{"as_of":"2026-08-11T06:10:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:610ceb39bc91145729a0d73a6ef4825ee68fe20a665c83af3f8d058c2ed429c0","coverage":[{"denominator":161,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":100,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-02T23:36:46.483287Z","state":"measured"},{"denominator":108,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":108,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-10T06:31:04.303077+00:00","state":"measured"},{"denominator":8,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":8,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-04T05:44:22.374592Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":1,"source":"pith","source_observed_at":"2026-08-05T02:28:24.338817Z","state":"measured"}],"external_citation_measurements":[{"count":1,"observed_at":"2026-08-05T02:28:24.338817Z","source":"pith"}],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"cited_work":{"arxiv_id":"2602.13379","doi":"10.48550/arxiv.2602.13379","metadata_source":"pith","pith_arxiv_id":"2602.13379","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Unsafer in many turns: Benchmarking and defending multi-turn safety risks in tool-using agents","venue":"cs.CR","work_id":"23cffd44-840b-4aca-827b-efc3ed0ec254","year":2026},"citing_paper":{"arxiv_id":"2603.09002","last_updated":"2026-04-26T14:13:48Z","snapshot_observed_at":"2026-08-11T02:37:54.478569Z","submitted_at":"2026-03-09T22:46:27Z","title":"Security Considerations for Multi-agent Systems","version":2},"reference_index":118,"source":"pdf_text","source_observed_at":"2026-05-15T14:12:14.160789Z"},"links":{"cited_paper":"/paper/2602.13379","citing_paper":"/paper/2603.09002"},"observation_digest":"sha256:75c17cc2a2baeb2e4a3305b8409e471891f64a29210ba25d21b9ed951fb6b6ae","observation_id":"47919464-88d6-4e52-855f-8570dce63df0","resolution":{"observed_at":"2026-06-12T02:08:25.633841Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"cited_work":{"arxiv_id":"2602.13379","doi":"10.48550/arxiv.2602.13379","metadata_source":"pith","pith_arxiv_id":"2602.13379","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Unsafer in many turns: Benchmarking and defending multi-turn safety risks in tool-using agents","venue":"cs.CR","work_id":"23cffd44-840b-4aca-827b-efc3ed0ec254","year":2026},"citing_paper":{"arxiv_id":"2605.17453","last_updated":"2026-05-17T13:51:34Z","snapshot_observed_at":"2026-08-02T00:37:59.573957Z","submitted_at":"2026-05-17T13:51:34Z","title":"Trust No Tool: Evaluating and Defending LLM Agents under Untrusted Tool Feedback","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-05-19T23:26:15.658106Z"},"links":{"cited_paper":"/paper/2602.13379","citing_paper":"/paper/2605.17453"},"observation_digest":"sha256:54f43041f0c24631017304b9de262f09cedc6b4cdadd0768e7f4aa7ba9db0691","observation_id":"2605665c-f537-4653-8067-666bff20e950","resolution":{"observed_at":"2026-06-12T02:08:25.633841Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"cited_work":{"arxiv_id":"2602.13379","doi":"10.48550/arxiv.2602.13379","metadata_source":"pith","pith_arxiv_id":"2602.13379","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Unsafer in many turns: Benchmarking and defending multi-turn safety risks in tool-using agents","venue":"cs.CR","work_id":"23cffd44-840b-4aca-827b-efc3ed0ec254","year":2026},"citing_paper":{"arxiv_id":"2605.22643","last_updated":"2026-05-22T14:53:30Z","snapshot_observed_at":"2026-07-06T23:32:59.663926Z","submitted_at":"2026-05-21T15:50:18Z","title":"Boiling the Frog: A Multi-Turn Benchmark for Agentic Safety","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-05-22T05:50:28.114140Z"},"links":{"cited_paper":"/paper/2602.13379","citing_paper":"/paper/2605.22643"},"observation_digest":"sha256:cbd0f0658f952b303a4d50bc7d785c6ca58fc06004e2f5e1730c84023d6e4cae","observation_id":"2a865428-f18d-4395-aef6-8d0fb1af458f","resolution":{"observed_at":"2026-06-12T02:08:25.633841Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"cited_work":{"arxiv_id":"2602.13379","doi":"10.48550/arxiv.2602.13379","metadata_source":"pith","pith_arxiv_id":"2602.13379","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Unsafer in many turns: Benchmarking and defending multi-turn safety risks in tool-using agents","venue":"cs.CR","work_id":"23cffd44-840b-4aca-827b-efc3ed0ec254","year":2026},"citing_paper":{"arxiv_id":"2605.22643","last_updated":"2026-05-22T14:53:30Z","snapshot_observed_at":"2026-07-06T23:32:59.663926Z","submitted_at":"2026-05-21T15:50:18Z","title":"Boiling the Frog: A Multi-Turn Benchmark for Agentic Safety","version":2},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-05-25T06:05:27.736494Z"},"links":{"cited_paper":"/paper/2602.13379","citing_paper":"/paper/2605.22643"},"observation_digest":"sha256:8394dc2246208a654bd90dd0f6ab6f213891c00bfa78f4a744c61ceaabd9655a","observation_id":"1ccbefac-07b0-4fe1-afdc-9f269842846a","resolution":{"observed_at":"2026-06-12T02:08:25.633841Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"cited_work":{"arxiv_id":"2602.13379","doi":"10.48550/arxiv.2602.13379","metadata_source":"pith","pith_arxiv_id":"2602.13379","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Unsafer in many turns: Benchmarking and defending multi-turn safety risks in tool-using agents","venue":"cs.CR","work_id":"23cffd44-840b-4aca-827b-efc3ed0ec254","year":2026},"citing_paper":{"arxiv_id":"2606.05647","last_updated":"2026-06-04T03:22:17Z","snapshot_observed_at":"2026-08-01T22:43:20.237459Z","submitted_at":"2026-06-04T03:22:17Z","title":"Coding with \"Enemy\": Can Human Developers Detect AI Agent Sabotage?","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-06-28T01:48:56.367899Z"},"links":{"cited_paper":"/paper/2602.13379","citing_paper":"/paper/2606.05647"},"observation_digest":"sha256:b576e2f2ce922ca2028c972d7d9ff82835243201c2023dbe9ed0f11c4c3ac5ca","observation_id":"0715d350-1acc-43b0-a23c-ce60b0cebc9a","resolution":{"observed_at":"2026-07-02T12:46:57.267236Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"cited_work":{"arxiv_id":"2602.13379","doi":"10.48550/arxiv.2602.13379","metadata_source":"pith","pith_arxiv_id":"2602.13379","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Unsafer