{"as_of":"2026-08-11T05:20:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:2ccf64d9fdc37fdfa285de775a1621e250b5fd8806bdc82211e85332e7d04f54","coverage":[{"denominator":28,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":28,"source":"paper_references, paper_reference_links","source_observed_at":"2026-05-10T17:57:59.918483Z","state":"measured"},{"denominator":29,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":29,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-10T06:31:04.303077+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-06-26T08:11:30.091859Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"pith","source_observed_at":"2026-07-04T10:59:47.026842Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2604.09747","last_updated":"2026-04-10T07:22:11Z","snapshot_observed_at":"2026-08-10T23:55:54.571799Z","submitted_at":"2026-04-10T07:22:11Z","title":"ADAM: A Systematic Data Extraction Attack on Agent Memory via Adaptive Querying","version":1},"cited_work":{"arxiv_id":"2604.09747","doi":null,"metadata_source":"pith","pith_arxiv_id":"2604.09747","snapshot_observed_at":"2026-07-04T10:59:47.026842Z","title":"ADAM: A Systematic Data Extraction Attack on Agent Memory via Adaptive Querying","venue":"cs.CR","work_id":"5dc4b2d7-c3c0-4a81-8610-86cc51e6a123","year":2026},"citing_paper":{"arxiv_id":"2606.23075","last_updated":"2026-06-22T09:23:50Z","snapshot_observed_at":"2026-08-02T06:16:18.387353Z","submitted_at":"2026-06-22T09:23:50Z","title":"Safety in Self-Evolving LLM Agent Systems: Threats, Amplification, and Case Studies","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-06-26T08:11:30.091859Z"},"links":{"cited_paper":"/paper/2604.09747","citing_paper":"/paper/2606.23075"},"observation_digest":"sha256:65a886e48660b48fd90a302ed4d945fd5002555cede28a0dac83f40ecc45ff19","observation_id":"c5d4d95f-317a-4522-ad81-b235bf09bfea","resolution":{"observed_at":"2026-07-04T10:59:47.028391Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2604.09747/citation-record","integrity":"/paper/2604.09747/integrity","json":"/paper/2604.09747/citation-record.json","paper":"/paper/2604.09747"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2309.14348","last_updated":"2024-06-12T00:27:06Z","snapshot_observed_at":"2026-07-06T16:23:26.584450Z","submitted_at":"2023-09-18T02:07:22Z","title":"Defending Against Alignment-Breaking Attacks via Robustly Aligned LLM","version":3},"cited_work":{"arxiv_id":"2309.14348","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2309.14348","snapshot_observed_at":"2026-06-30T13:14:40.788988Z","title":"Defending against alignment-breaking attacks via robustly aligned llm","venue":null,"work_id":"d7a9a1c5-eebe-42d4-ba4d-b7f932432274","year":2023},"citing_paper":{"arxiv_id":"2604.09747","last_updated":"2026-04-10T07:22:11Z","snapshot_observed_at":"2026-08-10T23:55:54.571799Z","submitted_at":"2026-04-10T07:22:11Z","title":"ADAM: A Systematic Data Extraction Attack on Agent Memory via Adaptive Querying","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-05-10T17:57:59.918483Z"},"links":{"cited_paper":"/paper/2309.14348","citing_paper":"/paper/2604.09747"},"observation_digest":"sha256:41e2238a26a0c384f11d2529691d2514adaedcbd1c24789119394234886a6991","observation_id":"751e182f-d888-4e85-bff5-6d7c21639e53","resolution":{"observed_at":"2026-05-11T05:45:57.624741Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.19413","last_updated":"2025-04-28T01:46:35Z","snapshot_observed_at":"2026-08-02T07:32:11.339534Z","submitted_at":"2025-04-28T01:46:35Z","title":"Mem0: Building Production-Ready AI Agents with Scalable Long-Term Memory","version":1},"cited_work":{"arxiv_id":"2504.19413","doi":"10.48550/arxiv.2504.19413","metadata_source":"pith","pith_arxiv_id":"2504.19413","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Mem0: Building Production-Ready AI Agents with Scalable Long-Term Memory","venue":"cs.CL","work_id":"a5aed26c-a248-48b6-a59e-f7693fcb180a","year":2025},"citing_paper":{"arxiv_id":"2604.09747","last_updated":"2026-04-10T07:22:11Z","snapshot_observed_at":"2026-08-10T23:55:54.571799Z","submitted_at":"2026-04-10T07:22:11Z","title":"ADAM: A Systematic Data Extraction Attack on Agent Memory via Adaptive