{"as_of":"2026-08-12T22:49:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:2c53764648dfd4cbf596f8d57c02499cb3bceb413d3bf3fb0935abd7340a6142","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":28,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":28,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-12T06:34:41.77262+00:00","state":"measured"},{"denominator":28,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":28,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-11T16:53:34.903981Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":1,"source":"pith","source_observed_at":"2026-08-05T02:28:24.338817Z","state":"measured"}],"external_citation_measurements":[{"count":0,"observed_at":"2026-08-05T02:28:24.338817Z","source":"pith"}],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2601.18491","last_updated":"2026-04-23T11:55:10Z","snapshot_observed_at":"2026-07-06T22:43:02.453697Z","submitted_at":"2026-01-26T13:45:41Z","title":"AgentDoG: A Diagnostic Guardrail Framework for AI Agent Safety and Security","version":2},"cited_work":{"arxiv_id":"2601.18491","doi":"10.48550/arxiv.2601.18491","metadata_source":"pith","pith_arxiv_id":"2601.18491","snapshot_observed_at":"2026-08-05T02:49:54.815029Z","title":"AgentDoG: A Diagnostic Guardrail Framework for AI Agent Safety and Security","venue":"cs.AI","work_id":"88a6b07a-a4ce-47cd-baf1-0b04263ae074","year":2026},"citing_paper":{"arxiv_id":"2603.09002","last_updated":"2026-04-26T14:13:48Z","snapshot_observed_at":"2026-08-11T02:37:54.478569Z","submitted_at":"2026-03-09T22:46:27Z","title":"Security Considerations for Multi-agent Systems","version":2},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-05-15T14:12:14.160789Z"},"links":{"cited_paper":"/paper/2601.18491","citing_paper":"/paper/2603.09002"},"observation_digest":"sha256:0e0571e587e97288302f9ae97e9e286dae09be540d653cb3a723d6a439e0ac85","observation_id":"d0bc614b-36b2-445f-8ddb-d8019f8ad380","resolution":{"observed_at":"2026-05-15T14:15:55.474828Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2601.18491","last_updated":"2026-04-23T11:55:10Z","snapshot_observed_at":"2026-07-06T22:43:02.453697Z","submitted_at":"2026-01-26T13:45:41Z","title":"AgentDoG: A Diagnostic Guardrail Framework for AI Agent Safety and Security","version":2},"cited_work":{"arxiv_id":"2601.18491","doi":"10.48550/arxiv.2601.18491","metadata_source":"pith","pith_arxiv_id":"2601.18491","snapshot_observed_at":"2026-08-05T02:49:54.815029Z","title":"AgentDoG: A Diagnostic Guardrail Framework for AI Agent Safety and Security","venue":"cs.AI","work_id":"88a6b07a-a4ce-47cd-baf1-0b04263ae074","year":2026},"citing_paper":{"arxiv_id":"2604.02022","last_updated":"2026-05-13T10:22:49Z","snapshot_observed_at":"2026-08-12T20:05:29.970414Z","submitted_at":"2026-04-02T13:26:20Z","title":"ATBench: A Diverse and Realistic Agent Trajectory Benchmark for Safety Evaluation and Diagnosis","version":2},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-05-13T21:17:15.523370Z"},"links":{"cited_paper":"/paper/2601.18491","citing_paper":"/paper/2604.02022"},"observation_digest":"sha256:3055209cad5f6baf402c1d35f947cd1fdf15fe0c8fe40dc2ca8d9fdc61b67420","observation_id":"35fabe0c-be01-4c65-bbb0-ee5e30215bc0","resolution":{"observed_at":"2026-05-13T21:18:17.081030Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2601.18491","last_updated":"2026-04-23T11:55:10Z","snapshot_observed_at":"2026-07-06T22:43:02.453697Z","submitted_at":"2026-01-26T13:45:41Z","title":"AgentDoG: A Diagnostic Guardrail Framework for AI Agent Safety and Security","version":2},"cited_work":{"arxiv_id":"2601.18491","doi":"10.48550/arxiv.2601.18491","metadata_source":"pith","pith_arxiv_id":"2601.18491","snapshot_observed_at":"2026-08-05T02:49:54.815029Z","title":"AgentDoG: A Diagnostic Guardrail Framework for AI Agent Safety and Security","venue":"cs.AI","work_id":"88a6b07a-a4ce-47cd-baf1-0b04263ae074","year":2026},"citing_paper":{"arxiv_id":"2604.02022","last_updated":"2026-05-13T10:22:49Z","snapshot_observed_at":"2026-08-12T20:05:29.970414Z","submitted_at":"2026-04-02T13:26:20Z","title":"ATBench: A Diverse and Realistic Agent Trajectory Benchmark for Safety Evaluation and