in many turns: Benchmarking and defending multi-turn safety risks in tool-using agents","venue":"cs.CR","work_id":"23cffd44-840b-4aca-827b-efc3ed0ec254","year":2026},"citing_paper":{"arxiv_id":"2606.06708","last_updated":"2026-08-04T18:57:23Z","snapshot_observed_at":"2026-08-08T23:10:21.600912Z","submitted_at":"2026-06-04T20:48:37Z","title":"Signal-Driven Observation for Long-Horizon Web Agents","version":1},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-06-28T01:25:11.149977Z"},"links":{"cited_paper":"/paper/2602.13379","citing_paper":"/paper/2606.06708"},"observation_digest":"sha256:c285bdf4937556c7d2c901cd73a16de6d404fed77fc91d54f4ed5d416604905c","observation_id":"9ba735f3-ed99-4dc6-aa11-facf2cf8bf94","resolution":{"observed_at":"2026-06-28T01:31:29.233333Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2602.13379","snapshot_observed_at":"2026-08-01T12:54:34.538093Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.19292","last_updated":"2026-07-21T17:02:37Z","snapshot_observed_at":"2026-08-09T18:07:49.749835Z","submitted_at":"2026-07-21T17:02:37Z","title":"The safety failures we are not instrumenting: a perspective on hidden safety-critical challenges in modern AI systems","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-01T12:54:34.538093Z"},"links":{"cited_paper":"/paper/2602.13379","citing_paper":"/paper/2607.19292"},"observation_digest":"sha256:9037665e72d23b9713b1ea39aec77f32e4c3b9f29d60de0006d41c8baa85f911","observation_id":"2ee2d42e-2642-43be-8606-01991c538d7a","resolution":{"observed_at":"2026-08-01T12:54:34.538093Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2602.13379","snapshot_observed_at":"2026-08-04T05:44:22.374592Z","title":"Unsafer in many turns: Benchmarking and defending multi-turn safety risks in tool-using agents","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-09T07:28:23.042609Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:22.374592Z"},"links":{"cited_paper":"/paper/2602.13379","citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:f0fc8e7acd4869b6800c9f2d1c1cc72ba81826c75dc690d8d445b0637dd79d80","observation_id":"d5549ca9-54e3-4376-af67-28df942e37cd","resolution":{"observed_at":"2026-08-04T05:44:22.374592Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2602.13379/citation-record","integrity":"/paper/2602.13379/integrity","json":"/paper/2602.13379/citation-record.json","paper":"/paper/2602.13379"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:33.460434Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:33.460434Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:db35b93b50470a4c28e9f061252554a172d958b1374d0024f17f86a2f30c5424","observation_id":"ae240475-a0a7-4ece-ada9-2f2a1ad7fb1a","resolution":{"observed_at":"2026-08-02T23:36:33.460434Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:33.581885Z","title":"Final Turn according to that subcategory","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:33.581885Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:867c258029621ca2e9a2a88c184de01f8449bef9e4635d63b4ed8fe8cdc481a2","observation_id":"035db87d-139f-4ba1-ba93-542a7ec8e030","resolution":{"observed_at":"2026-08-02T23:36:33.581885Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:33.723618Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:33.723618Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:613b826ecdef6a6510b4ee7655ee222676ca037baae6a815c2c79ae8a99a8699","observation_id":"9ed7a504-c48e-4a3a-8575-ef5e1f062b2c","resolution":{"observed_at":"2026-08-02T23:36:33.723618Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:33.849818Z","title":"IMPORTANT: • The multi-turn execution must achieve the same outcome as the original task","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:33.849818Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:1ff8ee75027e37c000f362b148b0f4405ac0b6cb97a2be961c7ed979fadbba10","observation_id":"3f0d93e9-a724-4730-a59a-99d2b05d54c2","resolution":{"observed_at":"2026-08-02T23:36:33.849818Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:33.989520Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:33.989520Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:5f2982b61aec8023dc0585bc139fe1cfc557da7f06dac17c75d6aae898e11f06","observation_id":"40ff828f-53ab-43f0-8df4-26e738de0896","resolution":{"observed_at":"2026-08-02T23:36:33.989520Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:34.101678Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:34.101678Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:c0ff8b7882d1411706988c9d960c2a06a4278e08edfd4e2cb9e29b2b5b11982b","observation_id":"ef1b3713-2566-49df-aff5-0e75daac4340","resolution":{"observed_at":"2026-08-02T23:36:34.101678Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:34.213884Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:34.213884Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:343ba194586df031442ff8770b059a18ef0fec0fb8993d1eb9875d16ae0bb960","observation_id":"a7ad9024-011b-4c02-a6dc-84a345fce824","resolution":{"observed_at":"2026-08-02T23:36:34.213884Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:34.330831Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:34.330831Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:b3ef14fb0afe4525bab0abface695b4efb658274cf24f35377e923500c44594c","observation_id":"6639e502-ed82-4254-9614-0295a68b0796","resolution":{"observed_at":"2026-08-02T23:36:34.330831Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:34.383762Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:34.383762Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:5dd32c495709ec0b5f576d746c278c411caf9bfddd3bdf69e3cc5ed96a826965","observation_id":"cdff556f-338b-4745-91b5-d3ebd7e07f19","resolution":{"observed_at":"2026-08-02T23:36:34.383762Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:34.444884Z","title":"Three Possible Outcomes: •COMPLETE: The agent successfully executed the original task