{"as_of":"2026-08-17T18:18:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:5fbf5e49e43602c7aff686ced8d429bf46927f5f91aa7e2ebb83a939de58550d","coverage":[{"denominator":14,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":14,"source":"paper_references, paper_reference_links","source_observed_at":"2026-06-27T04:05:04.871506Z","state":"measured"},{"denominator":15,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":15,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-17T06:30:58.91139+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-15T15:32:45.613431Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"pith","source_observed_at":"2026-08-15T15:32:46.489371Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2606.16821","last_updated":"2026-06-23T11:59:57Z","snapshot_observed_at":"2026-08-17T17:47:53.597238Z","submitted_at":"2026-06-15T15:05:25Z","title":"How Much Can We Trust LLM Search Agents? Measuring Endorsement Vulnerability to Web Content Manipulation","version":2},"cited_work":{"arxiv_id":"2606.16821","doi":null,"metadata_source":"pith","pith_arxiv_id":"2606.16821","snapshot_observed_at":"2026-08-15T15:32:46.489371Z","title":"How Much Can We Trust LLM Search Agents? Measuring Endorsement Vulnerability to Web Content Manipulation","venue":"cs.CL","work_id":"4b2c9b88-37a5-4c9b-aedf-aac7b73a5bef","year":2026},"citing_paper":{"arxiv_id":"2607.21951","last_updated":"2026-07-24T03:55:51Z","snapshot_observed_at":"2026-08-17T08:03:32.379877Z","submitted_at":"2026-07-24T03:55:51Z","title":"SIREN (Luring LLMs onto the Rocks): PAIR-Driven Preference Manipulation in Web-RAG Recommenders","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-15T15:32:45.613431Z"},"links":{"cited_paper":"/paper/2606.16821","citing_paper":"/paper/2607.21951"},"observation_digest":"sha256:f7d1c2fa9faec58ee1b532e226ec453a8329d3032fbdd2e467b0dde5ba15d305","observation_id":"776e12dc-fde0-428d-a8c3-c40ac4bd2839","resolution":{"observed_at":"2026-08-15T15:32:46.493324Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2606.16821/citation-record","integrity":"/paper/2606.16821/integrity","json":"/paper/2606.16821/citation-record.json","paper":"/paper/2606.16821"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T04:05:04.871506Z","title":"https: //huggingface.co/BAAI/bge-small- en-v1.5","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2606.16821","last_updated":"2026-06-23T11:59:57Z","snapshot_observed_at":"2026-08-17T17:47:53.597238Z","submitted_at":"2026-06-15T15:05:25Z","title":"How Much Can We Trust LLM Search Agents? Measuring Endorsement Vulnerability to Web Content Manipulation","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-06-27T04:05:04.871506Z"},"links":{"citing_paper":"/paper/2606.16821"},"observation_digest":"sha256:14c3bb089abc7f6fee367c6c011e10918547e33da9fd2a66d6a09a366b13918f","observation_id":"ab52f143-877e-4d99-8b01-e0fa4fa9cae0","resolution":{"observed_at":"2026-06-27T04:05:04.871506Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T04:05:04.871506Z","title":"InProceedings of the 16th ACM Workshop on Artificial Intelligence and Security (AISec), pages 79–90","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2606.16821","last_updated":"2026-06-23T11:59:57Z","snapshot_observed_at":"2026-08-17T17:47:53.597238Z","submitted_at":"2026-06-15T15:05:25Z","title":"How Much Can We Trust LLM Search Agents? Measuring Endorsement Vulnerability to Web Content Manipulation","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-06-27T04:05:04.871506Z"},"links":{"citing_paper":"/paper/2606.16821"},"observation_digest":"sha256:0287b534e2956ba0b6a0c13791eb507e503fe34421b5b70c5cb464f90cc35ad2","observation_id":"0309018a-e146-454f-8dfb-da9cd8406c45","resolution":{"observed_at":"2026-06-27T04:05:04.871506Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T04:05:04.871506Z","title":"arXiv preprint","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2606.16821","last_updated":"2026-06-23T11:59:57Z","snapshot_observed_at":"2026-08-17T17:47:53.597238Z","submitted_at":"2026-06-15T15:05:25Z","title":"How Much Can We Trust LLM Search Agents? Measuring Endorsement Vulnerability to Web Content