{"as_of":"2026-08-05T23:53:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:1f2cf1ad96cf87e08b12a3fdd15308ac50c4f2c1b6fa737a114585c70011093b","coverage":[{"denominator":43,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":43,"source":"paper_references, paper_reference_links","source_observed_at":"2026-05-12T04:17:12.046360Z","state":"measured"},{"denominator":44,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":44,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-05T06:32:48.257954+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-07-09T20:14:36.433937Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"pith","source_observed_at":"2026-07-09T20:16:29.368662Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2605.10481","last_updated":"2026-05-11T12:43:19Z","snapshot_observed_at":"2026-07-06T23:22:28.318343Z","submitted_at":"2026-05-11T12:43:19Z","title":"Safe Multi-Agent Behavior Must Be Maintained, Not Merely Asserted: Constraint Drift in LLM-Based Multi-Agent Systems","version":1},"cited_work":{"arxiv_id":"2605.10481","doi":null,"metadata_source":"pith","pith_arxiv_id":"2605.10481","snapshot_observed_at":"2026-07-09T20:16:29.368662Z","title":"Safe Multi-Agent Behavior Must Be Maintained, Not Merely Asserted: Constraint Drift in LLM-Based Multi-Agent Systems","venue":"cs.MA","work_id":"6532bd7f-cd22-40d4-bf3d-07abcf292038","year":2026},"citing_paper":{"arxiv_id":"2607.07097","last_updated":"2026-07-08T07:31:37Z","snapshot_observed_at":"2026-08-05T15:37:34.125221Z","submitted_at":"2026-07-08T07:31:37Z","title":"Operational Reframing and Approval-Framed Delegation in Multi-Agent LLM Safety","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-07-09T20:14:36.433937Z"},"links":{"cited_paper":"/paper/2605.10481","citing_paper":"/paper/2607.07097"},"observation_digest":"sha256:57b7d1a7b53b5ed72f0cf1b216ed550bbeb038337e48a38ccbf6e088c0915da5","observation_id":"d7591de6-7328-462e-a7f6-6d926dff32be","resolution":{"observed_at":"2026-07-09T20:16:29.369931Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2605.10481/citation-record","integrity":"/paper/2605.10481/integrity","json":"/paper/2605.10481/citation-record.json","paper":"/paper/2605.10481"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Constrained policy optimization","venue":null,"work_id":"b4777b5f-e1bf-4b5a-b91f-459492211ffc","year":null},"citing_paper":{"arxiv_id":"2605.10481","last_updated":"2026-05-11T12:43:19Z","snapshot_observed_at":"2026-07-06T23:22:28.318343Z","submitted_at":"2026-05-11T12:43:19Z","title":"Safe Multi-Agent Behavior Must Be Maintained, Not Merely Asserted: Constraint Drift in LLM-Based Multi-Agent Systems","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-05-12T04:17:12.046360Z"},"links":{"citing_paper":"/paper/2605.10481"},"observation_digest":"sha256:d13ebceedda61d2d57f6a083379d39e79049eccd7c93813df2c2e0910a4aa89d","observation_id":"0e41f5f5-ec65-4f5b-8ffa-bf146f918165","resolution":{"observed_at":"2026-05-12T15:46:40.654343Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1705.10528","last_updated":"2017-05-30T10:07:31Z","snapshot_observed_at":"2026-07-06T05:44:47.772844Z","submitted_at":"2017-05-30T10:07:31Z","title":"Constrained Policy Optimization","version":1},"cited_work":{"arxiv_id":"1705.10528","doi":"10.48550/arxiv.1705.10528","metadata_source":"pith","pith_arxiv_id":"1705.10528","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Constrained Policy Optimization","venue":"cs.LG","work_id":"321d43c9-0fc5-4db6-a0ae-32a3f6118159","year":2017},"citing_paper":{"arxiv_id":"2605.10481","last_updated":"2026-05-11T12:43:19Z","snapshot_observed_at":"2026-07-06T23:22:28.318343Z","submitted_at":"2026-05-11T12:43:19Z","title":"Safe Multi-Agent Behavior Must Be Maintained, Not Merely Asserted: Constraint Drift in LLM-Based Multi-Agent Systems","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-05-12T04:17:12.046360Z"},"links":{"cited_paper":"/paper/1705.10528","citing_paper":"/paper/2605.10481"},"observation_digest":"sha256:957a8049cf5543d0bd709aebc7e8191e4583cebb2665a48a3d9bf9f3fe21e138","observation_id":"697160dd-e5c9-4595-b9e3-e068cbfbc145","resolution":{"observed_at":"2026-05-12T06:26:25.026703Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1606.06565","last_updated":"2016-07-25T17:23:29Z","snapshot_observed_at":"2026-07-06T05:00:46.434335Z","submitted_at":"2016-06-21T13:37:05Z","title":"Concrete Problems in AI Safety","version":2},"cited_work":{"arxiv_id":"1606.06565","doi":"10.48550/arxiv.1606.06565","metadata_source":"pith","pith_arxiv_id":"1606.06565","snapshot_observed_at":"2026-07-10T06:15:00.866473Z","title":"Concrete Problems in AI Safety","venue":"cs.AI","work_id":"c8d14fbe-6eab-464a-95b3-778aabd82fa3","year":2016},"citing_paper":{"arxiv_id":"2605.10481","last_updated":"2026-05-11T12:43:19Z","snapshot_observed_at":"2026-07-06T23:22:28.318343Z","submitted_at":"2026-05-11T12:43:19Z","title":"Safe Multi-Agent Behavior Must Be Maintained, Not Merely Asserted: Constraint Drift in LLM-Based Multi-Agent Systems","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-05-12T04:17:12.046360Z"},"links":{"cited_paper":"/paper/1606.06565","citing_paper":"/paper/2605.10481"},"observation_digest":"sha256:4a915247e2638baa04e78588a9374bb85ac5c5c84fd205f3d7d88d710f65b592","observation_id":"f2fa0502-8d35-48ed-91b8-a378b2c57fec","resolution":{"observed_at":"2026-05-12T06:26:25.001570Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-07-13T23:49:52.215761+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-13T23:49:52.215761+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Introducing the model context protocol","venue":null,"work_id":"36688e32-9a09-4f2c-b2af-42f7b55d9ec1","year":2024},"citing_paper":{"arxiv_id":"2605.10481","last_updated":"2026-05-11T12:43:19Z","snapshot_observed_at":"2026-07-06T23:22:28.318343Z","submitted_at":"2026-05-11T12:43:19Z","title":"Safe Multi-Agent Behavior Must Be Maintained, Not Merely Asserted: Constraint Drift in LLM-Based Multi-Agent Systems","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-05-12T04:17:12.046360Z"},"links":{"citing_paper":"/paper/2605.10481"},"observation_digest":"sha256:203dd754ed8d5cc7153b127422c5ad033b7a9741bf216aede94d4bbf71a50cf2","observation_id":"463ce203-5838-47c1-a206-037974826236","resolution":{"observed_at":"2026-05-12T15:46:40.677011Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Claude