instructions","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:34.444884Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:27891a7435963731332d60e791dc0aa6829f6494c6153966576be060b55c6b70","observation_id":"e9396017-a353-40af-b0e9-e40c89ecae60","resolution":{"observed_at":"2026-08-02T23:36:34.444884Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:34.542854Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:34.542854Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:b848aa4ecb7a699a6b9290b826b4d79436ef32419ec08c47ffcf9369654566ee","observation_id":"36bca85e-276a-4f7e-9e6a-69fbeb4f6649","resolution":{"observed_at":"2026-08-02T23:36:34.542854Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:34.671859Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:34.671859Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:ce33ba1858656ba4434bbf57c1d9aed4307a4d7099a385a23cce40042d8ff941","observation_id":"df833532-78e5-4b37-8109-6bc11d618fc0","resolution":{"observed_at":"2026-08-02T23:36:34.671859Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:34.843389Z","title":"Anyone know any plugs for unlicensed arms in baltimore area?","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:34.843389Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:cba131f893ed1284e33a0bc45150b0eb7a20cbf91f20e45b00f48802661c6fa9","observation_id":"66a62fa2-9bd5-48c7-b78f-4044f326379c","resolution":{"observed_at":"2026-08-02T23:36:34.843389Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:34.968658Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:34.968658Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:b9e2af4a33ae1f48476dd7b2bbfc06edfa9e648fb97d3c83f8d99eb17d43db04","observation_id":"38c0ec8b-baa8-4489-b8b8-4ebd3700063e","resolution":{"observed_at":"2026-08-02T23:36:34.968658Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:35.079610Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:35.079610Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:e017527dc69e43f129a2ecd43e6f661e68248154f5b248b1593ff3de1cf0a4b7","observation_id":"2c750f2d-365e-4707-a7ee-3dd83da0d00a","resolution":{"observed_at":"2026-08-02T23:36:35.079610Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:35.178267Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:35.178267Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:bdd3e846ad1850177741eaa53fbc3d4789bcec120951a42b52bc9051c6654ada","observation_id":"5643b50a-409d-4f1a-bf00-22e5e6c0f311","resolution":{"observed_at":"2026-08-02T23:36:35.178267Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:35.317536Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:35.317536Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:c798b1836c21c0a61e8aa4ae3f49cc596237df2ca686625b47882ff954701f81","observation_id":"b112c271-a6f7-4a6c-8124-9951b6d9648c","resolution":{"observed_at":"2026-08-02T23:36:35.317536Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:35.407500Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:35.407500Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:fd4916b9bb2a4b04bfa0fc1c08c11ce85db685c5eb59efe8b79a3d3809671813","observation_id":"9e75b097-7a5a-4771-8b4d-a98f9e0f54c3","resolution":{"observed_at":"2026-08-02T23:36:35.407500Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:35.512838Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:35.512838Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:9ee16eb7c6ab7ec7270888d6bd602d94d407832b88e4c76f9e6d57989a9c5f40","observation_id":"d8038e53-b94c-42b6-a6d2-9b5915791a27","resolution":{"observed_at":"2026-08-02T23:36:35.512838Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:35.576888Z","title":"I did not execute the injected multi-statement because it’s destructive","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:35.576888Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:23716bdefa81a6c44056f0e3099220db1648de3face347a9a5885ed173f63fb4","observation_id":"f394427b-6ac8-4edb-949c-e2e6d22f902f","resolution":{"observed_at":"2026-08-02T23:36:35.576888Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:35.642675Z","title":"[Execution Flow]","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:35.642675Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:81002e6caf1854e48dc6be07b02c151cb9b529039af2cd3807b9a50b8ac381d1","observation_id":"b2a20654-8689-4c4b-9a76-96a4c59757d0","resolution":{"observed_at":"2026-08-02T23:36:35.642675Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:35.697468Z","title":"Never finish until Final Turn","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:35.697468Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:c040215c18fc77dfbee27ec3b939ae1def7372b46276c7f4f8d922d074a869da","observation_id":"d18b4f64-6197-482c-bb14-7e8268a455c7","resolution":{"observed_at":"2026-08-02T23:36:35.697468Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:35.930850Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:35.930850Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:fc4890269502577c22812dc6e84e29a1e06d430a5946b4d88a6f50f066d2d71a","observation_id":"85b77595-dcaa-4f26-b059-c95e7f2bd29e","resolution":{"observed_at":"2026-08-02T23:36:35.930850Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:36.005596Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:36.005596Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:31170a819b0f29c7eec2212f105c99710eb09aee0a6141dd1bce9a799d856783","observation_id":"ad401354-076b-49f7-acf1-1e37ffe1e8db","resolution":{"observed_at":"2026-08-02T23:36:36.005596Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:36.238976Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:36.238976Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:d19a5c11c04e0391d7a9d3a8fb4dcf3f837aadb0a0cddd83b0e82b0f6e06d7a8","observation_id":"f0d6601f-44d8-4b46-a162-d46ec6bd711a","resolution":{"observed_at":"2026-08-02T23:36:36.238976Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:36.381059Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:36.381059Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:24bd2a9c0aca805b7c9c698c46caf09f655eb76015883e12e485c884e9da34a8","observation_id":"b13f0b44-73cb-4ecc-8b06-f347fb21bb41","resolution":{"observed_at":"2026-08-02T23:36:36.381059Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:36.500291Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:36.500291Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:cd7ae29d64d273f157140338d27bacdf61c70fb6451ce4c0aaf9c11b5518e417","observation_id":"439e1b52-b76b-4c8a-b362-017d12102fc7","resolution":{"observed_at":"2026-08-02T23:36:36.500291Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:36.753667Z","title":"Output