{"as_of":"2026-08-07T08:00:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:e8dc5dc7d6e9303ce7c592c6244d604e6efe5bda2418804b432681baadd80bc2","coverage":[{"denominator":19,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":19,"source":"paper_references, paper_reference_links","source_observed_at":"2026-07-11T11:50:26.030339Z","state":"measured"},{"denominator":19,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":19,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2606.09084/citation-record","integrity":"/paper/2606.09084/integrity","json":"/paper/2606.09084/citation-record.json","paper":"/paper/2606.09084"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.52202/079017-2636","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Agentdojo: A dynamic environment to evaluate prompt injection attacks and defenses for llm agents","venue":null,"work_id":"673a54cd-ec69-4997-9c2b-5d11a1480af6","year":2024},"citing_paper":{"arxiv_id":"2606.09084","last_updated":"2026-06-08T06:29:42Z","snapshot_observed_at":"2026-08-01T18:09:52.524186Z","submitted_at":"2026-06-08T06:29:42Z","title":"Context-Fractured Decomposition Attacks on Tool-Using LLM Agents: Exploiting Artifact Provenance Gaps","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-06-27T16:36:25.918701Z"},"links":{"citing_paper":"/paper/2606.09084"},"observation_digest":"sha256:645716f42df38d7eb89db049dc989bb8cfde1b01f619ef8beebffb143044fa99","observation_id":"a74b7305-90c4-4787-82cd-3e545498d482","resolution":{"observed_at":"2026-06-27T16:41:03.013601Z","resolver_source":"doi","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-07-15T19:20:30.552089+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-15T19:20:30.552089+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2503.03704","doi":"10.48550/arxiv.2503.03704","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Yann Dubois, Balázs Galambosi, Percy Liang, and Tat- sunori B Hashimoto","venue":"arXiv (Cornell University)","work_id":"cc008b41-0943-47c8-81e7-bafb5beac6ce","year":2025},"citing_paper":{"arxiv_id":"2606.09084","last_updated":"2026-06-08T06:29:42Z","snapshot_observed_at":"2026-08-01T18:09:52.524186Z","submitted_at":"2026-06-08T06:29:42Z","title":"Context-Fractured Decomposition Attacks on Tool-Using LLM Agents: Exploiting Artifact Provenance Gaps","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-06-27T16:36:25.918701Z"},"links":{"citing_paper":"/paper/2606.09084"},"observation_digest":"sha256:a380588c04845852c02b51c355356e92ad87981765e46be0a57f0026585fd32e","observation_id":"fbec040e-9e96-4242-a20e-dec37e65f405","resolution":{"observed_at":"2026-06-27T16:41:03.010948Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2302.12173","last_updated":"2023-05-05T14:26:17Z","snapshot_observed_at":"2026-07-06T14:55:08.682906Z","submitted_at":"2023-02-23T17:14:38Z","title":"Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection","version":2},"cited_work":{"arxiv_id":"2302.12173","doi":"10.1109/sp61157.2025.00250","metadata_source":"pith","pith_arxiv_id":"2302.12173","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection","venue":"cs.CR","work_id":"7a8cfce1-ada7-4a7a-8516-6f16b1bd077b","year":2023},"citing_paper":{"arxiv_id":"2606.09084","last_updated":"2026-06-08T06:29:42Z","snapshot_observed_at":"2026-08-01T18:09:52.524186Z","submitted_at":"2026-06-08T06:29:42Z","title":"Context-Fractured Decomposition Attacks on Tool-Using LLM Agents: Exploiting Artifact Provenance