code: Anthropic’s agentic coding system","venue":null,"work_id":"95a10d31-44d7-4f28-9292-b2116c8c70d1","year":2026},"citing_paper":{"arxiv_id":"2605.10481","last_updated":"2026-05-11T12:43:19Z","snapshot_observed_at":"2026-07-06T23:22:28.318343Z","submitted_at":"2026-05-11T12:43:19Z","title":"Safe Multi-Agent Behavior Must Be Maintained, Not Merely Asserted: Constraint Drift in LLM-Based Multi-Agent Systems","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-05-12T04:17:12.046360Z"},"links":{"citing_paper":"/paper/2605.10481"},"observation_digest":"sha256:6b2980c12be943ddb591762efbb119b23002526c3ed9698ca95f5a1287b1aa71","observation_id":"63e9c41e-8bca-4c6b-9257-613c1e8ae220","resolution":{"observed_at":"2026-05-12T15:46:40.656606Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Demonstrating specification gaming in reasoning models","venue":null,"work_id":"5b33a1c1-6813-4928-bd46-37de3e12b0bc","year":2025},"citing_paper":{"arxiv_id":"2605.10481","last_updated":"2026-05-11T12:43:19Z","snapshot_observed_at":"2026-07-06T23:22:28.318343Z","submitted_at":"2026-05-11T12:43:19Z","title":"Safe Multi-Agent Behavior Must Be Maintained, Not Merely Asserted: Constraint Drift in LLM-Based Multi-Agent Systems","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-05-12T04:17:12.046360Z"},"links":{"citing_paper":"/paper/2605.10481"},"observation_digest":"sha256:d235cf2f4fd7536be1b97ce6ce1fbf23c721b57f5145d85381d4c16510ee3368","observation_id":"e6520361-4e97-43b3-b790-11365d2727ab","resolution":{"observed_at":"2026-05-12T15:46:40.659022Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2012.08630","last_updated":"2020-12-15T21:39:50Z","snapshot_observed_at":"2026-07-06T10:24:51.198967Z","submitted_at":"2020-12-15T21:39:50Z","title":"Open Problems in Cooperative AI","version":1},"cited_work":{"arxiv_id":"2012.08630","doi":"10.48550/arxiv.2012.08630","metadata_source":"pith","pith_arxiv_id":"2012.08630","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2012.08630 , year=","venue":"cs.AI","work_id":"99c30d76-a6b4-4302-92e5-5aa6cca1e4ef","year":2020},"citing_paper":{"arxiv_id":"2605.10481","last_updated":"2026-05-11T12:43:19Z","snapshot_observed_at":"2026-07-06T23:22:28.318343Z","submitted_at":"2026-05-11T12:43:19Z","title":"Safe Multi-Agent Behavior Must Be Maintained, Not Merely Asserted: Constraint Drift in LLM-Based Multi-Agent Systems","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-05-12T04:17:12.046360Z"},"links":{"cited_paper":"/paper/2012.08630","citing_paper":"/paper/2605.10481"},"observation_digest":"sha256:14c6866ec758e76ae4cc66b7529885b3131ed5aa0728060dd0e3df15869ccef8","observation_id":"a9622c9f-fcfc-4dec-853e-e585a89b4392","resolution":{"observed_at":"2026-05-12T06:26:24.982610Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.13352","last_updated":"2024-11-24T22:04:23Z","snapshot_observed_at":"2026-07-06T18:33:32.806635Z","submitted_at":"2024-06-19T08:55:56Z","title":"AgentDojo: A Dynamic Environment to Evaluate Prompt Injection Attacks and Defenses for LLM Agents","version":3},"cited_work":{"arxiv_id":"2406.13352","doi":"10.48550/arxiv.2406.13352","metadata_source":"pith","pith_arxiv_id":"2406.13352","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"AgentDojo: A Dynamic Environment to Evaluate Prompt Injection Attacks and Defenses for LLM Agents","venue":"cs.CR","work_id":"7b1b672f-e6b4-4df9-aa8b-3396a2eb8b16","year":2024},"citing_paper":{"arxiv_id":"2605.10481","last_updated":"2026-05-11T12:43:19Z","snapshot_observed_at":"2026-07-06T23:22:28.318343Z","submitted_at":"2026-05-11T12:43:19Z","title":"Safe Multi-Agent Behavior Must Be Maintained, Not Merely Asserted: Constraint Drift in LLM-Based Multi-Agent Systems","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-05-12T04:17:12.046360Z"},"links":{"cited_paper":"/paper/2406.13352","citing_paper":"/paper/2605.10481"},"observation_digest":"sha256:eac363e48feb9c7cfb631c7e08dce16fdb2306f43525afd023e2f7f0fc46cfdd","observation_id":"8f512b75-6b18-4819-a9fb-50ec2961aaf3","resolution":{"observed_at":"2026-05-13T06:35:13.649872Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2603.07670","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T03:47:48.310753Z","title":"Memory for autonomous llm agents: Mechanisms, evaluation, and emerging frontiers","venue":null,"work_id":"9aecac84-4c67-4c0c-80b2-942f93760de7","year":2026},"citing_paper":{"arxiv_id":"2605.10481","last_updated":"2026-05-11T12:43:19Z","snapshot_observed_at":"2026-07-06T23:22:28.318343Z","submitted_at":"2026-05-11T12:43:19Z","title":"Safe Multi-Agent Behavior Must Be Maintained, Not Merely Asserted: Constraint Drift in LLM-Based Multi-Agent Systems","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-05-12T04:17:12.046360Z"},"links":{"citing_paper":"/paper/2605.10481"},"observation_digest":"sha256:02d68edca74c1a8a6e6d55f405c794f32382e2c3d326fa80138dbc334dec547b","observation_id":"ced88b97-d309-4518-9a49-f5877bc0c850","resolution":{"observed_at":"2026-05-12T06:26:25.060962Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1145/2619091","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Cox, Jaeyeon Jung, Patrick McDaniel, and Anmol N","venue":"ACM Transactions on Computer Systems","work_id":"57e4fd22-a95f-4d99-b2e9-fff6cd5160b6","year":2014},"citing_paper":{"arxiv_id":"2605.10481","last_updated":"2026-05-11T12:43:19Z","snapshot_observed_at":"2026-07-06T23:22:28.318343Z","submitted_at":"2026-05-11T12:43:19Z","title":"Safe Multi-Agent Behavior Must Be Maintained, Not Merely Asserted: Constraint Drift in LLM-Based Multi-Agent Systems","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-05-12T04:17:12.046360Z"},"links":{"citing_paper":"/paper/2605.10481"},"observation_digest":"sha256:e660fda8a62d1e768d62246d6d430c18d63bce4720a1b834272f4eb0ba4933e3","observation_id":"c353a26d-5cff-435e-97f2-9b29a46421a6","resolution":{"observed_at":"2026-05-12T04:21:21.417928Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.18575","last_updated":"2025-05-16T22:42:29Z","snapshot_observed_at":"2026-07-06T21:14:57.707919Z","submitted_at":"2025-04-22T17:51:03Z","title":"WASP: Benchmarking Web Agent Security Against Prompt Injection Attacks","version":3},"cited_work":{"arxiv_id":"2504.18575","doi":"10.48550/arxiv.2504.18575","metadata_source":"pith","pith_arxiv_id":"2504.18575","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"WASP: Benchmarking Web Agent Security Against Prompt Injection Attacks","venue":"cs.CR","work_id":"bf1914b2-fd32-4768-a4d5-84720606d71b","year":2025},"citing_paper":{"arxiv_id":"2605.10481","last_updated":"2026-05-11T12:43:19Z","snapshot_observed_at":"2026-07-06T23:22:28.318343Z","submitted_at":"2026-05-11T12:43:19Z","title":"Safe Multi-Agent Behavior Must Be Maintained, Not Merely Asserted: Constraint Drift in LLM-Based Multi-Agent Systems","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-05-12T04:17:12.046360Z"},"links":{"cited_paper":"/paper/2504.18575","citing_paper":"/paper/2605.10481"},"observation_digest":"sha256:50e7792c06d26d4cb18275dfba639f0b2f01ae3893bddfc9ee8075dbf38b646b","observation_id":"23b803be-36dd-4142-99ed-16d44fbd9f79","resolution":{"observed_at":"2026-05-15T22:22:05.737978Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Agent control protocol (acp) v1.30 — admission control for agent actions","venue":null,"work_id":"86f31781-7840-44bd-9e17-0245275b9272","year":null},"citing_paper":{"arxiv_id":"2605.10481","last_updated":"2026-05-11T12:43:19Z","snapshot_observed_at":"2026-07-06T23:22:28.318343Z","submitted_at":"2026-05-11T12:43:19Z","title":"Safe Multi-Agent Behavior Must Be Maintained, Not Merely Asserted: Constraint Drift in LLM-Based Multi-Agent Systems","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-05-12T04:17:12.046360Z"},"links":{"citing_paper":"/paper/2605.10481"},"observation_digest":"sha256:fd5ca1dd75f9030a882d59006c397230494e0440fae76ce7fe6c88cab3193360","observation_id":"5a10951b-d1a3-4f68-90fd-9e6b30f66586","resolution":{"observed_at":"2026-05-12T15:46:40.671687Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.5281/zenodo.19672575","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":null,"venue":"arXiv (Cornell University)","work_id":"c9720ae1-ccab-4247-91f9-fb30052333d6","year":null},"citing_paper":{"arxiv_id":"2605.10481","last_updated":"2026-05-11T12:43:19Z","snapshot_observed_at":"2026-07-06T23:22:28.318343Z","submitted_at":"2026-05-11T12:43:19Z","title":"Safe Multi-Agent Behavior Must Be Maintained, Not Merely Asserted: Constraint Drift in LLM-Based Multi-Agent Systems","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-05-12T04:17:12.046360Z"},"links":{"citing_paper":"/paper/2605.10481"},"observation_digest":"sha256:da00a66d22e108855f677adfde270c8251a8eb2cc656ddefd089cb58992933af","observation_id":"d8d8f5fb-f349-44d4-80c5-842e5eaf3907","resolution":{"observed_at":"2026-05-12T04:21:21.397013Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2502.14143","last_updated":"2025-02-19T23:03:21Z","snapshot_observed_at":"2026-07-06T20:39:28.583884Z","submitted_at":"2025-02-19T23:03:21Z","title":"Multi-Agent Risks from Advanced AI","version":1},"cited_work":{"arxiv_id":"2502.14143","doi":"10.48550/arxiv.2502.14143","metadata_source":"pith","pith_arxiv_id":"2502.14143","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2502.14143 , year=","venue":"cs.MA","work_id":"5c63297e-2866-40b6-878d-2bdbe3c0fdc7","year":2025},"citing_paper":{"arxiv_id":"2605.10481","last_updated":"2026-05-11T12:43:19Z","snapshot_observed_at":"2026-07-06T23:22:28.318343Z","submitted_at":"2026-05-11T12:43:19Z","title":"Safe Multi-Agent Behavior Must Be Maintained, Not Merely Asserted: Constraint Drift in LLM-Based Multi-Agent Systems","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-05-12T04:17:12.046360Z"},"links":{"cited_paper":"/paper/2502.14143","citing_paper":"/paper/2605.10481"},"observation_digest":"sha256:17df2f95754a34d12cdf1a7f2a4b8907724623cf15e74d80bb90bdc8b12f0575","observation_id":"d9d1afc6-effc-493d-9358-9fb19ae2deb2","resolution":{"observed_at":"2026-05-12T06:26:24.921671Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-07-15T18:20:35.094728+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-15T18:20:35.094728+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.06770","last_updated":"2024-11-11T23:05:04Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-10-10T16:47:29Z","title":"SWE-bench: Can Language Models Resolve Real-World GitHub Issues?","version":3},"cited_work":{"arxiv_id":"2310.06770","doi":"10.1145/512927.512945","metadata_source":"pith","pith_arxiv_id":"2310.06770","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"SWE-bench: Can Language Models Resolve Real-World GitHub Issues?","venue":"cs.CL","work_id":"d0effe15-a689-441a-8e3f-ea35f1c4e4b1","year":2023},"citing_paper":{"arxiv_id":"2605.10481","last_updated":"2026-05-11T12:43:19Z","snapshot_observed_at":"2026-07-06T23:22:28.318343Z","submitted_at":"2026-05-11T12:43:19Z","title":"Safe Multi-Agent Behavior Must Be Maintained, Not Merely Asserted: Constraint Drift in LLM-Based Multi-Agent Systems","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-05-12T04:17:12.046360Z"},"links":{"cited_paper":"/paper/2310.06770","citing_paper":"/paper/2605.10481"},"observation_digest":"sha256:e571e794cc30bde6b3cda625b1f6ecf8dc0b20dde48729431707c522d5b29d35","observation_id":"8c0867cd-ffda-440e-951f-75c9d6052134","resolution":{"observed_at":"2026-05-12T06:26:25.049202Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"A survey of safe reinforce- ment learning and constrained mdps: A technical survey on single-agent and multi-agent safety","venue":null,"work_id":"49ea09a1-25d7-4c33-b448-f8dd873c0ba0","year":null},"citing_paper":{"arxiv_id":"2605.10481","last_updated":"2026-05-11T12:43:19Z","snapshot_observed_at":"2026-07-06T23:22:28.318343Z","submitted_at":"2026-05-11T12:43:19Z","title":"Safe Multi-Agent Behavior Must Be Maintained, Not Merely Asserted: Constraint Drift in LLM-Based Multi-Agent Systems","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-05-12T04:17:12.046360Z"},"links":{"citing_paper":"/paper/2605.10481"},"observation_digest":"sha256:1c428cb327d4484ec0d1c8fb2a610605aa4495f48bf0e15c11e6935de7e410a3","observation_id":"60a43beb-5289-4f99-b708-e1d2d1997623","resolution":{"observed_at":"2026-05-12T15:46:40.682888Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.17342","last_updated":"2026-04-29T10:07:30Z","snapshot_observed_at":"2026-07-06T21:28:57.440918Z","submitted_at":"2025-05-22T23:26:12Z","title":"A