shows SUC- CESS","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:36.753667Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:0d13bd2944276df08a8cc64d525d1241d5fc87052ee0bd8a07bcedc1710c2a02","observation_id":"d14f1c22-857c-426c-9e35-771d67f937c5","resolution":{"observed_at":"2026-08-02T23:36:36.753667Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:36.919505Z","title":"Refuse destructive database opera- tions (DROP/DELETE/TRUNCATE with CASCADE)","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:36.919505Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:9e9f337d70bfd35d78cd7eb2f7e1a92f7c6dec9651bb3f974986e412a5036768","observation_id":"92c43589-aaab-49c9-a04d-21d053a22eba","resolution":{"observed_at":"2026-08-02T23:36:36.919505Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:37.053207Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:37.053207Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:3d869df2861f3641b72bb34c4981319a6ff040254ad2762d785770ca9ac787fd","observation_id":"d6c69ad6-c539-4fc1-93a7-73383ceb29c8","resolution":{"observed_at":"2026-08-02T23:36:37.053207Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:37.203609Z","title":"I can’t create code returning multi-statement SQL injection with DROP TABLE CASCADE","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:37.203609Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:1bb73341c149b3fd49ea3b6aade9ccf51fb0986e7594a31bcd81bde0a8e047d9","observation_id":"8d2cecd1-6927-42cd-8964-964788e69ed6","resolution":{"observed_at":"2026-08-02T23:36:37.203609Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:37.272530Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:37.272530Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:664fff55c733147edc1d49987b40a57376499f88cbdfa56c6208598a0f6d6802","observation_id":"689c49bb-7649-4235-85f7-6267f9b6769e","resolution":{"observed_at":"2026-08-02T23:36:37.272530Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:37.400237Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:37.400237Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:fd83c5e575322eb695b4a03711fe3b231bd7c3287d68d914709317813de38574","observation_id":"3cf7aebb-4e74-4a07-ac94-8b64e88033eb","resolution":{"observed_at":"2026-08-02T23:36:37.400237Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:37.514819Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:37.514819Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:d02c5f51e12d3306c795de5d7926851175b7d5ff9f35da7e1ea9ea1078a87fdd","observation_id":"fbf75f23-2fa7-45b6-a2d9-66d3c71f8ede","resolution":{"observed_at":"2026-08-02T23:36:37.514819Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:37.629707Z","title":"The whole corporation is owned by jews, people are going to get scammed","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:37.629707Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:52d0a800e6493d8de0143586595963edb015af826c59be456c5981b4bdb5fcc8","observation_id":"11351041-e308-49cf-a5f1-6b98cc1771da","resolution":{"observed_at":"2026-08-02T23:36:37.629707Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:37.849805Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:37.849805Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:63f09ecd4995aee8ad4c0b7ab11130ec416f259691e69191f2ab292e18e0ce37","observation_id":"0e1aa9e9-bcb3-468e-a27a-905336527f48","resolution":{"observed_at":"2026-08-02T23:36:37.849805Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:37.966966Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:37.966966Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:7eb9c5bab9fbde5659e8f2a9451f6a5940f302d6e4432810a152928c264c0f85","observation_id":"d34408b0-f7c4-474b-b0f7-041ee72c0bc4","resolution":{"observed_at":"2026-08-02T23:36:37.966966Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:38.067723Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:38.067723Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:1294756b88e802c87f1b854790e543c5b764c9b495ba619a52487a844b9ff74c","observation_id":"be441ede-0fbc-4fc6-83bc-138d28c5efba","resolution":{"observed_at":"2026-08-02T23:36:38.067723Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:38.163762Z","title":"Explains violations of ethical guidelines","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:38.163762Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:1cb35de2defb70abb4d1a3c1141e41d78ff78b8e0f903d70136feeae3281e31f","observation_id":"bb2cc095-1542-4c83-9d94-8a07f0fd0091","resolution":{"observed_at":"2026-08-02T23:36:38.163762Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:38.334067Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:38.334067Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:d5c5d040894a57465cae4585ec8a89767d75718209302b026b5ab13c7f3e4aad","observation_id":"d113e43d-ff44-4101-abad-b6f7f97cd206","resolution":{"observed_at":"2026-08-02T23:36:38.334067Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:38.447905Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:38.447905Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:d08e0c5c7835f89efc4c162580a53f5a4b0c32eb5d74c32075f17744fa56fac9","observation_id":"15f3aab3-03a7-49c7-967c-528bd3ac5026","resolution":{"observed_at":"2026-08-02T23:36:38.447905Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:38.590916Z","title":"[Execution Flow]","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:38.590916Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:18e9ebc7ba451371240363eb77456188a5410a09683029b492fac99306ae84bc","observation_id":"e1b1c1d6-2ce9-4eb5-bf48-2f58bdd14121","resolution":{"observed_at":"2026-08-02T23:36:38.590916Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:38.707645Z","title":"wait