{"as_of":"2026-08-11T05:20:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:f87384deff676a181efcb35c0dfc71a27f019351525eb7fc7a636d324dda526e","coverage":[{"denominator":29,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":29,"source":"paper_references, paper_reference_links","source_observed_at":"2026-05-10T20:25:58.113363Z","state":"measured"},{"denominator":30,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":30,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-10T06:31:04.303077+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-06-26T09:05:22.096955Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"pith","source_observed_at":"2026-07-04T10:09:45.243392Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2604.04426","last_updated":"2026-04-06T05:15:00Z","snapshot_observed_at":"2026-07-06T22:53:24.585766Z","submitted_at":"2026-04-06T05:15:00Z","title":"ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems","version":1},"cited_work":{"arxiv_id":"2604.04426","doi":null,"metadata_source":"pith","pith_arxiv_id":"2604.04426","snapshot_observed_at":"2026-07-04T10:09:45.243392Z","title":"ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems","venue":"cs.AI","work_id":"5a111268-aab3-4bd9-9c4f-ade6236db394","year":2026},"citing_paper":{"arxiv_id":"2606.22864","last_updated":"2026-06-22T05:13:25Z","snapshot_observed_at":"2026-08-02T16:33:47.655259Z","submitted_at":"2026-06-22T05:13:25Z","title":"When AUC 0.998 Is Not Enough: A Candidate Evaluation Protocol for Hidden-State Probes of Indirect Prompt Injection in Multimodal Computer-Use Agents","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-06-26T09:05:22.096955Z"},"links":{"cited_paper":"/paper/2604.04426","citing_paper":"/paper/2606.22864"},"observation_digest":"sha256:e3d6a3b2ffb8af5a72d80c79d19a458db9f1b3dab050f3325bff2923df4227ed","observation_id":"65610a16-9a9c-49c3-9a06-e6951179585f","resolution":{"observed_at":"2026-07-04T10:09:45.247069Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2604.04426/citation-record","integrity":"/paper/2604.04426/integrity","json":"/paper/2604.04426/citation-record.json","paper":"/paper/2604.04426"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2504.19793","last_updated":"2025-08-24T03:28:21Z","snapshot_observed_at":"2026-08-01T07:24:09.967062Z","submitted_at":"2025-04-28T13:36:43Z","title":"Prompt Injection Attack to Tool Selection in LLM Agents","version":3},"cited_work":{"arxiv_id":"2504.19793","doi":"10.48550/arxiv.2504.19793","metadata_source":"pith","pith_arxiv_id":"2504.19793","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Prompt Injection Attack to Tool Selection in LLM Agents","venue":"cs.CR","work_id":"0224da95-0f8f-4479-bb4e-602bec01d31c","year":2025},"citing_paper":{"arxiv_id":"2604.04426","last_updated":"2026-04-06T05:15:00Z","snapshot_observed_at":"2026-07-06T22:53:24.585766Z","submitted_at":"2026-04-06T05:15:00Z","title":"ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-05-10T20:25:58.113363Z"},"links":{"cited_paper":"/paper/2504.19793","citing_paper":"/paper/2604.04426"},"observation_digest":"sha256:f2e326974525f462237b5564e97d68b39abe84a7645bfece0863067771369e34","observation_id":"bc1d3597-a806-47df-927e-41ed4522e2d9","resolution":{"observed_at":"2026-05-16T17:08:29.210920Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2508.02110","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-04T09:19:43.619921Z","title":"Attractive metadata attack: Inducing llm agents to invoke malicious