Paper Citation Record · LEDGER

Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents

As of 7 August 2026, this Paper Citation Record lists 40 of 40 outbound references and 13 inbound Pith citation observations for arXiv:2604.23374.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2604.23374 v1

Coverage vector

measured 40 of 40 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-05-08T08:08:24.524671Z

measured 53 of 53 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-07T06:34:17.273281+00:00

measured 13 of 13 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-08-01T22:27:13.368035Z

measured 1 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: pith, observed 2026-08-05T02:28:24.338817Z

Reference resolution

40 of 40 outbound references displayed

verified exact13
verified fuzzy2
unresolved18
parse uncertain0
malformed identifier1
metadata mismatch6

External citation measurements

0
pith, observed 2026-08-05T02:28:24.338817Z

Outbound references

Observation d55aa476-b94d-4264-8bca-199f78af590e · outbound

This paper cites Not What You've Signed Up For: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection.

Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents Not What You've Signed Up For: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection

Reference 1

Resolution: verified exact; arxiv_id, observed 2026-05-08T22:39:20.685097Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation b651bbcb-f032-494c-bb49-579a47260f7b · outbound

This paper cites an unresolved cited work.

Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents Unresolved cited work

Reference 2

Resolution: verified exact; arxiv_id, observed 2026-05-08T22:39:20.658366Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 3d59fd30-10a5-4c33-a868-42015cdb1a8f · outbound

This paper cites Abusing Images and Sounds for Indirect Instruction Injection in Multi-Modal LLMs.

Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents Abusing Images and Sounds for Indirect Instruction Injection in Multi-Modal LLMs

Reference 4

Resolution: verified exact; arxiv_id, observed 2026-05-08T22:39:20.664808Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation d8cde76a-14b3-40bd-9e81-b29102d54e39 · outbound

This paper cites SHADEW ATCHER: Recommendation-guided Cy- ber Threat Analysis using System Audit Records.

Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents SHADEW ATCHER: Recommendation-guided Cy- ber Threat Analysis using System Audit Records

Reference 5

Resolution: metadata mismatch; arxiv_id, observed 2026-05-08T22:39:20.676222Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 6ba437a7-322d-492c-b8c6-f5a0dfe1a2ef · outbound

This paper cites an unresolved cited work.

Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents Unresolved cited work

Reference 6

Resolution: unresolved; raw_fallback, observed 2026-05-26T17:17:45.781848Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation be9883ba-7684-442f-bccf-04ab264bd700 · outbound

This paper cites an unresolved cited work.

Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents Unresolved cited work

Reference 7

Resolution: unresolved; raw_fallback, observed 2026-05-26T17:17:45.757283Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation a86a15ed-ac72-43ab-87ff-2a91fa232c1b · outbound

This paper cites an unresolved cited work.

Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents Unresolved cited work

Reference 8

Resolution: unresolved; raw_fallback, observed 2026-05-26T17:17:45.769672Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation e38c5116-30ac-4677-a39f-06fe6ba70101 · outbound

This paper cites Wagner, and Chuan Guo.

Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents Wagner, and Chuan Guo

Reference 9

Resolution: metadata mismatch; arxiv_id, observed 2026-05-11T20:46:11.352743Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation d7bd514e-25bb-4588-97d7-f4e5e52f7d42 · outbound

This paper cites an unresolved cited work.

Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents Unresolved cited work

Reference 10

Resolution: unresolved; raw_fallback, observed 2026-05-26T17:17:45.838944Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation ce513983-d38a-4cef-b37e-a2da7b514235 · outbound

This paper cites an unresolved cited work.

Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents Unresolved cited work

Reference 11

Resolution: verified exact; arxiv_id, observed 2026-05-08T22:39:20.615343Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation e43098dc-782c-4561-a942-78140caa4096 · outbound

This paper cites an unresolved cited work.

Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents Unresolved cited work

Reference 12

Resolution: unresolved; raw_fallback, observed 2026-05-26T17:17:45.765660Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation bc02fca0-ddee-49d7-82b8-630fa8cf2e92 · outbound

This paper cites Securing AI Agents with Information-Flow Control.

Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents Securing AI Agents with Information-Flow Control

Reference 13

Resolution: metadata mismatch; arxiv_id, observed 2026-05-15T11:56:37.360040Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation f1f14165-85e0-4f9b-8a09-b75b52e0f5fe · outbound

This paper cites Defeating Prompt Injections by Design.

Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents Defeating Prompt Injections by Design

Reference 14

Resolution: verified exact; arxiv_id, observed 2026-05-13T06:58:51.233859Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 309daddd-59c8-4f30-a318-51dfdce633cc · outbound

This paper cites an unresolved cited work.

Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents Unresolved cited work

Reference 15

Resolution: unresolved; raw_fallback, observed 2026-05-26T17:17:45.761006Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 37c35bc0-953c-4694-a350-71b6497b8752 · outbound

This paper cites an unresolved cited work.

Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents Unresolved cited work

Reference 16

Resolution: unresolved; raw_fallback, observed 2026-05-26T17:17:45.790276Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 9668da36-e734-4079-9f1b-4eb0a14fc900 · outbound

This paper cites Cox, Jaeyeon Jung, Patrick D.

Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents Cox, Jaeyeon Jung, Patrick D

Reference 17

Resolution: verified fuzzy; raw_fallback, observed 2026-05-26T17:17:45.794060Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 2bb0e8dd-b6f4-41ef-8bad-3f5759f08c11 · outbound

This paper cites Bonneville, X.

Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents Bonneville, X

Reference 18

Resolution: verified exact; doi, observed 2026-05-08T22:39:20.544988Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation c6b29b23-8e5c-4c32-98f6-934f5d39b3dc · outbound

This paper cites an unresolved cited work.

Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents Unresolved cited work

Reference 19

Resolution: unresolved; raw_fallback, observed 2026-05-26T17:17:45.777767Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation de137683-7855-4c21-acc8-243788ff39b7 · outbound

This paper cites an unresolved cited work.

Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents Unresolved cited work

Reference 20

Resolution: unresolved; raw_fallback, observed 2026-05-26T17:17:45.773263Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 25f50a1d-a2b2-4bdc-85a4-40646a72572f · outbound

This paper cites an unresolved cited work.

Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents Unresolved cited work

Reference 21

Resolution: unresolved; raw_fallback, observed 2026-05-26T17:17:45.818900Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation a5600e06-184d-4913-8a7e-1452a15c3b86 · outbound

This paper cites an unresolved cited work.

Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents Unresolved cited work

Reference 22

Resolution: unresolved; raw_fallback, observed 2026-05-26T17:17:45.807474Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 53ac189d-055a-4a79-8567-f40d897fbeda · outbound

This paper cites Prompt Injection attack against LLM-integrated Applications.

Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents Prompt Injection attack against LLM-integrated Applications

Reference 23

Resolution: verified exact; arxiv_id, observed 2026-05-11T21:16:57.750966Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 4b62226a-2b62-44de-b8f9-282770dc42c9 · outbound

This paper cites an unresolved cited work.

Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents Unresolved cited work

Reference 24

Resolution: unresolved; raw_fallback, observed 2026-05-26T17:17:45.826821Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 4d598ef5-2ed9-457b-906f-ac36837ab6b0 · outbound

This paper cites an unresolved cited work.

Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents Unresolved cited work

Reference 25

Resolution: unresolved; raw_fallback, observed 2026-05-26T17:17:45.799185Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation d4488f61-a71e-4926-820a-2d6211dcac83 · outbound

This paper cites an unresolved cited work.

Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents Unresolved cited work

Reference 26

Resolution: unresolved; raw_fallback, observed 2026-05-26T17:17:45.786113Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation e18d46ad-c047-4115-b616-619e90deafe5 · outbound

This paper cites Ignore Previous Prompt: Attack Techniques For Language Models.

Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents Ignore Previous Prompt: Attack Techniques For Language Models

Reference 27

Resolution: verified exact; local_arxiv, observed 2026-05-11T20:46:11.335356Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation be9742d8-57e9-405e-85c1-f40b6f9b4b6e · outbound

This paper cites Maddison, and Tatsunori Hashimoto.

Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents Maddison, and Tatsunori Hashimoto

Reference 28

Resolution: verified fuzzy; raw_fallback, observed 2026-05-26T17:17:45.822720Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 91617821-367a-4c61-a48b-a641912cb500 · outbound

This paper cites an unresolved cited work.

Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents Unresolved cited work

Reference 30

Resolution: unresolved; raw_fallback, observed 2026-05-26T17:17:45.814908Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 71879c9d-305f-42db-9460-b80d3384e574 · outbound

This paper cites In2020 IEEE Symposium on Security and Privacy, SP 2020, San Francisco, CA, USA, May 18-21.

Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents In2020 IEEE Symposium on Security and Privacy, SP 2020, San Francisco, CA, USA, May 18-21

Reference 31

Resolution: metadata mismatch; arxiv_id, observed 2026-05-08T22:39:20.586947Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 431780f5-d8ef-4116-8f2c-25112a40c2cd · outbound

This paper cites Multilingual Knowledge Graph Completion with Self-Supervised Adaptive Graph Alignment.

Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents Multilingual Knowledge Graph Completion with Self-Supervised Adaptive Graph Alignment

Reference 32

Resolution: malformed identifier; doi, observed 2026-05-08T22:45:09.901754Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 53596749-4a94-41a6-9885-ca7193fae4d8 · outbound

This paper cites Tao, Z., Lin, T., Chen, X., Li, H., Wu, Y ., Li, Y ., Jin, Z., Huang, F., Tao, D., and Zhou, J.

Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents Tao, Z., Lin, T., Chen, X., Li, H., Wu, Y ., Li, Y ., Jin, Z., Huang, F., Tao, D., and Zhou, J

Reference 33

Resolution: verified exact; doi, observed 2026-05-08T22:39:20.625600Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 40f59f76-2b7d-4cc4-a03a-2b52af494bdd · outbound

This paper cites AttackEval: A Systematic Empirical Study of Prompt Injection Attack Effectiveness Against Large Language Models.

Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents AttackEval: A Systematic Empirical Study of Prompt Injection Attack Effectiveness Against Large Language Models

Reference 34

Resolution: verified exact; local_arxiv, observed 2026-05-11T20:46:11.314863Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation b1737e83-265e-4103-8b48-81628c616f76 · outbound

This paper cites an unresolved cited work.

Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents Unresolved cited work

Reference 35

Resolution: unresolved; raw_fallback, observed 2026-05-26T17:17:45.811106Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation ddf3556a-3549-46ad-a5f2-bdcf15b60da8 · outbound

This paper cites Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models.

Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models

Reference 36

Resolution: verified exact; arxiv_id, observed 2026-05-08T22:39:20.577096Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation aa1bb7d0-5abe-4d0a-9646-be9a60c2c707 · outbound

This paper cites an unresolved cited work.

Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents Unresolved cited work

Reference 37

Resolution: unresolved; raw_fallback, observed 2026-05-26T17:17:45.803585Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 269646da-6b54-4547-a5ea-1347b0052b8c · outbound

This paper cites 2024 , address =.

Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents 2024 , address =

Reference 38

Resolution: metadata mismatch; doi, observed 2026-05-08T22:39:20.568342Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation a631f92d-3735-41fd-817d-c4d19217f655 · outbound

This paper cites an unresolved cited work.

Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents Unresolved cited work

Reference 39

Resolution: verified exact; arxiv_id, observed 2026-05-08T22:39:20.651757Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation c034c666-1098-416e-b38a-18da1022b469 · outbound

This paper cites an unresolved cited work.

Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents Unresolved cited work

Reference 40

Resolution: unresolved; raw_fallback, observed 2026-05-26T17:17:45.834822Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 396d376b-82d4-42ac-9b81-e5729798ca7a · outbound

This paper cites an unresolved cited work.

Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents Unresolved cited work

Reference 41

Resolution: verified exact; doi, observed 2026-05-08T22:39:20.605202Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation ed8708f0-3a77-45fe-b2fa-0a8fa60a5e7d · outbound

This paper cites RTBAS: Defending LLM Agents Against Prompt Injection and Privacy Leakage.

Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents RTBAS: Defending LLM Agents Against Prompt Injection and Privacy Leakage

Reference 42

Resolution: metadata mismatch; arxiv_id, observed 2026-05-08T22:39:20.560351Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Pith citing papers

Observation 6e42f606-df07-4658-834e-32191da75b2e · inbound

MemLineage: Lineage-Guided Enforcement for LLM Agent Memory cites this paper.

MemLineage: Lineage-Guided Enforcement for LLM Agent Memory Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents

Reference 5

Resolution: verified exact; local_arxiv, observed 2026-05-15T02:23:31.640864Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 29ff0cf5-2e82-4e59-b976-fee25727e534 · inbound

Ghost Tool Calls: Issue-Time Privacy for Speculative Agent Tools cites this paper.