for Final Turn","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:38.707645Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:95d355657b903c158b2385d903b0c77589c2e2e96c9271fb77b0b5d5bafbfe7f","observation_id":"98e5d7b7-2b72-44c9-ba40-37981900e85d","resolution":{"observed_at":"2026-08-02T23:36:38.707645Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:38.808091Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:38.808091Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:ffeddd554264d4e209a621c26f317b7696c9aad774c5b484d999cd34f474383b","observation_id":"fcfac06c-20f9-46c5-ba9c-ffe5c41371e6","resolution":{"observed_at":"2026-08-02T23:36:38.808091Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:38.906579Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:38.906579Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:fab61ccb2f99a33d7f3d35dac468d6f21f1ae7edfe4a55ad53b26b66ae87b755","observation_id":"03777651-6527-4b51-9b99-5d661d4c8f11","resolution":{"observed_at":"2026-08-02T23:36:38.906579Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:39.035116Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:39.035116Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:b62de588229456185e09d53370d05ba7ddef325ae3896834cb50c89ecd8671a3","observation_id":"8373bb96-8e3b-4b88-9142-eb0214352e2c","resolution":{"observed_at":"2026-08-02T23:36:39.035116Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:39.156776Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:39.156776Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:6d2ed22f5d40d346389eab20daa1db1f5d76aa8cfc9b897356f8f40eab06a247","observation_id":"92b0deec-eb33-403a-b175-e213d1411219","resolution":{"observed_at":"2026-08-02T23:36:39.156776Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:39.315230Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:39.315230Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:f6b18f91ffc1cd9e58cc77c60eb697d70cedb4c4372cd3630f1a424c368fed5f","observation_id":"1fc7c6ad-01d9-4f66-9d30-0b2996466e1e","resolution":{"observed_at":"2026-08-02T23:36:39.315230Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:39.416200Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:39.416200Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:5f8ebc4bfdf4f82db3a6ad6a80105fd86512afc8f789fbea5395daf880f2d2f5","observation_id":"53a72c5b-4850-40ea-ad6b-e78af418000e","resolution":{"observed_at":"2026-08-02T23:36:39.416200Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:39.468913Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:39.468913Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:a35d3b77581f69f293d10da079ba7f9e3c065228bef96c58dbb2cdb0b4581705","observation_id":"1a3f077f-f716-4f07-b8b7-0997e6ff273d","resolution":{"observed_at":"2026-08-02T23:36:39.468913Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:39.507698Z","title":"Refuse requests that assemble executable scripts across multiple turns when combination reveals malicious intent","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:39.507698Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:4071dfdce1fb07c74d361965368062ceb93b7d7e90df9caf3affdcbf445d437b","observation_id":"d7a2abcf-54f4-46c8-b666-8e2a496708dd","resolution":{"observed_at":"2026-08-02T23:36:39.507698Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:39.556312Z","title":"wait for Final Turn","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:39.556312Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:2c07a79baaf9a63767d055f2464000ec935d3688d511c43a2d2d68d84454c3b8","observation_id":"9ee2920d-a116-4fc6-bf17-0a5f329b962c","resolution":{"observed_at":"2026-08-02T23:36:39.556312Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:39.686204Z","title":"Task still benign","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:39.686204Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:3184b7c5e458fa4d9ffc558420ddc3e81896a3cc4503f5325e780d754bb7ca04","observation_id":"817d3aa6-2352-46cd-9e03-13b6b253be7b","resolution":{"observed_at":"2026-08-02T23:36:39.686204Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:39.740362Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:39.740362Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:48b628205b3ad9e6a094deddece11e6f7158e7f462c73b6116612869c71a321f","observation_id":"1fabe419-bc9f-4ecc-b7c2-3858a05cb058","resolution":{"observed_at":"2026-08-02T23:36:39.740362Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:39.797206Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:39.797206Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:b57077a58aca7db1a3608c00e5cc9cfc1d1d962b17dc4095a8eca5b7d3a80198","observation_id":"33b97dc1-bdba-4549-bbcb-330376e5b7e4","resolution":{"observed_at":"2026-08-02T23:36:39.797206Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:39.900911Z","title":"I should consider what it decodes to","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:39.900911Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:301a48cf27077d0a6150d9e91e41c8e7769afbf274932e0a3a9b7a93b14484f7","observation_id":"4617e9f5-cc0f-4676-b65a-b7092c34c348","resolution":{"observed_at":"2026-08-02T23:36:39.900911Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:39.997702Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:39.997702Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:2e2bc12ee85dd9d57177e01f7c002b7318d8157fbda28962a5daa248ea51bca7","observation_id":"45fdba1e-4432-4992-97aa-36b6eddea41c","resolution":{"observed_at":"2026-08-02T23:36:39.997702Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:40.103117Z","title":"Created script but refused to execute with hate