{"as_of":"2026-08-19T13:37:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:9a6d12769be3259f73ed32f03bc461d688aa56e7f07c4b55facd25b52296b8ad","coverage":[{"denominator":50,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":50,"source":"paper_references, paper_reference_links","source_observed_at":"2026-06-29T12:34:53.874957Z","state":"measured"},{"denominator":53,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":53,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-19T06:32:44.657259+00:00","state":"measured"},{"denominator":3,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":3,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-11T14:49:41.266427Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"pith","source_observed_at":"2026-08-11T14:49:41.535484Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2605.28201","last_updated":"2026-05-27T09:25:37Z","snapshot_observed_at":"2026-08-15T00:56:10.814043Z","submitted_at":"2026-05-27T09:25:37Z","title":"Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2605.28201","snapshot_observed_at":"2026-08-01T08:54:36.800533Z","title":"arXiv:2605.28201, 2026","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.20972","last_updated":"2026-07-23T06:50:04Z","snapshot_observed_at":"2026-08-15T00:55:27.414324Z","submitted_at":"2026-07-23T06:50:04Z","title":"Delivery, Not Storage: Cue-Anchored Working Memory as a Harness Property for Coding Agents","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-01T08:54:36.800533Z"},"links":{"cited_paper":"/paper/2605.28201","citing_paper":"/paper/2607.20972"},"observation_digest":"sha256:193a756ec17759a9129ca9460a6b1a968146995aab23eb051156d9fe5441bd5a","observation_id":"777a40c9-e322-4e50-a042-01ff3488edef","resolution":{"observed_at":"2026-08-01T08:54:36.800533Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2605.28201","last_updated":"2026-05-27T09:25:37Z","snapshot_observed_at":"2026-08-15T00:56:10.814043Z","submitted_at":"2026-05-27T09:25:37Z","title":"Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2605.28201","snapshot_observed_at":"2026-08-01T06:18:09.181678Z","title":"arXiv preprint arXiv:2605.28201 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.21962","last_updated":"2026-07-24T04:19:45Z","snapshot_observed_at":"2026-08-19T11:41:42.029519Z","submitted_at":"2026-07-24T04:19:45Z","title":"Ground Truth First: A Longitudinal Evaluation Instrument for Agent Memory, and the Tenure Crossover in Memory-Architecture Rankings","version":1},"reference_index":96,"source":"arxiv_source","source_observed_at":"2026-08-01T06:18:09.181678Z"},"links":{"cited_paper":"/paper/2605.28201","citing_paper":"/paper/2607.21962"},"observation_digest":"sha256:bcfce8cb5bbf00941b3527c31e9053a11ae595a7d8812fdef338c199946390f6","observation_id":"b6d8a565-1b5d-4975-beda-d1fa6ad04f95","resolution":{"observed_at":"2026-08-01T06:18:09.181678Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2605.28201","last_updated":"2026-05-27T09:25:37Z","snapshot_observed_at":"2026-08-15T00:56:10.814043Z","submitted_at":"2026-05-27T09:25:37Z","title":"Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents","version":1},"cited_work":{"arxiv_id":"2605.28201","doi":null,"metadata_source":"pith","pith_arxiv_id":"2605.28201","snapshot_observed_at":"2026-08-11T14:49:41.535484Z","title":"Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents","venue":"cs.AI","work_id":"df98e8f0-5fc8-4bc3-b1f9-232fe1184805","year":2026},"citing_paper":{"arxiv_id":"2608.09577","last_updated":"2026-08-10T13:12:35Z","snapshot_observed_at":"2026-08-16T06:00:16.871905Z","submitted_at":"2026-08-10T13:12:35Z","title":"ElasticBack: Stealthy Conditional Backdoor in LLM-Agent Skills via Coupled Trigger-Rule Optimization","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-11T14:49:41.266427Z"},"links":{"cited_paper":"/paper/2605.28201","citing_paper":"/paper/2608.09577"},"observation_digest":"sha256:446e337384f229efc27f5c0c8a2a13c116692740ce853aaf2100bece8bb22b09","observation_id":"ffd9718e-cce8-428f-8102-f52ebf6c18cb","resolution":{"observed_at":"2026-08-11T14:49:41.540618Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2605.28201/citation-record","integrity":"/paper/2605.28201/integrity","json":"/paper/2605.28201/citation-record.json","paper":"/paper/2605.28201"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2510.05244","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-04T09:19:43.652598Z","title":"Taylor, Krishnamurthy Dj Dvijotham, and Alexandre