Diagnosis","version":3},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-05-14T22:02:00.638549Z"},"links":{"cited_paper":"/paper/2601.18491","citing_paper":"/paper/2604.02022"},"observation_digest":"sha256:809c142ad61c38c30a76794a206047f68ddb1a09ea693895a7f65fae9abc56e4","observation_id":"d69a6e67-7ccc-4231-bf91-2d99c2ba308e","resolution":{"observed_at":"2026-05-14T22:03:02.693803Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2601.18491","last_updated":"2026-04-23T11:55:10Z","snapshot_observed_at":"2026-07-06T22:43:02.453697Z","submitted_at":"2026-01-26T13:45:41Z","title":"AgentDoG: A Diagnostic Guardrail Framework for AI Agent Safety and Security","version":2},"cited_work":{"arxiv_id":"2601.18491","doi":"10.48550/arxiv.2601.18491","metadata_source":"pith","pith_arxiv_id":"2601.18491","snapshot_observed_at":"2026-08-05T02:49:54.815029Z","title":"AgentDoG: A Diagnostic Guardrail Framework for AI Agent Safety and Security","venue":"cs.AI","work_id":"88a6b07a-a4ce-47cd-baf1-0b04263ae074","year":2026},"citing_paper":{"arxiv_id":"2604.05229","last_updated":"2026-04-06T22:49:28Z","snapshot_observed_at":"2026-08-12T17:47:23.301971Z","submitted_at":"2026-04-06T22:49:28Z","title":"From Governance Norms to Enforceable Controls: A Layered Translation Method for Runtime Guardrails in Agentic AI","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-05-10T18:47:09.928166Z"},"links":{"cited_paper":"/paper/2601.18491","citing_paper":"/paper/2604.05229"},"observation_digest":"sha256:938bbfa6dc0bf31513695e7916ddef0371fcf2a30dd6a0d9d05d0c409918a993","observation_id":"8879b375-077b-46a5-813f-a1be0e07d48f","resolution":{"observed_at":"2026-05-10T23:55:51.806212Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2601.18491","last_updated":"2026-04-23T11:55:10Z","snapshot_observed_at":"2026-07-06T22:43:02.453697Z","submitted_at":"2026-01-26T13:45:41Z","title":"AgentDoG: A Diagnostic Guardrail Framework for AI Agent Safety and Security","version":2},"cited_work":{"arxiv_id":"2601.18491","doi":"10.48550/arxiv.2601.18491","metadata_source":"pith","pith_arxiv_id":"2601.18491","snapshot_observed_at":"2026-08-05T02:49:54.815029Z","title":"AgentDoG: A Diagnostic Guardrail Framework for AI Agent Safety and Security","venue":"cs.AI","work_id":"88a6b07a-a4ce-47cd-baf1-0b04263ae074","year":2026},"citing_paper":{"arxiv_id":"2604.09618","last_updated":"2026-04-28T10:39:23Z","snapshot_observed_at":"2026-07-06T22:58:25.877654Z","submitted_at":"2026-03-16T15:29:37Z","title":"HearthNet: Edge Multi-Agent Orchestration for Smart Homes","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-05-15T10:14:34.255868Z"},"links":{"cited_paper":"/paper/2601.18491","citing_paper":"/paper/2604.09618"},"observation_digest":"sha256:f924a9ce778a996fea80abfa73eb2e9ad5f1f086d70b49f1c4f97741287780da","observation_id":"d4e9fc1a-6d57-48a4-be2e-419ac6482528","resolution":{"observed_at":"2026-05-15T10:15:26.679639Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2601.18491","last_updated":"2026-04-23T11:55:10Z","snapshot_observed_at":"2026-07-06T22:43:02.453697Z","submitted_at":"2026-01-26T13:45:41Z","title":"AgentDoG: A Diagnostic Guardrail Framework for AI Agent Safety and Security","version":2},"cited_work":{"arxiv_id":"2601.18491","doi":"10.48550/arxiv.2601.18491","metadata_source":"pith","pith_arxiv_id":"2601.18491","snapshot_observed_at":"2026-08-05T02:49:54.815029Z","title":"AgentDoG: A Diagnostic Guardrail Framework for AI Agent Safety and Security","venue":"cs.AI","work_id":"88a6b07a-a4ce-47cd-baf1-0b04263ae074","year":2026},"citing_paper":{"arxiv_id":"2604.14858","last_updated":"2026-04-29T07:22:20Z","snapshot_observed_at":"2026-08-02T06:04:59.545465Z","submitted_at":"2026-04-16T10:45:13Z","title":"Benchmarks for Trajectory Safety Evaluation and Diagnosis in OpenClaw and Codex: ATBench-Claw and ATBench-Codex","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-05-10T11:41:56.473592Z"},"links":{"cited_paper":"/paper/2601.18491","citing_paper":"/paper/2604.14858"},"observation_digest":"sha256:73762d0961bf4f1a4ab8c862fce19b45877344cdc5d268e6e1d95cf5ba86e13c","observation_id":"466244c2-fd14-46cd-96c1-b1411b2fd7d4","resolution":{"observed_at":"2026-05-10T11:50:20.811327Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2601.18491","last_updated":"2026-04-23T11:55:10Z","snapshot_observed_at":"2026-07-06T22:43:02.453697Z","submitted_at":"2026-01-26T13:45:41Z","title":"AgentDoG: A Diagnostic Guardrail Framework for AI Agent Safety and Security","version":2},"cited_work":{"arxiv_id":"2601.18491","doi":"10.48550/arxiv.2601.18491","metadata_source":"pith","pith_arxiv_id":"2601.18491","snapshot_observed_at":"2026-08-05T02:49:54.815029Z","title":"AgentDoG: