{"as_of":"2026-08-05T08:00:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:e6e4c2afe8f5eda99b71b078d7c42fc5188ae6226a6e342c1ef5f04cd7b6e167","coverage":[{"denominator":36,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":36,"source":"paper_references, paper_reference_links","source_observed_at":"2026-06-27T00:54:00.944706Z","state":"measured"},{"denominator":36,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":36,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-05T06:32:48.257954+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2606.20717/citation-record","integrity":"/paper/2606.20717/integrity","json":"/paper/2606.20717/citation-record.json","paper":"/paper/2606.20717"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T00:54:00.944706Z","title":"Advances in Neural Information Processing Systems , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.20717","last_updated":"2026-06-16T15:31:33Z","snapshot_observed_at":"2026-08-03T03:41:11.931921Z","submitted_at":"2026-06-16T15:31:33Z","title":"MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-06-27T00:54:00.944706Z"},"links":{"citing_paper":"/paper/2606.20717"},"observation_digest":"sha256:aab7b47662dc7b943fbc9952a56a1f38d69dbd197004fe616458465d9b905ef3","observation_id":"c05800bf-0ca0-40ad-86ff-2674f9dcb64b","resolution":{"observed_at":"2026-06-27T00:54:00.944706Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.13854","last_updated":"2024-04-16T15:13:18Z","snapshot_observed_at":"2026-07-06T15:58:31.756298Z","submitted_at":"2023-07-25T22:59:32Z","title":"WebArena: A Realistic Web Environment for Building Autonomous Agents","version":4},"cited_work":{"arxiv_id":"2307.13854","doi":"10.48550/arxiv.2307.13854","metadata_source":"pith","pith_arxiv_id":"2307.13854","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"WebArena: A Realistic Web Environment for Building Autonomous Agents","venue":"cs.AI","work_id":"7058ffd2-a339-4102-89eb-248eeb074652","year":2023},"citing_paper":{"arxiv_id":"2606.20717","last_updated":"2026-06-16T15:31:33Z","snapshot_observed_at":"2026-08-03T03:41:11.931921Z","submitted_at":"2026-06-16T15:31:33Z","title":"MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents","version":1},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-06-27T00:54:00.944706Z"},"links":{"cited_paper":"/paper/2307.13854","citing_paper":"/paper/2606.20717"},"observation_digest":"sha256:bc05c8dee830478dc606e7939c03082fc616fcb75432a6baa899b68fd6103c1f","observation_id":"15619ab8-10da-4431-865f-fc845fc10f43","resolution":{"observed_at":"2026-07-03T21:08:58.360197Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-05-20T18:52:18.85917+00:00","source":"crossref_status_cache"},{"observed_at":"2026-05-20T18:52:18.85917+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T00:54:00.944706Z","title":"Advances in Neural Information Processing Systems , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.20717","last_updated":"2026-06-16T15:31:33Z","snapshot_observed_at":"2026-08-03T03:41:11.931921Z","submitted_at":"2026-06-16T15:31:33Z","title":"MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-06-27T00:54:00.944706Z"},"links":{"citing_paper":"/paper/2606.20717"},"observation_digest":"sha256:6465fb5fcd195eebee782e853baf8b415722adc5314b0907b5306f5923458dc6","observation_id":"bd6e1152-2d86-4719-8be7-9372d10c64c2","resolution":{"observed_at":"2026-06-27T00:54:00.944706Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T00:54:00.944706Z","title":"Proceedings of the 62nd Annual Meeting of the Association for Computational Linguistics , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.20717","last_updated":"2026-06-16T15:31:33Z","snapshot_observed_at":"2026-08-03T03:41:11.931921Z","submitted_at":"2026-06-16T15:31:33Z","title":"MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-06-27T00:54:00.944706Z"},"links":{"citing_paper":"/paper/2606.20717"},"observation_digest":"sha256:50197112d5a043f9d9e1b100a9cb9d4fb8da3b0ac830c1d6404976760a7b91a3","observation_id":"9742ac77-59af-4dc7-b8a7-cd4df9283b94","resolution":{"observed_at":"2026-06-27T00:54:00.944706Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.01614","last_updated":"2024-03-12T23:14:33Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-01-03T08:33:09Z","title":"GPT-4V(ision) is