{"as_of":"2026-08-19T09:12:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:1ce874226880caab8bea5580a898c2f8ac61e97cc244109a59b831d70cc2be70","coverage":[{"denominator":27,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":27,"source":"paper_references, paper_reference_links","source_observed_at":"2026-05-22T08:57:29.491043Z","state":"measured"},{"denominator":29,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":29,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-19T06:32:44.657259+00:00","state":"measured"},{"denominator":2,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":2,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-02T08:47:00.150429Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2605.19192","last_updated":"2026-05-20T21:49:08Z","snapshot_observed_at":"2026-08-03T06:06:31.296336Z","submitted_at":"2026-05-18T23:40:43Z","title":"Hallucination as Exploit: Evidence-Carrying Multimodal Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2605.19192","snapshot_observed_at":"2026-07-11T20:00:19.123214Z","title":"Zheng, B.; Gou, B.; Kil, J.; Sun, H.; and Su, Y","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.04334","last_updated":"2026-07-18T16:56:38Z","snapshot_observed_at":"2026-08-13T02:45:23.171486Z","submitted_at":"2026-07-05T14:33:29Z","title":"Do GUI Agents Believe Their Eyes? Diagnosing State-Belief Reliance on Pixels versus Structure","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-07-11T20:00:19.123214Z"},"links":{"cited_paper":"/paper/2605.19192","citing_paper":"/paper/2607.04334"},"observation_digest":"sha256:cb4f516b3892a6f706da941b40b5dc5f80444d960188426121df3e22bcd48d2a","observation_id":"8fb221eb-f7ef-43c0-a963-2f526e4a329e","resolution":{"observed_at":"2026-07-11T20:00:19.123214Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2605.19192","last_updated":"2026-05-20T21:49:08Z","snapshot_observed_at":"2026-08-03T06:06:31.296336Z","submitted_at":"2026-05-18T23:40:43Z","title":"Hallucination as Exploit: Evidence-Carrying Multimodal Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2605.19192","snapshot_observed_at":"2026-08-02T08:47:00.150429Z","title":"Zheng, B.; Gou, B.; Kil, J.; Sun, H.; and Su, Y","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.04334","last_updated":"2026-07-18T16:56:38Z","snapshot_observed_at":"2026-08-13T02:45:23.171486Z","submitted_at":"2026-07-05T14:33:29Z","title":"Do GUI Agents Believe Their Eyes? Diagnosing State-Belief Reliance on Pixels versus Structure","version":2},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-02T08:47:00.150429Z"},"links":{"cited_paper":"/paper/2605.19192","citing_paper":"/paper/2607.04334"},"observation_digest":"sha256:2c4a0114e8c6656ae5b9b85a0f4a2e4ec186b1415a42382d72af3dc881a11315","observation_id":"2028c1b9-7883-4914-b5a4-9d0cea7808d9","resolution":{"observed_at":"2026-08-02T08:47:00.150429Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2605.19192/citation-record","integrity":"/paper/2605.19192/integrity","json":"/paper/2605.19192/citation-record.json","paper":"/paper/2605.19192"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Proceedings of the 2018 Conference on Empirical Methods in Natural Language Processing , year =","venue":null,"work_id":"bc4500ca-234b-4cdc-a1fd-cfd07336bb16","year":2018},"citing_paper":{"arxiv_id":"2605.19192","last_updated":"2026-05-20T21:49:08Z","snapshot_observed_at":"2026-08-03T06:06:31.296336Z","submitted_at":"2026-05-18T23:40:43Z","title":"Hallucination as Exploit: Evidence-Carrying Multimodal