{"as_of":"2026-08-04T10:39:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:14deaeb141d9c17834c6170bcb94c373a1b23e419f4866dac9eb6c97ab892196","coverage":[{"denominator":21,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":21,"source":"paper_references, paper_reference_links","source_observed_at":"2026-07-11T09:51:06.966438Z","state":"measured"},{"denominator":21,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":21,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-04T06:34:03.388597+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2607.05029/citation-record","integrity":"/paper/2607.05029/integrity","json":"/paper/2607.05029/citation-record.json","paper":"/paper/2607.05029"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T09:51:06.966438Z","title":"Generative agents: Interactive simulacra of human behavior,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.05029","last_updated":"2026-07-06T13:10:13Z","snapshot_observed_at":"2026-08-02T16:42:25.901342Z","submitted_at":"2026-07-06T13:10:13Z","title":"Your Agent's Memories Are Not Its Own: Forged Reasoning Attacks on LLM Agent Memory and Defenses","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-07-11T09:51:06.966438Z"},"links":{"citing_paper":"/paper/2607.05029"},"observation_digest":"sha256:fba13c443e38d8ec45c3b09e4b481f5095fb3f387168c6a5555ec9053caefeb2","observation_id":"91cfc238-87dc-4ac9-8926-a258286cff7d","resolution":{"observed_at":"2026-07-11T09:51:06.966438Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T09:51:06.966438Z","title":"Re- flexion: Language agents with verbal reinforcement learning,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.05029","last_updated":"2026-07-06T13:10:13Z","snapshot_observed_at":"2026-08-02T16:42:25.901342Z","submitted_at":"2026-07-06T13:10:13Z","title":"Your Agent's Memories Are Not Its Own: Forged Reasoning Attacks on LLM Agent Memory and Defenses","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-07-11T09:51:06.966438Z"},"links":{"citing_paper":"/paper/2607.05029"},"observation_digest":"sha256:8472ac654d380767ebd5caa8ddd76fd2609af4075d5dd569602f70bb91cc4466","observation_id":"978b9ed1-98e7-4efc-b529-3ac23bac8881","resolution":{"observed_at":"2026-07-11T09:51:06.966438Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T09:51:06.966438Z","title":"SpAIware: Uncovering a novel artificial intelligence attack vector through persistent memory in LLM applications and agents,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.05029","last_updated":"2026-07-06T13:10:13Z","snapshot_observed_at":"2026-08-02T16:42:25.901342Z","submitted_at":"2026-07-06T13:10:13Z","title":"Your Agent's Memories Are Not Its Own: Forged Reasoning Attacks on LLM Agent Memory and Defenses","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-07-11T09:51:06.966438Z"},"links":{"citing_paper":"/paper/2607.05029"},"observation_digest":"sha256:95c6cddf046170d44d6b8dbde0230f93a0206f8da4b6af3521debf289b36953e","observation_id":"e7c3b481-165b-4e1d-887e-8609913bf989","resolution":{"observed_at":"2026-07-11T09:51:06.966438Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T09:51:06.966438Z","title":"Security flaws within ChatGPT extensions allowed access to accounts on third-party websites and sensitive data,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.05029","last_updated":"2026-07-06T13:10:13Z","snapshot_observed_at":"2026-08-02T16:42:25.901342Z","submitted_at":"2026-07-06T13:10:13Z","title":"Your Agent's Memories Are Not Its Own: Forged Reasoning Attacks on LLM Agent Memory and Defenses","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-07-11T09:51:06.966438Z"},"links":{"citing_paper":"/paper/2607.05029"},"observation_digest":"sha256:9ba22a860fbedf2b8e77e5dbc6a0ea6abead1759796c90bc476a52ed1529348d","observation_id":"61fcd681-41d2-4973-8e1f-283b03af0be5","resolution":{"observed_at":"2026-07-11T09:51:06.966438Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T09:51:06.966438Z","title":"OW