{"as_of":"2026-08-04T19:02:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:c2a7a8446c04a8504b6e3f1f811ca3ce5803789b9e41808786a7c85cc1bd9288","coverage":[{"denominator":59,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":59,"source":"paper_references, paper_reference_links","source_observed_at":"2026-05-08T16:08:51.850890Z","state":"measured"},{"denominator":60,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":60,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-04T06:34:03.388597+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-04T01:03:46.290627Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-07-06T23:18:07.750358Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2605.05509","snapshot_observed_at":"2026-08-04T01:03:46.290627Z","title":"Waaa! web adversaries against agentic browsers,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.00202","last_updated":"2026-07-31T18:27:12Z","snapshot_observed_at":"2026-08-04T18:25:20.421471Z","submitted_at":"2026-07-31T18:27:12Z","title":"From Monoliths to Swarms: A Study of Attack Surface Evolution in the Transition to Multi-Agent Web Systems","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-04T01:03:46.290627Z"},"links":{"cited_paper":"/paper/2605.05509","citing_paper":"/paper/2608.00202"},"observation_digest":"sha256:15423a19270b9261d43040b05b5f8da21b837e959c38826822dd59e26b2b8b43","observation_id":"d5e91a1d-6d49-4f67-83c7-a517464f2d06","resolution":{"observed_at":"2026-08-04T01:03:46.290627Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2605.05509/citation-record","integrity":"/paper/2605.05509/integrity","json":"/paper/2605.05509/citation-record.json","paper":"/paper/2605.05509"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"d.].Blog | Windsurf","venue":null,"work_id":"8ced6721-a534-4029-aaef-f46f95a08870","year":null},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-07-06T23:18:07.750358Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:e355896309017816c329863f3107a0d003eb0650bfde4c3ddc055d74c9186ccd","observation_id":"1c419c97-f5bd-44a9-8615-7ea53a3dfaa0","resolution":{"observed_at":"2026-05-26T10:37:35.890841Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"d.].Cursor Docs","venue":null,"work_id":"af6a196a-f23f-4162-857a-cf01b298686c","year":null},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-07-06T23:18:07.750358Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:b20f99de4d6ce46793e9baa25746adb497d0310bc31194130c2cb92f707cba72","observation_id":"e67723d8-8af0-4bdb-87a7-427b2aba9e80","resolution":{"observed_at":"2026-05-26T10:37:35.927912Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"d.].Dia Browser | AI Chat With Your Tabs","venue":null,"work_id":"57e2b45c-2383-49b0-bcb3-4b57f6fd0a34","year":null},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-07-06T23:18:07.750358Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:a5ce52146d3352ec723b0f289ab4a1c68a72bacb7f5540d67821730cb3e0a7a4","observation_id":"52900203-7ffd-42f4-8838-d8af703a8f66","resolution":{"observed_at":"2026-05-26T10:37:35.917116Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"d.].GitHub Copilot·Your AI Pair Programmer","venue":null,"work_id":"a3068333-d7d8-474a-8600-84066a477fc1","year":null},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-07-06T23:18:07.750358Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:d5d94126ef37e4518a265afa74ec60cbe889223f10da3a4d48b928330141828c","observation_id":"8bb4f1cd-03ea-4cfc-b587-932eb3e93383","resolution":{"observed_at":"2026-05-26T10:37:35.894940Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"d.].Introducing Claude Sonnet 4.5","venue":null,"work_id":"445666d2-c351-4bb1-9c9d-d66a285c9c8c","year":null},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-07-06T23:18:07.750358Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:de1b280bf37a387129aedb31ebd7674be67dcdd7bab7021594fbc076d722e9f3","observation_id":"0df8c0e4-e3a7-49f9-9973-0aa4d6c72a41","resolution":{"observed_at":"2026-05-26T10:37:35.856846Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"d.].Microsoft/Playwright-Mcp","venue":null,"work_id":"3297da24-0a74-44b0-bfeb-4c3315b92778","year":null},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-07-06T23:18:07.750358Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:fdbfe9601b06c804a26a2a231a62ba6b2d0078c9d59ece288475b1603cd8a4a8","observation_id":"a11c51be-fbe3-40b3-becc-bb1436cd3a09","resolution":{"observed_at":"2026-05-26T10:37:35.875023Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"d.].Piloting