{"as_of":"2026-08-05T15:58:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:58b829bb3d1542888b1af22e5f4617534f868824990528afe0d30aa48d662289","coverage":[{"denominator":12,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":12,"source":"paper_references, paper_reference_links","source_observed_at":"2026-05-10T16:20:14.720123Z","state":"measured"},{"denominator":13,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":13,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-05T06:32:48.257954+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-06-26T04:42:47.126107Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"pith","source_observed_at":"2026-07-04T13:59:52.343837Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2604.12177","last_updated":"2026-04-14T01:15:15Z","snapshot_observed_at":"2026-07-06T23:00:28.036409Z","submitted_at":"2026-04-14T01:15:15Z","title":"Policy-Invisible Violations in LLM-Based Agents","version":1},"cited_work":{"arxiv_id":"2604.12177","doi":null,"metadata_source":"pith","pith_arxiv_id":"2604.12177","snapshot_observed_at":"2026-07-04T13:59:52.343837Z","title":"Policy-Invisible Violations in LLM-Based Agents","venue":"cs.AI","work_id":"8afe0928-9d43-473e-a061-4b4461d7192f","year":2026},"citing_paper":{"arxiv_id":"2606.26524","last_updated":"2026-06-25T01:58:44Z","snapshot_observed_at":"2026-08-03T11:20:16.432997Z","submitted_at":"2026-06-25T01:58:44Z","title":"VIGIL: Runtime Enforcement of Behavioral Specifications in AI Agent Skills","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-06-26T04:42:47.126107Z"},"links":{"cited_paper":"/paper/2604.12177","citing_paper":"/paper/2606.26524"},"observation_digest":"sha256:095e8d0b277b003e625ea4fff81633ae17484aa4ed6a3e52db0775c52e8012bb","observation_id":"530202df-72db-4061-affa-14c7f9cb28fe","resolution":{"observed_at":"2026-07-04T13:59:52.345124Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2604.12177/citation-record","integrity":"/paper/2604.12177/integrity","json":"/paper/2604.12177/citation-record.json","paper":"/paper/2604.12177"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1016/j","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T01:07:42.960769Z","title":"Masset, R","venue":null,"work_id":"238df2e4-a3e5-46f3-860e-3ae2b0094b97","year":2019},"citing_paper":{"arxiv_id":"2604.12177","last_updated":"2026-04-14T01:15:15Z","snapshot_observed_at":"2026-07-06T23:00:28.036409Z","submitted_at":"2026-04-14T01:15:15Z","title":"Policy-Invisible Violations in LLM-Based Agents","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-05-10T16:20:14.720123Z"},"links":{"citing_paper":"/paper/2604.12177"},"observation_digest":"sha256:bdb8e9be77dc7f22e8f2895962caf36498c162ea1ff652a9c3f750300a8f07be","observation_id":"3ada37fe-179b-4484-8063-10a3e4080aaa","resolution":{"observed_at":"2026-05-10T16:20:34.686764Z","resolver_source":"doi_truncated","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2212.08073","last_updated":"2022-12-15T06:19:23Z","snapshot_observed_at":"2026-08-02T04:53:58.766070Z","submitted_at":"2022-12-15T06:19:23Z","title":"Constitutional AI: Harmlessness from AI Feedback","version":1},"cited_work":{"arxiv_id":"2212.08073","doi":"10.48550/arxiv.2212.08073","metadata_source":"pith","pith_arxiv_id":"2212.08073","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Constitutional AI: Harmlessness from AI Feedback","venue":"cs.CL","work_id":"faaaa4e0-2676-4fac-a0b4-99aef10d2095","year":2022},"citing_paper":{"arxiv_id":"2604.12177","last_updated":"2026-04-14T01:15:15Z","snapshot_observed_at":"2026-07-06T23:00:28.036409Z","submitted_at":"2026-04-14T01:15:15Z","title":"Policy-Invisible Violations in LLM-Based