{"as_of":"2026-08-05T02:07:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:fdb2080fd7584ad2d3c6ada5ed90167e6d80f177a3df809b9a9ee3312c9c484c","coverage":[{"denominator":44,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":44,"source":"paper_references, paper_reference_links","source_observed_at":"2026-07-12T17:28:42.733842Z","state":"measured"},{"denominator":44,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":44,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-04T06:34:03.388597+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2605.05969/citation-record","integrity":"/paper/2605.05969/integrity","json":"/paper/2605.05969/citation-record.json","paper":"/paper/2605.05969"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-12T17:28:42.733842Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2605.05969","last_updated":"2026-07-09T05:17:58Z","snapshot_observed_at":"2026-07-12T23:17:31.008327Z","submitted_at":"2026-05-07T10:16:26Z","title":"Heimdallr: Characterizing and Detecting LLM-Induced Security Risks in GitHub CI Workflows","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-07-12T17:28:42.733842Z"},"links":{"citing_paper":"/paper/2605.05969"},"observation_digest":"sha256:8833087f774b48ee293d981c4835f9dc272766edeb4e69e03b0e7707a995b1c2","observation_id":"aad54f51-3508-4ddd-97fd-a8119f7f455f","resolution":{"observed_at":"2026-07-12T17:28:42.733842Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-12T17:28:42.733842Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2605.05969","last_updated":"2026-07-09T05:17:58Z","snapshot_observed_at":"2026-07-12T23:17:31.008327Z","submitted_at":"2026-05-07T10:16:26Z","title":"Heimdallr: Characterizing and Detecting LLM-Induced Security Risks in GitHub CI Workflows","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-07-12T17:28:42.733842Z"},"links":{"citing_paper":"/paper/2605.05969"},"observation_digest":"sha256:a080babea29f5532e9b27b3037709edd29ce636904a6973535f8eb30664a1384","observation_id":"054168ce-aee5-4468-b7b4-2ace08e5482d","resolution":{"observed_at":"2026-07-12T17:28:42.733842Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-12T17:28:42.733842Z","title":"InProceed- ings of the 18th ACM Workshop on Artificial Intelligence and Security","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2605.05969","last_updated":"2026-07-09T05:17:58Z","snapshot_observed_at":"2026-07-12T23:17:31.008327Z","submitted_at":"2026-05-07T10:16:26Z","title":"Heimdallr: Characterizing and Detecting LLM-Induced Security Risks in GitHub CI Workflows","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-07-12T17:28:42.733842Z"},"links":{"citing_paper":"/paper/2605.05969"},"observation_digest":"sha256:a5160097c436398e16918c671b8c670eec5abe4d4c89c6c11e85e860ec7baf6f","observation_id":"26799d8a-1390-4637-af9a-1a0b5329302f","resolution":{"observed_at":"2026-07-12T17:28:42.733842Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-12T17:28:42.733842Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2605.05969","last_updated":"2026-07-09T05:17:58Z","snapshot_observed_at":"2026-07-12T23:17:31.008327Z","submitted_at":"2026-05-07T10:16:26Z","title":"Heimdallr: Characterizing and Detecting LLM-Induced Security Risks in GitHub CI Workflows","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-07-12T17:28:42.733842Z"},"links":{"citing_paper":"/paper/2605.05969"},"observation_digest":"sha256:c0d757b83d88935420817d08caa8071e1a6c8ea1dd603d17dd0bfa696d385885","observation_id":"93604370-2e13-4ba1-8ad3-8ddc575dbad5","resolution":{"observed_at":"2026-07-12T17:28:42.733842Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-12T17:28:42.733842Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2605.05969","last_updated":"2026-07-09T05:17:58Z","snapshot_observed_at":"2026-07-12T23:17:31.008327Z","submitted_at":"2026-05-07T10:16:26Z","title":"Heimdallr: Characterizing and Detecting LLM-Induced Security Risks in GitHub CI