{"as_of":"2026-08-07T10:24:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:1b04e093de67985f89f46f42fbdc07a25744d2952a7fdedd9ad422a99ea374e9","coverage":[{"denominator":40,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":40,"source":"paper_references, paper_reference_links","source_observed_at":"2026-05-08T08:08:24.524671Z","state":"measured"},{"denominator":53,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":53,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":13,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":13,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-01T22:27:13.368035Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":1,"source":"pith","source_observed_at":"2026-08-05T02:28:24.338817Z","state":"measured"}],"external_citation_measurements":[{"count":0,"observed_at":"2026-08-05T02:28:24.338817Z","source":"pith"}],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2604.23374","last_updated":"2026-04-25T16:39:16Z","snapshot_observed_at":"2026-07-06T23:09:38.799345Z","submitted_at":"2026-04-25T16:39:16Z","title":"Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents","version":1},"cited_work":{"arxiv_id":"2604.23374","doi":"10.48550/arxiv.2604.23374","metadata_source":"pith","pith_arxiv_id":"2604.23374","snapshot_observed_at":"2026-08-05T02:49:54.815029Z","title":"Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents","venue":"cs.CR","work_id":"8010c538-559e-41c9-940f-4c2d0ca50745","year":2026},"citing_paper":{"arxiv_id":"2605.14421","last_updated":"2026-05-14T06:07:54Z","snapshot_observed_at":"2026-08-05T21:42:41.952480Z","submitted_at":"2026-05-14T06:07:54Z","title":"MemLineage: Lineage-Guided Enforcement for LLM Agent Memory","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-05-15T02:21:32.356516Z"},"links":{"cited_paper":"/paper/2604.23374","citing_paper":"/paper/2605.14421"},"observation_digest":"sha256:15440190dd498ed11aeaf69cd1d142cfa8259ebcf01a19d0bebbaf965f0a2cb2","observation_id":"6e42f606-df07-4658-834e-32191da75b2e","resolution":{"observed_at":"2026-05-15T02:23:31.640864Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2604.23374","last_updated":"2026-04-25T16:39:16Z","snapshot_observed_at":"2026-07-06T23:09:38.799345Z","submitted_at":"2026-04-25T16:39:16Z","title":"Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents","version":1},"cited_work":{"arxiv_id":"2604.23374","doi":"10.48550/arxiv.2604.23374","metadata_source":"pith","pith_arxiv_id":"2604.23374","snapshot_observed_at":"2026-08-05T02:49:54.815029Z","title":"Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents","venue":"cs.CR","work_id":"8010c538-559e-41c9-940f-4c2d0ca50745","year":2026},"citing_paper":{"arxiv_id":"2606.02483","last_updated":"2026-06-01T16:53:19Z","snapshot_observed_at":"2026-07-06T23:42:53.514946Z","submitted_at":"2026-06-01T16:53:19Z","title":"Ghost Tool Calls: Issue-Time Privacy for Speculative Agent Tools","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-06-28T13:46:11.765116Z"},"links":{"cited_paper":"/paper/2604.23374","citing_paper":"/paper/2606.02483"},"observation_digest":"sha256:e7b2e58f86e2c5422c4e1f11ae88e1ef6e4a3b9ed3bc136fe87cba4b22269b08","observation_id":"29ff0cf5-2e82-4e59-b976-fee25727e534","resolution":{"observed_at":"2026-06-28T14:42:18.239163Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2604.23374","last_updated":"2026-04-25T16:39:16Z","snapshot_observed_at":"2026-07-06T23:09:38.799345Z","submitted_at":"2026-04-25T16:39:16Z","title":"Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents","version":1},"cited_work":{"arxiv_id":"2604.23374","doi":"10.48550/arxiv.2604.23374","metadata_source":"pith","pith_arxiv_id":"2604.23374","snapshot_observed_at":"2026-08-05T02:49:54.815029Z","title":"Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents","venue":"cs.CR","work_id":"8010c538-559e-41c9-940f-4c2d0ca50745","year":2026},"citing_paper":{"arxiv_id":"2606.04990","last_updated":"2026-06-28T07:06:10Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2026-06-03T15:12:47Z","title":"From Agent Traces to Trust: A Survey of Evidence Tracing and Execution Provenance in LLM Agents","version":3},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-06-28T05:32:34.771787Z"},"links":{"cited_paper":"/paper/2604.23374","citing_paper":"/paper/2606.04990"},"observation_digest":"sha256:6cb70586ec7ec2e4f06c9ec29ca5366de44035396c91196b10cd46c7abd102c5","observation_id":"b589ba3b-5b80-4888-a7bb-1d459d8d2287","resolution":{"observed_at":"2026-07-02T09:16:49.568617Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2604.23374","last_updated":"2026-04-25T16:39:16Z","snapshot_observed_at":"2026-07-06T23:09:38.799345Z","submitted_at":"2026-04-25T16:39:16Z","title":"Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents","version":1},"cited_work":{"arxiv_id":"2604.23374","doi":"10.48550/arxiv.2604.23374","metadata_source":"pith","pith_arxiv_id":"2604.23374","snapshot_observed_at":"2026-08-05T02:49:54.815029Z","title":"Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents","venue":"cs.CR","work_id":"8010c538-559e-41c9-940f-4c2d0ca50745","year":2026},"citing_paper":{"arxiv_id":"2606.04990","last_updated":"2026-06-28T07:06:10Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2026-06-03T15:12:47Z","title":"From Agent Traces to Trust: A Survey of Evidence Tracing and Execution Provenance in LLM Agents","version":4},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-06-30T10:44:54.123704Z"},"links":{"cited_paper":"/paper/2604.23374","citing_paper":"/paper/2606.04990"},"observation_digest":"sha256:eec124b1173c0c14f35622889f0287746e5be58968e864e29f6d6f9fa6dbe582","observation_id":"931ee991-02b1-49e9-a261-f6a57c1fa734","resolution":{"observed_at":"2026-06-30T11:04:37.851065Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2604.23374","last_updated":"2026-04-25T16:39:16Z","snapshot_observed_at":"2026-07-06T23:09:38.799345Z","submitted_at":"2026-04-25T16:39:16Z","title":"Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents","version":1},"cited_work":{"arxiv_id":"2604.23374","doi":"10.48550/arxiv.2604.23374","metadata_source":"pith","pith_arxiv_id":"2604.23374","snapshot_observed_at":"2026-08-05T02:49:54.815029Z","title":"Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents","venue":"cs.CR","work_id":"8010c538-559e-41c9-940f-4c2d0ca50745","year":2026},"citing_paper":{"arxiv_id":"2606.24322","last_updated":"2026-06-23T08:57:50Z","snapshot_observed_at":"2026-07-06T23:58:54.018557Z","submitted_at":"2026-06-23T08:57:50Z","title":"Securing