Lacoste","venue":null,"work_id":"00bb4c77-b2d9-4777-96ca-0b727ade9fb3","year":2025},"citing_paper":{"arxiv_id":"2605.28201","last_updated":"2026-05-27T09:25:37Z","snapshot_observed_at":"2026-08-15T00:56:10.814043Z","submitted_at":"2026-05-27T09:25:37Z","title":"Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-06-29T12:34:53.874957Z"},"links":{"citing_paper":"/paper/2605.28201"},"observation_digest":"sha256:d9a8e50c58fc7a74f22da5994429d733d0f2314b31d4f1eb811ef5d4d90ebb6e","observation_id":"9f30ed2a-4486-4fe3-8898-c420c081a365","resolution":{"observed_at":"2026-06-29T12:43:26.026699Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2604.06811","last_updated":"2026-05-28T07:57:37Z","snapshot_observed_at":"2026-08-13T00:23:04.746651Z","submitted_at":"2026-04-08T08:24:48Z","title":"SkillTrojan: Backdoor Attacks on Skill-Based Agent Systems","version":2},"cited_work":{"arxiv_id":"2604.06811","doi":null,"metadata_source":"pith","pith_arxiv_id":"2604.06811","snapshot_observed_at":"2026-07-04T11:39:47.698868Z","title":"SkillTrojan: Backdoor Attacks on Skill-Based Agent Systems","venue":"cs.CR","work_id":"743a3132-7c14-4f6b-aa98-9a9984e5d423","year":2026},"citing_paper":{"arxiv_id":"2605.28201","last_updated":"2026-05-27T09:25:37Z","snapshot_observed_at":"2026-08-15T00:56:10.814043Z","submitted_at":"2026-05-27T09:25:37Z","title":"Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-06-29T12:34:53.874957Z"},"links":{"cited_paper":"/paper/2604.06811","citing_paper":"/paper/2605.28201"},"observation_digest":"sha256:a56785523e657cdfbb798f848a6f37ea32f535ff7d8ee9c4966174abc8bd6340","observation_id":"e3e23960-356d-4333-b927-91e81df1449c","resolution":{"observed_at":"2026-06-29T12:43:26.021462Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2604.01438","last_updated":"2026-04-04T15:18:43Z","snapshot_observed_at":"2026-08-15T15:21:10.198748Z","submitted_at":"2026-04-01T22:24:24Z","title":"ClawSafety: \"Safe\" LLMs, Unsafe Agents","version":2},"cited_work":{"arxiv_id":"2604.01438","doi":"10.48550/arxiv.2604.01438","metadata_source":"pith","pith_arxiv_id":"2604.01438","snapshot_observed_at":"2026-08-05T02:49:54.815029Z","title":"ClawSafety: \"Safe\" LLMs, Unsafe Agents","venue":"cs.AI","work_id":"65792180-ed14-4f36-a1e6-78f74ed5224d","year":2026},"citing_paper":{"arxiv_id":"2605.28201","last_updated":"2026-05-27T09:25:37Z","snapshot_observed_at":"2026-08-15T00:56:10.814043Z","submitted_at":"2026-05-27T09:25:37Z","title":"Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-06-29T12:34:53.874957Z"},"links":{"cited_paper":"/paper/2604.01438","citing_paper":"/paper/2605.28201"},"observation_digest":"sha256:3986f8063b2ab17ae899606d8d98fbb7d1c33067f7287dbcecb99d6aaf726e14","observation_id":"7c90d95c-7938-47ba-a279-80d64f2716b1","resolution":{"observed_at":"2026-06-29T12:43:26.025482Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T12:34:53.874957Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2605.28201","last_updated":"2026-05-27T09:25:37Z","snapshot_observed_at":"2026-08-15T00:56:10.814043Z","submitted_at":"2026-05-27T09:25:37Z","title":"Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-06-29T12:34:53.874957Z"},"links":{"citing_paper":"/paper/2605.28201"},"observation_digest":"sha256:97e0898247d6144bf72b0f6d5dce9badc946c4cdc3670781d57868c2dab78e8b","observation_id":"574e9d82-7109-4db2-8f27-eb7f16935b07","resolution":{"observed_at":"2026-06-29T12:34:53.874957Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T12:34:53.874957Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2605.28201","last_updated":"2026-05-27T09:25:37Z","snapshot_observed_at":"2026-08-15T00:56:10.814043Z","submitted_at":"2026-05-27T09:25:37Z","title":"Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-06-29T12:34:53.874957Z"},"links":{"citing_paper":"/paper/2605.28201"},"observation_digest":"sha256:fb881c297cb9bb0c599605e0ca813543f588b6ca96fae878ef884bde51b7d6e3","observation_id":"66c1b84b-e204-4ec5-b25d-4af770df489e","resolution":{"observed_at":"2026-06-29T12:34:53.874957Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T12:34:53.874957Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2605.28201","last_updated":"2026-05-27T09:25:37Z","snapshot_observed_at":"2026-08-15T00:56:10.814043Z","submitted_at":"2026-05-27T09:25:37Z","title":"Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-06-29T12:34:53.874957Z"},"links":{"citing_paper":"/paper/2605.28201"},"observation_digest":"sha256:019b11329dafb7fca358a1d09e7e8b023cc6fdad35b49d5f55a107a8d9ee8c9d","observation_id":"d6d88c9f-7ae0-4459-9a8a-b5d263e6ff9c","resolution":{"observed_at":"2026-06-29T12:34:53.874957Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T12:34:53.874957Z","title":"harm_label","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2605.28201","