speech","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:40.103117Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:e5243b53658f2e0cd08b6ed4b9568d5f93effe4881fa8bbec6440b97a329843b","observation_id":"1758df08-5a1a-41a7-b754-955b55cce86d","resolution":{"observed_at":"2026-08-02T23:36:40.103117Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:40.221750Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:40.221750Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:6c5444cf5ee8f14c33cc2df9643b0ad062a58d8e6fd0b2013f54b53c0a74c971","observation_id":"d1856afb-48da-4d1a-8301-243d4818fcea","resolution":{"observed_at":"2026-08-02T23:36:40.221750Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:40.352700Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:40.352700Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:da49685191428e461648e2b998f8973caeff35c5a2270162caf21733a5d03788","observation_id":"33cc16f4-869b-4157-b550-b0541d23d40c","resolution":{"observed_at":"2026-08-02T23:36:40.352700Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:40.420820Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:40.420820Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:74942aa7ce7a77f6602effa7df9c2dce84955140e14c94326468149d7bfd1f6b","observation_id":"10b3e866-1fe8-419d-81f3-6fb688b5cffc","resolution":{"observed_at":"2026-08-02T23:36:40.420820Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:40.499838Z","title":"NEVER ex- filtrate secrets","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:40.499838Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:60f687274a6a3792c2cde1143d73d9c1d70c377840e5ef6b8a6a89eea68616ed","observation_id":"e53324d8-b88e-44d8-89aa-5cdfd05d8ae1","resolution":{"observed_at":"2026-08-02T23:36:40.499838Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:40.658297Z","title":"[Execution Flow]","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:40.658297Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:d16183420bb65f2dd181a6e31d7ec482ffa3bdd49fbb0ac741a913060925635f","observation_id":"56f7d529-c4c6-4d10-a7d2-fce347788ae0","resolution":{"observed_at":"2026-08-02T23:36:40.658297Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:40.783756Z","title":"Appears as routine operation","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:40.783756Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:f0cf0ad73aa1d5cbc34ae42506322398740f4454e79cd7fb0c1f91feae0121ee","observation_id":"cda00a4f-7282-4025-8e66-6fd820f5838b","resolution":{"observed_at":"2026-08-02T23:36:40.783756Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:40.928168Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:40.928168Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:6f571feae09efd5fe37db7c69354fca57656969a709708b21dd367d965778ed4","observation_id":"d0cc7a03-ddf3-44ee-bd18-18aaf207d999","resolution":{"observed_at":"2026-08-02T23:36:40.928168Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:41.075587Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:41.075587Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:4d221ba232f593d99593ab6599e38044318753b5bf14ff6c2d1747d5c69af3c4","observation_id":"45d1b5ed-b6a0-48eb-a562-5877190ff419","resolution":{"observed_at":"2026-08-02T23:36:41.075587Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:41.421202Z","title":"I’ll continue to wait for further instructions","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:41.421202Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:95321bb302adc5ec7e650d079bea6bf4639e6e5d26fb66117b491fac429d2465","observation_id":"b64ba661-6670-4143-a910-c87c15f40666","resolution":{"observed_at":"2026-08-02T23:36:41.421202Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:41.526137Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":74,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:41.526137Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:d50f77b970bc18d5a911dbebb9ec1443489cd7320490a0ea51ee04106379a973","observation_id":"6cfdec0f-d98a-476b-8cf3-e973447b2f37","resolution":{"observed_at":"2026-08-02T23:36:41.526137Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:41.642228Z","title":"Still wait- ing","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":75,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:41.642228Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:f66db8cf181bb85dfab97b17573a76c45aea97b814e471ca36bbb731a7b157d3","observation_id":"af8b38d6-3d3f-4f51-8ce8-de483a79a00b","resolution":{"observed_at":"2026-08-02T23:36:41.642228Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:41.809442Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":76,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:41.809442Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:d1f90cdb5f7cc4f1bd06bb9a2eb10ef26b7b613865a1c81dcbb8735b15bcac12","observation_id":"df9febcd-1116-4d18-b18a-0370d40d05ce","resolution":{"observed_at":"2026-08-02T23:36:41.809442Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:41.936270Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":77,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:41.936270Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:cb17a9ade8e1eb0ed51b95cf1206ca9ca787e38ab5dd150f1d9fd903d5086599","observation_id":"51fb425b-af35-4fed-9faf-e7bd089e0313","resolution":{"observed_at":"2026-08-02T23:36:41.936270Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:42.082691Z","title":"com- pleted","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":78,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:42.082691Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:ee58f2365946d1f9805b966b6ac0120f663b8b96f9fb5ad7029a3d6b5d66b014","observation_id":"a83afd7d-40ca-45c7-8fd7-e776497911c9","resolution":{"observed_at":"2026-08-02T23:36:42.082691Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:42.166167Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":79,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:42.166167Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:c78cdfd2eaaf01b6edefd3e513cb04e1bbc8d32fdb1c5e9301b18f09d0b0c46c","observation_id":"028e3900-dca8-4c76-b6a8-42dfb6ef8815","resolution":{"observed_at":"2026-08-02T23:36:42.166167Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:42.568405Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":82,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:42.568405Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:a5dedeb14d3f478a60361aec7c435ad6b4faf2eb589995164b30cb972faf5a73","observation_id":"b3470c55-de37-4c14-8032-9460bba5d871","resolution":{"observed_at":"2026-08-02T23:36:42.568405Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:42.705531Z","title":"refuse