":"2026-08-04T21:39:28.308547Z","submitted_at":"2026-01-18T10:54:54Z","title":"Mind the Gap: Action Rebinding Attacks against Android GUI Agents","version":3},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-03T09:54:59.358678Z"},"links":{"citing_paper":"/paper/2601.12349"},"observation_digest":"sha256:da9714584a682732c539cdebc58cd965a24d1f2b4e2905f99805f29b0f1ddf39","observation_id":"f66eb775-0e55-45b1-9eb1-da0b0b5dcfbc","resolution":{"observed_at":"2026-08-03T09:54:59.358678Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T09:54:59.505675Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2601.12349","last_updated":"2026-07-15T15:32:11Z","snapshot_observed_at":"2026-08-04T21:39:28.308547Z","submitted_at":"2026-01-18T10:54:54Z","title":"Mind the Gap: Action Rebinding Attacks against Android GUI Agents","version":3},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-03T09:54:59.505675Z"},"links":{"citing_paper":"/paper/2601.12349"},"observation_digest":"sha256:f66f6e110ce3e268100fa99a50344830ba9fcf6f7ec789a33c09395b6e91b422","observation_id":"42836b5a-299c-421f-be21-06da4e1941f8","resolution":{"observed_at":"2026-08-03T09:54:59.505675Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T09:54:59.207647Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2601.12349","last_updated":"2026-07-15T15:32:11Z","snapshot_observed_at":"2026-08-04T21:39:28.308547Z","submitted_at":"2026-01-18T10:54:54Z","title":"Mind the Gap: Action Rebinding Attacks against Android GUI Agents","version":3},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-03T09:54:59.207647Z"},"links":{"citing_paper":"/paper/2601.12349"},"observation_digest":"sha256:55b44af1e34521313eda78191974f3addcf89b718a989567a7b95ef2497827aa","observation_id":"7d34893c-d4b2-44c8-bf66-a69aa96fbc75","resolution":{"observed_at":"2026-08-03T09:54:59.207647Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T09:54:59.752933Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2601.12349","last_updated":"2026-07-15T15:32:11Z","snapshot_observed_at":"2026-08-04T21:39:28.308547Z","submitted_at":"2026-01-18T10:54:54Z","title":"Mind the Gap: Action Rebinding Attacks against Android GUI Agents","version":3},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-03T09:54:59.752933Z"},"links":{"citing_paper":"/paper/2601.12349"},"observation_digest":"sha256:73853cb25baed33c28bc68f6b4277599f7e0ed25f35e5c23a69fdcee826342d6","observation_id":"92bd7841-535f-4aec-a365-f8faff47d15b","resolution":{"observed_at":"2026-08-03T09:54:59.752933Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T09:54:59.877425Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.12349","last_updated":"2026-07-15T15:32:11Z","snapshot_observed_at":"2026-08-04T21:39:28.308547Z","submitted_at":"2026-01-18T10:54:54Z","title":"Mind the Gap: Action Rebinding Attacks against Android GUI Agents","version":3},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-03T09:54:59.877425Z"},"links":{"citing_paper":"/paper/2601.12349"},"observation_digest":"sha256:800366500220a2cf0497dbcf540f94bf2419ab94bccf13837a41fba14d746512","observation_id":"78beec3d-298a-4e49-96b7-2d6ef9d7868a","resolution":{"observed_at":"2026-08-03T09:54:59.877425Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T09:54:59.615035Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2601.12349","last_updated":"2026-07-15T15:32:11Z","snapshot_observed_at":"2026-08-04T21:39:28.308547Z","submitted_at":"2026-01-18T10:54:54Z","title":"Mind the Gap: Action Rebinding Attacks against Android GUI Agents","version":3},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-03T09:54:59.615035Z"},"links":{"citing_paper":"/paper/2601.12349"},"observation_digest":"sha256:2002a8eb982b2ededfda0d6901d436168daefe8ee12f36f3d8f092d7323bc32c","observation_id":"a40cab17-467c-4e57-b327-664fc1a88a5f","resolution":{"observed_at":"2026-08-03T09:54:59.615035Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T09:55:00.118451Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2601.12349","last_updated":"2026-07-15T15:32:11Z","snapshot_observed_at":"2026-08-04T21:39:28.308547Z","submitted_at":"2026-01-18T10:54:54Z","title":"Mind the Gap: Action