A Diagnostic Guardrail Framework for AI Agent Safety and Security","venue":"cs.AI","work_id":"88a6b07a-a4ce-47cd-baf1-0b04263ae074","year":2026},"citing_paper":{"arxiv_id":"2604.19818","last_updated":"2026-04-18T20:28:26Z","snapshot_observed_at":"2026-08-11T08:54:31.423442Z","submitted_at":"2026-04-18T20:28:26Z","title":"Beyond Task Success: An Evidence-Synthesis Framework for Evaluating, Governing, and Orchestrating Agentic AI","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-05-10T06:03:19.805349Z"},"links":{"cited_paper":"/paper/2601.18491","citing_paper":"/paper/2604.19818"},"observation_digest":"sha256:373a8b8e7cf59b33048981fe39af4e125a4178256d2a12bd7ee946f8ce58e3fb","observation_id":"4ff1cdef-05f7-4100-9e21-24d30a39fc57","resolution":{"observed_at":"2026-05-10T06:06:18.925655Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2601.18491","last_updated":"2026-04-23T11:55:10Z","snapshot_observed_at":"2026-07-06T22:43:02.453697Z","submitted_at":"2026-01-26T13:45:41Z","title":"AgentDoG: A Diagnostic Guardrail Framework for AI Agent Safety and Security","version":2},"cited_work":{"arxiv_id":"2601.18491","doi":"10.48550/arxiv.2601.18491","metadata_source":"pith","pith_arxiv_id":"2601.18491","snapshot_observed_at":"2026-08-05T02:49:54.815029Z","title":"AgentDoG: A Diagnostic Guardrail Framework for AI Agent Safety and Security","venue":"cs.AI","work_id":"88a6b07a-a4ce-47cd-baf1-0b04263ae074","year":2026},"citing_paper":{"arxiv_id":"2605.07110","last_updated":"2026-05-08T01:38:46Z","snapshot_observed_at":"2026-07-06T23:19:30.387067Z","submitted_at":"2026-05-08T01:38:46Z","title":"Securing Computer-Use Agents: A Unified Architecture-Lifecycle Framework for Deployment-Grounded Reliability","version":1},"reference_index":172,"source":"pdf_text","source_observed_at":"2026-05-11T01:15:19.239355Z"},"links":{"cited_paper":"/paper/2601.18491","citing_paper":"/paper/2605.07110"},"observation_digest":"sha256:db5d527434fe6a121472767867327ed2dd59aa527ac06f07d48f02824f7d3c2b","observation_id":"b9a98768-92c2-4adb-bc46-d5a6aaf87a94","resolution":{"observed_at":"2026-05-11T04:35:56.604493Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2601.18491","last_updated":"2026-04-23T11:55:10Z","snapshot_observed_at":"2026-07-06T22:43:02.453697Z","submitted_at":"2026-01-26T13:45:41Z","title":"AgentDoG: A Diagnostic Guardrail Framework for AI Agent Safety and Security","version":2},"cited_work":{"arxiv_id":"2601.18491","doi":"10.48550/arxiv.2601.18491","metadata_source":"pith","pith_arxiv_id":"2601.18491","snapshot_observed_at":"2026-08-05T02:49:54.815029Z","title":"AgentDoG: A Diagnostic Guardrail Framework for AI Agent Safety and Security","venue":"cs.AI","work_id":"88a6b07a-a4ce-47cd-baf1-0b04263ae074","year":2026},"citing_paper":{"arxiv_id":"2605.11882","last_updated":"2026-05-12T09:56:28Z","snapshot_observed_at":"2026-08-11T20:30:03.018548Z","submitted_at":"2026-05-12T09:56:28Z","title":"On-Policy Self-Evolution via Failure Trajectories for Agentic Safety Alignment","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-05-13T06:29:32.776647Z"},"links":{"cited_paper":"/paper/2601.18491","citing_paper":"/paper/2605.11882"},"observation_digest":"sha256:96550bdca9c0aa75c5d1d87733c6530c13e03dfb1094af5d31f495303accf303","observation_id":"99ec4970-cc82-49cc-879b-be8ebb0e8a94","resolution":{"observed_at":"2026-05-13T06:32:24.467075Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2601.18491","last_updated":"2026-04-23T11:55:10Z","snapshot_observed_at":"2026-07-06T22:43:02.453697Z","submitted_at":"2026-01-26T13:45:41Z","title":"AgentDoG: A Diagnostic Guardrail Framework for AI Agent Safety and Security","version":2},"cited_work":{"arxiv_id":"2601.18491","doi":"10.48550/arxiv.2601.18491","metadata_source":"pith","pith_arxiv_id":"2601.18491","snapshot_observed_at":"2026-08-05T02:49:54.815029Z","title":"AgentDoG: A Diagnostic Guardrail Framework for AI Agent Safety and Security","venue":"cs.AI","work_id":"88a6b07a-a4ce-47cd-baf1-0b04263ae074","year":2026},"citing_paper":{"arxiv_id":"2605.17329","last_updated":"2026-05-17T08:35:38Z","snapshot_observed_at":"2026-08-02T18:06:42.223470Z","submitted_at":"2026-05-17T08:35:38Z","title":"LPG: Balancing Efficiency and Policy Reasoning in Latent Policy