ASP top 10 for agentic applications 2026,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.05029","last_updated":"2026-07-06T13:10:13Z","snapshot_observed_at":"2026-08-02T16:42:25.901342Z","submitted_at":"2026-07-06T13:10:13Z","title":"Your Agent's Memories Are Not Its Own: Forged Reasoning Attacks on LLM Agent Memory and Defenses","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-07-11T09:51:06.966438Z"},"links":{"citing_paper":"/paper/2607.05029"},"observation_digest":"sha256:8e20bcec2a01125f2b630a24c6ecb7da4d059570e2dbd7f7c8ea6f00859aed77","observation_id":"ab3fc447-0843-4cdc-a91e-97dad6ecd0db","resolution":{"observed_at":"2026-07-11T09:51:06.966438Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T09:51:06.966438Z","title":"Agentpoison: Red- teaming llm agents via poisoning memory or knowledge bases,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.05029","last_updated":"2026-07-06T13:10:13Z","snapshot_observed_at":"2026-08-02T16:42:25.901342Z","submitted_at":"2026-07-06T13:10:13Z","title":"Your Agent's Memories Are Not Its Own: Forged Reasoning Attacks on LLM Agent Memory and Defenses","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-07-11T09:51:06.966438Z"},"links":{"citing_paper":"/paper/2607.05029"},"observation_digest":"sha256:7458c1d4b873ce80e66b32a06b3efae2bdbb9c11afe9ef8bff824e424f55f99c","observation_id":"00422ac1-517a-4ce0-8f3f-54fd2dcf8e9a","resolution":{"observed_at":"2026-07-11T09:51:06.966438Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T09:51:06.966438Z","title":"A practical memory injection attack against llm agents,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.05029","last_updated":"2026-07-06T13:10:13Z","snapshot_observed_at":"2026-08-02T16:42:25.901342Z","submitted_at":"2026-07-06T13:10:13Z","title":"Your Agent's Memories Are Not Its Own: Forged Reasoning Attacks on LLM Agent Memory and Defenses","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-07-11T09:51:06.966438Z"},"links":{"citing_paper":"/paper/2607.05029"},"observation_digest":"sha256:bfe6a6b257be8c66de3e3a83de73d68d31ad6f11d9eb0b833f2bfe2a2a04779a","observation_id":"9447ab1e-e973-485e-b1bc-4a675a47c704","resolution":{"observed_at":"2026-07-11T09:51:06.966438Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T09:51:06.966438Z","title":"Memorygraft: Persistent compromise of llm agents via poisoned experience retrieval,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.05029","last_updated":"2026-07-06T13:10:13Z","snapshot_observed_at":"2026-08-02T16:42:25.901342Z","submitted_at":"2026-07-06T13:10:13Z","title":"Your Agent's Memories Are Not Its Own: Forged Reasoning Attacks on LLM Agent Memory and Defenses","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-07-11T09:51:06.966438Z"},"links":{"citing_paper":"/paper/2607.05029"},"observation_digest":"sha256:f6c329e277ecd7edc2345f98f2f42cd8b61fe987ecc0822964b34e7b2ecc1fcd","observation_id":"3a7347ca-ed20-4d96-978f-82972809ce2f","resolution":{"observed_at":"2026-07-11T09:51:06.966438Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T09:51:06.966438Z","title":"Ehragent: Code empowers large language models for few-shot complex tabular reasoning on electronic health records,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.05029","last_updated":"2026-07-06T13:10:13Z","snapshot_observed_at":"2026-08-02T16:42:25.901342Z","submitted_at":"2026-07-06T13:10:13Z","title":"Your Agent's Memories Are Not Its Own: Forged Reasoning Attacks on LLM Agent Memory and