Survey of Safe Reinforcement Learning and Constrained MDPs: A Technical Survey on Single-Agent and Multi-Agent Safety","version":2},"cited_work":{"arxiv_id":"2505.17342","doi":"10.48550/arxiv.2505.17342","metadata_source":"pith","pith_arxiv_id":"2505.17342","snapshot_observed_at":"2026-08-05T02:49:54.815029Z","title":"A Survey of Safe Reinforcement Learning and Constrained MDPs: A Technical Survey on Single-Agent and Multi-Agent Safety","venue":"cs.LG","work_id":"8f286e52-bb3a-4fcf-91c0-42df318b8b9e","year":2025},"citing_paper":{"arxiv_id":"2605.10481","last_updated":"2026-05-11T12:43:19Z","snapshot_observed_at":"2026-07-06T23:22:28.318343Z","submitted_at":"2026-05-11T12:43:19Z","title":"Safe Multi-Agent Behavior Must Be Maintained, Not Merely Asserted: Constraint Drift in LLM-Based Multi-Agent Systems","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-05-12T04:17:12.046360Z"},"links":{"cited_paper":"/paper/2505.17342","citing_paper":"/paper/2605.10481"},"observation_digest":"sha256:d986560dfb319e612db850845c3d24de2859551b08dc364d81653f37cd377e2e","observation_id":"57287db9-35ec-43c6-9dec-a6d527cd62c4","resolution":{"observed_at":"2026-05-12T06:26:24.975932Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.06120","last_updated":"2025-05-09T15:21:44Z","snapshot_observed_at":"2026-08-02T13:06:07.304813Z","submitted_at":"2025-05-09T15:21:44Z","title":"LLMs Get Lost In Multi-Turn Conversation","version":1},"cited_work":{"arxiv_id":"2505.06120","doi":"10.18653/v1/2024.acl-short.54","metadata_source":"pith","pith_arxiv_id":"2505.06120","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"LLMs Get Lost In Multi-Turn Conversation","venue":"cs.CL","work_id":"01fa2ab4-4b40-4e8a-9487-2de7db19cfe2","year":2025},"citing_paper":{"arxiv_id":"2605.10481","last_updated":"2026-05-11T12:43:19Z","snapshot_observed_at":"2026-07-06T23:22:28.318343Z","submitted_at":"2026-05-11T12:43:19Z","title":"Safe Multi-Agent Behavior Must Be Maintained, Not Merely Asserted: Constraint Drift in LLM-Based Multi-Agent Systems","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-05-12T04:17:12.046360Z"},"links":{"cited_paper":"/paper/2505.06120","citing_paper":"/paper/2605.10481"},"observation_digest":"sha256:9c57761770da6f36e2552217ed4e2dfa5f88a1d75062e58a06696de6499dc683","observation_id":"9f322f60-08c9-4e52-9d7d-47c7795fc384","resolution":{"observed_at":"2026-05-14T01:11:09.632438Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Workflows and agents","venue":null,"work_id":"42f951e5-e137-4587-a4ca-93796d27ce16","year":2026},"citing_paper":{"arxiv_id":"2605.10481","last_updated":"2026-05-11T12:43:19Z","snapshot_observed_at":"2026-07-06T23:22:28.318343Z","submitted_at":"2026-05-11T12:43:19Z","title":"Safe Multi-Agent Behavior Must Be Maintained, Not Merely Asserted: Constraint Drift in LLM-Based Multi-Agent Systems","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-05-12T04:17:12.046360Z"},"links":{"citing_paper":"/paper/2605.10481"},"observation_digest":"sha256:bca6e2c744e6835c524f9bfc99fee5f68ba3f9ff8e03c05f71ffdc97cb1f11b9","observation_id":"9ad25708-607c-43e7-aebd-940389ebc41a","resolution":{"observed_at":"2026-05-12T15:46:40.674270Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2105.14111","last_updated":"2023-01-09T21:33:02Z","snapshot_observed_at":"2026-08-04T22:03:53.464118Z","submitted_at":"2021-05-28T21:13:34Z","title":"Goal Misgeneralization in Deep Reinforcement Learning","version":7},"cited_work":{"arxiv_id":"2105.14111","doi":"10.48550/arxiv.2105.14111","metadata_source":"arxiv_reference","pith_arxiv_id":"2105.14111","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Goal Misgeneralization in Deep Reinforcement Learning , January 2023","venue":"arXiv (Cornell University)","work_id":"d5bf23e9-9871-464e-ad71-b8b1a2a24192","year":2023},"citing_paper":{"arxiv_id":"2605.10481","last_updated":"2026-05-11T12:43:19Z","snapshot_observed_at":"2026-07-06T23:22:28.318343Z","submitted_at":"2026-05-11T12:43:19Z","title":"Safe Multi-Agent Behavior Must Be Maintained, Not Merely Asserted: Constraint Drift in LLM-Based Multi-Agent Systems","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-05-12T04:17:12.046360Z"},"links":{"cited_paper":"/paper/2105.14111","citing_paper":"/paper/2605.10481"},"observation_digest":"sha256:ced8d52610bcd19c3d4e7e7f15b1ed8f7fc62c2b7fab54fc78399caefe302cb5","observation_id":"1bc17925-2df3-40e4-b0d0-53c169e8e098","resolution":{"observed_at":"2026-05-12T06:26:24.987425Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.07283","last_updated":"2024-10-09T11:01:29Z","snapshot_observed_at":"2026-08-02T17:12:52.352951Z","submitted_at":"2024-10-09T11:01:29Z","title":"Prompt Infection: LLM-to-LLM Prompt Injection within Multi-Agent Systems","version":1},"cited_work":{"arxiv_id":"2410.07283","doi":"10.48550/arxiv.2410.07283","metadata_source":"pith","pith_arxiv_id":"2410.07283","snapshot_observed_at":"2026-07-10T20:57:34.951275Z","title":"Prompt Infection: LLM-to-LLM Prompt Injection within Multi-Agent Systems","venue":"cs.MA","work_id":"17359a70-8c04-4709-a6db-aa38995d867e","year":2024},"citing_paper":{"arxiv_id":"2605.10481","last_updated":"2026-05-11T12:43:19Z","snapshot_observed_at":"2026-07-06T23:22:28.318343Z","submitted_at":"2026-05-11T12:43:19Z","title":"Safe Multi-Agent Behavior Must Be Maintained, Not Merely Asserted: Constraint Drift in LLM-Based Multi-Agent Systems","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-05-12T04:17:12.046360Z"},"links":{"cited_paper":"/paper/2410.07283","citing_paper":"/paper/2605.10481"},"observation_digest":"sha256:5d36467b94ae459e02ec219b2a9fa677fb0dfa6ea4402ded88b6b11ddec2e3c1","observation_id":"07941958-df38-45d0-b677-86d593cf07de","resolution":{"observed_at":"2026-05-15T19:32:20.024903Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-07-15T18:20:34.441537+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-15T18:20:34.441537+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2305.20050","last_updated":"2023-05-31T17:24:00Z","snapshot_observed_at":"2026-08-05T13:11:04.104454Z","submitted_at":"2023-05-31T17:24:00Z","title":"Let's