Guardrails","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-05-19T23:42:58.135553Z"},"links":{"cited_paper":"/paper/2601.18491","citing_paper":"/paper/2605.17329"},"observation_digest":"sha256:2a39b4b24766c3356f3727ca56cd944be123e3ca16e11eea3bfbdd378a168ca5","observation_id":"2fa6ee9c-da03-40eb-8625-630c824216d3","resolution":{"observed_at":"2026-05-19T23:43:17.895881Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2601.18491","last_updated":"2026-04-23T11:55:10Z","snapshot_observed_at":"2026-07-06T22:43:02.453697Z","submitted_at":"2026-01-26T13:45:41Z","title":"AgentDoG: A Diagnostic Guardrail Framework for AI Agent Safety and Security","version":2},"cited_work":{"arxiv_id":"2601.18491","doi":"10.48550/arxiv.2601.18491","metadata_source":"pith","pith_arxiv_id":"2601.18491","snapshot_observed_at":"2026-08-05T02:49:54.815029Z","title":"AgentDoG: A Diagnostic Guardrail Framework for AI Agent Safety and Security","venue":"cs.AI","work_id":"88a6b07a-a4ce-47cd-baf1-0b04263ae074","year":2026},"citing_paper":{"arxiv_id":"2605.17467","last_updated":"2026-05-17T14:09:35Z","snapshot_observed_at":"2026-08-06T21:09:28.638230Z","submitted_at":"2026-05-17T14:09:35Z","title":"VerifyMAS: Hypothesis Verification for Failure Attribution in LLM Multi-Agent Systems","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-05-20T12:57:19.545442Z"},"links":{"cited_paper":"/paper/2601.18491","citing_paper":"/paper/2605.17467"},"observation_digest":"sha256:36811f2f6889b4f08949ce8f6915e4a6db75e8b8540322dc2bf60f12e9b85e8c","observation_id":"6636dfbc-2a7d-4d16-88fe-636d930ee506","resolution":{"observed_at":"2026-05-20T12:58:17.695469Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2601.18491","last_updated":"2026-04-23T11:55:10Z","snapshot_observed_at":"2026-07-06T22:43:02.453697Z","submitted_at":"2026-01-26T13:45:41Z","title":"AgentDoG: A Diagnostic Guardrail Framework for AI Agent Safety and Security","version":2},"cited_work":{"arxiv_id":"2601.18491","doi":"10.48550/arxiv.2601.18491","metadata_source":"pith","pith_arxiv_id":"2601.18491","snapshot_observed_at":"2026-08-05T02:49:54.815029Z","title":"AgentDoG: A Diagnostic Guardrail Framework for AI Agent Safety and Security","venue":"cs.AI","work_id":"88a6b07a-a4ce-47cd-baf1-0b04263ae074","year":2026},"citing_paper":{"arxiv_id":"2605.17770","last_updated":"2026-07-24T06:59:09Z","snapshot_observed_at":"2026-08-02T13:49:13.645739Z","submitted_at":"2026-05-18T02:41:53Z","title":"Entropy-Gradient Inversion: Moving Toward Internal Mechanism of Large Reasoning Models","version":1},"reference_index":69,"source":"arxiv_source","source_observed_at":"2026-05-20T11:13:30.786744Z"},"links":{"cited_paper":"/paper/2601.18491","citing_paper":"/paper/2605.17770"},"observation_digest":"sha256:a253f26a9af78b7d5076c91678a1ac9d2c0b503326eaba1a09378ebc96123e64","observation_id":"bbe528a6-e9cc-4c07-964e-e1c01103e0a6","resolution":{"observed_at":"2026-05-20T11:18:14.014191Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2601.18491","last_updated":"2026-04-23T11:55:10Z","snapshot_observed_at":"2026-07-06T22:43:02.453697Z","submitted_at":"2026-01-26T13:45:41Z","title":"AgentDoG: A Diagnostic Guardrail Framework for AI Agent Safety and Security","version":2},"cited_work":{"arxiv_id":"2601.18491","doi":"10.48550/arxiv.2601.18491","metadata_source":"pith","pith_arxiv_id":"2601.18491","snapshot_observed_at":"2026-08-05T02:49:54.815029Z","title":"AgentDoG: A Diagnostic Guardrail Framework for AI Agent Safety and Security","venue":"cs.AI","work_id":"88a6b07a-a4ce-47cd-baf1-0b04263ae074","year":2026},"citing_paper":{"arxiv_id":"2605.17830","last_updated":"2026-05-18T04:06:34Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2026-05-18T04:06:34Z","title":"Remembering More, Risking More: Longitudinal Safety Risks in Memory-Equipped LLM Agents","version":1},"reference_index":76,"source":"arxiv_source","source_observed_at":"2026-05-20T10:51:19.555985Z"},"links":{"cited_paper":"/paper/2601.18491","citing_paper":"/paper/2605.17830"},"observation_digest":"sha256:122da26650c0b616624dcf83f6bba066b6edcc89608deaa12d04e428673d2dfc","observation_id":"6d62c5ec-d7db-4b19-aa71-3ef39a5577b4","resolution":{"observed_at":"2026-05-20T10:53:13.313629Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2601.18491","last_updated":"2026-04-23T11:55:10Z","snapshot_observed_at":"2026-07-06T22:43:02.453697Z","submitted_at":"2026-01-26T13:45:41Z","title":"AgentDoG: A Diagnostic Guardrail Framework for AI Agent Safety and Security","version":2},"cited_work":{"arxiv_id":"2601.18491","doi":"10.48550/arxiv.2601.18491","metadata_source":"pith","pith_arxiv_id":"2601.18491","snapshot_observed_at":"2026-08-05T02:49:54.815029Z","title":"AgentDoG: A Diagnostic Guardrail Framework for AI Agent Safety and Security","venue":"cs.AI","work_id":"88a6b07a-a4ce-47cd-baf1-0b04263ae074","year":2026},"citing_paper":{"arxiv_id":"2606.00090","last_updated":"2026-05-23T16:48:03Z","snapshot_observed_at":"2026-08-03T02:45:28.018918Z","submitted_at":"2026-05-23T16:48:03Z","title":"Silent Failures in Physical AI: A Literature Review of Runtime Action Authorization for Autonomous Systems","version":1},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-06-30T12:59:06.201024Z"},"links":{"cited_paper":"/paper/2601.18491","citing_paper":"/paper/2606.00090"},"observation_digest":"sha256:24b2a588246fa450e80f1fb34a4f8366182a4a295152711046c06e1b05e08fb4","observation_id":"a1064943-be35-4a11-aa1d-d17aaa0a1ad1","resolution":{"observed_at":"2026-06-30T13:04:40.189083Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2601.18491","last_updated":"2026-04-23T11:55:10Z","snapshot_observed_at":"2026-07-06T22:43:02.453697Z","submitted_at":"2026-01-26T13:45:41Z","title":"AgentDoG: A Diagnostic Guardrail Framework for AI Agent Safety and Security","version":2},"cited_work":{"arxiv_id":"2601.18491","doi":"10.48550/arxiv.2601.18491","metadata_source":"pith","pith_arxiv_id":"2601.18491","snapshot_observed_at":"2026-08-05T02:49:54.815029Z","title":"AgentDoG: A Diagnostic Guardrail Framework for AI Agent Safety and Security","venue":"cs.AI","work_id":"88a6b07a-a4ce-47cd-baf1-0b04263ae074","year":2026},"citing_paper":{"arxiv_id":"2606.00611","last_updated":"2026-05-30T08:20:36Z","snapshot_observed_at":"2026-08-08T11:11:54.076937Z","submitted_at":"2026-05-30T08:20:36Z","title":"TRACE: Trajectory Risk-Aware Compression for Long-Horizon Agent Safety","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-06-28T18:55:30.836052Z"},"links":{"cited_paper":"/paper/2601.18491","citing_paper":"/paper/2606.00611"},"observation_digest":"sha256:79505d9088875421336faf0030a4297e4527458caf498666ce35248169f050dc","observation_id":"54a964e7-1693-46c3-8173-bf8e762da83f","resolution":{"observed_at":"2026-06-28T19:42:35.870899Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2601.18491","last_updated":"2026-04-23T11:55:10Z","snapshot_observed_at":"2026-07-06T22:43:02.453697Z","submitted_at":"2026-01-26T13:45:41Z","title":"AgentDoG: A Diagnostic Guardrail Framework for AI Agent Safety and Security","version":2},"cited_work":{"arxiv_id":"2601.18491","doi":"10.48550/arxiv.2601.18491","metadata_source":"pith","pith_arxiv_id":"2601.18491","snapshot_observed_at":"2026-08-05T02:49:54.815029Z","title":"AgentDoG: A Diagnostic Guardrail Framework for AI Agent Safety and Security","venue":"cs.AI","work_id":"88a6b07a-a4ce-47cd-baf1-0b04263ae074","year":2026},"citing_paper":{"arxiv_id":"2606.01166","last_updated":"2026-05-31T11:16:18Z","snapshot_observed_at":"2026-07-06T23:41:48.357871Z","submitted_at":"2026-05-31T11:16:18Z","title":"BraveGuard: From Open-World Threats to Safer Computer-Use Agents","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-06-28T17:04:46.912915Z"},"links":{"cited_paper":"/paper/2601.18491","citing_paper":"/paper/2606.01166"},"observation_digest":"sha256:f461d64d9a27a3020c8d9069019ee2d1f82b8cadedfd4c8b241c614580f6473e","observation_id":"956a6bc9-1302-46d2-8a3a-4391c5ce22c4","resolution":{"observed_at":"2026-07-01T21:26:14.198299Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2601.18491","last_updated":"2026-04-23T11:55:10Z","snapshot_observed_at":"2026-07-06T22:43:02.453697Z","submitted_at":"2026-01-26T13:45:41Z","title":"AgentDoG: A Diagnostic Guardrail Framework for AI Agent Safety and Security","version":2},"cited_work":{"arxiv_id":"2601.18491","doi":"10.48550/arxiv.2601.18491","metadata_source":"pith","pith_arxiv_id":"2601.18491","snapshot_observed_at":"2026-08-05T02:49:54.815029Z","title":"AgentDoG: A Diagnostic Guardrail Framework for AI Agent Safety and Security","venue":"cs.AI","work_id":"88a6b07a-a4ce-47cd-baf1-0b04263ae074","year":2026},"citing_paper":{"arxiv_id":"2606.10749","last_updated":"2026-06-09T12:01:07Z","snapshot_observed_at":"2026-07-31T21:35:18.696472Z","submitted_at":"2026-06-09T12:01:07Z","title":"Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation","version":1},"reference_index":89,"source":"pdf_text","source_observed_at":"2026-06-27T12:55:22.831264Z"},"links":{"cited_paper":"/paper/2601.18491","citing_paper":"/paper/2606.10749"},"observation_digest":"sha256:79e68ff5dbc8641318e52b87c8b681c0664c3044c44492b7352fa5a7b74601ca","observation_id":"6574c91e-96d0-43ac-b227-a7d5fafa95b2","resolution":{"observed_at":"2026-06-27T13:10:57.003076Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2601.18491","last_updated":"2026-04-23T11:55:10Z","snapshot_observed_at":"2026-07-06T22:43:02.453697Z","submitted_at":"2026-01-26T13:45:41Z","title":"AgentDoG: A Diagnostic Guardrail Framework for AI Agent Safety and Security","version":2},"cited_work":{"arxiv_id":"2601.18491","doi":"10.48550/arxiv.2601.18491","metadata_source":"pith","pith_arxiv_id":"2601.18491","snapshot_observed_at":"2026-08-05T02:49:54.815029Z","title":"AgentDoG: A Diagnostic Guardrail Framework for AI Agent Safety and Security","venue":"cs.AI","work_id":"88a6b07a-a4ce-47cd-baf1-0b04263ae074","year":2026},"citing_paper":{"arxiv_id":"2606.18060","last_updated":"2026-06-16T15:37:02Z","snapshot_observed_at":"2026-08-12T15:04:27.921718Z","submitted_at":"2026-06-16T15:37:02Z","title":"PseudoBench: Measuring How Agentic Auto-Research Fuels Pseudoscience","version":1},"reference_index":128,"source":"arxiv_source","source_observed_at":"2026-06-27T01:29:12.725865Z"},"links":{"cited_paper":"/paper/2601.18491","citing_paper":"/paper/2606.18060"},"observation_digest":"sha256:5d9fe85a6157d701f1fc1e4970e32e8c16815c5f43f51406fbdba47a73fab25b","observation_id":"8cbccd48-8053-4867-9350-00d5f3d03b74","resolution":{"observed_at":"2026-07-03T20:18:56.443426Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2601.18491","last_updated":"2026-04-23T11:55:10Z","snapshot_observed_at":"2026-07-06T22:43:02.453697Z","submitted_at":"2026-01-26T13:45:41Z","title":"AgentDoG: A Diagnostic Guardrail Framework for AI Agent Safety and Security","version":2},"cited_work":{"arxiv_id":"2601.18491","doi":"10.48550/arxiv.2601.18491","metadata_source":"pith","pith_arxiv_id":"2601.18491","snapshot_observed_at":"2026-08-05T02:49:54.815029Z","title":"AgentDoG: A Diagnostic Guardrail Framework for AI Agent Safety and Security","venue":"cs.AI","work_id":"88a6b07a-a4ce-47cd-baf1-0b04263ae074","year":2026},"citing_paper":{"arxiv_id":"2606.28570","last_updated":"2026-06-26T19:53:26Z","snapshot_observed_at":"2026-07-31T21:47:41.374796Z","submitted_at":"2026-06-26T19:53:26Z","title":"Digitizing Coaching Intelligence: An Agentic Framework for Holistic Athlete Profiling using VLM and RAG","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-06-30T01:04:10.556608Z"},"links":{"cited_paper":"/paper/2601.18491","citing_paper":"/paper/2606.28570"},"observation_digest":"sha256:d775e5645badae23241c63d88e1e9a970c32503f4fea5d9b2d15a61bb58d1965","observation_id":"b16c6bc7-662d-49c2-8c60-6caf09fcbe01","resolution":{"observed_at":"2026-07-01T15:45:48.626340Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2601.18491","last_updated":"2026-04-23T11:55:10Z","snapshot_observed_at":"2026-07-06T22:43:02.453697Z","submitted_at":"2026-01-26T13:45:41Z","title":"AgentDoG: A Diagnostic Guardrail Framework for AI Agent Safety and Security","version":2},"cited_work":{"arxiv_id":"2601.18491","doi":"10.48550/arxiv.2601.18491","metadata_source":"pith","pith_arxiv_id":"2601.18491","snapshot_observed_at":"2026-08-05T02:49:54.815029Z","title":"AgentDoG: A Diagnostic Guardrail Framework for AI Agent Safety and Security","venue":"cs.AI","work_id":"88a6b07a-a4ce-47cd-baf1-0b04263ae074","year":2026},"citing_paper":{"arxiv_id":"2607.01793","last_updated":"2026-07-02T07:08:26Z","snapshot_observed_at":"2026-08-05T13:54:16.783317Z","submitted_at":"2026-07-02T07:08:26Z","title":"Safety Testing LLM Agents at Scale: From Risk Discovery to Evidence-Grounded Verification","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-07-03T13:45:02.167211Z"},"links":{"cited_paper":"/paper/2601.18491","citing_paper":"/paper/2607.01793"},"observation_digest":"sha256:e68f3f1e64ef032f0deee8f1de472995a3e20c7518564bae9535ed6f1d4ba7a2","observation_id":"36245b43-fe70-4757-a27d-15f2697a662e","resolution":{"observed_at":"2026-07-03T13:48:20.373042Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2601.18491","last_updated":"2026-04-23T11:55:10Z","snapshot_observed_at":"2026-07-06T22:43:02.453697Z","submitted_at":"2026-01-26T13:45:41Z","title":"AgentDoG: A Diagnostic Guardrail Framework for AI Agent Safety and Security","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2601.18491","snapshot_observed_at":"2026-08-01T18:53:09.820759Z","title":"arXiv:2601.18491 (2026)","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.17149","last_updated":"2026-07-19T09:14:27Z","snapshot_observed_at":"2026-08-11T00:49:46.665606Z","submitted_at":"2026-07-19T09:14:27Z","title":"A Diagnostic Framework for AI Agent Behavior","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-01T18:53:09.820759Z"},"links":{"cited_paper":"/paper/2601.18491","citing_paper":"/paper/2607.17149"},"observation_digest":"sha256:480a74d5c2a3f8911153647b965a44f8335469f177bfdf45d06a27cc1d8f5c97","observation_id":"a8df01af-5171-4d42-90cf-9e099fd1015a","resolution":{"observed_at":"2026-08-01T18:53:09.820759Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2601.18491","last_updated":"2026-04-23T11:55:10Z","snapshot_observed_at":"2026-07-06T22:43:02.453697Z","submitted_at":"2026-01-26T13:45:41Z","title":"AgentDoG: A Diagnostic Guardrail Framework for AI Agent Safety and Security","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2601.18491","snapshot_observed_at":"2026-08-02T12:28:42.990718Z","title":"AgentDoG: A diagnostic guardrail framework for AI agent safety and security, 2026","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.19361","last_updated":"2026-06-03T02:55:17Z","snapshot_observed_at":"2026-08-10T02:39:52.769949Z","submitted_at":"2026-06-03T02:55:17Z","title":"Stateful Guardrails for Multi-Turn LLM Systems: A Conversational Risk Accumulation Framework","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-02T12:28:42.990718Z"},"links":{"cited_paper":"/paper/2601.18491","citing_paper":"/paper/2607.19361"},"observation_digest":"sha256:02e3202d36b227a3b6dc5b5be65edf1a73f3dd2a25474476cb1563bcbf245fc4","observation_id":"71421a47-7c67-47ea-a769-0458ddf6eb4c","resolution":{"observed_at":"2026-08-02T12:28:42.990718Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2601.18491","last_updated":"2026-04-23T11:55:10Z","snapshot_observed_at":"2026-07-06T22:43:02.453697Z","submitted_at":"2026-01-26T13:45:41Z","title":"AgentDoG: A Diagnostic Guardrail Framework for AI Agent Safety and Security","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2601.18491","snapshot_observed_at":"2026-08-01T15:05:20.501360Z","title":"AgentDoG: A diagnostic guardrail framework for agentic safety,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.19433","last_updated":"2026-07-20T22:50:33Z","snapshot_observed_at":"2026-08-11T11:48:43.530345Z","submitted_at":"2026-07-20T22:50:33Z","title":"The Chronos Vulnerability: A Taxonomy of Temporal Persistence and Memory-Based Deception in Agentic AI","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-01T15:05:20.501360Z"},"links":{"cited_paper":"/paper/2601.18491","citing_paper":"/paper/2607.19433"},"observation_digest":"sha256:62a4e572f47d3907e180d4655d17c9933140720d9f6ec422087ab23b2ae6e2dc","observation_id":"632580ff-ae0b-4a8b-9b6d-f20f6a855a4a","resolution":{"observed_at":"2026-08-01T15:05:20.501360Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2601.18491","last_updated":"2026-04-23T11:55:10Z","snapshot_observed_at":"2026-07-06T22:43:02.453697Z","submitted_at":"2026-01-26T13:45:41Z","title":"AgentDoG: A Diagnostic Guardrail Framework for AI Agent Safety and Security","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2601.18491","snapshot_observed_at":"2026-08-01T11:24:49.083365Z","title":"arXiv preprint arXiv:2601.18491 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19913","last_updated":"2026-07-22T08:43:43Z","snapshot_observed_at":"2026-08-05T09:52:46.724864Z","submitted_at":"2026-07-22T08:43:43Z","title":"JANUS: Foreseeing Latent Risk for Long-Horizon Agent Safety","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-01T11:24:49.083365Z"},"links":{"cited_paper":"/paper/2601.18491","citing_paper":"/paper/2607.19913"},"observation_digest":"sha256:2e43ec2207f9cc0f1c8c2de08ad8c17105f7206d550128585ca6b317fe6d8de7","observation_id":"e03de2a6-b806-4452-abc3-28d747b01e1b","resolution":{"observed_at":"2026-08-01T11:24:49.083365Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2601.18491","last_updated":"2026-04-23T11:55:10Z","snapshot_observed_at":"2026-07-06T22:43:02.453697Z","submitted_at":"2026-01-26T13:45:41Z","title":"AgentDoG: A Diagnostic Guardrail Framework for AI Agent Safety and Security","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2601.18491","snapshot_observed_at":"2026-07-31T12:10:46.241553Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.24893","last_updated":"2026-07-27T15:18:06Z","snapshot_observed_at":"2026-08-06T06:59:38.612397Z","submitted_at":"2026-07-27T15:18:06Z","title":"Early