{"as_of":"2026-08-06T09:33:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:ad291c708b95b119943978c84381ebaa777e1779638943f12d6edacae6dc254c","coverage":[{"denominator":10,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":10,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-02T14:48:00.709259Z","state":"measured"},{"denominator":12,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":12,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-06T06:34:29.942622+00:00","state":"measured"},{"denominator":2,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":2,"source":"paper_references, paper_reference_links","source_observed_at":"2026-07-13T17:08:58.831798Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"pith","source_observed_at":"2026-07-02T13:46:59.950882Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2605.05704","last_updated":"2026-07-23T02:42:40Z","snapshot_observed_at":"2026-08-02T14:47:58.053472Z","submitted_at":"2026-05-07T05:50:45Z","title":"SafeHarbor: Defining Precise Decision Boundaries via Hierarchical Memory-Augmented Guardrail for LLM Agent Safety","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2605.05704","snapshot_observed_at":"2026-07-13T17:08:58.831798Z","title":"SafeHarbor: Hierarchical memory-augmented guardrail for LLM agent safety.arXiv preprint arXiv:2605.05704, 2026","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2605.02900","last_updated":"2026-05-24T13:33:45Z","snapshot_observed_at":"2026-08-02T11:46:07.449862Z","submitted_at":"2026-03-28T13:21:44Z","title":"Safety in Embodied AI: A Survey of Risks, Attacks, and Defenses","version":2},"reference_index":240,"source":"pdf_text","source_observed_at":"2026-07-13T17:08:58.831798Z"},"links":{"cited_paper":"/paper/2605.05704","citing_paper":"/paper/2605.02900"},"observation_digest":"sha256:d38781fc95d5bd662631b53fce61b2026c2f370f851c77b9963139089c152c7e","observation_id":"b5409124-aaee-45f8-972b-5a7fa56e2e81","resolution":{"observed_at":"2026-07-13T17:08:58.831798Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2605.05704","last_updated":"2026-07-23T02:42:40Z","snapshot_observed_at":"2026-08-02T14:47:58.053472Z","submitted_at":"2026-05-07T05:50:45Z","title":"SafeHarbor: Defining Precise Decision Boundaries via Hierarchical Memory-Augmented Guardrail for LLM Agent Safety","version":3},"cited_work":{"arxiv_id":"2605.05704","doi":null,"metadata_source":"pith","pith_arxiv_id":"2605.05704","snapshot_observed_at":"2026-07-02T13:46:59.950882Z","title":"SafeHarbor: Hierarchical Memory-Augmented Guardrail for LLM Agent Safety","venue":"cs.CR","work_id":"ce83f11d-ef93-46dc-8c58-aa21fe9cb21c","year":2026},"citing_paper":{"arxiv_id":"2606.05743","last_updated":"2026-06-04T06:14:08Z","snapshot_observed_at":"2026-07-06T23:45:42.379051Z","submitted_at":"2026-06-04T06:14:08Z","title":"Membrane: A Self-Evolving Contrastive Safety Memory for LLM Agent Defense","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-06-28T00:55:42.688093Z"},"links":{"cited_paper":"/paper/2605.05704","citing_paper":"/paper/2606.05743"},"observation_digest":"sha256:0734b2df9999d639cf4082e67b97132a5963334ad1be23f8440edbb4c123e276","observation_id":"74b5dd8f-5d29-4275-8b72-fa95e88725ce","resolution":{"observed_at":"2026-07-02T13:46:59.952250Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2605.05704/citation-record","integrity":"/paper/2605.05704/integrity","json":"/paper/2605.05704/citation-record.json","paper":"/paper/2605.05704"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2311.08719","last_updated":"2023-11-15T06:08:35Z","snapshot_observed_at":"2026-07-06T16:47:45.504109Z","submitted_at":"2023-11-15T06:08:35Z","title":"Think-in-Memory: Recalling and Post-thinking Enable LLMs with Long-Term Memory","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.08719","snapshot_observed_at":"2026-08-02T14:48:00.069536Z","title":"Think-in-memory: Recalling and post- thinking enable llms with long-term memory.arXiv preprint arXiv:2311.08719,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2605.05704","last_updated":"2026-07-23T02:42:40Z","snapshot_observed_at":"2026-08-02T14:47:58.053472Z","submitted_at":"2026-05-07T05:50:45Z","title":"SafeHarbor: Defining Precise Decision Boundaries via Hierarchical Memory-Augmented Guardrail for LLM Agent