Verify Step by Step","version":1},"cited_work":{"arxiv_id":"2305.20050","doi":"10.1007/bf00262952","metadata_source":"pith","pith_arxiv_id":"2305.20050","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Let's Verify Step by Step","venue":"cs.LG","work_id":"6d05b790-04c5-4fd2-91b2-ba1dfdd5770f","year":2023},"citing_paper":{"arxiv_id":"2605.10481","last_updated":"2026-05-11T12:43:19Z","snapshot_observed_at":"2026-07-06T23:22:28.318343Z","submitted_at":"2026-05-11T12:43:19Z","title":"Safe Multi-Agent Behavior Must Be Maintained, Not Merely Asserted: Constraint Drift in LLM-Based Multi-Agent Systems","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-05-12T04:17:12.046360Z"},"links":{"cited_paper":"/paper/2305.20050","citing_paper":"/paper/2605.10481"},"observation_digest":"sha256:9113421edd71cd1185cf76f300f4269b3eb000c15721a0707511b6165df55202","observation_id":"cae962ae-ad84-4ccb-b533-a07e98d9bbef","resolution":{"observed_at":"2026-05-12T06:26:24.970342Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.03172","last_updated":"2023-11-20T23:09:34Z","snapshot_observed_at":"2026-07-06T15:51:12.179086Z","submitted_at":"2023-07-06T17:54:11Z","title":"Lost in the Middle: How Language Models Use Long Contexts","version":3},"cited_work":{"arxiv_id":"2307.03172","doi":"10.1162/tacl","metadata_source":"pith","pith_arxiv_id":"2307.03172","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Lost in the Middle: How Language Models Use Long Contexts","venue":"cs.CL","work_id":"37c05e13-4a24-44f8-a1c4-da1bbe7223aa","year":2023},"citing_paper":{"arxiv_id":"2605.10481","last_updated":"2026-05-11T12:43:19Z","snapshot_observed_at":"2026-07-06T23:22:28.318343Z","submitted_at":"2026-05-11T12:43:19Z","title":"Safe Multi-Agent Behavior Must Be Maintained, Not Merely Asserted: Constraint Drift in LLM-Based Multi-Agent Systems","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-05-12T04:17:12.046360Z"},"links":{"cited_paper":"/paper/2307.03172","citing_paper":"/paper/2605.10481"},"observation_digest":"sha256:ff29881c17698b6c470ccbca101580197f6562186f5adfd4f82410118a7ac19a","observation_id":"3e6e83da-b8bb-46e3-8cf4-adcb083e0ffe","resolution":{"observed_at":"2026-05-12T06:26:24.870263Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07510","last_updated":"2025-07-25T12:28:15Z","snapshot_observed_at":"2026-08-03T16:11:24.375534Z","submitted_at":"2024-02-12T09:31:21Z","title":"Secret Collusion among AI Agents: Multi-Agent Deception via Steganography","version":5},"cited_work":{"arxiv_id":"2402.07510","doi":"10.48550/arxiv.2402.07510","metadata_source":"arxiv_reference","pith_arxiv_id":"2402.07510","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"https://modelcontextprotocol.io/introduction","venue":"arXiv (Cornell University)","work_id":"10a1b5a2-aa9b-4a94-86cd-4a01456f9f0b","year":2024},"citing_paper":{"arxiv_id":"2605.10481","last_updated":"2026-05-11T12:43:19Z","snapshot_observed_at":"2026-07-06T23:22:28.318343Z","submitted_at":"2026-05-11T12:43:19Z","title":"Safe Multi-Agent Behavior Must Be Maintained, Not Merely Asserted: Constraint Drift in LLM-Based Multi-Agent Systems","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-05-12T04:17:12.046360Z"},"links":{"cited_paper":"/paper/2402.07510","citing_paper":"/paper/2605.10481"},"observation_digest":"sha256:9165bb9c666c0459893138a5a0f7da97a5245eeafa4e6644196a03089839058e","observation_id":"2b4ccdbf-9cca-4954-bf49-6422a63444a8","resolution":{"observed_at":"2026-05-12T06:26:24.942457Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1145/269005","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Myers and Barbara Liskov","venue":null,"work_id":"e987a022-b534-455b-a959-4e842dd34595","year":1997},"citing_paper":{"arxiv_id":"2605.10481","last_updated":"2026-05-11T12:43:19Z","snapshot_observed_at":"2026-07-06T23:22:28.318343Z","submitted_at":"2026-05-11T12:43:19Z","title":"Safe Multi-Agent Behavior Must Be Maintained, Not Merely Asserted: Constraint Drift in LLM-Based Multi-Agent Systems","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-05-12T04:17:12.046360Z"},"links":{"citing_paper":"/paper/2605.10481"},"observation_digest":"sha256:c108f98bcb921e749906f45dd981cfc4aa75fb2b46019ae56f354742a8af9042","observation_id":"c268f3d3-3986-47df-9761-cff7a8fbb6c5","resolution":{"observed_at":"2026-05-12T04:21:21.411877Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2602.15198","last_updated":"2026-05-27T00:09:20Z","snapshot_observed_at":"2026-08-03T00:20:12.601117Z","submitted_at":"2026-02-16T21:27:38Z","title":"Colosseum: Auditing Collusion in Cooperative Multi-Agent Systems","version":2},"cited_work":{"arxiv_id":"2602.15198","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2602.15198","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Nakamura, A","venue":null,"work_id":"5b0c05a9-f8a4-4397-b396-a3c70cddbd29","year":2026},"citing_paper":{"arxiv_id":"2605.10481","last_updated":"2026-05-11T12:43:19Z","snapshot_observed_at":"2026-07-06T23:22:28.318343Z","submitted_at":"2026-05-11T12:43:19Z","title":"Safe Multi-Agent Behavior Must Be Maintained, Not Merely Asserted: Constraint Drift in LLM-Based Multi-Agent Systems","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-05-12T04:17:12.046360Z"},"links":{"cited_paper":"/paper/2602.15198","citing_paper":"/paper/2605.10481"},"observation_digest":"sha256:14a0ff4e9498dee298fbd663da788356514a3233c423ce323666213cf23550c4","observation_id":"c0d5596f-ae0f-462c-83e9-259c08a7a14f","resolution":{"observed_at":"2026-05-28T02:04:14.756178Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Introducing codex","venue":null,"work_id":"7d5ce224-cf71-48e0-a8a7-f8c7d0dd8c9c","year":2025},"citing_paper":{"arxiv_id":"2605.10481","last_updated":"2026-05-11T12:43:19Z","snapshot_observed_at":"2026-07-06T23:22:28.318343Z","submitted_at":"2026-05-11T12:43:19Z","title":"Safe Multi-Agent Behavior Must Be Maintained, Not Merely Asserted: Constraint Drift in LLM-Based Multi-Agent