Querying","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-05-10T17:57:59.918483Z"},"links":{"cited_paper":"/paper/2504.19413","citing_paper":"/paper/2604.09747"},"observation_digest":"sha256:e6e5a7deeb91bfcb07ab321660703b692fa6b852c00ed28b2ba0f88f8a07b5c4","observation_id":"4d5e918a-e414-4215-9174-df52865e9e4f","resolution":{"observed_at":"2026-05-11T05:45:57.708451Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2409.08045","last_updated":"2024-09-12T13:50:22Z","snapshot_observed_at":"2026-08-05T17:51:57.166067Z","submitted_at":"2024-09-12T13:50:22Z","title":"Unleashing Worms and Extracting Data: Escalating the Outcome of Attacks against RAG-based Inference in Scale and Severity Using Jailbreaking","version":1},"cited_work":{"arxiv_id":"2409.08045","doi":"10.48550/arxiv.2409.08045","metadata_source":"arxiv_reference","pith_arxiv_id":"2409.08045","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2409.08045 , year=","venue":"arXiv (Cornell University)","work_id":"c69940fa-8dec-40a0-b7f1-ca86ff164541","year":2024},"citing_paper":{"arxiv_id":"2604.09747","last_updated":"2026-04-10T07:22:11Z","snapshot_observed_at":"2026-08-10T23:55:54.571799Z","submitted_at":"2026-04-10T07:22:11Z","title":"ADAM: A Systematic Data Extraction Attack on Agent Memory via Adaptive Querying","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-05-10T17:57:59.918483Z"},"links":{"cited_paper":"/paper/2409.08045","citing_paper":"/paper/2604.09747"},"observation_digest":"sha256:24edd97aa8c3469eb110257b5be569610c552a214ec5dd9d5522c3ccdca680f8","observation_id":"2203f6b0-c840-45fa-89a4-579d7ffa43c6","resolution":{"observed_at":"2026-05-11T05:45:57.680222Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-11T04:47:50.280188Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"cited_work":{"arxiv_id":"2412.18295","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2412.18295","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"arXiv preprint arXiv:2412.18295 , year=","venue":null,"work_id":"7445e3e5-f91a-4524-99f9-6b0f536017cc","year":2025},"citing_paper":{"arxiv_id":"2604.09747","last_updated":"2026-04-10T07:22:11Z","snapshot_observed_at":"2026-08-10T23:55:54.571799Z","submitted_at":"2026-04-10T07:22:11Z","title":"ADAM: A Systematic Data Extraction Attack on Agent Memory via Adaptive Querying","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-05-10T17:57:59.918483Z"},"links":{"cited_paper":"/paper/2412.18295","citing_paper":"/paper/2604.09747"},"observation_digest":"sha256:8292404449991e7b3db5c42255b8ea2cc6adb866740d1468636e8dc5aeb1d837","observation_id":"0f87a458-9827-4d2a-9c74-dfa02ad46705","resolution":{"observed_at":"2026-05-11T05:45:57.658270Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2408.06361","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-03T11:18:03.724436Z","title":"Large language model agent in financial trading: A survey","venue":null,"work_id":"40c07626-55ea-4638-a028-aac7dce0c4a4","year":2024},"citing_paper":{"arxiv_id":"2604.09747","last_updated":"2026-04-10T07:22:11Z","snapshot_observed_at":"2026-08-10T23:55:54.571799Z","submitted_at":"2026-04-10T07:22:11Z","title":"ADAM: A Systematic Data Extraction Attack on Agent Memory via Adaptive Querying","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-05-10T17:57:59.918483Z"},"links":{"citing_paper":"/paper/2604.09747"},"observation_digest":"sha256:032e17b2b2a60a189c7401fc20e55cd90d34d76f8e8ed443000bf17be1f8428c","observation_id":"cf83c934-f01d-4c09-9ee9-cdd86038b2d4","resolution":{"observed_at":"2026-05-11T05:45:57.633726Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1802.09841","last_updated":"2018-02-27T12:02:33Z","snapshot_observed_at":"2026-07-06T06:25:35.999872Z","submitted_at":"2018-02-27T12:02:33Z","title":"Adversarial Active Learning for Deep Networks: a Margin Based Approach","version":1},"cited_work":{"arxiv_id":"1802.09841","doi":null,"metadata_source":"pith","pith_arxiv_id":"1802.09841","snapshot_observed_at":"2026-07-08T21:35:37.621008Z","title":"Adversarial Active Learning for Deep Networks: a Margin Based Approach","venue":"cs.LG","work_id":"2549e0f4-543f-4276-82dd-cfaa56df38b3","year":2018},"citing_paper":{"arxiv_id":"2604.09747","last_updated":"2026-04-10T07:22:11Z","snapshot_observed_at":"2026-08-10T23:55:54.571799Z","submitted_at":"2026-04-10T07:22:11Z","title":"ADAM: A Systematic Data Extraction Attack on Agent Memory via Adaptive Querying","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-05-10T17:57:59.918483Z"},"links":{"cited_paper":"/paper/1802.09841","citing_paper":"/paper/2604.09747"},"observation_digest":"sha256:cf5d92783d376e41b68fd3bdcefa304bfa2e4a18cf5b6a1fa3621c0b4ca8f59a","observation_id":"03cebfc9-60e4-44e2-a376-3305b85e58d8","resolution":{"observed_at":"2026-05-11T05:45:57.651278Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2508.07407","last_updated":"2025-08-31T14:55:05Z","snapshot_observed_at":"2026-08-10T13:27:07.744131Z","submitted_at":"2025-08-10T16:07:32Z","title":"A Comprehensive Survey of Self-Evolving AI Agents: A New Paradigm Bridging Foundation Models and Lifelong Agentic Systems","version":2},"cited_work":{"arxiv_id":"2508.07407","doi":"10.48550/arxiv.2508.07407","metadata_source":"pith","pith_arxiv_id":"2508.07407","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"A Comprehensive Survey of Self-Evolving AI Agents: A New Paradigm Bridging Foundation Models and Lifelong Agentic Systems","venue":"cs.AI","work_id":"10037f9e-62d9-4dd1-a9c1-44be77032524","year":2025},"citing_paper":{"arxiv_id":"2604.09747","last_updated":"2026-04-10T07:22:11Z","snapshot_observed_at":"2026-08-10T23:55:54.571799Z","submitted_at":"2026-04-10T07:22:11Z","title":"ADAM: A Systematic Data Extraction Attack on Agent Memory via Adaptive Querying","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-05-10T17:57:59.918483Z"},"links":{"cited_paper":"/paper/2508.07407","citing_paper":"/paper/2604.09747"},"observation_digest":"sha256:e15794e3517b2d6202ed403185a4f8c66188f683c94951b0ce96e3939b316ab9","observation_id":"e00b0dbd-f8ea-47ca-a3d7-f91c84d2ba3d","resolution":{"observed_at":"2026-05-15T23:21:42.844044Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.21716","last_updated":"2025-04-30T15:00:20Z","snapshot_observed_at":"2026-08-07T15:57:53.851099Z","submitted_at":"2025-04-30T15:00:20Z","title":"LLM-Empowered Embodied Agent for Memory-Augmented Task Planning in Household Robotics","version":1},"cited_work":{"arxiv_id":"2504.21716","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2504.21716","snapshot_observed_at":"2026-07-03T05:07:38.979625Z","title":"arXiv preprint arXiv:2504.21716 (2025)","venue":null,"work_id":"a8a21624-6038-46d9-ad95-76f141e05204","year":2025},"citing_paper":{"arxiv_id":"2604.09747","last_updated":"2026-04-10T07:22:11Z","snapshot_observed_at":"2026-08-10T23:55:54.571799Z","submitted_at":"2026-04-10T07:22:11Z","title":"ADAM: A Systematic Data Extraction Attack on Agent Memory via Adaptive Querying","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-05-10T17:57:59.918483Z"},"links":{"cited_paper":"/paper/2504.21716","citing_paper":"/paper/2604.09747"},"observation_digest":"sha256:7791d15e1e218bb59a9c9748d9e22d5e919e8343fb03f0400fcca2571fbf766b","observation_id":"083ffe2e-8187-4e5c-a6ca-c01bc7b14ee7","resolution":{"observed_at":"2026-05-11T05:45:57.700046Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.06825","last_updated":"2023-10-10T17:54:58Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-10-10T17:54:58Z","title":"Mistral 7B","version":1},"cited_work":{"arxiv_id":"2310.06825","doi":"10.48550/arxiv.2310.06825","metadata_source":"pith","pith_arxiv_id":"2310.06825","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Mistral 7B","venue":"cs.CL","work_id":"eb5e1305-ad11-4875-ad8d-ad8b8f697599","year":2023},"citing_paper":{"arxiv_id":"2604.09747","last_updated":"2026-04-10T07:22:11Z","snapshot_observed_at":"2026-08-10T23:55:54.571799Z","submitted_at":"2026-04-10T07:22:11Z","title":"ADAM: A Systematic Data Extraction Attack on Agent Memory via Adaptive Querying","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-05-10T17:57:59.918483Z"},"links":{"cited_paper":"/paper/2310.06825","citing_paper":"/paper/2604.09747"},"observation_digest":"sha256:67ce01b5b3a107d19d935bab86f2ffb2ad9b29a6a7e5edd0c51323cc1fce9471","observation_id":"07255138-ef1b-49e4-8486-4a513533991d","resolution":{"observed_at":"2026-05-11T05:45:57.628644Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T22:08:12.954417+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T22:08:12.954417+00:00","source":"crossref_status_cache"},{"observed_at":"2026-08-10T22:08:12.954417+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.02705","last_updated":"2025-02-04T19:47:09Z","snapshot_observed_at":"2026-07-06T16:15:00.517258Z","submitted_at":"2023-09-06T04:37:20Z","title":"Certifying