Typed states for the displayed outbound observations.
Source: paper_references, paper_reference_links, observed 2026-07-02T23:59:14.667099Z
Paper Citation Record · LEDGER
As of 14 August 2026, this Paper Citation Record lists 44 of 44 outbound references and 2 inbound Pith citation observations for arXiv:2605.12535.
A citation records a reference. It does not transfer a finding from one paper to another.
Typed states for the displayed outbound observations.
Source: paper_references, paper_reference_links, observed 2026-07-02T23:59:14.667099Z
One-hop event checks from named stored sources.
Source: scholarly_work_events, retraction_status_cache, observed 2026-08-14T06:32:32.682623+00:00
Pith citing papers itemized under the disclosed page cap.
Source: paper_references, paper_reference_links, observed 2026-06-30T10:42:48.496613Z
A source-named dated measurement, never combined with another source.
Source: pith, observed 2026-07-04T08:59:42.373087Z
44 of 44 outbound references displayed
External citation measurements
No source-named external measurement is stored.
Observation 6ca95585-b419-403d-b6ff-a7b38bf8dee8 · outbound
Ghost in the Context: Policy-Carriage Integrity in LLM Agents Xu, Huazuo Gao, Deli Chen, Jiashi Li, Wangding Zeng, Xingkai Yu, Y
Reference 1
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation de97127e-097f-4c63-b637-5ccfdc6cb9f4 · outbound
Ghost in the Context: Policy-Carriage Integrity in LLM Agents Gormley, and Graham Neubig
Reference 2
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation e9969a1c-dd24-4a84-94d9-8398fec54c6d · outbound
Ghost in the Context: Policy-Carriage Integrity in LLM Agents Agentdojo: A dynamic environment to evaluate prompt injection attacks and defenses for llm agents
Reference 3
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation df504a43-baff-4215-a2fe-ed261fcd7b3f · outbound
Ghost in the Context: Policy-Carriage Integrity in LLM Agents Unresolved cited work
Reference 4
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 28ce64c5-6d54-480f-ba46-80780024cdb4 · outbound
Ghost in the Context: Policy-Carriage Integrity in LLM Agents Unresolved cited work
Reference 5
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 63f7b0a1-e179-4449-882b-2d0d9db3a2d1 · outbound
Ghost in the Context: Policy-Carriage Integrity in LLM Agents Memory OS of AI agent
Reference 6
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 4c5da441-74c5-4f55-95e9-3a603ca4ddfa · outbound
Ghost in the Context: Policy-Carriage Integrity in LLM Agents Liu, Kevin Lin, John Hewitt, Ashwin Paranjape, Michele Bevilacqua, Fabio Petroni, and Percy Liang
Reference 7
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation a154f24c-3e47-4900-b09b-c0b6c147a44b · outbound
Ghost in the Context: Policy-Carriage Integrity in LLM Agents Unresolved cited work
Reference 8
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 187aed1c-15c4-47b3-bba9-1b99bb379043 · outbound
Ghost in the Context: Policy-Carriage Integrity in LLM Agents When Compression Becomes an Attack Surface: Black-Box Attacks on Prompt-Compressed LLM Agents
Reference 9
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation a08856ee-6c0c-43c9-bc3b-48db46871ab3 · outbound
Ghost in the Context: Policy-Carriage Integrity in LLM Agents Evaluating Very Long-Term Conversational Memory of
Reference 10
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation ebdcc243-7897-4d7d-a68a-40e57630930f · outbound
Ghost in the Context: Policy-Carriage Integrity in LLM Agents Rossi, Seunghyun Yoon, and Hinrich Sch"utze
Reference 11
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 24b8b046-ea7e-4ad2-9eb4-5453df316f17 · outbound
Ghost in the Context: Policy-Carriage Integrity in LLM Agents MemGPT: Towards LLMs as Operating Systems
Reference 12
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation fc2a97b8-991c-4296-a5a9-6189979471e5 · outbound
Ghost in the Context: Policy-Carriage Integrity in LLM Agents O'Brien and Carrie Jun Cai and Meredith Ringel Morris and Percy Liang and Michael S
Reference 13
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation cc2ac580-4f1b-4087-b08e-73d884ebba49 · outbound
Ghost in the Context: Policy-Carriage Integrity in LLM Agents Ignore Previous Prompt: Attack Techniques For Language Models
Reference 14
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 037abcbf-bc4e-4abe-b4b9-4ad7d24953df · outbound
Ghost in the Context: Policy-Carriage Integrity in LLM Agents Maddison, and Tatsunori Hashimoto
Reference 15
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation ac734398-48cc-4ad3-b9c3-6330c5ab86ca · outbound
Ghost in the Context: Policy-Carriage Integrity in LLM Agents Unresolved cited work
Reference 16
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 9180c602-e40e-48d5-a9d6-569e69db5ade · outbound
Ghost in the Context: Policy-Carriage Integrity in LLM Agents Unresolved cited work
Reference 17
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 97de955c-6994-4932-8ffd-7ea48483ffd6 · outbound
Ghost in the Context: Policy-Carriage Integrity in LLM Agents In: Zong, C., Xia, F., Li, W., Navigli, R
Reference 18
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 5e50e077-1785-48e3-98e9-f161c67a246e · outbound
Ghost in the Context: Policy-Carriage Integrity in LLM Agents Unresolved cited work
Reference 19
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation a61a3c06-c1e6-431e-8d6c-4ae6245760e2 · outbound
Ghost in the Context: Policy-Carriage Integrity in LLM Agents Unresolved cited work
Reference 20
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation f61dbb0c-0bb0-479e-b771-f373483b82b7 · outbound
Ghost in the Context: Policy-Carriage Integrity in LLM Agents arXiv preprint arXiv:2512.16962 , year=
Reference 21