Safety","version":3},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-02T14:48:00.069536Z"},"links":{"cited_paper":"/paper/2311.08719","citing_paper":"/paper/2605.05704"},"observation_digest":"sha256:05155b8c3787d79ded61811f2a5503a71acb81a10a39a6385a3c3e8ef60c3072","observation_id":"9d5458ca-4345-412a-9fc3-adbb5306181a","resolution":{"observed_at":"2026-08-02T14:48:00.069536Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T14:48:00.305580Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2605.05704","last_updated":"2026-07-23T02:42:40Z","snapshot_observed_at":"2026-08-02T14:47:58.053472Z","submitted_at":"2026-05-07T05:50:45Z","title":"SafeHarbor: Defining Precise Decision Boundaries via Hierarchical Memory-Augmented Guardrail for LLM Agent Safety","version":3},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-02T14:48:00.305580Z"},"links":{"citing_paper":"/paper/2605.05704"},"observation_digest":"sha256:1bb5136642cf77d881b6eb9078aa4b406f524ea995b44060a761719f017139ed","observation_id":"fd944e26-d04e-4724-9614-a216e644c277","resolution":{"observed_at":"2026-08-02T14:48:00.305580Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.09187","last_updated":"2025-05-29T03:09:05Z","snapshot_observed_at":"2026-07-06T18:30:23.849880Z","submitted_at":"2024-06-13T14:49:26Z","title":"GuardAgent: Safeguard LLM Agents by a Guard Agent via Knowledge-Enabled Reasoning","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.09187","snapshot_observed_at":"2026-08-02T14:48:00.400543Z","title":"Guardagent: Safeguard llm agents by a guard agent via knowledge- enabled reasoning.arXiv preprint arXiv:2406.09187,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2605.05704","last_updated":"2026-07-23T02:42:40Z","snapshot_observed_at":"2026-08-02T14:47:58.053472Z","submitted_at":"2026-05-07T05:50:45Z","title":"SafeHarbor: Defining Precise Decision Boundaries via Hierarchical Memory-Augmented Guardrail for LLM Agent Safety","version":3},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-02T14:48:00.400543Z"},"links":{"cited_paper":"/paper/2406.09187","citing_paper":"/paper/2605.05704"},"observation_digest":"sha256:732d2ab7937f9a45598e04532a95c102a10bd66036ec26cd9aadd6a270c09b34","observation_id":"bac574b9-1d97-424e-8080-e65a9c78a7bb","resolution":{"observed_at":"2026-08-02T14:48:00.400543Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T14:48:00.495126Z","title":"R., and Cao, Y","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2605.05704","last_updated":"2026-07-23T02:42:40Z","snapshot_observed_at":"2026-08-02T14:47:58.053472Z","submitted_at":"2026-05-07T05:50:45Z","title":"SafeHarbor: Defining Precise Decision Boundaries via Hierarchical Memory-Augmented Guardrail for LLM Agent Safety","version":3},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-02T14:48:00.495126Z"},"links":{"citing_paper":"/paper/2605.05704"},"observation_digest":"sha256:4a49603d06009968b6d3c9639e4e781684ee6333665084fd7f431a5c1e36448d","observation_id":"4695080c-386e-4d99-b7fa-04a703fd7e7b","resolution":{"observed_at":"2026-08-02T14:48:00.495126Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T14:48:00.709259Z","title":"F., Zhu, H., Zhou, X., Lo, R., Sridhar, A., Cheng, X., Ou, T., Bisk, Y ., Fried, D., et al","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2605.05704","last_updated":"2026-07-23T02:42:40Z","snapshot_observed_at":"2026-08-02T14:47:58.053472Z","submitted_at":"2026-05-07T05:50:45Z","title":"SafeHarbor: Defining Precise Decision Boundaries via Hierarchical Memory-Augmented Guardrail for LLM Agent Safety","version":3},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-02T14:48:00.709259Z"},"links":{"citing_paper":"/paper/2605.05704"},"observation_digest":"sha256:f6b752ccd0324bfb02df9fc9073376f22c0bf074b9a53730fc64cc09835a01a3","observation_id":"59ae28aa-5284-4602-bc98-139c6393f555","resolution":{"observed_at":"2026-08-02T14:48:00.709259Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T14:48:00.014118Z","title":"Drat- tack: Prompt decomposition and reconstruction makes powerful llms jailbreakers","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2605.05704","last_updated":"2026-07-23T02:42:40Z","snapshot_observed_at":"2026-08-02T14:47:58.053472Z","submitted_at":"2026-05-07T05:50:45Z","title":"SafeHarbor: Defining Precise Decision Boundaries via Hierarchical Memory-Augmented Guardrail for LLM Agent Safety","version":3},"reference_index":2020,"source":"pdf_text","source_observed_at":"2026-08-02T14:48:00.014118Z"},"links":{"citing_paper":"/paper/2605.05704"},"observation_digest":"sha256:73f933791a642bc77ffd4d5d2fe356a663dcd75f656ec5db30575bfcad53e4bc","observation_id":"5ba3658c-cd96-42a3-bf95-7a1ba4007cd2","resolution":{"observed_at":"2026-08-02T14:48:00.014118Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.23020","last_updated":"2025-05-29T03:02:18Z","snapshot_observed_at":"2026-07-06T21:32:38.137341Z","submitted_at":"2025-05-29T03:02:18Z","title":"AgentAlign: Navigating Safety Alignment in the Shift from Informative to Agentic Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.23020","snapshot_observed_at":"2026-08-02T14:48:00.583099Z","title":"Agentalign: Navigating safety alignment in the shift from informa- tive to agentic large language models.arXiv preprint arXiv:2505.23020, 2025a","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2605.05704","last_updated":"2026-07-23T02:42:40Z","snapshot_observed_at":"2026-08-02T14:47:58.053472Z","submitted_at":"2026-05-07T05:50:45Z","title":"SafeHarbor: Defining Precise Decision Boundaries via Hierarchical Memory-Augmented Guardrail for LLM Agent Safety","version":3},"reference_index":2022,"source":"pdf_text","source_observed_at":"2026-08-02T14:48:00.583099Z"},"links":{"cited_paper":"/paper/2505.23020","citing_paper":"/paper/2605.05704"},"observation_digest":"sha256:d6a0d460962a68029382b4110f3eeac958682d2f3ed1cd332d389b3cffd6905f","observation_id":"1b07044e-8b57-4694-b1ab-6650bc8294ad","resolution":{"observed_at":"2026-08-02T14:48:00.583099Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T14:48:00.243373Z","title":"Your agent may misevolve: Emergent risks in self-evolving llm agents","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2605.05704","last_updated":"2026-07-23T02:42:40Z","snapshot_observed_at":"2026-08-02T14:47:58.053472Z","submitted_at":"2026-05-07T05:50:45Z","title":"SafeHarbor: Defining Precise Decision Boundaries via Hierarchical Memory-Augmented Guardrail for LLM Agent Safety","version":3},"reference_index":2023,"source":"pdf_text","source_observed_at":"2026-08-02T14:48:00.243373Z"},"links":{"citing_paper":"/paper/2605.05704"},"observation_digest":"sha256:d80c021dc231a7493b63e21a59d06eb5fdd6629823a4ef9a88c52510f8d19db4","observation_id":"52e98c9a-6352-4f1c-ad54-5151021b1651","resolution":{"observed_at":"2026-08-02T14:48:00.243373Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T14:47:59.934688Z","title":"Andriushchenko, M., Croce, F., and Flammarion, N","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2605.05704","last_updated":"2026-07-23T02:42:40Z","snapshot_observed_at":"2026-08-02T14:47:58.053472Z","submitted_at":"2026-05-07T05:50:45Z","title":"SafeHarbor: Defining Precise Decision Boundaries via Hierarchical Memory-Augmented Guardrail for LLM Agent Safety","version":3},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-02T14:47:59.934688Z"},"links":{"citing_paper":"/paper/2605.05704"},"observation_digest":"sha256:fdbc666377815fd9923ff376a92699faee3db407dc145fc4dbd9489950798fef","observation_id":"f426a13d-9336-43e0-9ed9-a985e681b0d8","resolution":{"observed_at":"2026-08-02T14:47:59.934688Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2509.25140","last_updated":"2026-03-16T20:49:28Z","snapshot_observed_at":"2026-08-02T12:08:17.149184Z","submitted_at":"2025-09-29T17:51:03Z","title":"ReasoningBank: Scaling Agent Self-Evolving with Reasoning Memory","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2509.25140","snapshot_observed_at":"2026-08-02T14:48:00.157561Z","title":"T., Daruki, S., Tang, X., et al","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2605.05704","last_updated":"2026-07-23T02:42:40Z","snapshot_observed_at":"2026-08-02T14:47:58.053472Z","submitted_at":"2026-05-07T05:50:45Z","title":"SafeHarbor: Defining Precise Decision Boundaries via Hierarchical Memory-Augmented Guardrail for LLM Agent Safety","version":3},"reference_index":2025,"source":"pdf_text","source_observed_at":"2026-08-02T14:48:00.157561Z"},"links":{"cited_paper":"/paper/2509.25140","citing_paper":"/paper/2605.05704"},"observation_digest":"sha256:7966435b9762a78f3deea65a64a0aa5cc10336ece4d5796776aa534c7745657a","observation_id":"c2189d0d-594d-412e-9dcc-13032ae19b75","resolution":{"observed_at":"2026-08-02T14:48:00.157561Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2605.05704","last_updated":"2026-07-23T02:42:40Z","latest_version":3,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-02T14:47:58.053472Z","submitted_at":"2026-05-07T05:50:45Z","title":"SafeHarbor: Defining Precise Decision Boundaries via Hierarchical Memory-Augmented Guardrail for LLM Agent Safety"},"reference_resolution":{"displayed":10,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":10,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":10},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"thesis":"As of 6 August 2026, this Paper Citation Record lists 10 of 10 outbound references and 2 inbound Pith citation observations for arXiv:2605.05704."}