LLM Safety against Adversarial Prompting","version":4},"cited_work":{"arxiv_id":"2309.02705","doi":null,"metadata_source":"pith","pith_arxiv_id":"2309.02705","snapshot_observed_at":"2026-07-09T10:26:11.131634Z","title":"Certifying llm safety against adversar- ial prompting","venue":"cs.CL","work_id":"d19a91a9-d209-412c-b9b6-c7600e55ccf9","year":2023},"citing_paper":{"arxiv_id":"2604.09747","last_updated":"2026-04-10T07:22:11Z","snapshot_observed_at":"2026-08-10T23:55:54.571799Z","submitted_at":"2026-04-10T07:22:11Z","title":"ADAM: A Systematic Data Extraction Attack on Agent Memory via Adaptive Querying","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-05-10T17:57:59.918483Z"},"links":{"cited_paper":"/paper/2309.02705","citing_paper":"/paper/2604.09747"},"observation_digest":"sha256:52b5f2b472770c294c35f679e31eee39d7702ff67a081516fa0d731d5b15b9df","observation_id":"67eb77b1-719c-4bfc-958c-616813410f69","resolution":{"observed_at":"2026-05-11T05:45:57.667592Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2412.17259","last_updated":"2024-12-23T04:02:46Z","snapshot_observed_at":"2026-07-06T20:11:55.722067Z","submitted_at":"2024-12-23T04:02:46Z","title":"LegalAgentBench: Evaluating LLM Agents in Legal Domain","version":1},"cited_work":{"arxiv_id":"2412.17259","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2412.17259","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Legalagentbench: Evaluating llm agents in legal domain","venue":null,"work_id":"b2e0f240-e349-4109-93f9-baac16e5cece","year":2024},"citing_paper":{"arxiv_id":"2604.09747","last_updated":"2026-04-10T07:22:11Z","snapshot_observed_at":"2026-08-10T23:55:54.571799Z","submitted_at":"2026-04-10T07:22:11Z","title":"ADAM: A Systematic Data Extraction Attack on Agent Memory via Adaptive Querying","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-05-10T17:57:59.918483Z"},"links":{"cited_paper":"/paper/2412.17259","citing_paper":"/paper/2604.09747"},"observation_digest":"sha256:9f1074870dfb4aff2a1adc1b7b058cd5465f96c5c6788ef85bee0e4cc1ee5ecf","observation_id":"9530e74a-7c18-45c6-abf6-8bb4359c6420","resolution":{"observed_at":"2026-05-11T05:45:57.687924Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2409.00872","last_updated":"2025-04-20T16:01:12Z","snapshot_observed_at":"2026-08-05T16:11:26.145340Z","submitted_at":"2024-09-01T23:36:34Z","title":"Self-evolving Agents with reflective and memory-augmented abilities","version":2},"cited_work":{"arxiv_id":"2409.00872","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2409.00872","snapshot_observed_at":"2026-07-03T20:58:57.380235Z","title":"arXiv preprint arXiv:2409.00872 , year=","venue":null,"work_id":"a2736c45-752c-4db6-b704-8c313d03f149","year":2024},"citing_paper":{"arxiv_id":"2604.09747","last_updated":"2026-04-10T07:22:11Z","snapshot_observed_at":"2026-08-10T23:55:54.571799Z","submitted_at":"2026-04-10T07:22:11Z","title":"ADAM: A Systematic Data Extraction Attack on Agent Memory via Adaptive Querying","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-05-10T17:57:59.918483Z"},"links":{"cited_paper":"/paper/2409.00872","citing_paper":"/paper/2604.09747"},"observation_digest":"sha256:4e61c0d974ecf6fce3a37f00b5faec65d7bb393aad6ac554995871dfe3ffcf76","observation_id":"5cea52e8-2fd2-485a-aa0f-0811885a6a29","resolution":{"observed_at":"2026-05-11T05:45:57.602912Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2409.11295","last_updated":"2025-03-12T20:54:00Z","snapshot_observed_at":"2026-08-06T11:52:38.289574Z","submitted_at":"2024-09-17T15:49:44Z","title":"EIA: Environmental Injection Attack on Generalist Web Agents for Privacy Leakage","version":5},"cited_work":{"arxiv_id":"2409.11295","doi":"10.48550/arxiv.2409.11295","metadata_source":"pith","pith_arxiv_id":"2409.11295","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Eia: Environmental injection attack on generalist web agents for privacy