Gaps","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-06-27T16:36:25.918701Z"},"links":{"cited_paper":"/paper/2302.12173","citing_paper":"/paper/2606.09084"},"observation_digest":"sha256:9e0f837be44f618989fd8560aa9f8f787b6d97d3a1926ff7250433df79fc5ee7","observation_id":"a0c4f9aa-d109-439c-ab07-1b98f869c776","resolution":{"observed_at":"2026-07-03T01:27:30.548575Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2302.12173","last_updated":"2023-05-05T14:26:17Z","snapshot_observed_at":"2026-07-06T14:55:08.682906Z","submitted_at":"2023-02-23T17:14:38Z","title":"Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection","version":2},"cited_work":{"arxiv_id":"2302.12173","doi":"10.1109/sp61157.2025.00250","metadata_source":"pith","pith_arxiv_id":"2302.12173","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection","venue":"cs.CR","work_id":"7a8cfce1-ada7-4a7a-8516-6f16b1bd077b","year":2023},"citing_paper":{"arxiv_id":"2606.09084","last_updated":"2026-06-08T06:29:42Z","snapshot_observed_at":"2026-08-01T18:09:52.524186Z","submitted_at":"2026-06-08T06:29:42Z","title":"Context-Fractured Decomposition Attacks on Tool-Using LLM Agents: Exploiting Artifact Provenance Gaps","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-06-27T16:36:25.918701Z"},"links":{"cited_paper":"/paper/2302.12173","citing_paper":"/paper/2606.09084"},"observation_digest":"sha256:0384b1b9338deb104908afd44a69002dc2c541786f7106898f6d2a60670463e1","observation_id":"ae56354a-bfa4-4542-83fb-35f780f6f006","resolution":{"observed_at":"2026-06-27T16:41:03.006953Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.05499","last_updated":"2025-12-29T02:25:27Z","snapshot_observed_at":"2026-07-06T15:40:27.639368Z","submitted_at":"2023-06-08T18:43:11Z","title":"Prompt Injection attack against LLM-integrated Applications","version":3},"cited_work":{"arxiv_id":"2306.05499","doi":"10.48550/arxiv.2306.05499","metadata_source":"pith","pith_arxiv_id":"2306.05499","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Prompt Injection attack against LLM-integrated Applications","venue":"cs.CR","work_id":"977b4683-bba6-49d6-8f3d-496c41cb7fac","year":2023},"citing_paper":{"arxiv_id":"2606.09084","last_updated":"2026-06-08T06:29:42Z","snapshot_observed_at":"2026-08-01T18:09:52.524186Z","submitted_at":"2026-06-08T06:29:42Z","title":"Context-Fractured Decomposition Attacks on Tool-Using LLM Agents: Exploiting Artifact Provenance Gaps","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-07-11T11:50:26.030339Z"},"links":{"cited_paper":"/paper/2306.05499","citing_paper":"/paper/2606.09084"},"observation_digest":"sha256:f60120b3ed94c3f540e71a7b536c5f96f8be1e1d0ed73e8f73c97140f5488a67","observation_id":"949b79bf-4ca3-4d92-b3fe-1754d5f1137d","resolution":{"observed_at":"2026-06-27T16:41:03.020390Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2305.18752","last_updated":"2023-05-30T05:27:21Z","snapshot_observed_at":"2026-08-06T18:37:20.517203Z","submitted_at":"2023-05-30T05:27:21Z","title":"GPT4Tools: Teaching Large Language Model to Use Tools via Self-instruction","version":1},"cited_work":{"arxiv_id":"2305.18752","doi":"10.48550/arxiv.2305.18752","metadata_source":"arxiv_reference","pith_arxiv_id":"2305.18752","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Gpt4tools: Teaching large language model to use tools via self-instruction","venue":"arXiv (Cornell University)","work_id":"260a71e5-f66b-4679-a4f4-2d3778841d09","year":2025},"citing_paper":{"arxiv_id":"2606.09084","last_updated":"2026-06-08T06:29:42Z","snapshot_observed_at":"2026-08-01T18:09:52.524186Z","submitted_at":"2026-06-08T06:29:42Z","title":"Context-Fractured Decomposition Attacks on Tool-Using LLM Agents: Exploiting Artifact Provenance