Rebinding Attacks against Android GUI Agents","version":3},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-03T09:55:00.118451Z"},"links":{"citing_paper":"/paper/2601.12349"},"observation_digest":"sha256:e065a14f124c24adfbc87cb56537adbde7cb858e462055d5f635f42cf8e19cb2","observation_id":"ff8eac28-f5fc-4de6-9c21-e5749ff0a0c3","resolution":{"observed_at":"2026-08-03T09:55:00.118451Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.12981","last_updated":"2025-05-20T07:02:05Z","snapshot_observed_at":"2026-07-06T21:26:11.353127Z","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.12981","snapshot_observed_at":"2026-08-03T09:55:00.246179Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.12349","last_updated":"2026-07-15T15:32:11Z","snapshot_observed_at":"2026-08-04T21:39:28.308547Z","submitted_at":"2026-01-18T10:54:54Z","title":"Mind the Gap: Action Rebinding Attacks against Android GUI Agents","version":3},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-03T09:55:00.246179Z"},"links":{"cited_paper":"/paper/2505.12981","citing_paper":"/paper/2601.12349"},"observation_digest":"sha256:9aa688159792110c2ed62199533bdc6a3be2e4f77defcb58c3b8d2264de28fa6","observation_id":"b390c2b4-9592-438b-8c59-46d23ed4cef4","resolution":{"observed_at":"2026-08-03T09:55:00.246179Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T09:54:59.995465Z","title":null,"venue":null,"work_id":null,"year":2005},"citing_paper":{"arxiv_id":"2601.12349","last_updated":"2026-07-15T15:32:11Z","snapshot_observed_at":"2026-08-04T21:39:28.308547Z","submitted_at":"2026-01-18T10:54:54Z","title":"Mind the Gap: Action Rebinding Attacks against Android GUI Agents","version":3},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-03T09:54:59.995465Z"},"links":{"citing_paper":"/paper/2601.12349"},"observation_digest":"sha256:bac1f1a87aecf2518d54655500a4d1bcdec953375c7915d10c73bfa42a85564b","observation_id":"6ba508d5-e3d7-4db7-9f67-293a09f8aeef","resolution":{"observed_at":"2026-08-03T09:54:59.995465Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2507.10610","last_updated":"2026-04-07T11:46:55Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-07-13T08:36:09Z","title":"LaSM: Layer-wise Scaling Mechanism for Defending Pop-up Attack on GUI Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2507.10610","snapshot_observed_at":"2026-08-03T09:55:00.537865Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.12349","last_updated":"2026-07-15T15:32:11Z","snapshot_observed_at":"2026-08-04T21:39:28.308547Z","submitted_at":"2026-01-18T10:54:54Z","title":"Mind the Gap: Action Rebinding Attacks against Android GUI Agents","version":3},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-03T09:55:00.537865Z"},"links":{"cited_paper":"/paper/2507.10610","citing_paper":"/paper/2601.12349"},"observation_digest":"sha256:cdb681551735b1d8ef89bca18782ae8db0916a5e84da038a32b4a278572e1229","observation_id":"dbe27001-6806-4c6d-b2ba-e24fc636b2bd","resolution":{"observed_at":"2026-08-03T09:55:00.537865Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.09241","last_updated":"2025-03-12T10:38:15Z","snapshot_observed_at":"2026-07-06T20:51:13.891815Z","submitted_at":"2025-03-12T10:38:15Z","title":"In-Context Defense in Computer Agents: An Empirical Study","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.09241","snapshot_observed_at":"2026-08-03T09:55:00.662424Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.12349","last_updated":"2026-07-15T15:32:11Z","snapshot_observed_at":"2026-08-04T21:39:28.308547Z","submitted_at":"2026-01-18T10:54:54Z","title":"Mind the Gap: Action Rebinding Attacks against Android GUI Agents","version":3},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-03T09:55:00.662424Z"},"links":{"cited_paper":"/paper/2503.09241","citing_paper":"/paper/2601.12349"},"observation_digest":"sha256:060fc895d20ae5378127d97d6b61f7c4a63ad087bd5d34795e5dbd22602f7f1e","observation_id":"c5a012ca-6cb2-4118-924d-b5b97a293d73","resolution":{"observed_at":"2026-08-03T09:55:00.662424Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T09:55:00.389656Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2601.12349","last_updated":"2026-07-15T15:32:11Z","snapshot_observed_at":"2026-08-04T21:39:28.308547Z","submitted_at":"2026-01-18T10:54:54Z","title":"Mind