Agents","version":2},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-05-22T08:57:29.491043Z"},"links":{"citing_paper":"/paper/2605.19192"},"observation_digest":"sha256:ae2cbcd85d18f2cd11708188e7efa21e8a25fa1b6a3baa158a636ea8ce9f38b6","observation_id":"b8597c6b-39b5-488e-850b-b3bb1698d3d1","resolution":{"observed_at":"2026-05-22T09:01:21.529353Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2305.10355","last_updated":"2023-10-26T02:52:40Z","snapshot_observed_at":"2026-08-12T18:48:30.326248Z","submitted_at":"2023-05-17T16:34:01Z","title":"Evaluating Object Hallucination in Large Vision-Language Models","version":3},"cited_work":{"arxiv_id":"2305.10355","doi":null,"metadata_source":"pith","pith_arxiv_id":"2305.10355","snapshot_observed_at":"2026-07-10T11:37:03.198858Z","title":"Evaluating Object Hallucination in Large Vision-Language Models","venue":"cs.CV","work_id":"66d8ac3e-c134-4995-b528-550afa17586f","year":2023},"citing_paper":{"arxiv_id":"2605.19192","last_updated":"2026-05-20T21:49:08Z","snapshot_observed_at":"2026-08-03T06:06:31.296336Z","submitted_at":"2026-05-18T23:40:43Z","title":"Hallucination as Exploit: Evidence-Carrying Multimodal Agents","version":2},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-05-22T08:57:29.491043Z"},"links":{"cited_paper":"/paper/2305.10355","citing_paper":"/paper/2605.19192"},"observation_digest":"sha256:2587f056ae2b8491e4f3ac5bf57f71f609a4654e3af521371ed8598ee507b860","observation_id":"88601407-b67f-466b-939d-945c3a6c4bfc","resolution":{"observed_at":"2026-05-22T09:01:20.102941Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"2024 , eprint =","venue":null,"work_id":"154c297b-77a2-46d9-b8d2-fbde56d1af42","year":2024},"citing_paper":{"arxiv_id":"2605.19192","last_updated":"2026-05-20T21:49:08Z","snapshot_observed_at":"2026-08-03T06:06:31.296336Z","submitted_at":"2026-05-18T23:40:43Z","title":"Hallucination as Exploit: Evidence-Carrying Multimodal Agents","version":2},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-05-22T08:57:29.491043Z"},"links":{"citing_paper":"/paper/2605.19192"},"observation_digest":"sha256:84f85a328a5d78ba7870326a0c1e7e731de172e2829ff3d385783755f0043aa7","observation_id":"2b397e4f-7475-4a41-aae4-da758462c081","resolution":{"observed_at":"2026-05-22T09:01:21.524099Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.21523","last_updated":"2025-06-20T08:41:41Z","snapshot_observed_at":"2026-08-17T22:18:12.395195Z","submitted_at":"2025-05-23T05:08:40Z","title":"More Thinking, Less Seeing? Assessing Amplified Hallucination in Multimodal Reasoning Models","version":3},"cited_work":{"arxiv_id":"2505.21523","doi":"10.48550/arxiv.2505.21523","metadata_source":"pith","pith_arxiv_id":"2505.21523","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Advances in Neural Information Processing Systems , year =","venue":"cs.CL","work_id":"bb9acd95-b27a-4709-9dfa-75f62a65c716","year":2025},"citing_paper":{"arxiv_id":"2605.19192","last_updated":"2026-05-20T21:49:08Z","snapshot_observed_at":"2026-08-03T06:06:31.296336Z","submitted_at":"2026-05-18T23:40:43Z","title":"Hallucination as Exploit: Evidence-Carrying Multimodal Agents","version":2},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-05-22T08:57:29.491043Z"},"links":{"cited_paper":"/paper/2505.21523","citing_paper":"/paper/2605.19192"},"observation_digest":"sha256:0c6d48e4c88944d5c9f7ace98bb10171daefdc99b24f33219470f5f608d484ea","observation_id":"1cc36f95-db99-4279-8ee8-bcc5fe0800ed","resolution":{"observed_at":"2026-05-22T09:01:20.093989Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"ddff6e67-7809-4b7e-84af-5980d6eb63b6","year":null},"citing_paper":{"arxiv_id":"2605.19192","last_updated":"2026-05-20T21:49:08Z","snapshot_observed_at":"2026-08-03T06:06:31.296336Z","submitted_at":"2026-05-18T23:40:43Z","title":"Hallucination