{"as_of":"2026-08-14T20:09:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:ed6a44e0cccbcd17dbc62ce3c52c5ce2e4407d776130e0ebb70ff00e31b28f50","coverage":[{"denominator":44,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":44,"source":"paper_references, paper_reference_links","source_observed_at":"2026-07-02T23:59:14.667099Z","state":"measured"},{"denominator":46,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":46,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-14T06:32:32.682623+00:00","state":"measured"},{"denominator":2,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":2,"source":"paper_references, paper_reference_links","source_observed_at":"2026-06-30T10:42:48.496613Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"pith","source_observed_at":"2026-07-04T08:59:42.373087Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2605.12535","last_updated":"2026-07-01T09:34:06Z","snapshot_observed_at":"2026-08-14T15:06:19.446287Z","submitted_at":"2026-05-02T18:07:42Z","title":"Ghost in the Context: Policy-Carriage Integrity in LLM Agents","version":3},"cited_work":{"arxiv_id":"2605.12535","doi":null,"metadata_source":"pith","pith_arxiv_id":"2605.12535","snapshot_observed_at":"2026-07-04T08:59:42.373087Z","title":"Ghost in the Context: Policy-Carriage Integrity in LLM Agents","venue":"cs.CR","work_id":"534e2a50-546e-4896-ad4d-feebdc64827c","year":2026},"citing_paper":{"arxiv_id":"2606.22528","last_updated":"2026-06-27T08:35:20Z","snapshot_observed_at":"2026-08-14T04:58:56.218703Z","submitted_at":"2026-06-21T14:30:20Z","title":"Governance Decay: How Context Compaction Silently Erases Safety Constraints in Long-Horizon LLM Agents","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-06-26T10:45:36.408818Z"},"links":{"cited_paper":"/paper/2605.12535","citing_paper":"/paper/2606.22528"},"observation_digest":"sha256:b8388f2fa78785a3048419caf7fba8476464cf0a4c48a520680f8783b0c86fb9","observation_id":"8eda3550-a307-4084-a0e6-21e5c6fecca6","resolution":{"observed_at":"2026-07-04T08:59:42.374272Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2605.12535","last_updated":"2026-07-01T09:34:06Z","snapshot_observed_at":"2026-08-14T15:06:19.446287Z","submitted_at":"2026-05-02T18:07:42Z","title":"Ghost in the Context: Policy-Carriage Integrity in LLM Agents","version":3},"cited_work":{"arxiv_id":"2605.12535","doi":null,"metadata_source":"pith","pith_arxiv_id":"2605.12535","snapshot_observed_at":"2026-07-04T08:59:42.373087Z","title":"Ghost in the Context: Policy-Carriage Integrity in LLM Agents","venue":"cs.CR","work_id":"534e2a50-546e-4896-ad4d-feebdc64827c","year":2026},"citing_paper":{"arxiv_id":"2606.22528","last_updated":"2026-06-27T08:35:20Z","snapshot_observed_at":"2026-08-14T04:58:56.218703Z","submitted_at":"2026-06-21T14:30:20Z","title":"Governance Decay: How Context Compaction Silently Erases Safety Constraints in Long-Horizon LLM Agents","version":2},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-06-30T10:42:48.496613Z"},"links":{"cited_paper":"/paper/2605.12535","citing_paper":"/paper/2606.22528"},"observation_digest":"sha256:15b3e4a52e8ebaf87f0868b7bd64cc8d615453663fb66e9ab510f949e525b3b1","observation_id":"211b5e75-803f-42ad-84cb-bd27aa6a5b0b","resolution":{"observed_at":"2026-06-30T10:44:36.386080Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2605.12535/citation-record","integrity":"/paper/2605.12535/integrity","json":"/paper/2605.12535/citation-record.json","paper":"/paper/2605.12535"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.18653/v1/2024.acl-","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-03T09:07:47.009935Z","title":"Xu, Huazuo Gao, Deli Chen, Jiashi Li, Wangding Zeng, Xingkai Yu, Y","venue":null,"work_id":"f30bdb61-5994-46dd-a4d7-2d320a1917e0","year":2024},"citing_paper":{"arxiv_id":"2605.12535","last_updated":"2026-07-01T09:34:06Z","snapshot_observed_at":"2026-08-14T15:06:19.446287Z","submitted_at":"2026-05-02T18:07:42Z","title":"Ghost in the Context: Policy-Carriage Integrity in LLM Agents","version":3},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-07-02T23:59:14.667099Z"},"links":{"citing_paper":"/paper/2605.12535"},"observation_digest":"sha256:76f62d353c8caee4b364b76c3cde55adadd32de07d1ba1227a572085c11535c3","observation_id":"6ca95585-b419-403d-b6ff-a7b38bf8dee8","resolution":{"observed_at":"2026-07-03T00:07:27.484801Z","resolver_source":"doi_truncated","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.18653/v1/2025.naacl-long.605","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Gormley, and Graham Neubig","venue":null,"work_id":"14e588c9-40f2-46ac-a49a-0d71e440562a","year":2025},"citing_paper":{"arxiv_id":"2605.12535","last_updated":"2026-07-01T09:34:06Z","snapshot_observed_at":"2026-08-14T15:06:19.446287Z","submitted_at":"2026-05-02T18:07:42Z","title":"Ghost in the Context: Policy-Carriage Integrity in LLM Agents","version":3},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-07-02T23:59:14.667099Z"},"links":{"citing_paper":"/paper/2605.12535"},"observation_digest":"sha256:cba75d30ccfb263bde2ebbc7af552deffca13e32a4e2384ffd036c0f047da196","observation_id":"de97127e-097f-4c63-b637-5ccfdc6cb9f4","resolution":{"observed_at":"2026-07-03T00:07:27.480337Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.52202/079017-2636","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Agentdojo: A dynamic environment to evaluate prompt injection attacks and defenses for llm