Workflows","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-07-12T17:28:42.733842Z"},"links":{"citing_paper":"/paper/2605.05969"},"observation_digest":"sha256:afbaefbc3949e322fa31a4fc64bb0c93946a0a33f09f26e7fd7a7e6c96632646","observation_id":"7526d362-2afd-4a6c-b3fb-769bb10989d1","resolution":{"observed_at":"2026-07-12T17:28:42.733842Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-12T17:28:42.733842Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2605.05969","last_updated":"2026-07-09T05:17:58Z","snapshot_observed_at":"2026-07-12T23:17:31.008327Z","submitted_at":"2026-05-07T10:16:26Z","title":"Heimdallr: Characterizing and Detecting LLM-Induced Security Risks in GitHub CI Workflows","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-07-12T17:28:42.733842Z"},"links":{"citing_paper":"/paper/2605.05969"},"observation_digest":"sha256:a226c3680b9e6ad8da4e1e01a54622a363d2f8ca475c601a5c6da72c77cf90dc","observation_id":"0374c296-5021-4bfb-8ea1-95022fdc2df6","resolution":{"observed_at":"2026-07-12T17:28:42.733842Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-12T17:28:42.733842Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2605.05969","last_updated":"2026-07-09T05:17:58Z","snapshot_observed_at":"2026-07-12T23:17:31.008327Z","submitted_at":"2026-05-07T10:16:26Z","title":"Heimdallr: Characterizing and Detecting LLM-Induced Security Risks in GitHub CI Workflows","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-07-12T17:28:42.733842Z"},"links":{"citing_paper":"/paper/2605.05969"},"observation_digest":"sha256:c8823891ef55fed161a6b51139d1b4a80dbb4ae8cad696dfcfff92294e943d96","observation_id":"435b95ad-3085-4c89-aab3-dab2fa36d52f","resolution":{"observed_at":"2026-07-12T17:28:42.733842Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-12T17:28:42.733842Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2605.05969","last_updated":"2026-07-09T05:17:58Z","snapshot_observed_at":"2026-07-12T23:17:31.008327Z","submitted_at":"2026-05-07T10:16:26Z","title":"Heimdallr: Characterizing and Detecting LLM-Induced Security Risks in GitHub CI Workflows","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-07-12T17:28:42.733842Z"},"links":{"citing_paper":"/paper/2605.05969"},"observation_digest":"sha256:c2b77e30d42ede9ce4aba93777d69cf4d66f5ee7fbbc64e7b60c271afc145d1e","observation_id":"278da7df-9b15-4468-8a72-f99d49cd1379","resolution":{"observed_at":"2026-07-12T17:28:42.733842Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-12T17:28:42.733842Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2605.05969","last_updated":"2026-07-09T05:17:58Z","snapshot_observed_at":"2026-07-12T23:17:31.008327Z","submitted_at":"2026-05-07T10:16:26Z","title":"Heimdallr: Characterizing and Detecting LLM-Induced Security Risks in GitHub CI Workflows","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-07-12T17:28:42.733842Z"},"links":{"citing_paper":"/paper/2605.05969"},"observation_digest":"sha256:fd9077b69cfb558a9da45a5189e3054319c52869d28fe3f9627dc1f5a1bd9bc6","observation_id":"7e02eef5-a25a-41c3-bb79-4ac2583a3866","resolution":{"observed_at":"2026-07-12T17:28:42.733842Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-12T17:28:42.733842Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2605.05969","last_updated":"2026-07-09T05:17:58Z","snapshot_observed_at":"2026-07-12T23:17:31.008327Z","submitted_at":"2026-05-07T10:16:26Z","title":"Heimdallr: Characterizing and Detecting LLM-Induced Security Risks in GitHub CI Workflows","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-07-12T17:28:42.733842Z"},"links":{"citing_paper":"/paper/2605.05969"},"observation_digest":"sha256:a34990de4a14926a0091b5a9ae65d0d71420a12fc30ff2791667576ff91c2255","observation_id":"8e354f45-2855-4278-889a-74c94df254fc","resolution":{"observed_at":"2026-07-12T17:28:42.733842Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-12T17:28:42.733842Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2605.05969","last_updated":"2026-07-09T05:17:58Z","snapshot_observed_at":"2026-07-12T23:17:31.008327Z","submitted_at":"2026-05-07T10:16:26Z","title":"Heimdallr: Characterizing and Detecting LLM-Induced Security Risks in GitHub CI