tools","venue":null,"work_id":"495fd4a4-f72c-42f6-8a8d-82d3bd0ee823","year":2025},"citing_paper":{"arxiv_id":"2604.04426","last_updated":"2026-04-06T05:15:00Z","snapshot_observed_at":"2026-07-06T22:53:24.585766Z","submitted_at":"2026-04-06T05:15:00Z","title":"ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-05-10T20:25:58.113363Z"},"links":{"citing_paper":"/paper/2604.04426"},"observation_digest":"sha256:ce6f3a4cd90226f3831a944398a51e8f98b19b891ea1704a1258d167537db36c","observation_id":"a710d3b9-eadb-4cc8-bc98-b34de8988cc1","resolution":{"observed_at":"2026-05-10T21:55:52.968452Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2510.02554","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-04T04:59:36.373829Z","title":"ToolTweak: An attack on tool selection in llm-based agents","venue":null,"work_id":"7315c847-5d81-4629-a269-aa2d2bd3a59b","year":2025},"citing_paper":{"arxiv_id":"2604.04426","last_updated":"2026-04-06T05:15:00Z","snapshot_observed_at":"2026-07-06T22:53:24.585766Z","submitted_at":"2026-04-06T05:15:00Z","title":"ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-05-10T20:25:58.113363Z"},"links":{"citing_paper":"/paper/2604.04426"},"observation_digest":"sha256:185f0c702b60b70e3f25f104fca6b65e20a7a78ed6d569a1178fb3e54fbbac6b","observation_id":"615af855-fdc1-46a8-96fb-41ee5a592b11","resolution":{"observed_at":"2026-05-10T21:55:53.008858Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2503.22738","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-04T00:29:16.330261Z","title":"arXiv preprint arXiv:2503.22738 , year=","venue":null,"work_id":"d6d755e8-beb8-4208-aea4-da7adbea2446","year":2025},"citing_paper":{"arxiv_id":"2604.04426","last_updated":"2026-04-06T05:15:00Z","snapshot_observed_at":"2026-07-06T22:53:24.585766Z","submitted_at":"2026-04-06T05:15:00Z","title":"ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-05-10T20:25:58.113363Z"},"links":{"citing_paper":"/paper/2604.04426"},"observation_digest":"sha256:e472c62690f59b9e42b79c32487e38a8ef6274dad437285ee55e56403fb71191","observation_id":"c7e08dc0-6792-4ba8-b660-df802634ac51","resolution":{"observed_at":"2026-05-10T21:55:53.043236Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"mcp-scanner: Mcp server security scanner","venue":null,"work_id":"a2182c02-5c9b-4ea7-ab07-81e148f7286f","year":2025},"citing_paper":{"arxiv_id":"2604.04426","last_updated":"2026-04-06T05:15:00Z","snapshot_observed_at":"2026-07-06T22:53:24.585766Z","submitted_at":"2026-04-06T05:15:00Z","title":"ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-05-10T20:25:58.113363Z"},"links":{"citing_paper":"/paper/2604.04426"},"observation_digest":"sha256:b1f8d52cd6a3cbd42475d73b2faf29b2345aedb1045daf18d1e89ef7210c2c5e","observation_id":"7ab18915-0a32-4b7c-a9a1-733fd381c5c9","resolution":{"observed_at":"2026-05-16T01:32:05.314683Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"mcp-scan: Mcp security scanner","venue":null,"work_id":"74047bd2-b9a5-48c9-b4b6-20bc912035d5","year":null},"citing_paper":{"arxiv_id":"2604.04426","last_updated":"2026-04-06T05:15:00Z","snapshot_observed_at":"2026-07-06T22:53:24.585766Z","submitted_at":"2026-04-06T05:15:00Z","title":"ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-05-10T20:25:58.113363Z"},"links":{"citing_paper":"/paper/2604.04426"},"observation_digest":"sha256:c081e26f03e9ac5f92979ae628b2e543e7325cff0c9905c0dfa7925c254a9f6e","observation_id":"8fd8e110-6bed-41dd-916e-5bc17c6ab9f5","resolution":{"observed_at":"2026-05-16T01:32:05.310730Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2508.13220","doi":"10.48550/arxiv.2508.13220","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Mcpsecbench: A systematic security benchmark and playground for testing model context protocols","venue":"arXiv (Cornell University)","work_id":"4a91f798-a23b-4420-afe8-5230f40ee3e1","year":2025},"citing_paper":{"arxiv_id":"2604.04426","last_updated":"2026-04-06T05:15:00Z","snapshot_observed_at":"2026-07-06T22:53:24.585766Z","submitted_at":"2026-04-06T05:15:00Z","title":"ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-05-10T20:25:58.113363Z"},"links":{"citing_paper":"/paper/2604.04426"},"observation_digest":"sha256:de1d9f2befa72825b2b7cb8092a90774daf3f2c67fb29e2e46ad4d933ebaf07c","observation_id":"668cdf24-7ee3-4a9a-81cc-30a125d81ef6","resolution":{"observed_at":"2026-05-10T21:55:53.035300Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2508.14925","last_updated":"2025-08-19T10:12:35Z","snapshot_observed_at":"2026-08-08T10:31:54.102871Z","submitted_at":"2025-08-19T10:12:35Z","title":"MCPTox: A Benchmark for Tool Poisoning Attack on Real-World MCP Servers","version":1},"cited_work":{"arxiv_id":"2508.14925","doi":"10.48550/arxiv.2508.14925","metadata_source":"pith","pith_arxiv_id":"2508.14925","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Wang, MCPTox: A systematic benchmark for MCP server security, arXiv preprint arXiv:2508.14925 (2025)","venue":"cs.CR","work_id":"53c44cac-ba71-4460-afef-2280250ee899","year":2025},"citing_paper":{"arxiv_id":"2604.04426","last_updated":"2026-04-06T05:15:00Z","snapshot_observed_at":"2026-07-06T22:53:24.585766Z","submitted_at":"2026-04-06T05:15:00Z","title":"ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-05-10T20:25:58.113363Z"},"links":{"cited_paper":"/paper/2508.14925","citing_paper":"/paper/2604.04426"},"observation_digest":"sha256:b37102af02470adb1e4e38a76882331dea9c9f6f756aaf4d3b4d94293980f483","observation_id":"b2136d16-8ffc-47ea-b3c5-a8d0aefd8508","resolution":{"observed_at":"2026-05-10T21:55:53.026950Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2512.15163","doi":"10.48550/arxiv.2512.15163","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Mcp-safetybench: A benchmark for safety evaluation of large language models with real-world mcp servers","venue":"Open MIND","work_id":"5c449631-d613-478d-aff3-86e9a0d0e575","year":2025},"citing_paper":{"arxiv_id":"2604.04426","last_updated":"2026-04-06T05:15:00Z","snapshot_observed_at":"2026-07-06T22:53:24.585766Z","submitted_at":"2026-04-06T05:15:00Z","title":"ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-05-10T20:25:58.113363Z"},"links":{"citing_paper":"/paper/2604.04426"},"observation_digest":"sha256:d537da132082c9c88110d96d1061d663f4b1d8ee8a18a394a9c6d3bd33cfadfd","observation_id":"a5123134-8534-4417-966f-2853b6f81826","resolution":{"observed_at":"2026-05-10T21:55:53.055038Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2510.15994","doi":"10.48550/arxiv.2510.15994","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Zhang, Z","venue":"arXiv (Cornell University)","work_id":"988cfe85-3eea-4356-8fc1-fe54e5b4b81d","year":2025},"citing_paper":{"arxiv_id":"2604.04426","last_updated":"2026-04-06T05:15:00Z","snapshot_observed_at":"2026-07-06T22:53:24.585766Z","submitted_at":"2026-04-06T05:15:00Z","title":"ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-05-10T20:25:58.113363Z"},"links":{"citing_paper":"/paper/2604.04426"},"observation_digest":"sha256:cee69a2fe102d35c17b1a076dd50edebc13c8e6ebe42ff599dc420189ec1786d","observation_id":"0a06e5e1-d0ec-4d6e-ba1f-a587435c3bf3","resolution":{"observed_at":"2026-05-10T21:55:52.977762Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Mitre