last_updated":"2026-05-27T09:25:37Z","snapshot_observed_at":"2026-08-15T00:56:10.814043Z","submitted_at":"2026-05-27T09:25:37Z","title":"Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-06-29T12:34:53.874957Z"},"links":{"citing_paper":"/paper/2605.28201"},"observation_digest":"sha256:6342b7e11eb3d907a4d6aa7e1999df5e5050813f481076220a9d89713b64c77a","observation_id":"34b21ba0-e886-44ee-b7ba-8c09c47642ef","resolution":{"observed_at":"2026-06-29T12:34:53.874957Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T12:34:53.874957Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2605.28201","last_updated":"2026-05-27T09:25:37Z","snapshot_observed_at":"2026-08-15T00:56:10.814043Z","submitted_at":"2026-05-27T09:25:37Z","title":"Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-06-29T12:34:53.874957Z"},"links":{"citing_paper":"/paper/2605.28201"},"observation_digest":"sha256:a6c6c4824a640b7bef28e70f793d0cd074b9f8d82d213ec18a0b63f8ca9d2440","observation_id":"6c505526-7a4f-4992-b7ce-f5749d24b2af","resolution":{"observed_at":"2026-06-29T12:34:53.874957Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T12:34:53.874957Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2605.28201","last_updated":"2026-05-27T09:25:37Z","snapshot_observed_at":"2026-08-15T00:56:10.814043Z","submitted_at":"2026-05-27T09:25:37Z","title":"Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-06-29T12:34:53.874957Z"},"links":{"citing_paper":"/paper/2605.28201"},"observation_digest":"sha256:05f8fedf3ddd247631ffce3016bb6fdc6da38f8bf4825bb67a91f825710f99f1","observation_id":"14ecb4b7-65b2-4d3f-a970-27e406aff42a","resolution":{"observed_at":"2026-06-29T12:34:53.874957Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T12:34:53.874957Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2605.28201","last_updated":"2026-05-27T09:25:37Z","snapshot_observed_at":"2026-08-15T00:56:10.814043Z","submitted_at":"2026-05-27T09:25:37Z","title":"Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-06-29T12:34:53.874957Z"},"links":{"citing_paper":"/paper/2605.28201"},"observation_digest":"sha256:fc5057945990f7ed2d69f6e3e7d680638003e37e416f9caddcbafcb0486488b2","observation_id":"3ab6ebd7-ab50-4f75-85a3-7cc109779ff4","resolution":{"observed_at":"2026-06-29T12:34:53.874957Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T12:34:53.874957Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2605.28201","last_updated":"2026-05-27T09:25:37Z","snapshot_observed_at":"2026-08-15T00:56:10.814043Z","submitted_at":"2026-05-27T09:25:37Z","title":"Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-06-29T12:34:53.874957Z"},"links":{"citing_paper":"/paper/2605.28201"},"observation_digest":"sha256:479baa2f106300cd34f94aca73216b22382dce8233551cf5a2398d2a7ac2ec5e","observation_id":"a9dc0ff9-12f1-4aaf-b4c6-22cd82ded125","resolution":{"observed_at":"2026-06-29T12:34:53.874957Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T12:34:53.874957Z","title":"attack_type","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2605.28201","last_updated":"2026-05-27T09:25:37Z","snapshot_observed_at":"2026-08-15T00:56:10.814043Z","submitted_at":"2026-05-27T09:25:37Z","title":"Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-06-29T12:34:53.874957Z"},"links":{"citing_paper":"/paper/2605.28201"},"observation_digest":"sha256:d97bfa8d9c4bfd239a4a8207a2e5715dcf81ef45a8d54ec6f3ae2e9360831c73","observation_id":"e1c3d73d-1320-435b-adc7-198961335484","resolution":{"observed_at":"2026-06-29T12:34:53.874957Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T12:34:53.874957Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2605.28201","last_updated":"2026-05-27T09:25:37Z","snapshot_observed_at":"2026-08-15T00:56:10.814043Z","submitted_at":"2026-05-27T09:25:37Z","title":"Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-06-29T12:34:53.874957Z"},"links":{"citing_paper":"/paper/2605.28201"},"observation_digest":"sha256:1dc6db9d7cb7482016af528e63366973a27be0b4518eb106cdc3018da23344c3","observation_id":"a3375851-09ba-438f-a5a5-1896b66a8474","resolution":{"observed_at":"2026-06-29T12:34:53.874957Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T12:34:53.874957Z","title":"{ASK_USER_FOR}","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2605.28201","last_updated":"2026-05-27T09:25:37Z","snapshot_observed_at":"2026-08-15T00:56:10.814043Z","submitted_at":"2026-05-27T09:25:37Z","title":"Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-06-29T12:34:53.874957Z"},"links":{"citing_paper":"/paper/2605.28201"},"observation_digest":"sha256:6f664ff4c19a2916bf2c6dffedab35a506c7d9f22f69318728945e05a120ca36","observation_id":"