{"as_of":"2026-08-06T14:16:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:b2719f20ee0c9eac3199c048e7c81eaf8335608776590c926b473aac9e4f1a47","coverage":[{"denominator":7,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":7,"source":"paper_references, paper_reference_links","source_observed_at":"2026-05-13T19:33:29.341895Z","state":"measured"},{"denominator":17,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":17,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-06T06:34:29.942622+00:00","state":"measured"},{"denominator":10,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":10,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-02T13:28:34.788050Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"pith","source_observed_at":"2026-07-03T06:27:42.550738Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2604.03131","last_updated":"2026-04-03T15:52:36Z","snapshot_observed_at":"2026-07-06T22:52:20.577677Z","submitted_at":"2026-04-03T15:52:36Z","title":"A Systematic Security Evaluation of OpenClaw and Its Variants","version":1},"cited_work":{"arxiv_id":"2604.03131","doi":null,"metadata_source":"pith","pith_arxiv_id":"2604.03131","snapshot_observed_at":"2026-07-03T06:27:42.550738Z","title":"A Systematic Security Evaluation of OpenClaw and Its Variants","venue":"cs.CR","work_id":"22bc6f3d-dd89-4d9d-8993-2ee04896d9ce","year":2026},"citing_paper":{"arxiv_id":"2605.06393","last_updated":"2026-05-07T15:08:40Z","snapshot_observed_at":"2026-07-06T23:18:51.157048Z","submitted_at":"2026-05-07T15:08:40Z","title":"Constraining Host-Level Abuse in Self-Hosted Computer-Use Agents via TEE-Backed Isolation","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-05-08T09:08:30.102711Z"},"links":{"cited_paper":"/paper/2604.03131","citing_paper":"/paper/2605.06393"},"observation_digest":"sha256:8128342e0e3e19ac6fdab4b72cc97a03e212caf1255e58607a68fed4e0d71f47","observation_id":"e68f8a17-c9fe-47c6-9705-c693cb3197ce","resolution":{"observed_at":"2026-05-11T20:26:11.278150Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2604.03131","last_updated":"2026-04-03T15:52:36Z","snapshot_observed_at":"2026-07-06T22:52:20.577677Z","submitted_at":"2026-04-03T15:52:36Z","title":"A Systematic Security Evaluation of OpenClaw and Its Variants","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.03131","snapshot_observed_at":"2026-07-12T17:06:32.429160Z","title":"Unveiling privacy risks in llm agent memory","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2605.11046","last_updated":"2026-07-06T14:50:31Z","snapshot_observed_at":"2026-07-12T17:06:30.437834Z","submitted_at":"2026-05-11T12:41:36Z","title":"On the dilaton gravity of analogue black holes","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-07-12T17:06:32.429160Z"},"links":{"cited_paper":"/paper/2604.03131","citing_paper":"/paper/2605.11046"},"observation_digest":"sha256:12c0030835da50729e6c14921a3a1a9b04165521dda4ee26b5eae9a80502255e","observation_id":"3b94a705-96bf-48a8-9abf-e7828d0422df","resolution":{"observed_at":"2026-07-12T17:06:32.429160Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2604.03131","last_updated":"2026-04-03T15:52:36Z","snapshot_observed_at":"2026-07-06T22:52:20.577677Z","submitted_at":"2026-04-03T15:52:36Z","title":"A Systematic Security Evaluation of OpenClaw and Its Variants","version":1},"cited_work":{"arxiv_id":"2604.03131","doi":null,"metadata_source":"pith","pith_arxiv_id":"2604.03131","snapshot_observed_at":"2026-07-03T06:27:42.550738Z","title":"A Systematic Security Evaluation of OpenClaw and Its Variants","venue":"cs.CR","work_id":"22bc6f3d-dd89-4d9d-8993-2ee04896d9ce","year":2026},"citing_paper":{"arxiv_id":"2605.11047","last_updated":"2026-05-11T13:20:02Z","snapshot_observed_at":"2026-07-06T23:22:57.012338Z","submitted_at":"2026-05-11T13:20:02Z","title":"Red-Teaming Agent Execution Contexts: Open-World Security Evaluation on