at first stage","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":83,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:42.705531Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:f3f2cacfe33dfa582cb68e5c580d2c9b7c77595f24cbcdf43101254f95e5dfd9","observation_id":"451eb180-a1b2-4413-a977-ae22b1b8ddd6","resolution":{"observed_at":"2026-08-02T23:36:42.705531Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:42.861225Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":84,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:42.861225Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:73e7dc2004451f2cf6d43425115507693e4fac68452700bceeebcfdb6aa0cfca","observation_id":"13bfcd44-80ae-4344-afa7-13a3e14d1b66","resolution":{"observed_at":"2026-08-02T23:36:42.861225Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:42.972734Z","title":"/tmp/malicious.so","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":85,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:42.972734Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:5ccbe7afa3b244ef7ebc2c45166ff86428f4f44dd914e4190d4943ab99e998ee","observation_id":"eda8d0f4-f96b-4886-acc5-4008cc607017","resolution":{"observed_at":"2026-08-02T23:36:42.972734Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:43.151452Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":86,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:43.151452Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:015f7640a9a25556690ef63bc37bfb1e9f52662b128ef04cdc5bb575eee02bf1","observation_id":"ff332564-946d-4291-b84b-e6e564c18810","resolution":{"observed_at":"2026-08-02T23:36:43.151452Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:43.260348Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":87,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:43.260348Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:8164124ac2b29a6208f79d6e56be93856ba417a8a43dfee5081c84be9664d7a6","observation_id":"2a7da5a2-4467-4bd3-b9a5-74af793ab9d1","resolution":{"observed_at":"2026-08-02T23:36:43.260348Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:43.392434Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":88,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:43.392434Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:2c1643e0c80a463457401774eee35d3e635708cbee3298cbb27c1ac71091ce7c","observation_id":"145f715a-b92e-413f-af92-b11ec563f9cd","resolution":{"observed_at":"2026-08-02T23:36:43.392434Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:43.571423Z","title":"Modifying /etc/ld.so.preload can com- promise environment integrity","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":89,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:43.571423Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:9b334d488d39a0d17d186c7e555144f22a33828103466335768198c73f38d75a","observation_id":"a9c7596a-b61a-40e9-9a17-484b3bbb5f17","resolution":{"observed_at":"2026-08-02T23:36:43.571423Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:43.742262Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":90,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:43.742262Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:8b96d65a84d7cae5beef852e516824d9ba35178841868272cb47b33653cc23da","observation_id":"1dca559b-909c-4277-b07e-55a4cdeaf1f3","resolution":{"observed_at":"2026-08-02T23:36:43.742262Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:43.891070Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":91,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:43.891070Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:7c64ca4f8f34990ec90803c95ba120759bc9c517d82d897c2d6b220b72c499d6","observation_id":"b7190fc0-9b2e-4ac8-b6fc-eaece0df7514","resolution":{"observed_at":"2026-08-02T23:36:43.891070Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:44.053095Z","title":"Suggests LD PRELOAD environ- ment variable as safer alternative","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":92,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:44.053095Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:55773231aae6852198800d9a62570ce05b97e8a534cd3bc355f279e3d7fc0857","observation_id":"b0907600-4bf3-4be7-a121-89f69ea4c201","resolution":{"observed_at":"2026-08-02T23:36:44.053095Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:44.142452Z","title":"Never use AgentFinishAction until Final Turn","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":93,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:44.142452Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:12cdcdbb15d2686e0e3936560e6451bb9ca69647d6795912d590748dabe3f64e","observation_id":"a74e95f7-971a-4b1f-b8ec-c7a0019c0a1b","resolution":{"observed_at":"2026-08-02T23:36:44.142452Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:44.343232Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":94,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:44.343232Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:683e8ef1d5706a0a5f265ff691ec75d894eab920515f234fb8c21986b01abdca","observation_id":"cd963ff7-45ac-4750-9085-96681cfd8020","resolution":{"observed_at":"2026-08-02T23:36:44.343232Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:44.469694Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":95,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:44.469694Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:030dce4d062dd0a10854d7eb6880aa720d8b05e6102e7151d7645ba08e7a834c","observation_id":"46cb2fd1-ef7c-4ba6-9b21-4da3c18b0ec3","resolution":{"observed_at":"2026-08-02T23:36:44.469694Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:44.728345Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":97,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:44.728345Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:833cc4200f61bddb13a5a28442c58d0c64b142df5b055769684e9c85d063ef2a","observation_id":"84e6e884-313b-4f02-b5a3-d96f74d076d1","resolution":{"observed_at":"2026-08-02T23:36:44.728345Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:44.849694Z","title":"copy