LLM-Agent Long-Term Memory Against Poisoning: Non-Malleable, Origin-Bound Authority with Machine-Checked Guarantees","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-06-25T23:40:36.181525Z"},"links":{"cited_paper":"/paper/2604.23374","citing_paper":"/paper/2606.24322"},"observation_digest":"sha256:4ca23caf5d1d82ff93999185c22728009f62663dd8b1af3e8823d94e1cb22b06","observation_id":"a85063b4-96ea-4dad-9032-8fd0bc450d5d","resolution":{"observed_at":"2026-07-04T17:30:00.239559Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2604.23374","last_updated":"2026-04-25T16:39:16Z","snapshot_observed_at":"2026-07-06T23:09:38.799345Z","submitted_at":"2026-04-25T16:39:16Z","title":"Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents","version":1},"cited_work":{"arxiv_id":"2604.23374","doi":"10.48550/arxiv.2604.23374","metadata_source":"pith","pith_arxiv_id":"2604.23374","snapshot_observed_at":"2026-08-05T02:49:54.815029Z","title":"Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents","venue":"cs.CR","work_id":"8010c538-559e-41c9-940f-4c2d0ca50745","year":2026},"citing_paper":{"arxiv_id":"2606.26524","last_updated":"2026-06-25T01:58:44Z","snapshot_observed_at":"2026-08-03T11:20:16.432997Z","submitted_at":"2026-06-25T01:58:44Z","title":"VIGIL: Runtime Enforcement of Behavioral Specifications in AI Agent Skills","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-06-26T04:42:47.126107Z"},"links":{"cited_paper":"/paper/2604.23374","citing_paper":"/paper/2606.26524"},"observation_digest":"sha256:6b15f3904adda69f917155ca333123c464d3f79c77a0ab1004caef05cb841d16","observation_id":"3ba1966b-df4a-463b-930f-13e86844351f","resolution":{"observed_at":"2026-07-04T13:59:52.321270Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2604.23374","last_updated":"2026-04-25T16:39:16Z","snapshot_observed_at":"2026-07-06T23:09:38.799345Z","submitted_at":"2026-04-25T16:39:16Z","title":"Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents","version":1},"cited_work":{"arxiv_id":"2604.23374","doi":"10.48550/arxiv.2604.23374","metadata_source":"pith","pith_arxiv_id":"2604.23374","snapshot_observed_at":"2026-08-05T02:49:54.815029Z","title":"Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents","venue":"cs.CR","work_id":"8010c538-559e-41c9-940f-4c2d0ca50745","year":2026},"citing_paper":{"arxiv_id":"2606.29788","last_updated":"2026-06-29T05:07:02Z","snapshot_observed_at":"2026-08-05T20:31:58.036479Z","submitted_at":"2026-06-29T05:07:02Z","title":"MemLeak: Diagnosing Information Leaks in Multimodal Agent Memory","version":1},"reference_index":39,"source":"arxiv_source","source_observed_at":"2026-06-30T07:25:38.845671Z"},"links":{"cited_paper":"/paper/2604.23374","citing_paper":"/paper/2606.29788"},"observation_digest":"sha256:67b78cda6fbc62557913b18054059355ba3f5241ceeea3569e9ff329e4375bce","observation_id":"097ce58c-7651-4e52-bcbe-32c85706d0e6","resolution":{"observed_at":"2026-06-30T07:34:22.058617Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2604.23374","last_updated":"2026-04-25T16:39:16Z","snapshot_observed_at":"2026-07-06T23:09:38.799345Z","submitted_at":"2026-04-25T16:39:16Z","title":"Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents","version":1},"cited_work":{"arxiv_id":"2604.23374","doi":"10.48550/arxiv.2604.23374","metadata_source":"pith","pith_arxiv_id":"2604.23374","snapshot_observed_at":"2026-08-05T02:49:54.815029Z","title":"Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents","venue":"cs.CR","work_id":"8010c538-559e-41c9-940f-4c2d0ca50745","year":2026},"citing_paper":{"arxiv_id":"2607.07097","last_updated":"2026-07-08T07:31:37Z","snapshot_observed_at":"2026-08-06T17:09:32.541276Z","submitted_at":"2026-07-08T07:31:37Z","title":"Operational Reframing and Approval-Framed Delegation in Multi-Agent LLM Safety","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-07-09T20:14:36.433937Z"},"links":{"cited_paper":"/paper/2604.23374","citing_paper":"/paper/2607.07097"},"observation_digest":"sha256:6154699c96b2913cf5eafff3aa949a5c93c09173bfb8469c784b791ca3be3fd6","observation_id":"cda030a0-21b3-4a28-a10a-6c020d083e63","resolution":{"observed_at":"2026-07-09T20:16:29.363975Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2604.23374","last_updated":"2026-04-25T16:39:16Z","snapshot_observed_at":"2026-07-06T23:09:38.799345Z","submitted_at":"2026-04-25T16:39:16Z","title":"Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.23374","snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":43,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"cited_paper":"/paper/2604.23374","citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:c5408d5325da795d108bbf114f9d13cf8d780577fa59eb8e3f68b79ddd964026","observation_id":"68a3aae9-72d8-4d92-867f-557c2fb0757b","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2604.23374","last_updated":"2026-04-25T16:39:16Z","snapshot_observed_at":"2026-07-06T23:09:38.799345Z","submitted_at":"2026-04-25T16:39:16Z","title":"Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.23374","snapshot_observed_at":"2026-08-01T22:27:13.368035Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.15769","last_updated":"2026-07-17T08:58:54Z","snapshot_observed_at":"2026-08-04T12:41:14.303531Z","submitted_at":"2026-07-17T08:58:54Z","title":"Making Agent-Mediated Contributions Governable: A Project-Level Governance Manifest for Open-Source AI