leakage","venue":"cs.CR","work_id":"648feaca-04ca-4033-83b0-94571d951968","year":2024},"citing_paper":{"arxiv_id":"2604.09747","last_updated":"2026-04-10T07:22:11Z","snapshot_observed_at":"2026-08-10T23:55:54.571799Z","submitted_at":"2026-04-10T07:22:11Z","title":"ADAM: A Systematic Data Extraction Attack on Agent Memory via Adaptive Querying","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-05-10T17:57:59.918483Z"},"links":{"cited_paper":"/paper/2409.11295","citing_paper":"/paper/2604.09747"},"observation_digest":"sha256:f0909351c35cf32a4fdd5663113822fe31b22b0bf7b508db3ad152ad1b6794c4","observation_id":"6ccfe973-97ea-404d-a1d6-460e3f42b1b4","resolution":{"observed_at":"2026-05-11T05:45:57.598580Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.01990","last_updated":"2025-08-02T12:44:02Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-03-31T18:00:29Z","title":"Advances and Challenges in Foundation Agents: From Brain-Inspired Intelligence to Evolutionary, Collaborative, and Safe Systems","version":2},"cited_work":{"arxiv_id":"2504.01990","doi":"10.48550/arxiv.2504.01990","metadata_source":"pith","pith_arxiv_id":"2504.01990","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Advances and Challenges in Foundation Agents: From Brain-Inspired Intelligence to Evolutionary, Collaborative, and Safe Systems","venue":"cs.AI","work_id":"984dfe5e-1c5c-4b65-920e-15121a85ee7e","year":2025},"citing_paper":{"arxiv_id":"2604.09747","last_updated":"2026-04-10T07:22:11Z","snapshot_observed_at":"2026-08-10T23:55:54.571799Z","submitted_at":"2026-04-10T07:22:11Z","title":"ADAM: A Systematic Data Extraction Attack on Agent Memory via Adaptive Querying","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-05-10T17:57:59.918483Z"},"links":{"cited_paper":"/paper/2504.01990","citing_paper":"/paper/2604.09747"},"observation_digest":"sha256:908c231c09f00215395b12ff10c193995e20817506386b63cb93ffc6b03d0496","observation_id":"0be60906-ab53-42b9-bd10-63ff203f1f45","resolution":{"observed_at":"2026-05-11T05:45:57.547512Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Query rewriting in retrieval-augmented large language models","venue":null,"work_id":"2676197f-18e7-4538-a955-d09c18d83c95","year":2023},"citing_paper":{"arxiv_id":"2604.09747","last_updated":"2026-04-10T07:22:11Z","snapshot_observed_at":"2026-08-10T23:55:54.571799Z","submitted_at":"2026-04-10T07:22:11Z","title":"ADAM: A Systematic Data Extraction Attack on Agent Memory via Adaptive Querying","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-05-10T17:57:59.918483Z"},"links":{"citing_paper":"/paper/2604.09747"},"observation_digest":"sha256:c1ad043f81b0f5c20f0324b6ca208d50e0a99ef07ab8b1be47b9fbca52d698d1","observation_id":"b84a2e89-6678-4506-95b3-532284784310","resolution":{"observed_at":"2026-05-17T07:54:17.443216Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.17753","last_updated":"2024-02-27T18:42:31Z","snapshot_observed_at":"2026-08-06T11:15:36.554174Z","submitted_at":"2024-02-27T18:42:31Z","title":"Evaluating Very Long-Term Conversational Memory of LLM Agents","version":1},"cited_work":{"arxiv_id":"2402.17753","doi":"10.18653/v1/2024.acl-long.747arxiv:2402.17753","metadata_source":"pith","pith_arxiv_id":"2402.17753","snapshot_observed_at":"2026-07-11T11:50:26.030339Z","title":"Evaluating Very Long-Term Conversational Memory of LLM Agents","venue":"cs.CL","work_id":"2d8c9fb7-9ace-4925-8fe1-f4e44625d04c","year":2024},"citing_paper":{"arxiv_id":"2604.09747","last_updated":"2026-04-10T07:22:11Z","snapshot_observed_at":"2026-08-10T23:55:54.571799Z","submitted_at":"2026-04-10T07:22:11Z","title":"ADAM: A Systematic Data Extraction Attack on Agent Memory via Adaptive Querying","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-05-10T17:57:59.918483Z"},"links":{"cited_paper":"/paper/2402.17753","citing_paper":"/paper/2604.09747"},"observation_digest":"sha256:e898fc94a231a65dfef8d9ac639839eb1481e1f6222ebf44741e2a8534dd1c9a","observation_id":"f257f52f-229d-4dd3-8934-789691e0a5d3","resolution":{"observed_at":"2026-05-12T08:05:17.171076Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.17840","last_updated":"2024-10-06T21:25:41Z","snapshot_observed_at":"2026-08-06T11:51:24.278910Z","submitted_at":"2024-02-27T19:08:05Z","title":"Follow My Instruction and Spill the Beans: Scalable Data Extraction from Retrieval-Augmented Generation