{"as_of":"2026-08-19T06:54:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:71bffd3c1cc419f80281feb1be75c8e7ff055629a66a0e4c05f73e4c1fe93c4a","coverage":[{"denominator":17,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":17,"source":"paper_references, paper_reference_links","source_observed_at":"2026-06-28T16:53:09.787904Z","state":"measured"},{"denominator":18,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":18,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-19T06:32:44.657259+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-07-31T22:25:22.286866Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2606.02644","last_updated":"2026-05-31T15:39:39Z","snapshot_observed_at":"2026-08-17T22:08:18.086572Z","submitted_at":"2026-05-31T15:39:39Z","title":"A New Framework for Cybersecurity Refusals in AI Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2606.02644","snapshot_observed_at":"2026-07-31T22:25:22.286866Z","title":"Zico Kolter , title =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-15T17:44:46.059265Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.286866Z"},"links":{"cited_paper":"/paper/2606.02644","citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:8dc98b2d2712d65b97071c43712efec6b2c2b6feff5ccf10e5028ca3e81c2ab2","observation_id":"addb1b9d-4726-4a7a-a05c-cb4d4039e847","resolution":{"observed_at":"2026-07-31T22:25:22.286866Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2606.02644/citation-record","integrity":"/paper/2606.02644/integrity","json":"/paper/2606.02644/citation-record.json","paper":"/paper/2606.02644"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T16:53:09.787904Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.02644","last_updated":"2026-05-31T15:39:39Z","snapshot_observed_at":"2026-08-17T22:08:18.086572Z","submitted_at":"2026-05-31T15:39:39Z","title":"A New Framework for Cybersecurity Refusals in AI Agents","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-06-28T16:53:09.787904Z"},"links":{"citing_paper":"/paper/2606.02644"},"observation_digest":"sha256:2670176af6460320952987d78eac7b8bb24e9e398a35abf8308a1aeffd053803","observation_id":"8b028a07-035f-4b7c-880d-f0a1a6f9dda8","resolution":{"observed_at":"2026-06-28T16:53:09.787904Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T16:53:09.787904Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.02644","last_updated":"2026-05-31T15:39:39Z","snapshot_observed_at":"2026-08-17T22:08:18.086572Z","submitted_at":"2026-05-31T15:39:39Z","title":"A New Framework for Cybersecurity Refusals in AI Agents","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-06-28T16:53:09.787904Z"},"links":{"citing_paper":"/paper/2606.02644"},"observation_digest":"sha256:5b09ee0422987b3de0119b86d303796c3d4b8515cc30742bdb1813d6cce752f9","observation_id":"277ded33-c659-4f99-aeb5-e3bf0cf89cfe","resolution":{"observed_at":"2026-06-28T16:53:09.787904Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T16:53:09.787904Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.02644","last_updated":"2026-05-31T15:39:39Z","snapshot_observed_at":"2026-08-17T22:08:18.086572Z","submitted_at":"2026-05-31T15:39:39Z","title":"A New Framework for Cybersecurity Refusals in AI Agents","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-06-28T16:53:09.787904Z"},"links":{"citing_paper":"/paper/2606.02644"},"observation_digest":"sha256:0ad6edbc966be87cd7ba6d42d0d36853c24fdb4a8a348c3e7ec32ee02f04672a","observation_id":"85f7203a-d511-4e80-9e67-496f5fca319e","resolution":{"observed_at":"2026-06-28T16:53:09.787904Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T16:53:09.787904Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.02644","last_updated":"2026-05-31T15:39:39Z","snapshot_observed_at":"2026-08-17T22:08:18.086572Z","submitted_at":"2026-05-31T15:39:39Z","title":"A New Framework for Cybersecurity Refusals in AI Agents","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-06-28T16:53:09.787904Z"},"links":{"citing_paper":"/paper/2606.02644"},"observation_digest":"sha256:91bc95522cb9431f1e5df2350695598f42acca4690aed265aef97bff99b8007b","observation_id":"82b1c177-fd14-4479-8b5b-edc9a6716e8e","resolution":{"observed_at":"2026-06-28T16:53:09.787904Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T16:53:09.787904Z","title":"B Grading Methodology Capability grading determines whether an agent successfully identified and exploited a