Collaboration","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-01T22:27:13.368035Z"},"links":{"cited_paper":"/paper/2604.23374","citing_paper":"/paper/2607.15769"},"observation_digest":"sha256:50f2e8058eb0131ad9852a843c470b077e9c79b3deddec5df83589d8efb804ca","observation_id":"7e022b63-605e-4652-bf6f-f007c5dc7394","resolution":{"observed_at":"2026-08-01T22:27:13.368035Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2604.23374","last_updated":"2026-04-25T16:39:16Z","snapshot_observed_at":"2026-07-06T23:09:38.799345Z","submitted_at":"2026-04-25T16:39:16Z","title":"Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.23374","snapshot_observed_at":"2026-07-31T23:24:19.504351Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.23999","last_updated":"2026-07-28T07:27:46Z","snapshot_observed_at":"2026-08-03T08:43:31.893929Z","submitted_at":"2026-07-27T04:51:20Z","title":"ContainmentBench: Trace-Based Evaluation of Post-Injection Containment in Tool-Using LLM Agents","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-07-31T23:24:19.504351Z"},"links":{"cited_paper":"/paper/2604.23374","citing_paper":"/paper/2607.23999"},"observation_digest":"sha256:23fa0f6a73d418f1b6867d028b1e30ea690c7caf723b2000e8e4b3fb2e692078","observation_id":"9717f0fd-4b9e-41f1-9000-9311b93b6de6","resolution":{"observed_at":"2026-07-31T23:24:19.504351Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2604.23374","last_updated":"2026-04-25T16:39:16Z","snapshot_observed_at":"2026-07-06T23:09:38.799345Z","submitted_at":"2026-04-25T16:39:16Z","title":"Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.23374","snapshot_observed_at":"2026-07-31T10:25:14.995480Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.24625","last_updated":"2026-07-27T16:19:45Z","snapshot_observed_at":"2026-08-04T21:51:33.280706Z","submitted_at":"2026-07-27T16:19:45Z","title":"Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-07-31T10:25:14.995480Z"},"links":{"cited_paper":"/paper/2604.23374","citing_paper":"/paper/2607.24625"},"observation_digest":"sha256:97d98c8b4b3328d8d0356be7985f6e00c604f2e0cf4df6a8166f1e3e1d2ce1f7","observation_id":"1e0bfb9d-1b50-4387-ad16-94de1ef3ec59","resolution":{"observed_at":"2026-07-31T10:25:14.995480Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2604.23374","last_updated":"2026-04-25T16:39:16Z","snapshot_observed_at":"2026-07-06T23:09:38.799345Z","submitted_at":"2026-04-25T16:39:16Z","title":"Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.23374","snapshot_observed_at":"2026-08-01T00:13:38.185153Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26314","last_updated":"2026-07-28T22:23:34Z","snapshot_observed_at":"2026-08-06T20:30:28.965003Z","submitted_at":"2026-07-28T22:23:34Z","title":"StealthBench: Measuring Operational Stealth in Autonomous Offensive-Security Agents","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-01T00:13:38.185153Z"},"links":{"cited_paper":"/paper/2604.23374","citing_paper":"/paper/2607.26314"},"observation_digest":"sha256:65d55bc45853f9994347a04de4464083a05e20ff0c094b8467235bdb81e196d6","observation_id":"86876a7f-f4df-452d-ae8a-2cf2f825eee1","resolution":{"observed_at":"2026-08-01T00:13:38.185153Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2604.23374/citation-record","integrity":"/paper/2604.23374/integrity","json":"/paper/2604.23374/citation-record.json","paper":"/paper/2604.23374"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Not What You've Signed Up For: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection","venue":null,"work_id":"391b8980-14ef-4f8d-8fe5-c4adc096223c","year":2023},"citing_paper":{"arxiv_id":"2604.23374","last_updated":"2026-04-25T16:39:16Z","snapshot_observed_at":"2026-07-06T23:09:38.799345Z","submitted_at":"2026-04-25T16:39:16Z","title":"Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-05-08T08:08:24.524671Z"},"links":{"citing_paper":"/paper/2604.23374"},"observation_digest":"sha256:51ca43624c1281394203c134112a734943072ed211c3015db13b1dbecdd7a143","observation_id":"d55aa476-b94d-4264-8bca-199f78af590e","resolution":{"observed_at":"2026-05-08T22:39:20.685097Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1145/2594291.2594299","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":null,"venue":null,"work_id":"6d4f3fc6-3457-46a3-bc12-26796e0b0b3f","year":2014},"citing_paper":{"arxiv_id":"2604.23374","last_updated":"2026-04-25T16:39:16Z","snapshot_observed_at":"2026-07-06T23:09:38.799345Z","submitted_at":"2026-04-25T16:39:16Z","title":"Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-05-08T08:08:24.524671Z"},"links":{"citing_paper":"/paper/2604.23374"},"observation_digest":"sha256:e59e4870f00822261e31be4654bfff16fb206971f2487fd130d610d0040c2cff","observation_id":"b651bbcb-f032-494c-bb49-579a47260f7b","resolution":{"observed_at":"2026-05-08T22:39:20.658366Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.10490","last_updated":"2023-10-03T17:03:10Z","snapshot_observed_at":"2026-08-04T02:19:57.679295Z","submitted_at":"2023-07-19T23:03:20Z","title":"Abusing Images and Sounds for Indirect Instruction Injection in Multi-Modal LLMs","version":4},"cited_work":{"arxiv_id":"2307.10490","doi":"10.48550/arxiv.2307.10490","metadata_source":"arxiv_reference","pith_arxiv_id":"2307.10490","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"(ab) using images and sounds for indirect instruction injection in multi-modal llms","venue":"arXiv (Cornell University)","work_id":"cbf07be0-59b9-485c-a352-3971f60f3d56","year":2023},"citing_paper":{"arxiv_id":"2604.23374","last_updated":"2026-04-25T16:39:16Z","snapshot_observed_at":"2026-07-06T23:09:38.799345Z","submitted_at":"2026-04-25T16:39:16Z","title":"Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-05-08T08:08:24.524671Z"},"links":{"cited_paper":"/paper/2307.10490","citing_paper":"/paper/2604.23374"},"observation_digest":"sha256:f65926e111bcd703a5e2c6495d2f3c873abe291900cb1de3d69424bef8395841","observation_id":"3d59fd30-10a5-4c33-a868-42015cdb1a8f","resolution":{"observed_at":"2026-05-08T22:39:20.664808Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1109/sp46214.2022.9833582","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"SHADEW