Gaps","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-06-27T16:36:25.918701Z"},"links":{"cited_paper":"/paper/2305.18752","citing_paper":"/paper/2606.09084"},"observation_digest":"sha256:d7622e5b7bfe42de7ef363f969782e31a42b3679733b1f5208f2c04af4167501","observation_id":"721a390b-f609-42ac-8bd8-f858d719473f","resolution":{"observed_at":"2026-06-27T16:41:03.004082Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"files/1228896","doi":"10.18653/v1/2025.emnlp-main","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T11:50:26.030339Z","title":"Stolfo, A., Balachandran, V ., Yousefi, S., Horvitz, E., and Nushi, B","venue":null,"work_id":"e8f5282f-30a2-4e6a-96fd-5aa884a0e8a0","year":2025},"citing_paper":{"arxiv_id":"2606.09084","last_updated":"2026-06-08T06:29:42Z","snapshot_observed_at":"2026-08-01T18:09:52.524186Z","submitted_at":"2026-06-08T06:29:42Z","title":"Context-Fractured Decomposition Attacks on Tool-Using LLM Agents: Exploiting Artifact Provenance Gaps","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-06-27T16:36:25.918701Z"},"links":{"citing_paper":"/paper/2606.09084"},"observation_digest":"sha256:56fb1fde83c487f869b973dcb1f916b540489b106867899b0431b8926113d195","observation_id":"a2ebf100-27d9-4b57-8f9d-31e09f2941b1","resolution":{"observed_at":"2026-06-27T16:41:03.001236Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-07-11T08:50:07.505227+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-11T08:50:07.505227+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2407.20242","last_updated":"2026-06-09T05:19:18Z","snapshot_observed_at":"2026-07-06T18:53:31.241776Z","submitted_at":"2024-07-16T13:13:16Z","title":"BadRobot: Jailbreaking Embodied LLM Agents in the Physical World","version":5},"cited_work":{"arxiv_id":"2407.20242","doi":"10.48550/arxiv.2407.20242","metadata_source":"pith","pith_arxiv_id":"2407.20242","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2407.202423(2024) 53","venue":"cs.CY","work_id":"936700de-bef0-49b7-b2f2-5ac3c07e8ea0","year":2024},"citing_paper":{"arxiv_id":"2606.09084","last_updated":"2026-06-08T06:29:42Z","snapshot_observed_at":"2026-08-01T18:09:52.524186Z","submitted_at":"2026-06-08T06:29:42Z","title":"Context-Fractured Decomposition Attacks on Tool-Using LLM Agents: Exploiting Artifact Provenance Gaps","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-06-27T16:36:25.918701Z"},"links":{"cited_paper":"/paper/2407.20242","citing_paper":"/paper/2606.09084"},"observation_digest":"sha256:1572d3254c518a7020c4dc2f35b746a6883064667ead723a3e4cb82683e48c81","observation_id":"e87dbe3c-6429-4a55-b2ea-4256fdc23a76","resolution":{"observed_at":"2026-06-27T16:41:03.017612Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T16:36:25.918701Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.09084","last_updated":"2026-06-08T06:29:42Z","snapshot_observed_at":"2026-08-01T18:09:52.524186Z","submitted_at":"2026-06-08T06:29:42Z","title":"Context-Fractured Decomposition Attacks on Tool-Using LLM Agents: Exploiting Artifact Provenance Gaps","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-06-27T16:36:25.918701Z"},"links":{"citing_paper":"/paper/2606.09084"},"observation_digest":"sha256:c5c200bd7ac8a191d46757727e21c6834d055b58ba561ebf5721123025a8bf66","observation_id":"2ae3bc0f-791c-4a19-a606-387dd55d8754","resolution":{"observed_at":"2026-06-27T16:36:25.918701Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T16:36:25.918701Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.09084","last_updated":"2026-06-08T06:29:42Z","snapshot_observed_at":"2026-08-01T18:09:52.524186Z","submitted_at":"2026-06-08T06:29:42Z","title":"Context-Fractured Decomposition Attacks on Tool-Using LLM Agents: Exploiting Artifact Provenance