Manipulation","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-06-27T04:05:04.871506Z"},"links":{"citing_paper":"/paper/2606.16821"},"observation_digest":"sha256:a063188717359b7dc451912668222d8fbd22746587e9c24275c69f96ae22910b","observation_id":"91cdea49-62e3-4f2c-952e-438ebc027b8e","resolution":{"observed_at":"2026-06-27T04:05:04.871506Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T04:05:04.871506Z","title":"alongside other op- tions","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.16821","last_updated":"2026-06-23T11:59:57Z","snapshot_observed_at":"2026-08-17T17:47:53.597238Z","submitted_at":"2026-06-15T15:05:25Z","title":"How Much Can We Trust LLM Search Agents? Measuring Endorsement Vulnerability to Web Content Manipulation","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-06-27T04:05:04.871506Z"},"links":{"citing_paper":"/paper/2606.16821"},"observation_digest":"sha256:95084891022e35ee5093e9acbe561d6e1b733282faebdbeaafc50f1c5aab314b","observation_id":"cb61aca4-b6ca-422c-b661-69f8e3dfda1a","resolution":{"observed_at":"2026-06-27T04:05:04.871506Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T04:05:04.871506Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.16821","last_updated":"2026-06-23T11:59:57Z","snapshot_observed_at":"2026-08-17T17:47:53.597238Z","submitted_at":"2026-06-15T15:05:25Z","title":"How Much Can We Trust LLM Search Agents? Measuring Endorsement Vulnerability to Web Content Manipulation","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-06-27T04:05:04.871506Z"},"links":{"citing_paper":"/paper/2606.16821"},"observation_digest":"sha256:8075bfbf5406e61025afac12fd5cb9a5015afa9130c142b7b8110bfe218c0376","observation_id":"95866b0c-befe-4cbd-a56b-e395a500c5d8","resolution":{"observed_at":"2026-06-27T04:05:04.871506Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T04:05:04.871506Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.16821","last_updated":"2026-06-23T11:59:57Z","snapshot_observed_at":"2026-08-17T17:47:53.597238Z","submitted_at":"2026-06-15T15:05:25Z","title":"How Much Can We Trust LLM Search Agents? Measuring Endorsement Vulnerability to Web Content Manipulation","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-06-27T04:05:04.871506Z"},"links":{"citing_paper":"/paper/2606.16821"},"observation_digest":"sha256:1f3e2cdb26294d40251c3afecd1bacfe3fd7f82f9b83bec77f9aeb0dff3791d3","observation_id":"e36e8d51-9fc9-4934-aa0b-479f2d4a82e9","resolution":{"observed_at":"2026-06-27T04:05:04.871506Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T04:05:04.871506Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.16821","last_updated":"2026-06-23T11:59:57Z","snapshot_observed_at":"2026-08-17T17:47:53.597238Z","submitted_at":"2026-06-15T15:05:25Z","title":"How Much Can We Trust LLM Search Agents? Measuring Endorsement Vulnerability to Web Content Manipulation","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-06-27T04:05:04.871506Z"},"links":{"citing_paper":"/paper/2606.16821"},"observation_digest":"sha256:928af361226391e4846e555bda6d9b6788014e34e1716a0a099b53e701481a8c","observation_id":"45517157-3cbe-48ed-86e2-f9984271322d","resolution":{"observed_at":"2026-06-27T04:05:04.871506Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T04:05:04.871506Z","title":"shift_score","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.16821","last_updated":"2026-06-23T11:59:57Z","snapshot_observed_at":"2026-08-17T17:47:53.597238Z","submitted_at":"2026-06-15T15:05:25Z","title":"How Much Can We Trust LLM Search Agents? Measuring Endorsement Vulnerability to Web Content Manipulation","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-06-27T04:05:04.871506Z"},"links":{"citing_paper":"/paper/2606.16821"},"observation_digest":"sha256:ad9def09b9d6b818a68c5e078af5eb96ec2903725184802128a37fa202648353","observation_id":"44bd56e7-881c-4852-a918-4dc086b0c7ba","resolution":{"observed_at":"2026-06-27T04:05:04.871506Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T04:05:04.871506Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.16821","last_updated":"2026-06-23T11:59:57Z","snapshot_observed_at":"2026-08-17T17:47:53.597238Z","submitted_at":"2026-06-15T15:05:25Z","title":"How Much Can We Trust LLM Search Agents? Measuring Endorsement Vulnerability to Web Content