Paper Citation Record · LEDGER

Context-Fractured Decomposition Attacks on Tool-Using LLM Agents: Exploiting Artifact Provenance Gaps

As of 7 August 2026, this Paper Citation Record lists 19 of 19 outbound references and 0 inbound Pith citation observations for arXiv:2606.09084.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2606.09084 v1

Coverage vector

measured 19 of 19 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-07-11T11:50:26.030339Z

measured 19 of 19 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-06T06:34:29.942622+00:00

measured 0 of 0 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: cited_works

Reference resolution

19 of 19 outbound references displayed

verified exact2
verified fuzzy0
unresolved11
parse uncertain0
malformed identifier0
metadata mismatch6

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation a74b7305-90c4-4787-82cd-3e545498d482 · outbound

This paper cites Agentdojo: A dynamic environment to evaluate prompt injection attacks and defenses for llm agents.

Context-Fractured Decomposition Attacks on Tool-Using LLM Agents: Exploiting Artifact Provenance Gaps Agentdojo: A dynamic environment to evaluate prompt injection attacks and defenses for llm agents

Reference 1

Resolution: metadata mismatch; doi, observed 2026-06-27T16:41:03.013601Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation fbec040e-9e96-4242-a20e-dec37e65f405 · outbound

This paper cites Yann Dubois, Balázs Galambosi, Percy Liang, and Tat- sunori B Hashimoto.

Context-Fractured Decomposition Attacks on Tool-Using LLM Agents: Exploiting Artifact Provenance Gaps Yann Dubois, Balázs Galambosi, Percy Liang, and Tat- sunori B Hashimoto

Reference 2

Resolution: metadata mismatch; arxiv_id, observed 2026-06-27T16:41:03.010948Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation a0c4f9aa-d109-439c-ab07-1b98f869c776 · outbound

This paper cites Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection.

Context-Fractured Decomposition Attacks on Tool-Using LLM Agents: Exploiting Artifact Provenance Gaps Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection

Reference 3

Resolution: metadata mismatch; local_arxiv, observed 2026-07-03T01:27:30.548575Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation ae56354a-bfa4-4542-83fb-35f780f6f006 · outbound

This paper cites Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection.

Reference 4

Resolution: metadata mismatch; local_arxiv, observed 2026-06-27T16:41:03.006953Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation 949b79bf-4ca3-4d92-b3fe-1754d5f1137d · outbound

This paper cites Prompt Injection attack against LLM-integrated Applications.

Context-Fractured Decomposition Attacks on Tool-Using LLM Agents: Exploiting Artifact Provenance Gaps Prompt Injection attack against LLM-integrated Applications

Reference 5

Resolution: metadata mismatch; local_arxiv, observed 2026-06-27T16:41:03.020390Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation 721a390b-f609-42ac-8bd8-f858d719473f · outbound

This paper cites GPT4Tools: Teaching Large Language Model to Use Tools via Self-instruction.

Context-Fractured Decomposition Attacks on Tool-Using LLM Agents: Exploiting Artifact Provenance Gaps GPT4Tools: Teaching Large Language Model to Use Tools via Self-instruction

Reference 6

Resolution: metadata mismatch; arxiv_id, observed 2026-06-27T16:41:03.004082Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation a2ebf100-27d9-4b57-8f9d-31e09f2941b1 · outbound

This paper cites Stolfo, A., Balachandran, V ., Yousefi, S., Horvitz, E., and Nushi, B.

Context-Fractured Decomposition Attacks on Tool-Using LLM Agents: Exploiting Artifact Provenance Gaps Stolfo, A., Balachandran, V ., Yousefi, S., Horvitz, E., and Nushi, B

Reference 7

Resolution: verified exact; doi, observed 2026-06-27T16:41:03.001236Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation e87dbe3c-6429-4a55-b2ea-4256fdc23a76 · outbound

This paper cites BadRobot: Jailbreaking Embodied LLM Agents in the Physical World.

Context-Fractured Decomposition Attacks on Tool-Using LLM Agents: Exploiting Artifact Provenance Gaps BadRobot: Jailbreaking Embodied LLM Agents in the Physical World

Reference 8

Resolution: verified exact; local_arxiv, observed 2026-06-27T16:41:03.017612Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation 2ae3bc0f-791c-4a19-a606-387dd55d8754 · outbound

This paper cites an unresolved cited work.