agents","venue":null,"work_id":"673a54cd-ec69-4997-9c2b-5d11a1480af6","year":2024},"citing_paper":{"arxiv_id":"2605.12535","last_updated":"2026-07-01T09:34:06Z","snapshot_observed_at":"2026-08-14T15:06:19.446287Z","submitted_at":"2026-05-02T18:07:42Z","title":"Ghost in the Context: Policy-Carriage Integrity in LLM Agents","version":3},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-07-02T23:59:14.667099Z"},"links":{"citing_paper":"/paper/2605.12535"},"observation_digest":"sha256:90953f9b21e96a1db9d8605341c04d973fac314ed09cb35f8ff0f4d38e5eaa76","observation_id":"e9969a1c-dd24-4a84-94d9-8398fec54c6d","resolution":{"observed_at":"2026-07-03T00:07:27.505707Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-07-15T19:20:30.552089+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-15T19:20:30.552089+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-05T17:21:19.262246Z","title":null,"venue":null,"work_id":"ea073470-cbe5-4f2b-ba41-f8c012ca799f","year":2025},"citing_paper":{"arxiv_id":"2605.12535","last_updated":"2026-07-01T09:34:06Z","snapshot_observed_at":"2026-08-14T15:06:19.446287Z","submitted_at":"2026-05-02T18:07:42Z","title":"Ghost in the Context: Policy-Carriage Integrity in LLM Agents","version":3},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-07-02T23:59:14.667099Z"},"links":{"citing_paper":"/paper/2605.12535"},"observation_digest":"sha256:656ed211eb26f66f309a1f3278bbf5e0bc375584f539b67ed777bbc9217e6108","observation_id":"df504a43-baff-4215-a2fe-ed261fcd7b3f","resolution":{"observed_at":"2026-07-05T17:21:19.263769Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-05T17:21:19.259762Z","title":null,"venue":null,"work_id":"ae761e92-66be-4a61-80e0-be3d65641cf0","year":2024},"citing_paper":{"arxiv_id":"2605.12535","last_updated":"2026-07-01T09:34:06Z","snapshot_observed_at":"2026-08-14T15:06:19.446287Z","submitted_at":"2026-05-02T18:07:42Z","title":"Ghost in the Context: Policy-Carriage Integrity in LLM Agents","version":3},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-07-02T23:59:14.667099Z"},"links":{"citing_paper":"/paper/2605.12535"},"observation_digest":"sha256:fad745ec8c1a935243454e52b5a4afbf6e6ab0172680e39c5ef15e7ae92450be","observation_id":"28ce64c5-6d54-480f-ba46-80780024cdb4","resolution":{"observed_at":"2026-07-05T17:21:19.261386Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.18653/v1/2025.emnlp-main.1318","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Memory OS of AI agent","venue":null,"work_id":"601ee6ad-09cf-4713-b8f0-cbac91282f5a","year":2025},"citing_paper":{"arxiv_id":"2605.12535","last_updated":"2026-07-01T09:34:06Z","snapshot_observed_at":"2026-08-14T15:06:19.446287Z","submitted_at":"2026-05-02T18:07:42Z","title":"Ghost in the Context: Policy-Carriage Integrity in LLM Agents","version":3},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-07-02T23:59:14.667099Z"},"links":{"citing_paper":"/paper/2605.12535"},"observation_digest":"sha256:d43287e12599d739d223964205581a17803abbd53dc2b6a5aadd020a9a361423","observation_id":"63f7b0a1-e179-4449-882b-2d0d9db3a2d1","resolution":{"observed_at":"2026-07-03T00:07:27.472261Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-05-22T07:53:27.319263+00:00","source":"crossref_status_cache"},{"observed_at":"2026-05-22T07:53:27.319263+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1162/tacl_a_00638","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T03:27:45.037248Z","title":"Liu, Kevin Lin, John Hewitt, Ashwin Paranjape, Michele Bevilacqua, Fabio Petroni, and Percy Liang","venue":"Transactions of the Association for Computational Linguistics","work_id":"9c9c91f9-a321-4e33-8897-d66f6ad0f659","year":2024},"citing_paper":{"arxiv_id":"2605.12535","last_updated":"2026-07-01T09:34:06Z","snapshot_observed_at":"2026-08-14T15:06:19.446287Z","submitted_at":"2026-05-02T18:07:42Z","title":"Ghost in the Context: Policy-Carriage Integrity in LLM Agents","version":3},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-07-02T23:59:14.667099Z"},"links":{"citing_paper":"/paper/2605.12535"},"observation_digest":"sha256:0d03b18f6538ca801eb336defb572f94a23f479225c9a543b2506abd1a2c840d","observation_id":"4c5da441-74c5-4f55-95e9-3a603ca4ddfa","resolution":{"observed_at":"2026-07-03T00:07:27.497363Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-12T23:38:04.9173+00:00","source":"crossref_status_cache"},{"observed_at":"2026-08-12T23:38:04.9173+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-05T17:21:19.264615Z","title":null,"venue":null,"work_id":"c5162364-cd8e-4604-affe-87a151b7bea6","year":2024},"citing_paper":{"arxiv_id":"2605.12535","last_updated":"2026-07-01T09:34:06Z","snapshot_observed_at":"2026-08-14T15:06:19.446287Z","submitted_at":"2026-05-02T18:07:42Z","title":"Ghost in the Context: Policy-Carriage Integrity in LLM Agents","version":3},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-07-02T23:59:14.667099Z"},"links":{"citing_paper":"/paper/2605.12535"},"observation_digest":"sha256:f3680a75d352d6a727db14555904b036bd9001d906e4d081e68983fab8eb42b8","observation_id":"a154f24c-3e47-4900-b09b-c0b6c147a44b","resolution":{"observed_at":"2026-07-05T17:21:19.266061Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2510.22963","last_updated":"2026-06-19T20:25:06Z","snapshot_observed_at":"2026-08-14T17:16:52.193930Z","submitted_at":"2025-10-27T03:37:41Z","title":"When Compression Becomes an Attack Surface: Black-Box Attacks on Prompt-Compressed LLM Agents","version":4},"cited_work":{"arxiv_id":"2510.22963","doi":"10.48550/arxiv.2510.22963","metadata_source":"pith","pith_arxiv_id":"2510.22963","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"When Compression Becomes an Attack