att&ck framework","venue":null,"work_id":"6c65de8c-a91b-4429-9151-f0b4d737c224","year":2024},"citing_paper":{"arxiv_id":"2604.04426","last_updated":"2026-04-06T05:15:00Z","snapshot_observed_at":"2026-07-06T22:53:24.585766Z","submitted_at":"2026-04-06T05:15:00Z","title":"ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-05-10T20:25:58.113363Z"},"links":{"citing_paper":"/paper/2604.04426"},"observation_digest":"sha256:b0caca77edaa19ea6672ad7fbebf78674ec722c43c48e9b3338cd395aad862c1","observation_id":"169569fd-5785-4258-a957-a587f1f2dad0","resolution":{"observed_at":"2026-05-16T01:32:05.303330Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"From allies to adversaries: Manipulating llm tool-calling through adversarial injection","venue":null,"work_id":"1c80635e-838d-4a2f-93af-0c98bc5f2510","year":2025},"citing_paper":{"arxiv_id":"2604.04426","last_updated":"2026-04-06T05:15:00Z","snapshot_observed_at":"2026-07-06T22:53:24.585766Z","submitted_at":"2026-04-06T05:15:00Z","title":"ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-05-10T20:25:58.113363Z"},"links":{"citing_paper":"/paper/2604.04426"},"observation_digest":"sha256:860d47417ef4a9e4c86d01cf5d1b5bdd8f47d7e7d47c0f17c804e01d523dcaaf","observation_id":"fee4a0ea-2267-4b6d-991a-2666f72c0ddd","resolution":{"observed_at":"2026-05-16T01:32:05.307144Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.19951","last_updated":"2025-04-28T16:22:21Z","snapshot_observed_at":"2026-08-07T15:58:32.775937Z","submitted_at":"2025-04-28T16:22:21Z","title":"Securing GenAI Multi-Agent Systems Against Tool Squatting: A Zero Trust Registry-Based Approach","version":1},"cited_work":{"arxiv_id":"2504.19951","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2504.19951","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Securing genai multi-agent systems against tool squatting: A zero trust registry-based approach","venue":null,"work_id":"ff57a198-75c6-4476-818a-927078df4460","year":2025},"citing_paper":{"arxiv_id":"2604.04426","last_updated":"2026-04-06T05:15:00Z","snapshot_observed_at":"2026-07-06T22:53:24.585766Z","submitted_at":"2026-04-06T05:15:00Z","title":"ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-05-10T20:25:58.113363Z"},"links":{"cited_paper":"/paper/2504.19951","citing_paper":"/paper/2604.04426"},"observation_digest":"sha256:b88f518798887474a646edd223d372e91d7e9d7ed370e691cccaa6f3579cc488","observation_id":"e0277e4d-6285-4784-b52d-84bcfeb043d2","resolution":{"observed_at":"2026-05-10T21:55:52.991265Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.17401","last_updated":"2025-05-31T18:34:01Z","snapshot_observed_at":"2026-08-01T16:54:45.609883Z","submitted_at":"2024-10-22T20:18:26Z","title":"AdvAgent: Controllable Blackbox Red-teaming on Web Agents","version":4},"cited_work":{"arxiv_id":"2410.17401","doi":null,"metadata_source":"pith","pith_arxiv_id":"2410.17401","snapshot_observed_at":"2026-07-10T12:27:04.225516Z","title":"Ad- vweb: Controllable black-box attacks on vlm-powered web agents","venue":"cs.CR","work_id":"2a343e0b-c7ca-43e4-a88b-e942d6efea85","year":2024},"citing_paper":{"arxiv_id":"2604.04426","last_updated":"2026-04-06T05:15:00Z","snapshot_observed_at":"2026-07-06T22:53:24.585766Z","submitted_at":"2026-04-06T05:15:00Z","title":"ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-05-10T20:25:58.113363Z"},"links":{"cited_paper":"/paper/2410.17401","citing_paper":"/paper/2604.04426"},"observation_digest":"sha256:c7a0db95742404b26afe3257056798f88af3f422ceb6438727ffe7d5cb0e59b9","observation_id":"e104e959-3b76-41c6-8dae-fc303042de65","resolution":{"observed_at":"2026-05-10T21:55:52.954590Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"ramparts: Fast rust mcp scanner","venue":null,"work_id":"0883ca01-1806-4bf2-a41e-4f46ae64e653","year":2025},"citing_paper":{"arxiv_id":"2604.04426","last_updated":"2026-04-06T05:15:00Z","snapshot_observed_at":"2026-07-06T22:53:24.585766Z","submitted_at":"2026-04-06T05:15:00Z","title":"ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-05-10T20:25:58.113363Z"},"links":{"citing_paper":"/paper/2604.04426"},"observation_digest":"sha256:ae82a99a145eee13b8adb15b35550474c156cb974f076dcd6433c1e9f9c273d5","observation_id":"87d04d91-7b08-4f0c-aef4-d3955baf7723","resolution":{"observed_at":"2026-05-16T01:32:05.354341Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Suricata: Network ids/ips and security monitoring engine","venue":null,"work_id":"b38ede28-3cce-4713-8ea1-9457ae28986c","year":null},"citing_paper":{"arxiv_id":"2604.04426","last_updated":"2026-04-06T05:15:00Z","snapshot_observed_at":"2026-07-06T22:53:24.585766Z","submitted_at":"2026-04-06T05:15:00Z","title":"ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-05-10T20:25:58.113363Z"},"links":{"citing_paper":"/paper/2604.04426"},"observation_digest":"sha256:1ba1bd3ac7c6b3d3bca1b09d92d6497d17e58ef79c1b4935c89a48f73e887aa9","observation_id":"81ac1f47-b054-4e53-ad23-b57c26d9341d","resolution":{"observed_at":"2026-05-16T01:32:05.323152Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Safe- nid: Self-attention with normalizing-flow encodings for network intrusion detection.Transactions on Machine Learning Research","venue":null,"work_id":"0d66c3fd-d428-43ed-936e-30cb6870f7f9","year":2025},"citing_paper":{"arxiv_id":"2604.04426","last_updated":"2026-04-06T05:15:00Z","snapshot_observed_at":"2026-07-06T22:53:24.585766Z","submitted_at":"2026-04-06T05:15:00Z","title":"ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-05-10T20:25:58.113363Z"},"links":{"citing_paper":"/paper/2604.04426"},"observation_digest":"sha256:93076d3d71584e0f4426aa8ad8f9a70116be8a450a38b3d672c31d14d4d1471b","observation_id":"a9e4b492-f20f-4d5e-a585-bf131e424250","resolution":{"observed_at":"2026-05-16T01:32:05.327045Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"19825db0-9b1b-467e-849e-1aa29555c75f","year":null},"citing_paper":{"arxiv_id":"2604.04426","last_updated":"2026-04-06T05:15:00Z","snapshot_observed_at":"2026-07-06T22:53:24.585766Z","submitted_at":"2026-04-06T05:15:00Z","title":"ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-05-10T20:25:58.113363Z"},"links":{"citing_paper":"/paper/2604.04426"},"observation_digest":"sha256:b556ef31fed5c1bad2bb052b1c345d36c959ceb598d782713e783b62113555f4","observation_id":"78b5e2ea-2dab-43fb-8c81-5208e0f867a8","resolution":{"observed_at":"2026-05-16T01:32:05.339473Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"benign\" if no attack detected. Nothing else should be returned.,→","venue":null,"work_id":"0b4754c5-078f-4f48-a63f-fcaf8dd1f5fe","year":1915},"citing_paper":{"arxiv_id":"2604.04426","last_updated":"2026-04-06T05:15:00Z","snapshot_observed_at":"2026-07-06T22:53:24.585766Z","submitted_at":"2026-04-06T05:15:00Z","title":"ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-05-10T20:25:58.113363Z"},"links":{"citing_paper":"/paper/2604.04426"},"observation_digest":"sha256:1497beb3e198c45431707b982622e88e135edfedf814f798b6ae8645ea86e51b","observation_id":"4627ce96-eec5-4412-baa9-cc20aa33b45a","resolution":{"observed_at":"2026-05-16T01:32:05.335627Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Could