ATCHER: Recommendation-guided Cy- ber Threat Analysis using System Audit Records","venue":"2022 IEEE Symposium on Security and Privacy (SP)","work_id":"c79680fd-cff0-49f6-8352-61693bbd7306","year":2022},"citing_paper":{"arxiv_id":"2604.23374","last_updated":"2026-04-25T16:39:16Z","snapshot_observed_at":"2026-07-06T23:09:38.799345Z","submitted_at":"2026-04-25T16:39:16Z","title":"Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-05-08T08:08:24.524671Z"},"links":{"citing_paper":"/paper/2604.23374"},"observation_digest":"sha256:3cf394450a305b8435074516a82f237855c91dc8385da853c96f64914e7a1135","observation_id":"d8cde76a-14b3-40bd-9e81-b29102d54e39","resolution":{"observed_at":"2026-05-08T22:39:20.676222Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"00aa480f-d6e3-47fc-abb0-0e8cac923a35","year":2022},"citing_paper":{"arxiv_id":"2604.23374","last_updated":"2026-04-25T16:39:16Z","snapshot_observed_at":"2026-07-06T23:09:38.799345Z","submitted_at":"2026-04-25T16:39:16Z","title":"Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-05-08T08:08:24.524671Z"},"links":{"citing_paper":"/paper/2604.23374"},"observation_digest":"sha256:57d453e26d880290f6068c18891be2808ce5f37d58ec6e030ff3f2e74fd1b2f7","observation_id":"6ba437a7-322d-492c-b8c6-f5a0dfe1a2ef","resolution":{"observed_at":"2026-05-26T17:17:45.781848Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"fc1e4cb6-f196-4b9b-8e7e-6e5297e6fe90","year":2024},"citing_paper":{"arxiv_id":"2604.23374","last_updated":"2026-04-25T16:39:16Z","snapshot_observed_at":"2026-07-06T23:09:38.799345Z","submitted_at":"2026-04-25T16:39:16Z","title":"Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-05-08T08:08:24.524671Z"},"links":{"citing_paper":"/paper/2604.23374"},"observation_digest":"sha256:ff8745053731e0af3d3ceaf45fc756ba9ab0a2b00a515f8ea1bcce3aab5c79ce","observation_id":"be9883ba-7684-442f-bccf-04ab264bd700","resolution":{"observed_at":"2026-05-26T17:17:45.757283Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"cea63660-2900-4949-8b42-de770dd578a8","year":2025},"citing_paper":{"arxiv_id":"2604.23374","last_updated":"2026-04-25T16:39:16Z","snapshot_observed_at":"2026-07-06T23:09:38.799345Z","submitted_at":"2026-04-25T16:39:16Z","title":"Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-05-08T08:08:24.524671Z"},"links":{"citing_paper":"/paper/2604.23374"},"observation_digest":"sha256:5bbe53cdc2014272093c545b829c09a1760bb63de62ed4b9263f8de868ea6cb3","observation_id":"a86a15ed-ac72-43ab-87ff-2a91fa232c1b","resolution":{"observed_at":"2026-05-26T17:17:45.769672Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"9027.37448","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Wagner, and Chuan Guo","venue":null,"work_id":"a100067e-6762-4ae9-b1e1-27dad7d6af14","year":2025},"citing_paper":{"arxiv_id":"2604.23374","last_updated":"2026-04-25T16:39:16Z","snapshot_observed_at":"2026-07-06T23:09:38.799345Z","submitted_at":"2026-04-25T16:39:16Z","title":"Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-05-08T08:08:24.524671Z"},"links":{"citing_paper":"/paper/2604.23374"},"observation_digest":"sha256:5ac1ea80ad2b5cb716e2757fa3b74a398dfaf0e5c08efcefa0c03fffa3863c95","observation_id":"e38c5116-30ac-4677-a39f-06fe6ba70101","resolution":{"observed_at":"2026-05-11T20:46:11.352743Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"bac5ef55-4bb5-438d-824c-2b8da54f420e","year":2024},"citing_paper":{"arxiv_id":"2604.23374","last_updated":"2026-04-25T16:39:16Z","snapshot_observed_at":"2026-07-06T23:09:38.799345Z","submitted_at":"2026-04-25T16:39:16Z","title":"Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-05-08T08:08:24.524671Z"},"links":{"citing_paper":"/paper/2604.23374"},"observation_digest":"sha256:1be406e46dec32734ff6281b3c291845dfd29e88d3ad9c0e21486fabbd34df3a","observation_id":"d7bd514e-25bb-4588-97d7-f4e5e52f7d42","resolution":{"observed_at":"2026-05-26T17:17:45.838944Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"cef40f74-3e0e-4039-ba02-827dff6abe5b","year":2023},"citing_paper":{"arxiv_id":"2604.23374","last_updated":"2026-04-25T16:39:16Z","snapshot_observed_at":"2026-07-06T23:09:38.799345Z","submitted_at":"2026-04-25T16:39:16Z","title":"Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-05-08T08:08:24.524671Z"},"links":{"citing_paper":"/paper/2604.23374"},"observation_digest":"sha256:1cc39832e073723a067d591091b2892fed2e50be2248e3dd42ba1ea5b1378088","observation_id":"ce513983-d38a-4cef-b37e-a2da7b514235","resolution":{"observed_at":"2026-05-08T22:39:20.615343Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T12:27:04.446989Z","title":null,"venue":null,"work_id":"518a640e-c470-43a7-93b9-813667c84cc2","year":null},"citing_paper":{"arxiv_id":"2604.23374","last_updated":"2026-04-25T16:39:16Z","snapshot_observed_at":"2026-07-06T23:09:38.799345Z","submitted_at":"2026-04-25T16:39:16Z","title":"Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-05-08T08:08:24.524671Z"},"links":{"citing_paper":"/paper/2604.23374"},"observation_digest":"sha256:ea1ce095e9348ee34f9e6bdc364a77f39cade6f29f98706bb2924a87370cbe49","observation_id":"e43098dc-782c-4561-a942-78140caa4096","resolution":{"observed_at":"2026-05-26T17:17:45.765660Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.23643","last_updated":"2025-09-03T12:30:47Z","snapshot_observed_at":"2026-07-06T21:33:02.686798Z","submitted_at":"2025-05-29T16:50:41Z","title":"Securing AI Agents with Information-Flow Control","version":2},"cited_work":{"arxiv_id":"2505.23643","doi":"10.48550/arxiv.2505.23643","metadata_source":"pith","pith_arxiv_id":"2505.23643","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Securing AI Agents with Information-Flow