Surface: Black-Box Attacks on Prompt-Compressed LLM Agents","venue":"cs.CR","work_id":"d6d5a145-4c7b-4cec-ba71-2cd356e5f136","year":2025},"citing_paper":{"arxiv_id":"2605.12535","last_updated":"2026-07-01T09:34:06Z","snapshot_observed_at":"2026-08-14T15:06:19.446287Z","submitted_at":"2026-05-02T18:07:42Z","title":"Ghost in the Context: Policy-Carriage Integrity in LLM Agents","version":3},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-07-02T23:59:14.667099Z"},"links":{"cited_paper":"/paper/2510.22963","citing_paper":"/paper/2605.12535"},"observation_digest":"sha256:127c35c6fb4628070212d7fdc8c2320ac1e5baa71af4be92ca5f419e102b5af4","observation_id":"187aed1c-15c4-47b3-bba9-1b99bb379043","resolution":{"observed_at":"2026-07-03T00:07:27.513467Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.18653/v1/2024.acl-long.747","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T00:05:47.838003Z","title":"Evaluating Very Long-Term Conversational Memory of","venue":"Proceedings of the 62nd Annual Meeting of the Association for Computational Linguistics (Volume 1: Long Papers)","work_id":"6bbf9aa9-b06f-489e-8977-aeb1261f2ef8","year":2024},"citing_paper":{"arxiv_id":"2605.12535","last_updated":"2026-07-01T09:34:06Z","snapshot_observed_at":"2026-08-14T15:06:19.446287Z","submitted_at":"2026-05-02T18:07:42Z","title":"Ghost in the Context: Policy-Carriage Integrity in LLM Agents","version":3},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-07-02T23:59:14.667099Z"},"links":{"citing_paper":"/paper/2605.12535"},"observation_digest":"sha256:fbbe74555d0ade6378eeee0645335e1132b874ad48d3a3e96ecb244478bc0d9e","observation_id":"a08856ee-6c0c-43c9-bc3b-48db46871ab3","resolution":{"observed_at":"2026-07-03T00:07:27.479158Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-13T18:38:56.560693+00:00","source":"crossref_status_cache"},{"observed_at":"2026-08-13T18:38:56.560693+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-05T17:21:19.267345Z","title":"Rossi, Seunghyun Yoon, and Hinrich Sch\"utze","venue":null,"work_id":"4dc4633e-de6d-4550-a4d6-d6ddb3f32cba","year":2025},"citing_paper":{"arxiv_id":"2605.12535","last_updated":"2026-07-01T09:34:06Z","snapshot_observed_at":"2026-08-14T15:06:19.446287Z","submitted_at":"2026-05-02T18:07:42Z","title":"Ghost in the Context: Policy-Carriage Integrity in LLM Agents","version":3},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-07-02T23:59:14.667099Z"},"links":{"citing_paper":"/paper/2605.12535"},"observation_digest":"sha256:bcf0504c014b7f2614ef35c86d4389d22faeef8747e35cc36bc3ba5dc8276899","observation_id":"ebdcc243-7897-4d7d-a68a-40e57630930f","resolution":{"observed_at":"2026-07-05T17:21:19.269507Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.08560","last_updated":"2024-02-12T18:59:46Z","snapshot_observed_at":"2026-08-14T18:03:37.032997Z","submitted_at":"2023-10-12T17:51:32Z","title":"MemGPT: Towards LLMs as Operating Systems","version":2},"cited_work":{"arxiv_id":"2310.08560","doi":"10.48550/arxiv.2310.08560","metadata_source":"pith","pith_arxiv_id":"2310.08560","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"MemGPT: Towards LLMs as Operating Systems","venue":"cs.AI","work_id":"2698f5ad-c84c-40ca-b839-0912dae10ba2","year":2023},"citing_paper":{"arxiv_id":"2605.12535","last_updated":"2026-07-01T09:34:06Z","snapshot_observed_at":"2026-08-14T15:06:19.446287Z","submitted_at":"2026-05-02T18:07:42Z","title":"Ghost in the Context: Policy-Carriage Integrity in LLM Agents","version":3},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-07-02T23:59:14.667099Z"},"links":{"cited_paper":"/paper/2310.08560","citing_paper":"/paper/2605.12535"},"observation_digest":"sha256:c451e2733bb0bf448cf62c548e9a0a52a2a5fe7184432530effd30b62258de93","observation_id":"24b8b046-ea7e-4ad2-9eb4-5453df316f17","resolution":{"observed_at":"2026-07-03T00:07:27.487077Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-07-13T15:49:35.543803+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-13T15:49:35.543803+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"6183.360676","doi":"10.1145/3586183.3606763","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"O'Brien and Carrie Jun Cai and Meredith Ringel Morris and Percy Liang and Michael S","venue":null,"work_id":"b5bf85fe-4fb7-4966-b0b2-9ccf9d3b11b9","year":2023},"citing_paper":{"arxiv_id":"2605.12535","last_updated":"2026-07-01T09:34:06Z","snapshot_observed_at":"2026-08-14T15:06:19.446287Z","submitted_at":"2026-05-02T18:07:42Z","title":"Ghost in the Context: Policy-Carriage Integrity in LLM Agents","version":3},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-07-02T23:59:14.667099Z"},"links":{"citing_paper":"/paper/2605.12535"},"observation_digest":"sha256:f7ffe306fb32694a2d68a35fb121d0cecacaae0d02972494d395bf3ed1298c50","observation_id":"fc2a97b8-991c-4296-a5a9-6189979471e5","resolution":{"observed_at":"2026-07-03T00:07:27.506927Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-07-18T08:21:12.695495+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-18T08:21:12.695495+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2211.09527","last_updated":"2022-11-17T13:43:20Z","snapshot_observed_at":"2026-07-06T14:19:47.424778Z","submitted_at":"2022-11-17T13:43:20Z","title":"Ignore Previous Prompt: Attack Techniques For Language Models","version":1},"cited_work":{"arxiv_id":"2211.09527","doi":"10.48550/arxiv.2211.09527","metadata_source":"pith","pith_arxiv_id":"2211.09527","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Ignore Previous Prompt: Attack Techniques For Language