a Generalist Web Agent, if Grounded","version":2},"cited_work":{"arxiv_id":"2401.01614","doi":null,"metadata_source":"pith","pith_arxiv_id":"2401.01614","snapshot_observed_at":"2026-07-08T16:15:06.143411Z","title":"GPT-4V(ision) is a Generalist Web Agent, if Grounded","venue":"cs.IR","work_id":"d3503fef-7f64-4dcc-8aca-1f16e997034f","year":2024},"citing_paper":{"arxiv_id":"2606.20717","last_updated":"2026-06-16T15:31:33Z","snapshot_observed_at":"2026-08-03T03:41:11.931921Z","submitted_at":"2026-06-16T15:31:33Z","title":"MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-06-27T00:54:00.944706Z"},"links":{"cited_paper":"/paper/2401.01614","citing_paper":"/paper/2606.20717"},"observation_digest":"sha256:560af12ff4ea563fa970b456ec9fa631b95730e5d8e8a2b406465ae1c8ba1e1b","observation_id":"8e04d2a2-d92f-4f90-845d-9ab7f54b6ae4","resolution":{"observed_at":"2026-07-03T21:08:58.352761Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.08914","last_updated":"2024-12-27T06:56:18Z","snapshot_observed_at":"2026-07-06T17:01:40.744034Z","submitted_at":"2023-12-14T13:20:57Z","title":"CogAgent: A Visual Language Model for GUI Agents","version":3},"cited_work":{"arxiv_id":"2312.08914","doi":"10.48550/arxiv.2312.08914","metadata_source":"arxiv_reference","pith_arxiv_id":"2312.08914","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Cogagent: A visual language model for gui agents","venue":"arXiv (Cornell University)","work_id":"11c41075-0a02-4367-b0f1-4a89b4f4d008","year":2024},"citing_paper":{"arxiv_id":"2606.20717","last_updated":"2026-06-16T15:31:33Z","snapshot_observed_at":"2026-08-03T03:41:11.931921Z","submitted_at":"2026-06-16T15:31:33Z","title":"MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-06-27T00:54:00.944706Z"},"links":{"cited_paper":"/paper/2312.08914","citing_paper":"/paper/2606.20717"},"observation_digest":"sha256:e06055cf66965cea71ed079df852dac18d480087e521d41d9759bc726cc9b04f","observation_id":"bd8d87a1-6bcc-4cfd-84ef-01068cbd907e","resolution":{"observed_at":"2026-07-03T21:08:58.345016Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T00:54:00.944706Z","title":"Proceedings of the 62nd Annual Meeting of the Association for Computational Linguistics , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.20717","last_updated":"2026-06-16T15:31:33Z","snapshot_observed_at":"2026-08-03T03:41:11.931921Z","submitted_at":"2026-06-16T15:31:33Z","title":"MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-06-27T00:54:00.944706Z"},"links":{"citing_paper":"/paper/2606.20717"},"observation_digest":"sha256:86475c87cee4a85aefb31c2da8fefffc8de2f6bcae39876b7e956946a3ee737f","observation_id":"0912cee5-28b7-4101-9176-18a00641694b","resolution":{"observed_at":"2026-06-27T00:54:00.944706Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.07972","last_updated":"2024-05-30T08:55:12Z","snapshot_observed_at":"2026-07-06T17:59:00.124173Z","submitted_at":"2024-04-11T17:56:05Z","title":"OSWorld: Benchmarking Multimodal Agents for Open-Ended Tasks in Real Computer Environments","version":2},"cited_work":{"arxiv_id":"2404.07972","doi":"10.48550/arxiv.2404.07972","metadata_source":"pith","pith_arxiv_id":"2404.07972","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"OSWorld: Benchmarking Multimodal Agents for Open-Ended Tasks in Real Computer Environments","venue":"cs.AI","work_id":"793d9419-734d-45fe-9f51-d4c5a3a57cf8","year":2024},"citing_paper":{"arxiv_id":"2606.20717","last_updated":"2026-06-16T15:31:33Z","snapshot_observed_at":"2026-08-03T03:41:11.931921Z","submitted_at":"2026-06-16T15:31:33Z","title":"MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents","version":1},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-06-27T00:54:00.944706Z"},"links":{"cited_paper":"/paper/2404.07972","citing_paper":"/paper/2606.20717"},"observation_digest":"sha256:313188fb21f5bd8954c1e870531442547b73b5b1145c3f43856a2c7fcc0cd12d","observation_id":"a61e9752-141a-4f5f-9513-355acb2bed54","resolution":{"observed_at":"2026-07-03T21:08:58.347763Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-05-19T22:22:21.817655+00:00","source":"crossref_status_cache"},{"observed_at":"2026-05-19T22:22:21.817655+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2302.12173","last_updated":"2023-05-05T14:26:17Z","snapshot_observed_at":"2026-07-06T14:55:08.682906Z","submitted_at":"2023-02-23T17:14:38Z","title":"Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection","version":2},"cited_work":{"arxiv_id":"2302.12173","doi":"10.1109/sp61157.2025.00250","metadata_source":"pith","pith_arxiv_id":"2302.12173","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection","venue":"cs.CR","work_id":"7a8cfce1-ada7-4a7a-8516-6f16b1bd077b","year":2023},"citing_paper":{"arxiv_id":"2606.20717","last_updated":"2026-06-16T15:31:33Z","snapshot_observed_at":"2026-08-03T03:41:11.931921Z","submitted_at":"2026-06-16T15:31:33Z","title":"MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-06-27T00:54:00.944706Z"},"links":{"cited_paper":"/paper/2302.12173","citing_paper":"/paper/2606.20717"},"observation_digest":"sha256:ffdfb94054550c70163765b73efb19ec803d4920a8458112a544d033d1ef5a4e","observation_id":"7259d5eb-e45f-44cf-a4b7-8badfad4192d","resolution":{"observed_at":"2026-07-03T21:08:58.350321Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T00:54:00.944706Z","title":"Findings of the Association for Computational Linguistics: ACL 2024 , pages =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.20717","last_updated":"2026-06-16T15:31:33Z","snapshot_observed_at":"2026-08-03T03:41:11.931921Z","submitted_at":"2026-06-16T15:31:33Z","title":"MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-06-27T00:54:00.944706Z"},"links":{"citing_paper":"/paper/2606.20717"},"observation_digest":"sha256:0296f4055639bbcfa02357d98f95cb983aeade97bb03cfe3c79897d52e35fbb0","observation_id":"4753da78-2510-44f2-88cb-8a45ff2cc28a","resolution":{"observed_at":"2026-06-27T00:54:00.944706Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T00:54:00.944706Z","title":"Advances in Neural Information Processing Systems , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.20717","last_updated":"2026-06-16T15:31:33Z","snapshot_observed_at":"2026-08-03T03:41:11.931921Z","submitted_at":"2026-06-16T15:31:33Z","title":"MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-06-27T00:54:00.944706Z"},"links":{"citing_paper":"/paper/2606.20717"},"observation_digest":"sha256:271f8d95bce65aaf0a9f2c745f37062dea8986c90f2c66afac4d44e2af554829","observation_id":"fdeaa65b-5c6c-4bb0-a9fa-e1c79ee347cd","resolution":{"observed_at":"2026-06-27T00:54:00.944706Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T00:54:00.944706Z","title":"The Thirteenth International Conference on Learning Representations , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.20717","last_updated":"2026-06-16T15:31:33Z","snapshot_observed_at":"2026-08-03T03:41:11.931921Z","submitted_at":"2026-06-16T15:31:33Z","title":"MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-06-27T00:54:00.944706Z"},"links":{"citing_paper":"/paper/2606.20717"},"observation_digest":"sha256:64cf95617251c9f292a9a327f3ce15afaa4e3d9c0e21fd4b65bc499c06bed4b1","observation_id":"7ee8e0e5-fcc0-4bf4-bc7d-3765ba6b01b6","resolution":{"observed_at":"2026-06-27T00:54:00.944706Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T00:54:00.944706Z","title":"Proceedings of the 63rd Annual Meeting of the Association for Computational Linguistics , pages =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.20717","last_updated":"2026-06-16T15:31:33Z","snapshot_observed_at":"2026-08-03T03:41:11.931921Z","submitted_at":"2026-06-16T15:31:33Z","title":"MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents","version":1},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-06-27T00:54:00.944706Z"},"links":{"citing_paper":"/paper/2606.20717"},"observation_digest":"sha256:f892dca3eae150fe65dc01dd3c4f1345829e3c399da80d2b2a02d801edc915d9","observation_id":"fdcf5d58-85de-494d-b78a-b9397458aa5e","resolution":{"observed_at":"2026-06-27T00:54:00.944706Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.17401","last_updated":"2025-05-31T18:34:01Z","snapshot_observed_at":"2026-08-01T16:54:45.609883Z","submitted_at":"2024-10-22T20:18:26Z","title":"AdvAgent: Controllable Blackbox Red-teaming on Web Agents","version":4},"cited_work":{"arxiv_id":"2410.17401","doi":null,"metadata_source":"pith","pith_arxiv_id":"2410.17401","snapshot_observed_at":"2026-07-10T12:27:04.225516Z","title":"Ad- vweb: Controllable black-box attacks on vlm-powered web agents","venue":"cs.CR","work_id":"2a343e0b-c7ca-43e4-a88b-e942d6efea85","year":2024},"citing_paper":{"arxiv_id":"2606.20717","last_updated":"2026-06-16T15:31:33Z","snapshot_observed_at":"2026-08-03T03:41:11.931921Z","submitted_at":"2026-06-16T15:31:33Z","title":"MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-06-27T00:54:00.944706Z"},"links":{"cited_paper":"/paper/2410.17401","citing_paper":"/paper/2606.20717"},"observation_digest":"sha256:a35d3b59167ea0db0629bfdd24d25cc4142463c6a0d0579500dd9735e0893f22","observation_id":"3d91a8ab-2976-40cd-80b9-2f318ec326d7","resolution":{"observed_at":"2026-07-03T21:08:58.366599Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T00:54:00.944706Z","title":"Proceedings of the 42nd International Conference on Machine Learning , series =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.20717","last_updated":"2026-06-16T15:31:33Z","snapshot_observed_at":"2026-08-03T03:41:11.931921Z","submitted_at":"2026-06-16T15:31:33Z","title":"MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-06-27T00:54:00.944706Z"},"links":{"citing_paper":"/paper/2606.20717"},"observation_digest":"sha256:d65759e6bc08f3bd64d4ddc7bda44d07136ceff7924744068e0fee19afaafddf","observation_id":"77148ead-2d02-4bb4-961d-6f883b2d2e5e","resolution":{"observed_at":"2026-06-27T00:54:00.944706Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.21499","last_updated":"2025-05-27T17:59:05Z","snapshot_observed_at":"2026-08-04T10:47:09.708079Z","submitted_at":"2025-05-27T17:59:05Z","title":"AdInject: Real-World Black-Box Attacks on Web Agents via Advertising Delivery","version":1},"cited_work":{"arxiv_id":"2505.21499","doi":"10.48550/arxiv.2505.21499","metadata_source":"pith","pith_arxiv_id":"2505.21499","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"AdInject: Real-World Black-Box Attacks on Web Agents via Advertising Delivery","venue":"cs.CR","work_id":"926d73c7-2e9a-49ed-9d71-de95de53b62e","year":2025},"citing_paper":{"arxiv_id":"2606.20717","last_updated":"2026-06-16T15:31:33Z","snapshot_observed_at":"2026-08-03T03:41:11.931921Z","submitted_at":"2026-06-16T15:31:33Z","title":"MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-06-27T00:54:00.944706Z"},"links":{"cited_paper":"/paper/2505.21499","citing_paper":"/paper/2606.20717"},"observation_digest":"sha256:bd26d50353c970175b24883c9e186f0b760fe486b51a4a3776f3f4b959647757","observation_id":"22822686-94ed-400f-9069-6dea1fcc8a72","resolution":{"observed_at":"2026-07-03T21:08:58.354165Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T00:54:00.944706Z","title":"Proceedings of the 2025 Conference on Empirical Methods in Natural Language Processing , pages =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.20717","last_updated":"2026-06-16T15:31:33Z","snapshot_observed_at":"2026-08-03T03:41:11.931921Z","submitted_at":"2026-06-16T15:31:33Z","title":"MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-06-27T00:54:00.944706Z"},"links":{"citing_paper":"/paper/2606.20717"},"observation_digest":"sha256:47027da88181fc53fb58df3a1eee1f2b749366563e0e7dd1a71879d7f6409ead","observation_id":"0f392720-eb57-49df-8c47-3f72275f4ec6","resolution":{"observed_at":"2026-06-27T00:54:00.944706Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2306.13213","last_updated":"2023-08-16T22:38:55Z","snapshot_observed_at":"2026-07-06T15:45:47.517122Z","submitted_at":"2023-06-22T22:13:03Z","title":"Visual Adversarial Examples Jailbreak Aligned Large Language Models","version":2},"cited_work":{"arxiv_id":"2306.13213","doi":"10.48550/arxiv.2306.13213","metadata_source":"arxiv_reference","pith_arxiv_id":"2306.13213","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Visual adversarial examples jailbreak aligned large language models","venue":"arXiv (Cornell