Systems","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-05-12T04:17:12.046360Z"},"links":{"citing_paper":"/paper/2605.10481"},"observation_digest":"sha256:f9b715e949e6d7cdcf6d87590d10d0d660c0d1d54ca1d0c2a59f3c7df118b4e9","observation_id":"6603a23d-1242-45a9-afeb-dd7c6e1c3a5f","resolution":{"observed_at":"2026-05-12T15:46:40.680132Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Agents sdk","venue":null,"work_id":"744f1597-0150-4b0d-9670-babdc5191820","year":null},"citing_paper":{"arxiv_id":"2605.10481","last_updated":"2026-05-11T12:43:19Z","snapshot_observed_at":"2026-07-06T23:22:28.318343Z","submitted_at":"2026-05-11T12:43:19Z","title":"Safe Multi-Agent Behavior Must Be Maintained, Not Merely Asserted: Constraint Drift in LLM-Based Multi-Agent Systems","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-05-12T04:17:12.046360Z"},"links":{"citing_paper":"/paper/2605.10481"},"observation_digest":"sha256:772dc7275873d94a5f26f1999ebb12a586b90cb3ef75ce146b1618bb5426b1de","observation_id":"f2d42fb5-9510-4c2d-9fdd-5a7ca10d6735","resolution":{"observed_at":"2026-05-12T15:46:40.661206Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-07T05:23:21.528605Z","title":null,"venue":null,"work_id":"d6cd0d9d-111e-4d8e-a74f-f09c1d1b128a","year":2026},"citing_paper":{"arxiv_id":"2605.10481","last_updated":"2026-05-11T12:43:19Z","snapshot_observed_at":"2026-07-06T23:22:28.318343Z","submitted_at":"2026-05-11T12:43:19Z","title":"Safe Multi-Agent Behavior Must Be Maintained, Not Merely Asserted: Constraint Drift in LLM-Based Multi-Agent Systems","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-05-12T04:17:12.046360Z"},"links":{"citing_paper":"/paper/2605.10481"},"observation_digest":"sha256:2a61260462fb18244e33649b6a37661571ca64f2b9156324365dda9c73c97c52","observation_id":"2c864f4f-7302-424f-a049-25ac8baeb079","resolution":{"observed_at":"2026-05-12T15:46:40.664104Z","resolver_source":"raw_fallback","status":"parse_uncertain"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2604.11523","last_updated":"2026-04-13T14:26:38Z","snapshot_observed_at":"2026-08-02T20:46:05.282926Z","submitted_at":"2026-04-13T14:26:38Z","title":"PAC-BENCH: Evaluating Multi-Agent Collaboration under Privacy Constraints","version":1},"cited_work":{"arxiv_id":"2604.11523","doi":null,"metadata_source":"pith","pith_arxiv_id":"2604.11523","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"PAC-BENCH: Evaluating Multi-Agent Collaboration under Privacy Constraints","venue":"cs.AI","work_id":"c989bb20-f277-45b2-8986-4cf1c1c4cd35","year":2026},"citing_paper":{"arxiv_id":"2605.10481","last_updated":"2026-05-11T12:43:19Z","snapshot_observed_at":"2026-07-06T23:22:28.318343Z","submitted_at":"2026-05-11T12:43:19Z","title":"Safe Multi-Agent Behavior Must Be Maintained, Not Merely Asserted: Constraint Drift in LLM-Based Multi-Agent Systems","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-05-12T04:17:12.046360Z"},"links":{"cited_paper":"/paper/2604.11523","citing_paper":"/paper/2605.10481"},"observation_digest":"sha256:ae53da1ffa3d4b860cef2e976156eafe2fb4c2ff62058dd49ce8f534ddb6105d","observation_id":"e510bdb6-840f-4bdd-a859-4f3791dee15f","resolution":{"observed_at":"2026-05-12T06:26:24.964071Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2603.24775","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Aip: Agent identity protocol for verifiable delegation across mcp and a2a","venue":null,"work_id":"0a1ce50b-ea3d-420c-8117-bac980c5c125","year":2026},"citing_paper":{"arxiv_id":"2605.10481","last_updated":"2026-05-11T12:43:19Z","snapshot_observed_at":"2026-07-06T23:22:28.318343Z","submitted_at":"2026-05-11T12:43:19Z","title":"Safe Multi-Agent Behavior Must Be Maintained, Not Merely Asserted: Constraint Drift in LLM-Based Multi-Agent Systems","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-05-12T04:17:12.046360Z"},"links":{"citing_paper":"/paper/2605.10481"},"observation_digest":"sha256:0d0e5c8fca77579f1d2d5e77b57cef9a5327e9bdc00972b81a73ffd334cefd14","observation_id":"5e388712-d37c-4cd1-9181-69ea57fd1c72","resolution":{"observed_at":"2026-05-12T06:26:24.889860Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.15817","last_updated":"2024-05-17T17:17:45Z","snapshot_observed_at":"2026-07-06T16:24:30.545494Z","submitted_at":"2023-09-25T17:08:02Z","title":"Identifying the Risks of LM Agents with an LM-Emulated Sandbox","version":2},"cited_work":{"arxiv_id":"2309.15817","doi":"10.48550/arxiv.2309.15817","metadata_source":"pith","pith_arxiv_id":"2309.15817","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Identifying the Risks of LM Agents with an LM-Emulated Sandbox","venue":"cs.AI","work_id":"3d4c3b66-d749-4939-b1bc-62b10b2ebbb6","year":2023},"citing_paper":{"arxiv_id":"2605.10481","last_updated":"2026-05-11T12:43:19Z","snapshot_observed_at":"2026-07-06T23:22:28.318343Z","submitted_at":"2026-05-11T12:43:19Z","title":"Safe Multi-Agent Behavior Must Be Maintained, Not Merely Asserted: Constraint Drift in LLM-Based Multi-Agent Systems","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-05-12T04:17:12.046360Z"},"links":{"cited_paper":"/paper/2309.15817","citing_paper":"/paper/2605.10481"},"observation_digest":"sha256:22f13c438fe2fbba964f4915345a08269219a5ce87284108c22597dc633fcc66","observation_id":"fd968996-9c2d-43e5-8bbc-b6d5f9c17b37","resolution":{"observed_at":"2026-05-12T20:45:24.770470Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.03300","last_updated":"2024-04-27T15:25:53Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-02-05T18:55:32Z","title":"DeepSeekMath: Pushing the Limits of Mathematical Reasoning in Open Language Models","version":3},"cited_work":{"arxiv_id":"2402.03300","doi":"10.1016/0004-3702(73)90011-8","metadata_source":"pith","pith_arxiv_id":"2402.03300","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"DeepSeekMath: Pushing the Limits of Mathematical Reasoning in Open Language Models","venue":"cs.CL","work_id":"c5006563-f3ec-438a-9e35-b7b484f34828","year":2024},"citing_paper":{"arxiv_id":"2605.10481","last_updated":"2026-05-11T12:43:19Z","snapshot_observed_at":"2026-07-06T23:22:28.318343Z","submitted_at":"2026-05-11T12:43:19Z","title":"Safe Multi-Agent Behavior Must Be Maintained, Not Merely Asserted: Constraint Drift in LLM-Based Multi-Agent