Defenses","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-07-11T09:51:06.966438Z"},"links":{"citing_paper":"/paper/2607.05029"},"observation_digest":"sha256:89716364aaaea699b9dddc79675c06857b286d931aabf2a0c7b0ed7a66078e03","observation_id":"7c15a1f6-b71f-4063-ae28-0c436723fbce","resolution":{"observed_at":"2026-07-11T09:51:06.966438Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.19413","last_updated":"2025-04-28T01:46:35Z","snapshot_observed_at":"2026-08-02T07:32:11.339534Z","submitted_at":"2025-04-28T01:46:35Z","title":"Mem0: Building Production-Ready AI Agents with Scalable Long-Term Memory","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.19413","snapshot_observed_at":"2026-07-11T09:51:06.966438Z","title":"Mem0: Building production-ready ai agents with scalable long-term memory,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.05029","last_updated":"2026-07-06T13:10:13Z","snapshot_observed_at":"2026-08-02T16:42:25.901342Z","submitted_at":"2026-07-06T13:10:13Z","title":"Your Agent's Memories Are Not Its Own: Forged Reasoning Attacks on LLM Agent Memory and Defenses","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-07-11T09:51:06.966438Z"},"links":{"cited_paper":"/paper/2504.19413","citing_paper":"/paper/2607.05029"},"observation_digest":"sha256:1d571be08c5bf6c58151cfb99b9b9e84a6223ef63bf281ec0b53b7b7608ad4d6","observation_id":"579cf20d-8aa2-4247-8989-a05b08069882","resolution":{"observed_at":"2026-07-11T09:51:06.966438Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T09:51:06.966438Z","title":"React: Synergizing reasoning and acting in language models,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.05029","last_updated":"2026-07-06T13:10:13Z","snapshot_observed_at":"2026-08-02T16:42:25.901342Z","submitted_at":"2026-07-06T13:10:13Z","title":"Your Agent's Memories Are Not Its Own: Forged Reasoning Attacks on LLM Agent Memory and Defenses","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-07-11T09:51:06.966438Z"},"links":{"citing_paper":"/paper/2607.05029"},"observation_digest":"sha256:bada9ac1d5d1271da345e756172d1b3e7ae2e488f85a9e06f8fa0c33d417b0d3","observation_id":"693c0364-c115-4c01-9c74-4fd89472c719","resolution":{"observed_at":"2026-07-11T09:51:06.966438Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T09:51:06.966438Z","title":"Memorybank: En- hancing large language models with long-term memory,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.05029","last_updated":"2026-07-06T13:10:13Z","snapshot_observed_at":"2026-08-02T16:42:25.901342Z","submitted_at":"2026-07-06T13:10:13Z","title":"Your Agent's Memories Are Not Its Own: Forged Reasoning Attacks on LLM Agent Memory and Defenses","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-07-11T09:51:06.966438Z"},"links":{"citing_paper":"/paper/2607.05029"},"observation_digest":"sha256:26b4514e3f5c0f9ed0b90ba4f93f819db085e2c612e1d79fcd705ef3ba328ea6","observation_id":"403367ab-d94e-4bcd-86da-c38cdf085b7a","resolution":{"observed_at":"2026-07-11T09:51:06.966438Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T09:51:06.966438Z","title":"A-memguard: A proactive defense framework for llm-based agent memory,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.05029","last_updated":"2026-07-06T13:10:13Z","snapshot_observed_at":"2026-08-02T16:42:25.901342Z","submitted_at":"2026-07-06T13:10:13Z","title":"Your Agent's Memories Are Not Its Own: Forged Reasoning Attacks on LLM Agent Memory and Defenses","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-07-11T09:51:06.966438Z"},"links":{"citing_paper":"/paper/2607.05029"},"observation_digest":"sha256:cfff86521017a16f5f7dab1968776fddb49c44805ec0a2be968edad089a52391","observation_id":"fd461530-ab1c-48f2-8b07-2d10baf5d1ef","resolution":{"observed_at":"2026-07-11T09:51:06.966438Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T09:51:06.966438Z","title":"Mimic-iii, a freely