Workflows","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-07-12T17:28:42.733842Z"},"links":{"citing_paper":"/paper/2605.05969"},"observation_digest":"sha256:e5f291eefd52e8976c7465b023793122b41dca5d5ffed688b6d1b5fce2da033a","observation_id":"ab10d9e7-f860-4e55-ab68-d148ee73e4d9","resolution":{"observed_at":"2026-07-12T17:28:42.733842Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-12T17:28:42.733842Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2605.05969","last_updated":"2026-07-09T05:17:58Z","snapshot_observed_at":"2026-07-12T23:17:31.008327Z","submitted_at":"2026-05-07T10:16:26Z","title":"Heimdallr: Characterizing and Detecting LLM-Induced Security Risks in GitHub CI Workflows","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-07-12T17:28:42.733842Z"},"links":{"citing_paper":"/paper/2605.05969"},"observation_digest":"sha256:c64e2f90afea1fd81f6b2867bfc48dfb80c97b3fd561b7f35552615e4470f208","observation_id":"23ace808-1b7d-4756-a421-3cfbd8e9cbb3","resolution":{"observed_at":"2026-07-12T17:28:42.733842Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-12T17:28:42.733842Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2605.05969","last_updated":"2026-07-09T05:17:58Z","snapshot_observed_at":"2026-07-12T23:17:31.008327Z","submitted_at":"2026-05-07T10:16:26Z","title":"Heimdallr: Characterizing and Detecting LLM-Induced Security Risks in GitHub CI Workflows","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-07-12T17:28:42.733842Z"},"links":{"citing_paper":"/paper/2605.05969"},"observation_digest":"sha256:50595ee6d0e3cccfc3674ce46118303b5e2769ddf0590b9468140eea0c4782b3","observation_id":"6b550b48-7944-471f-b265-330e252e1c5a","resolution":{"observed_at":"2026-07-12T17:28:42.733842Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-12T17:28:42.733842Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2605.05969","last_updated":"2026-07-09T05:17:58Z","snapshot_observed_at":"2026-07-12T23:17:31.008327Z","submitted_at":"2026-05-07T10:16:26Z","title":"Heimdallr: Characterizing and Detecting LLM-Induced Security Risks in GitHub CI Workflows","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-07-12T17:28:42.733842Z"},"links":{"citing_paper":"/paper/2605.05969"},"observation_digest":"sha256:39c8778b52fb268d65f84bfe6a1a3f2682b8865fe16a1470c7368fe0e7e19946","observation_id":"0a335b7b-729a-402d-b5b4-7da0492ee0c2","resolution":{"observed_at":"2026-07-12T17:28:42.733842Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-12T17:28:42.733842Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2605.05969","last_updated":"2026-07-09T05:17:58Z","snapshot_observed_at":"2026-07-12T23:17:31.008327Z","submitted_at":"2026-05-07T10:16:26Z","title":"Heimdallr: Characterizing and Detecting LLM-Induced Security Risks in GitHub CI Workflows","version":2},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-07-12T17:28:42.733842Z"},"links":{"citing_paper":"/paper/2605.05969"},"observation_digest":"sha256:7f6075c49647465116f8c487478034e3ad44a0a7d9a4c6e3f28f5994ceb9fd24","observation_id":"d95a624b-f82d-4377-ab72-f6bf3e52fc6d","resolution":{"observed_at":"2026-07-12T17:28:42.733842Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-12T17:28:42.733842Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2605.05969","last_updated":"2026-07-09T05:17:58Z","snapshot_observed_at":"2026-07-12T23:17:31.008327Z","submitted_at":"2026-05-07T10:16:26Z","title":"Heimdallr: Characterizing and Detecting LLM-Induced Security Risks in GitHub CI Workflows","version":2},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-07-12T17:28:42.733842Z"},"links":{"citing_paper":"/paper/2605.05969"},"observation_digest":"sha256:1da9968c6f043efcfbbda5ab2466e71e306b71e500830aa15504e3d4d722f4de","observation_id":"ce323f18-fdef-479a-aed9-8a9ff44b0f9f","resolution":{"observed_at":"2026-07-12T17:28:42.733842Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-12T17:28:42.733842Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2605.05969","last_updated":"2026-07-09T05:17:58Z","snapshot_observed_at":"2026-07-12T23:17:31.008327Z","submitted_at":"2026-05-07T10:16:26Z","title":"Heimdallr: Characterizing and Detecting LLM-Induced Security Risks in GitHub CI