Gaps","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-06-27T16:36:25.918701Z"},"links":{"citing_paper":"/paper/2606.09084"},"observation_digest":"sha256:f230e5c96243e4805787d8496729a353d031669ace3e0118909aee399a71086a","observation_id":"aa240ae1-44ae-4f18-b3db-a8631ad6e144","resolution":{"observed_at":"2026-06-27T16:36:25.918701Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T16:36:25.918701Z","title":"attacker","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.09084","last_updated":"2026-06-08T06:29:42Z","snapshot_observed_at":"2026-08-01T18:09:52.524186Z","submitted_at":"2026-06-08T06:29:42Z","title":"Context-Fractured Decomposition Attacks on Tool-Using LLM Agents: Exploiting Artifact Provenance Gaps","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-06-27T16:36:25.918701Z"},"links":{"citing_paper":"/paper/2606.09084"},"observation_digest":"sha256:865870c97b0ee1293b60607202cf07b82b6b6ede5d51d57694a889a83d7e5c1e","observation_id":"5ac3518e-68bc-470c-9030-19039c9d011f","resolution":{"observed_at":"2026-06-27T16:36:25.918701Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T16:36:25.918701Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.09084","last_updated":"2026-06-08T06:29:42Z","snapshot_observed_at":"2026-08-01T18:09:52.524186Z","submitted_at":"2026-06-08T06:29:42Z","title":"Context-Fractured Decomposition Attacks on Tool-Using LLM Agents: Exploiting Artifact Provenance Gaps","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-06-27T16:36:25.918701Z"},"links":{"citing_paper":"/paper/2606.09084"},"observation_digest":"sha256:7205b2791e6848a9adafd76c41a0d1b70e929b9bddeabae312302983d54e2970","observation_id":"0edc1919-7909-437a-bc3d-b591035f1534","resolution":{"observed_at":"2026-06-27T16:36:25.918701Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T16:36:25.918701Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.09084","last_updated":"2026-06-08T06:29:42Z","snapshot_observed_at":"2026-08-01T18:09:52.524186Z","submitted_at":"2026-06-08T06:29:42Z","title":"Context-Fractured Decomposition Attacks on Tool-Using LLM Agents: Exploiting Artifact Provenance Gaps","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-06-27T16:36:25.918701Z"},"links":{"citing_paper":"/paper/2606.09084"},"observation_digest":"sha256:a547e8fb31edfc360a1541407d8a8558b1e00d65d4ad07708d0a2e96b2ca82f6","observation_id":"88e38d36-af98-4110-998c-45f36fdb72fc","resolution":{"observed_at":"2026-06-27T16:36:25.918701Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T16:36:25.918701Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.09084","last_updated":"2026-06-08T06:29:42Z","snapshot_observed_at":"2026-08-01T18:09:52.524186Z","submitted_at":"2026-06-08T06:29:42Z","title":"Context-Fractured Decomposition Attacks on Tool-Using LLM Agents: Exploiting Artifact Provenance Gaps","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-06-27T16:36:25.918701Z"},"links":{"citing_paper":"/paper/2606.09084"},"observation_digest":"sha256:dabcbf242639b5123fbd46531ed6fd092a01a23bbb7518a8460753baaa679270","observation_id":"57892a22-2204-400b-9f3c-547aeddc31b3","resolution":{"observed_at":"2026-06-27T16:36:25.918701Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T16:36:25.918701Z","title":"Next steps: - The data file should contain the expected records before re-running the analysis","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2606.09084","last_updated":"2026-06-08T06:29:42Z","snapshot_observed_at":"2026-08-01T18:09:52.524186Z","submitted_at":"2026-06-08T06:29:42Z","title":"Context-Fractured Decomposition Attacks on Tool-Using LLM Agents: Exploiting Artifact Provenance