Claude for Chrome","venue":null,"work_id":"ef93cc01-4b6e-4bfa-b670-860352d468f6","year":null},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-07-06T23:18:07.750358Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:f1155f8c52abb2b1c61661bec83cc6e06f214a6758fc2707b690fd0ccabf4543","observation_id":"a7fcc242-4d20-4bd5-8962-bb13208134ce","resolution":{"observed_at":"2026-05-26T10:37:35.870327Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"https://www","venue":null,"work_id":"68782502-4938-4ec5-a6c5-952f45e11633","year":2024},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-07-06T23:18:07.750358Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:1bbac98ecaa7c21ccff1576b7fa51e31a51dcfe58d57f5200060c05e007deda3","observation_id":"0edcc8ca-bc52-4144-85b8-d3ee6bd56424","resolution":{"observed_at":"2026-05-26T10:37:35.909401Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"https://brave.com/blog/comet-prompt-injection/","venue":null,"work_id":"b84300e3-b46c-40ce-8b79-24106279e096","year":2025},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-07-06T23:18:07.750358Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:7996254f52ac4096248c57326b21d788c0ba4ee702d2f6a28e26c7bc85469287","observation_id":"336baa17-e3cd-4082-a18f-bbaacca67797","resolution":{"observed_at":"2026-05-26T10:37:35.902086Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"https://brave.com/blog/unseeable-prompt-injections/","venue":null,"work_id":"dfec192b-a82e-45f4-9478-a4b9cf3f68b8","year":2025},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-07-06T23:18:07.750358Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:aeec1ae8d84e7e4e99ab7b9f368fe742fb072a252595404a5af530e9ccb1c0a5","observation_id":"69f2502a-413d-41e2-bcb6-5289eed99dd7","resolution":{"observed_at":"2026-05-26T10:37:35.931589Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"https://neuraltrust.ai/blog/openai-atlas-omnibox-prompt-injection","venue":null,"work_id":"74b796e1-5703-499b-8db7-ad9e681d2184","year":2025},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-07-06T23:18:07.750358Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:dd2c9c74277029851e96a4cc978f50266231c7017cc110a872bdd6a663f8140a","observation_id":"0d53d891-823f-4ea2-a0b5-1908b6e2d6cd","resolution":{"observed_at":"2026-05-26T10:37:35.913263Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Microsoft Copi- lot","venue":null,"work_id":"31d73e61-3e42-499c-859f-99a5d96791eb","year":2025},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-07-06T23:18:07.750358Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:fc4a8d4698f24b948f43a1252616998fb811cf38cda9b6bd5621aec763837d38","observation_id":"951f7ad4-74f6-4167-b53c-f894ed499516","resolution":{"observed_at":"2026-05-26T10:37:35.924140Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Browseros-Ai/BrowserOS","venue":null,"work_id":"d30638b1-1047-400a-ba16-ca53241ad25e","year":2025},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-07-06T23:18:07.750358Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:5e643bcde737c00a2c0a29a498ef13dc6e61ae8a241fac41afb5cf99e558bd07","observation_id":"602fd46b-236b-4e8d-8784-cea2c01677f7","resolution":{"observed_at":"2026-05-26T10:37:35.920851Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"https://www.claude.com/product/claude-code","venue":null,"work_id":"dbe6e197-0a1b-4288-9eae-ecaa08e2f90e","year":2025},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-07-06T23:18:07.750358Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:fb1d1e6e1387ae43d44714ebdeb111272b6f6d2279970607e9bbae9a4dd5fffd","observation_id":"555ed348-4805-4573-9a3f-4490385f5967","resolution":{"observed_at":"2026-05-26T10:37:35.864370Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"https://www.perplexity.ai/comet/","venue":null,"work_id":"959ca00e-4041-4114-9fa1-6cbcdf31c107","year":2025},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-07-06T23:18:07.750358Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:1b8f34a9f1533b0ca8f23d0801acd0285388f99b2612076d32b9c7701579eb64","observation_id":"532de15e-6b97-4209-9e9c-867907ebba13","resolution":{"observed_at":"2026-05-26T10:37:35.898572Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"https: //www.google.com/chrome/ai-innovations/","venue":null,"work_id":"a875cdee-163a-496c-847a-aa15bd83482f","year":2025},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-07-06T23:18:07.750358Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:37da0cb373d24f6425b6ad0e15bb26dd36ba0354fec0d688114b4a1dc6a7d650","observation_id":"03c9e367-5e5d-46bd-b288-340500f90eb8","resolution":{"observed_at":"2026-05-26T10:37:35.939138Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Introducing ChatGPT Agent: Bridging Research and Action","venue":null,"work_id":"617fc07b-73fd-4f48-8224-f400a9e2d54e","year":2025},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-07-06T23:18:07.750358Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:cf63ddf450cc1d54bf51037132d69e348fd9b98982e4780b95685920dd506c79","observation_id":"4431a5a1-c483-4343-87b4-f14bdf32fec8","resolution":{"observed_at":"2026-05-26T10:37:35.905768Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"https://openai.com/index/introducing-chatgpt- atlas/","venue":null,"work_id":"8d6960ce-4532-4d4d-b91f-ac7d47ea17df","year":2025},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-07-06T23:18:07.750358Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:b164d788c7b6b1e34a3af760f5a5e5d934b27ba1df61d5b70866ab310ab5e681","observation_id":"bcdb6ad0-b2ee-49e6-acfa-f895b8f288f2","resolution":{"observed_at":"2026-05-26T10:37:35.860688Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Google DeepMind","venue":null,"work_id":"f1445e25-359f-44a4-b8c3-9d2346601433","year":2025},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-07-06T23:18:07.750358Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:48940d3b35e2c00d4a4f650b78298f24c4d8203ddaea56a0692ad18f5d2ad634","observation_id":"ca5a0375-0af5-4363-8ee8-23ba9e6fc670","resolution":{"observed_at":"2026-05-26T10:37:35.883211Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Steel-Dev/Awesome-Web-Agents","venue":null,"work_id":"1332eb39-85de-4825-9ed2-742e924694f5","year":2025},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-07-06T23:18:07.750358Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:6d6a070b80599b1eae2abb22e9860174680e7b0228b45c9e718169dcef76c0cb","observation_id":"fdc1830f-7b73-4fd0-b80c-c1ee43103937","resolution":{"observed_at":"2026-05-26T10:37:35.879683Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"2ed10696-b34e-4080-8666-8a2154e7dd6f","year":null},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-07-06T23:18:07.750358Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:bddae390eb8bbc3ff65467f894145dc0d361c91a554b214cd0e57b244ca05ea5","observation_id":"55b5d5d1-cc9b-4283-8a66-5a5ef3332a45","resolution":{"observed_at":"2026-05-26T10:37:35.887088Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"In2010 23rd IEEE Computer Security Foundations Symposium","venue":null,"work_id":"73b4e7b5-a47a-4e70-a30a-7811816d662e","year":null},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-07-06T23:18:07.750358Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:410909b902c5e72af080b221f65ad149eb72127b05eb8a18fc533868a8687763","observation_id":"cd9b2fba-01dc-40d7-8385-aae0848c7ef5","resolution":{"observed_at":"2026-05-26T10:37:35.942809Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"da3e4597-b984-4a97-a25f-b5d69ebcf1aa","year":2008},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-07-06T23:18:07.750358Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:8becd2234e98ddcb429ade031f5cef94b423244fb08148a211a08a8749d4731e","observation_id":"52b3999c-49e8-4a67-977d-908c25a05567","resolution":{"observed_at":"2026-05-26T10:37:35.871615Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"2c4f7e9c-c954-476f-b9fb-8db2d99ca005","year":null},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-07-06T23:18:07.750358Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:6b741cc0b57f2b39d175f0c00435bfaf8771d30da824ca8cd62c929219623420","observation_id":"92bd8f86-64e5-4df6-94b0-bc2fca2b60a4","resolution":{"observed_at":"2026-05-26T10:37:35.935381Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2504.14064","doi":"10.48550/arxiv.2504.14064","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T12:15:01.137692Z","title":"Doomarena: A framework for testing ai agents against evolving security