the Gap: Action Rebinding Attacks against Android GUI Agents","version":3},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-03T09:55:00.389656Z"},"links":{"citing_paper":"/paper/2601.12349"},"observation_digest":"sha256:1e52e5c55a2a1a1149c2cac5d71c043ee06f414187133beb20354b78845cd19e","observation_id":"3349b30c-1baf-4370-9eec-ffa6e8ede077","resolution":{"observed_at":"2026-08-03T09:55:00.389656Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2509.00531","last_updated":"2025-08-30T15:24:47Z","snapshot_observed_at":"2026-08-05T13:34:56.954028Z","submitted_at":"2025-08-30T15:24:47Z","title":"MobiAgent: A Systematic Framework for Customizable Mobile Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2509.00531","snapshot_observed_at":"2026-08-03T09:55:00.947521Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.12349","last_updated":"2026-07-15T15:32:11Z","snapshot_observed_at":"2026-08-04T21:39:28.308547Z","submitted_at":"2026-01-18T10:54:54Z","title":"Mind the Gap: Action Rebinding Attacks against Android GUI Agents","version":3},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-03T09:55:00.947521Z"},"links":{"cited_paper":"/paper/2509.00531","citing_paper":"/paper/2601.12349"},"observation_digest":"sha256:8fd60149dc1f8b53046851f46ff3678c48c1acf7df14e47c788611ad84fe3bb0","observation_id":"8c827a96-1b63-4014-88c4-53336083fe19","resolution":{"observed_at":"2026-08-03T09:55:00.947521Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T09:55:01.066907Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.12349","last_updated":"2026-07-15T15:32:11Z","snapshot_observed_at":"2026-08-04T21:39:28.308547Z","submitted_at":"2026-01-18T10:54:54Z","title":"Mind the Gap: Action Rebinding Attacks against Android GUI Agents","version":3},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-03T09:55:01.066907Z"},"links":{"citing_paper":"/paper/2601.12349"},"observation_digest":"sha256:4bc33439e6a971b413f604d30039a85ffd3207e05bd75824f83a7e2bfe21fe52","observation_id":"e811a64c-8a99-494d-8254-59aa6fbd7ffa","resolution":{"observed_at":"2026-08-03T09:55:01.066907Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2508.15144","last_updated":"2025-09-01T05:38:34Z","snapshot_observed_at":"2026-07-06T22:15:55.690108Z","submitted_at":"2025-08-21T00:39:12Z","title":"Mobile-Agent-v3: Fundamental Agents for GUI Automation","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2508.15144","snapshot_observed_at":"2026-08-03T09:55:00.792890Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.12349","last_updated":"2026-07-15T15:32:11Z","snapshot_observed_at":"2026-08-04T21:39:28.308547Z","submitted_at":"2026-01-18T10:54:54Z","title":"Mind the Gap: Action Rebinding Attacks against Android GUI Agents","version":3},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-03T09:55:00.792890Z"},"links":{"cited_paper":"/paper/2508.15144","citing_paper":"/paper/2601.12349"},"observation_digest":"sha256:cf3b2b3c391acb9a8959de1bdd5378b7dd80e1acded6b28a2d07e005778acfcd","observation_id":"d3c2bee4-0c71-4e78-8847-97d58cfcbdf6","resolution":{"observed_at":"2026-08-03T09:55:00.792890Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T09:55:01.420825Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2601.12349","last_updated":"2026-07-15T15:32:11Z","snapshot_observed_at":"2026-08-04T21:39:28.308547Z","submitted_at":"2026-01-18T10:54:54Z","title":"Mind the Gap: Action Rebinding Attacks against Android GUI Agents","version":3},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-03T09:55:01.420825Z"},"links":{"citing_paper":"/paper/2601.12349"},"observation_digest":"sha256:e7402cb45393d1a16204d7042e37e40e48a05f002cd27934bd6da50f7adbb138","observation_id":"40036b25-3685-47ca-87a4-e9c386f7e775","resolution":{"observed_at":"2026-08-03T09:55:01.420825Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T09:55:01.566723Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.12349","last_updated":"2026-07-15T15:32:11Z","snapshot_observed_at":"2026-08-04T21:39:28.308547Z","submitted_at":"2026-01-18T10:54:54Z","title":"Mind