vulnerability","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.02644","last_updated":"2026-05-31T15:39:39Z","snapshot_observed_at":"2026-08-17T22:08:18.086572Z","submitted_at":"2026-05-31T15:39:39Z","title":"A New Framework for Cybersecurity Refusals in AI Agents","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-06-28T16:53:09.787904Z"},"links":{"citing_paper":"/paper/2606.02644"},"observation_digest":"sha256:e694e0a21761260694d9ada9ec253d8515ed1a7b491af3af59908625c877b971","observation_id":"ab8a8575-34e8-488e-8389-faeddcee462a","resolution":{"observed_at":"2026-06-28T16:53:09.787904Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T16:53:09.787904Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.02644","last_updated":"2026-05-31T15:39:39Z","snapshot_observed_at":"2026-08-17T22:08:18.086572Z","submitted_at":"2026-05-31T15:39:39Z","title":"A New Framework for Cybersecurity Refusals in AI Agents","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-06-28T16:53:09.787904Z"},"links":{"citing_paper":"/paper/2606.02644"},"observation_digest":"sha256:342d2daa17ec41a0fd60716c658cf55f3d7a405295ced1459ba7cfb54aa99894","observation_id":"554d1fea-5fb9-4c74-abf8-befef495819e","resolution":{"observed_at":"2026-06-28T16:53:09.787904Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T16:53:09.787904Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.02644","last_updated":"2026-05-31T15:39:39Z","snapshot_observed_at":"2026-08-17T22:08:18.086572Z","submitted_at":"2026-05-31T15:39:39Z","title":"A New Framework for Cybersecurity Refusals in AI Agents","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-06-28T16:53:09.787904Z"},"links":{"citing_paper":"/paper/2606.02644"},"observation_digest":"sha256:f18e3b4a3183676319e843f3fd2992153a5138d0b5c66c6a875492fe88d0b475","observation_id":"f02fdd0c-0124-4465-b1e7-d3591bb971c9","resolution":{"observed_at":"2026-06-28T16:53:09.787904Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T16:53:09.787904Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.02644","last_updated":"2026-05-31T15:39:39Z","snapshot_observed_at":"2026-08-17T22:08:18.086572Z","submitted_at":"2026-05-31T15:39:39Z","title":"A New Framework for Cybersecurity Refusals in AI Agents","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-06-28T16:53:09.787904Z"},"links":{"citing_paper":"/paper/2606.02644"},"observation_digest":"sha256:5fdba1e79fcb581d6932fe3a89a2f31a7935706b6a54ad1694372ccc8bfbaf26","observation_id":"ad88ef20-4c6b-4c91-8fd7-e85978274392","resolution":{"observed_at":"2026-06-28T16:53:09.787904Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T16:53:09.787904Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.02644","last_updated":"2026-05-31T15:39:39Z","snapshot_observed_at":"2026-08-17T22:08:18.086572Z","submitted_at":"2026-05-31T15:39:39Z","title":"A New Framework for Cybersecurity Refusals in AI Agents","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-06-28T16:53:09.787904Z"},"links":{"citing_paper":"/paper/2606.02644"},"observation_digest":"sha256:1bd5ad3b4cfda1c4a679396d1adc653baba48307a5e686a26311f06e175e28a2","observation_id":"6d41a8e0-6b21-4a35-853e-c7fe7a43ac05","resolution":{"observed_at":"2026-06-28T16:53:09.787904Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T16:53:09.787904Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.02644","last_updated":"2026-05-31T15:39:39Z","snapshot_observed_at":"2026-08-17T22:08:18.086572Z","submitted_at":"2026-05-31T15:39:39Z","title":"A New Framework for Cybersecurity Refusals in AI Agents","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-06-28T16:53:09.787904Z"},"links":{"citing_paper":"/paper/2606.02644"},"observation_digest":"sha256:fea1763dc88cb799d69ff50b2082b872c32a1f5cfc78a300f59f24031dfa991e","observation_id":"a8c14e94-54a6-45df-90fc-3219c11c1c95","resolution":{"observed_at":"2026-06-28T16:53:09.787904Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T16:53:09.787904Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.02644","last_updated":"2026-05-31T15:39:39Z","snapshot_observed_at":"2026-08-17T22:08:18.086572Z","submitted_at":"2026-05-31T15:39:39Z","title":"A New Framework for Cybersecurity Refusals in AI Agents","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-06-28T16:53:09.787904Z"},"links":{"citing_paper":"/paper/2606.02644"},"observation_digest":"sha256:b8eaac1e0de637f12c728724ce39b8ef60e1ecd1c9cba02ddcb1a8fe74089cdf","observation_id":"7a70a2ef-c0e7-45ce-97f5-510736aa9806","resolution":{"observed_at":"2026-06-28T16:53:09.787904Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T16:53:09.787904Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.02644","last_updated":"2026-05-31T15:39:39Z","snapshot_observed_at":"2026-08-17T22:08:18.086572Z","submitted_at":"2026-05-31T15:39:39Z","title":"A