{"as_of":"2026-07-23T09:57:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:8f3f027bd8e356365e4761e880e8e904a842e3874f2ea651bc1bcb9863941ec7","coverage":[{"denominator":20,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":20,"source":"paper_references, paper_reference_links","source_observed_at":"2026-05-08T02:37:16.916935Z","state":"measured"},{"denominator":21,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":21,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-07-23T06:31:01.910684+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-07-10T08:08:21.077290Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"pith","source_observed_at":"2026-07-10T08:16:58.855185Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2604.24657","last_updated":"2026-04-27T16:22:27Z","snapshot_observed_at":"2026-07-06T23:10:38.548416Z","submitted_at":"2026-04-27T16:22:27Z","title":"AgentWard: A Lifecycle Security Architecture for Autonomous AI Agents","version":1},"cited_work":{"arxiv_id":"2604.24657","doi":null,"metadata_source":"pith","pith_arxiv_id":"2604.24657","snapshot_observed_at":"2026-07-10T08:16:58.855185Z","title":"AgentWard: A Lifecycle Security Architecture for Autonomous AI Agents","venue":"cs.CR","work_id":"95bc828d-ef4a-4d4f-9a73-813460ca39e3","year":2026},"citing_paper":{"arxiv_id":"2607.08395","last_updated":"2026-07-09T12:18:40Z","snapshot_observed_at":"2026-07-12T23:18:29.773153Z","submitted_at":"2026-07-09T12:18:40Z","title":"Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents","version":1},"reference_index":43,"source":"arxiv_source","source_observed_at":"2026-07-10T08:08:21.077290Z"},"links":{"cited_paper":"/paper/2604.24657","citing_paper":"/paper/2607.08395"},"observation_digest":"sha256:05ae0d3e9c467e83e41fb974c1922ee9392c65f4fbd32fad830b36d6efed4461","observation_id":"1912f538-b7c3-4d29-87d0-a343f6b956a6","resolution":{"observed_at":"2026-07-10T08:16:58.856614Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-23T06:31:01.910684+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-23T06:31:01.910684+00:00","source":"crossref"},{"observed_at":"2026-07-23T06:30:56.940895+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2604.24657/citation-record","integrity":"/paper/2604.24657/integrity","json":"/paper/2604.24657/citation-record.json","paper":"/paper/2604.24657"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2210.03629","last_updated":"2023-03-10T01:00:17Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2022-10-06T01:00:32Z","title":"ReAct: Synergizing Reasoning and Acting in Language Models","version":3},"cited_work":{"arxiv_id":"2210.03629","doi":"10.48550/arxiv.2210.03629","metadata_source":"pith","pith_arxiv_id":"2210.03629","snapshot_observed_at":"2026-07-11T03:47:47.842265Z","title":"ReAct: Synergizing Reasoning and Acting in Language Models","venue":"cs.CL","work_id":"407a2351-25f1-497d-b611-f77d0292a8e6","year":2022},"citing_paper":{"arxiv_id":"2604.24657","last_updated":"2026-04-27T16:22:27Z","snapshot_observed_at":"2026-07-06T23:10:38.548416Z","submitted_at":"2026-04-27T16:22:27Z","title":"AgentWard: A Lifecycle Security Architecture for Autonomous AI Agents","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-05-08T02:37:16.916935Z"},"links":{"cited_paper":"/paper/2210.03629","citing_paper":"/paper/2604.24657"},"observation_digest":"sha256:3c6f9fb8e2000bea09a883a878f54f7873edbc2f6100859a5f45b53b66dd292f","observation_id":"bd41f25e-b492-4612-bdc1-37b015696b47","resolution":{"observed_at":"2026-05-11T22:41:33.495348Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-23T06:31:01.910684+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-23T06:31:01.910684+00:00","source":"crossref"},{"observed_at":"2026-07-12T03:19:36.897515+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-12T03:19:36.897515+00:00","source":"openalex_status_cache"},{"observed_at":"2026-07-23T06:30:56.940895+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Toolformer: Language models can teach themselves to use tools","venue":null,"work_id":"f9389e3e-7a6a-4a23-aabd-5b53d994d9cd","year":2023},"citing_paper":{"arxiv_id":"2604.24657","last_updated":"2026-04-27T16:22:27Z","snapshot_observed_at":"2026-07-06T23:10:38.548416Z","submitted_at":"2026-04-27T16:22:27Z","title":"AgentWard: A Lifecycle Security Architecture for Autonomous AI Agents","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-05-08T02:37:16.916935Z"},"links":{"citing_paper":"/paper/2604.24657"},"observation_digest":"sha256:c456aa9ec9d031fb3ce9b303045e29e8a4242babb7a31e363ab9c4ba7df94431","observation_id":"b624858a-3835-408f-bd6e-9a5404e4270e","resolution":{"observed_at":"2026-05-26T22:53:11.271786Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-23T06:31:01.910684+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-23T06:31:01.910684+00:00","source":"crossref"},{"observed_at":"2026-07-23T06:30:56.940895+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2302.04761","last_updated":"2023-02-09T16:49:57Z","snapshot_observed_at":"2026-07-06T14:50:07.491434Z","submitted_at":"2023-02-09T16:49:57Z","title":"Toolformer: Language Models Can Teach Themselves to Use Tools","version":1},"cited_work":{"arxiv_id":"2302.04761","doi":"10.48550/arxiv.2302.04761","metadata_source":"pith","pith_arxiv_id":"2302.04761","snapshot_observed_at":"2026-07-10T18:37:31.182252Z","title":"Toolformer: Language Models Can Teach Themselves to Use Tools","venue":"cs.CL","work_id":"9bce40c8-cfd7-4983-80e0-c3bd4402322a","year":2023},"citing_paper":{"arxiv_id":"2604.24657","last_updated":"2026-04-27T16:22:27Z","snapshot_observed_at":"2026-07-06T23:10:38.548416Z","submitted_at":"2026-04-27T16:22:27Z","title":"AgentWard: A Lifecycle Security Architecture for Autonomous AI Agents","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-05-08T02:37:16.916935Z"},"links":{"cited_paper":"/paper/2302.04761","citing_paper":"/paper/2604.24657"},"observation_digest":"sha256:bcbe8c3c6a9acd7cf6d72e0fa17a42ab216cc93ed5529c39babf6a25223583b4","observation_id":"5fc9b7d1-b8dd-45a3-b0c1-83a65c37569b","resolution":{"observed_at":"2026-05-11T22:41:33.657354Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-23T06:31:01.910684+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-23T06:31:01.910684+00:00","source":"crossref"},{"observed_at":"2026-07-12T03:19:33.985164+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-12T03:19:33.985164+00:00","source":"openalex_status_cache"},{"observed_at":"2026-07-23T06:30:56.940895+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"OpenClaw: Personal AI assistant","venue":null,"work_id":"9cde21a9-4b62-4995-a363-9d2e58093faa","year":2026},"citing_paper":{"arxiv_id":"2604.24657","last_updated":"2026-04-27T16:22:27Z","snapshot_observed_at":"2026-07-06T23:10:38.548416Z","submitted_at":"2026-04-27T16:22:27Z","title":"AgentWard: A Lifecycle Security Architecture for Autonomous AI Agents","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-05-08T02:37:16.916935Z"},"links":{"citing_paper":"/paper/2604.24657"},"observation_digest":"sha256:d1d33fb6d6fd126437cc73824fbdb87f82f5113f45b3ab3da93b29f1a0de9f7f","observation_id":"b891321f-8efd-4ca7-86a0-1dc574e96140","resolution":{"observed_at":"2026-05-26T22:53:11.265143Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-23T06:31:01.910684+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-23T06:31:01.910684+00:00","source":"crossref"},{"observed_at":"2026-07-23T06:30:56.940895+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.08560","last_updated":"2024-02-12T18:59:46Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-10-12T17:51:32Z","title":"MemGPT: Towards LLMs as Operating Systems","version":2},"cited_work":{"arxiv_id":"2310.08560","doi":"10.48550/arxiv.2310.08560","metadata_source":"pith","pith_arxiv_id":"2310.08560","snapshot_observed_at":"2026-07-11T03:47:48.199289Z","title":"MemGPT: Towards LLMs as Operating Systems","venue":"cs.AI","work_id":"2698f5ad-c84c-40ca-b839-0912dae10ba2","year":2023},"citing_paper":{"arxiv_id":"2604.24657","last_updated":"2026-04-27T16:22:27Z","snapshot_observed_at":"2026-07-06T23:10:38.548416Z","submitted_at":"2026-04-27T16:22:27Z","title":"AgentWard: A Lifecycle Security Architecture for Autonomous AI Agents","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-05-08T02:37:16.916935Z"},"links":{"cited_paper":"/paper/2310.08560","citing_paper":"/paper/2604.24657"},"observation_digest":"sha256:3f9ada68d0940c2eb64b890f2a0dad63691724056b27e1a51b7e574f9b0499bc","observation_id":"db9286df-99f9-41f5-a5b7-60a90dab236f","resolution":{"observed_at":"2026-05-11T22:41:33.812799Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-23T06:31:01.910684+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-23T06:31:01.910684+00:00","source":"crossref"},{"observed_at":"2026-07-13T15:49:35.543803+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-13T15:49:35.543803+00:00","source":"openalex_status_cache"},{"observed_at":"2026-07-23T06:30:56.940895+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2603.11619","doi":"10.48550/arxiv.2603.11619","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T12:15:01.137692Z","title":"Taming OpenClaw: Security analysis and mitigation of autonomous LLM agent threats","venue":null,"work_id":"007f6b31-1c90-4787-9431-6d395fb755d9","year":2026},"citing_paper":{"arxiv_id":"2604.24657","last_updated":"2026-04-27T16:22:27Z","snapshot_observed_at":"2026-07-06T23:10:38.548416Z","submitted_at":"2026-04-27T16:22:27Z","title":"AgentWard: A Lifecycle Security Architecture for Autonomous AI Agents","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-05-08T02:37:16.916935Z"},"links":{"citing_paper":"/paper/2604.24657"},"observation_digest":"sha256:61730c40fa8986a9f7e7ca8a3cedc830d9f415d0504c40adc4ee0ef182bf70bd","observation_id":"e9e004ed-ca25-4f8a-9562-7b511e704a63","resolution":{"observed_at":"2026-05-11T22:41:33.823743Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-23T06:31:01.910684+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-23T06:31:01.910684+00:00","source":"crossref"},{"observed_at":"2026-07-23T06:30:56.940895+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2302.12173","last_updated":"2023-05-05T14:26:17Z","snapshot_observed_at":"2026-07-06T14:55:08.682906Z","submitted_at":"2023-02-23T17:14:38Z","title":"Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection","version":2},"cited_work":{"arxiv_id":"2302.12173","doi":"10.1109/sp61157.2025.00250","metadata_source":"pith","pith_arxiv_id":"2302.12173","snapshot_observed_at":"2026-07-11T11:50:26.030339Z","title":"Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection","venue":"cs.CR","work_id":"7a8cfce1-ada7-4a7a-8516-6f16b1bd077b","year":2023},"citing_paper":{"arxiv_id":"2604.24657","last_updated":"2026-04-27T16:22:27Z","snapshot_observed_at":"2026-07-06T23:10:38.548416Z","submitted_at":"2026-04-27T16:22:27Z","title":"AgentWard: A Lifecycle Security Architecture for Autonomous AI Agents","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-05-08T02:37:16.916935Z"},"links":{"cited_paper":"/paper/2302.12173","citing_paper":"/paper/2604.24657"},"observation_digest":"sha256:7d7c0987f44c747b87f0bad4ad4213e88883829bc015d59f8cb22d0a99d518bb","observation_id":"feca9de0-1db6-463e-b252-c5cc3d79d0c5","resolution":{"observed_at":"2026-05-11T22:41:33.153668Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-23T06:31:01.910684+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-23T06:31:01.910684+00:00","source":"crossref"},{"observed_at":"2026-07-23T06:30:56.940895+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.05499","last_updated":"2025-12-29T02:25:27Z","snapshot_observed_at":"2026-07-06T15:40:27.639368Z","submitted_at":"2023-06-08T18:43:11Z","title":"Prompt Injection attack against LLM-integrated