Systems","version":3},"cited_work":{"arxiv_id":"2402.17840","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2402.17840","snapshot_observed_at":"2026-07-04T14:09:53.294873Z","title":"Follow my instruction and spill the beans: Scalable data extraction from retrieval-augmented generation systems","venue":null,"work_id":"82fa8692-3738-4fbe-99b6-f0b895f49150","year":2024},"citing_paper":{"arxiv_id":"2604.09747","last_updated":"2026-04-10T07:22:11Z","snapshot_observed_at":"2026-08-10T23:55:54.571799Z","submitted_at":"2026-04-10T07:22:11Z","title":"ADAM: A Systematic Data Extraction Attack on Agent Memory via Adaptive Querying","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-05-10T17:57:59.918483Z"},"links":{"cited_paper":"/paper/2402.17840","citing_paper":"/paper/2604.09747"},"observation_digest":"sha256:ea706d5d3c9df4e065ab2722d0e8195984ff87f4f16fbaf2ba518cde1f28b80c","observation_id":"96f781f4-4838-4c62-be3a-574b561abaf0","resolution":{"observed_at":"2026-05-11T05:45:57.588526Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Summary the savior: Harmful keyword and query-based summarization for llm jailbreak defense","venue":null,"work_id":"4811c9f3-7854-46de-be83-b0641f62fec6","year":2025},"citing_paper":{"arxiv_id":"2604.09747","last_updated":"2026-04-10T07:22:11Z","snapshot_observed_at":"2026-08-10T23:55:54.571799Z","submitted_at":"2026-04-10T07:22:11Z","title":"ADAM: A Systematic Data Extraction Attack on Agent Memory via Adaptive Querying","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-05-10T17:57:59.918483Z"},"links":{"citing_paper":"/paper/2604.09747"},"observation_digest":"sha256:52f75ab8d5c6d7009336a618b8670d279cef345cc60ef697dd1a3b7ef52b97c9","observation_id":"3a4c07cd-c7a5-471b-82df-f2ddcebe2b32","resolution":{"observed_at":"2026-05-17T07:54:17.446396Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1708.00489","last_updated":"2018-06-01T10:17:23Z","snapshot_observed_at":"2026-07-06T05:53:39.440274Z","submitted_at":"2017-08-01T19:50:53Z","title":"Active Learning for Convolutional Neural Networks: A Core-Set Approach","version":4},"cited_work":{"arxiv_id":"1708.00489","doi":"10.48550/arxiv.1708.00489","metadata_source":"pith","pith_arxiv_id":"1708.00489","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Active Learning for Convolutional Neural Networks: A Core-Set Approach","venue":"stat.ML","work_id":"64b057c0-f8b3-4d7a-9f16-e2880f8b501c","year":2017},"citing_paper":{"arxiv_id":"2604.09747","last_updated":"2026-04-10T07:22:11Z","snapshot_observed_at":"2026-08-10T23:55:54.571799Z","submitted_at":"2026-04-10T07:22:11Z","title":"ADAM: A Systematic Data Extraction Attack on Agent Memory via Adaptive Querying","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-05-10T17:57:59.918483Z"},"links":{"cited_paper":"/paper/1708.00489","citing_paper":"/paper/2604.09747"},"observation_digest":"sha256:a7f51d28978c77da9401e04fbbba9d729ca91135374731bcb2a16c36291a1aff","observation_id":"40b97204-2b24-4aea-97f1-f874347ca58d","resolution":{"observed_at":"2026-05-11T05:45:57.524791Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Ehragent: Code empowers large language models for few-shot complex tabular reasoning on electronic health records","venue":null,"work_id":"e073d03f-0806-4e98-8513-37fe8564ad54","year":2024},"citing_paper":{"arxiv_id":"2604.09747","last_updated":"2026-04-10T07:22:11Z","snapshot_observed_at":"2026-08-10T23:55:54.571799Z","submitted_at":"2026-04-10T07:22:11Z","title":"ADAM: A Systematic Data Extraction Attack on Agent Memory via Adaptive Querying","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-05-10T17:57:59.918483Z"},"links":{"citing_paper":"/paper/2604.09747"},"observation_digest":"sha256:3198f28d48b77f223a1bef9f77ca9f785d66fff1d8f4c5c2e5720f242fae1a5f","observation_id":"4e9650b3-d7be-45b0-9778-765f6bfc539f","resolution":{"observed_at":"2026-05-17T07:54:17.449810Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2501.09136","last_updated":"2026-04-01T15:51:06Z","snapshot_observed_at":"2026-08-07T12:36:27.102579Z","submitted_at":"2025-01-15T20:40:25Z","title":"Agentic Retrieval-Augmented Generation: A Survey on Agentic RAG","version":4},"cited_work":{"arxiv_id":"2501.09136","doi":"10.48550/arxiv.2501.09136","metadata_source":"pith","pith_arxiv_id":"2501.09136","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Agentic