the Gap: Action Rebinding Attacks against Android GUI Agents","version":3},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-03T09:55:01.566723Z"},"links":{"citing_paper":"/paper/2601.12349"},"observation_digest":"sha256:f4f042d4b9b8845d4bdeba92d1c044846357752df5fece68766f75d08e2c8840","observation_id":"5883573d-759e-4051-b38f-e7e141b7e432","resolution":{"observed_at":"2026-08-03T09:55:01.566723Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T09:55:01.240179Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.12349","last_updated":"2026-07-15T15:32:11Z","snapshot_observed_at":"2026-08-04T21:39:28.308547Z","submitted_at":"2026-01-18T10:54:54Z","title":"Mind the Gap: Action Rebinding Attacks against Android GUI Agents","version":3},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-03T09:55:01.240179Z"},"links":{"citing_paper":"/paper/2601.12349"},"observation_digest":"sha256:082aa7aeefc8a336747b9aff149c54a3fa5fe33f3665befb3c363c7ba5bc7055","observation_id":"ce45f740-f70c-46bb-ae65-9866ab097658","resolution":{"observed_at":"2026-08-03T09:55:01.240179Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T09:55:01.568953Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.12349","last_updated":"2026-07-15T15:32:11Z","snapshot_observed_at":"2026-08-04T21:39:28.308547Z","submitted_at":"2026-01-18T10:54:54Z","title":"Mind the Gap: Action Rebinding Attacks against Android GUI Agents","version":3},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-03T09:55:01.568953Z"},"links":{"citing_paper":"/paper/2601.12349"},"observation_digest":"sha256:fc0c8548fa8a83ecb991f3b2b32b2d1e84315be9130bd1d0b9c63f94f9dde823","observation_id":"af9af411-fd33-41af-9a1d-16c38f590b4f","resolution":{"observed_at":"2026-08-03T09:55:01.568953Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T09:54:56.619292Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2601.12349","last_updated":"2026-07-15T15:32:11Z","snapshot_observed_at":"2026-08-04T21:39:28.308547Z","submitted_at":"2026-01-18T10:54:54Z","title":"Mind the Gap: Action Rebinding Attacks against Android GUI Agents","version":3},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-03T09:54:56.619292Z"},"links":{"citing_paper":"/paper/2601.12349"},"observation_digest":"sha256:8ac1b7b6f38ebe0e4048df83d7ed8445eb5df0b976ab44513e7c7a966fdd093d","observation_id":"34eb83ee-b879-4e95-aa7e-31cf64fbdffa","resolution":{"observed_at":"2026-08-03T09:54:56.619292Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.11281","last_updated":"2025-04-15T15:21:09Z","snapshot_observed_at":"2026-07-06T21:09:50.780345Z","submitted_at":"2025-04-15T15:21:09Z","title":"The Obvious Invisible Threat: LLM-Powered GUI Agents' Vulnerability to Fine-Print Injections","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.11281","snapshot_observed_at":"2026-08-03T09:54:55.575192Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.12349","last_updated":"2026-07-15T15:32:11Z","snapshot_observed_at":"2026-08-04T21:39:28.308547Z","submitted_at":"2026-01-18T10:54:54Z","title":"Mind the Gap: Action Rebinding Attacks against Android GUI Agents","version":3},"reference_index":2025,"source":"pdf_text","source_observed_at":"2026-08-03T09:54:55.575192Z"},"links":{"cited_paper":"/paper/2504.11281","citing_paper":"/paper/2601.12349"},"observation_digest":"sha256:ab1814acbd9bc0edbf2e98ddf06a10d07709e4514869e4d5e9c79c639268c760","observation_id":"5f39ac8c-c74c-4d40-abba-3c33d4fbbc1b","resolution":{"observed_at":"2026-08-03T09:54:55.575192Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2601.12349","last_updated":"2026-07-15T15:32:11Z","latest_version":3,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-04T21:39:28.308547Z","submitted_at":"2026-01-18T10:54:54Z","title":"Mind the Gap: Action Rebinding Attacks against Android GUI Agents"},"reference_resolution":{"displayed":56,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":56,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":56},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"thesis":"As of 5 August 2026, this Paper Citation Record lists 56 of 56 outbound references and 4 inbound Pith citation observations for arXiv:2601.12349."}