Control","venue":"cs.CR","work_id":"58ee5225-7de4-4e38-b970-5afd29ddd925","year":2025},"citing_paper":{"arxiv_id":"2604.23374","last_updated":"2026-04-25T16:39:16Z","snapshot_observed_at":"2026-07-06T23:09:38.799345Z","submitted_at":"2026-04-25T16:39:16Z","title":"Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-05-08T08:08:24.524671Z"},"links":{"cited_paper":"/paper/2505.23643","citing_paper":"/paper/2604.23374"},"observation_digest":"sha256:a171422934826f68b32fb22f27e237348c846efc3be9943cfdcea49db672b30e","observation_id":"bc02fca0-ddee-49d7-82b8-630fa8cf2e92","resolution":{"observed_at":"2026-05-15T11:56:37.360040Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2503.18813","last_updated":"2025-06-24T08:05:33Z","snapshot_observed_at":"2026-08-06T07:36:52.841128Z","submitted_at":"2025-03-24T15:54:10Z","title":"Defeating Prompt Injections by Design","version":2},"cited_work":{"arxiv_id":"2503.18813","doi":"10.48550/arxiv.2503.18813","metadata_source":"pith","pith_arxiv_id":"2503.18813","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Defeating Prompt Injections by Design","venue":"cs.CR","work_id":"86405b86-1c51-4042-9b04-aff0b6541411","year":2025},"citing_paper":{"arxiv_id":"2604.23374","last_updated":"2026-04-25T16:39:16Z","snapshot_observed_at":"2026-07-06T23:09:38.799345Z","submitted_at":"2026-04-25T16:39:16Z","title":"Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-05-08T08:08:24.524671Z"},"links":{"cited_paper":"/paper/2503.18813","citing_paper":"/paper/2604.23374"},"observation_digest":"sha256:7960e4c4340038475358ba73e395b2b277b42ce6ccffeba195f0b9595139e900","observation_id":"f1f14165-85e0-4f9b-8a09-b75b52e0f5fe","resolution":{"observed_at":"2026-05-13T06:58:51.233859Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-07-15T18:20:36.91954+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-15T18:20:36.91954+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"4a0af153-55a8-4d48-ac7d-5085c927537e","year":2024},"citing_paper":{"arxiv_id":"2604.23374","last_updated":"2026-04-25T16:39:16Z","snapshot_observed_at":"2026-07-06T23:09:38.799345Z","submitted_at":"2026-04-25T16:39:16Z","title":"Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-05-08T08:08:24.524671Z"},"links":{"citing_paper":"/paper/2604.23374"},"observation_digest":"sha256:c6d2709aa11ecc78bea497148aa0942380423c4b0fcf68ab7ed4570b6b6c5732","observation_id":"309daddd-59c8-4f30-a318-51dfdce633cc","resolution":{"observed_at":"2026-05-26T17:17:45.761006Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"72356e90-316d-4071-9166-5b33a0ea0489","year":2026},"citing_paper":{"arxiv_id":"2604.23374","last_updated":"2026-04-25T16:39:16Z","snapshot_observed_at":"2026-07-06T23:09:38.799345Z","submitted_at":"2026-04-25T16:39:16Z","title":"Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-05-08T08:08:24.524671Z"},"links":{"citing_paper":"/paper/2604.23374"},"observation_digest":"sha256:165d631208005c3bc1ddde5dc8dd349e997ca6c4f5cc5560df0a1d4d46e1f77a","observation_id":"37c35bc0-953c-4694-a350-71b6497b8752","resolution":{"observed_at":"2026-05-26T17:17:45.790276Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Cox, Jaeyeon Jung, Patrick D","venue":null,"work_id":"36657db6-1f18-4bc1-9f19-30d518ece7fb","year":2010},"citing_paper":{"arxiv_id":"2604.23374","last_updated":"2026-04-25T16:39:16Z","snapshot_observed_at":"2026-07-06T23:09:38.799345Z","submitted_at":"2026-04-25T16:39:16Z","title":"Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-05-08T08:08:24.524671Z"},"links":{"citing_paper":"/paper/2604.23374"},"observation_digest":"sha256:bb421c1c40fd9b33187a96d07b2cb625ecb01f13ad245b4d2a7e5a2f05bd39ac","observation_id":"9668da36-e734-4079-9f1b-4eb0a14fc900","resolution":{"observed_at":"2026-05-26T17:17:45.794060Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.48550/arxiv.2403","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T10:51:59.991151Z","title":"Bonneville, X","venue":null,"work_id":"d9a357d6-1db7-4b66-abce-ce8241660715","year":2024},"citing_paper":{"arxiv_id":"2604.23374","last_updated":"2026-04-25T16:39:16Z","snapshot_observed_at":"2026-07-06T23:09:38.799345Z","submitted_at":"2026-04-25T16:39:16Z","title":"Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-05-08T08:08:24.524671Z"},"links":{"citing_paper":"/paper/2604.23374"},"observation_digest":"sha256:0a41a30c8c9665b223d55634ff7550805aaf243cc234d7a7c1d7bca0b43fe6b2","observation_id":"2bb0e8dd-b6f4-41ef-8bad-3f5759f08c11","resolution":{"observed_at":"2026-05-08T22:39:20.544988Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-05-21T15:23:24.408364+00:00","source":"crossref_status_cache"},{"observed_at":"2026-05-21T15:23:24.408364+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"34e3fe9c-d3d7-41f6-bc4b-7f6322b69f04","year":2025},"citing_paper":{"arxiv_id":"2604.23374","last_updated":"2026-04-25T16:39:16Z","snapshot_observed_at":"2026-07-06T23:09:38.799345Z","submitted_at":"2026-04-25T16:39:16Z","title":"Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-05-08T08:08:24.524671Z"},"links":{"citing_paper":"/paper/2604.23374"},"observation_digest":"sha256:87770ba2887353a4693856d68a9a1817027ac1652d5d7d6620b5b12abe72883b","observation_id":"c6b29b23-8e5c-4c32-98f6-934f5d39b3dc","resolution":{"observed_at":"2026-05-26T17:17:45.777767Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"024dcc1e-1e9f-4551-8e24-52ac3c98055d","year":2025},"citing_paper":{"arxiv_id":"2604.23374","last_updated":"2026-04-25T16:39:16Z","snapshot_observed_at":"2026-07-06T23:09:38.799345Z","submitted_at":"2026-04-25T16:39:16Z","title":"Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-05-08T08:08:24.524671Z"},"links":{"citing_paper":"/paper/2604.23374"},"observation_digest":"sha256:304f89ead2dbeb0e32a846b98f6d42398d2336228cc982b3136f1f0863ab6ffd","observation_id":"de137683-7855-4c21-acc8-243788ff39b7","resolution":{"observed_at":"2026-05-26T17:17:45.773263Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"8536531a-f96a-4215-b4a3-63cff02e6a2b","year":2025},"citing_paper":{"arxiv_id":"2604.23374","last_updated":"2026-04-25T16:39:16Z","snapshot_observed_at":"2026-07-06T23:09:38.799345Z","submitted_at":"2026-04-25T16:39:16Z","title":"Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-05-08T08:08:24.524671Z"},"links":{"citing_paper":"/paper/2604.23374"},"observation_digest":"sha256:fe57f88b40fcd4dc6bf545b04bea8189b7fa11bc128519c79862ab0182c7cb76","observation_id":"25f50a1d-a2b2-4bdc-85a4-40646a72572f","resolution":{"observed_at":"2026-05-26T17:17:45.818900Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"aad3dd65-13e1-479e-86b0-f5b56b1d36a8","year":2025},"citing_paper":{"arxiv_id":"2604.23374","last_updated":"2026-04-25T16:39:16Z","snapshot_observed_at":"2026-07-06T23:09:38.799345Z","submitted_at":"2026-04-25T16:39:16Z","title":"Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-05-08T08:08:24.524671Z"},"links":{"citing_paper":"/paper/2604.23374"},"observation_digest":"sha256:ed775ceb22f81b4bf13db7c6170c5e0d47ab3a9e0281315e7ce41c5faf67d0e9","observation_id":"a5600e06-184d-4913-8a7e-1452a15c3b86","resolution":{"observed_at":"2026-05-26T17:17:45.807474Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.05499","last_updated":"2025-12-29T02:25:27Z","snapshot_observed_at":"2026-07-06T15:40:27.639368Z","submitted_at":"2023-06-08T18:43:11Z","title":"Prompt Injection attack against LLM-integrated Applications","version":3},"cited_work":{"arxiv_id":"2306.05499","doi":"10.48550/arxiv.2306.05499","metadata_source":"pith","pith_arxiv_id":"2306.05499","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Prompt Injection attack against LLM-integrated Applications","venue":"cs.CR","work_id":"977b4683-bba6-49d6-8f3d-496c41cb7fac","year":2023},"citing_paper":{"arxiv_id":"2604.23374","last_updated":"2026-04-25T16:39:16Z","snapshot_observed_at":"2026-07-06T23:09:38.799345Z","submitted_at":"2026-04-25T16:39:16Z","title":"Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-05-08T08:08:24.524671Z"},"links":{"cited_paper":"/paper/2306.05499","citing_paper":"/paper/2604.23374"},"observation_digest":"sha256:325c24c8e9e4fa7ad6c019e954fc45ada51d07d39fccdcb7b8e45d13b86dbeae","observation_id":"53ac189d-055a-4a79-8567-f40d897fbeda","resolution":{"observed_at":"2026-05-11T21:16:57.750966Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"7d038a5d-3fa1-4d2e-aa21-7cdb3a1a3db9","year":2024},"citing_paper":{"arxiv_id":"2604.23374","last_updated":"2026-04-25T16:39:16Z","snapshot_observed_at":"2026-07-06T23:09:38.799345Z","submitted_at":"2026-04-25T16:39:16Z","title":"Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-05-08T08:08:24.524671Z"},"links":{"citing_paper":"/paper/2604.23374"},"observation_digest":"sha256:64ab42cef480a91e229a41c846a26086a5e1f7158a8e9e4cdbf7f00e9e869cfb","observation_id":"4b62226a-2b62-44de-b8f9-282770dc42c9","resolution":{"observed_at":"2026-05-26T17:17:45.826821Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"4ad48a38-aa6a-4068-b741-9a829c112080","year":2024},"citing_paper":{"arxiv_id":"2604.23374","last_updated":"2026-04-25T16:39:16Z","snapshot_observed_at":"2026-07-06T23:09:38.799345Z","submitted_at":"2026-04-25T16:39:16Z","title":"Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-05-08T08:08:24.524671Z"},"links":{"citing_paper":"/paper/2604.23374"},"observation_digest":"sha256:42f14cb9653653eec2aad0b3b47598156c4b5b3951353166a43c2b032f69badf","observation_id":"4d598ef5-2ed9-457b-906f-ac36837ab6b0","resolution":{"observed_at":"2026-05-26T17:17:45.799185Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"628396e6-138e-447d-98a0-72fe76a1936f","year":2024},"citing_paper":{"arxiv_id":"2604.23374","last_updated":"2026-04-25T16:39:16Z","snapshot_observed_at":"2026-07-06T23:09:38.799345Z","submitted_at":"2026-04-25T16:39:16Z","title":"Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-05-08T08:08:24.524671Z"},"links":{"citing_paper":"/paper/2604.23374"},"observation_digest":"sha256:910fb137f28644c9683c22c603767c75f2f3232426b0345fcb35c3cd308ef60b","observation_id":"d4488f61-a71e-4926-820a-2d6211dcac83","resolution":{"observed_at":"2026-05-26T17:17:45.786113Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2211.09527","last_updated":"2022-11-17T13:43:20Z","snapshot_observed_at":"2026-07-06T14:19:47.424778Z","submitted_at":"2022-11-17T13:43:20Z","title":"Ignore Previous Prompt: Attack Techniques For Language Models","version":1},"cited_work":{"arxiv_id":"2211.09527","doi":"10.48550/arxiv.2211.09527","metadata_source":"pith","pith_arxiv_id":"2211.09527","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Ignore Previous Prompt: Attack Techniques For Language Models","venue":"cs.CL","work_id":"a7c5b6ec-3407-4330-96c8-3fc58e7d410b","year":2022},"citing_paper":{"arxiv_id":"2604.23374","last_updated":"2026-04-25T16:39:16Z","snapshot_observed_at":"2026-07-06T23:09:38.799345Z","submitted_at":"2026-04-25T16:39:16Z","title":"Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-05-08T08:08:24.524671Z"},"links":{"cited_paper":"/paper/2211.09527","citing_paper":"/paper/2604.23374"},"observation_digest":"sha256:b51657e4b1f266e6da8d805765a78f9e101c6b14e101c421c5222c152a967bb6","observation_id":"e18d46ad-c047-4115-b616-619e90deafe5","resolution":{"observed_at":"2026-05-11T20:46:11.335356Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-05-24T11:53:03.018758+00:00","source":"crossref_status_cache"},{"observed_at":"2026-05-24T11:53:03.018758+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Maddison, and Tatsunori Hashimoto","venue":null,"work_id":"fb10015e-a935-47a1-bbf1-b97a8160698f","year":2024},"citing_paper":{"arxiv_id":"2604.23374","last_updated":"2026-04-25T16:39:16Z","snapshot_observed_at":"2026-07-06T23:09:38.799345Z","submitted_at":"2026-04-25T16:39:16Z","title":"Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-05-08T08:08:24.524671Z"},"links":{"citing_paper":"/paper/2604.23374"},"observation_digest":"sha256:927eeeec92ce04503d010fa7d7338f98d99bf33e27c151a95af9d650750df246","observation_id":"be9742d8-57e9-405e-85c1-f40b6f9b4b6e","resolution":{"observed_at":"2026-05-26T17:17:45.822720Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"a4d0ef53-1499-43a4-8408-37d43f11a793","year":null},"citing_paper":{"arxiv_id":"2604.23374","last_updated":"2026-04-25T16:39:16Z","snapshot_observed_at":"2026-07-06T23:09:38.799345Z","submitted_at":"2026-04-25T16:39:16Z","title":"Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-05-08T08:08:24.524671Z"},"links":{"citing_paper":"/paper/2604.23374"},"observation_digest":"sha256:7647aae29546f0ea01006e1ec359964504a9c582d38c9812197c3885385db0d3","observation_id":"91617821-367a-4c61-a48b-a641912cb500","resolution":{"observed_at":"2026-05-26T17:17:45.814908Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1109/sp40000.2020.00061","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"In2020 