Retrieval-Augmented Generation: A Survey on Agentic RAG","venue":"cs.AI","work_id":"6edcfe5a-e498-4a2e-aa57-dcaa5ef20f86","year":2025},"citing_paper":{"arxiv_id":"2604.09747","last_updated":"2026-04-10T07:22:11Z","snapshot_observed_at":"2026-08-10T23:55:54.571799Z","submitted_at":"2026-04-10T07:22:11Z","title":"ADAM: A Systematic Data Extraction Attack on Agent Memory via Adaptive Querying","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-05-10T17:57:59.918483Z"},"links":{"cited_paper":"/paper/2501.09136","citing_paper":"/paper/2604.09747"},"observation_digest":"sha256:cbc6893cb769fc050cd5b992a9f88e56c93c279c963d6592be59677b6272961a","observation_id":"444065d5-576e-4e03-9dfb-5f45a9e04ae4","resolution":{"observed_at":"2026-05-13T03:26:34.894571Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2502.13172","last_updated":"2025-06-03T17:08:56Z","snapshot_observed_at":"2026-08-07T18:11:02.941133Z","submitted_at":"2025-02-17T19:55:53Z","title":"Unveiling Privacy Risks in LLM Agent Memory","version":2},"cited_work":{"arxiv_id":"2502.13172","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2502.13172","snapshot_observed_at":"2026-07-04T17:09:58.690916Z","title":"Unveiling privacy risks in llm agent memory","venue":null,"work_id":"f1732ade-fb49-4c36-a554-37ae8422a6db","year":2025},"citing_paper":{"arxiv_id":"2604.09747","last_updated":"2026-04-10T07:22:11Z","snapshot_observed_at":"2026-08-10T23:55:54.571799Z","submitted_at":"2026-04-10T07:22:11Z","title":"ADAM: A Systematic Data Extraction Attack on Agent Memory via Adaptive Querying","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-05-10T17:57:59.918483Z"},"links":{"cited_paper":"/paper/2502.13172","citing_paper":"/paper/2604.09747"},"observation_digest":"sha256:2354eb0e061316c93608b0826a6b33a861e0d9d0c73409ac582657c85d6a4649","observation_id":"1e5aa238-e326-4c91-99fe-f3adb85290d6","resolution":{"observed_at":"2026-05-11T05:45:57.573091Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.13457","last_updated":"2024-05-17T05:00:24Z","snapshot_observed_at":"2026-08-11T04:52:50.241599Z","submitted_at":"2024-02-21T01:26:39Z","title":"A Comprehensive Study of Jailbreak Attack versus Defense for Large Language Models","version":2},"cited_work":{"arxiv_id":"2402.13457","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2402.13457","snapshot_observed_at":"2026-07-01T19:36:08.540565Z","title":"A comprehensive study of jailbreak attack versus defense for large language models","venue":null,"work_id":"0b1acec4-924f-45bd-8196-7362449f10cc","year":2024},"citing_paper":{"arxiv_id":"2604.09747","last_updated":"2026-04-10T07:22:11Z","snapshot_observed_at":"2026-08-10T23:55:54.571799Z","submitted_at":"2026-04-10T07:22:11Z","title":"ADAM: A Systematic Data Extraction Attack on Agent Memory via Adaptive Querying","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-05-10T17:57:59.918483Z"},"links":{"cited_paper":"/paper/2402.13457","citing_paper":"/paper/2604.09747"},"observation_digest":"sha256:8124f8522c41ce1a2be740d350f58ebd677adba1ba1c88d63697a85e140f071d","observation_id":"f8a6ee22-da7a-4884-9f88-a3c118714fda","resolution":{"observed_at":"2026-05-11T05:45:57.609447Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2402.10828","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-04T19:30:07.217072Z","title":"Rag-driver: Generalisable driving explanations with retrieval-augmented in-context learning in multi-modal large language model.arXiv preprint arXiv:2402.10828","venue":null,"work_id":"bcc6792f-22ba-4f12-a348-25e73fb8fb3e","year":2024},"citing_paper":{"arxiv_id":"2604.09747","last_updated":"2026-04-10T07:22:11Z","snapshot_observed_at":"2026-08-10T23:55:54.571799Z","submitted_at":"2026-04-10T07:22:11Z","title":"ADAM: A Systematic Data Extraction Attack on Agent Memory via Adaptive Querying","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-05-10T17:57:59.918483Z"},"links":{"citing_paper":"/paper/2604.09747"},"observation_digest":"sha256:6ec3ca54246fa0d39dec78c498f68632d8292d6b40f96c8d4c24575e25d5b48e","observation_id":"425147d5-6c25-488c-a42e-66ccb8b624ef","resolution":{"observed_at":"2026-05-11T05:45:57.583252Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16893","last_updated":"2024-02-23T18:35:15Z","snapshot_observed_at":"2026-08-09T00:18:43.208790Z","submitted_at":"2024-02-23T18:35:15Z","title":"The