OpenClaw","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-05-13T00:53:56.517406Z"},"links":{"cited_paper":"/paper/2604.03131","citing_paper":"/paper/2605.11047"},"observation_digest":"sha256:3cabf77c2233bc3eaa3a4e36b46ccf455610da06482c707aaea320c1a47b6364","observation_id":"1ff68ca5-c6b8-44eb-bda9-843322ec04e9","resolution":{"observed_at":"2026-05-13T00:57:00.699626Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2604.03131","last_updated":"2026-04-03T15:52:36Z","snapshot_observed_at":"2026-07-06T22:52:20.577677Z","submitted_at":"2026-04-03T15:52:36Z","title":"A Systematic Security Evaluation of OpenClaw and Its Variants","version":1},"cited_work":{"arxiv_id":"2604.03131","doi":null,"metadata_source":"pith","pith_arxiv_id":"2604.03131","snapshot_observed_at":"2026-07-03T06:27:42.550738Z","title":"A Systematic Security Evaluation of OpenClaw and Its Variants","venue":"cs.CR","work_id":"22bc6f3d-dd89-4d9d-8993-2ee04896d9ce","year":2026},"citing_paper":{"arxiv_id":"2605.17830","last_updated":"2026-05-18T04:06:34Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2026-05-18T04:06:34Z","title":"Remembering More, Risking More: Longitudinal Safety Risks in Memory-Equipped LLM Agents","version":1},"reference_index":106,"source":"arxiv_source","source_observed_at":"2026-05-20T10:51:19.555985Z"},"links":{"cited_paper":"/paper/2604.03131","citing_paper":"/paper/2605.17830"},"observation_digest":"sha256:e448b63f9f49c29189cd0c441dee196474e46af28776ee87240e2692f911e4c7","observation_id":"154a161b-bf61-455a-b293-03056bc23101","resolution":{"observed_at":"2026-05-20T10:53:13.340626Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2604.03131","last_updated":"2026-04-03T15:52:36Z","snapshot_observed_at":"2026-07-06T22:52:20.577677Z","submitted_at":"2026-04-03T15:52:36Z","title":"A Systematic Security Evaluation of OpenClaw and Its Variants","version":1},"cited_work":{"arxiv_id":"2604.03131","doi":null,"metadata_source":"pith","pith_arxiv_id":"2604.03131","snapshot_observed_at":"2026-07-03T06:27:42.550738Z","title":"A Systematic Security Evaluation of OpenClaw and Its Variants","venue":"cs.CR","work_id":"22bc6f3d-dd89-4d9d-8993-2ee04896d9ce","year":2026},"citing_paper":{"arxiv_id":"2605.22321","last_updated":"2026-07-24T06:09:29Z","snapshot_observed_at":"2026-08-02T13:28:32.433657Z","submitted_at":"2026-05-21T11:07:51Z","title":"ASEval: Automated Trajectory-Level Security Testing for Autonomous Agents","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-05-22T05:49:21.532568Z"},"links":{"cited_paper":"/paper/2604.03131","citing_paper":"/paper/2605.22321"},"observation_digest":"sha256:1b7acd3ec88c5629fdce143d0e40edb90a110ceb19cfa3208a99c2690fb9f447","observation_id":"9a80c531-08a8-4038-8472-310cfb79e788","resolution":{"observed_at":"2026-05-22T05:51:08.541635Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2604.03131","last_updated":"2026-04-03T15:52:36Z","snapshot_observed_at":"2026-07-06T22:52:20.577677Z","submitted_at":"2026-04-03T15:52:36Z","title":"A Systematic Security Evaluation of OpenClaw and Its Variants","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.03131","snapshot_observed_at":"2026-08-02T13:28:34.788050Z","title":"A systematic security evaluation of OpenClaw and its variants,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2605.22321","last_updated":"2026-07-24T06:09:29Z","snapshot_observed_at":"2026-08-02T13:28:32.433657Z","submitted_at":"2026-05-21T11:07:51Z","title":"ASEval: Automated Trajectory-Level Security Testing for Autonomous Agents","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-02T13:28:34.788050Z"},"links":{"cited_paper":"/paper/2604.03131","citing_paper":"/paper/2605.22321"},"observation_digest":"sha256:ff410ce13ddb40362ffe4adc689253faa159c79f0f6a7d6fafe4b9dac1a37f55","observation_id":"ad817bd8-863e-4f0e-8420-bc1e99501333","resolution":{"observed_at":"2026-08-02T13:28:34.788050Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2604.03131","last_updated":"2026-04-03T15:52:36Z","snapshot_observed_at":"2026-07-06T22:52:20.577677Z","submitted_at":"2026-04-03T15:52:36Z","title":"A Systematic Security Evaluation of OpenClaw and Its