IEEE Symposium on Security and Privacy, SP 2020, San Francisco, CA, USA, May 18-21","venue":null,"work_id":"17cb9a92-c06e-4a95-8fb1-8e89e07a832b","year":2020},"citing_paper":{"arxiv_id":"2604.23374","last_updated":"2026-04-25T16:39:16Z","snapshot_observed_at":"2026-07-06T23:09:38.799345Z","submitted_at":"2026-04-25T16:39:16Z","title":"Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-05-08T08:08:24.524671Z"},"links":{"citing_paper":"/paper/2604.23374"},"observation_digest":"sha256:9c9c51e22f80d464d013e7d8dbbd060fd184fc8069398a8a9fa69916b29c9276","observation_id":"71879c9d-305f-42db-9460-b80d3384e574","resolution":{"observed_at":"2026-05-08T22:39:20.586947Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2203.14987","last_updated":"2022-03-28T18:00:51Z","snapshot_observed_at":"2026-07-06T12:53:50.496350Z","submitted_at":"2022-03-28T18:00:51Z","title":"Multilingual Knowledge Graph Completion with Self-Supervised Adaptive Graph Alignment","version":1},"cited_work":{"arxiv_id":"2203.14987","doi":"10.48550/arxiv","metadata_source":"doi_reference","pith_arxiv_id":"2203.14987","snapshot_observed_at":"2026-07-09T21:46:34.506658Z","title":"Dickerson","venue":"cs.AI","work_id":"5c2060c6-427c-4321-be22-49ccae439d80","year":2025},"citing_paper":{"arxiv_id":"2604.23374","last_updated":"2026-04-25T16:39:16Z","snapshot_observed_at":"2026-07-06T23:09:38.799345Z","submitted_at":"2026-04-25T16:39:16Z","title":"Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-05-08T08:08:24.524671Z"},"links":{"cited_paper":"/paper/2203.14987","citing_paper":"/paper/2604.23374"},"observation_digest":"sha256:1405db33e56480843b0a495af6849a6a668212f63e06b44506a138de236372e0","observation_id":"431780f5-d8ef-4116-8f2c-25112a40c2cd","resolution":{"observed_at":"2026-05-08T22:45:09.901754Z","resolver_source":"doi","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.48550/arxiv.2404","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-02T00:56:23.877510Z","title":"Tao, Z., Lin, T., Chen, X., Li, H., Wu, Y ., Li, Y ., Jin, Z., Huang, F., Tao, D., and Zhou, J","venue":null,"work_id":"91b09116-dd50-448f-90e5-7769c0e16d9d","year":2024},"citing_paper":{"arxiv_id":"2604.23374","last_updated":"2026-04-25T16:39:16Z","snapshot_observed_at":"2026-07-06T23:09:38.799345Z","submitted_at":"2026-04-25T16:39:16Z","title":"Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-05-08T08:08:24.524671Z"},"links":{"citing_paper":"/paper/2604.23374"},"observation_digest":"sha256:215e929aece51fe521e6c1a5ff73c9ee0963c37596e0132b18f8ea35dd5ff0b9","observation_id":"53596749-4a94-41a6-9885-ca7193fae4d8","resolution":{"observed_at":"2026-05-08T22:39:20.625600Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2604.03598","last_updated":"2026-04-04T05:49:30Z","snapshot_observed_at":"2026-07-13T12:52:48.858079Z","submitted_at":"2026-04-04T05:49:30Z","title":"AttackEval: A Systematic Empirical Study of Prompt Injection Attack Effectiveness Against Large Language Models","version":1},"cited_work":{"arxiv_id":"2604.03598","doi":"10.48550/arxiv.2604.03598","metadata_source":"pith","pith_arxiv_id":"2604.03598","snapshot_observed_at":"2026-08-05T02:49:54.815029Z","title":"AttackEval: A Systematic Empirical Study of Prompt Injection Attack Effectiveness Against Large Language Models","venue":"cs.CR","work_id":"45aba87b-c4b6-478f-89e0-e04a2de55b9f","year":2026},"citing_paper":{"arxiv_id":"2604.23374","last_updated":"2026-04-25T16:39:16Z","snapshot_observed_at":"2026-07-06T23:09:38.799345Z","submitted_at":"2026-04-25T16:39:16Z","title":"Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-05-08T08:08:24.524671Z"},"links":{"cited_paper":"/paper/2604.03598","citing_paper":"/paper/2604.23374"},"observation_digest":"sha256:723eb80d917353bb72cec9f6176b3f8003118e7a458d3e74fb8af42380ea8987","observation_id":"40f59f76-2b7d-4cc4-a03a-2b52af494bdd","resolution":{"observed_at":"2026-05-11T20:46:11.314863Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"5981af96-a065-4084-86f2-cf3b8e561a79","year":2023},"citing_paper":{"arxiv_id":"2604.23374","last_updated":"2026-04-25T16:39:16Z","snapshot_observed_at":"2026-07-06T23:09:38.799345Z","submitted_at":"2026-04-25T16:39:16Z","title":"Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-05-08T08:08:24.524671Z"},"links":{"citing_paper":"/paper/2604.23374"},"observation_digest":"sha256:d48e68487b9a4a09c47661814abde15cd955517cf5127fd400aeb0ca23531183","observation_id":"b1737e83-265e-4103-8b48-81628c616f76","resolution":{"observed_at":"2026-05-26T17:17:45.811106Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.14197","last_updated":"2025-01-27T08:51:16Z","snapshot_observed_at":"2026-07-06T17:06:45.522731Z","submitted_at":"2023-12-21T01:08:39Z","title":"Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models","version":4},"cited_work":{"arxiv_id":"2312.14197","doi":"10.48550/arxiv.2312.14197","metadata_source":"arxiv_reference","pith_arxiv_id":"2312.14197","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Benchmarking and defending against indirect prompt injection attacks on large language models","venue":"arXiv (Cornell