99c7a6f8-ff49-4f4d-b53b-e2f2190347d9","resolution":{"observed_at":"2026-06-29T12:34:53.874957Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T12:34:53.874957Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2605.28201","last_updated":"2026-05-27T09:25:37Z","snapshot_observed_at":"2026-08-15T00:56:10.814043Z","submitted_at":"2026-05-27T09:25:37Z","title":"Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-06-29T12:34:53.874957Z"},"links":{"citing_paper":"/paper/2605.28201"},"observation_digest":"sha256:ee5cf87cbbdcf3998ffc120e845fb1e5be69f015e0d6963a5cf199efb146190a","observation_id":"ed8672d5-79ec-45fb-8607-c5eb5e43ec66","resolution":{"observed_at":"2026-06-29T12:34:53.874957Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T12:34:53.874957Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2605.28201","last_updated":"2026-05-27T09:25:37Z","snapshot_observed_at":"2026-08-15T00:56:10.814043Z","submitted_at":"2026-05-27T09:25:37Z","title":"Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-06-29T12:34:53.874957Z"},"links":{"citing_paper":"/paper/2605.28201"},"observation_digest":"sha256:8d72e839e51677092596b257cffc4a981933222dd29fe93c36ed7fe756e80fe7","observation_id":"0041c935-8589-4230-867e-1dceac492961","resolution":{"observed_at":"2026-06-29T12:34:53.874957Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T12:34:53.874957Z","title":"{BIG_SKILL_ID}","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2605.28201","last_updated":"2026-05-27T09:25:37Z","snapshot_observed_at":"2026-08-15T00:56:10.814043Z","submitted_at":"2026-05-27T09:25:37Z","title":"Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-06-29T12:34:53.874957Z"},"links":{"citing_paper":"/paper/2605.28201"},"observation_digest":"sha256:ee672c30af3508f7c3f3c1a7b099269044d0da351802d8ee6059f54d2b37d3b4","observation_id":"d0fcfabe-c6a6-4f1e-a575-2154c20732b6","resolution":{"observed_at":"2026-06-29T12:34:53.874957Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T12:34:53.874957Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2605.28201","last_updated":"2026-05-27T09:25:37Z","snapshot_observed_at":"2026-08-15T00:56:10.814043Z","submitted_at":"2026-05-27T09:25:37Z","title":"Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-06-29T12:34:53.874957Z"},"links":{"citing_paper":"/paper/2605.28201"},"observation_digest":"sha256:682e7ab5ad4530347c45c3ce01079e5176a2d6136168672956f61f76b327a838","observation_id":"cf047a4e-0d34-403d-81f6-62d8ef4f6d2b","resolution":{"observed_at":"2026-06-29T12:34:53.874957Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T12:34:53.874957Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2605.28201","last_updated":"2026-05-27T09:25:37Z","snapshot_observed_at":"2026-08-15T00:56:10.814043Z","submitted_at":"2026-05-27T09:25:37Z","title":"Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-06-29T12:34:53.874957Z"},"links":{"citing_paper":"/paper/2605.28201"},"observation_digest":"sha256:da28014e7d808f67c95f1043efa53a19883ca83ffbe2b4f28a7687c516a429eb","observation_id":"cbc55284-8139-47bd-87a2-e9cb46189e63","resolution":{"observed_at":"2026-06-29T12:34:53.874957Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T12:34:53.874957Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2605.28201","last_updated":"2026-05-27T09:25:37Z","snapshot_observed_at":"2026-08-15T00:56:10.814043Z","submitted_at":"2026-05-27T09:25:37Z","title":"Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-06-29T12:34:53.874957Z"},"links":{"citing_paper":"/paper/2605.28201"},"observation_digest":"sha256:c8f97421b241bbd0c1a1ee8f44e2faf16f086a2a64cd934c519f1ad106d17dd7","observation_id":"b5a7e5e6-992b-4a6e-8ab8-5a0aeb7e0429","resolution":{"observed_at":"2026-06-29T12:34:53.874957Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T12:34:53.874957Z","title":"Use ISO format for dates (YYYY-MM-DD) and date-times (YYYY-MM- DD HH:MM) in all simulated outputs","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2605.28201","last_updated":"2026-05-27T09:25:37Z","snapshot_observed_at":"2026-08-15T00:56:10.814043Z","submitted_at":"2026-05-27T09:25:37Z","title":"Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-06-29T12:34:53.874957Z"},"links":{"citing_paper":"/paper/2605.28201"},"observation_digest":"sha256:96af692303e807267b10884af1c5c792805ff6efa2a9e688a25b6910590dfbf6","observation_id":"fd2b6fba-5cb2-405b-9f6a-f94569571e54","resolution":{"observed_at":"2026-06-29T12:34:53.874957Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T12:34:53.874957Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2605.28201","last_updated":"2026-05-27T09:25:37Z","snapshot_observed_at":"