Applications","version":3},"cited_work":{"arxiv_id":"2306.05499","doi":"10.48550/arxiv.2306.05499","metadata_source":"pith","pith_arxiv_id":"2306.05499","snapshot_observed_at":"2026-07-11T02:47:49.696576Z","title":"Prompt Injection attack against LLM-integrated Applications","venue":"cs.CR","work_id":"977b4683-bba6-49d6-8f3d-496c41cb7fac","year":2023},"citing_paper":{"arxiv_id":"2604.24657","last_updated":"2026-04-27T16:22:27Z","snapshot_observed_at":"2026-07-06T23:10:38.548416Z","submitted_at":"2026-04-27T16:22:27Z","title":"AgentWard: A Lifecycle Security Architecture for Autonomous AI Agents","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-05-08T02:37:16.916935Z"},"links":{"cited_paper":"/paper/2306.05499","citing_paper":"/paper/2604.24657"},"observation_digest":"sha256:93bf03c08a001a08c626afedba0e5439555acde62af764206a84244364677255","observation_id":"8fb2f898-49d7-4c9e-ba6d-8f697fa76c1b","resolution":{"observed_at":"2026-05-11T22:41:32.875354Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-23T06:31:01.910684+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-23T06:31:01.910684+00:00","source":"crossref"},{"observed_at":"2026-07-23T06:30:56.940895+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Agentdojo: A dynamic environment to evaluate prompt injection attacks and defenses for LLM agents","venue":null,"work_id":"9ab83970-5ffe-49cb-b739-2ca788677922","year":2024},"citing_paper":{"arxiv_id":"2604.24657","last_updated":"2026-04-27T16:22:27Z","snapshot_observed_at":"2026-07-06T23:10:38.548416Z","submitted_at":"2026-04-27T16:22:27Z","title":"AgentWard: A Lifecycle Security Architecture for Autonomous AI Agents","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-05-08T02:37:16.916935Z"},"links":{"citing_paper":"/paper/2604.24657"},"observation_digest":"sha256:97ebcde4da3af82baa3b6400972ce7f54ff76c402d6b6980709ac6aef4d56895","observation_id":"7f8a7440-a412-4ea2-bc0e-b78af134c8b4","resolution":{"observed_at":"2026-05-26T22:53:11.267473Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-23T06:31:01.910684+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-23T06:31:01.910684+00:00","source":"crossref"},{"observed_at":"2026-07-23T06:30:56.940895+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2601.10338","last_updated":"2026-01-15T12:31:52Z","snapshot_observed_at":"2026-07-06T22:41:48.115083Z","submitted_at":"2026-01-15T12:31:52Z","title":"Agent Skills in the Wild: An Empirical Study of Security Vulnerabilities at Scale","version":1},"cited_work":{"arxiv_id":"2601.10338","doi":"10.48550/arxiv.2601.10338","metadata_source":"pith","pith_arxiv_id":"2601.10338","snapshot_observed_at":"2026-07-10T12:15:01.137692Z","title":"Agent Skills in the Wild: An Empirical Study of Security Vulnerabilities at Scale","venue":"cs.CR","work_id":"0780d782-7977-4d63-a1f2-3ae587a49c98","year":2026},"citing_paper":{"arxiv_id":"2604.24657","last_updated":"2026-04-27T16:22:27Z","snapshot_observed_at":"2026-07-06T23:10:38.548416Z","submitted_at":"2026-04-27T16:22:27Z","title":"AgentWard: A Lifecycle Security Architecture for Autonomous AI Agents","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-05-08T02:37:16.916935Z"},"links":{"cited_paper":"/paper/2601.10338","citing_paper":"/paper/2604.24657"},"observation_digest":"sha256:e816205979a4c1f2129d6d5a68eb94ff03cab64321c5b7a8d2bac63ea8b478c8","observation_id":"dd5e545d-f24e-4fb1-a59a-7a073da6af8b","resolution":{"observed_at":"2026-05-14T23:41:24.390564Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-23T06:31:01.910684+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-23T06:31:01.910684+00:00","source":"crossref"},{"observed_at":"2026-07-23T06:30:56.940895+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2503.03704","doi":"10.48550/arxiv.2503.03704","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T20:57:34.603093Z","title":"Yann Dubois, Balázs Galambosi, Percy Liang, and Tat- sunori