Good and The Bad: Exploring Privacy Issues in Retrieval-Augmented Generation (RAG)","version":1},"cited_work":{"arxiv_id":"2402.16893","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2402.16893","snapshot_observed_at":"2026-07-04T14:09:53.290413Z","title":"The good and the bad: Exploring privacy issues in retrieval-augmented generation (RAG)","venue":null,"work_id":"b68b6153-e216-466f-a896-6d46fa2eec86","year":2024},"citing_paper":{"arxiv_id":"2604.09747","last_updated":"2026-04-10T07:22:11Z","snapshot_observed_at":"2026-08-10T23:55:54.571799Z","submitted_at":"2026-04-10T07:22:11Z","title":"ADAM: A Systematic Data Extraction Attack on Agent Memory via Adaptive Querying","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-05-10T17:57:59.918483Z"},"links":{"cited_paper":"/paper/2402.16893","citing_paper":"/paper/2604.09747"},"observation_digest":"sha256:f9b35af3922fb40ecab4e5029ff767eab1aefe499f76dab2112f807f00cb9851","observation_id":"3427a164-03d4-4836-b9fa-6d04b5f0bdfd","resolution":{"observed_at":"2026-05-11T05:45:57.537877Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"random-word initialization","venue":null,"work_id":"e59d4be1-e730-49d6-a905-4f7676dc40d5","year":2024},"citing_paper":{"arxiv_id":"2604.09747","last_updated":"2026-04-10T07:22:11Z","snapshot_observed_at":"2026-08-10T23:55:54.571799Z","submitted_at":"2026-04-10T07:22:11Z","title":"ADAM: A Systematic Data Extraction Attack on Agent Memory via Adaptive Querying","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-05-10T17:57:59.918483Z"},"links":{"citing_paper":"/paper/2604.09747"},"observation_digest":"sha256:e061bbd77ec4a382d65d35f62cf4c38176739b5dfae29a0db0a61e11ef8b6350","observation_id":"047feef7-0a81-48ba-8f78-7d7c9c92257e","resolution":{"observed_at":"2026-05-17T07:54:17.452856Z","resolver_source":"raw_fallback","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"In our experiments, we use both prefix injections (task-oriented prompts) and suffix injections (aligned with the agent’s task), as summarized in Table","venue":null,"work_id":"a493d244-660b-4868-b42e-850e70b833f1","year":2025},"citing_paper":{"arxiv_id":"2604.09747","last_updated":"2026-04-10T07:22:11Z","snapshot_observed_at":"2026-08-10T23:55:54.571799Z","submitted_at":"2026-04-10T07:22:11Z","title":"ADAM: A Systematic Data Extraction Attack on Agent Memory via Adaptive Querying","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-05-10T17:57:59.918483Z"},"links":{"citing_paper":"/paper/2604.09747"},"observation_digest":"sha256:2b44df6f3c36dea34c82233f649d543b891fb2124d2dd0e035008795c7d79c1e","observation_id":"7a129496-8f79-40c1-90cc-eb568f0f4e28","resolution":{"observed_at":"2026-05-17T07:54:17.440245Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"f865e9ac-4efc-47f8-bcd0-acf3ea1014e9","year":2015},"citing_paper":{"arxiv_id":"2604.09747","last_updated":"2026-04-10T07:22:11Z","snapshot_observed_at":"2026-08-10T23:55:54.571799Z","submitted_at":"2026-04-10T07:22:11Z","title":"ADAM: A Systematic Data Extraction Attack on Agent Memory via Adaptive Querying","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-05-10T17:57:59.918483Z"},"links":{"citing_paper":"/paper/2604.09747"},"observation_digest":"sha256:26eec05d950f6c6716339beed0de865e829a1941d12a95c20552fa1bbacceaac","observation_id":"0b19e5f4-7dac-48e3-8340-c3bc29054601","resolution":{"observed_at":"2026-05-17T07:54:17.455494Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2604.09747","last_updated":"2026-04-10T07:22:11Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-10T23:55:54.571799Z","submitted_at":"2026-04-10T07:22:11Z","title":"ADAM: A Systematic Data Extraction Attack on Agent Memory via Adaptive Querying"},"reference_resolution":{"displayed":28,"state_counts":{"malformed_identifier":1,"metadata_mismatch":2,"parse_uncertain":0,"unresolved":1,"verified_exact":20,"verified_fuzzy":4},"total_outbound_references":28},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"thesis":"As of 11 August 2026, this Paper Citation Record lists 28 of 28 outbound references and 1 inbound Pith citation observation for arXiv:2604.09747."}