as Exploit: Evidence-Carrying Multimodal Agents","version":2},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-05-22T08:57:29.491043Z"},"links":{"citing_paper":"/paper/2605.19192"},"observation_digest":"sha256:4858c1476faf5a3f9f9cf70488bf9cf0daed2801d1c6df548701ddb56f53d5d4","observation_id":"457315fe-e4d2-43f4-948f-9cd069114922","resolution":{"observed_at":"2026-05-22T09:01:21.540139Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"2022 , eprint =","venue":null,"work_id":"4e2c8b31-c978-4101-8cca-dc7f421ca668","year":2022},"citing_paper":{"arxiv_id":"2605.19192","last_updated":"2026-05-20T21:49:08Z","snapshot_observed_at":"2026-08-03T06:06:31.296336Z","submitted_at":"2026-05-18T23:40:43Z","title":"Hallucination as Exploit: Evidence-Carrying Multimodal Agents","version":2},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-05-22T08:57:29.491043Z"},"links":{"citing_paper":"/paper/2605.19192"},"observation_digest":"sha256:0ffa0746e5d690518121cd364685d28f3fce91040c692457d3b562c32787ba0f","observation_id":"c1e9586f-6054-4bec-8384-605469d7052c","resolution":{"observed_at":"2026-05-22T09:01:21.532777Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2302.12173","last_updated":"2023-05-05T14:26:17Z","snapshot_observed_at":"2026-08-12T14:45:22.117576Z","submitted_at":"2023-02-23T17:14:38Z","title":"Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection","version":2},"cited_work":{"arxiv_id":"2302.12173","doi":"10.1109/sp61157.2025.00250","metadata_source":"pith","pith_arxiv_id":"2302.12173","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection","venue":"cs.CR","work_id":"7a8cfce1-ada7-4a7a-8516-6f16b1bd077b","year":2023},"citing_paper":{"arxiv_id":"2605.19192","last_updated":"2026-05-20T21:49:08Z","snapshot_observed_at":"2026-08-03T06:06:31.296336Z","submitted_at":"2026-05-18T23:40:43Z","title":"Hallucination as Exploit: Evidence-Carrying Multimodal Agents","version":2},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-05-22T08:57:29.491043Z"},"links":{"cited_paper":"/paper/2302.12173","citing_paper":"/paper/2605.19192"},"observation_digest":"sha256:a2e73eaec8f36d12c2c03cf604fd70d76bf63d8217321c68932c06e8602d8c24","observation_id":"bd7ba131-d70b-4576-bd2a-dbef38c8cd13","resolution":{"observed_at":"2026-05-22T09:01:20.118099Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.10490","last_updated":"2023-10-03T17:03:10Z","snapshot_observed_at":"2026-08-18T14:40:01.977512Z","submitted_at":"2023-07-19T23:03:20Z","title":"Abusing Images and Sounds for Indirect Instruction Injection in Multi-Modal LLMs","version":4},"cited_work":{"arxiv_id":"2307.10490","doi":"10.48550/arxiv.2307.10490","metadata_source":"arxiv_reference","pith_arxiv_id":"2307.10490","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"(ab) using images and sounds for indirect instruction injection in multi-modal llms","venue":"arXiv (Cornell University)","work_id":"cbf07be0-59b9-485c-a352-3971f60f3d56","year":2023},"citing_paper":{"arxiv_id":"2605.19192","last_updated":"2026-05-20T21:49:08Z","snapshot_observed_at":"2026-08-03T06:06:31.296336Z","submitted_at":"2026-05-18T23:40:43Z","title":"Hallucination as Exploit: Evidence-Carrying Multimodal