Variants","version":1},"cited_work":{"arxiv_id":"2604.03131","doi":null,"metadata_source":"pith","pith_arxiv_id":"2604.03131","snapshot_observed_at":"2026-07-03T06:27:42.550738Z","title":"A Systematic Security Evaluation of OpenClaw and Its Variants","venue":"cs.CR","work_id":"22bc6f3d-dd89-4d9d-8993-2ee04896d9ce","year":2026},"citing_paper":{"arxiv_id":"2606.01166","last_updated":"2026-05-31T11:16:18Z","snapshot_observed_at":"2026-07-06T23:41:48.357871Z","submitted_at":"2026-05-31T11:16:18Z","title":"BraveGuard: From Open-World Threats to Safer Computer-Use Agents","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-06-28T17:04:46.912915Z"},"links":{"cited_paper":"/paper/2604.03131","citing_paper":"/paper/2606.01166"},"observation_digest":"sha256:8ede6b190597d12d9415ba20e6ab36c0c96c2005057c20c8732c0c4766997d30","observation_id":"e775522c-e19a-4187-b719-ccb329611409","resolution":{"observed_at":"2026-07-01T21:26:14.171542Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2604.03131","last_updated":"2026-04-03T15:52:36Z","snapshot_observed_at":"2026-07-06T22:52:20.577677Z","submitted_at":"2026-04-03T15:52:36Z","title":"A Systematic Security Evaluation of OpenClaw and Its Variants","version":1},"cited_work":{"arxiv_id":"2604.03131","doi":null,"metadata_source":"pith","pith_arxiv_id":"2604.03131","snapshot_observed_at":"2026-07-03T06:27:42.550738Z","title":"A Systematic Security Evaluation of OpenClaw and Its Variants","venue":"cs.CR","work_id":"22bc6f3d-dd89-4d9d-8993-2ee04896d9ce","year":2026},"citing_paper":{"arxiv_id":"2606.11007","last_updated":"2026-06-09T15:41:48Z","snapshot_observed_at":"2026-07-06T23:50:06.645076Z","submitted_at":"2026-06-09T15:41:48Z","title":"Understanding and mitigating the risks of OpenClaw for non-technical users: A practical guide with Skill","version":1},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-06-27T12:39:26.314984Z"},"links":{"cited_paper":"/paper/2604.03131","citing_paper":"/paper/2606.11007"},"observation_digest":"sha256:564bdcb2579e0bce27d49cc3703161fbc76fe5a6d1fb27e06e842c379a84ed11","observation_id":"29477df2-b160-4181-8124-ccec2f6a19e8","resolution":{"observed_at":"2026-07-03T06:27:42.552031Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2604.03131","last_updated":"2026-04-03T15:52:36Z","snapshot_observed_at":"2026-07-06T22:52:20.577677Z","submitted_at":"2026-04-03T15:52:36Z","title":"A Systematic Security Evaluation of OpenClaw and Its Variants","version":1},"cited_work":{"arxiv_id":"2604.03131","doi":null,"metadata_source":"pith","pith_arxiv_id":"2604.03131","snapshot_observed_at":"2026-07-03T06:27:42.550738Z","title":"A Systematic Security Evaluation of OpenClaw and Its Variants","venue":"cs.CR","work_id":"22bc6f3d-dd89-4d9d-8993-2ee04896d9ce","year":2026},"citing_paper":{"arxiv_id":"2606.30755","last_updated":"2026-06-29T18:00:45Z","snapshot_observed_at":"2026-07-07T00:04:34.491408Z","submitted_at":"2026-06-29T18:00:45Z","title":"Understanding and Evaluating Claw-like Agent Security Through a Computer-Systems Lens","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-07-01T01:55:40.954429Z"},"links":{"cited_paper":"/paper/2604.03131","citing_paper":"/paper/2606.30755"},"observation_digest":"sha256:d9591a6bb2e329db1fad1fe833ca9957a9df4282298271322c898b0741428e55","observation_id":"e004d1e8-1c78-4e15-b925-48ccc13fea18","resolution":{"observed_at":"2026-07-01T12:35:44.125751Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2604.03131","last_updated":"2026-04-03T15:52:36Z","snapshot_observed_at":"2026-07-06T22:52:20.577677Z","submitted_at":"2026-04-03T15:52:36Z","title":"A Systematic Security Evaluation of OpenClaw and Its Variants","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.03131","snapshot_observed_at":"2026-08-01T04:47:41.325288Z","title":"arXiv preprint arXiv:2604.03131 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.22445","last_updated":"2026-07-24T16:08:03Z","snapshot_observed_at":"2026-08-05T02:35:43.559115Z","submitted_at":"2026-07-24T16:08:03Z","title":"Dynamic Capability