University)","work_id":"6ecf4da5-e220-4e41-b036-2979b740e936","year":2024},"citing_paper":{"arxiv_id":"2606.20717","last_updated":"2026-06-16T15:31:33Z","snapshot_observed_at":"2026-08-03T03:41:11.931921Z","submitted_at":"2026-06-16T15:31:33Z","title":"MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-06-27T00:54:00.944706Z"},"links":{"cited_paper":"/paper/2306.13213","citing_paper":"/paper/2606.20717"},"observation_digest":"sha256:f123a1eaa304ad98d00725ad5293a86cb63db93578512903d338b34643b9563b","observation_id":"5e9a01e2-6a59-421f-91a3-95693b5f4c73","resolution":{"observed_at":"2026-07-03T21:08:58.336406Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.00236","last_updated":"2024-09-17T19:56:09Z","snapshot_observed_at":"2026-07-06T16:13:07.384791Z","submitted_at":"2023-09-01T03:53:40Z","title":"Image Hijacks: Adversarial Images can Control Generative Models at Runtime","version":4},"cited_work":{"arxiv_id":"2309.00236","doi":"10.48550/arxiv.2309.00236","metadata_source":"pith","pith_arxiv_id":"2309.00236","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Image hijacks: Adversarial images can control generative models at runtime","venue":"cs.LG","work_id":"a629c7a2-b381-4af9-97e3-fcc9a6e8de84","year":2023},"citing_paper":{"arxiv_id":"2606.20717","last_updated":"2026-06-16T15:31:33Z","snapshot_observed_at":"2026-08-03T03:41:11.931921Z","submitted_at":"2026-06-16T15:31:33Z","title":"MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-06-27T00:54:00.944706Z"},"links":{"cited_paper":"/paper/2309.00236","citing_paper":"/paper/2606.20717"},"observation_digest":"sha256:bccb725bff9654a4b4bd01bd65d9cab5ddf51bb6e275013a16a340e857f8c8c5","observation_id":"31f82be9-7a6e-4e6d-a307-80e3e09d17de","resolution":{"observed_at":"2026-07-03T21:08:58.363185Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T00:54:00.944706Z","title":"Proceedings of the AAAI Conference on Artificial Intelligence , volume =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.20717","last_updated":"2026-06-16T15:31:33Z","snapshot_observed_at":"2026-08-03T03:41:11.931921Z","submitted_at":"2026-06-16T15:31:33Z","title":"MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-06-27T00:54:00.944706Z"},"links":{"citing_paper":"/paper/2606.20717"},"observation_digest":"sha256:77f86b3da73f3dfb4280008887968603f868fc2269d3777ab506d250ae8f51bf","observation_id":"cc4cb0ff-e5ee-42c1-af3a-e5f22f086216","resolution":{"observed_at":"2026-06-27T00:54:00.944706Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2503.10809","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-03T21:08:58.341445Z","title":"Attacking multimodal os agents with malicious image patches","venue":null,"work_id":"db035924-05ad-4e83-a019-99eb35993c4f","year":2025},"citing_paper":{"arxiv_id":"2606.20717","last_updated":"2026-06-16T15:31:33Z","snapshot_observed_at":"2026-08-03T03:41:11.931921Z","submitted_at":"2026-06-16T15:31:33Z","title":"MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents","version":1},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-06-27T00:54:00.944706Z"},"links":{"citing_paper":"/paper/2606.20717"},"observation_digest":"sha256:d95824e565d6393915e60460e9472d3a2d5c2ee34c26146d0b62b5129ee81c4f","observation_id":"447832d8-6f0d-4d03-884d-fa8ec53c79be","resolution":{"observed_at":"2026-07-03T21:08:58.343182Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T00:54:00.944706Z","title":"Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition Workshops , pages =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.20717","last_updated":"2026-06-16T15:31:33Z","snapshot_observed_at":"2026-08-03T03:41:11.931921Z","submitted_at":"2026-06-16T15:31:33Z","title":"MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-06-27T00:54:00.944706Z"},"links":{"citing_paper":"/paper/2606.20717"},"observation_digest":"sha256:95362acf4e39b199cf3e2eae33ba814b8bd8943651b794e0a16d90872d8f050a","observation_id":"8da1998c-dfe8-48a5-b2cc-132777169e3b","resolution":{"observed_at":"2026-06-27T00:54:00.944706Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T00:54:00.944706Z","title":"International Conference on Learning Representations , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.20717","last_updated":"2026-06-16T15:31:33Z","snapshot_observed_at":"2026-08-03T03:41:11.931921Z","submitted_at":"2026-06-16T15:31:33Z","title":"MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-06-27T00:54:00.944706Z"},"links":{"citing_paper":"/paper/2606.20717"},"observation_digest":"sha256:a00d4bea57bfa079aff4298f14783d9d23c4ac80f33e25aca9f619a9ae2e73be","observation_id":"9cfa4b5f-ba06-42b9-b314-4c7e3ebeccf6","resolution":{"observed_at":"2026-06-27T00:54:00.944706Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.16494","last_updated":"2024-01-17T15:38:27Z","snapshot_observed_at":"2026-07-06T15:33:38.537499Z","submitted_at":"2023-05-25T21:51:23Z","title":"Diffusion-Based Adversarial Sample Generation for Improved Stealthiness and Controllability","version":3},"cited_work":{"arxiv_id":"2305.16494","doi":"10.48550/arxiv.2305.16494","metadata_source":"arxiv_reference","pith_arxiv_id":"2305.16494","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2305.16494 , year =","venue":"arXiv (Cornell University)","work_id":"12affd7b-56ae-432a-9a99-f7850a65063d","year":2023},"citing_paper":{"arxiv_id":"2606.20717","last_updated":"2026-06-16T15:31:33Z","snapshot_observed_at":"2026-08-03T03:41:11.931921Z","submitted_at":"2026-06-16T15:31:33Z","title":"MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-06-27T00:54:00.944706Z"},"links":{"cited_paper":"/paper/2305.16494","citing_paper":"/paper/2606.20717"},"observation_digest":"sha256:cd1c592c688f88a49a2cc826e2702316695c0d2091d6331dea9178b277bb34fa","observation_id":"ada38d0b-7599-42e6-863d-f79f98005ac1","resolution":{"observed_at":"2026-07-03T21:08:58.345786Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2305.08192","last_updated":"2023-11-30T14:40:54Z","snapshot_observed_at":"2026-08-02T07:12:10.521526Z","submitted_at":"2023-05-14T16:02:36Z","title":"Diffusion Models for Imperceptible and Transferable Adversarial Attack","version":2},"cited_work":{"arxiv_id":"2305.08192","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2305.08192","snapshot_observed_at":"2026-07-03T21:08:58.349740Z","title":"arXiv preprint arXiv:2305.08192 , year =","venue":null,"work_id":"0f5fd47d-150e-4569-8bc2-5cb45763c747","year":null},"citing_paper":{"arxiv_id":"2606.20717","last_updated":"2026-06-16T15:31:33Z","snapshot_observed_at":"2026-08-03T03:41:11.931921Z","submitted_at":"2026-06-16T15:31:33Z","title":"MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents","version":1},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-06-27T00:54:00.944706Z"},"links":{"cited_paper":"/paper/2305.08192","citing_paper":"/paper/2606.20717"},"observation_digest":"sha256:76de578bfb29a49eb691200a4ac905c2a46a775005606dddfa1237c8e3ed7d68","observation_id":"1a04d72f-5b2b-4b15-b4a5-4f99a5816d3d","resolution":{"observed_at":"2026-07-03T21:08:58.351446Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T00:54:00.944706Z","title":"European Conference on Computer Vision , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.20717","last_updated":"2026-06-16T15:31:33Z","snapshot_observed_at":"2026-08-03T03:41:11.931921Z","submitted_at":"2026-06-16T15:31:33Z","title":"MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents","version":1},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-06-27T00:54:00.944706Z"},"links":{"citing_paper":"/paper/2606.20717"},"observation_digest":"sha256:da8b1eee457ffca3830c4c3454504065f7a54d3e0f8a26b9a2afe709ceb95506","observation_id":"8f59fbb6-2a63-4732-8401-2e68b225d9a1","resolution":{"observed_at":"2026-06-27T00:54:00.944706Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T00:54:00.944706Z","title":"IEEE Transactions on Information Forensics and Security , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.20717","last_updated":"2026-06-16T15:31:33Z","snapshot_observed_at":"2026-08-03T03:41:11.931921Z","submitted_at":"2026-06-16T15:31:33Z","title":"MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents","version":1},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-06-27T00:54:00.944706Z"},"links":{"citing_paper":"/paper/2606.20717"},"observation_digest":"sha256:bf863aaed8528d2be0207c7a218b4a49b193cb59281260742c8091ca6a954c02","observation_id":"067c0d60-eef9-4f71-a2e2-e59ebd714bef","resolution":{"observed_at":"2026-06-27T00:54:00.944706Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T00:54:00.944706Z","title":"Proceedings