Agents","version":2},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-05-22T08:57:29.491043Z"},"links":{"cited_paper":"/paper/2307.10490","citing_paper":"/paper/2605.19192"},"observation_digest":"sha256:bc66445947c590623ac86cf3a89b534b5d0609e054c092a964c9625623d60033","observation_id":"37c91339-e6ee-4f0d-a953-64b7410774ae","resolution":{"observed_at":"2026-05-22T09:01:19.902347Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Advances in Neural Information Processing Systems , volume =","venue":null,"work_id":"42e367b8-e430-4b49-aefe-01668960122b","year":null},"citing_paper":{"arxiv_id":"2605.19192","last_updated":"2026-05-20T21:49:08Z","snapshot_observed_at":"2026-08-03T06:06:31.296336Z","submitted_at":"2026-05-18T23:40:43Z","title":"Hallucination as Exploit: Evidence-Carrying Multimodal Agents","version":2},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-05-22T08:57:29.491043Z"},"links":{"citing_paper":"/paper/2605.19192"},"observation_digest":"sha256:d5726c314b0e2ab505e669544d6c6710ef7c6e9cc0ba79a17084720a8ca3d915","observation_id":"171bcf0e-b563-4282-aa1a-a7237964b3d9","resolution":{"observed_at":"2026-05-22T09:01:21.512776Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"2025 , publisher =","venue":null,"work_id":"ea4d252b-81d2-43d6-a78a-eecd2132d435","year":2025},"citing_paper":{"arxiv_id":"2605.19192","last_updated":"2026-05-20T21:49:08Z","snapshot_observed_at":"2026-08-03T06:06:31.296336Z","submitted_at":"2026-05-18T23:40:43Z","title":"Hallucination as Exploit: Evidence-Carrying Multimodal Agents","version":2},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-05-22T08:57:29.491043Z"},"links":{"citing_paper":"/paper/2605.19192"},"observation_digest":"sha256:7ab499903c136cd511cb3f5d437834b8bf91bc7a123c62630e57f3b8fe50abff","observation_id":"0074eb02-8e89-4ceb-81d6-37bbaa9f4e12","resolution":{"observed_at":"2026-05-22T09:01:21.500187Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2602.03117","last_updated":"2026-05-07T07:42:14Z","snapshot_observed_at":"2026-08-11T14:17:58.581691Z","submitted_at":"2026-02-03T05:20:42Z","title":"AgentDyn: Are Your Agent Security Defenses Deployable in Real-World Dynamic Environments?","version":3},"cited_work":{"arxiv_id":"2602.03117","doi":"10.48550/arxiv.2602.03117","metadata_source":"pith","pith_arxiv_id":"2602.03117","snapshot_observed_at":"2026-08-05T02:49:54.815029Z","title":"AgentDyn: Are Your Agent Security Defenses Deployable in Real-World Dynamic Environments?","venue":"cs.CR","work_id":"5164f177-b5ab-4d9c-ac93-125e92bf1f5a","year":2026},"citing_paper":{"arxiv_id":"2605.19192","last_updated":"2026-05-20T21:49:08Z","snapshot_observed_at":"2026-08-03T06:06:31.296336Z","submitted_at":"2026-05-18T23:40:43Z","title":"Hallucination as Exploit: Evidence-Carrying Multimodal Agents","version":2},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-05-22T08:57:29.491043Z"},"links":{"cited_paper":"/paper/2602.03117","citing_paper":"/paper/2605.19192"},"observation_digest":"sha256:23e21e45ee7bd8136715c38c4c87e1515d1549a8c971a0d0fee03f86cf082ac2","observation_id":"c1960355-4151-451c-9934-ab37d5d17a7e","resolution":{"observed_at":"2026-05-22T09:01:20.124476Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-07-15T19:20:23.920036+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-15T19:20:23.920036+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"2026 , eprint =","venue":null,"work_id":"4fb900b3-9526-48b4-9e5d-6241fb3124f2","year":2026},"citing_paper":{"arxiv_id":"2605.19192","last_updated":"2026-05-20T21:49:08Z","snapshot_observed_at":"2026-08-03T06:06:31.296336Z","submitted_at":"2026-05-18T23:40:43Z","title":"Hallucination as Exploit: Evidence-Carrying Multimodal