Context-Fractured Decomposition Attacks on Tool-Using LLM Agents: Exploiting Artifact Provenance Gaps Unresolved cited work

Reference 9

Resolution: unresolved; no resolver link, observed 2026-06-27T16:36:25.918701Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation aa240ae1-44ae-4f18-b3db-a8631ad6e144 · outbound

This paper cites an unresolved cited work.

Context-Fractured Decomposition Attacks on Tool-Using LLM Agents: Exploiting Artifact Provenance Gaps Unresolved cited work

Reference 10

Resolution: unresolved; no resolver link, observed 2026-06-27T16:36:25.918701Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 5ac3518e-68bc-470c-9030-19039c9d011f · outbound

This paper cites attacker.

Context-Fractured Decomposition Attacks on Tool-Using LLM Agents: Exploiting Artifact Provenance Gaps attacker

Reference 11

Resolution: unresolved; no resolver link, observed 2026-06-27T16:36:25.918701Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 0edc1919-7909-437a-bc3d-b591035f1534 · outbound

This paper cites an unresolved cited work.

Context-Fractured Decomposition Attacks on Tool-Using LLM Agents: Exploiting Artifact Provenance Gaps Unresolved cited work

Reference 12

Resolution: unresolved; no resolver link, observed 2026-06-27T16:36:25.918701Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 88e38d36-af98-4110-998c-45f36fdb72fc · outbound

This paper cites an unresolved cited work.

Context-Fractured Decomposition Attacks on Tool-Using LLM Agents: Exploiting Artifact Provenance Gaps Unresolved cited work

Reference 13

Resolution: unresolved; no resolver link, observed 2026-06-27T16:36:25.918701Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 57892a22-2204-400b-9f3c-547aeddc31b3 · outbound

This paper cites an unresolved cited work.

Context-Fractured Decomposition Attacks on Tool-Using LLM Agents: Exploiting Artifact Provenance Gaps Unresolved cited work

Reference 14

Resolution: unresolved; no resolver link, observed 2026-06-27T16:36:25.918701Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation e730d9db-db6a-4d5a-894e-1d8680077e12 · outbound

This paper cites Next steps: - The data file should contain the expected records before re-running the analysis.

Context-Fractured Decomposition Attacks on Tool-Using LLM Agents: Exploiting Artifact Provenance Gaps Next steps: - The data file should contain the expected records before re-running the analysis

Reference 15

Resolution: unresolved; no resolver link, observed 2026-06-27T16:36:25.918701Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ea55ca7e-f6f3-40c5-b034-90e6d7604e6f · outbound

This paper cites an unresolved cited work.

Context-Fractured Decomposition Attacks on Tool-Using LLM Agents: Exploiting Artifact Provenance Gaps Unresolved cited work

Reference 16

Resolution: unresolved; no resolver link, observed 2026-06-27T16:36:25.918701Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation fc00efb8-79f6-47a8-b466-3fead864ba9e · outbound

This paper cites an unresolved cited work.

Context-Fractured Decomposition Attacks on Tool-Using LLM Agents: Exploiting Artifact Provenance Gaps Unresolved cited work

Reference 17

Resolution: unresolved; no resolver link, observed 2026-06-27T16:36:25.918701Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 7eba7de3-40fe-4a36-ad07-a6fd88fcc910 · outbound

This paper cites an unresolved cited work.

Context-Fractured Decomposition Attacks on Tool-Using LLM Agents: Exploiting Artifact Provenance Gaps Unresolved cited work

Reference 18

Resolution: unresolved; no resolver link, observed 2026-06-27T16:36:25.918701Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation f1dcee7b-cd5f-43a7-a57c-eaefa998030b · outbound

This paper cites Detective.

Context-Fractured Decomposition Attacks on Tool-Using LLM Agents: Exploiting Artifact Provenance Gaps Detective

Reference 19

Resolution: unresolved; no resolver link, observed 2026-06-27T16:36:25.918701Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Pith citing papers

No inbound Pith citation observations are available.