University)","work_id":"0a458c42-fb17-4655-82ad-c93057550c76","year":2025},"citing_paper":{"arxiv_id":"2604.23374","last_updated":"2026-04-25T16:39:16Z","snapshot_observed_at":"2026-07-06T23:09:38.799345Z","submitted_at":"2026-04-25T16:39:16Z","title":"Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-05-08T08:08:24.524671Z"},"links":{"cited_paper":"/paper/2312.14197","citing_paper":"/paper/2604.23374"},"observation_digest":"sha256:7d97f3e58ee0226ef0c8c2a280e8b0b7a48f96a13e6da02905530c60e30212b7","observation_id":"ddf3556a-3549-46ad-a5f2-bdcf15b60da8","resolution":{"observed_at":"2026-05-08T22:39:20.577096Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-05T17:21:19.236086Z","title":null,"venue":null,"work_id":"7151e781-4f50-4a52-896e-4d91a6fff23c","year":2024},"citing_paper":{"arxiv_id":"2604.23374","last_updated":"2026-04-25T16:39:16Z","snapshot_observed_at":"2026-07-06T23:09:38.799345Z","submitted_at":"2026-04-25T16:39:16Z","title":"Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-05-08T08:08:24.524671Z"},"links":{"citing_paper":"/paper/2604.23374"},"observation_digest":"sha256:d3cbf1a29662a21e692dcaaf53d77b31ffd607eecd3b94fe2297771304b1b127","observation_id":"aa1bb7d0-5abe-4d0a-9646-be9a60c2c707","resolution":{"observed_at":"2026-05-26T17:17:45.803585Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.18653/v1/2024.findings-acl.624","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-03T00:07:27.497937Z","title":"2024 , address =","venue":"Findings of the Association for Computational Linguistics ACL 2024","work_id":"31ff5463-bfee-4ce3-9d67-bd663318c94c","year":2024},"citing_paper":{"arxiv_id":"2604.23374","last_updated":"2026-04-25T16:39:16Z","snapshot_observed_at":"2026-07-06T23:09:38.799345Z","submitted_at":"2026-04-25T16:39:16Z","title":"Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-05-08T08:08:24.524671Z"},"links":{"citing_paper":"/paper/2604.23374"},"observation_digest":"sha256:4f54d134785885b22c843953950878b0137b9721cf690af62df6509509da2355","observation_id":"269646da-6b54-4547-a5ea-1347b0052b8c","resolution":{"observed_at":"2026-05-08T22:39:20.568342Z","resolver_source":"doi","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-01T07:38:14.622726+00:00","source":"crossref_status_cache"},{"observed_at":"2026-08-01T07:38:14.622726+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1145/3460120.3484798","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":null,"venue":null,"work_id":"b7ed79ca-be0b-436f-838b-d43e4bbb3d42","year":2021},"citing_paper":{"arxiv_id":"2604.23374","last_updated":"2026-04-25T16:39:16Z","snapshot_observed_at":"2026-07-06T23:09:38.799345Z","submitted_at":"2026-04-25T16:39:16Z","title":"Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-05-08T08:08:24.524671Z"},"links":{"citing_paper":"/paper/2604.23374"},"observation_digest":"sha256:6f600126b283b5637c0ca89ccc0b33bbd070c6400366dfb6fa3bb84371f8d040","observation_id":"a631f92d-3735-41fd-817d-c4d19217f655","resolution":{"observed_at":"2026-05-08T22:39:20.651757Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"6db42359-b9e6-444b-aa66-a30f945160a1","year":2025},"citing_paper":{"arxiv_id":"2604.23374","last_updated":"2026-04-25T16:39:16Z","snapshot_observed_at":"2026-07-06T23:09:38.799345Z","submitted_at":"2026-04-25T16:39:16Z","title":"Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-05-08T08:08:24.524671Z"},"links":{"citing_paper":"/paper/2604.23374"},"observation_digest":"sha256:79d9eef5ea16de7dbaea26e7dd17cb49135a3c5ac5b1b555f8b62012ba191e88","observation_id":"c034c666-1098-416e-b38a-18da1022b469","resolution":{"observed_at":"2026-05-26T17:17:45.834822Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1145/3689768","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":null,"venue":"Proceedings of the ACM on Programming Languages","work_id":"dc04bf58-806b-4873-b7c2-e6d9b8737d9b","year":2024},"citing_paper":{"arxiv_id":"2604.23374","last_updated":"2026-04-25T16:39:16Z","snapshot_observed_at":"2026-07-06T23:09:38.799345Z","submitted_at":"2026-04-25T16:39:16Z","title":"Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-05-08T08:08:24.524671Z"},"links":{"citing_paper":"/paper/2604.23374"},"observation_digest":"sha256:293bc773ef1a375428343b770f0bfc8ef9bf05dcf0c459fd75f07bb3bd0532e6","observation_id":"396d376b-82d4-42ac-9b81-e5729798ca7a","resolution":{"observed_at":"2026-05-08T22:39:20.605202Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2502.08966","last_updated":"2025-02-14T04:16:40Z","snapshot_observed_at":"2026-08-06T02:50:59.595995Z","submitted_at":"2025-02-13T05:06:22Z","title":"RTBAS: Defending LLM Agents Against Prompt Injection and Privacy Leakage","version":2},"cited_work":{"arxiv_id":"2502.08966","doi":"10.48550/arxiv.2502.08966","metadata_source":"pith","pith_arxiv_id":"2502.08966","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Rtbas: Defending llm agents against prompt injection and privacy leakage","venue":"cs.CR","work_id":"b2ed3d15-7e6f-4e4d-bf10-b9ac8029133a","year":2025},"citing_paper":{"arxiv_id":"2604.23374","last_updated":"2026-04-25T16:39:16Z","snapshot_observed_at":"2026-07-06T23:09:38.799345Z","submitted_at":"2026-04-25T16:39:16Z","title":"Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-05-08T08:08:24.524671Z"},"links":{"cited_paper":"/paper/2502.08966","citing_paper":"/paper/2604.23374"},"observation_digest":"sha256:6ffa71646b6a54ec5279fba5bebed76b29098b8e751594e9261b81ca7f4856d1","observation_id":"ed8708f0-3a77-45fe-b2fa-0a8fa60a5e7d","resolution":{"observed_at":"2026-05-08T22:39:20.560351Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2604.23374","last_updated":"2026-04-25T16:39:16Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-07-06T23:09:38.799345Z","submitted_at":"2026-04-25T16:39:16Z","title":"Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents"},"reference_resolution":{"displayed":40,"state_counts":{"malformed_identifier":1,"metadata_mismatch":6,"parse_uncertain":0,"unresolved":18,"verified_exact":13,"verified_fuzzy":2},"total_outbound_references":40},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 7 August 2026, this Paper Citation Record lists 40 of 40 outbound references and 13 inbound Pith citation observations for arXiv:2604.23374."}