Ghost Tool Calls: Issue-Time Privacy for Speculative Agent Tools Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents

Reference 19

Resolution: metadata mismatch; local_arxiv, observed 2026-06-28T14:42:18.239163Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation b589ba3b-5b80-4888-a7bb-1d459d8d2287 · inbound

From Agent Traces to Trust: A Survey of Evidence Tracing and Execution Provenance in LLM Agents cites this paper.

From Agent Traces to Trust: A Survey of Evidence Tracing and Execution Provenance in LLM Agents Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents

Reference 21

Resolution: metadata mismatch; local_arxiv, observed 2026-07-02T09:16:49.568617Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 931ee991-02b1-49e9-a261-f6a57c1fa734 · inbound

From Agent Traces to Trust: A Survey of Evidence Tracing and Execution Provenance in LLM Agents cites this paper.

From Agent Traces to Trust: A Survey of Evidence Tracing and Execution Provenance in LLM Agents Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents

Reference 21

Resolution: metadata mismatch; local_arxiv, observed 2026-06-30T11:04:37.851065Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation a85063b4-96ea-4dad-9032-8fd0bc450d5d · inbound

Securing LLM-Agent Long-Term Memory Against Poisoning: Non-Malleable, Origin-Bound Authority with Machine-Checked Guarantees cites this paper.

Securing LLM-Agent Long-Term Memory Against Poisoning: Non-Malleable, Origin-Bound Authority with Machine-Checked Guarantees Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents

Reference 28

Resolution: verified exact; local_arxiv, observed 2026-07-04T17:30:00.239559Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 3ba1966b-df4a-463b-930f-13e86844351f · inbound

VIGIL: Runtime Enforcement of Behavioral Specifications in AI Agent Skills cites this paper.

VIGIL: Runtime Enforcement of Behavioral Specifications in AI Agent Skills Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents

Reference 46

Resolution: verified exact; local_arxiv, observed 2026-07-04T13:59:52.321270Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 097ce58c-7651-4e52-bcbe-32c85706d0e6 · inbound

MemLeak: Diagnosing Information Leaks in Multimodal Agent Memory cites this paper.

MemLeak: Diagnosing Information Leaks in Multimodal Agent Memory Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents

Reference 39

Resolution: verified exact; local_arxiv, observed 2026-06-30T07:34:22.058617Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation cda030a0-21b3-4a28-a10a-6c020d083e63 · inbound

Operational Reframing and Approval-Framed Delegation in Multi-Agent LLM Safety cites this paper.

Operational Reframing and Approval-Framed Delegation in Multi-Agent LLM Safety Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents

Reference 3

Resolution: verified exact; local_arxiv, observed 2026-07-09T20:16:29.363975Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 68a3aae9-72d8-4d92-867f-557c2fb0757b · inbound

When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems cites this paper.

When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents

Reference 43

Resolution: unresolved; no resolver link, observed 2026-07-14T03:26:15.676915Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 7e022b63-605e-4652-bf6f-f007c5dc7394 · inbound

Making Agent-Mediated Contributions Governable: A Project-Level Governance Manifest for Open-Source AI Collaboration cites this paper.

Making Agent-Mediated Contributions Governable: A Project-Level Governance Manifest for Open-Source AI Collaboration Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents

Reference 49

Resolution: unresolved; no resolver link, observed 2026-08-01T22:27:13.368035Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 9717f0fd-4b9e-41f1-9000-9311b93b6de6 · inbound

ContainmentBench: Trace-Based Evaluation of Post-Injection Containment in Tool-Using LLM Agents cites this paper.

ContainmentBench: Trace-Based Evaluation of Post-Injection Containment in Tool-Using LLM Agents Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents

Reference 3

Resolution: unresolved; no resolver link, observed 2026-07-31T23:24:19.504351Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 1e0bfb9d-1b50-4387-ad16-94de1ef3ec59 · inbound

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents cites this paper.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents

Reference 6

Resolution: unresolved; no resolver link, observed 2026-07-31T10:25:14.995480Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 86876a7f-f4df-452d-ae8a-2cf2f825eee1 · inbound

StealthBench: Measuring Operational Stealth in Autonomous Offensive-Security Agents cites this paper.

StealthBench: Measuring Operational Stealth in Autonomous Offensive-Security Agents Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents

Reference 21

Resolution: unresolved; no resolver link, observed 2026-08-01T00:13:38.185153Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.