Workflows","version":2},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-07-12T17:28:42.733842Z"},"links":{"citing_paper":"/paper/2605.05969"},"observation_digest":"sha256:d670e5ab5f15e5476262cec128ed9e37023a1d1a0f7f4f4b75108cd587b52c65","observation_id":"66f5514d-033a-498c-8712-1939ffb84dca","resolution":{"observed_at":"2026-07-12T17:28:42.733842Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-12T17:28:42.733842Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2605.05969","last_updated":"2026-07-09T05:17:58Z","snapshot_observed_at":"2026-07-12T23:17:31.008327Z","submitted_at":"2026-05-07T10:16:26Z","title":"Heimdallr: Characterizing and Detecting LLM-Induced Security Risks in GitHub CI Workflows","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-07-12T17:28:42.733842Z"},"links":{"citing_paper":"/paper/2605.05969"},"observation_digest":"sha256:9eddaca898fef74917128608bc442c72febcf14220178e9fd441512405a08294","observation_id":"f2e838aa-f8d4-4313-8fed-eb842c33cc60","resolution":{"observed_at":"2026-07-12T17:28:42.733842Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-12T17:28:42.733842Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2605.05969","last_updated":"2026-07-09T05:17:58Z","snapshot_observed_at":"2026-07-12T23:17:31.008327Z","submitted_at":"2026-05-07T10:16:26Z","title":"Heimdallr: Characterizing and Detecting LLM-Induced Security Risks in GitHub CI Workflows","version":2},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-07-12T17:28:42.733842Z"},"links":{"citing_paper":"/paper/2605.05969"},"observation_digest":"sha256:299cbaaa9d323d48a41ddd3266c6809463845c9fc821e9abf846c2463743708a","observation_id":"c63d0675-ba92-4bf0-bd99-dc8e6ddeff19","resolution":{"observed_at":"2026-07-12T17:28:42.733842Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-12T17:28:42.733842Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2605.05969","last_updated":"2026-07-09T05:17:58Z","snapshot_observed_at":"2026-07-12T23:17:31.008327Z","submitted_at":"2026-05-07T10:16:26Z","title":"Heimdallr: Characterizing and Detecting LLM-Induced Security Risks in GitHub CI Workflows","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-07-12T17:28:42.733842Z"},"links":{"citing_paper":"/paper/2605.05969"},"observation_digest":"sha256:7301560f3965fd1e8c60b5207714b09959ecaba712d212c9ea13535fe75da051","observation_id":"12d0256b-267f-4f28-8f42-700f4383b144","resolution":{"observed_at":"2026-07-12T17:28:42.733842Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-12T17:28:42.733842Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2605.05969","last_updated":"2026-07-09T05:17:58Z","snapshot_observed_at":"2026-07-12T23:17:31.008327Z","submitted_at":"2026-05-07T10:16:26Z","title":"Heimdallr: Characterizing and Detecting LLM-Induced Security Risks in GitHub CI Workflows","version":2},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-07-12T17:28:42.733842Z"},"links":{"citing_paper":"/paper/2605.05969"},"observation_digest":"sha256:839a4d8055f229fc466983128f2995c7b4a21e170d1dcb2d213a8a587fff3f27","observation_id":"93ff7a15-9fc6-4ac2-965a-ee5732b2a893","resolution":{"observed_at":"2026-07-12T17:28:42.733842Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-12T17:28:42.733842Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2605.05969","last_updated":"2026-07-09T05:17:58Z","snapshot_observed_at":"2026-07-12T23:17:31.008327Z","submitted_at":"2026-05-07T10:16:26Z","title":"Heimdallr: Characterizing and Detecting LLM-Induced Security Risks in GitHub CI Workflows","version":2},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-07-12T17:28:42.733842Z"},"links":{"citing_paper":"/paper/2605.05969"},"observation_digest":"sha256:6178c7bb2fa9886afbf0d0af96f078cf30cd6eb0c3debc7468a8f9677e7ef8f8","observation_id":"afc6112a-241e-4fc1-a560-1bee33fd5ffa","resolution":{"observed_at":"2026-07-12T17:28:42.733842Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-12T17:28:42.733842Z","title":"In2023 IEEE Symposium on Security and Privacy (SP)","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2605.05969","last_updated":"2026-07-09T05:17:58Z","snapshot_observed_at":"2026-07-12T23:17:31.008327Z","submitted_at":"2026-05-07T10:16:26Z","title":"Heimdallr: Characterizing and Detecting LLM-Induced Security Risks in GitHub CI