B Hashimoto","venue":null,"work_id":"cc008b41-0943-47c8-81e7-bafb5beac6ce","year":2025},"citing_paper":{"arxiv_id":"2604.24657","last_updated":"2026-04-27T16:22:27Z","snapshot_observed_at":"2026-07-06T23:10:38.548416Z","submitted_at":"2026-04-27T16:22:27Z","title":"AgentWard: A Lifecycle Security Architecture for Autonomous AI Agents","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-05-08T02:37:16.916935Z"},"links":{"citing_paper":"/paper/2604.24657"},"observation_digest":"sha256:7975b2a943c8a15321fb8ce02c770dc664a677f50711aa2f66d648028a04fe67","observation_id":"d7f1dce1-4e7c-45f6-9f84-a66a71b98190","resolution":{"observed_at":"2026-05-11T22:41:33.021395Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-23T06:31:01.910684+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-23T06:31:01.910684+00:00","source":"crossref"},{"observed_at":"2026-07-23T06:30:56.940895+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2510.02373","doi":"10.48550/arxiv.2510.02373","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T12:15:01.137692Z","title":"arXiv preprint arXiv:2510.02373 , year=","venue":null,"work_id":"a37f331d-64f2-4356-b52b-3c8131797f0f","year":2025},"citing_paper":{"arxiv_id":"2604.24657","last_updated":"2026-04-27T16:22:27Z","snapshot_observed_at":"2026-07-06T23:10:38.548416Z","submitted_at":"2026-04-27T16:22:27Z","title":"AgentWard: A Lifecycle Security Architecture for Autonomous AI Agents","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-05-08T02:37:16.916935Z"},"links":{"citing_paper":"/paper/2604.24657"},"observation_digest":"sha256:eaeda76abd4e6d14db59a6e64076a6e41667264578cbaca8514acb7494645d5c","observation_id":"238ae6f0-4d26-406f-b277-0d1fd7ce5232","resolution":{"observed_at":"2026-05-11T22:41:33.336015Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-23T06:31:01.910684+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-23T06:31:01.910684+00:00","source":"crossref"},{"observed_at":"2026-07-23T06:30:56.940895+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Agentharm: A benchmark for measuring harmfulness of LLM agents","venue":null,"work_id":"6bd0489a-bcac-4ffa-91e9-90c1231f1fc4","year":2025},"citing_paper":{"arxiv_id":"2604.24657","last_updated":"2026-04-27T16:22:27Z","snapshot_observed_at":"2026-07-06T23:10:38.548416Z","submitted_at":"2026-04-27T16:22:27Z","title":"AgentWard: A Lifecycle Security Architecture for Autonomous AI Agents","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-05-08T02:37:16.916935Z"},"links":{"citing_paper":"/paper/2604.24657"},"observation_digest":"sha256:614f167a869ebc5f15bc7a83de00954a89daa9f559ec15f074d38dd72f955bbb","observation_id":"9efec0c4-c139-4db0-af9a-7166536b6ec2","resolution":{"observed_at":"2026-05-26T22:53:11.269612Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-23T06:31:01.910684+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-23T06:31:01.910684+00:00","source":"crossref"},{"observed_at":"2026-07-23T06:30:56.940895+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2005.09535","last_updated":"2020-05-19T15:49:23Z","snapshot_observed_at":"2026-07-06T09:21:42.055377Z","submitted_at":"2020-05-19T15:49:23Z","title":"Backstabber's Knife Collection: A Review of Open Source Software Supply Chain Attacks","version":1},"cited_work":{"arxiv_id":"2005.09535","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2005.09535","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Backstabber’s knife collection: A review of open source software supply chain attacks","venue":null,"work_id":"46d837e1-5742-459e-954b-8e590ea8617a","year":2020},"citing_paper":{"arxiv_id":"2604.24657","last_updated":"2026-04-27T16:22:27Z","snapshot_observed_at":"2026-07-06T23:10:38.548416Z","submitted_at":"2026-04-27T16:22:27Z","title":"AgentWard: A Lifecycle Security Architecture for Autonomous AI