you use the`get_current_time`tool to find out what the local time is in'Asia/Kolkata'? I need to schedule a call","venue":null,"work_id":"6141bd01-59f6-4b12-bd0f-62c90d70b952","year":null},"citing_paper":{"arxiv_id":"2604.04426","last_updated":"2026-04-06T05:15:00Z","snapshot_observed_at":"2026-07-06T22:53:24.585766Z","submitted_at":"2026-04-06T05:15:00Z","title":"ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-05-10T20:25:58.113363Z"},"links":{"citing_paper":"/paper/2604.04426"},"observation_digest":"sha256:58aa36831ddfdffc7312654cbd676bf1954ae4a8a95f4bbde679cd6bb7924edd","observation_id":"84fc7b55-bf0e-4b6f-ba22-4efc6bc89e85","resolution":{"observed_at":"2026-05-16T01:32:05.331461Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"f13c65ae-a412-4fcb-8ed6-349581c156db","year":null},"citing_paper":{"arxiv_id":"2604.04426","last_updated":"2026-04-06T05:15:00Z","snapshot_observed_at":"2026-07-06T22:53:24.585766Z","submitted_at":"2026-04-06T05:15:00Z","title":"ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-05-10T20:25:58.113363Z"},"links":{"citing_paper":"/paper/2604.04426"},"observation_digest":"sha256:70210d38e568e67ff0514884b34a13059447eed5f606eb94aa44ada0ade05fe7","observation_id":"6e316e94-6d74-4d34-a972-15200af63c59","resolution":{"observed_at":"2026-05-16T01:32:05.350465Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"0f9d91ae-5b35-4687-983c-21abf85c6aea","year":null},"citing_paper":{"arxiv_id":"2604.04426","last_updated":"2026-04-06T05:15:00Z","snapshot_observed_at":"2026-07-06T22:53:24.585766Z","submitted_at":"2026-04-06T05:15:00Z","title":"ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-05-10T20:25:58.113363Z"},"links":{"citing_paper":"/paper/2604.04426"},"observation_digest":"sha256:286022112cd0923a796d27698f0c69fd59b042433b9a108a76c9ce34d0f25246","observation_id":"a386e89a-bba5-4e76-8e2b-cb3190c11b2b","resolution":{"observed_at":"2026-05-16T01:32:05.358153Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"(dozens of repeated SNMP request/response pairs)","venue":null,"work_id":"e6632837-555c-4dcc-befa-91f211cc4863","year":null},"citing_paper":{"arxiv_id":"2604.04426","last_updated":"2026-04-06T05:15:00Z","snapshot_observed_at":"2026-07-06T22:53:24.585766Z","submitted_at":"2026-04-06T05:15:00Z","title":"ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-05-10T20:25:58.113363Z"},"links":{"citing_paper":"/paper/2604.04426"},"observation_digest":"sha256:14f565e37a5987c8608a6c18d192ba6f2ecd2a77464eaebad074683f38432fd9","observation_id":"135fadc6-9b4e-4827-91b4-0f3cfc0cfb72","resolution":{"observed_at":"2026-05-16T01:32:05.367504Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"f8c43f45-d3e8-4217-8035-ffc90471671d","year":null},"citing_paper":{"arxiv_id":"2604.04426","last_updated":"2026-04-06T05:15:00Z","snapshot_observed_at":"2026-07-06T22:53:24.585766Z","submitted_at":"2026-04-06T05:15:00Z","title":"ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-05-10T20:25:58.113363Z"},"links":{"citing_paper":"/paper/2604.04426"},"observation_digest":"sha256:bd43f3be7a512d2fd21ffe0c887c5c65c4b207300d9ac3cd0c7ab53940537327","observation_id":"83727bbc-c5b6-4dc7-b726-db7774cb1c9d","resolution":{"observed_at":"2026-05-16T01:32:05.376004Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"63ce0f4c-b624-4389-8097-097bc4dbec3c","year":null},"citing_paper":{"arxiv_id":"2604.04426","last_updated":"2026-04-06T05:15:00Z","snapshot_observed_at":"2026-07-06T22:53:24.585766Z","submitted_at":"2026-04-06T05:15:00Z","title":"ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-05-10T20:25:58.113363Z"},"links":{"citing_paper":"/paper/2604.04426"},"observation_digest":"sha256:3129b009f3ae52ddfc3e2f9cee89b7750415115d5b86eaae1c45e374be64b547","observation_id":"56ff15b9-0301-4818-b807-9a2aa0937be1","resolution":{"observed_at":"2026-05-16T01:32:05.371797Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"00c834cd-f997-4d81-9d2d-732692d49403","year":null},"citing_paper":{"arxiv_id":"2604.04426","last_updated":"2026-04-06T05:15:00Z","snapshot_observed_at":"2026-07-06T22:53:24.585766Z","submitted_at":"2026-04-06T05:15:00Z","title":"ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-05-10T20:25:58.113363Z"},"links":{"citing_paper":"/paper/2604.04426"},"observation_digest":"sha256:e92e4490b2d119b303a1e754547c9385a71b27b08acd70cc0ca3ac2a912a5d0c","observation_id":"17bb21f4-c57d-4e1f-abb9-f502738b89cf","resolution":{"observed_at":"2026-05-16T01:32:05.319254Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"f2f96fcc-2ea9-41ee-ac0a-d7db8083019a","year":null},"citing_paper":{"arxiv_id":"2604.04426","last_updated":"2026-04-06T05:15:00Z","snapshot_observed_at":"2026-07-06T22:53:24.585766Z","submitted_at":"2026-04-06T05:15:00Z","title":"ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-05-10T20:25:58.113363Z"},"links":{"citing_paper":"/paper/2604.04426"},"observation_digest":"sha256:013110eb8c63e9987dee0ad38573299baffc77c2663c5306cd086a1b31a4a718","observation_id":"8f8e9fa6-de61-4ca7-bcd1-15b58fb4e8ea","resolution":{"observed_at":"2026-05-16T01:32:05.343030Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"timezone","venue":null,"work_id":"4aeb0365-0822-480a-bdcb-a6751812a441","year":2025},"citing_paper":{"arxiv_id":"2604.04426","last_updated":"2026-04-06T05:15:00Z","snapshot_observed_at":"2026-07-06T22:53:24.585766Z","submitted_at":"2026-04-06T05:15:00Z","title":"ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-05-10T20:25:58.113363Z"},"links":{"citing_paper":"/paper/2604.04426"},"observation_digest":"sha256:24fe523d74a1a10012468c834853af8879e11fe909d375604082e806fc0af5af","observation_id":"590e4174-4548-4f3f-bd93-45c6f294e699","resolution":{"observed_at":"2026-05-16T01:32:05.346642Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"single-flux","venue":null,"work_id":"27583e9e-9a3e-4eff-8818-8cc399462cd3","year":2026},"citing_paper":{"arxiv_id":"2604.04426","last_updated":"2026-04-06T05:15:00Z","snapshot_observed_at":"2026-07-06T22:53:24.585766Z","submitted_at":"2026-04-06T05:15:00Z","title":"ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-05-10T20:25:58.113363Z"},"links":{"citing_paper":"/paper/2604.04426"},"observation_digest":"sha256:4ff523be54b82a5d5ab1b3535e8c09f08fe09844796ac3818ce02a4a0389cbeb","observation_id":"f6b5b861-7799-4130-946f-a324f2644929","resolution":{"observed_at":"2026-05-16T01:32:05.362947Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2604.04426","last_updated":"2026-04-06T05:15:00Z","latest_version":1,"primary_category":"cs.AI","snapshot_observed_at":"2026-07-06T22:53:24.585766Z","submitted_at":"2026-04-06T05:15:00Z","title":"ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems"},"reference_resolution":{"displayed":29,"state_counts":{"malformed_identifier":0,"metadata_mismatch":2,"parse_uncertain":0,"unresolved":7,"verified_exact":8,"verified_fuzzy":12},"total_outbound_references":29},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"thesis":"As of 11 August 2026, this Paper Citation Record lists 29 of 29 outbound references and 1 inbound Pith citation observation for arXiv:2604.04426."}