2026-08-15T00:56:10.814043Z","submitted_at":"2026-05-27T09:25:37Z","title":"Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-06-29T12:34:53.874957Z"},"links":{"citing_paper":"/paper/2605.28201"},"observation_digest":"sha256:a88828ffb867ed0c7b4f6359cd23766436bed4abb34af03b19763ff736e17976","observation_id":"ed47ff41-2f53-4589-b0da-10f7e35301b7","resolution":{"observed_at":"2026-06-29T12:34:53.874957Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T12:34:53.874957Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2605.28201","last_updated":"2026-05-27T09:25:37Z","snapshot_observed_at":"2026-08-15T00:56:10.814043Z","submitted_at":"2026-05-27T09:25:37Z","title":"Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-06-29T12:34:53.874957Z"},"links":{"citing_paper":"/paper/2605.28201"},"observation_digest":"sha256:a1129deeb3228201f2083135a50ea137e2490344b6a16bc43deff86e02eec9c6","observation_id":"a2935816-a509-43e7-8b9c-61ffee1c01eb","resolution":{"observed_at":"2026-06-29T12:34:53.874957Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T12:34:53.874957Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2605.28201","last_updated":"2026-05-27T09:25:37Z","snapshot_observed_at":"2026-08-15T00:56:10.814043Z","submitted_at":"2026-05-27T09:25:37Z","title":"Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-06-29T12:34:53.874957Z"},"links":{"citing_paper":"/paper/2605.28201"},"observation_digest":"sha256:a98b8a91da9d127d84882f3fc0eefa0b2a25ef4a5e65a65e3d96ce43ca34cd3a","observation_id":"a9430317-b6d5-497b-8dab-4753c4b5e0af","resolution":{"observed_at":"2026-06-29T12:34:53.874957Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T12:34:53.874957Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2605.28201","last_updated":"2026-05-27T09:25:37Z","snapshot_observed_at":"2026-08-15T00:56:10.814043Z","submitted_at":"2026-05-27T09:25:37Z","title":"Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-06-29T12:34:53.874957Z"},"links":{"citing_paper":"/paper/2605.28201"},"observation_digest":"sha256:f2347b21887c109926b6792409fcd8a2d26bd31febe3bed52362c40b90183d9f","observation_id":"8fb233f1-71ea-477b-a0c3-d2db79c7422e","resolution":{"observed_at":"2026-06-29T12:34:53.874957Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T12:34:53.874957Z","title":"Do not add any explanation or additional text outside the JSON object","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2605.28201","last_updated":"2026-05-27T09:25:37Z","snapshot_observed_at":"2026-08-15T00:56:10.814043Z","submitted_at":"2026-05-27T09:25:37Z","title":"Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-06-29T12:34:53.874957Z"},"links":{"citing_paper":"/paper/2605.28201"},"observation_digest":"sha256:5746f9046805de7f1d71a222883b0507b85abc5c9c5680d1791832d2f85dc74c","observation_id":"d933e29e-ec37-409f-908c-6358d4b4d6a7","resolution":{"observed_at":"2026-06-29T12:34:53.874957Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T12:34:53.874957Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2605.28201","last_updated":"2026-05-27T09:25:37Z","snapshot_observed_at":"2026-08-15T00:56:10.814043Z","submitted_at":"2026-05-27T09:25:37Z","title":"Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-06-29T12:34:53.874957Z"},"links":{"citing_paper":"/paper/2605.28201"},"observation_digest":"sha256:9904bddd9f729c771caeb9554a485c618afb33ecfaa59e3f60b757345410ecf8","observation_id":"fd321010-9911-4f64-abbe-2dabe4a405a8","resolution":{"observed_at":"2026-06-29T12:34:53.874957Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T12:34:53.874957Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2605.28201","last_updated":"2026-05-27T09:25:37Z","snapshot_observed_at":"2026-08-15T00:56:10.814043Z","submitted_at":"2026-05-27T09:25:37Z","title":"Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-06-29T12:34:53.874957Z"},"links":{"citing_paper":"/paper/2605.28201"},"observation_digest":"sha256:0f19b98439d1786442c99e842ae2df6ad7fd4ce676f4f4f608bf51263e40f8e9","observation_id":"dcf94f4d-9d17-4aab-a7ef-0ee80d32b78d","resolution":{"observed_at":"2026-06-29T12:34:53.874957Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T12:34:53.874957Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2605.28201","last_updated":"2026-05-27T09:25:37Z","snapshot_observed_at":"2026-08-15T00:56:10.814043Z","submitted_at":"2026-05-27T09:25:37Z","title":"Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-06-29T12:34:53.874957Z"},"links":{"citing_paper":"/paper/2605.28201"},"observation_digest":"sha256:fcd176144c660507f5163ae697b5da8b7c9f99e439bcec677dc03b68be548475","observation_id":"590404e4-36da-471f-845f-9da115aad369","resolution":{"observed_at":"2026-06-29T12:34:53.874957Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T12:34:53.874957Z","title":"No