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation eb930a21-4313-4d43-b674-6e7550e47423 · outbound
Ghost in the Context: Policy-Carriage Integrity in LLM Agents Unresolved cited work
Reference 22
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 8e8a86d7-bfd2-4b6d-b1ed-c1d1034d4edb · outbound
Ghost in the Context: Policy-Carriage Integrity in LLM Agents InFindings of the Association for Computational Linguistics: ACL 2025
Reference 23
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation dde6df92-25f7-4e3b-8c30-1b9fd7ee2f81 · outbound
Ghost in the Context: Policy-Carriage Integrity in LLM Agents Unresolved cited work
Reference 24
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation a67eb8ae-c90c-4e5f-964d-63f28c5b4d17 · outbound
Ghost in the Context: Policy-Carriage Integrity in LLM Agents The Instruction Hierarchy: Training LLMs to Prioritize Privileged Instructions
Reference 25
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 685e978d-44b4-4f4b-80d2-b7dd9015466e · outbound
Ghost in the Context: Policy-Carriage Integrity in LLM Agents 25013–25030.doi:10.18653/v1/2025.acl-long.1227
Reference 26
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 8dafd4ca-91d7-4004-bd99-257fe64c07ea · outbound
Ghost in the Context: Policy-Carriage Integrity in LLM Agents Voyager: An Open-Ended Embodied Agent with Large Language Models
Reference 27
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation f0c164e8-5e02-4947-aeec-3d8c0a838b69 · outbound
Ghost in the Context: Policy-Carriage Integrity in LLM Agents Unresolved cited work
Reference 28
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 2c01dad6-00bc-4f4b-85ad-4e4ce156c94f · outbound
Ghost in the Context: Policy-Carriage Integrity in LLM Agents https://doi.org/10
Reference 29
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 565f07ef-bc45-47e3-8908-c0d411c54af9 · outbound
Ghost in the Context: Policy-Carriage Integrity in LLM Agents Memex (rl): Scaling long-horizon llm agents via indexed experience memory
Reference 30
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 9be30744-94c1-4431-a835-aaee4c7d0d65 · outbound
Ghost in the Context: Policy-Carriage Integrity in LLM Agents arXiv preprint arXiv:2510.02373 , year=
Reference 31
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 70378042-d51b-463e-95e2-0c44949a683e · outbound
Ghost in the Context: Policy-Carriage Integrity in LLM Agents Agentsys: Secure and dynamic llm agents through explicit hierarchical memory management
Reference 32
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation bf2692c8-cf85-4775-953d-95502f8c5b69 · outbound
Ghost in the Context: Policy-Carriage Integrity in LLM Agents Unresolved cited work
Reference 33
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 446e03a8-27fe-4a0b-862d-f9ff7e60bc22 · outbound
Ghost in the Context: Policy-Carriage Integrity in LLM Agents InThe Twelfth International Conference on Learning Representations
Reference 34
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 565a2f2f-3b59-4d89-8b62-a0bba623045f · outbound
Ghost in the Context: Policy-Carriage Integrity in LLM Agents Zombie agents: Persistent control of self-evolving llm agents via self-reinforcing injections
Reference 35
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation e2d7dcca-44e4-43dd-8a0f-3ef8472bebdd · outbound
Ghost in the Context: Policy-Carriage Integrity in LLM Agents Narasimhan, and Yuan Cao
Reference 36
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation d63965dd-a88a-446f-b962-7638c169a134 · outbound
Ghost in the Context: Policy-Carriage Integrity in LLM Agents Proceedings of the 31st ACM SIGKDD Conference on Knowledge Discovery and Data Mining V.1 , pages =
Reference 37
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 360aa981-d479-4b43-8362-147b06c008f3 · outbound
Ghost in the Context: Policy-Carriage Integrity in LLM Agents Unresolved cited work
Reference 38
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation ee57cef9-99dc-48b3-8be0-a39bac3d5bd8 · outbound
Ghost in the Context: Policy-Carriage Integrity in LLM Agents Unresolved cited work
Reference 39
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 3ff2b0ae-ebdf-4162-bd5b-c38bfc233cd8 · outbound
Ghost in the Context: Policy-Carriage Integrity in LLM Agents 2024 , address =
Reference 40
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 0e97ddfe-4983-44ad-8245-6c14a87efaf1 · outbound
Ghost in the Context: Policy-Carriage Integrity in LLM Agents Amac: Interpretable admission control for agentic memory systems
Reference 41
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation dd7eec08-af04-4caa-8eff-20931203f99a · outbound
Ghost in the Context: Policy-Carriage Integrity in LLM Agents Unresolved cited work
Reference 42
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 0d2ef391-5e3f-409c-b30e-6059138001f7 · outbound
Ghost in the Context: Policy-Carriage Integrity in LLM Agents LLM Agents Should Employ Security Principles
Reference 43
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 6c95f7b1-a6a6-41f4-a487-7c1e92521e0a · outbound
Ghost in the Context: Policy-Carriage Integrity in LLM Agents Memory as Action: Autonomous Context Curation for Long-Horizon Agentic Tasks
Reference 44
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 8eda3550-a307-4084-a0e6-21e5c6fecca6 · inbound
Governance Decay: How Context Compaction Silently Erases Safety Constraints in Long-Horizon LLM Agents Ghost in the Context: Policy-Carriage Integrity in LLM Agents
Reference 23
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 211b5e75-803f-42ad-84cb-bd27aa6a5b0b · inbound
Governance Decay: How Context Compaction Silently Erases Safety Constraints in Long-Horizon LLM Agents Ghost in the Context: Policy-Carriage Integrity in LLM Agents
Reference 24
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.