Detection of Distributed Backdoors in Multi-Agent LLM Systems: A Characterization Study","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-07-31T12:10:46.241553Z"},"links":{"cited_paper":"/paper/2601.18491","citing_paper":"/paper/2607.24893"},"observation_digest":"sha256:a51b59ce63fc701795973a0f285a2762ab32454dcab157d145881faa0c1cdea2","observation_id":"ae853c22-cb10-4b0d-aa7d-ab6daf84a203","resolution":{"observed_at":"2026-07-31T12:10:46.241553Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2601.18491","last_updated":"2026-04-23T11:55:10Z","snapshot_observed_at":"2026-07-06T22:43:02.453697Z","submitted_at":"2026-01-26T13:45:41Z","title":"AgentDoG: A Diagnostic Guardrail Framework for AI Agent Safety and Security","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2601.18491","snapshot_observed_at":"2026-08-07T00:14:57.485998Z","title":"arXiv preprint arXiv:2601.18491 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","snapshot_observed_at":"2026-08-10T14:11:04.687232Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:57.485998Z"},"links":{"cited_paper":"/paper/2601.18491","citing_paper":"/paper/2608.02683"},"observation_digest":"sha256:3d1a48fa14d165a9fb6b864fca8695a289378b7f57d9a511462f2cf08c6c6b8f","observation_id":"c4fc9c64-e12d-4d2f-a8c0-625e991591c8","resolution":{"observed_at":"2026-08-07T00:14:57.485998Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2601.18491","last_updated":"2026-04-23T11:55:10Z","snapshot_observed_at":"2026-07-06T22:43:02.453697Z","submitted_at":"2026-01-26T13:45:41Z","title":"AgentDoG: A Diagnostic Guardrail Framework for AI Agent Safety and Security","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2601.18491","snapshot_observed_at":"2026-08-11T16:53:34.903981Z","title":"arXiv preprint arXiv:2601.18491 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.09476","last_updated":"2026-08-10T11:45:03Z","snapshot_observed_at":"2026-08-12T22:21:03.553022Z","submitted_at":"2026-08-10T11:45:03Z","title":"ActBench: Self-Evolving Benchmark of Behavioral Safety in Cowork Agents","version":1},"reference_index":62,"source":"arxiv_source","source_observed_at":"2026-08-11T16:53:34.903981Z"},"links":{"cited_paper":"/paper/2601.18491","citing_paper":"/paper/2608.09476"},"observation_digest":"sha256:31cd4bf3430dcb71ea195bed662224648d7cba30f69e4d8a958665897cab0226","observation_id":"4421ef4d-860d-4007-a1c6-ca40651e6518","resolution":{"observed_at":"2026-08-11T16:53:34.903981Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2601.18491","last_updated":"2026-04-23T11:55:10Z","snapshot_observed_at":"2026-07-06T22:43:02.453697Z","submitted_at":"2026-01-26T13:45:41Z","title":"AgentDoG: A Diagnostic Guardrail Framework for AI Agent Safety and Security","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2601.18491","snapshot_observed_at":"2026-08-11T05:02:55.861028Z","title":"AgentDoG: A diagnostic guardrail framework for AI agent safety and security.arXiv preprint arXiv:2601.18491, 2026a","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.09885","last_updated":"2026-08-10T17:35:08Z","snapshot_observed_at":"2026-08-12T22:22:30.119077Z","submitted_at":"2026-08-10T17:35:08Z","title":"SHE: Trajectory-driven Safety Harness Evolution for LLM Agents","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-11T05:02:55.861028Z"},"links":{"cited_paper":"/paper/2601.18491","citing_paper":"/paper/2608.09885"},"observation_digest":"sha256:f94190ac58e9e4ea71692ec0131e6a68e27e8a66bad3dcfdd029eb2b39c5c2be","observation_id":"544b7471-3ded-4e37-827c-761d3ffd9ef0","resolution":{"observed_at":"2026-08-11T05:02:55.861028Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2601.18491/citation-record","integrity":"/paper/2601.18491/integrity","json":"/paper/2601.18491/citation-record.json","paper":"/paper/2601.18491"},"outbound":[],"paper":{"arxiv_id":"2601.18491","last_updated":"2026-04-23T11:55:10Z","latest_version":2,"primary_category":"cs.AI","snapshot_observed_at":"2026-07-06T22:43:02.453697Z","submitted_at":"2026-01-26T13:45:41Z","title":"AgentDoG: A Diagnostic Guardrail Framework for AI Agent Safety and Security"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"thesis":"As of 12 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 28 inbound Pith citation observations for arXiv:2601.18491."}