Manipulation","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-06-27T04:05:04.871506Z"},"links":{"citing_paper":"/paper/2606.16821"},"observation_digest":"sha256:014705290b40d30abd9c5648fefdcab2b8203c1f525650473f06f6903c052a25","observation_id":"d45ee7d6-3f06-45ee-bf8d-d1a08dc1c892","resolution":{"observed_at":"2026-06-27T04:05:04.871506Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T04:05:04.871506Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.16821","last_updated":"2026-06-23T11:59:57Z","snapshot_observed_at":"2026-08-17T17:47:53.597238Z","submitted_at":"2026-06-15T15:05:25Z","title":"How Much Can We Trust LLM Search Agents? Measuring Endorsement Vulnerability to Web Content Manipulation","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-06-27T04:05:04.871506Z"},"links":{"citing_paper":"/paper/2606.16821"},"observation_digest":"sha256:506dccd1138e61b3981bc34ca7f400a7822a52f07c4e5d913c380a8860686ea5","observation_id":"01512968-e8ee-479f-9a53-b2fd053e0443","resolution":{"observed_at":"2026-06-27T04:05:04.871506Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T04:05:04.871506Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.16821","last_updated":"2026-06-23T11:59:57Z","snapshot_observed_at":"2026-08-17T17:47:53.597238Z","submitted_at":"2026-06-15T15:05:25Z","title":"How Much Can We Trust LLM Search Agents? Measuring Endorsement Vulnerability to Web Content Manipulation","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-06-27T04:05:04.871506Z"},"links":{"citing_paper":"/paper/2606.16821"},"observation_digest":"sha256:c6e4337a1f964193a80040d65c88f31c67a54f5d8987687548c3b141defb7d7d","observation_id":"8feee606-7b8a-4fcb-bf03-19438b8aac19","resolution":{"observed_at":"2026-06-27T04:05:04.871506Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T04:05:04.871506Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.16821","last_updated":"2026-06-23T11:59:57Z","snapshot_observed_at":"2026-08-17T17:47:53.597238Z","submitted_at":"2026-06-15T15:05:25Z","title":"How Much Can We Trust LLM Search Agents? Measuring Endorsement Vulnerability to Web Content Manipulation","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-06-27T04:05:04.871506Z"},"links":{"citing_paper":"/paper/2606.16821"},"observation_digest":"sha256:69995598cb56fe4c87f5e6a8883d2c394acf3159f09b2a857cbd6e568be45d8b","observation_id":"d802720f-de5b-4994-a463-add959b7281f","resolution":{"observed_at":"2026-06-27T04:05:04.871506Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T04:05:04.871506Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.16821","last_updated":"2026-06-23T11:59:57Z","snapshot_observed_at":"2026-08-17T17:47:53.597238Z","submitted_at":"2026-06-15T15:05:25Z","title":"How Much Can We Trust LLM Search Agents? Measuring Endorsement Vulnerability to Web Content Manipulation","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-06-27T04:05:04.871506Z"},"links":{"citing_paper":"/paper/2606.16821"},"observation_digest":"sha256:a73171f883cea1a87f313a34654f8ef817ced6d24735e495e44121f67986fc8d","observation_id":"84d333df-6a46-4fd3-a87c-991862d35e19","resolution":{"observed_at":"2026-06-27T04:05:04.871506Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T04:05:04.871506Z","title":"stealth_score","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.16821","last_updated":"2026-06-23T11:59:57Z","snapshot_observed_at":"2026-08-17T17:47:53.597238Z","submitted_at":"2026-06-15T15:05:25Z","title":"How Much Can We Trust LLM Search Agents? Measuring Endorsement Vulnerability to Web Content Manipulation","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-06-27T04:05:04.871506Z"},"links":{"citing_paper":"/paper/2606.16821"},"observation_digest":"sha256:cc52b7160be888d8a922642a6a44f604f378a2c968d7662ac768d695f40b45e5","observation_id":"9ebae84a-a063-49a6-8da5-d97b8fef3465","resolution":{"observed_at":"2026-06-27T04:05:04.871506Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2606.16821","last_updated":"2026-06-23T11:59:57Z","latest_version":2,"primary_category":"cs.CL","snapshot_observed_at":"2026-08-17T17:47:53.597238Z","submitted_at":"2026-06-15T15:05:25Z","title":"How Much Can We Trust LLM Search Agents? Measuring Endorsement Vulnerability to Web Content Manipulation"},"reference_resolution":{"displayed":14,"state_counts":{"malformed_identifier":1,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":13,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":14},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"thesis":"As of 17 August 2026, this Paper Citation Record lists 14 of 14 outbound references and 1 inbound Pith citation observation for arXiv:2606.16821."}