accessible critical care database,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2607.05029","last_updated":"2026-07-06T13:10:13Z","snapshot_observed_at":"2026-08-02T16:42:25.901342Z","submitted_at":"2026-07-06T13:10:13Z","title":"Your Agent's Memories Are Not Its Own: Forged Reasoning Attacks on LLM Agent Memory and Defenses","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-07-11T09:51:06.966438Z"},"links":{"citing_paper":"/paper/2607.05029"},"observation_digest":"sha256:a03338da967cac2c494b64672cba6ea40e0565ccc26834274424c6159304c275","observation_id":"9d0ecd84-d499-48a5-a38e-48889f1dee6a","resolution":{"observed_at":"2026-07-11T09:51:06.966438Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T09:51:06.966438Z","title":"Did aristotle use a laptop? a question answering benchmark with implicit reasoning strategies,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.05029","last_updated":"2026-07-06T13:10:13Z","snapshot_observed_at":"2026-08-02T16:42:25.901342Z","submitted_at":"2026-07-06T13:10:13Z","title":"Your Agent's Memories Are Not Its Own: Forged Reasoning Attacks on LLM Agent Memory and Defenses","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-07-11T09:51:06.966438Z"},"links":{"citing_paper":"/paper/2607.05029"},"observation_digest":"sha256:21c7e29c8c23cb641d5b3959969318dcd1de20621cb16ea2da59cf26eead5b7c","observation_id":"746ecd30-6693-47a9-a772-eefe288a0082","resolution":{"observed_at":"2026-07-11T09:51:06.966438Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.03610","last_updated":"2024-02-06T00:53:27Z","snapshot_observed_at":"2026-07-06T17:25:58.305593Z","submitted_at":"2024-02-06T00:53:27Z","title":"RAP: Retrieval-Augmented Planning with Contextual Memory for Multimodal LLM Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.03610","snapshot_observed_at":"2026-07-11T09:51:06.966438Z","title":"Rap: Retrieval-augmented planning with contextual memory for multimodal llm agents,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.05029","last_updated":"2026-07-06T13:10:13Z","snapshot_observed_at":"2026-08-02T16:42:25.901342Z","submitted_at":"2026-07-06T13:10:13Z","title":"Your Agent's Memories Are Not Its Own: Forged Reasoning Attacks on LLM Agent Memory and Defenses","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-07-11T09:51:06.966438Z"},"links":{"cited_paper":"/paper/2402.03610","citing_paper":"/paper/2607.05029"},"observation_digest":"sha256:563c5c719aff1319bf026c4d6ac968ec4d2d25a57f8434e488ad15d5ad645a91","observation_id":"5dd05cbe-0078-4595-8720-82fa63890419","resolution":{"observed_at":"2026-07-11T09:51:06.966438Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T09:51:06.966438Z","title":"Poisonedrag: Knowledge corruption attacks to retrieval-augmented generation of large language models,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.05029","last_updated":"2026-07-06T13:10:13Z","snapshot_observed_at":"2026-08-02T16:42:25.901342Z","submitted_at":"2026-07-06T13:10:13Z","title":"Your Agent's Memories Are Not Its Own: Forged Reasoning Attacks on LLM Agent Memory and Defenses","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-07-11T09:51:06.966438Z"},"links":{"citing_paper":"/paper/2607.05029"},"observation_digest":"sha256:34a29065f8788920d6903e44a0fae572a096f717962eeb5f95abbbfd8c19f720","observation_id":"bc75e3e7-4b7b-4373-a36c-1caf3988d047","resolution":{"observed_at":"2026-07-11T09:51:06.966438Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.19156","last_updated":"2023-10-29T21:13:31Z","snapshot_observed_at":"2026-07-06T16:40:12.014275Z","submitted_at":"2023-10-29T21:13:31Z","title":"Poisoning Retrieval Corpora by Injecting Adversarial Passages","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.19156","snapshot_observed_at":"2026-07-11T09:51:06.966438Z","title":"Poisoning