threats","venue":null,"work_id":"09e11bfc-6712-45e6-b9d9-d5dbb0b7481d","year":2025},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-07-06T23:18:07.750358Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:5d8a47c451e3a51674d8022403a524f0325b2769ea34e8f1bb1b2e3c9210bb94","observation_id":"ce6ba851-3812-4bd2-920d-edc8cd47fb21","resolution":{"observed_at":"2026-05-08T20:34:10.332811Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2502.20383","doi":"10.48550/arxiv.2502.20383","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T12:15:01.137692Z","title":"Why are web ai agents more vulnerable than standalone llms? a security analysis.arXiv preprint arXiv:2502.20383","venue":null,"work_id":"818e90ef-0523-46c1-b07b-91ceb84aba21","year":2025},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-07-06T23:18:07.750358Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:17f2aa3cc776ea9f005552e801864131ce321db8843a4c58e866ef9283195090","observation_id":"92a8f93c-46bc-48ca-9d7f-8bcee0d97088","resolution":{"observed_at":"2026-05-08T20:34:10.250983Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1145/1772690.1772720","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T18:15:00.863488Z","title":null,"venue":null,"work_id":"0f974b81-2102-4f3c-afc6-37bd07377cbc","year":2010},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-07-06T23:18:07.750358Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:3ea7ab5f49c642c34543805ca249a768550ca87c9613b274beb65165a1f692aa","observation_id":"57e3903d-aece-45d0-81c3-34544df52604","resolution":{"observed_at":"2026-05-08T20:34:10.268831Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.06070","last_updated":"2023-12-09T05:57:46Z","snapshot_observed_at":"2026-07-06T15:40:50.807376Z","submitted_at":"2023-06-09T17:44:31Z","title":"Mind2Web: Towards a Generalist Agent for the Web","version":3},"cited_work":{"arxiv_id":"2306.06070","doi":"10.48550/arxiv.2306.06070","metadata_source":"pith","pith_arxiv_id":"2306.06070","snapshot_observed_at":"2026-07-10T12:27:04.115855Z","title":"Mind2Web: Towards a Generalist Agent for the Web","venue":"cs.CL","work_id":"e26f5a00-c007-439d-83f6-7900f5687b6b","year":2023},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-07-06T23:18:07.750358Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"cited_paper":"/paper/2306.06070","citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:73940f06ac8d022e13d2042c9cab714d9d49be521a3d99fa03c1a04a55293c54","observation_id":"9ae5ffac-5d9f-4c85-a312-db3ddd699190","resolution":{"observed_at":"2026-05-15T20:05:16.335224Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-07-12T03:19:29.437492+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-12T03:19:29.437492+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.18575","last_updated":"2025-05-16T22:42:29Z","snapshot_observed_at":"2026-07-06T21:14:57.707919Z","submitted_at":"2025-04-22T17:51:03Z","title":"WASP: Benchmarking Web Agent Security Against Prompt Injection Attacks","version":3},"cited_work":{"arxiv_id":"2504.18575","doi":"10.48550/arxiv.2504.18575","metadata_source":"pith","pith_arxiv_id":"2504.18575","snapshot_observed_at":"2026-07-10T12:27:04.227834Z","title":"WASP: Benchmarking Web Agent Security Against Prompt Injection Attacks","venue":"cs.CR","work_id":"bf1914b2-fd32-4768-a4d5-84720606d71b","year":2025},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-07-06T23:18:07.750358Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"cited_paper":"/paper/2504.18575","citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:c18e069ada3614de74733884227c5e8acd654f9b90e267e9884427b2af0fde5e","observation_id":"fe31546a-40b7-4773-97fb-739b875e752b","resolution":{"observed_at":"2026-05-15T22:22:05.737978Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"b3e4e3eb-3da3-4ca1-afe7-3f9fc7c9fe25","year":null},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-07-06T23:18:07.750358Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:5d93cb66dd8aa7de0303447fd4497d80b57372de5e800e0d5035346f5cf09d13","observation_id":"9384842b-bb28-45f8-bc16-58547cf30aa4","resolution":{"observed_at":"2026-05-26T10:37:35.986802Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"8dcf33c1-e24a-48b9-a1e0-a4c0ebfc257e","year":null},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-07-06T23:18:07.750358Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:548c6ac9bdac2a46fa95dae2cbdbdc29109ab9a84865c43e6afd7873f29fc92b","observation_id":"45ae01af-e690-4c06-9f94-cf39124bd59c","resolution":{"observed_at":"2026-05-26T10:37:35.961729Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"2c27c435-b839-49a0-9a95-b5b2d84e8b70","year":2021},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-07-06T23:18:07.750358Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:54008452a2d8b4ae51a5c5f9f3ae3fd6c308bfc32f06a875ec979b6f46aa30bc","observation_id":"7dd976c1-8faf-494d-a32e-51958ae45158","resolution":{"observed_at":"2026-05-26T10:37:35.990014Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"5eae1fed-8228-4e4c-aaa9-1bed1849b634","year":2023},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-07-06T23:18:07.750358Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:d9e2e8f8cb3174a70f014b349a9e2ea459c2ca484bdd4d00456635ef04e538b6","observation_id":"b2dd0e0c-6fb3-4fd4-83af-51ea854b5d2e","resolution":{"observed_at":"2026-05-26T10:37:35.950521Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Wang, Stuart Schecter, and Collin Jackson","venue":null,"work_id":"20c798f2-657e-492f-8105-c2c3baf9b627","year":null},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-07-06T23:18:07.750358Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:3dc480b344162e7de209757f1d87bc813e8e4ba837eee71dbba9645b8b36d66b","observation_id":"493c9234-ac83-4512-9a38-14aa7f9a7326","resolution":{"observed_at":"2026-05-26T10:37:35.954553Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"a479d7fb-8f1d-4668-83bf-22f9beb85b0b","year":null},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-07-06T23:18:07.750358Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:bd2ff4caea4d153be360136fb0551e5e86bc88fad6935b5df3bce3dc1671c3f5","observation_id":"15d5cde9-64d5-4718-bb28-8b29f640c37a","resolution":{"observed_at":"2026-05-26T10:37:35.983412Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1145/3460120.3484739","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T00:15:00.872479Z","title":null,"venue":null,"work_id":"b9e8ef65-2e05-4686-9db1-d829361af24a","year":2021},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-07-06T23:18:07.750358Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:4230cc08ae87c7869800fe1b1711527828899cb0227889a332c5d9de792e42d4","observation_id":"ac08d2be-6bb4-41dc-9e11-617d8605cda7","resolution":{"observed_at":"2026-05-08T20:34:10.280661Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"69963420-2181-4d3c-885b-01af677b6152","year":2021},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-07-06T23:18:07.750358Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:b9052861711e114b750bf7a3e150a467659f706ade0e839f83d2ce1dea23698a","observation_id":"0ef53459-d09d-4533-bb11-dbb72268ca9e","resolution":{"observed_at":"2026-05-26T10:37:35.976022Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.48550/arxiv.2409","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T14:32:18.518488Z","title":"04984,arXiv:2409.04984,doi:10.48550/ARXIV.2409.04984","venue":null,"work_id":"0871a597-799e-4f81-987b-4fdabb216cc0","year":2022},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-07-06T23:18:07.750358Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:99f6efdfcebc2d9fcec00d7c8ceaf75054cf81be54942482e6b90fb9cb405b87","observation_id":"d4650d44-490f-4f1d-b8e7-88f9c4f49a4c","resolution":{"observed_at":"2026-05-08T20:34:10.284957Z","resolver_source":"doi","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-05-30T09:55:09.836975+00:00","source":"crossref_status_cache"},{"observed_at":"2026-05-30T09:55:09.836975+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2112.15561","last_updated":"2021-12-31T17:32:59Z","snapshot_observed_at":"2026-07-06T12:23:52.936803Z","submitted_at":"2021-12-31T17:32:59Z","title":"SOK: On the Analysis of Web Browser Security","version":1},"cited_work":{"arxiv_id":"2112.15561","doi":"10.48550/arxiv.2112.15561","metadata_source":"arxiv_reference","pith_arxiv_id":"2112.15561","snapshot_observed_at":"2026-07-10T06:15:00.866473Z","title":null,"venue":null,"work_id":"94fb33bc-9546-4e82-bbfb-3d92f28318df","year":2021},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-07-06T23:18:07.750358Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"cited_paper":"/paper/2112.15561","citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:856d775092b3d6fae3cef6569b77bee03649f4a3a93fcdd48e0e2b9866979548","observation_id":"937e2bb7-4ec5-44e1-a0eb-225006a77524","resolution":{"observed_at":"2026-05-08T20:34:10.306349Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2112.15561","last_updated":"2021-12-31T17:32:59Z","snapshot_observed_at":"2026-07-06T12:23:52.936803Z","submitted_at":"2021-12-31T17:32:59Z","title":"SOK: On the Analysis of Web Browser Security","version":1},"cited_work":{"arxiv_id":"2112.15561","doi":"10.48550/arxiv.2112.15561","metadata_source":"arxiv_reference","pith_arxiv_id":"2112.15561","snapshot_observed_at":"2026-07-10T06:15:00.866473Z","title":null,"venue":null,"work_id":"94fb33bc-9546-4e82-bbfb-3d92f28318df","year":2021},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-07-06T23:18:07.750358Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"cited_paper":"/paper/2112.15561","citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:505985b1c2c4b154ea5c9c9ce781c4c15ca073bc39248cfe35422ac50d4d1809","observation_id":"c4fd6af6-36cd-4164-ae35-47f33e54519c","resolution":{"observed_at":"2026-05-11T18:21:09.852197Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.48550/arxiv.2408","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-02T14:37:02.992133Z","title":"arXiv (2024).https://doi.org/10.48550/arXiv.2408","venue":null,"work_id":"01b77655-4ab0-4695-b5b4-4c3ca8a5658d","year":2024},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-07-06T23:18:07.750358Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:4c87277a1c99be5f1eea68a973e0b555c5a6f454a0b49127d7546edb47bf50bc","observation_id":"40b08949-07b5-4a90-8b60-8389227e1e8d","resolution":{"observed_at":"2026-05-08T20:34:10.262255Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1145/3359183","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-02T13:06:58.305287Z","title":"Mathur, G","venue":"Proceedings of the ACM on Human-Computer Interaction","work_id":"554cfabb-1a39-4348-89f6-84d79d932071","year":2019},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-07-06T23:18:07.750358Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:d93559eb641e8a76796a4b4ddf8302ae444904afebb36562deb061d7d32b0e2d","observation_id":"29ef2c65-fda4-4e18-be12-ebf8a5b70930","resolution":{"observed_at":"2026-05-08T20:34:10.255248Z","resolver_source":"doi","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-05-19T15:22:25.516433+00:00","source":"crossref_status_cache"},{"observed_at":"2026-05-19T15:22:25.516433+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.16950","last_updated":"2024-10-22T12:24:41Z","snapshot_observed_at":"2026-07-06T19:37:47.763190Z","submitted_at":"2024-10-22T12:24:41Z","title":"Breaking ReAct Agents: Foot-in-the-Door Attack Will Get You In","version":1},"cited_work":{"arxiv_id":"2410.16950","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2410.16950","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Breaking react agents: Foot-in-the-door attack will get you in","venue":null,"work_id":"028f4cf7-3266-42c9-9708-9303fddc19d7","year":2024},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-07-06T23:18:07.750358Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"cited_paper":"/paper/2410.16950","citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:cf3ccf4b44e3888157a03080d09d754bc3cad2788dc6574685c4af291ee43bba","observation_id":"34cdd629-50ad-40e5-9d26-38014056f2c5","resolution":{"observed_at":"2026-05-11T18:21:09.884262Z","resolver_source":"arxiv_id","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"16563bc1-459c-4eef-b701-50266716ca77","year":2020},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-07-06T23:18:07.750358Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:f37cd7333a005cc7cb08f68d7b7793cca31a306cb5eb8fa9875a69561e888df9","observation_id":"0f0b9e3f-7a19-4d22-877c-5501f7dc8460","resolution":{"observed_at":"2026-05-26T10:37:35.968748Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"843a41d2-e4d0-4cfb-ae88-f1863243350f","year":2023},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-07-06T23:18:07.750358Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:db8c37a6a84b7cb22a66e2fc2d2828af2488ea254fb348c3b007c162157a575f","observation_id":"8bff3e3f-9b98-445c-9199-68c35d9a2b84","resolution":{"observed_at":"2026-05-26T10:37:35.979838Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"4b6d0136-5045-40e4-b4bb-c57ff6dd4ea0","year":2024},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-07-06T23:18:07.750358Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:eb87301c28559883ad2f4e1ca023413dd10e3fbe74065d0508d798f37a5b25ca","observation_id":"b71f725d-e6fa-4874-8add-b79485