Models","venue":"cs.CL","work_id":"a7c5b6ec-3407-4330-96c8-3fc58e7d410b","year":2022},"citing_paper":{"arxiv_id":"2605.12535","last_updated":"2026-07-01T09:34:06Z","snapshot_observed_at":"2026-08-14T15:06:19.446287Z","submitted_at":"2026-05-02T18:07:42Z","title":"Ghost in the Context: Policy-Carriage Integrity in LLM Agents","version":3},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-07-02T23:59:14.667099Z"},"links":{"cited_paper":"/paper/2211.09527","citing_paper":"/paper/2605.12535"},"observation_digest":"sha256:7217f87245ec3c3d9fd12742e077ccb7c4545b83d2305164fc227026ce26fd6e","observation_id":"cc2ac580-4f1b-4087-b08e-73d884ebba49","resolution":{"observed_at":"2026-07-03T00:07:27.504173Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-05-24T11:53:03.018758+00:00","source":"crossref_status_cache"},{"observed_at":"2026-05-24T11:53:03.018758+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-05T17:21:19.270507Z","title":"Maddison, and Tatsunori Hashimoto","venue":null,"work_id":"087e6b5d-33fa-4519-a45d-da1d1070c709","year":2024},"citing_paper":{"arxiv_id":"2605.12535","last_updated":"2026-07-01T09:34:06Z","snapshot_observed_at":"2026-08-14T15:06:19.446287Z","submitted_at":"2026-05-02T18:07:42Z","title":"Ghost in the Context: Policy-Carriage Integrity in LLM Agents","version":3},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-07-02T23:59:14.667099Z"},"links":{"citing_paper":"/paper/2605.12535"},"observation_digest":"sha256:72e3f6acf61068f5adc270ffa1db1b13ee6c4c49822ba519ceb1b7f1c5fa7bea","observation_id":"037abcbf-bc4e-4abe-b4b9-4ad7d24953df","resolution":{"observed_at":"2026-07-05T17:21:19.272212Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.18653/v1/2025.emnlp-main.1683","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":null,"venue":null,"work_id":"8ab98502-ffba-492f-9a56-75e2b5a30718","year":2025},"citing_paper":{"arxiv_id":"2605.12535","last_updated":"2026-07-01T09:34:06Z","snapshot_observed_at":"2026-08-14T15:06:19.446287Z","submitted_at":"2026-05-02T18:07:42Z","title":"Ghost in the Context: Policy-Carriage Integrity in LLM Agents","version":3},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-07-02T23:59:14.667099Z"},"links":{"citing_paper":"/paper/2605.12535"},"observation_digest":"sha256:7ac09f580a89d0aa65af7ca0990b99f312d44393c55c0eb0473296a266760116","observation_id":"ac734398-48cc-4ad3-b9c3-6330c5ab86ca","resolution":{"observed_at":"2026-07-03T00:07:27.496492Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-05T17:21:19.246970Z","title":null,"venue":null,"work_id":"611aa63d-955c-480d-99d3-efb0f701b40d","year":2023},"citing_paper":{"arxiv_id":"2605.12535","last_updated":"2026-07-01T09:34:06Z","snapshot_observed_at":"2026-08-14T15:06:19.446287Z","submitted_at":"2026-05-02T18:07:42Z","title":"Ghost in the Context: Policy-Carriage Integrity in LLM Agents","version":3},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-07-02T23:59:14.667099Z"},"links":{"citing_paper":"/paper/2605.12535"},"observation_digest":"sha256:9254a2e35c5c7c10bda3375eb1898da72835987bc1dfb06b815d004658a8dccd","observation_id":"9180c602-e40e-48d5-a9d6-569e69db5ade","resolution":{"observed_at":"2026-07-05T17:21:19.248437Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.18653/v1/","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T12:17:03.600265Z","title":"In: Zong, C., Xia, F., Li, W., Navigli, R","venue":null,"work_id":"8d675bdd-79ca-48d6-9163-fc17ce0e8ece","year":2024},"citing_paper":{"arxiv_id":"2605.12535","last_updated":"2026-07-01T09:34:06Z","snapshot_observed_at":"2026-08-14T15:06:19.446287Z","submitted_at":"2026-05-02T18:07:42Z","title":"Ghost in the Context: Policy-Carriage Integrity in LLM Agents","version":3},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-07-02T23:59:14.667099Z"},"links":{"citing_paper":"/paper/2605.12535"},"observation_digest":"sha256:f33663f2fee5ae8fbba293e121d72cc90f0a37e7a1d98291c0a55b083cba6e30","observation_id":"97de955c-6994-4932-8ffd-7ea48483ffd6","resolution":{"observed_at":"2026-07-03T00:07:27.510902Z","resolver_source":"doi_truncated","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.18653/v1/2022.emnlp-main.823","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":null,"venue":null,"work_id":"6297f513-b2d4-4578-a5c8-e86d725584c1","year":2022},"citing_paper":{"arxiv_id":"2605.12535","last_updated":"2026-07-01T09:34:06Z","snapshot_observed_at":"2026-08-14T15:06:19.446287Z","submitted_at":"2026-05-02T18:07:42Z","title":"Ghost in the Context: Policy-Carriage Integrity in LLM Agents","version":3},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-07-02T23:59:14.667099Z"},"links":{"citing_paper":"/paper/2605.12535"},"observation_digest":"sha256:7e032d1c134a1d812227910a28c9d4f158eb2995610418e7b163535bc9d8f6f3","observation_id":"5e50e077-1785-48e3-98e9-f161c67a246e","resolution":{"observed_at":"2026-07-03T00:07:27.508723Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-05T17:21:19.249835Z","title":null,"venue":null,"work_id":"d06fd37e-d70f-41e6-a221-622339783204","year":2023},"citing_paper":{"arxiv_id":"2605.12535","last_updated":"2026-07-01T09:34:06Z","snapshot_observed_at":"2026-08-14T15:06:19.446287Z","submitted_at":"2026-05-02T18:07:42Z","title":"Ghost in the Context: Policy-Carriage Integrity in LLM Agents","version":3},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-07-02T23:59:14.667099Z"},"links":{"citing_paper":"/paper/2605.12535"},"observation_digest":"sha256:0453704eda12b58212c8e59fdd4b6ef11df56976cbc90bef43e50a47057533e1","observation_id":"a61a3c06-c1e6-431e-8d6c-4ae6245760e2","resolution":{"observed_at":"2026-07-05T17:21:19.252819Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2512.16962","doi":"10.48550/arxiv.2512.16962","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2512.16962 , year=","venue":"arXiv (Cornell University)","work_id":"90120582-e1b6-45f2-af30-e61c82587d05","year":2025},"citing_paper":{"arxiv_id":"2605.12535","last_updated":"2026-07-01T09:34:06Z","snapshot_observed_at":"2026-08-14T15:06:19.446287Z","submitted_at":"2026-05-02T18:07:42Z","title":"Ghost in the Context: Policy-Carriage Integrity in LLM Agents","version":3},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-07-02T23:59:14.667099Z"},"links":{"citing_paper":"/paper/2605.12535"},"observation_digest":"sha256:82fd75819b3e63eb12c77cd94d39214bca19e20a354ff71c0aba30787338222c","observation_id":"f61dbb0c-0bb0-479e-b771-f373483b82b7","resolution":{"observed_at":"2026-07-03T00:07:27.492080Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-05T17:21:19.256815Z","title":null,"venue":null,"work_id":"275a6454-5a04-4f6d-991c-cc34684084df","year":null},"citing_paper":{"arxiv_id":"2605.12535","last_updated":"2026-07-01T09:34:06Z","snapshot_observed_at":"2026-08-14T15:06:19.446287Z","submitted_at":"2026-05-02T18:07:42Z","title":"Ghost in the Context: Policy-Carriage Integrity in LLM Agents","version":3},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-07-02T23:59:14.667099Z"},"links":{"citing_paper":"/paper/2605.12535"},"observation_digest":"sha256:ed1bcb3ea2caf93dd7c64062a454ec224085bebb1cd5c2aa39d2bd919167f1b2","observation_id":"eb930a21-4313-4d43-b674-6e7550e47423","resolution":{"observed_at":"2026-07-05T17:21:19.258628Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.18653/v1/2025.findings-acl.989","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"InFindings of the Association for Computational Linguistics: ACL 2025","venue":null,"work_id":"ae3d967d-830c-465f-8f85-d3125c13dcb2","year":2025},"citing_paper":{"arxiv_id":"2605.12535","last_updated":"2026-07-01T09:34:06Z","snapshot_observed_at":"2026-08-14T15:06:19.446287Z","submitted_at":"2026-05-02T18:07:42Z","title":"Ghost in the Context: Policy-Carriage Integrity in LLM Agents","version":3},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-07-02T23:59:14.667099Z"},"links":{"citing_paper":"/paper/2605.12535"},"observation_digest":"sha256:e9c2e3f66b3a0978935c1a410e7dfa4fc48de9f19cc8a264cc0d31342bdee1a8","observation_id":"8e8a86d7-bfd2-4b6d-b1ed-c1d1034d4edb","resolution":{"observed_at":"2026-07-03T00:07:27.503744Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-05T17:21:19.244670Z","title":null,"venue":null,"work_id":"7de2e620-d0d8-431f-b8d3-04c9dc8fac05","year":2023},"citing_paper":{"arxiv_id":"2605.12535","last_updated":"2026-07-01T09:34:06Z","snapshot_observed_at":"2026-08-14T15:06:19.446287Z","submitted_at":"2026-05-02T18:07:42Z","title":"Ghost in the Context: Policy-Carriage Integrity in LLM Agents","version":3},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-07-02T23:59:14.667099Z"},"links":{"citing_paper":"/paper/2605.12535"},"observation_digest":"sha256:7f10326e417694dde89e8b3e2373116a7a5518bf4e8731c96145f6dd9bdad2f8","observation_id":"dde6df92-25f7-4e3b-8c30-1b9fd7ee2f81","resolution":{"observed_at":"2026-07-05T17:21:19.246110Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.13208","last_updated":"2024-04-19T22:55:23Z","snapshot_observed_at":"2026-08-11T23:45:02.178667Z","submitted_at":"2024-04-19T22:55:23Z","title":"The Instruction Hierarchy: Training LLMs to Prioritize Privileged Instructions","version":1},"cited_work":{"arxiv_id":"2404.13208","doi":"10.48550/arxiv.2404.13208","metadata_source":"pith","pith_arxiv_id":"2404.13208","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"The Instruction Hierarchy: Training LLMs to Prioritize Privileged Instructions","venue":"cs.CR","work_id":"ba941a96-eb3b-48c0-b52c-5e9463085190","year":2024},"citing_paper":{"arxiv_id":"2605.12535","last_updated":"2026-07-01T09:34:06Z","snapshot_observed_at":"2026-08-14T15:06:19.446287Z","submitted_at":"2026-05-02T18:07:42Z","title":"Ghost in the Context: Policy-Carriage Integrity in LLM Agents","version":3},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-07-02T23:59:14.667099Z"},"links":{"cited_paper":"/paper/2404.13208","citing_paper":"/paper/2605.12535"},"observation_digest":"sha256:e6ac5fefc6a0b179e757fddcadee35e58804ca581abd91c14b5577febdc7f1ec","observation_id":"a67eb8ae-c90c-4e5f-964d-63f28c5b4d17","resolution":{"observed_at":"2026-07-03T00:07:27.487379Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.18653/v1/2025.acl-long.1227","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"25013–25030.doi:10.18653/v1/2025.acl-long.1227","venue":null,"work_id":"32a539b4-ab01-4f8a-b32d-7e6e7125ae74","year":2025},"citing_paper":{"arxiv_id":"2605.12535","last_updated":"2026-07-01T09:34:06Z","snapshot_observed_at":"2026-08-14T15:06:19.446287Z","submitted_at":"2026-05-02T18:07:42Z","title":"Ghost in the Context: Policy-Carriage Integrity in LLM Agents","version":3},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-07-02T23:59:14.667099Z"},"links":{"citing_paper":"/paper/2605.12535"},"observation_digest":"sha256:795669bcfd1d1a1195df88ba890c7ec572b7f45409e5b167cbb38a1e4b15c333","observation_id":"685e978d-44b4-4f4b-80d2-b7dd9015466e","resolution":{"observed_at":"2026-07-03T00:07:27.484554Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-05-25T11:24:34.26645+00:00","source":"crossref_status_cache"},{"observed_at":"2026-05-25T11:24:34.26645+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2305.16291","last_updated":"2023-10-19T16:27:03Z","snapshot_observed_at":"2026-08-13T16:55:46.498156Z","submitted_at":"2023-05-25T17:46:38Z","title":"Voyager: An Open-Ended Embodied Agent with Large Language Models","version":2},"cited_work":{"arxiv_id":"2305.16291","doi":"10.18653/v1/2023.emnlp-main.118","metadata_source":"pith","pith_arxiv_id":"2305.16291","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Voyager: An Open-Ended Embodied Agent with Large Language Models","venue":"cs.AI","work_id":"ffe0d207-86cf-4742-a100-e988ac8b9676","year":2023},"citing_paper":{"arxiv_id":"2605.12535","last_updated":"2026-07-01T09:34:06Z","snapshot_observed_at":"2026-08-14T15:06:19.446287Z","submitted_at":"2026-05-02T18:07:42Z","title":"Ghost in the Context: Policy-Carriage Integrity in LLM Agents","version":3},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-07-02T23:59:14.667099Z"},"links":{"cited_paper":"/paper/2305.16291","citing_paper":"/paper/2605.12535"},"observation_digest":"sha256:38c3280ad70f2e6bb060d55128e192d2712d9225dbf42dbfc3ccb7b92c286d2f","observation_id":"8dafd4ca-91d7-4004-bd99-257fe64c07ea","resolution":{"observed_at":"2026-07-03T00:07:27.501437Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-05T17:21:19.253829Z","title":null,"venue":null,"work_id":"5220c964-c64a-49c8-9d3b-33aaba95a215","year":null},"citing_paper":{"arxiv_id":"2605.12535","last_updated":"2026-07-01T09:34:06Z","snapshot_observed_at":"2026-08-14T15:06:19.446287Z","submitted_at":"2026-05-02T18:07:42Z","title":"Ghost in the Context: Policy-Carriage Integrity in LLM Agents","version":3},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-07-02T23:59:14.667099Z"},"links":{"citing_paper":"/paper/2605.12535"},"observation_digest":"sha256:e3f0c89e9b821b7394d2391e7b6b24cde8ce7c4ea4903e9c3a79f9b0705316cb","observation_id":"f0c164e8-5e02-4947-aeec-3d8c0a838b69","resolution":{"observed_at":"2026-07-05T17:21:19.255691Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2510.19207","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-04T06:59:37.761424Z","title":"https://doi.org/10","venue":null,"work_id":"0729225a-cf6c-457c-a346-15bc7e176227","year":2025},"citing_paper":{"arxiv_id":"2605.12535","last_updated":"2026-07-01T09:34:06Z","snapshot_observed_at":"2026-08-14T15:06:19.446287Z","submitted_at":"2026-05-02T18:07:42Z","title":"Ghost in the Context: Policy-Carriage Integrity in LLM Agents","version":3},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-07-02T23:59:14.667099Z"},"links":{"citing_paper":"/paper/2605.12535"},"observation_digest":"sha256:91694be3f34af72cea429ecc12aaac8fefa977f6fc5aacb64809a7cefaa2fc85","observation_id":"2c01dad6-00bc-4f4b-85ad-4e4ce156c94f","resolution":{"observed_at":"2026-07-03T00:07:27.599564Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2603.04257","doi":"10.48550/arxiv.2603.04257","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Memex (rl): Scaling long-horizon llm agents via indexed experience memory","venue":"Open MIND","work_id":"e3f84b16-ec89-47b3-9227-be9a2d291a04","year":2026},"citing_paper":{"arxiv_id":"2605.12535","last_updated":"2026-07-01T09:34:06Z","snapshot_observed_at":"2026-08-14T15:06:19.446287Z","submitted_at":"2026-05-02T18:07:42Z","title":"Ghost in the Context: Policy-Carriage Integrity in LLM Agents","version":3},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-07-02T23:59:14.667099Z"},"links":{"citing_paper":"/paper/2605.12535"},"observation_digest":"sha256:4f775d78b4dc251fc5b2b7d64b1e65ae3b7df8dcc949e4520180ae86cfbbc325","observation_id":"565f07ef-bc45-47e3-8908-c0d411c54af9","resolution":{"observed_at":"2026-07-03T00:07:27.478356Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2510.02373","doi":"10.48550/arxiv.2510.02373","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2510.02373 , year=","venue":"ArXiv.org","work_id":"a37f331d-64f2-4356-b52b-3c8131797f0f","year":2025},"citing_paper":{"arxiv_id":"2605.12535","last_updated":"2026-07-01T09:34:06Z","snapshot_observed_at":"2026-08-14T15:06:19.446287Z","submitted_at":"2026-05-02T18:07:42Z","title":"Ghost in the Context: Policy-Carriage Integrity in LLM Agents","version":3},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-07-02T23:59:14.667099Z"},"links":{"citing_paper":"/paper/2605.12535"},"observation_digest":"sha256:52448ee73bd925549a5d42ad295c438d9242ba9298b743da8e3184442512d781","observation_id":"9be30744-94c1-4431-a835-aaee4c7d0d65","resolution":{"observed_at":"2026-07-03T00:07:27.498973Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2602.07398","doi":"10.48550/arxiv.2602.07398","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Agentsys: Secure and dynamic llm agents through explicit hierarchical memory management","venue":"Open MIND","work_id":"b2a07171-df6e-496e-a883-60d2bd0f4dad","year":2026},"citing_paper":{"arxiv_id":"2605.12535","last_updated":"2026-07-01T09:34:06Z","snapshot_observed_at":"2026-08-14T15:06:19.446287Z","submitted_at":"2026-05-02T18:07:42Z","title":"Ghost in the Context: Policy-Carriage Integrity in LLM Agents","version":3},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-07-02T23:59:14.667099Z"},"links":{"citing_paper":"/paper/2605.12535"},"observation_digest":"sha256:4d7402b9aa25bfb27fc9675da60b11641f9a9caa0382783d847ea5ba7659d604","observation_id":"70378042-d51b-463e-95e2-0c44949a683e","resolution":{"observed_at":"2026-07-03T00:07:27.492412Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-07T08:03:30.485300Z","title":null,"venue":null,"work_id":"c2087dba-bb98-4adf-a94c-9b313f872598","year":null},"citing_paper":{"arxiv_id":"2605.12535","last_updated":"2026-07-01T09:34:06Z","snapshot_observed_at":"2026-08-14T15:06:19.446287Z","submitted_at":"2026-05-02T18:07:42Z","title":"Ghost