Agents","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-05-08T02:37:16.916935Z"},"links":{"cited_paper":"/paper/2005.09535","citing_paper":"/paper/2604.24657"},"observation_digest":"sha256:f426140bc903e0ea69fdffe49b91327f7db4a419b1f8ab8b2dac640156f4d767","observation_id":"f71e4618-e977-44a1-9d90-1e5e2be710ea","resolution":{"observed_at":"2026-05-11T22:41:33.832995Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-23T06:31:01.910684+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-23T06:31:01.910684+00:00","source":"crossref"},{"observed_at":"2026-07-23T06:30:56.940895+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Struq: Defending against prompt injection with structured queries","venue":null,"work_id":"38a42fd9-08b1-4cf4-a4cb-702881c90367","year":2025},"citing_paper":{"arxiv_id":"2604.24657","last_updated":"2026-04-27T16:22:27Z","snapshot_observed_at":"2026-07-06T23:10:38.548416Z","submitted_at":"2026-04-27T16:22:27Z","title":"AgentWard: A Lifecycle Security Architecture for Autonomous AI Agents","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-05-08T02:37:16.916935Z"},"links":{"citing_paper":"/paper/2604.24657"},"observation_digest":"sha256:dee73e1c6af0375cf2a2ebb2447e6fe078935dde1330a1c40988156f357e37f4","observation_id":"70d4faae-48e7-461a-9d96-b3f6c5a862a7","resolution":{"observed_at":"2026-05-26T22:53:11.273858Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-23T06:31:01.910684+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-23T06:31:01.910684+00:00","source":"crossref"},{"observed_at":"2026-07-23T06:30:56.940895+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2512.16962","doi":"10.48550/arxiv.2512.16962","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T12:15:01.137692Z","title":"arXiv preprint arXiv:2512.16962 , year=","venue":null,"work_id":"90120582-e1b6-45f2-af30-e61c82587d05","year":2025},"citing_paper":{"arxiv_id":"2604.24657","last_updated":"2026-04-27T16:22:27Z","snapshot_observed_at":"2026-07-06T23:10:38.548416Z","submitted_at":"2026-04-27T16:22:27Z","title":"AgentWard: A Lifecycle Security Architecture for Autonomous AI Agents","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-05-08T02:37:16.916935Z"},"links":{"citing_paper":"/paper/2604.24657"},"observation_digest":"sha256:93adc23c398f3eb5d1a4b3abe81e21e2fd2f600b27c256c83714b2cd2b479f7f","observation_id":"4903e39f-f157-4838-bcdb-277bdcb2e31f","resolution":{"observed_at":"2026-05-11T22:41:32.436353Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-23T06:31:01.910684+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-23T06:31:01.910684+00:00","source":"crossref"},{"observed_at":"2026-07-23T06:30:56.940895+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.13208","last_updated":"2024-04-19T22:55:23Z","snapshot_observed_at":"2026-07-06T18:02:57.939351Z","submitted_at":"2024-04-19T22:55:23Z","title":"The Instruction Hierarchy: Training LLMs to Prioritize Privileged Instructions","version":1},"cited_work":{"arxiv_id":"2404.13208","doi":"10.48550/arxiv.2404.13208","metadata_source":"pith","pith_arxiv_id":"2404.13208","snapshot_observed_at":"2026-07-10T12:27:04.237600Z","title":"The Instruction Hierarchy: Training LLMs to Prioritize Privileged Instructions","venue":"cs.CR","work_id":"ba941a96-eb3b-48c0-b52c-5e9463085190","year":2024},"citing_paper":{"arxiv_id":"2604.24657","last_updated":"2026-04-27T16:22:27Z","snapshot_observed_at":"2026-07-06T23:10:38.548416Z","submitted_at":"2026-04-27T16:22:27Z","title":"AgentWard: A Lifecycle Security Architecture for Autonomous AI Agents","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-05-08T02:37:16.916935Z"},"links":{"cited_paper":"/paper/2404.13208","citing_paper":"/paper/2604.24657"},"observation_digest":"sha256:54dd02a4a8363d4ef14a1bd0ad4793ea9978a83e4658a2eea3235cc0eb9de37a","observation_id":"efa4d3d4-501b-46fa-9b3e-f9216c3e4ba8","resolution":{"observed_at":"2026-05-12T10:59:30.872595Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-23T06:31:01.910684+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-23T06:31:01.910684+00:00","source":"crossref"},{"observed_at":"2026-07-23T06:30:56.940895+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Toolsafety: A comprehensive dataset for enhancing safety in LLM-based agent tool invocations","venue":null,"work_id":"ada8932d-71ec-4dbf-b2e3-fe95edda07b6","year":2025},"citing_paper":{"arxiv_id":"2604.24657","last_updated":"2026-04-27T16:22:27Z","snapshot_observed_at":"2026-07-06T23:10:38.548416Z","submitted_at":"2026-04-27T16:22:27Z","title":"AgentWard: A Lifecycle Security Architecture for Autonomous AI Agents","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-05-08T02:37:16.916935Z"},"links":{"citing_paper":"/paper/2604.24657"},"observation_digest":"sha256:3bc1c956440dddc865bd238f77dd7ff260469cade6f0fd6acd5b90b83d9f0eb1","observation_id":"33387642-4ca2-4696-bc5a-d52d26c3624d","resolution":{"observed_at":"2026-05-26T22:53:11.260908Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-23T06:31:01.910684+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-23T06:31:01.910684+00:00","source":"crossref"},{"observed_at":"2026-07-23T06:30:56.940895+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"OS-Harm: A benchmark for measuring safety of computer use agents","venue":null,"work_id":"6dbd53a8-013b-43be-b133-765aabe8b590","year":2025},"citing_paper":{"arxiv_id":"2604.24657","last_updated":"2026-04-27T16:22:27Z","snapshot_observed_at":"2026-07-06T23:10:38.548416Z","submitted_at":"2026-04-27T16:22:27Z","title":"AgentWard: A Lifecycle Security Architecture for Autonomous AI Agents","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-05-08T02:37:16.916935Z"},"links":{"citing_paper":"/paper/2604.24657"},"observation_digest":"sha256:518995a629d750e884b4313a2b5fe17d3a50a490285ae29de93a5bafdd8facb0","observation_id":"abb26781-9ebf-435b-887e-8eea66204f00","resolution":{"observed_at":"2026-05-26T22:53:11.263231Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-23T06:31:01.910684+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-23T06:31:01.910684+00:00","source":"crossref"},{"observed_at":"2026-07-23T06:30:56.940895+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Agentic AI – threats and mitigations","venue":null,"work_id":"d901cc78-e8da-4054-bb42-0b830e1e3272","year":2025},"citing_paper":{"arxiv_id":"2604.24657","last_updated":"2026-04-27T16:22:27Z","snapshot_observed_at":"2026-07-06T23:10:38.548416Z","submitted_at":"2026-04-27T16:22:27Z","title":"AgentWard: A Lifecycle Security Architecture for Autonomous AI Agents","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-05-08T02:37:16.916935Z"},"links":{"citing_paper":"/paper/2604.24657"},"observation_digest":"sha256:cab15bbb48c134b3ce7dd659f4dcf43fc56fcd889bcf820bed68a9982f618815","observation_id":"155e1a2a-2146-494a-8536-6557a7a8808e","resolution":{"observed_at":"2026-05-26T22:53:11.258773Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-23T06:31:01.910684+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-23T06:31:01.910684+00:00","source":"crossref"},{"observed_at":"2026-07-23T06:30:56.940895+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2604.24657","last_updated":"2026-04-27T16:22:27Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-07-06T23:10:38.548416Z","submitted_at":"2026-04-27T16:22:27Z","title":"AgentWard: A Lifecycle Security Architecture for Autonomous AI Agents"},"reference_resolution":{"displayed":20,"state_counts":{"malformed_identifier":0,"metadata_mismatch":4,"parse_uncertain":0,"unresolved":0,"verified_exact":8,"verified_fuzzy":8},"total_outbound_references":20},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-07-23T06:31:01.910684+00:00","source":"crossref"},{"observed_at":"2026-07-23T06:30:56.940895+00:00","source":"retraction_watch"}],"thesis":"As of 23 July 2026, this Paper Citation Record lists 20 of 20 outbound references and 1 inbound Pith citation observation for arXiv:2604.24657."}