re- trieval corpora by injecting adversarial passages,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.05029","last_updated":"2026-07-06T13:10:13Z","snapshot_observed_at":"2026-08-02T16:42:25.901342Z","submitted_at":"2026-07-06T13:10:13Z","title":"Your Agent's Memories Are Not Its Own: Forged Reasoning Attacks on LLM Agent Memory and Defenses","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-07-11T09:51:06.966438Z"},"links":{"cited_paper":"/paper/2310.19156","citing_paper":"/paper/2607.05029"},"observation_digest":"sha256:678abdbda1273d8e056244aba43b49afdefc075716ee5b3890fa4ba73a884982","observation_id":"32d7a8f9-a12f-459c-b003-fd50fa74ecc8","resolution":{"observed_at":"2026-07-11T09:51:06.966438Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T09:51:06.966438Z","title":"Watch out for your agents! investigating backdoor threats to llm-based agents,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.05029","last_updated":"2026-07-06T13:10:13Z","snapshot_observed_at":"2026-08-02T16:42:25.901342Z","submitted_at":"2026-07-06T13:10:13Z","title":"Your Agent's Memories Are Not Its Own: Forged Reasoning Attacks on LLM Agent Memory and Defenses","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-07-11T09:51:06.966438Z"},"links":{"citing_paper":"/paper/2607.05029"},"observation_digest":"sha256:9d30111b775f4e8345939062f9c5ab26a66af29e730776bd45c2ccea4e8b7e78","observation_id":"57c938ad-2ce5-4455-b8c4-3631cd12fe2a","resolution":{"observed_at":"2026-07-11T09:51:06.966438Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T09:51:06.966438Z","title":"Provenance-aware storage systems","venue":null,"work_id":null,"year":2006},"citing_paper":{"arxiv_id":"2607.05029","last_updated":"2026-07-06T13:10:13Z","snapshot_observed_at":"2026-08-02T16:42:25.901342Z","submitted_at":"2026-07-06T13:10:13Z","title":"Your Agent's Memories Are Not Its Own: Forged Reasoning Attacks on LLM Agent Memory and Defenses","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-07-11T09:51:06.966438Z"},"links":{"citing_paper":"/paper/2607.05029"},"observation_digest":"sha256:e34d956ff3ef148256328d1168e7253e5340916ded695225588db3d50fff3b00","observation_id":"cf4e6aa2-7eac-4fe7-8961-58e20f80573f","resolution":{"observed_at":"2026-07-11T09:51:06.966438Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T09:51:06.966438Z","title":"Taintdroid: an information- flow tracking system for realtime privacy monitoring on smartphones,","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2607.05029","last_updated":"2026-07-06T13:10:13Z","snapshot_observed_at":"2026-08-02T16:42:25.901342Z","submitted_at":"2026-07-06T13:10:13Z","title":"Your Agent's Memories Are Not Its Own: Forged Reasoning Attacks on LLM Agent Memory and Defenses","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-07-11T09:51:06.966438Z"},"links":{"citing_paper":"/paper/2607.05029"},"observation_digest":"sha256:b4c8480f99d8c793fb6424b6e238fed87ccee15fabd45b9577fea80152ef94e0","observation_id":"d002585a-1be2-4912-a371-0b4673923d70","resolution":{"observed_at":"2026-07-11T09:51:06.966438Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2607.05029","last_updated":"2026-07-06T13:10:13Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-02T16:42:25.901342Z","submitted_at":"2026-07-06T13:10:13Z","title":"Your Agent's Memories Are Not Its Own: Forged Reasoning Attacks on LLM Agent Memory and Defenses"},"reference_resolution":{"displayed":21,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":21,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":21},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"thesis":"As of 4 August 2026, this Paper Citation Record lists 21 of 21 outbound references and 0 inbound Pith citation observations for arXiv:2607.05029."}