additional text","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2605.28201","last_updated":"2026-05-27T09:25:37Z","snapshot_observed_at":"2026-08-15T00:56:10.814043Z","submitted_at":"2026-05-27T09:25:37Z","title":"Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-06-29T12:34:53.874957Z"},"links":{"citing_paper":"/paper/2605.28201"},"observation_digest":"sha256:fc8bfe80f1eab70111a7ac55706bf3fea708407bfa62eaedd619fcef3dbea888","observation_id":"fdab6190-1958-4265-b2cd-465258112b33","resolution":{"observed_at":"2026-06-29T12:34:53.874957Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T12:34:53.874957Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2605.28201","last_updated":"2026-05-27T09:25:37Z","snapshot_observed_at":"2026-08-15T00:56:10.814043Z","submitted_at":"2026-05-27T09:25:37Z","title":"Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-06-29T12:34:53.874957Z"},"links":{"citing_paper":"/paper/2605.28201"},"observation_digest":"sha256:df510bae7c4e755d38a29b57a6f5a925ab30fff6d4fe7dd6044d7ff4c55fa818","observation_id":"d5d2b31e-bee7-4841-9446-847356305277","resolution":{"observed_at":"2026-06-29T12:34:53.874957Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T12:34:53.874957Z","title":"reasoning","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2605.28201","last_updated":"2026-05-27T09:25:37Z","snapshot_observed_at":"2026-08-15T00:56:10.814043Z","submitted_at":"2026-05-27T09:25:37Z","title":"Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-06-29T12:34:53.874957Z"},"links":{"citing_paper":"/paper/2605.28201"},"observation_digest":"sha256:4588340d9a1a7deb746b2d0cc70772242ad23a2b918083a5b73711cfcc474214","observation_id":"0541ceb5-3fe3-4220-b96d-15ee4d3278e1","resolution":{"observed_at":"2026-06-29T12:34:53.874957Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T12:34:53.874957Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2605.28201","last_updated":"2026-05-27T09:25:37Z","snapshot_observed_at":"2026-08-15T00:56:10.814043Z","submitted_at":"2026-05-27T09:25:37Z","title":"Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-06-29T12:34:53.874957Z"},"links":{"citing_paper":"/paper/2605.28201"},"observation_digest":"sha256:a1cb9fbaa77c354de4be7839ed1aa9bc7ec00c18d8932933ea82ed4cb525acec","observation_id":"f8fa710c-c610-4094-a173-acb5941a99c2","resolution":{"observed_at":"2026-06-29T12:34:53.874957Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T12:34:53.874957Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2605.28201","last_updated":"2026-05-27T09:25:37Z","snapshot_observed_at":"2026-08-15T00:56:10.814043Z","submitted_at":"2026-05-27T09:25:37Z","title":"Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-06-29T12:34:53.874957Z"},"links":{"citing_paper":"/paper/2605.28201"},"observation_digest":"sha256:a902f120ab77bf94e3807a2de3e2f08d57f01cb67b85585dd5e79486254af0cc","observation_id":"89b875cc-06e7-4592-87c8-218d10daf0cb","resolution":{"observed_at":"2026-06-29T12:34:53.874957Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T12:34:53.874957Z","title":"my saved X","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2605.28201","last_updated":"2026-05-27T09:25:37Z","snapshot_observed_at":"2026-08-15T00:56:10.814043Z","submitted_at":"2026-05-27T09:25:37Z","title":"Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-06-29T12:34:53.874957Z"},"links":{"citing_paper":"/paper/2605.28201"},"observation_digest":"sha256:7c85c66e2eb2b059558173712b4f7bf50985c6db1aa4d214a2538204f80d294d","observation_id":"f9f2d54a-021c-4af8-8e51-af363a57a612","resolution":{"observed_at":"2026-06-29T12:34:53.874957Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T12:34:53.874957Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2605.28201","last_updated":"2026-05-27T09:25:37Z","snapshot_observed_at":"2026-08-15T00:56:10.814043Z","submitted_at":"2026-05-27T09:25:37Z","title":"Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-06-29T12:34:53.874957Z"},"links":{"citing_paper":"/paper/2605.28201"},"observation_digest":"sha256:8bca7d03801a331bee45dca31d418dbc088852876e0ad4793e5ef0c8693c9c43","observation_id":"42c4b93a-694d-4acd-9d01-e559c2d96935","resolution":{"observed_at":"2026-06-29T12:34:53.874957Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T12:34:53.874957Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2605.28201","last_updated":"2026-05-27T09:25:37Z","snapshot_observed_at":"2026-08-15T00:56:10.814043Z","submitted_at":"2026-05-27T09:25:37Z","title":"Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-06-29T12:34:53.874957Z"},"links":{"citing_paper":"/paper/2605.28201"},"observation_digest":"sha256:d8d07a425bcc3d11e07ab178ff35f090fc13f97013b143fc85f5fb8e0b455ca3","observation_id":"5c9da679-8ade-4142-8526-b6ef946794fc","resolution":{"observed_at":"2026-06-29T12:34:53.874957Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T12:34:53.874957Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2605.28201","last_updated":"2026-05-27T09:25:37Z","snapshot_observed_at":"2026-08-15T00:56:10.814043Z","submitted_at":"2026-05-27T09:25:37Z","title":"Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-06-29T12:34:53.874957Z"},"links":{"citing_paper":"/paper/2605.28201"},"observation_digest":"sha256:d541106bd199ee03772589696b5c62b7f6dbaf5b34b5e06ca4103ba50283a7bb","observation_id":"883e04dc-b831-415e-8120-504949cd972a","resolution":{"observed_at":"2026-06-29T12:34:53.874957Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T12:34:53.874957Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2605.28201","last_updated":"2026-05-27T09:25:37Z","snapshot_observed_at":"2026-08-15T00:56:10.814043Z","submitted_at":"2026-05-27T09:25:37Z","title":"Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-06-29T12:34:53.874957Z"},"links":{"citing_paper":"/paper/2605.28201"},"observation_digest":"sha256:f001cf08bc2bab24a5d85b17be380e6131ee84eed9f45d158e2e68a6a558bb7e","observation_id":"2b2d7549-960b-4e0e-85f7-975fe097de8d","resolution":{"observed_at":"2026-06-29T12:34:53.874957Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T12:34:53.874957Z","title":"A.9 Hierarchical Skill Generation Prompt A.14: Hierarchical Skill Generation Purpose: Generate one BIG skill and multiple SMALL skills for the skill state","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2605.28201","last_updated":"2026-05-27T09:25:37Z","snapshot_observed_at":"2026-08-15T00:56:10.814043Z","submitted_at":"2026-05-27T09:25:37Z","title":"Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-06-29T12:34:53.874957Z"},"links":{"citing_paper":"/paper/2605.28201"},"observation_digest":"sha256:eeb37045f050ec1344f0270e6329e9ca3952ff38ca6de1c0d48bc180939b597a","observation_id":"725b6484-2bbe-4ecb-bd5a-843f9c9cc7d7","resolution":{"observed_at":"2026-06-29T12:34:53.874957Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T12:34:53.874957Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2605.28201","last_updated":"2026-05-27T09:25:37Z","snapshot_observed_at":"2026-08-15T00:56:10.814043Z","submitted_at":"2026-05-27T09:25:37Z","title":"Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-06-29T12:34:53.874957Z"},"links":{"citing_paper":"/paper/2605.28201"},"observation_digest":"sha256:32e99e5a29e7c3c7cda0a93a165c1552370a622257204c4d6ec373380e3731d3","observation_id":"760c699f-86c6-4ac4-a183-c0244656836f","resolution":{"observed_at":"2026-06-29T12:34:53.874957Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T12:34:53.874957Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2605.28201","last_updated":"2026-05-27T09:25:37Z","snapshot_observed_at":"2026-08-15T00:56:10.814043Z","submitted_at":"2026-05-27T09:25:37Z","title":"Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-06-29T12:34:53.874957Z"},"links":{"citing_paper":"/paper/2605.28201"},"observation_digest":"sha256:bedf2f9f77ef13594ce88c6ed407d9a48d8a8c9aeac43fa35bc4474082317cdc","observation_id":"58697077-71e5-44a7-9433-1b37a8d022ce","resolution":{"observed_at":"2026-06-29T12:34:53.874957Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T12:34:53.874957Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2605.28201","last_updated":"2026-05-27T09:25:37Z","snapshot_observed_at":"2026-08-15T00:56:10.814043Z","submitted_at":"2026-05-27T09:25:37Z","title":"Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-06-29T12:34:53.874957Z"},"links":{"citing_paper":"/paper/2605.28201"},"observation_digest":"sha256:d09eb2f446899e554f6dd175fcefde13de372970fb659822a16f98be1475a11e","observation_id":"1ab3956b-7964-42b7-b9c6-a12cc8d5b149","resolution":{"observed_at":"2026-06-29T12:34:53.874957Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T12:34:53.874957Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2605.28201","last_updated":"2026-05-27T09:25:37Z","snapshot_observed_at":"2026-08-15T00:56:10.814043Z","submitted_at":"2026-05-27T09:25:37Z","title":"Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-06-29T12:34:53.874957Z"},"links":{"citing_paper":"/paper/2605.28201"},"observation_digest":"sha256:527e1f227e6b09b8735223c27c39dde6d2deda069e4ee9c7d0e80858050e2c11","observation_id":"66a6573c-9ebb-4c52-82af-d8869b65a4b0","