of the IEEE/CVF conference on computer vision and pattern recognition , pages=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.20717","last_updated":"2026-06-16T15:31:33Z","snapshot_observed_at":"2026-08-03T03:41:11.931921Z","submitted_at":"2026-06-16T15:31:33Z","title":"MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents","version":1},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-06-27T00:54:00.944706Z"},"links":{"citing_paper":"/paper/2606.20717"},"observation_digest":"sha256:a347112074308fe90ffe76af6077321ca1cd36a2e704879287dfb6a6ce7cbe78","observation_id":"07c368af-bfcb-485c-97dc-18c4f3cf1e17","resolution":{"observed_at":"2026-06-27T00:54:00.944706Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.01743","last_updated":"2025-03-07T09:05:58Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-03-03T17:05:52Z","title":"Phi-4-Mini Technical Report: Compact yet Powerful Multimodal Language Models via Mixture-of-LoRAs","version":2},"cited_work":{"arxiv_id":"2503.01743","doi":"10.18653/v1/2023.wmt-1.23","metadata_source":"pith","pith_arxiv_id":"2503.01743","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Phi-4-Mini Technical Report: Compact yet Powerful Multimodal Language Models via Mixture-of-LoRAs","venue":"cs.CL","work_id":"83956045-536a-41ff-af02-b80e2a614eab","year":2025},"citing_paper":{"arxiv_id":"2606.20717","last_updated":"2026-06-16T15:31:33Z","snapshot_observed_at":"2026-08-03T03:41:11.931921Z","submitted_at":"2026-06-16T15:31:33Z","title":"MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents","version":1},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-06-27T00:54:00.944706Z"},"links":{"cited_paper":"/paper/2503.01743","citing_paper":"/paper/2606.20717"},"observation_digest":"sha256:cfc00e2a327f7e3b0aaacaafb59111e0c2c5bdf9295cd7918725fc15fb093730","observation_id":"9ecba9de-a7e6-4af4-a8a5-e9f6b8f97377","resolution":{"observed_at":"2026-07-03T21:08:58.348566Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T00:54:00.944706Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.20717","last_updated":"2026-06-16T15:31:33Z","snapshot_observed_at":"2026-08-03T03:41:11.931921Z","submitted_at":"2026-06-16T15:31:33Z","title":"MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents","version":1},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-06-27T00:54:00.944706Z"},"links":{"citing_paper":"/paper/2606.20717"},"observation_digest":"sha256:9893c499afb1bf9ef51badf880f00fe705b55cd441a4d748c1d0221d37395f29","observation_id":"69018586-f686-4909-a6c1-bb9cd4ac2a06","resolution":{"observed_at":"2026-06-27T00:54:00.944706Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.21783","last_updated":"2024-11-23T23:27:33Z","snapshot_observed_at":"2026-07-06T18:55:11.576666Z","submitted_at":"2024-07-31T17:54:27Z","title":"The Llama 3 Herd of Models","version":3},"cited_work":{"arxiv_id":"2407.21783","doi":"10.1016/s0749-0720(15","metadata_source":"pith","pith_arxiv_id":"2407.21783","snapshot_observed_at":"2026-07-11T11:50:26.030339Z","title":"The Llama 3 Herd of Models","venue":"cs.AI","work_id":"1549a635-88af-4ac1-acfe-51ae7bb53345","year":2024},"citing_paper":{"arxiv_id":"2606.20717","last_updated":"2026-06-16T15:31:33Z","snapshot_observed_at":"2026-08-03T03:41:11.931921Z","submitted_at":"2026-06-16T15:31:33Z","title":"MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents","version":1},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-06-27T00:54:00.944706Z"},"links":{"cited_paper":"/paper/2407.21783","citing_paper":"/paper/2606.20717"},"observation_digest":"sha256:f17279eaae6c2024db1d1e810e02063daadccf33197cd9f446eb48170e3e6368","observation_id":"2ebd049b-5ef9-47af-bc1c-56ff0907142f","resolution":{"observed_at":"2026-07-03T21:08:58.357196Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T00:54:00.944706Z","title":"2026 , note =","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2606.20717","last_updated":"2026-06-16T15:31:33Z","snapshot_observed_at":"2026-08-03T03:41:11.931921Z","submitted_at":"2026-06-16T15:31:33Z","title":"MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents","version":1},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-06-27T00:54:00.944706Z"},"links":{"citing_paper":"/paper/2606.20717"},"observation_digest":"sha256:e1a71a0d0ea40fd8517584b965b3ad0956a25a38a95eb3e51a05c18b262490e0","observation_id":"09a7e474-6af2-4dfe-89a8-1b55c302f9b4","resolution":{"observed_at":"2026-06-27T00:54:00.944706Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T00:54:00.944706Z","title":"2026 , note =","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2606.20717","last_updated":"2026-06-16T15:31:33Z","snapshot_observed_at":"2026-08-03T03:41:11.931921Z","submitted_at":"2026-06-16T15:31:33Z","title":"MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents","version":1},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-06-27T00:54:00.944706Z"},"links":{"citing_paper":"/paper/2606.20717"},"observation_digest":"sha256:ac49f175efcc0bd17e989fc89b61186bb49e8320d52b9913b62b69466c3d42e0","observation_id":"6442a056-ce3f-45eb-9f75-57ab09fae71e","resolution":{"observed_at":"2026-06-27T00:54:00.944706Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T00:54:00.944706Z","title":"Advances in neural information processing systems , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.20717","last_updated":"2026-06-16T15:31:33Z","snapshot_observed_at":"2026-08-03T03:41:11.931921Z","submitted_at":"2026-06-16T15:31:33Z","title":"MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents","version":1},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-06-27T00:54:00.944706Z"},"links":{"citing_paper":"/paper/2606.20717"},"observation_digest":"sha256:64ad15049f5a8e15fc08803a3be5598b6575f0b186fa0181e2344b97ef196fd7","observation_id":"3d12b281-4a71-4e05-bf61-71a05c51804b","resolution":{"observed_at":"2026-06-27T00:54:00.944706Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T00:54:00.944706Z","title":"Advances in Neural Information Processing Systems , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.20717","last_updated":"2026-06-16T15:31:33Z","snapshot_observed_at":"2026-08-03T03:41:11.931921Z","submitted_at":"2026-06-16T15:31:33Z","title":"MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents","version":1},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-06-27T00:54:00.944706Z"},"links":{"citing_paper":"/paper/2606.20717"},"observation_digest":"sha256:717ee1d11c24eaeb09ccc3af7438f27a03313c4ee3ef6268586c6c20cfdc88a1","observation_id":"92287e77-5bde-43ad-a5b4-4007f2e72b5d","resolution":{"observed_at":"2026-06-27T00:54:00.944706Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T00:54:00.944706Z","title":"Proceedings of the IEEE/CVF conference on computer vision and pattern recognition , pages=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.20717","last_updated":"2026-06-16T15:31:33Z","snapshot_observed_at":"2026-08-03T03:41:11.931921Z","submitted_at":"2026-06-16T15:31:33Z","title":"MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents","version":1},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-06-27T00:54:00.944706Z"},"links":{"citing_paper":"/paper/2606.20717"},"observation_digest":"sha256:4e78f621f99257216bc7f5dcb8aadafc3db28fbf086e49a979a7e2ab5323ed9e","observation_id":"b695790d-5a90-491f-b1fc-850ac4e673a9","resolution":{"observed_at":"2026-06-27T00:54:00.944706Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2606.20717","last_updated":"2026-06-16T15:31:33Z","latest_version":1,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-03T03:41:11.931921Z","submitted_at":"2026-06-16T15:31:33Z","title":"MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents"},"reference_resolution":{"displayed":36,"state_counts":{"malformed_identifier":0,"metadata_mismatch":12,"parse_uncertain":0,"unresolved":22,"verified_exact":2,"verified_fuzzy":0},"total_outbound_references":36},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"thesis":"As of 5 August 2026, this Paper Citation Record lists 36 of 36 outbound references and 0 inbound Pith citation observations for arXiv:2606.20717."}