Workflows","version":2},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-07-12T17:28:42.733842Z"},"links":{"citing_paper":"/paper/2605.05969"},"observation_digest":"sha256:172a1470b69d916d54c52ce663b40b78bce4a2e657861dded0e7b1b0707ea7d6","observation_id":"0ce4441f-1d33-4615-9994-d660cbef50b9","resolution":{"observed_at":"2026-07-12T17:28:42.733842Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-12T17:28:42.733842Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2605.05969","last_updated":"2026-07-09T05:17:58Z","snapshot_observed_at":"2026-07-12T23:17:31.008327Z","submitted_at":"2026-05-07T10:16:26Z","title":"Heimdallr: Characterizing and Detecting LLM-Induced Security Risks in GitHub CI Workflows","version":2},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-07-12T17:28:42.733842Z"},"links":{"citing_paper":"/paper/2605.05969"},"observation_digest":"sha256:3e0e44d2fa3facc1620f8ccfd5153df392d9d6f050949eaadd3889c01010fb8c","observation_id":"d0635013-0b0d-4d14-ad22-3b94e5154e93","resolution":{"observed_at":"2026-07-12T17:28:42.733842Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.14720","last_updated":"2024-03-20T15:26:23Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-03-20T15:26:23Z","title":"Defending Against Indirect Prompt Injection Attacks With Spotlighting","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.14720","snapshot_observed_at":"2026-07-12T17:28:42.733842Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2605.05969","last_updated":"2026-07-09T05:17:58Z","snapshot_observed_at":"2026-07-12T23:17:31.008327Z","submitted_at":"2026-05-07T10:16:26Z","title":"Heimdallr: Characterizing and Detecting LLM-Induced Security Risks in GitHub CI Workflows","version":2},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-07-12T17:28:42.733842Z"},"links":{"cited_paper":"/paper/2403.14720","citing_paper":"/paper/2605.05969"},"observation_digest":"sha256:54ec7ac809bfeb17a1144c8f3f35d14ae131c7ee9e4e1bb3ea0bd08c7760daf1","observation_id":"79023922-bc5b-478a-a7f2-6f45bbd451a8","resolution":{"observed_at":"2026-07-12T17:28:42.733842Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-12T17:28:42.733842Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2605.05969","last_updated":"2026-07-09T05:17:58Z","snapshot_observed_at":"2026-07-12T23:17:31.008327Z","submitted_at":"2026-05-07T10:16:26Z","title":"Heimdallr: Characterizing and Detecting LLM-Induced Security Risks in GitHub CI Workflows","version":2},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-07-12T17:28:42.733842Z"},"links":{"citing_paper":"/paper/2605.05969"},"observation_digest":"sha256:b44c88e1c6d4f50b94cc1f88fd23addd54732e4f418439c18e9b8aa0975ada10","observation_id":"cdd72d3b-8d58-4b95-a749-ae79ff3e5a80","resolution":{"observed_at":"2026-07-12T17:28:42.733842Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-12T17:28:42.733842Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2605.05969","last_updated":"2026-07-09T05:17:58Z","snapshot_observed_at":"2026-07-12T23:17:31.008327Z","submitted_at":"2026-05-07T10:16:26Z","title":"Heimdallr: Characterizing and Detecting LLM-Induced Security Risks in GitHub CI Workflows","version":2},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-07-12T17:28:42.733842Z"},"links":{"citing_paper":"/paper/2605.05969"},"observation_digest":"sha256:369edd185aa25c92973ccd3d100faa7fb219d33908b223204ca1419f6b9fd37a","observation_id":"ef72e172-2a3d-4dae-961b-e473db22cb73","resolution":{"observed_at":"2026-07-12T17:28:42.733842Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-12T17:28:42.733842Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2605.05969","last_updated":"2026-07-09T05:17:58Z","snapshot_observed_at":"2026-07-12T23:17:31.008327Z","submitted_at":"2026-05-07T10:16:26Z","title":"Heimdallr: Characterizing and Detecting LLM-Induced Security Risks in GitHub CI Workflows","version":2},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-07-12T17:28:42.733842Z"},"links":{"citing_paper":"/paper/2605.05969"},"observation_digest":"sha256:d461105e81be4e6dfeb5073b8a562cde3c917c901e5a758c007367ed667eefe6","observation_id":"db93bf7e-9d97-4583-8c57-be55adc1c956","resolution":{"observed_at":"2026-07-12T17:28:42.733842Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-12T17:28:42.733842Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2605.05969","last_updated":"2026-07-09T05:17:58Z","snapshot_observed_at":"2026-07-12T23:17:31.008327Z","submitted_at":"2026-05-07T10:16:26Z","title":"Heimdallr: Characterizing and Detecting LLM-Induced Security Risks in GitHub CI Workflows","version":2},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-07-12T17:28:42.733842Z"},"links":{"citing_paper":"/paper/2605.05969"},"observation_digest":"sha256:535e3fbf1efe59c244bebe09341cc4c0f4d3a40a3016ad372360c354d3221e75","observation_id":"937784c8-a2a0-4a58-9ceb-8c4228319e4e","resolution":{"observed_at":"2026-07-12T17:28:42.733842Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-12T17:28:42.733842Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2605.05969","last_updated":"2026-07-09T05:17:58Z","snapshot_observed_at":"2026-07-12T23:17:31.008327Z","submitted_at":"2026-05-07T10:16:26Z","title":"Heimdallr: Characterizing and Detecting LLM-Induced Security Risks in GitHub CI Workflows","version":2},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-07-12T17:28:42.733842Z"},"links":{"citing_paper":"/paper/2605.05969"},"observation_digest":"sha256:627868d91cf2647e6fa2ad1332e7c4e110f3a5348ede33325a1a7370347c509a","observation_id":"ab58e142-30bd-4e54-9ecd-48c12b770776","resolution":{"observed_at":"2026-07-12T17:28:42.733842Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-12T17:28:42.733842Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2605.05969","last_updated":"2026-07-09T05:17:58Z","snapshot_observed_at":"2026-07-12T23:17:31.008327Z","submitted_at":"2026-05-07T10:16:26Z","title":"Heimdallr: Characterizing and Detecting LLM-Induced Security Risks in GitHub CI Workflows","version":2},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-07-12T17:28:42.733842Z"},"links":{"citing_paper":"/paper/2605.05969"},"observation_digest":"sha256:f3bc4a435a199d8ee68c97b7651dd4d47b5aa55149c835f7b6a7e9df23e69ae9","observation_id":"19804a5b-7ac5-445c-a5db-ff7f46d54036","resolution":{"observed_at":"2026-07-12T17:28:42.733842Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-12T17:28:42.733842Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2605.05969","last_updated":"2026-07-09T05:17:58Z","snapshot_observed_at":"2026-07-12T23:17:31.008327Z","submitted_at":"2026-05-07T10:16:26Z","title":"Heimdallr: Characterizing and Detecting LLM-Induced Security Risks in GitHub CI Workflows","version":2},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-07-12T17:28:42.733842Z"},"links":{"citing_paper":"/paper/2605.05969"},"observation_digest":"sha256:c79e98547644b13c3cbcc009919a0d776cb9fed0f11b29eb98c6deb307f4f78f","observation_id":"12f102e1-90fa-4fde-912c-aebec2d9a876","resolution":{"observed_at":"2026-07-12T17:28:42.733842Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2509.22040","last_updated":"2026-04-28T01:43:32Z","snapshot_observed_at":"2026-08-02T08:19:00.747753Z","submitted_at":"2025-09-26T08:20:54Z","title":"\"Your AI, My Shell\": Demystifying Prompt Injection Attacks on Agentic AI Coding Editors","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2509.22040","snapshot_observed_at":"2026-07-12T17:28:42.733842Z","title":"Your AI, My Shell","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2605.05969","last_updated":"2026-07-09T05:17:58Z","snapshot_observed_at":"2026-07-12T23:17:31.008327Z","submitted_at":"2026-05-07T10:16:26Z","title":"Heimdallr: Characterizing and Detecting LLM-Induced Security Risks in GitHub CI Workflows","version":2},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-07-12T17:28:42.733842Z"},"links":{"cited_paper":"/paper/2509.22040","citing_paper":"/paper/2605.05969"},"observation_digest":"sha256:cd06e464c49cb9368b8e2b8ba2489b4ff93dc695180b1254413c754b37718c83","observation_id":"2d096cde-2f72-4c1a-a0ed-bc2e2412b215","resolution":{"observed_at":"2026-07-12T17:28:42.733842Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-12T17:28:42.733842Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2605.05969","last_updated":"2026-07-09T05:17:58Z","snapshot_observed_at":"2026-07-12T23:17:31.008327Z","submitted_at":"2026-05-07T10:16:26Z","title":"Heimdallr: Characterizing and Detecting LLM-Induced Security Risks in GitHub CI