Gaps","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-06-27T16:36:25.918701Z"},"links":{"citing_paper":"/paper/2606.09084"},"observation_digest":"sha256:5e2ac044787fd0efd9fb1f28fb2f7f7035749701bbb705b09436879bf8ab7177","observation_id":"e730d9db-db6a-4d5a-894e-1d8680077e12","resolution":{"observed_at":"2026-06-27T16:36:25.918701Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T16:36:25.918701Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.09084","last_updated":"2026-06-08T06:29:42Z","snapshot_observed_at":"2026-08-01T18:09:52.524186Z","submitted_at":"2026-06-08T06:29:42Z","title":"Context-Fractured Decomposition Attacks on Tool-Using LLM Agents: Exploiting Artifact Provenance Gaps","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-06-27T16:36:25.918701Z"},"links":{"citing_paper":"/paper/2606.09084"},"observation_digest":"sha256:43c089938b83fc4667415c796ab87540d9e8d04f2c19a9d2e2c3269b3a80dd07","observation_id":"ea55ca7e-f6f3-40c5-b034-90e6d7604e6f","resolution":{"observed_at":"2026-06-27T16:36:25.918701Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T16:36:25.918701Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.09084","last_updated":"2026-06-08T06:29:42Z","snapshot_observed_at":"2026-08-01T18:09:52.524186Z","submitted_at":"2026-06-08T06:29:42Z","title":"Context-Fractured Decomposition Attacks on Tool-Using LLM Agents: Exploiting Artifact Provenance Gaps","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-06-27T16:36:25.918701Z"},"links":{"citing_paper":"/paper/2606.09084"},"observation_digest":"sha256:395ec4028331a44b7a7e00c518d3fd6ee0b5f051dcd0bb51b0ebbc815781025b","observation_id":"fc00efb8-79f6-47a8-b466-3fead864ba9e","resolution":{"observed_at":"2026-06-27T16:36:25.918701Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T16:36:25.918701Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.09084","last_updated":"2026-06-08T06:29:42Z","snapshot_observed_at":"2026-08-01T18:09:52.524186Z","submitted_at":"2026-06-08T06:29:42Z","title":"Context-Fractured Decomposition Attacks on Tool-Using LLM Agents: Exploiting Artifact Provenance Gaps","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-06-27T16:36:25.918701Z"},"links":{"citing_paper":"/paper/2606.09084"},"observation_digest":"sha256:fed4ea107aa8ec3527907251d56a0c2d207e32d0ccc1da9a08ccdb8f5956a400","observation_id":"7eba7de3-40fe-4a36-ad07-a6fd88fcc910","resolution":{"observed_at":"2026-06-27T16:36:25.918701Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T16:36:25.918701Z","title":"Detective","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.09084","last_updated":"2026-06-08T06:29:42Z","snapshot_observed_at":"2026-08-01T18:09:52.524186Z","submitted_at":"2026-06-08T06:29:42Z","title":"Context-Fractured Decomposition Attacks on Tool-Using LLM Agents: Exploiting Artifact Provenance Gaps","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-06-27T16:36:25.918701Z"},"links":{"citing_paper":"/paper/2606.09084"},"observation_digest":"sha256:64aa2d5d050280ee6512f8485e0cb3ab6ac073acd6ca1f62d3125acbfbb50c4a","observation_id":"f1dcee7b-cd5f-43a7-a57c-eaefa998030b","resolution":{"observed_at":"2026-06-27T16:36:25.918701Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2606.09084","last_updated":"2026-06-08T06:29:42Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-01T18:09:52.524186Z","submitted_at":"2026-06-08T06:29:42Z","title":"Context-Fractured Decomposition Attacks on Tool-Using LLM Agents: Exploiting Artifact Provenance Gaps"},"reference_resolution":{"displayed":19,"state_counts":{"malformed_identifier":0,"metadata_mismatch":6,"parse_uncertain":0,"unresolved":11,"verified_exact":2,"verified_fuzzy":0},"total_outbound_references":19},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 7 August 2026, this Paper Citation Record lists 19 of 19 outbound references and 0 inbound Pith citation observations for arXiv:2606.09084."}