bde695","resolution":{"observed_at":"2026-05-26T10:37:35.957928Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"95d8887f-fc4c-4143-a812-eb86d496e8ff","year":2026},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-07-06T23:18:07.750358Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:b7d88d75f8f463788a63c31dff6b088f96020f69c0cc516125c43d61df130d3a","observation_id":"608fc78e-cf4c-4cb5-bfd7-43ce95c619f8","resolution":{"observed_at":"2026-05-26T10:37:35.965640Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"d287ae6a-6946-4d53-8dc3-a002fcf80ae1","year":2019},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-07-06T23:18:07.750358Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:108e004966a3e51261b1f8ffd2f1aa4302885d878b84c5123d788d1e475be6c7","observation_id":"f1047054-ec9a-4f66-ae72-b7488ae385a5","resolution":{"observed_at":"2026-05-26T10:37:36.001688Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"6a06e789-38c9-40d8-9eb5-599ea2eb8fd4","year":null},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-07-06T23:18:07.750358Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:6ebb32fcf849b0fff27dcb7f599195be38c3888fae7c69c7eb35f1031d61bef1","observation_id":"3919e680-baf8-4257-8156-0219356095c7","resolution":{"observed_at":"2026-05-26T10:37:35.993400Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"6c611c90-d360-46a1-97d1-5a08cd7fabdc","year":null},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-07-06T23:18:07.750358Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:6606e4a22b466da0056f21e641e75a3a0894bc8c77ec194a6f6e4712df5884ad","observation_id":"225ef129-70b1-42a2-9771-a2efa86e87c6","resolution":{"observed_at":"2026-05-26T10:37:35.946540Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2465.31324","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"ecdfa9cd-aa7d-456e-88b0-4e6b8e2fc774","year":2017},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-07-06T23:18:07.750358Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:d0ea1690719a1db9cc3731c9e981ef12541fc16bbbbce0aed548565592d925a8","observation_id":"56dbb040-da4d-4568-ab64-90bf533628c7","resolution":{"observed_at":"2026-05-11T18:21:09.900125Z","resolver_source":"arxiv_id","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"c7fa626b-7722-47a6-908e-eac0a78be21b","year":2024},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-07-06T23:18:07.750358Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:c4ee654987af0f6b40f2298e0edc0e5a6c357863240169564e76c439d0505856","observation_id":"26639ba9-e692-4141-80bf-07aaf973a4e9","resolution":{"observed_at":"2026-05-26T10:37:35.997671Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.14722/ndss.2020.23xxx","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-30T05:44:17.796214Z","title":null,"venue":null,"work_id":"b17652fd-0678-4e9f-8ee6-96137be011a2","year":2020},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-07-06T23:18:07.750358Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:5077a5fd04979665e4a2070b2d3836fb91957758c19c0ba96baa7fb0c259dfc5","observation_id":"602f766d-4c4a-4e9e-814b-88209f46b903","resolution":{"observed_at":"2026-05-08T20:34:10.274513Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"4c5c132c-72ff-43aa-af31-c164e7d7a95d","year":2025},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-07-06T23:18:07.750358Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:c6d7c7527a1ac8244945690e02f3a00fe75b572a1147889895193587bbbe3051","observation_id":"1fa75193-2bef-48f0-9188-70c8d78d2f38","resolution":{"observed_at":"2026-05-26T10:37:35.972282Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.48550/arxiv.2402","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T23:56:38.370412Z","title":"Quantum error thresholds for gauge-redundant digitiza- tions of lattice field theories","venue":null,"work_id":"fe54368a-46a7-407d-be53-6236d622919e","year":2024},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-07-06T23:18:07.750358Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:33edb8d1a8905a464f2ee44298d369fed9d8941844c012b641b6b49e90c2a41a","observation_id":"2c89ae1f-6bcf-4081-a7d7-85d9ca42ff34","resolution":{"observed_at":"2026-05-08T20:34:10.340152Z","resolver_source":"doi","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-05-23T14:52:59.713726+00:00","source":"crossref_status_cache"},{"observed_at":"2026-05-23T14:52:59.713726+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2210.03629","last_updated":"2023-03-10T01:00:17Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2022-10-06T01:00:32Z","title":"ReAct: Synergizing Reasoning and Acting in Language Models","version":3},"cited_work":{"arxiv_id":"2210.03629","doi":"10.48550/arxiv.2210.03629","metadata_source":"pith","pith_arxiv_id":"2210.03629","snapshot_observed_at":"2026-07-11T03:47:47.842265Z","title":"ReAct: Synergizing Reasoning and Acting in Language Models","venue":"cs.CL","work_id":"407a2351-25f1-497d-b611-f77d0292a8e6","year":2022},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-07-06T23:18:07.750358Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"cited_paper":"/paper/2210.03629","citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:cc0a8c3ab4045d22bd000161de782117051c0eaf1b6cbd74db263feee7d7f146","observation_id":"2c0f21a1-1930-4fd4-9b1a-0def2ee9a9d7","resolution":{"observed_at":"2026-05-09T01:07:01.870928Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-07-12T03:19:36.897515+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-12T03:19:36.897515+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2511.20597","doi":"10.48550/arxiv.2511.20597","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T12:27:04.215625Z","title":"Browsesafe: Understanding and preventing prompt injection within ai browser agents","venue":null,"work_id":"a0d67379-2d33-454a-adc9-f11a80f22f99","year":2025},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-07-06T23:18:07.750358Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:933b9648d9e5e31d92561ae25315536fb738ac4768465dc32244038f326b0c90","observation_id":"7b423caf-0233-4add-b9cb-150bac94caa5","resolution":{"observed_at":"2026-05-11T18:21:09.870023Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2401.01614","last_updated":"2024-03-12T23:14:33Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-01-03T08:33:09Z","title":"GPT-4V(ision) is a Generalist Web Agent, if Grounded","version":2},"cited_work":{"arxiv_id":"2401.01614","doi":null,"metadata_source":"pith","pith_arxiv_id":"2401.01614","snapshot_observed_at":"2026-07-08T16:15:06.143411Z","title":"GPT-4V(ision) is a Generalist Web Agent, if Grounded","venue":"cs.IR","work_id":"d3503fef-7f64-4dcc-8aca-1f16e997034f","year":2024},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-07-06T23:18:07.750358Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"cited_paper":"/paper/2401.01614","citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:44c22810cd118fe4dac29df6e49ee4097bb4b9eca4aa7491000aa4c24200945a","observation_id":"f6bd2ce4-c9ec-408d-879c-d2d03122361a","resolution":{"observed_at":"2026-05-15T19:40:14.169994Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.13854","last_updated":"2024-04-16T15:13:18Z","snapshot_observed_at":"2026-07-06T15:58:31.756298Z","submitted_at":"2023-07-25T22:59:32Z","title":"WebArena: A Realistic Web Environment for Building Autonomous Agents","version":4},"cited_work":{"arxiv_id":"2307.13854","doi":"10.48550/arxiv.2307.13854","metadata_source":"pith","pith_arxiv_id":"2307.13854","snapshot_observed_at":"2026-07-10T14:17:10.112759Z","title":"WebArena: A Realistic Web Environment for Building Autonomous Agents","venue":"cs.AI","work_id":"7058ffd2-a339-4102-89eb-248eeb074652","year":2023},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-07-06T23:18:07.750358Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"cited_paper":"/paper/2307.13854","citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:509799c708530cc42be82e077f64b02a2cbc55dba8f4844db024eb72d3226d33","observation_id":"5743f397-6da5-4f4d-8ffb-bc1e0ac94423","resolution":{"observed_at":"2026-05-08T20:34:10.393465Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-05-20T18:52:18.85917+00:00","source":"crossref_status_cache"},{"observed_at":"2026-05-20T18:52:18.85917+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-07-06T23:18:07.750358Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers"},"reference_resolution":{"displayed":59,"state_counts":{"malformed_identifier":2,"metadata_mismatch":3,"parse_uncertain":0,"unresolved":18,"verified_exact":14,"verified_fuzzy":22},"total_outbound_references":59},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"thesis":"As of 4 August 2026, this Paper Citation Record lists 59 of 59 outbound references and 1 inbound Pith citation observation for arXiv:2605.05509."}