Scoping for Enterprise AI Agents: A Synthetic Dataset and Three-Source Permission Architecture","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-01T04:47:41.325288Z"},"links":{"cited_paper":"/paper/2604.03131","citing_paper":"/paper/2607.22445"},"observation_digest":"sha256:f2523b6f32eaea0312b214672ae5a63b9334fe986937b55ca9b7b113c746a9aa","observation_id":"c27cf38d-f70c-4a13-915b-0c53e34c78e7","resolution":{"observed_at":"2026-08-01T04:47:41.325288Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2604.03131/citation-record","integrity":"/paper/2604.03131/integrity","json":"/paper/2604.03131/citation-record.json","paper":"/paper/2604.03131"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2603.11619","doi":"10.48550/arxiv.2603.11619","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Taming OpenClaw: Security analysis and mitigation of autonomous LLM agent threats","venue":"arXiv (Cornell University)","work_id":"007f6b31-1c90-4787-9431-6d395fb755d9","year":2026},"citing_paper":{"arxiv_id":"2604.03131","last_updated":"2026-04-03T15:52:36Z","snapshot_observed_at":"2026-07-06T22:52:20.577677Z","submitted_at":"2026-04-03T15:52:36Z","title":"A Systematic Security Evaluation of OpenClaw and Its Variants","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-05-13T19:33:29.341895Z"},"links":{"citing_paper":"/paper/2604.03131"},"observation_digest":"sha256:6c965bd493167ea88dc5b838787526eaf60932ae5f21a13f009920aa1520930c","observation_id":"deb0af4d-b62d-4a5c-87c3-82199a938474","resolution":{"observed_at":"2026-05-13T19:38:10.666217Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2601.07395","doi":"10.48550/arxiv.2601.07395","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Mcp-itp: An automated framework for implicit tool poisoning in mcp","venue":"arXiv (Cornell University)","work_id":"53b67a64-94b0-4ced-9ff7-5cf5ac26ed3f","year":2026},"citing_paper":{"arxiv_id":"2604.03131","last_updated":"2026-04-03T15:52:36Z","snapshot_observed_at":"2026-07-06T22:52:20.577677Z","submitted_at":"2026-04-03T15:52:36Z","title":"A Systematic Security Evaluation of OpenClaw and Its Variants","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-05-13T19:33:29.341895Z"},"links":{"citing_paper":"/paper/2604.03131"},"observation_digest":"sha256:c0162a3367f4a270d3f3800c2bb9a9c28189fcd136984a41888e51930162ff7a","observation_id":"39da14cd-0775-4e01-b54e-d47514f5694a","resolution":{"observed_at":"2026-05-13T19:38:10.677496Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2603.24414","doi":"10.48550/arxiv.2603.24414","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Yi Liu, Gelei Deng, Yuekang Li, Kailong Wang, Tianwei Zhang, Yepang Liu, Haoyu Wang, Yan Zheng, and Yang Liu","venue":"arXiv (Cornell University)","work_id":"dc2fea0e-6235-4a65-ac02-e36c9b96ee01","year":2026},"citing_paper":{"arxiv_id":"2604.03131","last_updated":"2026-04-03T15:52:36Z","snapshot_observed_at":"2026-07-06T22:52:20.577677Z","submitted_at":"2026-04-03T15:52:36Z","title":"A Systematic Security Evaluation of OpenClaw and Its Variants","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-05-13T19:33:29.341895Z"},"links":{"citing_paper":"/paper/2604.03131"},"observation_digest":"sha256:90b946f7b2a26bc18a565764a3b8979b7c7f00536bf383941caa62fe84d85697","observation_id":"58cac9b8-18b8-42c9-ab46-50e941407c03","resolution":{"observed_at":"2026-05-13T19:38:10.674620Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2603.10387","doi":"10.48550/arxiv.2603.10387","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Don’t let the claw grip your hand: A security analysis and defense framework for OpenClaw","venue":"arXiv (Cornell University)","work_id":"419d68e7-2dfc-4480-9d0a-0da2040a78d4","year":2026},"citing_paper":{"arxiv_id":"2604.03131","last_updated":"2026-04-03T15:52:36Z","snapshot_observed_at":"2026-07-06T22:52:20.577677Z","submitted_at":"2026-04-03T15:52:36Z","title":"A Systematic Security Evaluation of OpenClaw and Its