Workflows","version":2},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-07-12T17:28:42.733842Z"},"links":{"citing_paper":"/paper/2605.05969"},"observation_digest":"sha256:5d3f8358c765a1ccc6b2cfb9e3857d8f5d329b359bcd7a6108042e70ff46d805","observation_id":"a8a1fc7a-04e7-4858-baa6-eb48305f8034","resolution":{"observed_at":"2026-07-12T17:28:42.733842Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-12T17:28:42.733842Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2605.05969","last_updated":"2026-07-09T05:17:58Z","snapshot_observed_at":"2026-07-12T23:17:31.008327Z","submitted_at":"2026-05-07T10:16:26Z","title":"Heimdallr: Characterizing and Detecting LLM-Induced Security Risks in GitHub CI Workflows","version":2},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-07-12T17:28:42.733842Z"},"links":{"citing_paper":"/paper/2605.05969"},"observation_digest":"sha256:151ab7ed393aebb61c9bddf793a60d677f800919bcd4551d66eb5ea46d86cdb4","observation_id":"3d1bdb90-12ca-4894-9278-c2dbd33f7d30","resolution":{"observed_at":"2026-07-12T17:28:42.733842Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-12T17:28:42.733842Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2605.05969","last_updated":"2026-07-09T05:17:58Z","snapshot_observed_at":"2026-07-12T23:17:31.008327Z","submitted_at":"2026-05-07T10:16:26Z","title":"Heimdallr: Characterizing and Detecting LLM-Induced Security Risks in GitHub CI Workflows","version":2},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-07-12T17:28:42.733842Z"},"links":{"citing_paper":"/paper/2605.05969"},"observation_digest":"sha256:2bd287a8f2546f3e1c9c35bf74c0fbd038de8109b037e84ff24300e7e9401107","observation_id":"bd975001-533d-4a61-9f13-b1457d5d6b6c","resolution":{"observed_at":"2026-07-12T17:28:42.733842Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-12T17:28:42.733842Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2605.05969","last_updated":"2026-07-09T05:17:58Z","snapshot_observed_at":"2026-07-12T23:17:31.008327Z","submitted_at":"2026-05-07T10:16:26Z","title":"Heimdallr: Characterizing and Detecting LLM-Induced Security Risks in GitHub CI Workflows","version":2},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-07-12T17:28:42.733842Z"},"links":{"citing_paper":"/paper/2605.05969"},"observation_digest":"sha256:b6f06c8f746af48a2aadabeb73148889e702c78cd057d6a7581493c7d37af83e","observation_id":"61b34567-8723-4b04-9fd1-f42e0ec36872","resolution":{"observed_at":"2026-07-12T17:28:42.733842Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-12T17:28:42.733842Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2605.05969","last_updated":"2026-07-09T05:17:58Z","snapshot_observed_at":"2026-07-12T23:17:31.008327Z","submitted_at":"2026-05-07T10:16:26Z","title":"Heimdallr: Characterizing and Detecting LLM-Induced Security Risks in GitHub CI Workflows","version":2},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-07-12T17:28:42.733842Z"},"links":{"citing_paper":"/paper/2605.05969"},"observation_digest":"sha256:22a3789a6c8a97c2033d5ec5571df953a1e2865ad40ec80706527a3a928f7e2a","observation_id":"6ce2b249-86b6-4205-992a-0afaf940d771","resolution":{"observed_at":"2026-07-12T17:28:42.733842Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-12T17:28:42.733842Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2605.05969","last_updated":"2026-07-09T05:17:58Z","snapshot_observed_at":"2026-07-12T23:17:31.008327Z","submitted_at":"2026-05-07T10:16:26Z","title":"Heimdallr: Characterizing and Detecting LLM-Induced Security Risks in GitHub CI Workflows","version":2},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-07-12T17:28:42.733842Z"},"links":{"citing_paper":"/paper/2605.05969"},"observation_digest":"sha256:49d9671a80dabc0d00b61239de114ea244011f4291e5cd7507652106a9607127","observation_id":"bcd813f5-cfa0-45e4-bc3a-7a8371cfcc97","resolution":{"observed_at":"2026-07-12T17:28:42.733842Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2508.18771","last_updated":"2026-04-25T09:19:48Z","snapshot_observed_at":"2026-08-02T14:14:03.552475Z","submitted_at":"2025-08-26T07:55:23Z","title":"Does AI Code Review Lead to Code Changes? A Case Study of GitHub