resolution":{"observed_at":"2026-06-29T12:34:53.874957Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T12:34:53.874957Z","title":"revised_template","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2605.28201","last_updated":"2026-05-27T09:25:37Z","snapshot_observed_at":"2026-08-15T00:56:10.814043Z","submitted_at":"2026-05-27T09:25:37Z","title":"Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-06-29T12:34:53.874957Z"},"links":{"citing_paper":"/paper/2605.28201"},"observation_digest":"sha256:d928362a4d8c05dc349579f3446d19640370238f56f0cac77e06dc490fdb99fb","observation_id":"562882c0-7c66-44a2-9261-55f885c9f236","resolution":{"observed_at":"2026-06-29T12:34:53.874957Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T12:34:53.874957Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2605.28201","last_updated":"2026-05-27T09:25:37Z","snapshot_observed_at":"2026-08-15T00:56:10.814043Z","submitted_at":"2026-05-27T09:25:37Z","title":"Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-06-29T12:34:53.874957Z"},"links":{"citing_paper":"/paper/2605.28201"},"observation_digest":"sha256:498129b9d411a3952bf862da339da0370637c5262eaa97f40f4bcadd51e445b0","observation_id":"c66523a1-f658-4286-8b5f-708b994da70d","resolution":{"observed_at":"2026-06-29T12:34:53.874957Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T12:34:53.874957Z","title":"Choose the best evaluation logic type: - ordered_trace_check for multi-step attacks - argument_check for single-step precise attacks - tool_match for broad attacks Critical rules:","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2605.28201","last_updated":"2026-05-27T09:25:37Z","snapshot_observed_at":"2026-08-15T00:56:10.814043Z","submitted_at":"2026-05-27T09:25:37Z","title":"Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-06-29T12:34:53.874957Z"},"links":{"citing_paper":"/paper/2605.28201"},"observation_digest":"sha256:3801552ee8c7628465448de639f0b4cad9e4aac35b5fba7b23259253e13639bf","observation_id":"58a6397d-cc18-4ea1-80b6-6145c286c832","resolution":{"observed_at":"2026-06-29T12:34:53.874957Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T12:34:53.874957Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2605.28201","last_updated":"2026-05-27T09:25:37Z","snapshot_observed_at":"2026-08-15T00:56:10.814043Z","submitted_at":"2026-05-27T09:25:37Z","title":"Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-06-29T12:34:53.874957Z"},"links":{"citing_paper":"/paper/2605.28201"},"observation_digest":"sha256:7a1a110536754da32c3202eb78945c0b89a7b898a0fe6552881e056cee8d54b3","observation_id":"086185a3-e039-4d02-a968-6825318c562c","resolution":{"observed_at":"2026-06-29T12:34:53.874957Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T12:34:53.874957Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2605.28201","last_updated":"2026-05-27T09:25:37Z","snapshot_observed_at":"2026-08-15T00:56:10.814043Z","submitted_at":"2026-05-27T09:25:37Z","title":"Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-06-29T12:34:53.874957Z"},"links":{"citing_paper":"/paper/2605.28201"},"observation_digest":"sha256:f9f89e9e0e136c67b745ab14b042bba825f846985e5ca72bcee4d23741eda0e7","observation_id":"9f29181c-ae0d-4004-bf78-84ff5e7efea7","resolution":{"observed_at":"2026-06-29T12:34:53.874957Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T12:34:53.874957Z","title":"eval_type","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2605.28201","last_updated":"2026-05-27T09:25:37Z","snapshot_observed_at":"2026-08-15T00:56:10.814043Z","submitted_at":"2026-05-27T09:25:37Z","title":"Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-06-29T12:34:53.874957Z"},"links":{"citing_paper":"/paper/2605.28201"},"observation_digest":"sha256:55703cb8a7a24fd7140c4c09d19ad457c14bb84e9d45a9261f6a88bdc66bbbe8","observation_id":"9518c797-2308-4a8e-870f-58735329011c","resolution":{"observed_at":"2026-06-29T12:34:53.874957Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2605.28201","last_updated":"2026-05-27T09:25:37Z","latest_version":1,"primary_category":"cs.AI","snapshot_observed_at":"2026-08-15T00:56:10.814043Z","submitted_at":"2026-05-27T09:25:37Z","title":"Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents"},"reference_resolution":{"displayed":50,"state_counts":{"malformed_identifier":1,"metadata_mismatch":1,"parse_uncertain":0,"unresolved":46,"verified_exact":2,"verified_fuzzy":0},"total_outbound_references":50},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"thesis":"As of 19 August 2026, this Paper Citation Record lists 50 of 50 outbound references and 3 inbound Pith citation observations for arXiv:2605.28201."}