Agents","version":2},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-05-22T08:57:29.491043Z"},"links":{"citing_paper":"/paper/2605.19192"},"observation_digest":"sha256:42c86bdb3e48f28f5fab8862457999e5b667587643c471186f9b4b7ac7fb4db0","observation_id":"98cfa3e5-42b9-4433-8cf3-26e2188d0f20","resolution":{"observed_at":"2026-05-22T09:01:21.505309Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.05849","last_updated":"2025-06-14T01:50:21Z","snapshot_observed_at":"2026-08-15T22:52:03.352499Z","submitted_at":"2025-05-09T07:40:17Z","title":"AgentVigil: Generic Black-Box Red-teaming for Indirect Prompt Injection against LLM Agents","version":4},"cited_work":{"arxiv_id":"2505.05849","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.05849","snapshot_observed_at":"2026-07-04T10:09:45.177863Z","title":"Agentvigil: Generic black-box red- teaming for indirect prompt injection against llm agents","venue":null,"work_id":"78036d3e-3022-41fc-a844-76366394ab0d","year":2025},"citing_paper":{"arxiv_id":"2605.19192","last_updated":"2026-05-20T21:49:08Z","snapshot_observed_at":"2026-08-03T06:06:31.296336Z","submitted_at":"2026-05-18T23:40:43Z","title":"Hallucination as Exploit: Evidence-Carrying Multimodal Agents","version":2},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-05-22T08:57:29.491043Z"},"links":{"cited_paper":"/paper/2505.05849","citing_paper":"/paper/2605.19192"},"observation_digest":"sha256:86bbb319df38d877b7a38abdca17552d1505133aae9f3eef4d5a7ef09460bafd","observation_id":"d44f66e0-cfef-4cdc-b84b-b769a5bd773c","resolution":{"observed_at":"2026-05-22T09:01:19.894756Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.14197","last_updated":"2025-01-27T08:51:16Z","snapshot_observed_at":"2026-08-16T18:17:43.393858Z","submitted_at":"2023-12-21T01:08:39Z","title":"Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models","version":4},"cited_work":{"arxiv_id":"2312.14197","doi":"10.48550/arxiv.2312.14197","metadata_source":"arxiv_reference","pith_arxiv_id":"2312.14197","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Benchmarking and defending against indirect prompt injection attacks on large language models","venue":"arXiv (Cornell University)","work_id":"0a458c42-fb17-4655-82ad-c93057550c76","year":2025},"citing_paper":{"arxiv_id":"2605.19192","last_updated":"2026-05-20T21:49:08Z","snapshot_observed_at":"2026-08-03T06:06:31.296336Z","submitted_at":"2026-05-18T23:40:43Z","title":"Hallucination as Exploit: Evidence-Carrying Multimodal Agents","version":2},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-05-22T08:57:29.491043Z"},"links":{"cited_paper":"/paper/2312.14197","citing_paper":"/paper/2605.19192"},"observation_digest":"sha256:6a791f0e24c66bd1b8776e760787e7ded96aeceaf404e026c0fc541172909ed4","observation_id":"9ba8124f-19fb-4857-8068-ac007779b074","resolution":{"observed_at":"2026-05-22T09:01:20.110761Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.09956","last_updated":"2025-06-11T17:30:07Z","snapshot_observed_at":"2026-08-16T05:05:43.573600Z","submitted_at":"2025-06-11T17:30:07Z","title":"LLMail-Inject: A Dataset from a Realistic Adaptive Prompt Injection Challenge","version":1},"cited_work":{"arxiv_id":"2506.09956","doi":"10.48550/arxiv.2506.09956","metadata_source":"arxiv_reference","pith_arxiv_id":"2506.09956","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"2506.09956 , archivePrefix =","venue":"ArXiv.org","work_id":"bf53cb61-0d90-4b91-b30d-e0a378587ee6","year":2025},"citing_paper":{"arxiv_id":"2605.19192","last_updated":"2026-05-20T21:49:08Z","snapshot_observed_at":"2026-08-03T06:06:31.296336Z","submitted_at":"2026-05-18T23:40:43Z","title":"Hallucination