Variants","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-05-13T19:33:29.341895Z"},"links":{"citing_paper":"/paper/2604.03131"},"observation_digest":"sha256:8b5b0747e2451f86f71f026f0a2e6555f31acee170ae2ba2db506ab59345c71c","observation_id":"e6137066-d65a-4707-a500-e696e436649a","resolution":{"observed_at":"2026-05-13T19:38:10.671771Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2601.05504","doi":"10.48550/arxiv.2601.05504","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"URLhttps://arxiv.org/abs/2601.05504 First Author et al.:Preprint submitted to ElsevierPage 20 of 21 Security, Privacy, and Ethical Risks in OpenClaw","venue":"arXiv (Cornell University)","work_id":"8bb49f6f-4a1a-415a-981f-164bb63b644c","year":2026},"citing_paper":{"arxiv_id":"2604.03131","last_updated":"2026-04-03T15:52:36Z","snapshot_observed_at":"2026-07-06T22:52:20.577677Z","submitted_at":"2026-04-03T15:52:36Z","title":"A Systematic Security Evaluation of OpenClaw and Its Variants","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-05-13T19:33:29.341895Z"},"links":{"citing_paper":"/paper/2604.03131"},"observation_digest":"sha256:294243fa35ea5589400baafc6fe0a9a44b404432e0ffcc2259bdc51ff301c6b3","observation_id":"dfb04978-7be7-4160-880d-5aa5a5b43610","resolution":{"observed_at":"2026-05-13T19:38:10.663447Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2510.19207","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-04T06:59:37.761424Z","title":"https://doi.org/10","venue":null,"work_id":"0729225a-cf6c-457c-a346-15bc7e176227","year":2025},"citing_paper":{"arxiv_id":"2604.03131","last_updated":"2026-04-03T15:52:36Z","snapshot_observed_at":"2026-07-06T22:52:20.577677Z","submitted_at":"2026-04-03T15:52:36Z","title":"A Systematic Security Evaluation of OpenClaw and Its Variants","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-05-13T19:33:29.341895Z"},"links":{"citing_paper":"/paper/2604.03131"},"observation_digest":"sha256:99deef163d6c55d506eb9ae0134476882998e98d298dd74ec3a1c4e369318246","observation_id":"676d2aa7-849c-4704-a48c-b3915b0f1364","resolution":{"observed_at":"2026-05-13T19:38:10.669051Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2508.14925","last_updated":"2025-08-19T10:12:35Z","snapshot_observed_at":"2026-08-05T18:59:41.612871Z","submitted_at":"2025-08-19T10:12:35Z","title":"MCPTox: A Benchmark for Tool Poisoning Attack on Real-World MCP Servers","version":1},"cited_work":{"arxiv_id":"2508.14925","doi":"10.48550/arxiv.2508.14925","metadata_source":"pith","pith_arxiv_id":"2508.14925","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Wang, MCPTox: A systematic benchmark for MCP server security, arXiv preprint arXiv:2508.14925 (2025)","venue":"cs.CR","work_id":"53c44cac-ba71-4460-afef-2280250ee899","year":2025},"citing_paper":{"arxiv_id":"2604.03131","last_updated":"2026-04-03T15:52:36Z","snapshot_observed_at":"2026-07-06T22:52:20.577677Z","submitted_at":"2026-04-03T15:52:36Z","title":"A Systematic Security Evaluation of OpenClaw and Its Variants","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-05-13T19:33:29.341895Z"},"links":{"cited_paper":"/paper/2508.14925","citing_paper":"/paper/2604.03131"},"observation_digest":"sha256:272d5d5e3c2256520e4e6e045e711088318f7caed08037831c1ee32b40a255f2","observation_id":"4f6be4f1-d1b5-4026-ad19-0902aa710d67","resolution":{"observed_at":"2026-05-13T19:38:10.680308Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2604.03131","last_updated":"2026-04-03T15:52:36Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-07-06T22:52:20.577677Z","submitted_at":"2026-04-03T15:52:36Z","title":"A Systematic Security Evaluation of OpenClaw and Its Variants"},"reference_resolution":{"displayed":7,"state_counts":{"malformed_identifier":0,"metadata_mismatch":3,"parse_uncertain":0,"unresolved":0,"verified_exact":4,"verified_fuzzy":0},"total_outbound_references":7},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"thesis":"As of 6 August 2026, this Paper Citation Record lists 7 of 7 outbound references and 10 inbound Pith citation observations for arXiv:2604.03131."}