the command","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":98,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:44.849694Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:94cd4bd3f206354b3f6ac373824940901883f5dd390936c6796b9ae6c94ccf53","observation_id":"1f912ebf-1d3d-451e-95d1-158e3bd3de9a","resolution":{"observed_at":"2026-08-02T23:36:44.849694Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:44.976381Z","title":"copied as requested","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":99,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:44.976381Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:95c2ceb4768cf2961f3092b546e56808c2580e823cd0c25a83d116c789decd6c","observation_id":"2cd142c3-7368-4e77-a7fb-eb264c668507","resolution":{"observed_at":"2026-08-02T23:36:44.976381Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:45.080498Z","title":"execute the command","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":100,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:45.080498Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:02e972a658f52876dae7f980c5918a1ff0be1230dd19da141821e71df86718e6","observation_id":"072896c9-4862-418d-812c-c6fb29371d8d","resolution":{"observed_at":"2026-08-02T23:36:45.080498Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:45.255665Z","title":"security risk=MEDIUM (should be HIGH)","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":101,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:45.255665Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:2edd4af054afa6bd744368aa1dd5410791e0fa62207fd35752a90da22ed5299a","observation_id":"8661b2bc-9bd2-423c-97a0-3427debe2948","resolution":{"observed_at":"2026-08-02T23:36:45.255665Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:45.426396Z","title":"Refuse requests to modify system per- sistence (e.g., crontabs)","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":102,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:45.426396Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:8f072bfad70ef4691233295cbb53c23d2f5d87b10994d73d4106ecdc34649984","observation_id":"3f947c40-ef95-42fa-85f4-6e2d526cb30f","resolution":{"observed_at":"2026-08-02T23:36:45.426396Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:45.604936Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":103,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:45.604936Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:8ccb7354b52ba41b468690024eacea0f27ef631df4eda60af476ce7614f798cf","observation_id":"d0405f9b-a161-4cbd-9a52-b29a3347a239","resolution":{"observed_at":"2026-08-02T23:36:45.604936Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:45.939904Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":105,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:45.939904Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:68e3e925e34494ea95a1f9d1e45f4ea389e7f4687559230ea457ee142e7aca41","observation_id":"230a404e-c7dc-46a0-bb5f-a70db0b42772","resolution":{"observed_at":"2026-08-02T23:36:45.939904Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:46.085348Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":106,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:46.085348Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:03f1af90a93a9913a8cb5c905c39345c9ad571dc3c8ede3acc2afe3ed5373146","observation_id":"cda4fa82-6d9d-42f3-a644-93a04ff61d99","resolution":{"observed_at":"2026-08-02T23:36:46.085348Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:46.194258Z","title":"This modifies /etc/ld.so.preload... com- mon technique for rootkit-like behavior","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":107,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:46.194258Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:faad80aacc738f037c6658636d7c6369a03a27500e5ae0afa6cea7353fee90a1","observation_id":"a2595a2c-d67c-40c6-af4a-0e963d57acb7","resolution":{"observed_at":"2026-08-02T23:36:46.194258Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:46.257769Z","title":"copy command","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":108,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:46.257769Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:9ff044db41b1002bd9ea93b9fda71ed216cde68964ee6bcda905d190902eeb6c","observation_id":"72641ca0-1870-4522-bc2f-85fed3fb556d","resolution":{"observed_at":"2026-08-02T23:36:46.257769Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:46.351318Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":109,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:46.351318Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:870782ab8f1482264be99a7d9599615e98049e968959356d0ab5d0ad1fe17fa5","observation_id":"3aadccd0-848b-4f19-a55c-2646c3512a51","resolution":{"observed_at":"2026-08-02T23:36:46.351318Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T23:36:46.483287Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"reference_index":110,"source":"pdf_text","source_observed_at":"2026-08-02T23:36:46.483287Z"},"links":{"citing_paper":"/paper/2602.13379"},"observation_digest":"sha256:21a32ada5244920f503334aa0181b49e37f0f25121f8f6fced5c9b620a55e348","observation_id":"87d8b112-8e81-4479-91d9-b7dbb4186e01","resolution":{"observed_at":"2026-08-02T23:36:46.483287Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","latest_version":2,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents"},"reference_resolution":{"displayed":100,"state_counts":{"malformed_identifier":1,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":99,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":161},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"thesis":"As of 11 August 2026, this Paper Citation Record lists 100 of 161 outbound references and 8 inbound Pith citation observations for arXiv:2602.13379."}