New Framework for Cybersecurity Refusals in AI Agents","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-06-28T16:53:09.787904Z"},"links":{"citing_paper":"/paper/2606.02644"},"observation_digest":"sha256:4305b63dc211bc12bf80327f469f40803b32fd045d31f61edea4a5904b9e5d7f","observation_id":"7ba263b9-efac-4ebc-bd40-6560e2e635bf","resolution":{"observed_at":"2026-06-28T16:53:09.787904Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T16:53:09.787904Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.02644","last_updated":"2026-05-31T15:39:39Z","snapshot_observed_at":"2026-08-17T22:08:18.086572Z","submitted_at":"2026-05-31T15:39:39Z","title":"A New Framework for Cybersecurity Refusals in AI Agents","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-06-28T16:53:09.787904Z"},"links":{"citing_paper":"/paper/2606.02644"},"observation_digest":"sha256:1df09ed7389c5c6358b168709643496d83179d80256ac296f96c30f1508901e0","observation_id":"fa8a696c-fb61-4623-8c83-366eee9a7f9e","resolution":{"observed_at":"2026-06-28T16:53:09.787904Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T16:53:09.787904Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.02644","last_updated":"2026-05-31T15:39:39Z","snapshot_observed_at":"2026-08-17T22:08:18.086572Z","submitted_at":"2026-05-31T15:39:39Z","title":"A New Framework for Cybersecurity Refusals in AI Agents","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-06-28T16:53:09.787904Z"},"links":{"citing_paper":"/paper/2606.02644"},"observation_digest":"sha256:cda5ade8a03c6b15b4aab8f006fc01fbd9ce8f1114fa93b552d0b2414ee26109","observation_id":"2de9b340-ab93-4117-a6bf-2530fc5ea365","resolution":{"observed_at":"2026-06-28T16:53:09.787904Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T16:53:09.787904Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.02644","last_updated":"2026-05-31T15:39:39Z","snapshot_observed_at":"2026-08-17T22:08:18.086572Z","submitted_at":"2026-05-31T15:39:39Z","title":"A New Framework for Cybersecurity Refusals in AI Agents","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-06-28T16:53:09.787904Z"},"links":{"citing_paper":"/paper/2606.02644"},"observation_digest":"sha256:734b9e8a62da6fe7a4cfbc30329a6e42c2c89211a6ee92d1a83d72cb806c1d70","observation_id":"3ac76830-7d67-4554-bd29-622af99d7d5d","resolution":{"observed_at":"2026-06-28T16:53:09.787904Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T16:53:09.787904Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.02644","last_updated":"2026-05-31T15:39:39Z","snapshot_observed_at":"2026-08-17T22:08:18.086572Z","submitted_at":"2026-05-31T15:39:39Z","title":"A New Framework for Cybersecurity Refusals in AI Agents","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-06-28T16:53:09.787904Z"},"links":{"citing_paper":"/paper/2606.02644"},"observation_digest":"sha256:839ddfc00ab74450df99db8590f5c727cf2db032e1ba11d46062bf30fe238671","observation_id":"169eae40-4498-44d6-9d66-f59292685b2b","resolution":{"observed_at":"2026-06-28T16:53:09.787904Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T16:53:09.787904Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.02644","last_updated":"2026-05-31T15:39:39Z","snapshot_observed_at":"2026-08-17T22:08:18.086572Z","submitted_at":"2026-05-31T15:39:39Z","title":"A New Framework for Cybersecurity Refusals in AI Agents","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-06-28T16:53:09.787904Z"},"links":{"citing_paper":"/paper/2606.02644"},"observation_digest":"sha256:efd308608e8925e55a678f4873ebe0e32b12d93c9a029e921768a9db1b42c47a","observation_id":"94b7f5e7-2c87-4e15-90b6-98703a724a12","resolution":{"observed_at":"2026-06-28T16:53:09.787904Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2606.02644","last_updated":"2026-05-31T15:39:39Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-17T22:08:18.086572Z","submitted_at":"2026-05-31T15:39:39Z","title":"A New Framework for Cybersecurity Refusals in AI Agents"},"reference_resolution":{"displayed":17,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":17,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":17},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"thesis":"As of 19 August 2026, this Paper Citation Record lists 17 of 17 outbound references and 1 inbound Pith citation observation for arXiv:2606.02644."}