Agents","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-05-10T16:20:14.720123Z"},"links":{"cited_paper":"/paper/2212.08073","citing_paper":"/paper/2604.12177"},"observation_digest":"sha256:7112967d81d01f805165c21c9322198558c7b213352368860a46ec1c65641d79","observation_id":"6e2e6673-b0ba-4fb3-ad80-c94e4e192b23","resolution":{"observed_at":"2026-05-11T09:00:59.909004Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-01T07:38:15.114855+00:00","source":"crossref_status_cache"},{"observed_at":"2026-08-01T07:38:15.114855+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"A large annotated corpus for learning natural language inference","venue":null,"work_id":"d3639f15-2310-4e0d-be01-f61f9780fefe","year":2015},"citing_paper":{"arxiv_id":"2604.12177","last_updated":"2026-04-14T01:15:15Z","snapshot_observed_at":"2026-07-06T23:00:28.036409Z","submitted_at":"2026-04-14T01:15:15Z","title":"Policy-Invisible Violations in LLM-Based Agents","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-05-10T16:20:14.720123Z"},"links":{"citing_paper":"/paper/2604.12177"},"observation_digest":"sha256:89080d26ceac51389b3810bfcca8f558a1715f133c279dc844d06ee3a430c3ed","observation_id":"6a66f7d1-678f-4940-9c84-d5e46a6e139d","resolution":{"observed_at":"2026-05-17T15:54:55.962483Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1606.01540","last_updated":"2016-06-05T17:54:48Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2016-06-05T17:54:48Z","title":"OpenAI Gym","version":1},"cited_work":{"arxiv_id":"1606.01540","doi":"10.1109/jssc.2019","metadata_source":"pith","pith_arxiv_id":"1606.01540","snapshot_observed_at":"2026-07-11T11:50:26.030339Z","title":"OpenAI Gym","venue":"cs.LG","work_id":"6af98f3f-f074-41ae-a689-7dd7b4b8efde","year":2016},"citing_paper":{"arxiv_id":"2604.12177","last_updated":"2026-04-14T01:15:15Z","snapshot_observed_at":"2026-07-06T23:00:28.036409Z","submitted_at":"2026-04-14T01:15:15Z","title":"Policy-Invisible Violations in LLM-Based Agents","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-05-10T16:20:14.720123Z"},"links":{"cited_paper":"/paper/1606.01540","citing_paper":"/paper/2604.12177"},"observation_digest":"sha256:ddcda6327fb3fc45b07b35738fe99c4c409d78fdb78bc9befb9a40abda612f4f","observation_id":"fc14d40a-838e-4b6b-ace2-4a614a694598","resolution":{"observed_at":"2026-05-11T19:49:39.087655Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Keep security! benchmarking security policy preservationinlargelanguagemodelcontextsagainstindirectattacksinquestionanswering","venue":null,"work_id":"acc5a9de-7359-4726-93dc-7f15e0292488","year":2025},"citing_paper":{"arxiv_id":"2604.12177","last_updated":"2026-04-14T01:15:15Z","snapshot_observed_at":"2026-07-06T23:00:28.036409Z","submitted_at":"2026-04-14T01:15:15Z","title":"Policy-Invisible Violations in LLM-Based Agents","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-05-10T16:20:14.720123Z"},"links":{"citing_paper":"/paper/2604.12177"},"observation_digest":"sha256:59c51c28c12a3f5f3d5daf2ba67f440c49e442be5caf0f64e805fd3c9b19ccb1","observation_id":"357dd823-1d7b-49dc-b304-0df08b82d20e","resolution":{"observed_at":"2026-05-17T15:54:55.968345Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.13352","last_updated":"2024-11-24T22:04:23Z","snapshot_observed_at":"2026-07-06T18:33:32.806635Z","submitted_at":"2024-06-19T08:55:56Z","title":"AgentDojo: A Dynamic Environment to Evaluate Prompt Injection Attacks and Defenses for LLM Agents","version":3},"cited_work":{"arxiv_id":"2406.13352","doi":"10.48550/arxiv.2406.13352","metadata_source":"pith","pith_arxiv_id":"2406.13352","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"AgentDojo: A Dynamic Environment to Evaluate Prompt Injection Attacks and Defenses for LLM Agents","venue":"cs.CR","work_id":"7b1b672f-e6b4-4df9-aa8b-3396a2eb8b16","year":2024},"citing_paper":{"arxiv_id":"2604.12177","last_updated":"2026-04-14T01:15:15Z","snapshot_observed_at":"2026-07-06T23:00:28.036409Z","submitted_at":"2026-04-14T01:15:15Z","title":"Policy-Invisible