Systems","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-05-12T04:17:12.046360Z"},"links":{"cited_paper":"/paper/2402.03300","citing_paper":"/paper/2605.10481"},"observation_digest":"sha256:d4dcda6ef01d6c5d93390c6bd9cf630ee9e75059cb04c9c7265f22cb6d16edf1","observation_id":"d6fcf511-a850-42ff-9167-762566535dfe","resolution":{"observed_at":"2026-05-12T06:26:24.952049Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2501.09674","last_updated":"2025-01-16T17:11:21Z","snapshot_observed_at":"2026-08-05T21:29:57.971324Z","submitted_at":"2025-01-16T17:11:21Z","title":"Authenticated Delegation and Authorized AI Agents","version":1},"cited_work":{"arxiv_id":"2501.09674","doi":"10.48550/arxiv.2501.09674","metadata_source":"pith","pith_arxiv_id":"2501.09674","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Authenticated delegation and authorized ai agents","venue":"cs.CY","work_id":"1182c8d2-0bc2-40cc-affb-db1ec9679a3c","year":2025},"citing_paper":{"arxiv_id":"2605.10481","last_updated":"2026-05-11T12:43:19Z","snapshot_observed_at":"2026-07-06T23:22:28.318343Z","submitted_at":"2026-05-11T12:43:19Z","title":"Safe Multi-Agent Behavior Must Be Maintained, Not Merely Asserted: Constraint Drift in LLM-Based Multi-Agent Systems","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-05-12T04:17:12.046360Z"},"links":{"cited_paper":"/paper/2501.09674","citing_paper":"/paper/2605.10481"},"observation_digest":"sha256:f17ddd87d2f8b4de405de0081f4b0e8d7c475de8e59a583ec789380784fc7e78","observation_id":"595338ef-0775-4fcb-b2ca-3011d77ec1c0","resolution":{"observed_at":"2026-05-12T06:26:24.876638Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Announcing the agent2agent protocol (a2a)","venue":null,"work_id":"41441e54-85fb-419e-abbb-d76d9ffaf2be","year":2025},"citing_paper":{"arxiv_id":"2605.10481","last_updated":"2026-05-11T12:43:19Z","snapshot_observed_at":"2026-07-06T23:22:28.318343Z","submitted_at":"2026-05-11T12:43:19Z","title":"Safe Multi-Agent Behavior Must Be Maintained, Not Merely Asserted: Constraint Drift in LLM-Based Multi-Agent Systems","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-05-12T04:17:12.046360Z"},"links":{"citing_paper":"/paper/2605.10481"},"observation_digest":"sha256:67c00a2c521696f4222da30e8edf302c67403363c10130e67d033d69bb664579","observation_id":"0248ef91-3324-46ef-8c73-8758fb6dddf4","resolution":{"observed_at":"2026-05-12T15:46:40.669125Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Mankowitz, and Shie Mannor","venue":null,"work_id":"c7b353b7-9bde-4f47-9489-b8d24871b914","year":null},"citing_paper":{"arxiv_id":"2605.10481","last_updated":"2026-05-11T12:43:19Z","snapshot_observed_at":"2026-07-06T23:22:28.318343Z","submitted_at":"2026-05-11T12:43:19Z","title":"Safe Multi-Agent Behavior Must Be Maintained, Not Merely Asserted: Constraint Drift in LLM-Based Multi-Agent Systems","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-05-12T04:17:12.046360Z"},"links":{"citing_paper":"/paper/2605.10481"},"observation_digest":"sha256:161c212b495b9cabaed196c09336dc6d7fff09a9328c2e819e3e775703645a05","observation_id":"2fa5e13e-0f7b-4a13-8519-9e57836bb140","resolution":{"observed_at":"2026-05-12T15:46:40.666677Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1805.11074","last_updated":"2018-12-26T11:09:40Z","snapshot_observed_at":"2026-07-06T06:41:39.213867Z","submitted_at":"2018-05-28T17:31:11Z","title":"Reward Constrained Policy Optimization","version":3},"cited_work":{"arxiv_id":"1805.11074","doi":null,"metadata_source":"pith","pith_arxiv_id":"1805.11074","snapshot_observed_at":"2026-07-04T11:39:46.348956Z","title":"Reward Constrained Policy Optimization","venue":"cs.LG","work_id":"c4fdaea7-11ae-432a-8a0c-0b650e87b855","year":2018},"citing_paper":{"arxiv_id":"2605.10481","last_updated":"2026-05-11T12:43:19Z","snapshot_observed_at":"2026-07-06T23:22:28.318343Z","submitted_at":"2026-05-11T12:43:19Z","title":"Safe Multi-Agent Behavior Must Be Maintained, Not Merely Asserted: Constraint Drift in LLM-Based Multi-Agent Systems","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-05-12T04:17:12.046360Z"},"links":{"cited_paper":"/paper/1805.11074","citing_paper":"/paper/2605.10481"},"observation_digest":"sha256:bcb028c4a888af3aa941b943bf38c19c4868b77c1ebc429a9c86bda3cf34f674","observation_id":"78867550-b0ea-4025-bf68-077a2892b235","resolution":{"observed_at":"2026-05-12T06:26:25.031529Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2407.16741","last_updated":"2025-04-18T18:14:31Z","snapshot_observed_at":"2026-08-02T14:58:44.167588Z","submitted_at":"2024-07-23T17:50:43Z","title":"OpenHands: An Open Platform for AI Software Developers as Generalist Agents","version":3},"cited_work":{"arxiv_id":"2407.16741","doi":"10.1145/3718958.3750537","metadata_source":"pith","pith_arxiv_id":"2407.16741","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"OpenHands: An Open Platform for AI Software Developers as Generalist Agents","venue":"cs.SE","work_id":"f1762ea0-e382-4f38-a28c-adc643789859","year":2024},"citing_paper":{"arxiv_id":"2605.10481","last_updated":"2026-05-11T12:43:19Z","snapshot_observed_at":"2026-07-06T23:22:28.318343Z","submitted_at":"2026-05-11T12:43:19Z","title":"Safe Multi-Agent Behavior Must Be Maintained, Not Merely Asserted: Constraint Drift in LLM-Based Multi-Agent Systems","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-05-12T04:17:12.046360Z"},"links":{"cited_paper":"/paper/2407.16741","citing_paper":"/paper/2605.10481"},"observation_digest":"sha256:23e65af261dbbef5f64147b704bd3e654faf79cf5fe37423ac18188fb732d49e","observation_id":"6ad7768c-6148-40e1-8996-65f04e5ea3fc","resolution":{"observed_at":"2026-05-12T06:26:24.996174Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2308.08155","last_updated":"2023-10-03T20:47:10Z","snapshot_observed_at":"2026-07-31T19:03:03.494918Z","submitted_at":"2023-08-16T05:57:52Z","title":"AutoGen: Enabling Next-Gen LLM Applications via Multi-Agent Conversation","version":2},"cited_work":{"arxiv_id":"2308.08155","doi":"10.48550/arxiv.2308.08155","metadata_source":"pith","pith_arxiv_id":"2308.08155","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"AutoGen: Enabling Next-Gen LLM Applications via Multi-Agent