in the Context: Policy-Carriage Integrity in LLM Agents","version":3},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-07-02T23:59:14.667099Z"},"links":{"citing_paper":"/paper/2605.12535"},"observation_digest":"sha256:15b8e4383ae8a2a109ffe9279749cb3df06c262e51232cedbac5d5d676270edf","observation_id":"bf2692c8-cf85-4775-953d-95502f8c5b69","resolution":{"observed_at":"2026-07-05T17:21:19.275424Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-05T17:21:19.276789Z","title":"InThe Twelfth International Conference on Learning Representations","venue":null,"work_id":"56a126c4-f08c-4a44-bcdf-5f26d70f5947","year":2024},"citing_paper":{"arxiv_id":"2605.12535","last_updated":"2026-07-01T09:34:06Z","snapshot_observed_at":"2026-08-14T15:06:19.446287Z","submitted_at":"2026-05-02T18:07:42Z","title":"Ghost in the Context: Policy-Carriage Integrity in LLM Agents","version":3},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-07-02T23:59:14.667099Z"},"links":{"citing_paper":"/paper/2605.12535"},"observation_digest":"sha256:d870d049bf2f96d0eae7d29ba099eb72a14c599b9276049fb888dd67306b8465","observation_id":"446e03a8-27fe-4a0b-862d-f9ff7e60bc22","resolution":{"observed_at":"2026-07-05T17:21:19.279151Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2602.15654","doi":"10.48550/arxiv.2602.15654","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Zombie agents: Persistent control of self-evolving llm agents via self-reinforcing injections","venue":"Open MIND","work_id":"f54a401d-0346-4ca5-b2e1-7498a5d77e8c","year":2026},"citing_paper":{"arxiv_id":"2605.12535","last_updated":"2026-07-01T09:34:06Z","snapshot_observed_at":"2026-08-14T15:06:19.446287Z","submitted_at":"2026-05-02T18:07:42Z","title":"Ghost in the Context: Policy-Carriage Integrity in LLM Agents","version":3},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-07-02T23:59:14.667099Z"},"links":{"citing_paper":"/paper/2605.12535"},"observation_digest":"sha256:71fe9c325d7a1c77f3b77d19c638833ccef28519714ea84ab9e0c481bf390b89","observation_id":"565a2f2f-3b59-4d89-8b62-a0bba623045f","resolution":{"observed_at":"2026-07-03T00:07:27.501922Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-05T17:21:19.241633Z","title":"Narasimhan, and Yuan Cao","venue":null,"work_id":"88ab2d43-a3b3-4bb8-85e0-e2c9ca8e3d9a","year":2023},"citing_paper":{"arxiv_id":"2605.12535","last_updated":"2026-07-01T09:34:06Z","snapshot_observed_at":"2026-08-14T15:06:19.446287Z","submitted_at":"2026-05-02T18:07:42Z","title":"Ghost in the Context: Policy-Carriage Integrity in LLM Agents","version":3},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-07-02T23:59:14.667099Z"},"links":{"citing_paper":"/paper/2605.12535"},"observation_digest":"sha256:9de7f9e73f8b209e2956854d9c0a7d70dda6295034190bc5c2900aca9489c831","observation_id":"e2d7dcca-44e4-43dd-8a0f-3ef8472bebdd","resolution":{"observed_at":"2026-07-05T17:21:19.243202Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"0624.370917","doi":"10.1145/3690624.3709171","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Proceedings of the 31st ACM SIGKDD Conference on Knowledge Discovery and Data Mining V.1 , pages =","venue":null,"work_id":"70d41772-c3cc-43c9-9c0c-df56285f9e0b","year":2025},"citing_paper":{"arxiv_id":"2605.12535","last_updated":"2026-07-01T09:34:06Z","snapshot_observed_at":"2026-08-14T15:06:19.446287Z","submitted_at":"2026-05-02T18:07:42Z","title":"Ghost in the Context: Policy-Carriage Integrity in LLM Agents","version":3},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-07-02T23:59:14.667099Z"},"links":{"citing_paper":"/paper/2605.12535"},"observation_digest":"sha256:9073074f8b0e742ae968a00bb976bc094e1b645999d9ab6c4f5485b892f0c922","observation_id":"d63965dd-a88a-446f-b962-7638c169a134","resolution":{"observed_at":"2026-07-03T00:07:27.458461Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-05T17:21:19.280125Z","title":null,"venue":null,"work_id":"87b3367f-9b41-4ba6-8235-02569f9aabe4","year":2025},"citing_paper":{"arxiv_id":"2605.12535","last_updated":"2026-07-01T09:34:06Z","snapshot_observed_at":"2026-08-14T15:06:19.446287Z","submitted_at":"2026-05-02T18:07:42Z","title":"Ghost in the Context: Policy-Carriage Integrity in LLM Agents","version":3},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-07-02T23:59:14.667099Z"},"links":{"citing_paper":"/paper/2605.12535"},"observation_digest":"sha256:7e07fe222c075a3fbb0c4b38e0bd227a1444f97e6ff56a472e0fc37700e8b6bd","observation_id":"360aa981-d479-4b43-8362-147b06c008f3","resolution":{"observed_at":"2026-07-05T17:21:19.282271Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-05T17:21:19.236086Z","title":null,"venue":null,"work_id":"7151e781-4f50-4a52-896e-4d91a6fff23c","year":2024},"citing_paper":{"arxiv_id":"2605.12535","last_updated":"2026-07-01T09:34:06Z","snapshot_observed_at":"2026-08-14T15:06:19.446287Z","submitted_at":"2026-05-02T18:07:42Z","title":"Ghost in the Context: Policy-Carriage Integrity in LLM Agents","version":3},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-07-02T23:59:14.667099Z"},"links":{"citing_paper":"/paper/2605.12535"},"observation_digest":"sha256:aab4e1bf1e3f979924d7e84a9595987b1df652a1d6c04c8d19d63abe90f2f4e6","observation_id":"ee57cef9-99dc-48b3-8be0-a39bac3d5bd8","resolution":{"observed_at":"2026-07-05T17:21:19.238123Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.18653/v1/2024.findings-acl.624","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-03T00:07:27.497937Z","title":"2024 , address =","venue":"Findings of the Association for Computational Linguistics ACL 2024","work_id":"31ff5463-bfee-4ce3-9d67-bd663318c94c","year":2024},"citing_paper":{"arxiv_id":"2605.12535","last_updated":"2026-07-01T09:34:06Z","snapshot_observed_at":"2026-08-14T15:06:19.446287Z","submitted_at":"2026-05-02T18:07:42Z","title":"Ghost in the Context: Policy-Carriage Integrity in LLM Agents","version":3},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-07-02T23:59:14.667099Z"},"links":{"citing_paper":"/paper/2605.12535"},"observation_digest":"sha256:6a1fb046efc3a11d5fa537a43c818364805be5f38bcc5b9750448ce22041557e","observation_id":"3ff2b0ae-ebdf-4162-bd5b-c38bfc233cd8","resolution":{"observed_at":"2026-07-03T00:07:27.499163Z","resolver_source":"doi","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-13T19:08:32.667474+00:00","source":"crossref_status_cache"},{"observed_at":"2026-08-13T19:08:32.667474+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2603.04549","doi":"10.48550/arxiv.2603.04549","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Amac: Interpretable admission control for agentic memory systems","venue":"Open MIND","work_id":"aa0c0ec6-c57f-402d-bb06-3dada2a4abcc","year":2026},"citing_paper":{"arxiv_id":"2605.12535","last_updated":"2026-07-01T09:34:06Z","snapshot_observed_at":"2026-08-14T15:06:19.446287Z","submitted_at":"2026-05-02T18:07:42Z","title":"Ghost in the Context: Policy-Carriage Integrity in LLM Agents","version":3},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-07-02T23:59:14.667099Z"},"links":{"citing_paper":"/paper/2605.12535"},"observation_digest":"sha256:043c203c5f9ff84a8d2bcd04f18320fbb5cd90d3a12e81f13a776d69177b31c1","observation_id":"0e97ddfe-4983-44ad-8245-6c14a87efaf1","resolution":{"observed_at":"2026-07-03T00:07:27.508612Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-05T17:21:19.239090Z","title":null,"venue":null,"work_id":"c77e010b-5932-4d24-9759-9decd9ac5617","year":2025},"citing_paper":{"arxiv_id":"2605.12535","last_updated":"2026-07-01T09:34:06Z","snapshot_observed_at":"2026-08-14T15:06:19.446287Z","submitted_at":"2026-05-02T18:07:42Z","title":"Ghost in the Context: Policy-Carriage Integrity in LLM Agents","version":3},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-07-02T23:59:14.667099Z"},"links":{"citing_paper":"/paper/2605.12535"},"observation_digest":"sha256:76c8490a6c36246e1da5f45a89c1fc966934549f6548a49b4b5750bd7a927e96","observation_id":"dd7eec08-af04-4caa-8eff-20931203f99a","resolution":{"observed_at":"2026-07-05T17:21:19.240785Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"cited_work":{"arxiv_id":"2505.24019","doi":"10.48550/arxiv.2505.24019","metadata_source":"arxiv_reference","pith_arxiv_id":"2505.24019","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Zhang, Z","venue":"ArXiv.org","work_id":"7748a50c-4eb9-4799-8ccc-bb3875ff148b","year":2025},"citing_paper":{"arxiv_id":"2605.12535","last_updated":"2026-07-01T09:34:06Z","snapshot_observed_at":"2026-08-14T15:06:19.446287Z","submitted_at":"2026-05-02T18:07:42Z","title":"Ghost in the Context: Policy-Carriage Integrity in LLM Agents","version":3},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-07-02T23:59:14.667099Z"},"links":{"cited_paper":"/paper/2505.24019","citing_paper":"/paper/2605.12535"},"observation_digest":"sha256:0e66dca4678c6d2967ce9beada543253bdd4dd30cdf71e7de29f31fd042feaa7","observation_id":"0d2ef391-5e3f-409c-b30e-6059138001f7","resolution":{"observed_at":"2026-07-03T00:07:27.596565Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2510.12635","last_updated":"2026-05-07T13:18:53Z","snapshot_observed_at":"2026-08-06T02:47:17.802553Z","submitted_at":"2025-10-14T15:29:57Z","title":"Memory as Action: Autonomous Context Curation for Long-Horizon Agentic Tasks","version":3},"cited_work":{"arxiv_id":"2510.12635","doi":"10.48550/arxiv.2510.12635","metadata_source":"pith","pith_arxiv_id":"2510.12635","snapshot_observed_at":"2026-08-05T02:49:54.815029Z","title":"Memory as Action: Autonomous Context Curation for Long-Horizon Agentic Tasks","venue":"cs.AI","work_id":"57bb3f0f-e008-4d33-8865-9bfe73922e73","year":2025},"citing_paper":{"arxiv_id":"2605.12535","last_updated":"2026-07-01T09:34:06Z","snapshot_observed_at":"2026-08-14T15:06:19.446287Z","submitted_at":"2026-05-02T18:07:42Z","title":"Ghost in the Context: Policy-Carriage Integrity in LLM Agents","version":3},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-07-02T23:59:14.667099Z"},"links":{"cited_paper":"/paper/2510.12635","citing_paper":"/paper/2605.12535"},"observation_digest":"sha256:a44c8c83abca5b185a3417efeb68e49ba0f2bdc2dde75a5c45fae990c4968e5e","observation_id":"6c95f7b1-a6a6-41f4-a487-7c1e92521e0a","resolution":{"observed_at":"2026-07-03T00:07:27.464150Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2605.12535","last_updated":"2026-07-01T09:34:06Z","latest_version":3,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-14T15:06:19.446287Z","submitted_at":"2026-05-02T18:07:42Z","title":"Ghost in the Context: Policy-Carriage Integrity in LLM Agents"},"reference_resolution":{"displayed":44,"state_counts":{"malformed_identifier":2,"metadata_mismatch":4,"parse_uncertain":0,"unresolved":12,"verified_exact":22,"verified_fuzzy":4},"total_outbound_references":44},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"thesis":"As of 14 August 2026, this Paper Citation Record lists 44 of 44 outbound references and 2 inbound Pith citation observations for arXiv:2605.12535."}