as Exploit: Evidence-Carrying Multimodal Agents","version":2},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-05-22T08:57:29.491043Z"},"links":{"cited_paper":"/paper/2506.09956","citing_paper":"/paper/2605.19192"},"observation_digest":"sha256:0ead3205a9b4f89565c5a931cd5e0a0ca3bd51279b8a78fd59da91b88ed75d23","observation_id":"a7576c63-1302-44cd-af45-633819c47b1d","resolution":{"observed_at":"2026-05-22T09:01:20.082441Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Design Patterns for Securing","venue":null,"work_id":"6d8c4553-ecff-42bf-a3d6-652299aca800","year":2025},"citing_paper":{"arxiv_id":"2605.19192","last_updated":"2026-05-20T21:49:08Z","snapshot_observed_at":"2026-08-03T06:06:31.296336Z","submitted_at":"2026-05-18T23:40:43Z","title":"Hallucination as Exploit: Evidence-Carrying Multimodal Agents","version":2},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-05-22T08:57:29.491043Z"},"links":{"citing_paper":"/paper/2605.19192"},"observation_digest":"sha256:654c47ed57a91e6b93b60c6420bf6bbd8406510d53198f36db6370ce91ffb516","observation_id":"de08f1cb-29b5-448e-aaeb-09ed71098df5","resolution":{"observed_at":"2026-05-22T09:01:21.494738Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T08:16:59.496558Z","title":"Securing","venue":null,"work_id":"acb5760d-8308-467a-aed9-b6823436588e","year":2025},"citing_paper":{"arxiv_id":"2605.19192","last_updated":"2026-05-20T21:49:08Z","snapshot_observed_at":"2026-08-03T06:06:31.296336Z","submitted_at":"2026-05-18T23:40:43Z","title":"Hallucination as Exploit: Evidence-Carrying Multimodal Agents","version":2},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-05-22T08:57:29.491043Z"},"links":{"citing_paper":"/paper/2605.19192"},"observation_digest":"sha256:15092281139de4077bb54f126d89d5d603c1626fe5a59ee44cd4ff259095221d","observation_id":"6c43b361-a0cc-4a62-a990-714dc34d3efd","resolution":{"observed_at":"2026-05-22T09:01:21.517567Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T08:16:59.494951Z","title":"2025 , eprint =","venue":null,"work_id":"10204f9e-2e4d-42b9-b778-55c3b0e441a7","year":2025},"citing_paper":{"arxiv_id":"2605.19192","last_updated":"2026-05-20T21:49:08Z","snapshot_observed_at":"2026-08-03T06:06:31.296336Z","submitted_at":"2026-05-18T23:40:43Z","title":"Hallucination as Exploit: Evidence-Carrying Multimodal Agents","version":2},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-05-22T08:57:29.491043Z"},"links":{"citing_paper":"/paper/2605.19192"},"observation_digest":"sha256:6e4aa2b583b70e0b94c77c32426bb711f42f78b5e46edae53e03e5851533cc1b","observation_id":"1224bfce-295a-4d25-8b1f-4281c615ec10","resolution":{"observed_at":"2026-05-22T09:01:21.536633Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.11703","last_updated":"2026-05-14T02:36:38Z","snapshot_observed_at":"2026-08-17T13:35:14.591010Z","submitted_at":"2025-04-16T01:58:40Z","title":"Progent: Securing AI Agents with Privilege Control","version":3},"cited_work":{"arxiv_id":"2504.11703","doi":"10.48550/arxiv.2504.11703","metadata_source":"pith","pith_arxiv_id":"2504.11703","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Progent: Securing AI Agents with Privilege Control","venue":"cs.CR","work_id":"193d98f2-c913-4d0c-814e-b550a64bd03c","year":2025},"citing_paper":{"arxiv_id":"2605.19192","last_updated":"2026-05-20T21:49:08Z","snapshot_observed_at":"2026-08-03T06:06:31.296336Z","submitted_at":"2026-05-18T23:40:43Z","title":"Hallucination as Exploit: Evidence-Carrying Multimodal Agents","version":2},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-05-22T08:57:29.491043Z"},"links":{"cited_paper":"/paper/2504.11703","citing_paper":"/paper/2605.19192"},"observation_digest":"sha256:5f3e48096a8cecc5e871434b8c4857a560fcb643967a8fb5c362282fbc7c7f4d","observation_id":"2a630649-5fcf-4ddf-b75b-c823a9897985","resolution":{"observed_at":"2026-05-22T09:01:20.132950Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"2025 , eprint =","venue":null,"work_id":"46e97541-382d-4a2d-9d09-08b3a7f71aac","year":2025},"citing_paper":{"arxiv_id":"2605.19192","last_updated":"2026-05-20T21:49:08Z","snapshot_observed_at":"2026-08-03T06:06:31.296336Z","submitted_at":"2026-05-18T23:40:43Z","title":"Hallucination as Exploit: Evidence-Carrying Multimodal Agents","version":2},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-05-22T08:57:29.491043Z"},"links":{"citing_paper":"/paper/2605.19192"},"observation_digest":"sha256:117bb8a7017e0e35d43f86120df7bebbb66a55a9ae6b7a090ffb135df832c28b","observation_id":"6c872e1d-2c21-4b7c-923c-00ff45e346c4","resolution":{"observed_at":"2026-05-22T09:01:21.567265Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"The Task Shield: Enforcing Task Alignment to Defend Against Indirect Prompt Injection in","venue":null,"work_id":"9ca5c2ea-0693-40d6-b505-42d8415b0e1c","year":2025},"citing_paper":{"arxiv_id":"2605.19192","last_updated":"2026-05-20T21:49:08Z","snapshot_observed_at":"2026-08-03T06:06:31.296336Z","submitted_at":"2026-05-18T23:40:43Z","title":"Hallucination as Exploit: Evidence-Carrying Multimodal Agents","version":2},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-05-22T08:57:29.491043Z"},"links":{"citing_paper":"/paper/2605.19192"},"observation_digest":"sha256:335418a3ce25c970ae846ed3b9e4f2ea4e1628459447c7bb13e0f9833fd1d8b7","observation_id":"029e7290-166c-489e-9277-117456e85e16","resolution":{"observed_at":"2026-05-22T09:01:21.576529Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"2024 , eprint =","venue":null,"work_id":"cc1e75d7-8db5-4118-b2de-40a2a2acc581","year":2024},"citing_paper":{"arxiv_id":"2605.19192","last_updated":"2026-05-20T21:49:08Z","snapshot_observed_at":"2026-08-03T06:06:31.296336Z","submitted_at":"2026-05-18T23:40:43Z","title":"Hallucination as Exploit: Evidence-Carrying Multimodal Agents","version":2},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-05-22T08:57:29.491043Z"},"links":{"citing_paper":"/paper/2605.19192"},"observation_digest":"sha256:d0f5e1410beded55280b9f22595fdde9e0028fc77f9cc9ed840ed5f5c3b25a80","observation_id":"20f45bb4-bb1d-4f8f-ba97-6850acf59f56","resolution":{"observed_at":"2026-05-22T09:01:21.558921Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Proceedings of the 62nd Annual Meeting of the Association for Computational Linguistics , year =","venue":null,"work_id":"7a482633-dd43-4338-aa20-c8f4132e0be1","year":null},"citing_paper":{"arxiv_id":"2605.19192","last_updated":"2026-05-20T21:49:08Z","snapshot_observed_at":"2026-08-03T06:06:31.296336Z","submitted_at":"2026-05-18T23:40:43Z","title":"Hallucination as Exploit: Evidence-Carrying Multimodal Agents","version":2},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-05-22T08:57:29.491043Z"},"links":{"citing_paper":"/paper/2605.19192"},"observation_digest":"sha256:84cd4e4f0e8cae5ba353f7b53b047d31bb5c3e8fd87420c9c07b0b93cc7905c4","observation_id":"62bf7934-99c7-4691-97c7-5ef46cb57541","resolution":{"observed_at":"2026-05-22T09:01:21.553230Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"2024 , eprint =","venue":null,"work_id":"1750fe64-2983-4b76-8836-f66be27c74ce","year":2024},"citing_paper":{"arxiv_id":"2605.19192","last_updated":"2026-05-20T21:49:08Z","snapshot_observed_at":"2026-08-03T06:06:31.296336Z","submitted_at":"2026-05-18T23:40:43Z","title":"Hallucination as Exploit: Evidence-Carrying Multimodal Agents","version":2},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-05-22T08:57:29.491043Z"},"links":{"citing_paper":"/paper/2605.19192"},"observation_digest":"sha256:0ff950831672e32d908b954973cd6f0a8bbb8456420b14e60ed0de32785c667d","observation_id":"d82d27ac-2be4-417d-a829-59b5d08496c0","resolution":{"observed_at":"2026-05-22T09:01:21.563232Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"33ef33f3-485a-4b14-b3bb-f0abaab876bb","year":null},"citing_paper":{"arxiv_id":"2605.19192","last_updated":"2026-05-20T21:49:08Z","snapshot_observed_at":"2026-08-03T06:06:31.296336Z","submitted_at":"2026-05-18T23:40:43Z","title":"Hallucination as Exploit: Evidence-Carrying Multimodal Agents","version":2},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-05-22T08:57:29.491043Z"},"links":{"citing_paper":"/paper/2605.19192"},"observation_digest":"sha256:a6320119ea693a31856a8ead99295745a8414263c1039b744cc5aa1c896674fa","observation_id":"512903c1-2da3-40ae-b16c-ded273df37f1","resolution":{"observed_at":"2026-05-22T09:01:21.571377Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Image-based Prompt Injection: Hijacking Multimodal","venue":null,"work_id":"deeea5e8-5f03-4a52-8963-2a5b2c65724a","year":null},"citing_paper":{"arxiv_id":"2605.19192","last_updated":"2026-05-20T21:49:08Z","snapshot_observed_at":"2026-08-03T06:06:31.296336Z","submitted_at":"2026-05-18T23:40:43Z","title":"Hallucination as Exploit: Evidence-Carrying Multimodal Agents","version":2},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-05-22T08:57:29.491043Z"},"links":{"citing_paper":"/paper/2605.19192"},"observation_digest":"sha256:663ec9b580fd7f7bd58195a224459102d9386e24af6a7deb6a714db219bbdb3d","observation_id":"54d76a6a-a5f3-4175-9508-2423653ec82c","resolution":{"observed_at":"2026-05-22T09:01:21.580857Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"2026 , eprint =","venue":null,"work_id":"5c3f16e8-a2c5-4a6a-92d2-efc32c7a789a","year":2026},"citing_paper":{"arxiv_id":"2605.19192","last_updated":"2026-05-20T21:49:08Z","snapshot_observed_at":"2026-08-03T06:06:31.296336Z","submitted_at":"2026-05-18T23:40:43Z","title":"Hallucination as Exploit: Evidence-Carrying Multimodal Agents","version":2},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-05-22T08:57:29.491043Z"},"links":{"citing_paper":"/paper/2605.19192"},"observation_digest":"sha256:b8a050376fb95f987978a59988cbb96787c6021a29dcc2b45b9c944a750c3882","observation_id":"fc0daa60-7d60-415b-ac22-1c80011c5d44","resolution":{"observed_at":"2026-05-22T09:01:21.549145Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2605.19192","last_updated":"2026-05-20T21:49:08Z","latest_version":2,"primary_category":"cs.AI","snapshot_observed_at":"2026-08-03T06:06:31.296336Z","submitted_at":"2026-05-18T23:40:43Z","title":"Hallucination as Exploit: Evidence-Carrying Multimodal Agents"},"reference_resolution":{"displayed":27,"state_counts":{"malformed_identifier":0,"metadata_mismatch":3,"parse_uncertain":0,"unresolved":2,"verified_exact":6,"verified_fuzzy":16},"total_outbound_references":27},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"thesis":"As of 19 August 2026, this Paper Citation Record lists 27 of 27 outbound references and 2 inbound Pith citation observations for arXiv:2605.19192."}