Conversation","venue":"cs.AI","work_id":"92b7eb9c-c3d8-4518-a376-06fa15dd895b","year":2023},"citing_paper":{"arxiv_id":"2605.10481","last_updated":"2026-05-11T12:43:19Z","snapshot_observed_at":"2026-07-06T23:22:28.318343Z","submitted_at":"2026-05-11T12:43:19Z","title":"Safe Multi-Agent Behavior Must Be Maintained, Not Merely Asserted: Constraint Drift in LLM-Based Multi-Agent Systems","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-05-12T04:17:12.046360Z"},"links":{"cited_paper":"/paper/2308.08155","citing_paper":"/paper/2605.10481"},"observation_digest":"sha256:10345f1a56c4c1db0c12de095c78e7212446d8bed4372789378e13eed66fff0a","observation_id":"34fcd044-cb80-47e4-bb20-7b46dbd5be0d","resolution":{"observed_at":"2026-05-12T06:26:24.901027Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-07-14T18:20:20.607676+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-14T18:20:20.607676+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2602.11510","doi":"10.48550/arxiv.2602.11510","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Agentleak: A full-stack benchmark for privacy leakage in multi-agent llm systems","venue":"Open MIND","work_id":"4f4d5f73-01e3-40b3-84b0-21a059ae4a2e","year":2026},"citing_paper":{"arxiv_id":"2605.10481","last_updated":"2026-05-11T12:43:19Z","snapshot_observed_at":"2026-07-06T23:22:28.318343Z","submitted_at":"2026-05-11T12:43:19Z","title":"Safe Multi-Agent Behavior Must Be Maintained, Not Merely Asserted: Constraint Drift in LLM-Based Multi-Agent Systems","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-05-12T04:17:12.046360Z"},"links":{"citing_paper":"/paper/2605.10481"},"observation_digest":"sha256:bbb76a0b61076e8e2b5ef8ae4ecb663a867e8c604554f4664450496c61c45c00","observation_id":"5a9b09ab-363a-4698-b805-78745c543b20","resolution":{"observed_at":"2026-05-12T06:26:24.881771Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.15793","last_updated":"2024-11-11T20:01:15Z","snapshot_observed_at":"2026-07-06T18:19:29.996982Z","submitted_at":"2024-05-06T17:41:33Z","title":"SWE-agent: Agent-Computer Interfaces Enable Automated Software Engineering","version":3},"cited_work":{"arxiv_id":"2405.15793","doi":"10.48550/arxiv.2405.15793","metadata_source":"pith","pith_arxiv_id":"2405.15793","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"SWE-agent: Agent-Computer Interfaces Enable Automated Software Engineering","venue":"cs.SE","work_id":"01826cd9-a652-403c-a2ec-531da9fe2b6a","year":2024},"citing_paper":{"arxiv_id":"2605.10481","last_updated":"2026-05-11T12:43:19Z","snapshot_observed_at":"2026-07-06T23:22:28.318343Z","submitted_at":"2026-05-11T12:43:19Z","title":"Safe Multi-Agent Behavior Must Be Maintained, Not Merely Asserted: Constraint Drift in LLM-Based Multi-Agent Systems","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-05-12T04:17:12.046360Z"},"links":{"cited_paper":"/paper/2405.15793","citing_paper":"/paper/2605.10481"},"observation_digest":"sha256:e84b9d8330cc493455d3810de46ffced207f0cc9f3f6ba2f3dd15e2c6c6febdb","observation_id":"511a4108-e906-4b3d-93ff-dcead6d715f8","resolution":{"observed_at":"2026-05-12T06:26:24.928914Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-07-14T18:20:24.962823+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-14T18:20:24.962823+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.02691","last_updated":"2024-08-04T04:52:35Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-03-05T06:21:45Z","title":"InjecAgent: Benchmarking Indirect Prompt Injections in Tool-Integrated Large Language Model Agents","version":3},"cited_work":{"arxiv_id":"2403.02691","doi":"10.1145/3696410.3714756","metadata_source":"pith","pith_arxiv_id":"2403.02691","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"InjecAgent: Benchmarking Indirect Prompt Injections in Tool-Integrated Large Language Model Agents","venue":"cs.CL","work_id":"5cbfcda4-ec26-44e4-be60-e1525956d71d","year":2024},"citing_paper":{"arxiv_id":"2605.10481","last_updated":"2026-05-11T12:43:19Z","snapshot_observed_at":"2026-07-06T23:22:28.318343Z","submitted_at":"2026-05-11T12:43:19Z","title":"Safe Multi-Agent Behavior Must Be Maintained, Not Merely Asserted: Constraint Drift in LLM-Based Multi-Agent Systems","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-05-12T04:17:12.046360Z"},"links":{"cited_paper":"/paper/2403.02691","citing_paper":"/paper/2605.10481"},"observation_digest":"sha256:0662d6377fdfad8a6de56c2a96aed00188e8138e35d4915a5629c9a79ea3690e","observation_id":"3bdb1c22-0f24-427c-8670-645fd4493487","resolution":{"observed_at":"2026-05-13T21:40:06.567267Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2603.14332","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T02:47:50.433655Z","title":"Governing dynamic capabilities: Cryptographic binding and reproducibility verification for ai agent tool use","venue":null,"work_id":"c14b863e-2973-4145-87c2-966c74e6d032","year":2026},"citing_paper":{"arxiv_id":"2605.10481","last_updated":"2026-05-11T12:43:19Z","snapshot_observed_at":"2026-07-06T23:22:28.318343Z","submitted_at":"2026-05-11T12:43:19Z","title":"Safe Multi-Agent Behavior Must Be Maintained, Not Merely Asserted: Constraint Drift in LLM-Based Multi-Agent Systems","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-05-12T04:17:12.046360Z"},"links":{"citing_paper":"/paper/2605.10481"},"observation_digest":"sha256:b79853ebe8bb0dbb000f5bbfc9af9fb578295efa9d85a37df74af13bd4e74c59","observation_id":"a622363b-fa8f-4ecd-b25a-da018f85922e","resolution":{"observed_at":"2026-05-12T06:26:25.010102Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2605.10481","last_updated":"2026-05-11T12:43:19Z","latest_version":1,"primary_category":"cs.MA","snapshot_observed_at":"2026-07-06T23:22:28.318343Z","submitted_at":"2026-05-11T12:43:19Z","title":"Safe Multi-Agent Behavior Must Be Maintained, Not Merely Asserted: Constraint Drift in LLM-Based Multi-Agent Systems"},"reference_resolution":{"displayed":43,"state_counts":{"malformed_identifier":0,"metadata_mismatch":6,"parse_uncertain":1,"unresolved":0,"verified_exact":25,"verified_fuzzy":11},"total_outbound_references":43},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"thesis":"As of 5 August 2026, this Paper Citation Record lists 43 of 43 outbound references and 1 inbound Pith citation observation for arXiv:2605.10481."}