Actions","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2508.18771","snapshot_observed_at":"2026-07-12T17:28:42.733842Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2605.05969","last_updated":"2026-07-09T05:17:58Z","snapshot_observed_at":"2026-07-12T23:17:31.008327Z","submitted_at":"2026-05-07T10:16:26Z","title":"Heimdallr: Characterizing and Detecting LLM-Induced Security Risks in GitHub CI Workflows","version":2},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-07-12T17:28:42.733842Z"},"links":{"cited_paper":"/paper/2508.18771","citing_paper":"/paper/2605.05969"},"observation_digest":"sha256:118ef195fbd5c24b3e3477232e2bb33e5a4a575ae709fbd5c73095b7a5d85299","observation_id":"fd25324d-2f73-4e6b-ad99-3fa37d3ebf53","resolution":{"observed_at":"2026-07-12T17:28:42.733842Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-12T17:28:42.733842Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2605.05969","last_updated":"2026-07-09T05:17:58Z","snapshot_observed_at":"2026-07-12T23:17:31.008327Z","submitted_at":"2026-05-07T10:16:26Z","title":"Heimdallr: Characterizing and Detecting LLM-Induced Security Risks in GitHub CI Workflows","version":2},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-07-12T17:28:42.733842Z"},"links":{"citing_paper":"/paper/2605.05969"},"observation_digest":"sha256:ff7cf820fed17d806803c7624dd970c87005414fc8719b86ef4f231e4903117d","observation_id":"9d136119-093d-4e93-a8c9-32b5bc7467e5","resolution":{"observed_at":"2026-07-12T17:28:42.733842Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-12T17:28:42.733842Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2605.05969","last_updated":"2026-07-09T05:17:58Z","snapshot_observed_at":"2026-07-12T23:17:31.008327Z","submitted_at":"2026-05-07T10:16:26Z","title":"Heimdallr: Characterizing and Detecting LLM-Induced Security Risks in GitHub CI Workflows","version":2},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-07-12T17:28:42.733842Z"},"links":{"citing_paper":"/paper/2605.05969"},"observation_digest":"sha256:d4c573699ea544abe84b8f95aaed6e5e6a47c5e976d87402f5c14e6b227b0e58","observation_id":"e7d6a1ea-0151-4d4b-aad5-db56aba91716","resolution":{"observed_at":"2026-07-12T17:28:42.733842Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-12T17:28:42.733842Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2605.05969","last_updated":"2026-07-09T05:17:58Z","snapshot_observed_at":"2026-07-12T23:17:31.008327Z","submitted_at":"2026-05-07T10:16:26Z","title":"Heimdallr: Characterizing and Detecting LLM-Induced Security Risks in GitHub CI Workflows","version":2},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-07-12T17:28:42.733842Z"},"links":{"citing_paper":"/paper/2605.05969"},"observation_digest":"sha256:793fac1d439400e260ad13e31b7f1ffe7708c95ce513b4789c8aa13f3b09bd8b","observation_id":"11be76fd-83ef-4d53-b3b9-23abc03187ad","resolution":{"observed_at":"2026-07-12T17:28:42.733842Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-12T17:28:42.733842Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2605.05969","last_updated":"2026-07-09T05:17:58Z","snapshot_observed_at":"2026-07-12T23:17:31.008327Z","submitted_at":"2026-05-07T10:16:26Z","title":"Heimdallr: Characterizing and Detecting LLM-Induced Security Risks in GitHub CI Workflows","version":2},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-07-12T17:28:42.733842Z"},"links":{"citing_paper":"/paper/2605.05969"},"observation_digest":"sha256:0da51e81396c8b4aaf191648bf2e047fcc2154937985616c91b2f0b99d60ac8d","observation_id":"44c5bf05-a0d0-4492-83bc-c3614f0c8217","resolution":{"observed_at":"2026-07-12T17:28:42.733842Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2605.05969","last_updated":"2026-07-09T05:17:58Z","latest_version":2,"primary_category":"cs.CR","snapshot_observed_at":"2026-07-12T23:17:31.008327Z","submitted_at":"2026-05-07T10:16:26Z","title":"Heimdallr: Characterizing and Detecting LLM-Induced Security Risks in GitHub CI Workflows"},"reference_resolution":{"displayed":44,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":44,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":44},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"thesis":"As of 5 August 2026, this Paper Citation Record lists 44 of 44 outbound references and 0 inbound Pith citation observations for arXiv:2605.05969."}