Violations in LLM-Based Agents","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-05-10T16:20:14.720123Z"},"links":{"cited_paper":"/paper/2406.13352","citing_paper":"/paper/2604.12177"},"observation_digest":"sha256:d1709af366d762339c408c0b61d57212ff5b7400986422307faa12dd54d5ce13","observation_id":"e40f8581-2e32-4521-8b15-5c22de4f9974","resolution":{"observed_at":"2026-05-13T06:35:13.649872Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2602.11510","doi":"10.48550/arxiv.2602.11510","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Agentleak: A full-stack benchmark for privacy leakage in multi-agent llm systems","venue":"Open MIND","work_id":"4f4d5f73-01e3-40b3-84b0-21a059ae4a2e","year":2026},"citing_paper":{"arxiv_id":"2604.12177","last_updated":"2026-04-14T01:15:15Z","snapshot_observed_at":"2026-07-06T23:00:28.036409Z","submitted_at":"2026-04-14T01:15:15Z","title":"Policy-Invisible Violations in LLM-Based Agents","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-05-10T16:20:14.720123Z"},"links":{"citing_paper":"/paper/2604.12177"},"observation_digest":"sha256:5441468e5ac7c770f700146a717a51e44ea27c42b76164984e0a72c207434d42","observation_id":"a74867b6-336a-4c77-9acb-d76bce01ebe5","resolution":{"observed_at":"2026-05-11T09:00:59.883884Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2601.03926","last_updated":"2026-04-13T07:31:42Z","snapshot_observed_at":"2026-07-06T22:41:01.254450Z","submitted_at":"2026-01-07T13:45:39Z","title":"Doc-PP: Document Policy Preservation Benchmark for Large Vision-Language Models","version":2},"cited_work":{"arxiv_id":"2601.03926","doi":null,"metadata_source":"pith","pith_arxiv_id":"2601.03926","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Doc-PP: Document Policy Preservation Benchmark for Large Vision-Language Models","venue":"cs.CL","work_id":"85c8ac3d-9bfe-4257-9ad6-216124b8a9d5","year":2026},"citing_paper":{"arxiv_id":"2604.12177","last_updated":"2026-04-14T01:15:15Z","snapshot_observed_at":"2026-07-06T23:00:28.036409Z","submitted_at":"2026-04-14T01:15:15Z","title":"Policy-Invisible Violations in LLM-Based Agents","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-05-10T16:20:14.720123Z"},"links":{"cited_paper":"/paper/2601.03926","citing_paper":"/paper/2604.12177"},"observation_digest":"sha256:028ca5b5bce36c3bf8ffed5567fdb940dcf4a577598a7339b91908ec8ad6dad7","observation_id":"6e4e90eb-9670-4612-9d6e-47bd66ce18ad","resolution":{"observed_at":"2026-05-11T09:00:59.896614Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2512.16310","last_updated":"2026-06-01T02:29:46Z","snapshot_observed_at":"2026-08-03T15:41:42.555656Z","submitted_at":"2025-12-18T08:50:57Z","title":"Agent Tools Orchestration Leaks More: Dataset, Benchmark, and Mitigation","version":3},"cited_work":{"arxiv_id":"2512.16310","doi":"10.48550/arxiv.2512.16310","metadata_source":"pith","pith_arxiv_id":"2512.16310","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Yuxuan Qiao, Dongqin Liu, Hongchang Yang, Wei Zhou, and Songlin Hu","venue":"cs.CR","work_id":"6ace36da-5b49-47cb-9b44-4c5d7aea9cd8","year":2025},"citing_paper":{"arxiv_id":"2604.12177","last_updated":"2026-04-14T01:15:15Z","snapshot_observed_at":"2026-07-06T23:00:28.036409Z","submitted_at":"2026-04-14T01:15:15Z","title":"Policy-Invisible Violations in LLM-Based Agents","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-05-10T16:20:14.720123Z"},"links":{"cited_paper":"/paper/2512.16310","citing_paper":"/paper/2604.12177"},"observation_digest":"sha256:fd9f4993640c8ea65c3fad91eb1148531513ff3c0da3de68feee6dd47d29640b","observation_id":"10f0b55d-0340-4087-8648-c810a25ffca4","resolution":{"observed_at":"2026-06-02T03:04:03.222330Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2503.09780","doi":"10.48550/arxiv.2503.09780","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Agentdam: Privacy leakage evaluation for autonomous web agents","venue":"ArXiv.org","work_id":"25d4c9f1-6b12-41cd-abf1-88d531ebe044","year":2025},"citing_paper":{"arxiv_id":"2604.12177","last_updated":"2026-04-14T01:15:15Z","snapshot_observed_at":"2026-07-06T23:00:28.036409Z","submitted_at":"2026-04-14T01:15:15Z","title":"Policy-Invisible Violations in LLM-Based Agents","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-05-10T16:20:14.720123Z"},"links":{"citing_paper":"/paper/2604.12177"},"observation_digest":"sha256:2eef644e241400da191dc6b221a5f988d37fcbf3b6a165643f4d79755f01c576","observation_id":"f5deea6f-0646-4a13-bde8-d9480f1fc51a","resolution":{"observed_at":"2026-05-11T09:00:59.889003Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.07864","last_updated":"2023-09-19T08:29:18Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-09-14T17:12:03Z","title":"The Rise and Potential of Large Language Model Based Agents: A Survey","version":3},"cited_work":{"arxiv_id":"2309.07864","doi":"10.1186/s12912-025-04245-9","metadata_source":"pith","pith_arxiv_id":"2309.07864","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"The Rise and Potential of Large Language Model Based Agents: A Survey","venue":"cs.AI","work_id":"985ca219-7e34-4c4f-bdc5-ccd39763ad61","year":2023},"citing_paper":{"arxiv_id":"2604.12177","last_updated":"2026-04-14T01:15:15Z","snapshot_observed_at":"2026-07-06T23:00:28.036409Z","submitted_at":"2026-04-14T01:15:15Z","title":"Policy-Invisible Violations in LLM-Based Agents","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-05-10T16:20:14.720123Z"},"links":{"cited_paper":"/paper/2309.07864","citing_paper":"/paper/2604.12177"},"observation_digest":"sha256:0f5a1b428d4e79de635961f1ffdf4bc554fc048b3ffaf1d348146326acadcee3","observation_id":"76c1d56e-4a2f-43c2-bfd7-765fb42ec38c","resolution":{"observed_at":"2026-05-11T10:48:03.736032Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2401.10019","last_updated":"2024-10-05T06:50:15Z","snapshot_observed_at":"2026-07-06T17:17:23.567885Z","submitted_at":"2024-01-18T14:40:46Z","title":"R-Judge: Benchmarking Safety Risk Awareness for LLM Agents","version":3},"cited_work":{"arxiv_id":"2401.10019","doi":null,"metadata_source":"pith","pith_arxiv_id":"2401.10019","snapshot_observed_at":"2026-07-11T02:47:50.885307Z","title":"arXiv preprint arXiv:2401.10019 , year=","venue":"cs.CL","work_id":"80797370-dc29-417d-83c5-ec1313a64166","year":2024},"citing_paper":{"arxiv_id":"2604.12177","last_updated":"2026-04-14T01:15:15Z","snapshot_observed_at":"2026-07-06T23:00:28.036409Z","submitted_at":"2026-04-14T01:15:15Z","title":"Policy-Invisible Violations in LLM-Based Agents","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-05-10T16:20:14.720123Z"},"links":{"cited_paper":"/paper/2401.10019","citing_paper":"/paper/2604.12177"},"observation_digest":"sha256:ab2d6fe8b38fad37ea9f47dca1fc5c893936c5fc503165d4bb3485e271dcc4f5","observation_id":"9c081e7e-5055-46d8-a312-fba893267525","resolution":{"observed_at":"2026-05-11T09:00:59.873412Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2604.12177","last_updated":"2026-04-14T01:15:15Z","latest_version":1,"primary_category":"cs.AI","snapshot_observed_at":"2026-07-06T23:00:28.036409Z","submitted_at":"2026-04-14T01:15:15Z","title":"Policy-Invisible Violations in LLM-Based Agents"},"reference_resolution":{"displayed":12,"state_counts":{"malformed_identifier":1,"metadata_mismatch":1,"parse_uncertain":0,"unresolved":0,"verified_exact":8,"verified_fuzzy":2},"total_outbound_references":12},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"thesis":"As of 5 August 2026, this Paper Citation Record lists 12 of 12 outbound references and 1 inbound Pith citation observation for arXiv:2604.12177."}